last executing test programs: 3.108482937s ago: executing program 2 (id=5179): ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000440)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 3.055039478s ago: executing program 3 (id=5181): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) 2.876975796s ago: executing program 2 (id=5183): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x80000000, 0x4) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0/file0\x00'}, 0x6e) 2.762909638s ago: executing program 4 (id=5184): io_setup(0x20fb, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.726098035s ago: executing program 3 (id=5186): r0 = syz_ublk_setup_io_uring(0x11e, &(0x7f00000003c0)={0x0, 0xcae, 0x2, 0x103, 0x32}, &(0x7f0000000380), &(0x7f0000000480), &(0x7f0000000340)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x7ca4, &(0x7f0000000500)={0x0, 0x1000001c, 0x27, 0x2, 0x24f, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000000)) 2.651208594s ago: executing program 2 (id=5187): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) 2.536164604s ago: executing program 1 (id=5189): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2501000008040007800c0002000b000000000000000c0006"], 0x30}}, 0x20000000) 2.428713169s ago: executing program 1 (id=5190): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0xfc, 0xfd, 0x5ae9}, {0x28, 0x7f, 0x4, 0x5753a39e}, {0x6, 0x0, 0x7, 0x3}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 2.409963712s ago: executing program 2 (id=5191): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x80086c42, 0x0) 2.236475336s ago: executing program 3 (id=5192): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)='\x00', 0x1}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}}}}], 0x28}}], 0x2, 0x4404c880) 2.168829616s ago: executing program 2 (id=5193): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x94, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0xd5, "", [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x80}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000180)={0x0, 0x9, 0x28, {0x28, 0x4, "82631b612b8526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a521382aa92b2a885"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.05889551s ago: executing program 3 (id=5194): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) 1.882979241s ago: executing program 1 (id=5196): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x2818082, &(0x7f0000000500)={[{@utf8}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@uni_xlate}, {@shortname_lower}, {@utf8}, {@uni_xlate}, {@uni_xlate}, {@utf8}]}, 0x7f, 0x2bd, &(0x7f0000000240)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x169000, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, 0x0) 1.727566592s ago: executing program 3 (id=5197): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x458, 0x5017, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x77, "", [{{0x9, 0x4, 0x0, 0x8, 0xd, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x1, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)={0x20, 0x12, 0xc8, {0xc8, 0xf, "f70ba3209808293616f25481030000000000cb6f7f6c40fdfd054f805fcb5f1d63800dabd6eb3bc763ee3873f4cfd732104e6c31160b569f67d60a852b10ff7b1e6bdc443870ed207fc1301dcfdced0ce549d31bec2381b6e0c32cc75169cffa75695cc36affb361dbb63aa0ff9275ca730a84b1a3dbaf4a082e780b07a9948c6bc9ed3ad01df190a1f6f191e10516189ca614ba350d7a5ff3018a632df1ceab7528a660047f7ddd03355e015bcc28d34170572958a366132c263cc25b4ae14ea0ed93178459"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.609627304s ago: executing program 1 (id=5198): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1.405226316s ago: executing program 1 (id=5200): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, &(0x7f0000000100), &(0x7f0000000440), 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) 1.264254792s ago: executing program 1 (id=5202): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="400c0100000021"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)={0x40, 0x1, 0x3, "470dcb"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.175834733s ago: executing program 4 (id=5203): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.0210356s ago: executing program 4 (id=5205): r0 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) listen(r0, 0x4) 968.2315ms ago: executing program 4 (id=5206): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0xfc, 0xfd, 0x5ae9}, {0x28, 0x7f, 0x4, 0x5753a39e}, {0x6, 0x0, 0x7, 0x3}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 680.714445ms ago: executing program 4 (id=5209): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x1, 0x0, 0x1}, 0x2}, 0x18) 598.763394ms ago: executing program 0 (id=5211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 528.856511ms ago: executing program 4 (id=5212): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121100, 0x8) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) 526.311077ms ago: executing program 0 (id=5213): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) 434.544931ms ago: executing program 0 (id=5214): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000600000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x14) 374.864018ms ago: executing program 2 (id=5215): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402312073f00000000000109022400010000a00009040000020300020009210000000122370009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='@\nE'], 0x0, 0x0, 0x0, 0x0}, 0x0) 319.391438ms ago: executing program 0 (id=5216): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x5, 0x3}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x3482, 0x0) ioctl$TCSETSF(r0, 0x5453, 0x0) 229.395009ms ago: executing program 0 (id=5217): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180)) 97.450413ms ago: executing program 0 (id=5218): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f00000006c0)=ANY=[], 0x85, 0x676, &(0x7f0000000800)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0x40005) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2010000, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="6728535d31ed5e2db1675fe6664ab27ed40088b6d0bfd8ba31e06e338e4ccea6e9485cd7a6963c7ff02f96", @ANYRES16=0x0], 0xfb, 0x1515, &(0x7f00000002c0)="$eJzs3Au4TVXXOPAx5pyL4+Syk9zXmGOxk8skSUJJckmSJCT3hCRJkiRxyC0JScj1JLmH3NNJx/1+yT3p5JUkSUhIMv/PKf1979X7vV/f632+M37Psx5zWGvMNdYe9t5zreexv+06rHqjGlXqMzP8K/TvA/ztjyQASACAgQCQAwACACibs2zO9P1ZHsKkf+kk4n9JgxlXuwJxNUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr37WyZdzt3/r8X8vz/z+c+p8ky/d/hoB/b4f0//8a/d86WvqfsUn/Mzbpf8Ym/c/IgqtdgLjK5P2fsUn/hcjQ/vBnyhvOXe1n2v8hW+OlV7+GK29CCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIcS/wTl/mQGA38dXuy4hhBBCCCGEEEL8cfz7V7sCIYQQQgghhBBC/O9DUKDBQACZIDMkQBZIhGsgK2SD7JADYnAt5ITrIBdcD7khD+SFfJAfCkBBCIHAAkMEhaAwxOEGKAI3QlEoBsWhBDgoCaXgJigNN0MZuAXKwq1QDm6D8lDh13OmuxMqw11QBe6GqlANqkMNuAdqwr1QC+6D2nA/1IEHoC48CPXgIagPDaAhPAyN4BFoDE2gKTSD5tACWl4hPznH38p/EXrAS9ATekES9IY+8DL0hX7QHwbAQHgFBsGrMBhegyEwFIbB6zAc3oAR8CaMhFEwGt6CMTAWxsF4mAATIRnehknwDkyGdx/JBlNhGkyHGTATZsF7MBvmwFx4H+bBfFgAyVkWwWJYAh/AUvgQUuAjWAYfQyoshxWwElbBalgDa2EdrIcNsBE2wWbYAlthG3wC22EH7IRdsBv2wF74FPbBZ7AfPoc0/OK/mX/2z/OhGwICKlRo0GAmzIQJmICJmIhZMStmx+wYwxjmxJyYC3NhbsyNeTEvJmF+LIgFkZCQkbEQFsI4xrEIFsGiWBSLY3F06LAUlsLSeDOWwTJYFstiOSyH5bECVsDb8XashJWwMlbGKlgFq2JVrI7V8R68B+/FWlgLa2NtrIN1sC7WxXpYD+tjfWyIDbERNsLG2BibYlNsjs2xJbbEVtgKW2NrbIttsR22w/bYHjtgB+yIHbETdsLO2Bm7YBfsil2xG76AL+CL+CK+hC9hL6yqemMf7IN9sS/2xwE4AF/BQfgqvoqv4RAcisPwdXwd38AReAZH4igcjaOxkhqL43A8spqIyZiMmWESTsbJOAWn4lScjjNwJs7CWTgb5+AcfB/n4XycjwtxIS7GJbgEl+KHmIIpuAzPYiouxxW4ElfhalyFa3EdrsUNuBE34GbcjFtxK36Cn+AO3IG7cBfuwT34KX6Kn+FnOATTMA0P4AE8iAfxEB7Cw3gYj+ARPIpH8Rgew+N4HE/gSTyFJ/E0nsYzeBbPAcB5PI8X8AJexIvpb36VziijMqlMKkElqESVqLKqrCq7yq5iKqZyqpwql8qlcqvcKq/Kq/Kr/KqgKqhIkWIVqUKqkIqruCqiiqiiqqgqroorp5wqpUqp0qq0KqPKqLLqVlVO3abKqwqqjbtd3a4qqbausrpLVVFVVFVVTVVXNVQNVVPVVLVULVVb1VZ1VB1VVz2o6qne2B8bqPTONFJDsbEahk1VM9VctVBv4KOqlRqBrVUb1VY9rkbhSGyvWrkO6inVUY3DTuoZNR6fVV3UROyqnlfd1Auqu3pR9VCtXU/VS03B3qqPmo59VT/VXw1Qs7GaSu9YdfWaejHzUDVMva4W4xtqhHpTjVSj1Gj1lhqjxqpxaryaoCaqZPW2mqTeUZPVu2qKmqqmqelqhpqpZqn31Gw1R81V76t5ar5aoBaqRWqxWqI+UEvVhypFfaSWqY9VqlquVqiVapVardaotWqdWq82qI1qk9qstqitapv6RG1XO9ROtUvtVnvUXvWp2qc+U/vV5ypNfaEOqD+pg+pLdUh9pQ6rr9UR9Y06qr5Vx9R36rj6Xp1QJ9Up9YM6rX5UZ9RZdU79pM6rn9UF9Yu6qLwCjVpprY0OdCadWSfoLDpRX6Oz6mw6u86hY/panVNfp3Pp63VunUfnNfl0fl1AF9ShJm0160gX0oV1XN+gi+gbdVFdTBfXJbTTJXUpfZMurW/WZfQtuqy+VZfTt+nyuoKu6EHfoSvpO3VlfZeuou/WVXU1XV3X0PfomvpeXUvfp2vr+3Ud/YCuqx/U9fRDur5uoBvqh3Uj/YhurJvoprqZbq5b6Jb6Ud1KP6Zb6za6rX5ct9NP6Pb6Sd1BP6U76qd1J/2M7qyf1V30c7qrfl530y/o7voXfVF73VP30km6t+6jX9Z9dT/dXw/QA/UrepB+VQ/Wr+kheqgepl/Xw/UbeoR+U4/Uo/Ro/ZYeo8fqcXq8nqAn6mT9tp6k39GT9bt6ip6qp+npeoaeqftfmmnuP5H/zt/IH/zr2bfqbfoTvV3v0Dv1Lr1b79F79V69T+/T+/V+nabT9AF9QB/UB/UhfUgf1of1EX1EH9VH9TF9TB/Xx/UJfVL/pH/Qp/WP+ow+q8/qn/R5fV5fuPQagEGjjDbGBCaTyWwSTBaTaK4xWU02k93kMDFzrclprjO5zPUmt8lj8pp8Jr8pYAqa0JCxhk1kCpnCJm5uMEXMjaaoKWaKmxLGmZKmlLnpf5x/pfpampamlWllWpvWpq1pa9qZdqa9aW86mA6mo+loOplOprPpbLqYLqar6Wq6mW6mu+luepgepqfpaZJMkuljXjZ9TT/T3wwwA80rZpAZZAabwWaIGWKGmWFmuBluRpgRZqQZaUab0WaMGWPGmXFmgplgkn0OM8lMMpPNZDPFTDHTBuYwM8wMM8vMMrPNbDPXzDXzzDyzwCwwi8wis8QsMUvNUpNiUswys8ykmuVmuVlpVprVZrVZa9aa9Wa92Wg2ms1ms0k128w2s91sNzvNTrPb7DZ7zV6zz+wz+81+k2bSzAFzwBw0B80hc8gcNofNEXPEHDVHzTFzzBw3x80Jc8KcMqfMaZO+4jpjzplz5rw5by6YC+aiuZi+7AtUoAITmCBTkClICBKCxCAxyBpkDbIH2YNYEAtyBjmDXMH1Qe4gT5A3yBfkDwoEBYMwoMAGHERBoaBwUBNuCIoENwZFg2JB8aBE4IKSQangpqB0cHNQJrglKBvcGpQLbgvKBxWCisHtwR1BpeDOoHJwV1AluDuoGlQLqgc1gnuCmsG9Qa3gvqB2cH9QJ3ggqBs8GNQLHgrqBw2ChsHDQaPgkaBx0CRoGjQLmgctgpZ/6Pzen8nzmOsZ9gqTwt5hn/DlsG/YL+wfDggHhq+Eg8JXw8Hha+GQcGg4LHw9HB6+EY4I3wxHhqPC0eFb4ZhwbDguHB9OCCeGyeHb4aTwnXBy+G44JZwaTgumhzPCmeGs8L1wdjgnnBu+H84L54cLwoXhonBxiL8tiSEl/ChcFn4cpobLwxXhynBVuDpcE64N14Xrww3hxnBTuLnsoN8ODbeHO8Kd4a5wd7gn3Bt+Gu4LPwv3h5+HaeEX4YHwT+HB8MvwUPhVeDj8OjwSfhMeDb8Nj4XfhcfD78MT4cnwVPhDeDr8MTwTng3PhT+F58OfwwvhL+HF0Kcv7tO/3smQoUyUiRIogRIpkbJSVspO2SlGMcpJOSkX5aLclJvyUl7KT/mpIBWkdExMhagQxSlORagIFaWiVJyKkyNHpagUlabSVIbKUFkqS+WoHJWn8lSRKtIddAfdSXfSXXQX3U13UzWqRjWoBtWkmlSLalFtqk11qA7VpbpUj+pRfapPDakhNaJG1JgaU1NqSs2pObWkltSKWlFrak1tqS21o3bUntpTB+pAHakjdaJO1Jk6UxfqQl2pK3WjbtSdulMP6kE9qSclURL1oT7Ul/pSf+pPA2kgDaJBNJgG0xAaQsNoGA2n4TSCRtBIGkWj6S0aQ2NpHI2nCTSRkimZJtEkmkyTaQpNoWk0jWbQDJpFs2g2zaa5NJfm0TxaQAtoES2iJbSEltJSSqEUWkbLKJVSaQWtoFW0itbQGlpH62gDbaBNtIm20BbaRttoO22nnbSTdtNu2kt7aR/to/20n9IojQ7QATpIB+kQHaLDdJiO0BE6SkfpGB2j43ScTtAJOkWn6DSdpjN0hs7ROTpPP9MF+oUukqcEm8Um2mtsVpvNZrc57F/GeW0+m98WsAVtaHPbPH8Wk7W2qC1mi9sS1tmStpS96a/i8raCrWhvt3fYSvZOW9mWt1ngv8Y17b22lr3P1rb32xr2HlvTBvB7XMc+YOvaR2w928TWt81sQ9vCNrKP2Ma2iW1qm9nmtoVtZ5+w7e2TtoN9yna0T/9VvNR+aNfZ9XaD3Wj32c/sOfuTPWq/teftz7an7WUH2lfsIPuqHWxfs0Ps0D+PAexo+5YdY8facXa8nWAn/lU8zU63M+xMO8u+Z2fbOX8VL7Ef2Hk2xS6wC+0iu/jXOL2mFPuRXWY/tql2uV1hV9pVdrVdY9f+/1pX2s12i91q99pP7Xa7w+60u+xuu+fXOP069tvPbZr9wh6x39iD9kt7yB6zh+3Xv8bp13fMfmeP2+/tCXvSnrI/2NP2R3sm4eyv159+7T/YX+xF6y0wsmLNhgPOxJk5gbNwIl/DWTkbZ+ccHONrOSdfx7n4es7NeTgv5+P8XIALcsjElpkjLsSFOc43cBG+kYtyMS7OJdhxSS7FN3FpvpnL8C1clm/lcnwbl+cKXJFv5zu4Et/JlfkursJ3c1WuxtW5Bt/DNflersX3cW2+n+vwA1yXH+R6/BDX5wbckB/mRvwIN+Ym3JSbcXNuwS35UW7Fj3FrbsNt+XFux09we36SO/BT3JGf5k78DHfmZ7kLP8dd+Xnuxi9wd36Re/BL3JN7cRL35j78MvflftyfB/BAfoUH8as8mF/jITyUh/HrPJzf4BH8Jo/kUTya3+IxPJbH8XiewBM5md/mSfwOT+Z3eQpP5Wk8nWfwTJ7F7/FsnsNz+X2ex/N5AS/kRbyYl/AHvJQ/5BT+iJfxx5zKy3kFr+RVvJrX8Fpex+t5A2/kTbyZt/BW3saf8HbewTt5F+/mPbyXP+V9/Bnv5885jb/gA/wnPshf8iH+ig/z13yEv+Ek/paP8Xd8nL/nE3yST/EPfJp/5DN8ls/xT3yef+YL/AtfZM8QYaQiHZkoiDJFmaOEKEuUGF0TZY2yRdmjHFEsujbKGV0X5Yquj3JHeaK8Ub4of1QgKhiFEUU24iiKCkWFo3h0Q1QkujEqGhWLikclIheVjEpFN0Wlo5ujMtEtUdno1qhcdFtUPqoQVYxuj+6IKkV3RpWju6Iq0d1R1ahaVD2qEd0T1YzujWpF90W1o/ujMtEDUd3owahe9FBUP2oQNYwejhpFj0SNoyZR06hZ1DxqEbWMHo1aRY9FraM2Udvo8ahd9ETUPnoy6hA9FXWMnr68v1jw27fpX+xPinpH+tITsvv0ovji+JL4B/Gl8Q/jKfGP4sviH8dT48vjK+Ir46viq+Nr4mvj6+Lr4xviG+Ob4pvjW+Jb497XyAwO02+EwbjAZXKZXYLL4hLdNS6ry+ayuxwu5q51Od11Lpe73uV2eVxel8/ldwVcDhc6ctaxi1whV9jF3Q2uiLvRFXXFXHFXwjlX0pVyLVxL19K1co+51q6Na+sed4+7J9wT7smES4W7Tu4Z19k967q459xz7nnXzb3gursXXQ/3kuvperkkl+T6uD6ur+vr+rv+bqAb6Aa5QW5wJnBD3BA3zA1zw91wN8KNcCPdSDfajXZj3Bg3zo1zE9wEl+yS3SQ3yU12k90UN8VNc9PcDDfDzXKz3Gw32811c908N88tcAvcIrfILXFL3FK31KW4FLfMLXOpLtWtcCvcKrfKrXFr3Dq3zm1wG9wmt8ltcVvcNrfNbXfb3U630+12u91et9ftc/vcfrffpbk0d8AdcAfdQXfIfeUOu6/dEfeNO+q+dcfcd+64+96dcCfdKef1afejO+POunPuJ3fe/ewuuF/cReddcuzt2KTYO7HJsXdjU2JTY9Ni02MzYjNjs2LvxWbH5sTmxt6PzYvNjy2ILYwtii2OLYl9EFsa+zCWEvsotiz2cSw1tjy2IrYytiq2OuZ9ge2RL+QL+7i/wRfxN/qivpgv7kt450v6Uv4mX9rf7Mv4W3xZf6sv52/z5X0FX9E38U19M9/ct/At/aO+lX/Mt/ZtfFv/uG/nn/Dt/ZO+g3/Kd/RP+07+Gd/ZP+u7+Od8V//8/Etd9j38S76n7+WTfG/fx7/s+/p+vr8f4Af6V/wg/6of7F/zQ/xQP8y/7of7N/wI/6Yf6Uf50f4tP8aP9eP8eD/BT/TJ/m0/yb/jJ/t3/RQ/1U/z0/0MP9PP8u/52X6On+vf9/P8fL/AL/SL/GK/xH/gl/oPfYr/yC/zH/tUv9yv8Cv9Kr/ar/Fr/Tq/3m/wG/0mv9lv8Vv9Nv+J3+53+J1+l9/t9/i9/lO/z3/m9/vPfZr/wh/wf/IH/Zf+kP/KH/Zf+yP+G3/Uf+uP+e/8cf+9P+FP+lP+B3/693/f/id/3v/sL/hf/EX5P2tCCCGEEP8UfYX9vf/G36lLW7o+AJBtR77Dfznnpty/jfupfR1jAPBUr64Nft8aNEhKSrp0bKqGoPBCAIhdzv/19wcuxcuhLTwBHaANlP6b9fVTFX9d9/2j+eO3AiQCZPk9J335mAh/Of/Nf2f+Jh/wleZfCFC08OWc9BP9Hl+ev8zfmX9PuyvMn+XLZIDW/yUnK1yOL89fCh6Dp6HDnx0phBBCCCGEEEL8pp863+1K97fp9+f5zeWczHA5vtL9+RVU/iOuQQghhBBCCCGEEP/Ysy90f/LRDh3adP6/PMj8n1HGf8AAAeDqluEzA/ynvBoy+AeDK31yZPn3fEAJIYQQQggh/jCXF/1XuxIhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEECLj+td/IUz90wdf7WsUQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghrrb/FwAA///CcktT") 0s ago: executing program 3 (id=5219): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, 0x0) kernel console output (not intermixed with test programs): syscall_64+0x328/0x520 [ 317.126395][ T5611] ? trace_irq_disable+0x3b/0x140 [ 317.126417][ T5611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.126436][ T5611] ? clear_bhb_loop+0x70/0xc0 [ 317.126459][ T5611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.126477][ T5611] RIP: 0033:0x7f5512f9f397 [ 317.126496][ T5611] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 317.126510][ T5611] RSP: 002b:00007ffdcc06c258 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 317.126530][ T5611] RAX: 0000000000000000 RBX: 00007f5513034474 RCX: 00007f5512f9f397 [ 317.126543][ T5611] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdcc06c310 [ 317.126555][ T5611] RBP: 00007ffdcc06c310 R08: 00007ffdcc06d310 R09: 00000000ffffffff [ 317.126568][ T5611] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdcc06d3a0 [ 317.126579][ T5611] R13: 00007f5513034474 R14: 000000000004d606 R15: 00007ffdcc06d3e0 [ 317.126611][ T5611] [ 317.157377][T15082] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 317.157970][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.158020][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.229638][ T5611] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 317.657631][ T5622] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 317.823574][ T5622] usb 2-1: unable to get BOS descriptor or descriptor too short [ 317.824087][ T5622] usb 2-1: not running at top speed; connect to a high speed hub [ 317.824133][ T5622] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 317.825525][ T5622] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 317.825547][ T5622] usb 2-1: config 14 has 0 interfaces, different from the descriptor's value: 2 [ 317.827483][ T5622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.827504][ T5622] usb 2-1: Product: syz [ 317.827517][ T5622] usb 2-1: Manufacturer: syz [ 317.827530][ T5622] usb 2-1: SerialNumber: syz [ 317.896414][T15094] loop2: detected capacity change from 0 to 32768 [ 317.910082][ T5742] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 317.990022][T15102] loop4: detected capacity change from 0 to 512 [ 318.001144][T15102] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 318.062365][ T5742] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 318.063600][ T5742] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 318.063625][ T5742] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 318.065942][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.065964][ T5742] usb 4-1: Product: syz [ 318.065977][ T5742] usb 4-1: Manufacturer: syz [ 318.065991][ T5742] usb 4-1: SerialNumber: syz [ 318.069300][ T5742] usb 4-1: config 0 descriptor?? [ 318.079139][ T5742] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 318.091482][T15102] EXT4-fs (loop4): 1 truncate cleaned up [ 318.102513][T15102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.234652][T15094] find_entry called with index = 0 [ 318.241566][T15094] read_mapping_page failed! [ 318.246260][T15094] ERROR: (device loop2): txCommit: [ 318.246260][T15094] [ 318.251862][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.263000][T15094] ERROR: (device loop2): remounting filesystem as read-only [ 318.299935][ T5735] usb 2-1: USB disconnect, device number 22 [ 318.455238][T15115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4167'. [ 318.519335][T15115] bond2: option packets_per_slave: invalid value (16777215) [ 318.528856][T15115] bond2: option packets_per_slave: allowed values 0 - 65535 [ 318.541129][T15115] bond2 (unregistering): Released all slaves [ 318.543804][ T5622] usb 4-1: USB disconnect, device number 24 [ 318.993135][T15134] netlink: 'syz.1.4174': attribute type 16 has an invalid length. [ 318.993181][T15134] netlink: 'syz.1.4174': attribute type 17 has an invalid length. [ 319.032662][T15134] bridge_slave_0: left promiscuous mode [ 319.073080][T15134] veth0_vlan: left allmulticast mode [ 319.081819][T15134] macsec0: left promiscuous mode [ 319.086937][T15134] macsec0: left allmulticast mode [ 319.092943][T15134] ip6gre1: left promiscuous mode [ 319.098076][T15134] ip6gre1: left allmulticast mode [ 319.103692][T15134] xfrm1: left allmulticast mode [ 319.109481][T15134] xfrm2: left allmulticast mode [ 319.117031][T15134] bridge3: left promiscuous mode [ 319.175095][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4178'. [ 319.244255][T15144] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 319.244283][T15144] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 319.244408][T15144] vhci_hcd vhci_hcd.0: Device attached [ 319.282023][T15145] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 319.285026][ T154] vhci_hcd vhci_hcd.3: stop threads [ 319.285045][ T154] vhci_hcd vhci_hcd.3: release socket [ 319.285064][ T154] vhci_hcd vhci_hcd.3: disconnect device [ 319.308937][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4180'. [ 319.430897][ T5622] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 319.498065][T15159] libceph: resolve '0' (ret=-3): failed [ 319.590576][ T5622] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 319.592482][ T5622] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 319.592569][ T5622] usb 3-1: config 1 has no interface number 0 [ 319.592604][ T5622] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDE, changing to 0x8E [ 319.592626][ T5622] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 319.592648][ T5622] usb 3-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 319.595333][ T5622] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.595356][ T5622] usb 3-1: Product: syz [ 319.595368][ T5622] usb 3-1: Manufacturer: syz [ 319.595382][ T5622] usb 3-1: SerialNumber: syz [ 319.602220][T15140] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 319.611255][ T5622] usb 3-1: Expected 3 endpoints, found: 2 [ 319.823943][T15173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4193'. [ 319.866713][T15175] netlink: 'syz.0.4192': attribute type 16 has an invalid length. [ 319.866752][T15175] netlink: 'syz.0.4192': attribute type 17 has an invalid length. [ 320.001166][T15175] bridge0: port 3(batadv0) entered disabled state [ 320.001544][T15175] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.002089][T15175] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.347820][T15175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.373088][ T25] usb 3-1: USB disconnect, device number 25 [ 320.412579][T15175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.551596][T15187] loop4: detected capacity change from 0 to 32768 [ 320.586430][T15187] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 320.600273][T15187] JBD2: Ignoring recovery information on journal [ 320.707105][T15175] vlan0: left promiscuous mode [ 320.729039][T15187] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 320.762817][ T25] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 320.892059][ T5610] ocfs2: Unmounting device (7,4) on (node local) [ 320.951312][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 320.952141][ T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 320.953324][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 320.953364][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.967848][ T25] usb 3-1: config 0 descriptor?? [ 320.973475][T15197] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 321.113312][T15175] ip6gre1: left promiscuous mode [ 321.118452][T15175] ip6gre1: left allmulticast mode [ 321.151252][T15175] sit2: left allmulticast mode [ 321.159298][T15175] ip6erspan0: left promiscuous mode [ 321.172308][ T40] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.176545][ T40] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.176585][ T40] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.190129][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 321.190224][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 321.195774][ T25] usb 3-1: USB disconnect, device number 26 [ 321.279312][T15215] loop4: detected capacity change from 0 to 4096 [ 321.332930][T15213] loop1: detected capacity change from 0 to 4096 [ 321.417873][T15215] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 321.453396][T15213] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 321.453452][T15213] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 321.498711][T15215] ntfs3(loop4): Failed to load $Extend (-22). [ 321.498760][T15215] ntfs3(loop4): Failed to initialize $Extend. [ 321.622946][ T58] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 321.623071][ T5621] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 321.623092][ T5621] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 321.623107][ T5621] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 321.623430][ T1168] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 322.117035][T15230] loop1: detected capacity change from 0 to 32768 [ 322.142638][T15230] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 322.163598][T15230] JBD2: Ignoring recovery information on journal [ 322.210172][T15241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.230743][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 322.304203][T15230] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 322.392523][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 322.409300][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 322.422619][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.422669][ T10] usb 1-1: Product: syz [ 322.422699][ T10] usb 1-1: Manufacturer: syz [ 322.422714][ T10] usb 1-1: SerialNumber: syz [ 322.753494][ T10] snd-ua101 1-1:1.1: sample format descriptor not found [ 322.753588][ T10] snd-ua101 1-1:1.0: invalid num_altsetting [ 322.770996][ T10] usb 1-1: USB disconnect, device number 28 [ 322.806710][ T5621] ocfs2: Unmounting device (7,1) on (node local) [ 323.167751][T15264] loop2: detected capacity change from 0 to 128 [ 323.192177][T15266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4231'. [ 323.237222][T15264] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 323.261820][T15264] ext4 filesystem being mounted at /869/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 323.345639][T15274] netlink: 'syz.4.4240': attribute type 17 has an invalid length. [ 323.413937][ T5612] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 323.433522][T15274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.447865][T15274] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.459714][T15274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.532616][T15274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.543111][T15274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.556563][T15274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 323.567141][T15274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.583639][T15274] veth1_vlan: left promiscuous mode [ 323.590590][T15274] veth0_vlan: left promiscuous mode [ 323.598577][T15274] veth0_vlan: entered promiscuous mode [ 323.606048][T15274] veth1_vlan: entered promiscuous mode [ 323.622728][T15274] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 323.631347][T15274] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 323.639689][T15274] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 323.648358][T15274] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 323.658449][T15274] A link change request failed with some changes committed already. Interface ..ãc¤± may have been left with an inconsistent configuration, please check. [ 323.702613][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4245'. [ 323.762749][T15286] misc userio: Invalid payload size [ 323.858478][T15284] bond4: option packets_per_slave: invalid value (16777215) [ 323.858517][T15284] bond4: option packets_per_slave: allowed values 0 - 65535 [ 323.890420][T15284] bond4 (unregistering): Released all slaves [ 324.000308][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.002042][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.003246][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.003366][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.104249][ T5735] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 324.260991][ T5735] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 324.272344][ T5735] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 324.272386][ T5735] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 324.272440][ T5735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.359449][T15312] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4257'. [ 324.386781][T15314] loop1: detected capacity change from 0 to 512 [ 324.399015][T15314] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 324.421519][T15314] EXT4-fs (loop1): 1 truncate cleaned up [ 324.432006][T15314] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.556708][T15320] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4259'. [ 324.556764][T15320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4259'. [ 324.594299][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.771758][ T5742] usb 3-1: USB disconnect, device number 27 [ 324.844561][T15321] loop0: detected capacity change from 0 to 32768 [ 324.883807][T15321] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 325.009203][T15321] XFS (loop0): Ending clean mount [ 325.053973][T15345] program syz.3.4269 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.078845][T15321] XFS (loop0): Quotacheck needed: Please wait. [ 325.237305][T15350] netlink: 'syz.3.4272': attribute type 4 has an invalid length. [ 325.244590][T15347] xt_CT: No such helper "netbios-ns" [ 325.282160][T15321] XFS (loop0): Quotacheck: Done. [ 325.357528][ T5611] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 325.485822][T15358] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 325.565200][T15360] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.610679][T15359] loop4: detected capacity change from 0 to 4096 [ 325.632162][T15359] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 325.696026][T15359] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 325.708707][T15359] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 325.757473][T15366] loop2: detected capacity change from 0 to 16 [ 325.764771][T15366] erofs: Bad value for 'cache_strategy' [ 326.040276][T15372] loop3: detected capacity change from 0 to 4096 [ 326.115614][T15372] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 326.183671][T15372] ntfs3(loop3): Failed to load $Extend (-22). [ 326.183722][T15372] ntfs3(loop3): Failed to initialize $Extend. [ 326.268198][T15388] loop2: detected capacity change from 0 to 256 [ 326.278532][T15388] exfat: Deprecated parameter 'utf8' [ 326.284093][T15388] exfat: Deprecated parameter 'namecase' [ 326.332332][T15388] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 326.529875][ T5622] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 326.642744][T15396] netlink: 'syz.3.4293': attribute type 8 has an invalid length. [ 326.680161][ T5622] usb 2-1: Using ep0 maxpacket: 32 [ 326.682733][ T5622] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 326.689615][ T5622] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 326.689640][ T5622] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.689657][ T5622] usb 2-1: config 0 has no interface number 0 [ 326.689692][ T5622] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 326.690522][T15400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4294'. [ 326.690539][T15400] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4294'. [ 326.693562][ T5622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.693584][ T5622] usb 2-1: Product: syz [ 326.693597][ T5622] usb 2-1: Manufacturer: syz [ 326.693610][ T5622] usb 2-1: SerialNumber: syz [ 326.721642][ T5622] usb 2-1: config 0 descriptor?? [ 326.739335][ T5622] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 326.739409][ T5622] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 326.835893][T15402] loop0: detected capacity change from 0 to 4096 [ 326.973459][T15390] loop4: detected capacity change from 0 to 32768 [ 326.981582][ T5622] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 327.033625][T15412] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 327.052033][T15390] ea_get: invalid extended attribute [ 327.137629][T15415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4303'. [ 327.146865][T15415] netlink: 'syz.3.4303': attribute type 1 has an invalid length. [ 327.197731][ T5622] radio-raremono 2-1:0.35: raremono_cmd_main failed (-71) [ 327.210944][ T5622] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 327.265590][ T5622] usb 2-1: USB disconnect, device number 23 [ 327.306005][ T5622] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 327.667061][T15431] devtmpfs: Unexpected value for 'usrquota' [ 327.706199][T15428] loop0: detected capacity change from 0 to 4096 [ 327.842493][T15428] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 328.131148][ T30] audit: type=1326 audit(1788198477.011:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15443 comm="syz.2.4317" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573bb9e159 code=0x7ffc0000 [ 328.131220][ T30] audit: type=1326 audit(1788198477.011:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15443 comm="syz.2.4317" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573bb9e159 code=0x7ffc0000 [ 328.194112][ T30] audit: type=1326 audit(1788198477.081:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15443 comm="syz.2.4317" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f573bb9e159 code=0x7ffc0000 [ 328.194487][ T30] audit: type=1326 audit(1788198477.081:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15443 comm="syz.2.4317" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573bb9e159 code=0x7ffc0000 [ 328.194871][ T30] audit: type=1326 audit(1788198477.081:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15443 comm="syz.2.4317" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573bb9e159 code=0x7ffc0000 [ 328.284004][ T5622] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 328.385249][T15455] loop4: detected capacity change from 0 to 16 [ 328.403434][T15455] erofs (device loop4): mounted with root inode @ nid 36. [ 328.416548][T15455] erofs (device loop4): unsupported i_format 1796 of nid 86 [ 328.441923][ T5622] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 328.453084][ T5622] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.453165][ T5622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.462975][ T5622] usb 2-1: config 0 descriptor?? [ 328.491663][ T5622] pwc: Askey VC010 type 2 USB webcam detected. [ 328.730023][ T25] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 328.773010][T15451] loop0: detected capacity change from 0 to 32768 [ 328.782754][T15451] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4320 (15451) [ 328.803919][T15451] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 328.814254][T15451] BTRFS info (device loop0): using sha256 checksum algorithm [ 328.883171][ T25] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 328.884362][ T25] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 328.884424][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.902216][ T25] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 328.926494][ T5622] pwc: recv_control_msg error -71 req 02 val 2b00 [ 328.937442][ T5622] pwc: recv_control_msg error -71 req 02 val 2700 [ 328.947570][ T5622] pwc: recv_control_msg error -71 req 02 val 2c00 [ 328.959762][ T5622] pwc: recv_control_msg error -71 req 04 val 1000 [ 328.960100][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 328.964524][T15451] BTRFS info (device loop0): enabling ssd optimizations [ 328.964571][T15451] BTRFS info (device loop0): turning on async discard [ 328.964587][T15451] BTRFS info (device loop0): enabling free space tree [ 328.968240][ T5622] pwc: recv_control_msg error -71 req 04 val 1300 [ 328.976507][ T5622] pwc: recv_control_msg error -71 req 04 val 1400 [ 329.011152][ T5622] pwc: recv_control_msg error -71 req 02 val 2000 [ 329.019590][ T5622] pwc: recv_control_msg error -71 req 02 val 2100 [ 329.026691][ T5622] pwc: recv_control_msg error -71 req 04 val 1500 [ 329.033571][ T5622] pwc: recv_control_msg error -71 req 02 val 2500 [ 329.040621][ T5622] pwc: recv_control_msg error -71 req 02 val 2400 [ 329.047440][ T5622] pwc: recv_control_msg error -71 req 02 val 2600 [ 329.055919][ T5622] pwc: recv_control_msg error -71 req 02 val 2900 [ 329.062793][ T5622] pwc: recv_control_msg error -71 req 02 val 2800 [ 329.070099][ T5622] pwc: recv_control_msg error -71 req 04 val 1100 [ 329.078413][ T5622] pwc: recv_control_msg error -71 req 04 val 1200 [ 329.086813][ T5622] pwc: Registered as video103. [ 329.094294][ T5622] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 329.120636][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 329.127805][ T9] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 329.127831][ T9] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 329.127849][ T9] usb 4-1: config 0 has no interface number 0 [ 329.135278][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.135303][ T9] usb 4-1: Product: syz [ 329.135317][ T9] usb 4-1: Manufacturer: syz [ 329.135329][ T9] usb 4-1: SerialNumber: syz [ 329.155271][ T9] usb 4-1: config 0 descriptor?? [ 329.187775][ T5622] usb 2-1: USB disconnect, device number 24 [ 329.245648][ T5611] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 329.614254][ T9] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 329.614309][ T9] uvcvideo 4-1:0.64: No valid video chain found. [ 329.616632][ T9] usb 4-1: USB disconnect, device number 25 [ 330.031601][ T5622] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 330.154397][ T25] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 330.163153][ T25] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 330.171575][ T25] stv0680 3-1:4.0: last error: 86, command = 0x78 [ 330.182731][ T25] usb 3-1: USB disconnect, device number 28 [ 330.192851][ T5622] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 330.203130][ T5622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.221966][ T5622] usb 2-1: config 0 descriptor?? [ 330.232163][ T5622] ums-realtek 2-1:0.0: USB Mass Storage device detected [ 330.257458][T15519] loop4: detected capacity change from 0 to 256 [ 330.456425][ T25] usb 2-1: USB disconnect, device number 25 [ 330.487725][T15532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4352'. [ 330.993628][T15558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4363'. [ 331.413412][T15574] nvme_fabrics: missing parameter 'host_traddr=%s' [ 331.590279][T15587] CIFS: Attempting to mount //127.0.0.1/share [ 331.597400][T15587] CIFS: VFS: Error connecting to socket. Aborting operation. [ 332.028575][T15579] set_capacity_and_notify: 1 callbacks suppressed [ 332.035545][T15579] loop1: detected capacity change from 0 to 32768 [ 332.090535][T15579] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 332.157047][T15579] XFS (loop1): Ending clean mount [ 332.170839][T15621] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 332.306328][ T5621] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 332.558706][T15604] loop3: detected capacity change from 0 to 32768 [ 332.590544][T15604] (syz.3.4386,15604,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 332.590779][T15604] (syz.3.4386,15604,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 332.634463][T15604] (syz.3.4386,15604,0):ocfs2_verify_heartbeat:818 ERROR: Cannot heartbeat on a locally mounted device. [ 332.702226][T15604] (syz.3.4386,15604,1):ocfs2_fill_super:1185 ERROR: status = -22 [ 333.205512][T15628] loop0: detected capacity change from 0 to 32768 [ 333.394982][T15648] loop1: detected capacity change from 0 to 164 [ 333.460909][T15648] Unable to read rock-ridge attributes [ 333.502255][T15648] Unable to read rock-ridge attributes [ 333.502830][T15648] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 333.617451][T15656] netlink: 'syz.0.4405': attribute type 17 has an invalid length. [ 333.664194][T15656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.672802][T15656] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.691552][T15656] bridge0: port 3(batadv0) entered blocking state [ 333.691697][T15656] bridge0: port 3(batadv0) entered forwarding state [ 333.706623][T15656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.795158][T15656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.808832][T15656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.832200][T15656] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 333.843839][T15656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.859728][T15656] veth1_vlan: left promiscuous mode [ 333.868753][T15656] veth0_vlan: left promiscuous mode [ 333.877611][T15656] veth0_vlan: entered promiscuous mode [ 333.885897][T15656] veth1_vlan: entered promiscuous mode [ 333.896587][T15656] veth1_macvtap: left promiscuous mode [ 333.903771][T15656] veth0_macvtap: left promiscuous mode [ 333.910867][T15656] veth0_macvtap: entered promiscuous mode [ 333.917992][T15656] veth1_macvtap: entered promiscuous mode [ 333.932030][T15656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 333.942783][T15656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 333.951446][T15656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 333.962187][T15656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 334.044700][T15656] 8021q: adding VLAN 0 to HW filter on device bond2 [ 334.057670][T15656] 8021q: adding VLAN 0 to HW filter on device bond3 [ 334.209002][ T1168] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 334.209236][ T1168] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 334.233252][ T5735] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 334.262545][ T1168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.262605][ T1168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.262650][ T1168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.297122][ T30] audit: type=1326 audit(1788198483.181:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.0.4415" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5512f9e159 code=0x7ffc0000 [ 334.302468][ T9] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 334.352284][ T30] audit: type=1326 audit(1788198483.241:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.0.4415" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5512f9e159 code=0x7ffc0000 [ 334.378272][ T30] audit: type=1326 audit(1788198483.251:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.0.4415" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5512f9e159 code=0x7ffc0000 [ 334.378316][ T30] audit: type=1326 audit(1788198483.251:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.0.4415" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5512f9e159 code=0x7ffc0000 [ 334.378351][ T30] audit: type=1326 audit(1788198483.251:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.0.4415" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5512f9e159 code=0x7ffc0000 [ 334.405111][ T30] audit: type=1326 audit(1788198483.281:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.0.4415" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5512f9e159 code=0x7ffc0000 [ 334.405160][ T30] audit: type=1326 audit(1788198483.281:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.0.4415" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5512f9e159 code=0x7ffc0000 [ 334.405219][ T30] audit: type=1326 audit(1788198483.281:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.0.4415" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5512f9e159 code=0x7ffc0000 [ 334.422885][ T30] audit: type=1326 audit(1788198483.291:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.0.4415" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5512f9e159 code=0x7ffc0000 [ 334.711210][T15681] kAFS: unable to lookup cell 'syze¤@Ës0' [ 334.721957][T15668] loop4: detected capacity change from 0 to 32768 [ 334.742598][T15668] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 334.751097][ T9] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 334.818557][T15668] XFS (loop4): Ending clean mount [ 334.884219][T15668] XFS (loop4): Quotacheck needed: Please wait. [ 335.018699][T15697] netlink: 512 bytes leftover after parsing attributes in process `syz.2.4424'. [ 335.239499][T15668] XFS (loop4): Quotacheck: Done. [ 335.363003][ T5610] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 335.745514][ T30] audit: type=1326 audit(1788198484.611:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15715 comm="syz.3.4432" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211499e159 code=0x7ffc0000 [ 335.922596][T15723] loop0: detected capacity change from 0 to 4096 [ 335.954721][T15724] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 336.804671][T15758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4449'. [ 336.804714][T15758] netlink: 'syz.1.4449': attribute type 1 has an invalid length. [ 337.314551][T15779] loop3: detected capacity change from 0 to 512 [ 337.600276][ T25] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 337.772830][ T25] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 337.785781][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.785840][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.785874][ T25] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 337.785898][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 337.830907][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.830948][ T25] usb 2-1: Product: syz [ 337.830976][ T25] usb 2-1: Manufacturer: syz [ 337.830992][ T25] usb 2-1: SerialNumber: syz [ 338.023907][T15806] nvme_fabrics: missing parameter 'transport=%s' [ 338.044912][T15806] nvme_fabrics: missing parameter 'nqn=%s' [ 338.099593][ T25] usb 2-1: Not enough endpoints found in device, aborting! [ 338.258570][T15817] loop2: detected capacity change from 0 to 256 [ 338.271871][T15817] exfat: Deprecated parameter 'utf8' [ 338.272052][T15817] exfat: Deprecated parameter 'namecase' [ 338.314495][T15817] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0232f1a3, utbl_chksum : 0xe619d30d) [ 338.361686][ T9] usb 2-1: USB disconnect, device number 26 [ 338.431304][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 338.484251][T15828] loop4: detected capacity change from 0 to 1024 [ 338.572990][T15831] ip6gre4: entered promiscuous mode [ 338.578501][T15831] ip6gre4: entered allmulticast mode [ 338.904197][T15844] loop4: detected capacity change from 0 to 1024 [ 338.923106][T15848] tmpfs: Bad value for 'mpol' [ 339.246981][T15853] bond4 (unregistering): Released all slaves [ 339.661251][T15881] loop3: detected capacity change from 0 to 2048 [ 339.692972][T15881] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 339.786640][T15882] loop1: detected capacity change from 0 to 4096 [ 339.928926][T15882] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 340.014788][T15868] loop2: detected capacity change from 0 to 32768 [ 340.042620][T15868] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 340.129156][T15868] XFS (loop2): Ending clean mount [ 340.218693][T15904] netlink: 'syz.1.4515': attribute type 17 has an invalid length. [ 340.285817][T15868] XFS (loop2): Quotacheck needed: Please wait. [ 340.349351][T15908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4518'. [ 340.463580][T15904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.471792][T15904] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.492239][T15904] bridge0: port 1(batadv0) entered blocking state [ 340.492369][T15904] bridge0: port 1(batadv0) entered forwarding state [ 340.506459][T15904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.516175][T15868] XFS (loop2): Quotacheck: Done. [ 340.652664][ T5612] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 340.696142][T15904] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 340.696172][T15904] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 340.732932][T15904] veth1_vlan: left promiscuous mode [ 340.744749][T15904] veth0_vlan: entered promiscuous mode [ 340.752981][T15904] veth1_vlan: entered promiscuous mode [ 340.763563][T15904] veth1_macvtap: left promiscuous mode [ 340.770464][T15904] veth0_macvtap: left promiscuous mode [ 340.777208][T15904] veth0_macvtap: entered promiscuous mode [ 340.784533][T15904] veth1_macvtap: entered promiscuous mode [ 340.796160][T15904] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 340.805429][T15904] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 340.814060][T15904] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 340.822636][T15904] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 340.848328][T15904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 341.000053][ T154] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.000405][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.000458][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.000487][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.328048][T15936] x_tables: unsorted entry at hook 4 [ 341.524714][T15945] loop3: detected capacity change from 0 to 512 [ 341.618741][T15945] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.4537: Unrecognised inode hash code 255 [ 341.618788][T15945] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4537: Corrupt directory, running e2fsck is recommended [ 341.642360][T15945] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 341.642482][T15945] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.4537: corrupted in-inode xattr: invalid ea_ino [ 341.642508][T15945] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 341.647192][T15945] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.4537: couldn't read orphan inode 15 (err -117) [ 341.647220][T15945] loop3: lost filesystem error report for type 5 error -117 [ 341.649840][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 341.649860][ C0] EXT4-fs (loop3): initial error at time 341: ext4_iget_extra_inode:5210: inode 15 [ 341.649888][ C0] EXT4-fs (loop3): last error at time 341: ext4_orphan_get:1408 [ 341.659015][T15945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.783523][T15945] EXT4-fs error (device loop3): __ext4_remount:6872: comm syz.3.4537: Abort forced by user [ 341.784420][T15945] EXT4-fs (loop3): Remounting filesystem read-only [ 341.784437][T15945] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 341.834539][T15956] netlink: 'syz.4.4541': attribute type 21 has an invalid length. [ 341.834590][T15956] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4541'. [ 341.834673][T15956] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4541'. [ 341.887753][ T5609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.973955][T15961] comedi comedi1: 8255: I/O port conflict (0x140,4) [ 342.092096][T15927] loop1: detected capacity change from 0 to 32768 [ 342.257970][T15973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4551'. [ 342.625880][T15992] loop0: detected capacity change from 0 to 64 [ 342.864647][ T58] kworker/u8:4: attempt to access beyond end of device [ 342.864647][ T58] loop0: rw=8388609, sector=2320, nr_sectors = 1 limit=64 [ 342.864691][ T58] Buffer I/O error on dev loop0, logical block 2320, lost async page write [ 342.864754][ T58] kworker/u8:4: attempt to access beyond end of device [ 342.864754][ T58] loop0: rw=8388609, sector=2321, nr_sectors = 1 limit=64 [ 342.864779][ T58] Buffer I/O error on dev loop0, logical block 2321, lost async page write [ 342.864800][ T58] kworker/u8:4: attempt to access beyond end of device [ 342.864800][ T58] loop0: rw=8388609, sector=2322, nr_sectors = 1 limit=64 [ 342.864822][ T58] Buffer I/O error on dev loop0, logical block 2322, lost async page write [ 342.864842][ T58] kworker/u8:4: attempt to access beyond end of device [ 342.864842][ T58] loop0: rw=8388609, sector=2323, nr_sectors = 1 limit=64 [ 342.864865][ T58] Buffer I/O error on dev loop0, logical block 2323, lost async page write [ 342.964074][ T1168] kworker/u8:8: attempt to access beyond end of device [ 342.964074][ T1168] loop0: rw=8390657, sector=2320, nr_sectors = 1 limit=64 [ 342.964205][ T1168] Buffer I/O error on dev loop0, logical block 2320, lost async page write [ 342.964227][ T1168] kworker/u8:8: attempt to access beyond end of device [ 342.964227][ T1168] loop0: rw=8390657, sector=2321, nr_sectors = 1 limit=64 [ 342.964247][ T1168] Buffer I/O error on dev loop0, logical block 2321, lost async page write [ 342.964263][ T1168] kworker/u8:8: attempt to access beyond end of device [ 342.964263][ T1168] loop0: rw=8390657, sector=2322, nr_sectors = 1 limit=64 [ 342.964282][ T1168] Buffer I/O error on dev loop0, logical block 2322, lost async page write [ 342.964298][ T1168] kworker/u8:8: attempt to access beyond end of device [ 342.964298][ T1168] loop0: rw=8390657, sector=2323, nr_sectors = 1 limit=64 [ 342.964344][ T1168] Buffer I/O error on dev loop0, logical block 2323, lost async page write [ 343.139075][T16000] IPv6: NLM_F_REPLACE set, but no existing node found! [ 343.300351][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 343.300397][ T30] audit: type=1326 audit(343.250:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16001 comm="syz.0.4566" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5512f9e159 code=0x7ffc0000 [ 343.300444][ T30] audit: type=1326 audit(343.260:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16001 comm="syz.0.4566" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5512f9e159 code=0x7ffc0000 [ 343.342224][ T30] audit: type=1326 audit(343.300:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16001 comm="syz.0.4566" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5512f9e159 code=0x7ffc0000 [ 343.345717][ T30] audit: type=1326 audit(343.300:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16001 comm="syz.0.4566" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5512f9e159 code=0x7ffc0000 [ 343.360146][ T30] audit: type=1326 audit(343.320:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16001 comm="syz.0.4566" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f5512f9e159 code=0x7ffc0000 [ 343.360681][ T30] audit: type=1326 audit(343.320:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16001 comm="syz.0.4566" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5512f9e159 code=0x7ffc0000 [ 343.360887][ T30] audit: type=1326 audit(343.320:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16001 comm="syz.0.4566" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5512f9e159 code=0x7ffc0000 [ 343.363289][ T30] audit: type=1326 audit(343.320:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16001 comm="syz.0.4566" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5512f9e159 code=0x7ffc0000 [ 343.363472][ T30] audit: type=1326 audit(343.320:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16001 comm="syz.0.4566" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5512f9e159 code=0x7ffc0000 [ 343.610876][T16008] loop0: detected capacity change from 0 to 1024 [ 343.847039][T16016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4573'. [ 343.981794][T16018] loop1: detected capacity change from 0 to 2048 [ 344.045536][T16023] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 344.090263][T16018] syz.1.4572: attempt to access beyond end of device [ 344.090263][T16018] loop1: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048 [ 344.105944][T16018] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 344.119075][T16018] syz.1.4572: attempt to access beyond end of device [ 344.119075][T16018] loop1: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048 [ 344.139268][T16018] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 344.139448][T16018] NILFS (loop1): error -5 truncating bmap (ino=16) [ 344.609235][T16050] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4587'. [ 344.684114][ T30] audit: type=1326 audit(344.620:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16052 comm="syz.0.4589" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5512f9e159 code=0x7ffc0000 [ 345.358869][T16085] comedi comedi1: 8255: I/O base address not correctly aligned [ 345.400498][T16046] loop1: detected capacity change from 0 to 32768 [ 345.456275][T16046] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 345.604382][T16046] XFS (loop1): Ending clean mount [ 345.645770][T16046] XFS (loop1): Quotacheck needed: Please wait. [ 345.850709][T16116] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4617'. [ 345.973625][T16046] XFS (loop1): Quotacheck: Done. [ 345.988420][T16121] loop2: detected capacity change from 0 to 256 [ 346.040082][T16124] IPVS: ip_vs_add_dest(): server weight less than zero [ 346.103698][T16126] netlink: 'syz.0.4621': attribute type 63 has an invalid length. [ 346.148516][ T5621] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 346.327236][T16135] loop4: detected capacity change from 0 to 512 [ 346.391654][T16135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.510265][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 346.660722][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.669468][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 346.685662][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 346.712883][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.713031][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.734969][ T9] usb 3-1: config 0 descriptor?? [ 346.758237][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 346.758277][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 346.845370][T16149] loop4: detected capacity change from 0 to 256 [ 346.922368][T16154] netlink: 'syz.3.4635': attribute type 1 has an invalid length. [ 347.105291][T16163] loop4: detected capacity change from 0 to 1024 [ 347.114398][T16163] EXT4-fs: Ignoring removed orlov option [ 347.172170][T16163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.215964][T16170] loop1: detected capacity change from 0 to 1024 [ 347.230574][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 347.455393][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.542093][T16178] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4645'. [ 347.628162][ T9] usb 3-1: reset high-speed USB device number 29 using dummy_hcd [ 347.799955][T16186] tipc: Started in network mode [ 347.800049][T16186] tipc: Node identity 0000000000000000009f000000000001, cluster identity 4711 [ 347.800119][T16186] tipc: Enabling of bearer rejected, failed to enable media [ 347.940812][T16194] loop1: detected capacity change from 0 to 512 [ 348.005732][T16194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.118428][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.203274][ T9] usb 3-1: USB disconnect, device number 29 [ 348.311379][T16203] loop1: detected capacity change from 0 to 4096 [ 348.537973][T16184] loop0: detected capacity change from 0 to 32768 [ 348.577804][T16184] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 348.588876][T16211] loop4: detected capacity change from 0 to 512 [ 348.598964][T16211] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 348.626453][T16211] EXT4-fs (loop4): 1 truncate cleaned up [ 348.633064][T16211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.733513][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.836631][T16184] XFS (loop0): Ending clean mount [ 348.846577][T16223] loop2: detected capacity change from 0 to 4096 [ 348.858263][T16223] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 348.944439][T16227] loop4: detected capacity change from 0 to 512 [ 348.955373][T16227] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 348.988340][T16221] loop1: detected capacity change from 0 to 4096 [ 349.008789][T16227] EXT4-fs (loop4): 1 truncate cleaned up [ 349.032643][T16227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.079701][ T5611] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 349.092584][T16223] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 349.169640][T16221] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 349.203599][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.257903][T16221] ntfs3(loop1): Failed to load $Extend (-22). [ 349.257951][T16221] ntfs3(loop1): Failed to initialize $Extend. [ 349.367246][ T12] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 349.367415][ T5612] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 349.367435][ T5612] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 349.367450][ T5612] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 349.367856][ T12] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 349.455444][T16237] loop4: detected capacity change from 0 to 256 [ 349.471844][T16237] exfat: Deprecated parameter 'utf8' [ 349.477851][T16237] exfat: Deprecated parameter 'utf8' [ 349.483420][T16237] exfat: Deprecated parameter 'utf8' [ 349.553468][T16237] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 349.773088][T16245] loop3: detected capacity change from 0 to 512 [ 349.776524][T16245] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 349.780721][T16245] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 349.780832][T16245] System zones: 1-12 [ 349.783997][T16245] EXT4-fs (loop3): 1 truncate cleaned up [ 349.785672][T16245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.919638][ T5609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.031011][ T25] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 350.061186][T16261] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4677'. [ 350.123978][T16263] netdevsim netdevsim3: loading /lib/firmware// failed with error -22 [ 350.139146][T16263] netdevsim netdevsim3: Direct firmware load for / failed with error -22 [ 350.147913][T16263] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 350.191879][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 350.193146][ T25] usb 2-1: New USB device found, idVendor=054c, idProduct=0002, bcdDevice= 0.00 [ 350.196018][ T25] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.196049][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 350.196080][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.212377][ T25] usb 2-1: config 0 descriptor?? [ 350.336500][T16269] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 350.337399][T16269] ALSA: mixer_oss: invalid index 137438 [ 350.587499][T16271] loop2: detected capacity change from 0 to 32768 [ 350.610530][T16271] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 350.677729][ T25] sony 0003:054C:0002.0001: missing HID_OUTPUT_REPORT 0 [ 350.720605][T16271] XFS (loop2): Ending clean mount [ 350.830194][ T25] sony 0003:054C:0002.0001: hidraw0: USB HID v0.00 Joystick [HID 054c:0002] on usb-dummy_hcd.1-1/input0 [ 350.845222][ T25] sony 0003:054C:0002.0001: failed to claim input [ 350.875489][ T5612] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 350.906840][ T25] usb 2-1: USB disconnect, device number 27 [ 351.049893][ T5735] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 351.190603][T16284] fido_id[16284]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 351.200238][ T5735] usb 5-1: Using ep0 maxpacket: 32 [ 351.202284][ T5735] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 351.203257][ T5735] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 351.203285][ T5735] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 351.203308][ T5735] usb 5-1: config 0 interface 0 has no altsetting 0 [ 351.203337][ T5735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.243361][ T5735] usb 5-1: config 0 descriptor?? [ 351.582266][T16304] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 351.681473][ T5735] steelseries 0003:1038:1410.0002: item fetching failed at offset 2/6 [ 351.682129][ T5735] steelseries 0003:1038:1410.0002: parse failed [ 351.682224][ T5735] steelseries 0003:1038:1410.0002: probe with driver steelseries failed with error -22 [ 351.790965][T16306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.904315][ T25] usb 5-1: USB disconnect, device number 21 [ 351.984434][T16319] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4700'. [ 352.017464][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.279613][T16328] can0: slcan on ttynull. [ 352.325683][T16334] FAT-fs (loop0): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 352.652591][T16343] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.4710: corrupted in-inode xattr: e_value out of bounds [ 352.667532][T16343] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 352.668078][T16343] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.4710: couldn't read orphan inode 15 (err -117) [ 352.668121][T16343] loop2: lost filesystem error report for type 5 error -117 [ 352.677754][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 352.677775][ C1] EXT4-fs (loop2): initial error at time 352: ext4_iget_extra_inode:5210: inode 15 [ 352.677799][ C1] EXT4-fs (loop2): last error at time 352: ext4_orphan_get:1408 [ 352.734931][T16343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.869347][T16326] can0 (unregistered): slcan off ttynull. [ 352.921531][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.137816][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4715'. [ 353.370801][T16342] set_capacity_and_notify: 3 callbacks suppressed [ 353.377366][T16342] loop4: detected capacity change from 0 to 32768 [ 353.385694][T16375] loop2: detected capacity change from 0 to 256 [ 353.398422][T16377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4721'. [ 353.409940][T16342] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4711 (16342) [ 353.434014][T16376] loop3: detected capacity change from 0 to 512 [ 353.442550][T16342] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 353.442721][T16342] BTRFS info (device loop4): using crc32c checksum algorithm [ 353.453689][T16376] EXT4-fs: Ignoring removed orlov option [ 353.453751][T16376] EXT4-fs: Ignoring removed mblk_io_submit option [ 353.508230][T16376] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 353.527649][T16376] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.4719: attempt to clear invalid blocks 2 len 1 [ 353.569866][T16376] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 353.589819][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 353.589868][ C1] EXT4-fs (loop3): initial error at time 353: ext4_clear_blocks:876: inode 13 [ 353.589915][ C1] EXT4-fs (loop3): last error at time 353: ext4_clear_blocks:876: inode 13 [ 353.607963][T16376] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 353.656701][T16376] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.4719: invalid indirect mapped block 1819239214 (level 0) [ 353.656768][T16376] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 353.659894][T16376] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.4719: invalid indirect mapped block 1819239214 (level 1) [ 353.659931][T16376] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 353.671595][T16376] EXT4-fs (loop3): 1 truncate cleaned up [ 353.691462][T16376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.771134][T16342] BTRFS info (device loop4): turning off barriers [ 353.771164][T16342] BTRFS info (device loop4): disabling tree log [ 353.771196][T16342] BTRFS info (device loop4): turning on sync discard [ 353.771211][T16342] BTRFS info (device loop4): enabling free space tree [ 353.771376][T16342] BTRFS info (device loop4): use zlib compression, level 3 [ 353.948583][ T5610] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 354.004160][ T5609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.454768][T16423] xt_hashlimit: size too large, truncated to 1048576 [ 354.880027][ T5735] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 355.033375][ T5735] usb 5-1: Using ep0 maxpacket: 32 [ 355.043232][ T5735] usb 5-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 355.047551][ T5735] usb 5-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 355.047594][ T5735] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 355.047619][ T5735] usb 5-1: config 0 interface 0 has no altsetting 0 [ 355.047649][ T5735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.057580][ T5735] usb 5-1: config 0 descriptor?? [ 355.354654][T16462] loop3: detected capacity change from 0 to 512 [ 355.459665][T16462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 355.532514][ T5735] wacom 0003:056A:00C5.0003: ignoring exceeding usage max [ 355.535022][ T5735] wacom 0003:056A:00C5.0003: unknown main item tag 0x0 [ 355.535061][ T5735] wacom 0003:056A:00C5.0003: unknown main item tag 0x0 [ 355.535086][ T5735] wacom 0003:056A:00C5.0003: unknown main item tag 0x0 [ 355.535110][ T5735] wacom 0003:056A:00C5.0003: unknown main item tag 0x0 [ 355.535133][ T5735] wacom 0003:056A:00C5.0003: unknown main item tag 0x0 [ 355.535157][ T5735] wacom 0003:056A:00C5.0003: unknown main item tag 0x0 [ 355.535181][ T5735] wacom 0003:056A:00C5.0003: unknown main item tag 0x0 [ 355.535205][ T5735] wacom 0003:056A:00C5.0003: unknown main item tag 0x0 [ 355.535228][ T5735] wacom 0003:056A:00C5.0003: unknown main item tag 0x0 [ 355.535252][ T5735] wacom 0003:056A:00C5.0003: unknown main item tag 0x0 [ 355.604993][ T5735] wacom 0003:056A:00C5.0003: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.4-1/input0 [ 355.642344][T16462] __quota_error: 8 callbacks suppressed [ 355.642398][T16462] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 355.642522][T16462] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 355.642574][T16462] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.4744: Failed to acquire dquot type 0 [ 355.734773][ T5735] usb 5-1: USB disconnect, device number 22 [ 355.834173][ T5609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 355.869548][T16477] fido_id[16477]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 356.075541][T16489] loop2: detected capacity change from 0 to 64 [ 356.098811][T16483] loop1: detected capacity change from 0 to 4096 [ 356.199635][T16483] ntfs3(loop1): Failed to load $Extend (-22). [ 356.199686][T16483] ntfs3(loop1): Failed to initialize $Extend. [ 356.241391][ T30] audit: type=1800 audit(356.200:201): pid=16483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4753" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 356.442140][T16499] loop4: detected capacity change from 0 to 4096 [ 356.547693][T16499] ntfs3(loop4): Failed to load $Extend (-22). [ 356.547746][T16499] ntfs3(loop4): Failed to initialize $Extend. [ 356.641659][T16499] ntfs3(loop4): ino=1e, "file1" fallocate(0x11) is not supported [ 357.862553][ T1907] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 357.929241][T16564] loop4: detected capacity change from 0 to 8192 [ 357.950935][T16564] Dev loop4: RDB in block 1 has bad checksum [ 358.034365][ T1907] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 358.042538][ T1907] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.042566][ T1907] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 358.042603][ T1907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.098279][ T1907] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 358.230019][T16575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4794'. [ 358.576889][T16593] loop4: detected capacity change from 0 to 256 [ 358.577747][T16593] exfat: Deprecated parameter 'utf8' [ 358.580709][T16593] exfat: Deprecated parameter 'namecase' [ 358.580743][T16593] exfat: Deprecated parameter 'utf8' [ 358.649397][T16593] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 358.903110][T16602] loop1: detected capacity change from 0 to 2048 [ 358.956774][T16602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.143281][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.669955][ T1907] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 359.842775][ T1907] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 359.844043][ T1907] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 359.844066][ T1907] usb 4-1: config 0 has no interface number 0 [ 359.846899][ T1907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.846923][ T1907] usb 4-1: Product: syz [ 359.846935][ T1907] usb 4-1: Manufacturer: syz [ 359.846948][ T1907] usb 4-1: SerialNumber: syz [ 359.900784][ T1907] usb 4-1: config 0 descriptor?? [ 359.902359][ T5735] usb 1-1: USB disconnect, device number 29 [ 359.907119][ T5735] idmouse 1-1:1.0: disconnected [ 360.294052][T16642] loop2: detected capacity change from 0 to 8 [ 360.500982][ T31] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 360.531059][T16648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4820'. [ 360.541782][ T1907] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 360.541827][ T1907] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 360.542075][ T1907] asix 4-1:0.251: probe with driver asix failed with error -71 [ 360.582263][ T1907] usb 4-1: USB disconnect, device number 26 [ 360.665351][ T31] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 360.666871][ T31] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 360.666895][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.666911][ T31] usb 5-1: config 0 has no interface number 0 [ 360.666947][ T31] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 360.666971][ T31] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 255, setting to 64 [ 360.666995][ T31] usb 5-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.667019][ T31] usb 5-1: config 0 interface 11 has no altsetting 0 [ 360.667049][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.684408][ T31] usb 5-1: config 0 descriptor?? [ 360.686145][T16640] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 360.696208][ T31] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected [ 360.696594][ T31] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 87 [ 360.706468][T16653] loop1: detected capacity change from 0 to 8 [ 360.708273][ T31] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 360.708353][ T31] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 360.708425][ T31] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 360.708498][ T31] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 360.708584][ T31] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85 [ 360.708656][ T31] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5 [ 360.746725][T16653] SQUASHFS error: zlib decompression failed, data probably corrupt [ 360.746755][T16653] SQUASHFS error: Failed to read block 0x9b: -5 [ 360.746768][T16653] SQUASHFS error: Unable to read metadata cache entry [99] [ 360.746780][T16653] SQUASHFS error: Unable to read inode 0x127 [ 360.764648][ T31] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 360.776101][ T31] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 360.776187][ T31] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 360.776260][ T31] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 360.776333][ T31] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 360.776406][ T31] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86 [ 360.776478][ T31] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6 [ 360.783081][ T31] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 360.926504][ T31] usb 5-1: USB disconnect, device number 23 [ 360.983580][ T31] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 361.002960][ T31] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 361.003714][ T31] keyspan 5-1:0.11: device disconnected [ 361.058279][T16662] ip_tables: iptables: counters copy to user failed while replacing table [ 361.448610][T16684] veth1_to_hsr: entered promiscuous mode [ 361.459689][T16684] macsec1: entered promiscuous mode [ 361.467427][T16684] macsec1: entered allmulticast mode [ 361.473204][T16684] veth1_to_hsr: entered allmulticast mode [ 361.486724][T16682] loop3: detected capacity change from 0 to 256 [ 361.497949][T16682] vfat: Bad value for 'dmask' [ 361.641682][T16690] loop4: detected capacity change from 0 to 256 [ 361.715267][T16692] loop0: detected capacity change from 0 to 4096 [ 361.727466][T16692] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 361.810398][ T1907] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 361.827092][T16692] ntfs3(loop0): ino=19, mi_enum_attr [ 361.827146][T16692] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 361.833156][T16692] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 361.960697][ T1907] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 361.974623][ T1907] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.974667][ T1907] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 361.974731][ T1907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.009662][ T1907] usb 3-1: config 0 descriptor?? [ 362.027091][ T1907] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 362.035210][ T1907] dvb-usb: bulk message failed: -22 (3/0) [ 362.066516][ T1907] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 362.077656][ T1907] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 362.077756][ T1907] usb 3-1: media controller created [ 362.094052][ T1907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 362.183434][ T1907] dvb-usb: bulk message failed: -22 (6/0) [ 362.194368][ T1907] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 362.216654][ T1907] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20 [ 362.237884][T16686] dvb-usb: bulk message failed: -22 (2/0) [ 362.238093][T16686] dvb-usb: bulk message failed: -22 (4/0) [ 362.254353][ T1907] dvb-usb: schedule remote query interval to 150 msecs. [ 362.261489][ T1907] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 362.272043][ T1907] usb 3-1: USB disconnect, device number 30 [ 362.415336][ T1907] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 362.501274][T16689] loop1: detected capacity change from 0 to 32768 [ 362.510439][T16689] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4839 (16689) [ 362.534032][T16689] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 362.544417][T16689] BTRFS info (device loop1): using sha256 checksum algorithm [ 362.688082][T16689] BTRFS info (device loop1): enabling ssd optimizations [ 362.688128][T16689] BTRFS info (device loop1): turning on async discard [ 362.688169][T16689] BTRFS info (device loop1): enabling free space tree [ 362.790640][T16689] BTRFS warning (device loop1): get dev_stats failed, device not found [ 362.860207][ T5621] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 363.088054][ T31] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 363.236921][T16729] loop0: detected capacity change from 0 to 32768 [ 363.250801][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 363.258034][ T31] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 363.260821][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.260873][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.260893][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 363.260932][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.311567][ T31] usb 4-1: config 0 descriptor?? [ 363.366075][T16729] XFS (loop0): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 363.465404][T16743] loop4: detected capacity change from 0 to 8192 [ 363.530714][T16756] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 363.597879][ T5611] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 363.784955][ T31] hid_parser_main: 1 callbacks suppressed [ 363.785026][ T31] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 363.785053][ T31] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 363.785074][ T31] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 363.785095][ T31] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 363.785118][ T31] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 363.785143][ T31] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 363.785167][ T31] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 363.785191][ T31] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 363.785214][ T31] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 363.785236][ T31] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 363.850368][ T31] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 363.876635][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 363.945829][T16762] binder: binder_mmap: 16761 0-800000 bad vm_flags failed -1 [ 364.067465][ T31] usb 4-1: USB disconnect, device number 27 [ 364.128772][T16767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4863'. [ 364.369569][T16776] loop1: detected capacity change from 0 to 512 [ 364.379579][T16776] EXT4-fs (loop1): orphan cleanup on readonly fs [ 364.379627][T16776] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 364.382600][T16776] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 364.389830][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 364.389851][ C1] EXT4-fs (loop1): initial error at time 364: ext4_mb_generate_buddy:1317 [ 364.389874][ C1] EXT4-fs (loop1): last error at time 364: ext4_mb_generate_buddy:1317 [ 364.423662][T16776] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.4866: attempt to clear invalid blocks 2 len 1 [ 364.423697][T16776] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 364.425056][T16776] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4866: invalid indirect mapped block 1819239214 (level 0) [ 364.425090][T16776] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 364.427096][T16776] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4866: invalid indirect mapped block 1819239214 (level 1) [ 364.427133][T16776] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 364.428689][T16776] EXT4-fs (loop1): 1 truncate cleaned up [ 364.437370][T16776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 364.566439][T16781] loop2: detected capacity change from 0 to 1024 [ 364.576104][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.842770][ T10] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 365.000721][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 365.017475][ T10] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 365.017561][ T10] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 365.017589][ T10] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 365.017616][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 365.017644][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.070988][ T10] usb 1-1: config 0 descriptor?? [ 365.076966][T16785] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 365.533147][ T10] kye 0003:0458:5017.0005: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 365.533789][ T10] kye 0003:0458:5017.0005: item 0 1 0 8 parsing failed [ 365.558679][ T10] kye 0003:0458:5017.0005: parse failed [ 365.558770][ T10] kye 0003:0458:5017.0005: probe with driver kye failed with error -22 [ 365.716961][T16806] loop1: detected capacity change from 0 to 32768 [ 365.731687][T16806] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4881 (16806) [ 365.749929][ T10] usb 1-1: USB disconnect, device number 30 [ 365.770669][ T5622] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 365.774606][T16806] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 365.774641][T16806] BTRFS info (device loop1): using crc32c checksum algorithm [ 365.911518][T16806] BTRFS info (device loop1): enabling ssd optimizations [ 365.911568][T16806] BTRFS info (device loop1): turning on flush-on-commit [ 365.911598][T16806] BTRFS info (device loop1): enabling free space tree [ 365.911616][T16806] BTRFS info (device loop1): enabling auto defrag [ 365.911636][T16806] BTRFS info (device loop1): use lzo compression, level 1 [ 365.911656][T16806] BTRFS info (device loop1): max_inline set to 4096 [ 365.929888][ T5622] usb 4-1: Using ep0 maxpacket: 32 [ 365.930666][ T5622] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 365.931590][ T5622] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 365.931610][ T5622] usb 4-1: config 0 has no interface number 0 [ 365.933461][ T5622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.933483][ T5622] usb 4-1: Product: syz [ 365.933496][ T5622] usb 4-1: Manufacturer: syz [ 365.933509][ T5622] usb 4-1: SerialNumber: syz [ 365.941261][ T5622] usb 4-1: config 0 descriptor?? [ 365.946024][ T5622] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 366.189447][ T5622] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 366.214817][ T5622] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 366.401145][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 366.468001][ T5621] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 366.602584][ T10] usb 4-1: USB disconnect, device number 28 [ 366.603654][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 366.679021][T16851] loop0: detected capacity change from 0 to 164 [ 366.728428][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 366.761570][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 366.773557][ T10] quatech2 4-1:0.51: device disconnected [ 366.790719][T16851] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 366.807011][T16859] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 367.271406][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 367.353289][T16872] loop4: detected capacity change from 0 to 2048 [ 367.403160][T16872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.443177][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 367.455770][ T10] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 367.455813][ T10] usb 1-1: config 0 has no interface number 0 [ 367.455871][ T10] usb 1-1: config 0 interface 239 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.455900][ T10] usb 1-1: config 0 interface 239 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.455923][ T10] usb 1-1: config 0 interface 239 has no altsetting 0 [ 367.455953][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.515581][ T10] usb 1-1: config 0 descriptor?? [ 367.554068][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.968544][T16866] loop1: detected capacity change from 0 to 32768 [ 367.976338][T16866] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4899 (16866) [ 367.999760][ T10] logitech-djreceiver 0003:046D:C532.0006: hidraw0: USB HID v0.00 Device [HID 046d:c532] on usb-dummy_hcd.0-1/input239 [ 368.008819][T16866] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 368.008853][T16866] BTRFS info (device loop1): using crc32c checksum algorithm [ 368.068735][T16902] ip_tables: iptables: counters copy to user failed while replacing table [ 368.159601][ T10] usb 1-1: USB disconnect, device number 31 [ 368.235981][T16866] BTRFS info (device loop1): turning off barriers [ 368.236021][T16866] BTRFS info (device loop1): disabling tree log [ 368.237929][T16866] BTRFS info (device loop1): turning on sync discard [ 368.237951][T16866] BTRFS info (device loop1): enabling free space tree [ 368.237969][T16866] BTRFS info (device loop1): use zlib compression, level 3 [ 368.338345][T16905] fido_id[16905]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 368.456797][ T5621] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 369.359751][T16919] loop3: detected capacity change from 0 to 32768 [ 369.404653][T16919] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 369.428139][T16938] loop0: detected capacity change from 0 to 2048 [ 369.515275][T16919] XFS (loop3): Ending clean mount [ 369.523305][T16949] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 369.583863][T16919] XFS (loop3): Quotacheck needed: Please wait. [ 369.681756][T16930] loop2: detected capacity change from 0 to 32768 [ 369.716458][T16930] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 369.801434][T16919] XFS (loop3): Quotacheck: Done. [ 369.891195][T16930] XFS (loop2): Ending clean mount [ 369.923941][T16930] XFS (loop2): Quotacheck needed: Please wait. [ 369.988580][ T5609] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 370.062112][T16928] loop1: detected capacity change from 0 to 32768 [ 370.063732][T16928] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4918 (16928) [ 370.086442][T16928] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 370.086474][T16928] BTRFS info (device loop1): using sha256 checksum algorithm [ 370.122342][T16948] loop4: detected capacity change from 0 to 32768 [ 370.132620][T16948] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4926 (16948) [ 370.219401][T16948] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 370.219462][T16948] BTRFS info (device loop4): using crc32c checksum algorithm [ 370.253975][T16930] XFS (loop2): Quotacheck: Done. [ 370.381625][T16928] BTRFS info (device loop1): rebuilding free space tree [ 370.402894][T16948] BTRFS info (device loop4): enabling ssd optimizations [ 370.402952][T16948] BTRFS info (device loop4): turning on flush-on-commit [ 370.403348][T16948] BTRFS info (device loop4): enabling free space tree [ 370.403557][T16948] BTRFS info (device loop4): enabling auto defrag [ 370.403745][T16948] BTRFS info (device loop4): use lzo compression, level 1 [ 370.403968][T16948] BTRFS info (device loop4): max_inline set to 4096 [ 370.405050][ T5612] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 370.693111][ T5610] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 370.959197][T16928] BTRFS info (device loop1): disabling free space tree [ 370.959282][T16928] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 370.959325][T16928] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 371.113672][T16928] BTRFS info (device loop1): setting nodatasum [ 371.120396][T16928] BTRFS info (device loop1): setting nodatacow [ 371.126854][T16928] BTRFS info (device loop1): turning off barriers [ 371.133719][T16928] BTRFS info (device loop1): turning on sync discard [ 371.140753][T16928] BTRFS info (device loop1): force clearing of disk cache [ 371.174865][T16998] loop0: detected capacity change from 0 to 512 [ 371.264350][T16998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.428488][ T5621] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 371.475442][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.531704][T16992] loop3: detected capacity change from 0 to 32768 [ 371.546386][T16992] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4928 (16992) [ 371.665799][T16992] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 371.676103][T16992] BTRFS info (device loop3): using crc32c checksum algorithm [ 371.874003][T16992] BTRFS info (device loop3): turning off barriers [ 371.874058][T16992] BTRFS info (device loop3): disabling tree log [ 371.874089][T16992] BTRFS info (device loop3): turning on sync discard [ 371.874103][T16992] BTRFS info (device loop3): enabling free space tree [ 371.874117][T16992] BTRFS info (device loop3): use zlib compression, level 3 [ 371.909927][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 371.934856][T17018] loop4: detected capacity change from 0 to 4096 [ 372.084294][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 372.095814][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.095892][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.118110][ T10] usb 3-1: config 0 descriptor?? [ 372.127643][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 372.185585][ T5609] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 372.613238][ T10] pwc: recv_control_msg error -71 req 02 val 2b00 [ 372.620246][ T10] pwc: recv_control_msg error -71 req 02 val 2700 [ 372.627211][ T10] pwc: recv_control_msg error -71 req 02 val 2c00 [ 372.634087][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 372.641002][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 372.647797][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 372.654811][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 372.661763][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 372.676921][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 372.684134][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 372.707974][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 372.714923][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 372.722760][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 372.730032][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 372.737036][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 372.744445][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 372.757458][ T10] pwc: Registered as video103. [ 372.783611][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22 [ 372.798280][ T10] usb 3-1: USB disconnect, device number 31 [ 373.504916][T17042] loop3: detected capacity change from 0 to 32768 [ 373.524115][T17042] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 373.551767][T17037] loop4: detected capacity change from 0 to 32768 [ 373.614032][T17042] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 373.634372][T17037] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 373.655054][T17042] XFS (loop3): Starting recovery (logdev: internal) [ 373.704452][T17037] XFS (loop4): Ending clean mount [ 373.775592][T17042] XFS (loop3): Ending recovery (logdev: internal) [ 373.842756][T17045] loop0: detected capacity change from 0 to 32768 [ 373.878818][ T5610] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 374.019956][ T5609] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 374.062737][T17045] JBD2: Ignoring recovery information on journal [ 374.207195][T17045] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 374.275581][T17081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4954'. [ 374.324654][T17081] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4954'. [ 374.347915][T17045] (syz.0.4944,17045,1):ocfs2_check_set_options:1251 ERROR: Invalid heartbeat mount options [ 374.580007][ T25] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 374.606797][ T5611] ocfs2: Unmounting device (7,0) on (node local) [ 374.716776][T17091] loop4: detected capacity change from 0 to 2048 [ 374.731236][ T25] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 374.741827][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.752959][ T25] usb 2-1: config 0 descriptor?? [ 374.761830][ T25] cp210x 2-1:0.0: cp210x converter detected [ 374.777164][T17091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.941999][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.165489][T17099] syz.3.4962 (17099) used greatest stack depth: 15744 bytes left [ 375.208573][ T25] usb 2-1: cp210x converter now attached to ttyUSB0 [ 375.226371][T17109] loop0: detected capacity change from 0 to 512 [ 375.235187][T17109] EXT4-fs (loop0): Test dummy encryption mode enabled [ 375.262725][T17109] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.4966: inode has both inline data and extents flags [ 375.276079][T17109] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 375.278021][T17109] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.4966: couldn't read orphan inode 15 (err -117) [ 375.278087][T17109] loop0: lost filesystem error report for type 5 error -117 [ 375.287387][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 375.287411][ C1] EXT4-fs (loop0): initial error at time 375: ext4_orphan_get:1403: inode 15 [ 375.287440][ C1] EXT4-fs (loop0): last error at time 375: ext4_orphan_get:1408 [ 375.321902][T17109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.359895][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 375.385508][ T25] usb 2-1: USB disconnect, device number 28 [ 375.396687][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 375.414276][ T25] cp210x 2-1:0.0: device disconnected [ 375.449581][T17109] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 375.511396][ T10] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 375.512433][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 375.512467][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 375.512490][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 375.514384][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.514405][ T10] usb 5-1: Product: syz [ 375.514418][ T10] usb 5-1: Manufacturer: syz [ 375.514431][ T10] usb 5-1: SerialNumber: syz [ 375.532028][ T10] usb 5-1: config 0 descriptor?? [ 375.535948][T17105] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 375.536075][T17105] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 375.548840][ T10] usb 5-1: ucan: probing device on interface #0 [ 375.599120][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.716092][T17123] loop0: detected capacity change from 0 to 128 [ 375.747324][ T10] usb 5-1: ucan: device protocol version 20971520 is not supported [ 375.747366][ T10] usb 5-1: ucan: probe failed; try to update the device firmware [ 375.767269][T17123] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 375.804441][T17123] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.4972: No space for directory leaf checksum. Please run e2fsck -D. [ 375.830199][T17123] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.4972: Directory block failed checksum [ 375.896595][ T5611] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 375.975560][ T10] usb 5-1: USB disconnect, device number 24 [ 376.510070][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 376.659984][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 376.660803][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 376.661897][ T10] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 376.661925][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 376.661953][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.681599][ T10] usb 4-1: config 0 descriptor?? [ 376.813881][T17140] loop2: detected capacity change from 0 to 32768 [ 376.854093][T17140] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 376.956890][T17140] XFS (loop2): Ending clean mount [ 376.983440][T17144] loop1: detected capacity change from 0 to 40427 [ 377.009026][T17144] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 377.009083][T17144] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 377.185801][ T10] hid_parser_main: 7 callbacks suppressed [ 377.185860][ T10] wacom 0003:056A:0094.0007: unknown main item tag 0x6 [ 377.207978][ T10] wacom 0003:056A:0094.0007: Using device in hidraw-only mode [ 377.294925][ T10] wacom 0003:056A:0094.0007: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.3-1/input0 [ 377.417409][ T5612] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 377.465550][ T10] usb 4-1: USB disconnect, device number 29 [ 377.539735][T17144] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 377.565992][T17144] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 377.566035][T17144] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 377.819916][ T31] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 377.885653][T17175] loop4: detected capacity change from 0 to 512 [ 377.929189][T17175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.973630][ T31] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 377.974805][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.974851][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 377.974892][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.030209][T17175] EXT4-fs error (device loop4): ext4_lookup:1787: inode #13: comm syz.4.4993: iget: checksum invalid [ 378.179911][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.230780][ T31] dvbdev: DVB: registering new adapter (DEC2000-t) [ 378.377123][ T31] usb 1-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 378.393949][T17188] IPv6: NLM_F_CREATE should be specified when creating new route [ 378.575799][ T31] ttusb_dec_send_command: command bulk message failed: error -71 [ 378.585279][ T31] usb 1-1: USB disconnect, device number 32 [ 378.593907][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.593954][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.723858][T17199] loop3: detected capacity change from 0 to 1024 [ 378.729624][T17199] EXT4-fs: Ignoring removed nomblk_io_submit option [ 378.768077][T17199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.906720][ T5609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.072172][T17212] can0: slcan on ttyS3. [ 379.094513][T17214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5007'. [ 379.094670][T17214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5007'. [ 379.094714][T17214] netlink: 'syz.0.5007': attribute type 18 has an invalid length. [ 379.145302][T17212] can0 (unregistered): slcan off ttyS3. [ 379.702221][T17244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5023'. [ 379.854484][T17250] netlink: 'syz.4.5026': attribute type 12 has an invalid length. [ 379.854531][T17250] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5026'. [ 379.862821][ T31] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 380.022135][ T31] usb 1-1: New USB device found, idVendor=0c16, idProduct=0008, bcdDevice= 0.00 [ 380.037845][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.037893][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.037940][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.037980][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.098481][ T31] usb 1-1: config 0 descriptor?? [ 380.375479][T17256] loop3: detected capacity change from 0 to 32768 [ 380.421399][T17256] JBD2: Ignoring recovery information on journal [ 380.498022][T17256] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 380.537082][ T31] input: HID 0c16:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0C16:0008.0008/input/input23 [ 380.589599][T17256] (syz.3.5028,17256,0):ocfs2_check_set_options:1251 ERROR: Invalid heartbeat mount options [ 380.650346][T17260] loop4: detected capacity change from 0 to 32768 [ 380.680250][T17260] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 380.697087][T17260] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 380.718531][ T31] gyration 0003:0C16:0008.0008: input,hidraw0: USB HID v0.00 Joystick [HID 0c16:0008] on usb-dummy_hcd.0-1/input0 [ 380.755121][ T31] usb 1-1: USB disconnect, device number 33 [ 380.876062][ T5609] ocfs2: Unmounting device (7,3) on (node local) [ 380.958478][ T5610] ocfs2: Unmounting device (7,4) on (node local) [ 381.103637][T17273] fido_id[17273]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 381.275064][T17279] Zero length message leads to an empty skb [ 381.444843][T17288] loop0: detected capacity change from 0 to 1024 [ 381.453888][T17288] EXT4-fs: Ignoring removed oldalloc option [ 381.460620][T17288] EXT4-fs: Ignoring removed oldalloc option [ 381.467916][T17288] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 381.534757][T17288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.593537][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.848232][T17309] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5051'. [ 381.848337][T17309] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5051'. [ 381.930857][T17311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5052'. [ 382.288462][T17332] new mount options do not match the existing superblock, will be ignored [ 382.326209][T17332] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 382.339543][ T31] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 382.433964][T17338] netlink: 'syz.4.5065': attribute type 29 has an invalid length. [ 382.436313][T17338] netlink: 'syz.4.5065': attribute type 29 has an invalid length. [ 382.500613][ T31] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 382.511928][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.511972][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.511996][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 382.512040][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.562887][ T31] usb 2-1: config 0 descriptor?? [ 382.703360][T17350] loop0: detected capacity change from 0 to 512 [ 382.714918][T17350] EXT4-fs: Ignoring removed bh option [ 382.740477][T17350] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 382.740534][T17350] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 382.740550][T17350] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.5071: Corrupt directory, running e2fsck is recommended [ 382.770006][T17350] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 382.770117][T17350] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.5071: corrupted in-inode xattr: e_name out of bounds [ 382.770143][T17350] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 382.775341][T17350] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.5071: couldn't read orphan inode 15 (err -117) [ 382.775375][T17350] loop0: lost filesystem error report for type 5 error -117 [ 382.781863][T17350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.851489][T17353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5072'. [ 382.873313][T17353] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 382.958404][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.033993][ T31] plantronics 0003:047F:FFFF.0009: report_id 0 is invalid [ 383.044059][ T31] plantronics 0003:047F:FFFF.0009: item 0 2 1 8 parsing failed [ 383.056296][ T31] plantronics 0003:047F:FFFF.0009: parse failed [ 383.065444][ T31] plantronics 0003:047F:FFFF.0009: probe with driver plantronics failed with error -22 [ 383.219378][T17364] loop2: detected capacity change from 0 to 1024 [ 383.229273][T17364] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 383.241942][ T1907] usb 2-1: USB disconnect, device number 29 [ 383.321837][T17364] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 2: comm syz.2.5077: lblock 2 mapped to illegal pblock 2 (length 1) [ 383.321915][T17364] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 383.322293][T17364] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 383.322335][T17364] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 48: comm syz.2.5077: lblock 0 mapped to illegal pblock 48 (length 1) [ 383.322362][T17364] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 383.329910][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 383.329936][ C0] EXT4-fs (loop2): initial error at time 383: ext4_map_blocks:790: inode 3: block 2 [ 383.329971][ C0] EXT4-fs (loop2): last error at time 383: ext4_map_blocks:790: inode 3: block 48 [ 383.336977][T17364] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 383.337001][T17364] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.5077: Failed to acquire dquot type 0 [ 383.337024][T17364] loop2: lost filesystem error report for type 5 error -117 [ 383.338606][T17364] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 383.338626][T17364] loop2: lost filesystem error report for type 5 error -117 [ 383.348753][T17364] EXT4-fs error (device loop2): ext4_evict_inode:269: inode #11: comm syz.2.5077: mark_inode_dirty error [ 383.348786][T17364] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 383.349054][T17364] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 383.349140][T17364] EXT4-fs (loop2): 1 orphan inode deleted [ 383.350089][ T12] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 383.350120][ T12] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 383.413285][T17364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.415976][ T12] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 383.416018][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 0 [ 383.587367][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.614235][ T5612] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 383.614297][ T5612] loop2: lost filesystem error report for type 5 error -117 [ 383.633440][ T5612] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 383.653452][ T5612] loop2: lost filesystem error report for type 5 error -117 [ 383.658054][ T5612] EXT4-fs error (device loop2): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 383.678525][ T5612] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 383.690569][ T5612] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 383.715359][ T5612] loop2: lost filesystem error report for type 5 error -117 [ 383.992506][T17387] loop3: detected capacity change from 0 to 256 [ 384.017097][T17387] exfat: Deprecated parameter 'utf8' [ 384.017223][T17387] exfat: Deprecated parameter 'namecase' [ 384.023315][T17344] loop4: detected capacity change from 0 to 40427 [ 384.038582][T17344] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 384.047116][T17344] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 384.048260][T17387] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 384.052029][T17344] F2FS-fs (loop4): invalid crc value [ 384.170465][ T31] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 384.289330][T17380] loop0: detected capacity change from 0 to 32768 [ 384.332158][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 384.338284][ T31] usb 3-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 384.352439][ T31] usb 3-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 384.352501][ T31] usb 3-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 384.352538][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 384.352573][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.396390][ T31] usb 3-1: config 0 descriptor?? [ 384.466512][T17344] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 384.488318][T17344] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 384.488360][T17344] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 384.562058][ T5622] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 384.728229][T17404] loop3: detected capacity change from 0 to 128 [ 384.736511][ T5622] usb 2-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 384.747354][ T5622] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 384.747386][ T5622] usb 2-1: config 0 interface 0 has no altsetting 0 [ 384.747418][ T5622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.779565][ T5622] usb 2-1: config 0 descriptor?? [ 384.859148][ T31] wacom 0003:056A:0318.000A: ignoring exceeding usage max [ 384.876408][ T31] wacom 0003:056A:0318.000A: unknown main item tag 0x0 [ 384.876483][ T31] wacom 0003:056A:0318.000A: unknown main item tag 0x0 [ 384.876537][ T31] wacom 0003:056A:0318.000A: unknown main item tag 0x0 [ 384.876588][ T31] wacom 0003:056A:0318.000A: unknown main item tag 0x0 [ 384.876619][ T31] wacom 0003:056A:0318.000A: unknown main item tag 0x0 [ 384.876643][ T31] wacom 0003:056A:0318.000A: unknown main item tag 0x0 [ 384.876668][ T31] wacom 0003:056A:0318.000A: unknown main item tag 0x0 [ 384.876692][ T31] wacom 0003:056A:0318.000A: unknown main item tag 0x0 [ 384.876742][ T31] wacom 0003:056A:0318.000A: unknown main item tag 0x0 [ 384.876776][ T31] wacom 0003:056A:0318.000A: unknown main item tag 0x0 [ 384.960491][ T25] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 385.089121][ T1907] usb 3-1: USB disconnect, device number 32 [ 385.111383][ T25] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 385.123669][ T25] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 385.123711][ T25] usb 1-1: config 0 has no interface number 0 [ 385.123786][ T25] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 385.145579][T17406] loop3: detected capacity change from 0 to 2048 [ 385.167387][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.176567][ T25] usb 1-1: Product: syz [ 385.176609][ T25] usb 1-1: Manufacturer: syz [ 385.176625][ T25] usb 1-1: SerialNumber: syz [ 385.183874][T17406] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 385.206652][ T25] usb 1-1: config 0 descriptor?? [ 385.245000][ T25] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 385.258770][ T5622] chicony 0003:04F2:1421.000B: global environment stack underflow [ 385.258845][ T5622] chicony 0003:04F2:1421.000B: item 0 2 1 11 parsing failed [ 385.276374][ T5622] chicony 0003:04F2:1421.000B: Chicony hid parse failed: -22 [ 385.276497][ T5622] chicony 0003:04F2:1421.000B: probe with driver chicony failed with error -22 [ 385.455659][ T1907] usb 1-1: USB disconnect, device number 34 [ 385.466421][ T1907] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 385.493500][ T5735] usb 2-1: USB disconnect, device number 30 [ 385.586173][T17415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5099'. [ 385.836583][T17425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5104'. [ 386.496199][T17445] loop1: detected capacity change from 0 to 512 [ 386.499382][T17445] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 386.503632][T17445] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 386.503758][T17445] System zones: 1-12 [ 386.523248][T17445] EXT4-fs (loop1): 1 truncate cleaned up [ 386.530219][T17445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.642297][T17429] loop3: detected capacity change from 0 to 32768 [ 386.692234][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.702875][T17429] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 386.873724][T17429] XFS (loop3): Ending clean mount [ 386.886232][T17429] XFS (loop3): Quotacheck needed: Please wait. [ 387.022121][T17429] XFS (loop3): Quotacheck: Done. [ 387.118864][T17462] loop0: detected capacity change from 0 to 1024 [ 387.143582][ T5609] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 387.366171][T17471] loop0: detected capacity change from 0 to 4096 [ 387.371083][T17472] loop2: detected capacity change from 0 to 128 [ 387.422999][T17472] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 387.423128][T17472] System zones: 1-3, 19-19, 35-36 [ 387.429890][T17472] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 387.501023][T17474] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 387.552406][ T5622] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 387.555071][ T5612] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 387.685669][T17471] NILFS (loop0): error -22 preparing GC: cannot read source blocks [ 387.731706][ T5622] usb 2-1: Using ep0 maxpacket: 16 [ 387.734873][ T5622] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 387.740507][ T5622] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 387.740531][ T5622] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.740548][ T5622] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 387.750571][ T5622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.750597][ T5622] usb 2-1: Product: syz [ 387.750611][ T5622] usb 2-1: Manufacturer: syz [ 387.750624][ T5622] usb 2-1: SerialNumber: syz [ 387.824392][ T5622] usb 2-1: 0:2 : does not exist [ 387.910932][T17482] loop3: detected capacity change from 0 to 128 [ 388.176939][ T1907] libceph: connect (1)[c::]:6789 error -101 [ 388.191385][ T25] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 388.205498][ T1907] libceph: mon0 (1)[c::]:6789 connect error [ 388.245119][ T1907] libceph: connect (1)[c::]:6789 error -101 [ 388.251694][ T1907] libceph: mon0 (1)[c::]:6789 connect error [ 388.350956][ T25] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 388.352316][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.352346][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.352405][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.361596][ T25] usb 3-1: config 0 descriptor?? [ 388.420873][ T5622] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 388.478826][ T5622] usb 2-1: USB disconnect, device number 31 [ 388.513337][ T1907] libceph: connect (1)[c::]:6789 error -101 [ 388.531034][ T1907] libceph: mon0 (1)[c::]:6789 connect error [ 388.753732][T17496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5132'. [ 388.787183][ T25] input: HID 1020:0006 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:1020:0006.000C/input/input27 [ 388.842791][T17498] loop3: detected capacity change from 0 to 2048 [ 388.858717][T17498] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 388.972227][T17490] ceph: No mds server is up or the cluster is laggy [ 389.050181][ T1907] libceph: connect (1)[c::]:6789 error -101 [ 389.050354][ T1907] libceph: mon0 (1)[c::]:6789 connect error [ 389.066829][ T25] belkin 0003:1020:0006.000C: input,hidraw0: USB HID v0.00 Joystick [HID 1020:0006] on usb-dummy_hcd.2-1/input0 [ 389.123694][ T25] usb 3-1: USB disconnect, device number 33 [ 389.324942][T17503] fido_id[17503]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 389.455787][T17508] loop1: detected capacity change from 0 to 128 [ 390.025064][T17529] loop1: detected capacity change from 0 to 4096 [ 390.051329][T17529] NILFS (loop1): invalid segment: Checksum error in segment payload [ 390.051359][T17529] NILFS (loop1): trying rollback from an earlier position [ 390.083882][T17529] NILFS (loop1): recovery complete [ 390.098141][T17536] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 390.239691][T17542] loop4: detected capacity change from 0 to 2048 [ 390.280931][T17542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.298159][T17529] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 3348 already freed [ 390.321206][T17529] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 390.333683][ T30] audit: type=1800 audit(390.290:202): pid=17542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5153" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 390.408212][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.743768][T17559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5159'. [ 390.912278][T17534] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5149 (17534) [ 390.950670][T17534] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 390.950705][T17534] BTRFS info (device loop2): using sha256 checksum algorithm [ 391.061435][T17534] BTRFS info (device loop2): enabling ssd optimizations [ 391.061488][T17534] BTRFS info (device loop2): turning on async discard [ 391.061504][T17534] BTRFS info (device loop2): enabling free space tree [ 391.189277][T17587] Attempt to read inode for relocated directory [ 391.216106][T17589] MINIX-fs: deleted inode referenced: 6 [ 391.229392][T17589] MINIX-fs: deleted inode referenced: 6 [ 391.295955][ T5612] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 391.589343][T17596] set_capacity_and_notify: 4 callbacks suppressed [ 391.598982][T17596] loop4: detected capacity change from 0 to 4096 [ 391.658736][T17603] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 391.678598][T17602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5174'. [ 391.678638][T17602] netlink: 'syz.3.5174': attribute type 1 has an invalid length. [ 391.684217][T17596] NILFS (loop4): cannot delete checkpoints: invalid range [21543, 1792) [ 391.684244][T17596] NILFS (loop4): error -22 preparing GC: cannot delete checkpoints [ 391.813689][T17605] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5175'. [ 391.823284][T17605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5175'. [ 392.146408][T17613] ubi31: attaching mtd0 [ 392.202638][T17619] loop1: detected capacity change from 0 to 2048 [ 392.270943][T17619] loop1: p1 p2 p3 [ 392.270943][T17619] p1: [ 392.306089][T17619] loop1: p2 size 458752 extends beyond EOD, truncated [ 392.315188][T17619] loop1: p3 start 65280 is beyond EOD, truncated [ 392.449648][ T5613] udevd[5613]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 392.474611][ T6069] udevd[6069]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 392.607185][T17634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5187'. [ 392.669701][T17595] loop0: detected capacity change from 0 to 32768 [ 392.759503][T17636] loop2: detected capacity change from 0 to 128 [ 392.784732][T17595] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 392.826827][T17636] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 392.913797][T17595] XFS (loop0): Ending clean mount [ 393.101411][ T5611] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 393.284079][T17654] loop1: detected capacity change from 0 to 256 [ 393.308081][T17656] loop0: detected capacity change from 0 to 8 [ 393.329524][ T5622] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 393.494442][ T5622] usb 3-1: Using ep0 maxpacket: 16 [ 393.494942][T17656] SQUASHFS error: Unable to read directory block [1d0:74] [ 393.495956][ T5622] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 393.497034][ T5622] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 393.497063][ T5622] usb 3-1: config 0 interface 0 has no altsetting 0 [ 393.497094][ T5622] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.503847][ T5622] usb 3-1: config 0 descriptor?? [ 393.680161][ T1907] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 393.689704][T17663] netlink: 'syz.0.5199': attribute type 1 has an invalid length. [ 393.700487][T17663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.839522][ T1907] usb 4-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 393.840756][ T1907] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 393.840785][ T1907] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 393.840809][ T1907] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 393.840833][ T1907] usb 4-1: config 0 interface 0 has no altsetting 0 [ 393.840862][ T1907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.846489][ T1907] usb 4-1: config 0 descriptor?? [ 393.848597][T17659] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 393.942296][ T5622] hid_parser_main: 13 callbacks suppressed [ 393.948348][ T5622] wacom 0003:056A:0094.000D: unknown main item tag 0x6 [ 393.957631][ T5622] wacom 0003:056A:0094.000D: Using device in hidraw-only mode [ 393.982867][ T5622] wacom 0003:056A:0094.000D: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.2-1/input0 [ 394.062667][ T31] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 394.153415][ T5622] usb 3-1: USB disconnect, device number 34 [ 394.225214][ T31] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 394.239297][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.261798][ T31] usb 2-1: config 0 descriptor?? [ 394.271677][ T31] cp210x 2-1:0.0: cp210x converter detected [ 394.301178][ T1907] kye 0003:0458:5017.000E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 394.301837][ T1907] kye 0003:0458:5017.000E: item 0 1 0 8 parsing failed [ 394.305955][ T1907] kye 0003:0458:5017.000E: parse failed [ 394.306022][ T1907] kye 0003:0458:5017.000E: probe with driver kye failed with error -22 [ 394.510846][ T10] usb 4-1: USB disconnect, device number 30 [ 394.883544][ T31] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 394.883618][ T31] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 394.906819][ T31] usb 2-1: cp210x converter now attached to ttyUSB0 [ 394.931665][ T31] usb 2-1: USB disconnect, device number 32 [ 394.953450][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 394.953998][ T31] cp210x 2-1:0.0: device disconnected [ 395.022652][T17691] loop4: detected capacity change from 0 to 32768 [ 395.032360][T17691] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5212 (17691) [ 395.050452][ T5622] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 395.065166][T17691] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 395.065215][T17691] BTRFS info (device loop4): using crc32c checksum algorithm [ 395.118925][T17704] loop0: detected capacity change from 0 to 1024 [ 395.198024][T17691] BTRFS info (device loop4): enabling ssd optimizations [ 395.206454][ T5622] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 395.218021][ T5622] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.218068][ T5622] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.218114][ T5622] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 395.218166][ T5622] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.230076][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 395.271837][T17691] BTRFS info (device loop4): turning on flush-on-commit [ 395.281119][T17691] BTRFS info (device loop4): enabling free space tree [ 395.289652][T17691] BTRFS info (device loop4): enabling auto defrag [ 395.296842][T17691] BTRFS info (device loop4): use lzo compression, level 1 [ 395.304642][T17691] BTRFS info (device loop4): max_inline set to 4096 [ 395.327520][ T5622] usb 3-1: config 0 descriptor?? [ 395.371678][T17704] [ 395.374056][T17704] ====================================================== [ 395.381081][T17704] WARNING: possible circular locking dependency detected [ 395.388121][T17704] syzkaller #0 Tainted: G L [ 395.394104][T17704] ------------------------------------------------------ [ 395.401172][T17704] syz.0.5218/17704 is trying to acquire lock: [ 395.407244][T17704] ffff8880267288f0 (&sbi->alloc_mutex){+.+.}-{4:4}, at: hfsplus_block_allocate+0xa9/0xd30 [ 395.417303][T17704] [ 395.417303][T17704] but task is already holding lock: [ 395.424673][T17704] ffff88805711d240 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x21c/0x1df0 [ 395.435733][T17704] [ 395.435733][T17704] which lock already depends on the new lock. [ 395.435733][T17704] [ 395.446475][T17704] [ 395.446475][T17704] the existing dependency chain (in reverse order) is: [ 395.455480][T17704] [ 395.455480][T17704] -> #1 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}: [ 395.464508][T17704] __mutex_lock+0x19c/0x15a0 [ 395.469695][T17704] hfsplus_get_block+0x391/0x1610 [ 395.475242][T17704] block_read_full_folio+0x2db/0x8d0 [ 395.481048][T17704] filemap_read_folio+0x12c/0x3a0 [ 395.486591][T17704] do_read_cache_folio+0x354/0x590 [ 395.492217][T17704] read_cache_page+0x5d/0x170 [ 395.497407][T17704] hfsplus_block_allocate+0xf7/0xd30 [ 395.503209][T17704] hfsplus_file_extend+0xb77/0x1df0 [ 395.508942][T17704] hfsplus_get_block+0x41f/0x1610 [ 395.514498][T17704] __block_write_begin_int+0x6c2/0x1900 [ 395.520565][T17704] cont_write_begin+0x71b/0xac0 [ 395.525929][T17704] hfsplus_write_begin+0x126/0x1e0 [ 395.531556][T17704] page_symlink+0x27a/0x440 [ 395.536570][T17704] hfsplus_symlink+0xd3/0x390 [ 395.541759][T17704] vfs_symlink+0x18b/0x330 [ 395.546716][T17704] filename_symlinkat+0x1cd/0x410 [ 395.552260][T17704] __se_sys_symlink+0x4d/0x2b0 [ 395.557538][T17704] do_syscall_64+0x166/0x520 [ 395.562728][T17704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.569138][T17704] [ 395.569138][T17704] -> #0 (&sbi->alloc_mutex){+.+.}-{4:4}: [ 395.576946][T17704] __lock_acquire+0x15ff/0x2e50 [ 395.582314][T17704] lock_acquire+0x115/0x350 [ 395.587326][T17704] __mutex_lock+0x19c/0x15a0 [ 395.592428][T17704] hfsplus_block_allocate+0xa9/0xd30 [ 395.598226][T17704] hfsplus_file_extend+0xb77/0x1df0 [ 395.603940][T17704] hfsplus_get_block+0x41f/0x1610 [ 395.609487][T17704] __block_write_begin_int+0x6c2/0x1900 [ 395.615544][T17704] cont_write_begin+0x71b/0xac0 [ 395.620907][T17704] hfsplus_write_begin+0x126/0x1e0 [ 395.626540][T17704] cont_write_begin+0x2d6/0xac0 [ 395.631922][T17704] hfsplus_write_begin+0x126/0x1e0 [ 395.637560][T17704] generic_cont_expand_simple+0x146/0x210 [ 395.643803][T17704] hfsplus_setattr+0x15f/0x260 [ 395.649091][T17704] notify_change+0xbba/0xea0 [ 395.654191][T17704] do_truncate+0x1c2/0x250 [ 395.659125][T17704] vfs_truncate+0x4b4/0x540 [ 395.664206][T17704] ksys_truncate+0xf3/0x1c0 [ 395.669223][T17704] __x64_sys_truncate+0x5b/0x70 [ 395.674588][T17704] do_syscall_64+0x166/0x520 [ 395.679688][T17704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.686091][T17704] [ 395.686091][T17704] other info that might help us debug this: [ 395.686091][T17704] [ 395.696310][T17704] Possible unsafe locking scenario: [ 395.696310][T17704] [ 395.703774][T17704] CPU0 CPU1 [ 395.709124][T17704] ---- ---- [ 395.714471][T17704] lock(&HFSPLUS_I(inode)->extents_lock); [ 395.720275][T17704] lock(&sbi->alloc_mutex); [ 395.727372][T17704] lock(&HFSPLUS_I(inode)->extents_lock); [ 395.735683][T17704] lock(&sbi->alloc_mutex); [ 395.740261][T17704] [ 395.740261][T17704] *** DEADLOCK *** [ 395.740261][T17704] [ 395.748389][T17704] locks held by syz.0.5218/17704: 3, last CPU#1: [ 395.754702][T17704] #0: ffff888068936460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 395.763929][T17704] #1: ffff88805711d3d8 (&sb->s_type->i_mutex_key#41){+.+.}-{4:4}, at: do_truncate+0x18f/0x250 [ 395.774281][T17704] #2: ffff88805711d240 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x21c/0x1df0 [ 395.785784][T17704] [ 395.785784][T17704] stack backtrace: [ 395.791677][T17704] CPU: 1 UID: 0 PID: 17704 Comm: syz.0.5218 Tainted: G L syzkaller #0 PREEMPT(full) [ 395.802603][T17704] Tainted: [L]=SOFTLOCKUP [ 395.806911][T17704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 395.816963][T17704] Call Trace: [ 395.820237][T17704] [ 395.823156][T17704] dump_stack_lvl+0xe8/0x150 [ 395.827742][T17704] print_circular_bug+0x2e2/0x300 [ 395.832761][T17704] check_noncircular+0x12f/0x150 [ 395.837693][T17704] __lock_acquire+0x15ff/0x2e50 [ 395.842536][T17704] ? check_path+0x21/0x40 [ 395.846862][T17704] ? add_lock_to_list+0xc7/0x100 [ 395.851790][T17704] ? lockdep_unlock+0x5c/0xd0 [ 395.856450][T17704] ? __lock_acquire+0x14b9/0x2e50 [ 395.861466][T17704] lock_acquire+0x115/0x350 [ 395.865963][T17704] ? hfsplus_block_allocate+0xa9/0xd30 [ 395.871416][T17704] __mutex_lock+0x19c/0x15a0 [ 395.876004][T17704] ? hfsplus_block_allocate+0xa9/0xd30 [ 395.881460][T17704] ? __pfx___mutex_trylock_common+0x10/0x10 [ 395.887354][T17704] ? hfsplus_block_allocate+0xa9/0xd30 [ 395.892801][T17704] ? trace_contention_end+0x3d/0x140 [ 395.898079][T17704] ? __pfx___mutex_lock+0x10/0x10 [ 395.903093][T17704] ? __mutex_lock+0x30a/0x15a0 [ 395.907855][T17704] ? is_bpf_text_address+0x292/0x2b0 [ 395.913133][T17704] hfsplus_block_allocate+0xa9/0xd30 [ 395.918412][T17704] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 395.924553][T17704] ? arch_stack_walk+0xfb/0x150 [ 395.929403][T17704] hfsplus_file_extend+0xb77/0x1df0 [ 395.934600][T17704] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 395.940229][T17704] ? add_lock_to_list+0xc7/0x100 [ 395.945159][T17704] ? lockdep_unlock+0x5c/0xd0 [ 395.949817][T17704] ? __lock_acquire+0x14b9/0x2e50 [ 395.954830][T17704] ? irqentry_exit+0x218/0x910 [ 395.959658][T17704] ? irqentry_exit+0x218/0x910 [ 395.964407][T17704] ? trace_irq_disable+0x3b/0x140 [ 395.969422][T17704] hfsplus_get_block+0x41f/0x1610 [ 395.974453][T17704] ? __pfx_hfsplus_get_block+0x10/0x10 [ 395.979937][T17704] ? do_raw_spin_unlock+0xf5/0x200 [ 395.985045][T17704] ? _raw_spin_unlock+0x28/0x50 [ 395.989946][T17704] ? create_empty_buffers+0x460/0x520 [ 395.995314][T17704] __block_write_begin_int+0x6c2/0x1900 [ 396.000858][T17704] ? __pfx_hfsplus_get_block+0x10/0x10 [ 396.006312][T17704] ? __pfx___block_write_begin_int+0x10/0x10 [ 396.012284][T17704] cont_write_begin+0x71b/0xac0 [ 396.017132][T17704] ? stack_trace_save+0xa9/0x100 [ 396.022057][T17704] ? __pfx_stack_trace_save+0x10/0x10 [ 396.027443][T17704] ? __pfx_hlock_conflict+0x10/0x10 [ 396.032640][T17704] ? __pfx_cont_write_begin+0x10/0x10 [ 396.038009][T17704] ? check_path+0x21/0x40 [ 396.042333][T17704] hfsplus_write_begin+0x126/0x1e0 [ 396.047784][T17704] ? __pfx_hfsplus_get_block+0x10/0x10 [ 396.053239][T17704] cont_write_begin+0x2d6/0xac0 [ 396.058086][T17704] ? __pfx_cont_write_begin+0x10/0x10 [ 396.063457][T17704] hfsplus_write_begin+0x126/0x1e0 [ 396.068568][T17704] ? __pfx_hfsplus_get_block+0x10/0x10 [ 396.074022][T17704] generic_cont_expand_simple+0x146/0x210 [ 396.079755][T17704] ? __pfx_inode_dio_wait+0x10/0x10 [ 396.084961][T17704] ? __pfx_generic_cont_expand_simple+0x10/0x10 [ 396.091198][T17704] ? current_time+0x25a/0x380 [ 396.095866][T17704] ? __pfx_current_time+0x10/0x10 [ 396.100879][T17704] hfsplus_setattr+0x15f/0x260 [ 396.105639][T17704] ? __pfx_hfsplus_setattr+0x10/0x10 [ 396.110937][T17704] notify_change+0xbba/0xea0 [ 396.115536][T17704] do_truncate+0x1c2/0x250 [ 396.119952][T17704] ? __pfx_do_truncate+0x10/0x10 [ 396.124910][T17704] ? apparmor_path_truncate+0x230/0x2c0 [ 396.130551][T17704] ? ima_iint_find+0x53/0x110 [ 396.135316][T17704] ? ima_path_truncate+0x13c/0x190 [ 396.140465][T17704] vfs_truncate+0x4b4/0x540 [ 396.145024][T17704] ? __pfx_vfs_truncate+0x10/0x10 [ 396.150053][T17704] ? do_getname+0x151/0x250 [ 396.154564][T17704] ksys_truncate+0xf3/0x1c0 [ 396.159064][T17704] ? __pfx_ksys_truncate+0x10/0x10 [ 396.164199][T17704] __x64_sys_truncate+0x5b/0x70 [ 396.169047][T17704] do_syscall_64+0x166/0x520 [ 396.173633][T17704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.179688][T17704] ? clear_bhb_loop+0x70/0xc0 [ 396.184353][T17704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.190235][T17704] RIP: 0033:0x7f5512f9e159 [ 396.194642][T17704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.214238][T17704] RSP: 002b:00007f5513e64028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 396.222643][T17704] RAX: ffffffffffffffda RBX: 00007f5513225fa0 RCX: 00007f5512f9e159 [ 396.230602][T17704] RDX: 0000000000000000 RSI: 0000000000040005 RDI: 0000200000000100 [ 396.238562][T17704] RBP: 00007f5513035024 R08: 0000000000000000 R09: 0000000000000000 [ 396.246518][T17704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.254478][T17704] R13: 00007f5513226038 R14: 00007f5513225fa0 R15: 00007ffdcc06cfe8 [ 396.262445][T17704] [ 396.299520][ T5610] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 396.537876][ T5622] ortek 0003:1223:3F07.000F: unknown main item tag 0x0 [ 396.537925][ T5622] ortek 0003:1223:3F07.000F: unknown main item tag 0x0 [ 396.545684][ T5622] ortek 0003:1223:3F07.000F: unknown main item tag 0x0 [ 396.545718][ T5622] ortek 0003:1223:3F07.000F: unknown main item tag 0x0 [ 396.545742][ T5622] ortek 0003:1223:3F07.000F: unknown main item tag 0x0 [ 396.545766][ T5622] ortek 0003:1223:3F07.000F: unknown main item tag 0x0 [ 396.545790][ T5622] ortek 0003:1223:3F07.000F: unknown main item tag 0x0 [ 396.545813][ T5622] ortek 0003:1223:3F07.000F: unknown main item tag 0x0 [ 396.545837][ T5622] ortek 0003:1223:3F07.000F: unknown main item tag 0x0 [ 396.606971][ T5622] ortek 0003:1223:3F07.000F: hidraw0: USB HID v0.00 Device [HID 1223:3f07] on usb-dummy_hcd.2-1/input0 [ 396.743953][ T1907] usb 3-1: USB disconnect, device number 35