last executing test programs: 1m34.091792287s ago: executing program 5 (id=492): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0d0000000100e2", 0x7) 1m33.751683294s ago: executing program 5 (id=497): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/79, 0x4f) 1m33.289486699s ago: executing program 5 (id=502): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x14, &(0x7f0000000000)="11106e00", 0x4) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000040)=@phonet={0x23, 0xd0, 0x1, 0x5}, 0x80, 0x0}}], 0x1, 0x100408c5) 1m32.672641089s ago: executing program 5 (id=509): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000000500)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c757466382c756d61736b3d30303030303030303030303030303030303032313632362c696f636861727365743d63703935302c646973636172642c616c6c6f775f7574696d653d3030303030303030352c6572726f72733d72656d6f756e742d726f2c646973636172642c00d50194377d24b5953951fbb0e6d2204f459a2129e54509e955e3ac3e9dd76061aeb341a8ae53564e806289fad8cab1be25d1de2b9d46be57d2e9c2ded432413ab147de643c400dba4f15a90c962bcd8d805d7d5f57"], 0x5, 0x1531, &(0x7f0000002f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 1m31.839185949s ago: executing program 5 (id=514): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x28108c0, &(0x7f0000006980)=ANY=[@ANYBLOB="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"], 0xfe, 0x61f6, &(0x7f000000cdc0)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 1m31.117062328s ago: executing program 5 (id=521): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000840) 1m30.489926633s ago: executing program 32 (id=521): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000840) 12.671852493s ago: executing program 0 (id=1165): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4451, &(0x7f0000008900)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) 9.433150311s ago: executing program 0 (id=1180): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0xffffffffffffffff) 7.760411385s ago: executing program 0 (id=1190): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b05000009058d67c0002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_usb_ep_write(r0, 0x8d, 0x8, &(0x7f0000000000)="d021ed84d3c1ee4d") 5.401365838s ago: executing program 0 (id=1209): io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 4.125176747s ago: executing program 2 (id=1220): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 3.808666943s ago: executing program 2 (id=1223): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) 3.517119096s ago: executing program 6 (id=1225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040050) 3.347497576s ago: executing program 3 (id=1227): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058ff0b, &(0x7f0000000200)=@mmap={0xfffffffe, 0x1, 0x4, 0x10, 0x200, {}, {0x5, 0x8, 0xe, 0x9f, 0x0, 0x7b}, 0xabdb, 0x1, {}, 0xbaa}) 3.344084727s ago: executing program 0 (id=1228): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [], {0x14, 0x10}}, 0x28}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) 3.153357276s ago: executing program 6 (id=1230): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000050000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r0}, 0xc) 3.024563084s ago: executing program 3 (id=1231): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x2, 0x3, 0x4, 0x0, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) 2.969203562s ago: executing program 4 (id=1232): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x3, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000000300)=""/56}, 0x20) 2.855097191s ago: executing program 6 (id=1233): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file2\x00', 0x3000000, &(0x7f0000000180)={[{@umask={'umask', 0x3d, 0xe}}, {@creator={'creator', 0x3d, "851aa049"}}, {}, {@part={'part', 0x3d, 0x5}}, {@part={'part', 0x3d, 0x6}}, {@force}, {}, {@nls={'nls', 0x3d, 'cp861'}}]}, 0x44, 0x70b, &(0x7f0000000300)="$eJzs3U1sHGcZAOB31uu1N5XcbZu0BSHFatQIGkhsLyVBQiJUCHyoUCQuvS6J01heu5HtIidCZAsUuMEJ5dBDK2QOPaEekIo4IMoZCYkryj0S94gDi2Z2dr0/9nq3/kvT55Fm55uZ7+edNzPf/sXaAD63Ft+IyUYksXjh9a10+8F2tf5gu7raLkfEVEQUIoqtVSRrEcknEVejtcQX0p15d8le47z68OP3zt//sNraKuZLVr8wrN2O5pARGvkSsxExka/HVNyrv+vx2kB/98bqOunEnSbsXDtxcNKaAxrjNB/hvgUed/ciJiZ32V+JOBUR0/nrgMhnh8Ixh3foxprlAAAA4PE0sV+Fpx/Fo9iKmeMJBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4MSes3A5N8KbTLs5G0f/+/lO9LlUonHO9wX93n+Ls3jykQAAAAAAAAABjR98eq/VH+xf3ZR/EotmKmvb+ZZN/5v5RtnM4en4q3YyOWYj0uxlbUYjM2Yz3mIyZnujosbdU2N9fnB1v+LtKWzWbzXt5yISIqAy0X9gi0MNZpAQAAAAAAAMDn1c9iMWZOOggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiWREy0Vtlyul2uRKEYEdMRUUrrNSL+0i5/lv31pAMAAACAo1fO1zPJ/1qFZpK9538+e98/HW/HWmzGcmxGPZbiRiQfRP6uv/DPRrX+YLu6mi6DHX/nP2PFkfUYERPxzh4jz2U1znRaLMb34odxIWbjWqzHcvw4arEZSzEb5fQkohZJVMqtTy8q7Th3j/dqz9a1/tjO9m2/mEVSjpuxnMV2Ma6XovWxSXYO6Zgvdo32p1JE34jvpNlJvp0bMUc3uv69fpt/LpNrPj1iH0ejkp35ZCcjc2nu82w8Mzz3Y14n/SPNR6HzGdTpnVHSzf6R2jn/0Tg5P9VaTacPv+zN+WEb86O0/kwsRCG/+iKe78357ZfvP9vb+Cv/+tu1W4W1lVs3Ny4c4SkdxOx+FSbbhf5MVLsy8cLwqy/PRD3NRGP0TEz275geteXRKuXZyKaiEWfL72alWrzUdQm+FTdiKS7HXMzHlZiLb8ZCVDtXWLqc6clrsbram5PsXisMzm/lIcGf+3JXpV/tU/l4pXl5piuv3TNdJb8csj1XfxNzXVffs8OvvrGfBdLxv5iX0zF+3nnGeRxUsiz1zs3t6J4bnokPmunjRn1tZf1W7faI453P1+lt+27v3Pz70aPuf3Y/DOn1ks64xWwry0m5fb2kx57rRNubr1L+jUurXWHg2JnOsUrMxHL8YM87tZS/hhvsqXXshe5j/96ZOUv565v2sZ5XOfFW1LNXIX32naoBOGanXjlVKj8s/6P8fvkX5Vvl16dfm7oy9aVSTP69+OeJPxb+UPhW8kq8Hz+NmZOOFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAngQbd+6u1Or1pfVOIab79xy0UNpzrOGFKOxbZ/up0TqMSsTwsZK8UNq9zlMRcchpObrCy78+UPNy/5m2f2HpoIF9FBFD6pQOfO7J2NfY2IU0D4fSYbPZSmq2pzkxRvNiu9XudYqxMR0rtaS4yx03tXMXRGWlVv9vs6d5ObpuGeAJd2lz9faljTt3v7a8Wntz6c2ltYUrl69crn5j/uuXbi7Xl+ZajycdJXAUNu7cndhl98Av3QIAAAAAAAAAAACPj/x//29+6j9mKO5Tp7S+sfvIZ4/7VAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDPqMU3YrIRSczPXZxLtx9sV+vp0i7v1CxGRCEikp9EJJ9EXI3WEpWu7pK9xnn14cfvnb//YXWnr2K7fmFYu9E08iVmI2IiX+9vapduBvu73tVf41OFl3TOME3YuXbi4KT9PwAA//+FhvXF") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x9) truncate(&(0x7f00000005c0)='./file1\x00', 0x6e3) 2.835292871s ago: executing program 0 (id=1234): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008d1e502039102021a7020102030109021200f69dbfc0000904"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)=ANY=[], 0x0) 2.674428461s ago: executing program 4 (id=1235): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x7) ioctl$TCSETS(r0, 0x8926, 0x0) 2.595631539s ago: executing program 3 (id=1237): r0 = socket$can_j1939(0x1d, 0x2, 0x7) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.494746502s ago: executing program 2 (id=1238): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000300)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x1) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x2000}) 2.329732084s ago: executing program 3 (id=1239): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a05250700000000000109022400010000000909040004810300000009210000280122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x32, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) 2.329490491s ago: executing program 6 (id=1240): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20004080) 2.081584522s ago: executing program 2 (id=1242): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0xfffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f00000000c0)=0x10) getpeername(r0, 0x0, 0x0) 2.081440007s ago: executing program 4 (id=1243): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) 1.848755534s ago: executing program 6 (id=1245): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)) 1.836586035s ago: executing program 4 (id=1246): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000080)=0xa931, 0x4) sendmmsg$inet(r0, &(0x7f0000002980)=[{{&(0x7f00000006c0)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x0) 1.788934998s ago: executing program 1 (id=1247): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000) 1.503962258s ago: executing program 4 (id=1248): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.503586074s ago: executing program 6 (id=1249): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x43440, 0x0, 0x1, 0x0, &(0x7f0000000040)) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.502094363s ago: executing program 1 (id=1250): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="3f000000010003", 0x7) 1.308185412s ago: executing program 1 (id=1251): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x66) 1.108715043s ago: executing program 1 (id=1252): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000002680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="090300807000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) 1.066104045s ago: executing program 4 (id=1253): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 983.498264ms ago: executing program 2 (id=1254): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='.\x02\x00', 0x2000c0, &(0x7f0000002380)=ANY=[@ANYBLOB="747970653d629bfeaa2c747970653d75699e3e2c666f7263652c6465636f6d706f73652c666f7263652c6e6c733d69736f383835392d392c00fb96ab4c9493d7be8b39915215ec88b35cc6fc60097459"], 0x1, 0x6ef, &(0x7f0000000180)="$eJzs3U9sW3cdAPDvsx0n7qTM29ptIKRGq6hghTaJGS0SEgUhlMOEKnHZ1bTpGtXJqsRDaYWoBwxuwAn1sMMQCoed0A5IQxwQ44yExBX1Xol7xQGj9/zs2E7i2G3+tN3nI72833vv9/eb3/vFfm7lAD6zlt6KqVYksXTuzc30+P5WrXF/q7baTUfEdEQUIkqdXSRrEcmnEZejs8Xn0pN5dcle7bzx4JMPzt77qNY5KuVblr8wqty29ogWWvkWcxFRzPcTKu1V39Vd6rs7UdVJr99pwM50AwfHrb1Da5LiY9y3wJPubkRxapfz1YgTETGTvw6IfHUo5JfLR9jFAzXRKgcAAABPpuJ+GZ5/GA9jM2aPpjsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwbEg63xmY5Fuhm56LpPv9/+X8XKr8ZH/x/1f2uf7+9SPqCAAAAAAAAAAcio/zD+5PP4yHsRmz3fPtJPvM/7Xs4GT287l4NzZiOdbjfGxGPZrRjPVYiJia7auwvFlvNtcXdpb8baQl2+323bzkYkRUY3qo5OKRDBsAAAAAAAAAnlU/jaWYPe5OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAvySi2Nll28luuhqFUkTMREQ5zdeK+Es3/TT763F3AAAAAA5fJd/PJv/rJNpJ9p7/5ex9/0y8G2vRjJVoRiOW41r2LKDzrr/wz1YxL1xb7RTtuJsdfPs/E/UjqzEiivHeHi3PZzlO9UosxffiB3Eu5uJKrMdK/Cjq0YzlmItKOoioRxLVSufpRfX+Vm21fxts/PLA0ZXhvp0eOn4160klrsdK1rfzcbUcnccm2RjSNl/ta+1P5YihFt9Lo5N8KzdmjK71/b5+kz+XybWfH7OOw1HNRj7Vi8h8Gvs8Gi+Mjv2E82S4pYUo9J5BndxuJbZnZU835j+cJOYn8n0a618MxvygTfgobTgSi1HIZ1/Ey4Mxv/XFey8OFv7yv/525UZh7eaN6xvnDnFIh2qqmxiORK0vEq+Mnn15JBppJFrjR2Jq+MTMY4zjAJXzaHQW5vFWy+9mqXq81jcF34lrsRwXYz4W4lLMxzdiMWoDM+zUQFxLtdXBmGT3WmHn+lYZ0fkzX+rL9Mt9Mh+tNC4v9MW1f6WrZtfyM5d/HfN9UXpx9Oyb+K9A2v7n83Taxs96f3GeBAORyNfmbu9eGh2J37XTnxuNtZvrN+q3xmzvbL5Pb9v3B9fm3x/EeB5dOl/SFbeUHWUxqXTnS3rtpV5vB+NVzj9x6ZQr7Lh2qnetGrOxEt/f804t56/hdtbUufZK/7V/b6+c5fz1TffawKuceCca2auQIXNHE1UAxnbi9RPlyoPKPyofVn5euVF5c+Y705emv1COqb+X/lz8Y+EPhW8mr8eH8ZOYPe6eAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADAs2Dj9p2b9UZjeb2XiJnhM4+bKO/Z1uhEFPbNs/XceBVGNWJ0W0meKB/s2J/GRCUOqeaPI2JEnvJjN5FMPMcmTqQT+UAq7H5xWnamXZygeKlbavc8pdiY2es3OL19F0T1Zr3x3/ZAnkr03TLAM+5Cc/XWhY3bd766slp/e/nt5bXFSxcvXax9feFrF66vNJbnOz+Pu5fAYdi4fac4OsevdnzrLQAAAAAAAAAAAHC88n/933zk/8xQ2idPeX1j95ZPH/VQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKfU0lsx1YokFubPz6fH97dqjXTrprdzliKiEBHJjyOSTyMuR2eLal91yV7tvPHgkw/O3vuotl1XqZu/MKrceFr5FnMRUcz3+5vepZqd9V3tq6/1SN1LeiNMA3amGzg4bv8PAAD//3Ds/WM=") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) truncate(&(0x7f0000000900)='./file1\x00', 0xb73d) 771.434602ms ago: executing program 1 (id=1255): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e) 463.700639ms ago: executing program 2 (id=1256): syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r0, 0x410, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x1fd}) 228.695156ms ago: executing program 1 (id=1257): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x7, 0x5}, {0x8, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4045}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 216.564933ms ago: executing program 3 (id=1258): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) ioctl$RTC_ALM_READ(r0, 0x40187013, &(0x7f0000000040)) 0s ago: executing program 3 (id=1259): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x108) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit=3,noswap']) syz_mount_image$msdos(&(0x7f0000003a40), &(0x7f0000000100)='./file0\x00', 0x1a4a438, &(0x7f0000000080)=ANY=[], 0x4b, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): fully deinitialized and disconnected. [ 142.308895][ T31] audit: type=1800 audit(1773433689.987:14): pid=6857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.386" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 142.341567][ T6871] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 142.365679][ T6867] loop5: detected capacity change from 0 to 4096 [ 142.437064][ T6871] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 142.480812][ T6871] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 142.494131][ T5907] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 142.530296][ T6872] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.577354][ T6871] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #3: comm syz.2.391: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 142.613780][ T6875] CUSE: unknown device info "ìŠxóKJ +ßãÛ¤2Lh¸änLþ1Õîì8­¨×0º©®(À3Õ¶ië" [ 142.647615][ T6871] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 142.656941][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 142.672521][ C0] EXT4-fs (loop2): initial error at time 1773433690: ext4_ext_check_inode:521: inode 3 [ 142.682277][ C0] EXT4-fs (loop2): last error at time 1773433690: ext4_ext_check_inode:521: inode 3 [ 142.682343][ T6875] CUSE: unknown device info "Ù®,°ð<Ö_e¤FÀÆ" [ 142.708455][ T6871] EXT4-fs (loop2): no journal found [ 142.713712][ T6871] EXT4-fs (loop2): can't get journal size [ 142.750637][ T6875] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 142.758798][ T6875] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼¿\Nšÿä4¨ô" [ 142.811450][ T6871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 142.854475][ T6875] CUSE: unknown device info "´ƒ [ 142.854475][ T6875] f𳦧ìýzóÚXÁS! [ 142.854475][ T6875] „Aäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pødY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 142.897033][ T5803] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 142.914859][ T6875] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜­_“ž@±/íËV ™¨º§{»‡ò" [ 142.957147][ T6875] CUSE: unknown device info "ÊþwlU~‘ÄÎV¥ß¶âݸFsºXý,xækƒÅq¾é/òQ]Ñ3•ÞH" [ 143.026607][ T6875] CUSE: zero length info key specified [ 143.076939][ T5803] usb 4-1: Using ep0 maxpacket: 16 [ 143.093069][ T5803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.134762][ T5803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.185744][ T5803] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 143.212173][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.215534][ T5803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.310698][ T5803] usb 4-1: config 0 descriptor?? [ 143.729598][ T5803] hid_parser_main: 224 callbacks suppressed [ 143.729633][ T5803] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0 [ 143.760712][ T29] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 143.779579][ T5803] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0 [ 143.817482][ T5803] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0 [ 143.845713][ T5803] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0 [ 143.877751][ T5803] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0 [ 143.908599][ T5803] hid-multitouch 0003:1FD2:6007.0008: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 143.969260][ T29] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 144.016480][ T5803] usb 4-1: USB disconnect, device number 3 [ 144.025157][ T29] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.063673][ T29] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.121808][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 144.126274][ T6903] loop0: detected capacity change from 0 to 512 [ 144.157710][ T29] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 144.214932][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.235306][ T6901] fido_id[6901]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 144.239471][ T6903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.252528][ T29] usb 3-1: config 0 descriptor?? [ 144.370323][ T6908] loop5: detected capacity change from 0 to 4096 [ 144.389692][ T6903] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.693615][ T29] holtek 0003:1241:5015.0009: item fetching failed at offset 1/5 [ 144.724118][ T29] holtek 0003:1241:5015.0009: parse failed [ 144.727564][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.747757][ T29] holtek 0003:1241:5015.0009: probe with driver holtek failed with error -22 [ 145.004337][ T5834] usb 3-1: USB disconnect, device number 3 [ 145.150739][ T6914] mkiss: ax0: crc mode is auto. [ 145.238583][ T6886] loop4: detected capacity change from 0 to 32768 [ 145.303832][ T6886] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 145.321662][ T6924] netlink: 'syz.1.411': attribute type 7 has an invalid length. [ 145.371054][ T6886] XFS (loop4): Ending clean mount [ 145.378802][ T6886] XFS (loop4): Quotacheck needed: Please wait. [ 145.499617][ T6886] XFS (loop4): Quotacheck: Done. [ 145.636040][ T6933] loop1: detected capacity change from 0 to 256 [ 145.752491][ T5830] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 145.806324][ T6933] FAT-fs (loop1): Directory bread(block 64) failed [ 145.848344][ T6933] FAT-fs (loop1): Directory bread(block 65) failed [ 145.855032][ T6933] FAT-fs (loop1): Directory bread(block 66) failed [ 145.905257][ T6933] FAT-fs (loop1): Directory bread(block 67) failed [ 145.967115][ T6933] FAT-fs (loop1): Directory bread(block 68) failed [ 145.994731][ T6933] FAT-fs (loop1): Directory bread(block 69) failed [ 146.045663][ T6933] FAT-fs (loop1): Directory bread(block 70) failed [ 146.073507][ T6933] FAT-fs (loop1): Directory bread(block 71) failed [ 146.087110][ T6933] FAT-fs (loop1): Directory bread(block 72) failed [ 146.121986][ T6933] FAT-fs (loop1): Directory bread(block 73) failed [ 146.243217][ T6950] loop0: detected capacity change from 0 to 1024 [ 146.357577][ T6950] hfsplus: bad catalog entry type [ 146.451294][ T6953] loop5: detected capacity change from 0 to 512 [ 146.486459][ T6953] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.504412][ T6953] EXT4-fs: Ignoring removed oldalloc option [ 146.518509][ T769] hfsplus: b-tree write err: -5, ino 25 [ 146.529874][ T6953] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 146.543301][ T769] hfsplus: b-tree write err: -5, ino 4 [ 146.559088][ T769] hfsplus: b-tree write err: -5, ino 2 [ 146.603444][ T6953] EXT4-fs (loop5): 1 truncate cleaned up [ 146.665634][ T6960] tipc: Failed to obtain node identity [ 146.674364][ T6960] tipc: Enabling of bearer rejected, failed to enable media [ 146.690619][ T6953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.822547][ T6954] loop3: detected capacity change from 0 to 4096 [ 146.883456][ T6962] macvtap1: entered promiscuous mode [ 146.956039][ T6962] vlan0: entered promiscuous mode [ 146.997749][ T6962] macvtap1: entered allmulticast mode [ 147.022272][ T6968] loop2: detected capacity change from 0 to 512 [ 147.033795][ T6962] vlan0: entered allmulticast mode [ 147.054059][ T6962] veth0_vlan: entered allmulticast mode [ 147.079290][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.097578][ T6968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.141722][ T6962] vlan0: left allmulticast mode [ 147.146642][ T6962] veth0_vlan: left allmulticast mode [ 147.227191][ T6962] vlan0: left promiscuous mode [ 147.496082][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.600313][ T6981] loop1: detected capacity change from 0 to 8 [ 147.650696][ T6981] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 147.687181][ T31] audit: type=1326 audit(1773433695.367:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.5.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b36d9c799 code=0x7ffc0000 [ 147.757526][ T6981] cramfs: Error -3 while decompressing! [ 147.774403][ T6981] cramfs: ffffffff9b2aa0a8(26)->ffff8880732d2000(4096) [ 147.788473][ T31] audit: type=1326 audit(1773433695.367:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.5.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b36d9c799 code=0x7ffc0000 [ 147.792630][ T6988] loop4: detected capacity change from 0 to 256 [ 147.817061][ T6981] cramfs: Error -5 while decompressing! [ 147.817104][ T6981] cramfs: ffffffff9b2aa0c2(26)->ffff88807574f000(4096) [ 147.817145][ T6981] cramfs: Error -3 while decompressing! [ 147.817161][ T6981] cramfs: ffffffff9b2aa0dc(16)->ffff888072d7b000(4096) [ 147.901990][ T31] audit: type=1326 audit(1773433695.367:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.5.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f1b36d9c799 code=0x7ffc0000 [ 147.938701][ T6981] cramfs: Error -3 while decompressing! [ 147.958955][ T6981] cramfs: ffffffff9b2aa0a8(26)->ffff8880732d2000(4096) [ 148.003371][ T6988] FAT-fs (loop4): Directory bread(block 64) failed [ 148.034282][ T5832] udevd[5832]: incorrect cramfs checksum on /dev/loop1 [ 148.037604][ T6988] FAT-fs (loop4): Directory bread(block 65) failed [ 148.043339][ T31] audit: type=1326 audit(1773433695.367:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.5.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b36d9c799 code=0x7ffc0000 [ 148.115194][ T6988] FAT-fs (loop4): Directory bread(block 66) failed [ 148.153378][ T6988] FAT-fs (loop4): Directory bread(block 67) failed [ 148.189301][ T31] audit: type=1326 audit(1773433695.367:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.5.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b36d9c799 code=0x7ffc0000 [ 148.198335][ T6988] FAT-fs (loop4): Directory bread(block 68) failed [ 148.216098][ T5832] udevd[5832]: incorrect cramfs checksum on /dev/loop1 [ 148.293665][ T31] audit: type=1326 audit(1773433695.367:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.5.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f1b36d9c799 code=0x7ffc0000 [ 148.337078][ T6988] FAT-fs (loop4): Directory bread(block 69) failed [ 148.343761][ T6988] FAT-fs (loop4): Directory bread(block 70) failed [ 148.364356][ T31] audit: type=1326 audit(1773433695.367:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.5.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b36d9c799 code=0x7ffc0000 [ 148.416299][ T6988] FAT-fs (loop4): Directory bread(block 71) failed [ 148.441060][ T31] audit: type=1800 audit(1773433695.677:22): pid=6981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.448" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 148.465726][ T6988] FAT-fs (loop4): Directory bread(block 72) failed [ 148.480311][ T6988] FAT-fs (loop4): Directory bread(block 73) failed [ 149.675525][ T7041] loop2: detected capacity change from 0 to 512 [ 149.679888][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 149.716161][ T7041] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 149.767750][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 149.882527][ T7041] EXT4-fs (loop2): 1 orphan inode deleted [ 149.967029][ T7041] EXT4-fs (loop2): 1 truncate cleaned up [ 150.029119][ T7041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.050870][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 150.066791][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 150.290459][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.412740][ T7035] ceph: No mds server is up or the cluster is laggy [ 150.451001][ T7058] loop4: detected capacity change from 0 to 4096 [ 150.577940][ T7058] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 150.590779][ T7069] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.629667][ T7058] NILFS (loop4): mounting fs with errors [ 150.704165][ T7062] loop1: detected capacity change from 0 to 4096 [ 150.711609][ T7058] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=32, inode=9, rec_len=24, name_len=6 [ 150.711738][ T7058] NILFS error (device loop4): nilfs_readdir: bad page in #2 [ 150.892913][ T7076] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.945026][ T7078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.473'. [ 151.035095][ T7078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.473'. [ 151.314630][ T7086] sp0: Synchronizing with TNC [ 151.440494][ T7082] [U] è [ 151.968161][ T7105] IPVS: stopping backup sync thread 7107 ... [ 152.361240][ T5907] kernel write not supported for file /input/mouse0 (pid: 5907 comm: kworker/0:4) [ 152.876482][ T7135] loop1: detected capacity change from 0 to 164 [ 152.957945][ T7135] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 153.014746][ T7139] loop3: detected capacity change from 0 to 8 [ 153.024574][ T7139] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 153.044563][ T7139] cramfs: Error -3 while decompressing! [ 153.050473][ T7139] cramfs: ffffffff9b2a60a8(26)->ffff88806d1a7000(4096) [ 153.107005][ T7139] cramfs: Error -5 while decompressing! [ 153.112605][ T7139] cramfs: ffffffff9b2a60c2(26)->ffff888076f57000(4096) [ 153.117652][ T7135] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 153.138868][ T6421] udevd[6421]: incorrect cramfs checksum on /dev/loop3 [ 153.187549][ T7139] cramfs: Error -3 while decompressing! [ 153.193154][ T7139] cramfs: ffffffff9b2a60dc(16)->ffff888072df3000(4096) [ 153.197127][ T7135] Symlink component flag not implemented [ 153.227765][ T7145] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 153.251387][ T7135] Symlink component flag not implemented [ 153.282023][ T7144] Symlink component flag not implemented (7) [ 153.304668][ T7139] cramfs: Error -3 while decompressing! [ 153.337126][ T7144] Symlink component flag not implemented (116) [ 153.364097][ T7139] cramfs: ffffffff9b2a60a8(26)->ffff88806d1a7000(4096) [ 153.388159][ T31] audit: type=1800 audit(1773433701.077:23): pid=7139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.498" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 153.550272][ T7155] loop0: detected capacity change from 0 to 128 [ 153.619839][ T7155] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 153.718515][ T7155] syz.0.504: attempt to access beyond end of device [ 153.718515][ T7155] loop0: rw=8388608, sector=2071, nr_sectors = 1 limit=128 [ 153.755086][ T7161] loop2: detected capacity change from 0 to 128 [ 153.799157][ T7161] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.833991][ T7161] ext4 filesystem being mounted at mnt:[4026532809] supports timestamps until 2038-01-19 (0x7fffffff) [ 153.834012][ T7165] loop1: detected capacity change from 0 to 512 [ 153.879422][ T7161] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.971780][ T5834] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 154.051920][ T7171] loop5: detected capacity change from 0 to 256 [ 154.098463][ T5842] Bluetooth: hci1: command tx timeout [ 154.122437][ T7171] exfat: Deprecated parameter 'utf8' [ 154.187530][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.226806][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.263894][ T5834] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 154.293250][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.311908][ T7171] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 154.367519][ T5834] usb 5-1: config 0 descriptor?? [ 154.821112][ T5834] hid-led 0003:27B8:01ED.000A: collection stack underflow [ 154.892429][ T5834] hid-led 0003:27B8:01ED.000A: item 0 4 0 12 parsing failed [ 154.937798][ T5834] hid-led 0003:27B8:01ED.000A: probe with driver hid-led failed with error -22 [ 155.025979][ T5834] usb 5-1: USB disconnect, device number 3 [ 155.117350][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 155.306114][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.328807][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.345382][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 155.364571][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.388016][ T24] usb 2-1: config 0 descriptor?? [ 155.832993][ T3451] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.870027][ T24] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x7 [ 155.909386][ T24] logitech-djreceiver 0003:046D:C71F.000B: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.1-1/input0 [ 156.000975][ T3451] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.083620][ T5834] usb 2-1: USB disconnect, device number 4 [ 156.220270][ T3451] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.267772][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.527'. [ 156.294569][ T7211] loop4: detected capacity change from 0 to 2048 [ 156.323008][ T7211] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 156.387254][ T7212] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.419638][ T7208] loop0: detected capacity change from 0 to 4096 [ 156.475632][ T3451] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.562341][ T7197] loop3: detected capacity change from 0 to 32768 [ 156.578841][ T7208] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 156.589734][ T7197] xfs: Deprecated parameter 'attr2' [ 156.625361][ T7208] ntfs3(loop0): Failed to load $Extend (-22). [ 156.632748][ T7208] ntfs3(loop0): Failed to initialize $Extend. [ 156.634625][ T7197] XFS: attr2 mount option is deprecated. [ 156.679664][ T7214] loop2: detected capacity change from 0 to 256 [ 156.705357][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.720379][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.734226][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.758822][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.768139][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.817965][ T7197] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 156.979117][ T7197] XFS (loop3): Ending clean mount [ 157.031797][ T7197] XFS (loop3): Quotacheck needed: Please wait. [ 157.127515][ T7197] XFS (loop3): Quotacheck: Done. [ 157.540766][ T7236] loop2: detected capacity change from 0 to 8 [ 157.548906][ T5829] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 157.558303][ T7236] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 157.649819][ T3451] bridge_slave_1: left allmulticast mode [ 157.655759][ T3451] bridge_slave_1: left promiscuous mode [ 157.713333][ T5832] udevd[5832]: incorrect cramfs checksum on /dev/loop2 [ 157.730529][ T3451] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.895802][ T3451] bridge_slave_0: left allmulticast mode [ 157.937029][ T3451] bridge_slave_0: left promiscuous mode [ 157.942903][ T3451] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.011477][ T7244] loop4: detected capacity change from 0 to 64 [ 158.081657][ T7246] loop0: detected capacity change from 0 to 256 [ 158.128474][ T7244] hfs: small file entry [ 158.168107][ T7246] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d) [ 158.447879][ T7250] loop3: detected capacity change from 0 to 2048 [ 158.455384][ T7250] EXT4-fs: Ignoring removed bh option [ 158.477002][ T7250] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.522869][ T7254] loop4: detected capacity change from 0 to 2048 [ 158.533787][ T7254] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 158.536633][ T7250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.550085][ T7254] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.589607][ T7250] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.622042][ T7254] udf: Unknown parameter 'discard' [ 158.817006][ T5842] Bluetooth: hci4: command tx timeout [ 158.819737][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.989935][ T3451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.057144][ T3451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.094732][ T3451] bond0 (unregistering): Released all slaves [ 159.187181][ T7261] netlink: 28 bytes leftover after parsing attributes in process `syz.4.546'. [ 159.446633][ T7269] loop2: detected capacity change from 0 to 64 [ 159.616066][ T7259] find_entry called with index = 0 [ 159.648229][ T7259] read_mapping_page failed! [ 159.652794][ T7259] ERROR: (device loop0): txAbort: [ 159.652794][ T7259] [ 159.708841][ T7259] ERROR: (device loop0): diFree: numfree > numinos [ 159.708841][ T7259] [ 159.829874][ T5826] hfs: node 4:3 still has 1 user(s)! [ 159.867926][ T7277] netlink: 'syz.3.553': attribute type 32 has an invalid length. [ 159.892352][ T7278] exfat: Deprecated parameter 'namecase' [ 159.906955][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.553'. [ 159.932666][ T7278] exfat: Deprecated parameter 'namecase' [ 159.984080][ T7278] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 160.229727][ T7277] bond1: Setting coupled_control to off (0) [ 160.239953][ T7277] Zero length message leads to an empty skb [ 160.287946][ T7283] macvtap1: entered promiscuous mode [ 160.338974][ T7283] vlan0: entered promiscuous mode [ 160.361172][ T7283] macvtap1: entered allmulticast mode [ 160.377618][ T7283] vlan0: entered allmulticast mode [ 160.407183][ T7283] veth0_vlan: entered allmulticast mode [ 160.482819][ T7283] vlan0: left allmulticast mode [ 160.517333][ T7283] veth0_vlan: left allmulticast mode [ 160.560505][ T7283] vlan0: left promiscuous mode [ 160.897012][ T5842] Bluetooth: hci4: command tx timeout [ 161.024733][ T7215] chnl_net:caif_netlink_parms(): no params data found [ 161.427540][ T7314] IPVS: stopping backup sync thread 7318 ... [ 161.536687][ T7323] netlink: 'syz.3.565': attribute type 11 has an invalid length. [ 161.561262][ T3451] hsr_slave_0: left promiscuous mode [ 161.584443][ T7323] netlink: 'syz.3.565': attribute type 4 has an invalid length. [ 161.605124][ T3451] hsr_slave_1: left promiscuous mode [ 161.610837][ T7323] netlink: 199780 bytes leftover after parsing attributes in process `syz.3.565'. [ 161.628168][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.657305][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.695659][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.736979][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.858344][ T3451] veth1_macvtap: left promiscuous mode [ 161.877835][ T3451] veth0_macvtap: left promiscuous mode [ 161.912098][ T3451] veth1_vlan: left promiscuous mode [ 161.921634][ T3451] veth0_vlan: left promiscuous mode [ 161.966350][ T7300] set_capacity_and_notify: 2 callbacks suppressed [ 161.966377][ T7300] loop1: detected capacity change from 0 to 32768 [ 162.047406][ T7300] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.559 (7300) [ 162.217155][ T7300] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 162.264796][ T7300] BTRFS info (device loop1): using crc32c checksum algorithm [ 162.410892][ T29] libceph: connect (1)[c::]:6789 error -101 [ 162.428487][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 162.511374][ T7352] loop4: detected capacity change from 0 to 164 [ 162.553124][ T7352] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 162.620417][ T7300] BTRFS info (device loop1): rebuilding free space tree [ 162.644917][ T7332] loop3: detected capacity change from 0 to 32768 [ 162.651606][ T7352] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 162.652117][ T7352] Symlink component flag not implemented [ 162.652133][ T7352] Symlink component flag not implemented [ 162.652229][ T7352] Symlink component flag not implemented (7) [ 162.652247][ T7352] Symlink component flag not implemented (116) [ 162.687958][ T29] libceph: connect (1)[c::]:6789 error -101 [ 162.743852][ T7332] JBD2: Ignoring recovery information on journal [ 162.760729][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 162.814700][ T7332] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 162.842100][ T7300] BTRFS info (device loop1): checking UUID tree [ 162.866144][ T7300] BTRFS info (device loop1): allowing degraded mounts [ 162.908443][ T7300] BTRFS info (device loop1): enabling ssd optimizations [ 162.915464][ T7300] BTRFS info (device loop1): enabling free space tree [ 162.944482][ T7300] BTRFS info (device loop1): force clearing of disk cache [ 162.980720][ T5842] Bluetooth: hci4: command tx timeout [ 162.981152][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 163.005705][ T7300] BTRFS info (device loop1): force zlib compression, level 3 [ 163.121377][ T7336] ceph: No mds server is up or the cluster is laggy [ 163.447829][ T3451] team0 (unregistering): Port device team_slave_1 removed [ 163.481924][ T5829] ocfs2: Unmounting device (7,3) on (node local) [ 163.614354][ T3451] team0 (unregistering): Port device team_slave_0 removed [ 163.695152][ T7364] loop3: detected capacity change from 0 to 64 [ 163.743945][ T7364] syz.3.574: attempt to access beyond end of device [ 163.743945][ T7364] loop3: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 164.044765][ T5827] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 164.081290][ T7360] loop4: detected capacity change from 0 to 32768 [ 164.102997][ T7360] [ 164.102997][ T7360] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.102997][ T7360] [ 164.256647][ T31] audit: type=1800 audit(1773433711.937:24): pid=7360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.573" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 164.505142][ T49] [ 164.505142][ T49] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.505142][ T49] [ 164.549255][ T49] [ 164.549255][ T49] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.549255][ T49] [ 164.616703][ T110] [ 164.616703][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.616703][ T110] [ 164.669340][ T5830] [ 164.669340][ T5830] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.669340][ T5830] [ 164.749593][ T5830] [ 164.749593][ T5830] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.749593][ T5830] [ 165.038671][ T7215] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.058683][ T5842] Bluetooth: hci4: command tx timeout [ 165.077151][ T7215] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.100544][ T7215] bridge_slave_0: entered allmulticast mode [ 165.123605][ T7215] bridge_slave_0: entered promiscuous mode [ 165.186158][ T7215] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.219185][ T7215] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.229539][ T7215] bridge_slave_1: entered allmulticast mode [ 165.260081][ T7215] bridge_slave_1: entered promiscuous mode [ 165.470937][ T7215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.541611][ T7215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.686809][ T7391] loop3: detected capacity change from 0 to 2048 [ 165.798790][ T7215] team0: Port device team_slave_0 added [ 165.834844][ T7391] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.874797][ T7215] team0: Port device team_slave_1 added [ 165.936785][ T7397] macsec1: entered promiscuous mode [ 165.978487][ T7397] macsec1: entered allmulticast mode [ 166.504635][ T7215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.537988][ T7215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.672877][ T7215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.792186][ T7215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.837009][ T7215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.974316][ T7215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.294252][ T7215] hsr_slave_0: entered promiscuous mode [ 167.321416][ T7215] hsr_slave_1: entered promiscuous mode [ 167.344755][ T7215] debugfs: 'hsr0' already exists in 'hsr' [ 167.371084][ T7215] Cannot create hsr debugfs directory [ 167.371774][ T7442] loop3: detected capacity change from 0 to 512 [ 167.442969][ T7442] EXT4-fs: Ignoring removed bh option [ 167.505284][ T7447] loop1: detected capacity change from 0 to 64 [ 167.506645][ T7442] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 167.670553][ T7442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.691341][ T7442] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.020907][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.483483][ T7471] netlink: 'syz.2.614': attribute type 2 has an invalid length. [ 168.509035][ T7473] syz.1.613 (7473): /proc/7469/oom_adj is deprecated, please use /proc/7469/oom_score_adj instead. [ 168.612943][ T7476] loop4: detected capacity change from 0 to 512 [ 168.676332][ T7215] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 168.781147][ T7215] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 168.820278][ T7215] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 168.852713][ T7476] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1312: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 168.857265][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 168.857299][ C0] EXT4-fs (loop4): initial error at time 1773433716: ext4_mb_generate_buddy:1312 [ 168.857344][ C0] EXT4-fs (loop4): last error at time 1773433716: ext4_mb_generate_buddy:1312 [ 168.888516][ T7476] EXT4-fs (loop4): Remounting filesystem read-only [ 168.889257][ T7476] EXT4-fs (loop4): 1 truncate cleaned up [ 168.891532][ T7476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.943068][ T7215] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 169.103980][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.450301][ T7215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.476353][ T7215] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.550397][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.559207][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.601020][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.601146][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.632406][ T7533] loop4: detected capacity change from 0 to 512 [ 170.871359][ T7215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.475322][ T7551] loop3: detected capacity change from 0 to 1024 [ 171.584459][ T7555] netlink: 'syz.4.639': attribute type 1 has an invalid length. [ 171.630713][ T7555] netlink: 96 bytes leftover after parsing attributes in process `syz.4.639'. [ 171.639686][ T7551] hfsplus: b-tree write err: -5, ino 2 [ 171.696648][ T7555] netlink: 1 bytes leftover after parsing attributes in process `syz.4.639'. [ 171.749881][ T7555] netlink: 'syz.4.639': attribute type 1 has an invalid length. [ 171.787034][ T7555] netlink: 'syz.4.639': attribute type 8 has an invalid length. [ 171.819708][ T141] hfsplus: b-tree write err: -5, ino 25 [ 171.825592][ T141] hfsplus: b-tree write err: -5, ino 4 [ 171.837233][ T7555] netlink: 606 bytes leftover after parsing attributes in process `syz.4.639'. [ 171.882851][ T141] hfsplus: b-tree write err: -5, ino 2 [ 171.916987][ T141] hfsplus: b-tree write err: -5, ino 26 [ 172.031507][ T7562] loop2: detected capacity change from 0 to 512 [ 172.079648][ T7562] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 172.182139][ T7562] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 172.332567][ T7562] EXT4-fs (loop2): 1 truncate cleaned up [ 172.422510][ T7562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.468699][ T29] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 172.602537][ T7215] veth0_vlan: entered promiscuous mode [ 172.671441][ T7215] veth1_vlan: entered promiscuous mode [ 172.710128][ T7583] bridge_slave_0: invalid flags given to default FDB implementation [ 172.749814][ T29] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 172.782164][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.819196][ T29] usb 1-1: Product: syz [ 172.834175][ T29] usb 1-1: Manufacturer: syz [ 172.853380][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.858827][ T29] usb 1-1: SerialNumber: syz [ 172.895241][ T7215] veth0_macvtap: entered promiscuous mode [ 172.956351][ T7215] veth1_macvtap: entered promiscuous mode [ 172.978072][ T29] usb 1-1: config 0 descriptor?? [ 173.001401][ T29] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 173.094389][ T7215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.118048][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 173.159692][ T7215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.175894][ T29] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 173.199693][ T7592] binder: 7590:7592 ioctl 400c620e 200000000040 returned -22 [ 173.213713][ T29] usb 1-1: media controller created [ 173.258654][ T7595] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 173.319362][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.353635][ T1005] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.400289][ T1005] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.470342][ T3451] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.562153][ T3451] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.661035][ T29] DVB: Unable to find symbol mt352_attach() [ 173.709610][ T7602] netlink: 56 bytes leftover after parsing attributes in process `syz.2.652'. [ 173.817893][ T7602] netlink: 16 bytes leftover after parsing attributes in process `syz.2.652'. [ 173.914853][ T29] DVB: Unable to find symbol nxt6000_attach() [ 173.955626][ T29] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 174.001806][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.042068][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.058118][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 174.127718][ T29] dvb-usb: schedule remote query interval to 1000 msecs. [ 174.134838][ T29] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 174.186269][ T29] dvb-usb: bulk message failed: -22 (7/0) [ 174.227184][ T29] dvb-usb: bulk message failed: -22 (7/0) [ 174.268034][ T29] usb 1-1: USB disconnect, device number 10 [ 174.314877][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.357760][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.404212][ T7611] loop4: detected capacity change from 0 to 1024 [ 174.454670][ T7615] xt_hashlimit: size too large, truncated to 1048576 [ 174.633567][ T7611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.649556][ T29] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 175.130501][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.528787][ T7589] loop1: detected capacity change from 0 to 40427 [ 175.784270][ T5803] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 175.992580][ T5803] usb 1-1: Using ep0 maxpacket: 32 [ 176.022267][ T5803] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.048449][ T7589] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 176.056962][ T5803] usb 1-1: config 0 has no interfaces? [ 176.070879][ T5803] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 176.091562][ T7651] loop4: detected capacity change from 0 to 128 [ 176.140371][ T5803] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 176.176991][ T7651] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 176.190522][ T5803] usb 1-1: Product: syz [ 176.194725][ T5803] usb 1-1: Manufacturer: syz [ 176.235370][ T5803] usb 1-1: config 0 descriptor?? [ 176.251401][ T7651] hpfs: filesystem error: improperly stopped [ 176.317947][ T7651] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 176.325738][ T7651] hpfs: You really don't want any checks? You are crazy... [ 176.371441][ T7651] hpfs: Code page index out of array [ 176.391491][ T7651] hpfs: code page support is disabled [ 176.440451][ T7651] hpfs: hpfs_map_4sectors(): unaligned read [ 176.466938][ T5834] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 176.480706][ T7651] hpfs: hpfs_map_4sectors(): unaligned read [ 176.528537][ T7651] hpfs: filesystem error: unable to find root dir [ 176.640543][ T5834] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 176.702173][ T5834] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 176.754658][ T5834] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 176.777618][ T5803] usb 1-1: USB disconnect, device number 11 [ 176.800897][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.870507][ T7656] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 176.906607][ T5834] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 177.103767][ T7666] loop4: detected capacity change from 0 to 256 [ 177.368724][ T5834] usb 3-1: USB disconnect, device number 4 [ 177.771141][ T7673] loop4: detected capacity change from 0 to 256 [ 177.800814][ T7673] exfat: Deprecated parameter 'namecase' [ 177.806577][ T7673] exfat: Deprecated parameter 'namecase' [ 177.812698][ T7646] loop3: detected capacity change from 0 to 40427 [ 177.846955][ T7646] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 177.864051][ T7646] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 177.945472][ T7673] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 177.965740][ T7675] loop0: detected capacity change from 0 to 1024 [ 178.284652][ T7646] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 178.411105][ T7646] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 178.468785][ T7689] loop2: detected capacity change from 0 to 1024 [ 178.486694][ T7646] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 178.632379][ T7689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.667261][ T141] hfsplus: b-tree write err: -5, ino 25 [ 178.667514][ T141] hfsplus: b-tree write err: -5, ino 4 [ 178.667616][ T141] hfsplus: b-tree write err: -5, ino 2 [ 178.772096][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.650970][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.687'. [ 179.738541][ T7720] netlink: 12 bytes leftover after parsing attributes in process `syz.6.689'. [ 179.868536][ T5834] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 180.050681][ T5834] usb 2-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 180.072218][ T5834] usb 2-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.110256][ T5834] usb 2-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 180.148511][ T5834] usb 2-1: config 0 interface 0 has no altsetting 0 [ 180.155345][ T5834] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 180.208436][ T7728] loop6: detected capacity change from 0 to 2048 [ 180.218696][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.241345][ T5834] usb 2-1: config 0 descriptor?? [ 180.275394][ T7728] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.690932][ T5834] gt683r_led 0003:1770:FF00.000C: unknown main item tag 0x0 [ 180.709746][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.697'. [ 180.728378][ T5834] gt683r_led 0003:1770:FF00.000C: unknown main item tag 0x0 [ 180.735835][ T5834] gt683r_led 0003:1770:FF00.000C: unknown main item tag 0x0 [ 180.798481][ T5834] gt683r_led 0003:1770:FF00.000C: unknown main item tag 0x0 [ 180.833921][ T5834] gt683r_led 0003:1770:FF00.000C: unknown main item tag 0x0 [ 180.856627][ T5834] gt683r_led 0003:1770:FF00.000C: unknown main item tag 0x0 [ 180.911410][ T5834] gt683r_led 0003:1770:FF00.000C: unknown main item tag 0x0 [ 180.990373][ T5834] gt683r_led 0003:1770:FF00.000C: unknown main item tag 0x0 [ 180.997713][ T7746] bridge_slave_0: invalid flags given to default FDB implementation [ 181.045253][ T5834] gt683r_led 0003:1770:FF00.000C: unknown main item tag 0x0 [ 181.103942][ T5834] gt683r_led 0003:1770:FF00.000C: unknown main item tag 0x0 [ 181.162566][ T5834] gt683r_led 0003:1770:FF00.000C: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.1-1/input0 [ 181.201003][ T7750] loop6: detected capacity change from 0 to 256 [ 181.245781][ T7748] loop4: detected capacity change from 0 to 2048 [ 181.279055][ T5834] usb 2-1: USB disconnect, device number 5 [ 181.316415][ T7748] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.366031][ T5914] gt683r_led 0003:1770:FF00.000C: failed to send set report request: -19 [ 181.396190][ T7750] FAT-fs (loop6): Directory bread(block 64) failed [ 181.416317][ T7750] FAT-fs (loop6): Directory bread(block 65) failed [ 181.485729][ T7750] FAT-fs (loop6): Directory bread(block 66) failed [ 181.493435][ T31] audit: type=1800 audit(1773433729.167:25): pid=7748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.702" name="file1" dev="loop4" ino=1415 res=0 errno=0 [ 181.583737][ T7750] FAT-fs (loop6): Directory bread(block 67) failed [ 181.588521][ T7751] fido_id[7751]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 181.615362][ T7750] FAT-fs (loop6): Directory bread(block 68) failed [ 181.666007][ T7750] FAT-fs (loop6): Directory bread(block 69) failed [ 181.723347][ T7750] FAT-fs (loop6): Directory bread(block 70) failed [ 181.773023][ T7750] FAT-fs (loop6): Directory bread(block 71) failed [ 181.812680][ T7750] FAT-fs (loop6): Directory bread(block 72) failed [ 181.872479][ T7750] FAT-fs (loop6): Directory bread(block 73) failed [ 182.596731][ T5834] kernel read not supported for file /220/attr/prev (pid: 5834 comm: kworker/0:3) [ 182.633319][ T7778] netlink: 332 bytes leftover after parsing attributes in process `syz.3.717'. [ 182.728511][ T7782] loop6: detected capacity change from 0 to 256 [ 182.819250][ T7781] loop4: detected capacity change from 0 to 1024 [ 182.921421][ T7782] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 182.947934][ T7781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.428302][ T7796] loop6: detected capacity change from 0 to 128 [ 183.437137][ T5803] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 183.475871][ T7796] EXT4-fs (loop6): Test dummy encryption mode enabled [ 183.508146][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.530289][ T7796] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.632461][ T7796] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 183.643455][ T5803] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.717117][ T5803] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 183.750716][ T5803] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 183.791094][ T5803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.844358][ T7796] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 183.868092][ T5803] usb 4-1: config 0 descriptor?? [ 183.905025][ T5803] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 183.946520][ T5803] dvb-usb: bulk message failed: -22 (3/0) [ 183.970838][ T5803] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 184.012922][ T5803] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 184.044081][ T5803] usb 4-1: media controller created [ 184.053701][ T5803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.135282][ T5803] dvb-usb: bulk message failed: -22 (6/0) [ 184.155869][ T7791] dvb-usb: bulk message failed: -22 (2/0) [ 184.163031][ T5803] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 184.218228][ T5803] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 184.276021][ T7215] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.287374][ T5803] dvb-usb: schedule remote query interval to 150 msecs. [ 184.361531][ T5803] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 184.392060][ T7817] netlink: 20 bytes leftover after parsing attributes in process `syz.2.731'. [ 184.427031][ T7817] tipc: Invalid UDP bearer configuration [ 184.427108][ T7817] tipc: Enabling of bearer rejected, failed to enable media [ 184.442964][ T5803] usb 4-1: USB disconnect, device number 4 [ 184.639681][ T5803] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 184.692462][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.735'. [ 184.881513][ T7829] loop6: detected capacity change from 0 to 1024 [ 184.888259][ T7827] tipc: Started in network mode [ 184.908952][ T7827] tipc: Node identity ac14140f, cluster identity 4711 [ 184.977978][ T7827] tipc: New replicast peer: 151.64.65.255 [ 184.984111][ T7827] tipc: Enabled bearer , priority 10 [ 184.988398][ T7829] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.319323][ T7215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.488438][ T5834] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 185.698931][ T5834] usb 1-1: Using ep0 maxpacket: 32 [ 185.708918][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 185.749690][ T5834] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 185.765719][ T5834] usb 1-1: config 0 has no interface number 0 [ 185.805699][ T5834] usb 1-1: config 0 interface 184 has no altsetting 0 [ 185.848805][ T7861] loop4: detected capacity change from 0 to 256 [ 185.851774][ T5834] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 185.860900][ T7861] exfat: Deprecated parameter 'utf8' [ 185.868549][ T7859] loop1: detected capacity change from 0 to 1024 [ 185.870767][ T7861] exfat: Deprecated parameter 'utf8' [ 185.891421][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.944176][ T5834] usb 1-1: Product: syz [ 185.944214][ T5834] usb 1-1: Manufacturer: syz [ 185.944255][ T5834] usb 1-1: SerialNumber: syz [ 185.945132][ T7861] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 185.974858][ T5834] usb 1-1: config 0 descriptor?? [ 186.099076][ T5803] tipc: Node number set to 2886997007 [ 186.209838][ T141] hfsplus: b-tree write err: -5, ino 25 [ 186.210085][ T141] hfsplus: b-tree write err: -5, ino 4 [ 186.272726][ T141] hfsplus: b-tree write err: -5, ino 2 [ 186.304508][ T7868] loop3: detected capacity change from 0 to 512 [ 186.334087][ T7868] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 186.402149][ T7868] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 186.402303][ T7868] System zones: 1-12 [ 186.405790][ T7871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.755'. [ 186.437382][ T7868] EXT4-fs error (device loop3): ext4_iget_extra_inode:5024: inode #15: comm syz.3.754: corrupted in-inode xattr: e_value size too large [ 186.437440][ T7868] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 186.446883][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 186.446921][ C1] EXT4-fs (loop3): initial error at time 1773433734: ext4_iget_extra_inode:5024: inode 15 [ 186.446989][ C1] EXT4-fs (loop3): last error at time 1773433734: ext4_iget_extra_inode:5024: inode 15 [ 186.456695][ T7868] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.754: couldn't read orphan inode 15 (err -117) [ 186.456750][ T7868] loop3: lost filesystem error report for type 5 error -117 [ 186.460820][ T7868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.719774][ T5834] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 186.719828][ T5834] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 186.719866][ T5834] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 186.720137][ T5834] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 186.734464][ T5834] usb 1-1: USB disconnect, device number 12 [ 186.773380][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.782747][ T7879] loop2: detected capacity change from 0 to 1024 [ 186.841957][ T7879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.212964][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.717530][ T7900] loop0: detected capacity change from 0 to 2048 [ 187.762738][ T7904] vim2m vim2m.0: vidioc_s_fmt queue busy [ 187.840765][ T7908] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.238388][ T7915] loop6: detected capacity change from 0 to 512 [ 188.416551][ T7915] EXT4-fs error (device loop6): ext4_read_inode_bitmap:138: comm syz.6.772: Invalid inode bitmap blk 4 in block_group 0 [ 188.463232][ T31] audit: type=1326 audit(1773433736.147:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.3.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb727f9c799 code=0x7ffc0000 [ 188.506959][ T31] audit: type=1326 audit(1773433736.177:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.3.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb727f9c799 code=0x7ffc0000 [ 188.537109][ T7915] loop6: lost filesystem error report for type 5 error -117 [ 188.542596][ T7915] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.592033][ T31] audit: type=1326 audit(1773433736.177:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.3.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fb727f9c799 code=0x7ffc0000 [ 188.607660][ T7926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'. [ 188.712790][ T31] audit: type=1326 audit(1773433736.177:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.3.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb727f9c799 code=0x7ffc0000 [ 188.785394][ T7931] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.779'. [ 188.797490][ T31] audit: type=1326 audit(1773433736.177:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.3.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb727f9c799 code=0x7ffc0000 [ 188.871160][ T7215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.078078][ T7898] loop2: detected capacity change from 0 to 32768 [ 189.148630][ T7898] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 189.262028][ T7898] XFS (loop2): Ending clean mount [ 189.288194][ T7898] XFS (loop2): Quotacheck needed: Please wait. [ 189.437136][ T7898] XFS (loop2): Quotacheck: Done. [ 189.660098][ T5826] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 189.713882][ T7960] loop0: detected capacity change from 0 to 8 [ 190.092191][ T7961] loop6: detected capacity change from 0 to 4096 [ 190.250770][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.789'. [ 190.346263][ T7961] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 190.461312][ T7961] ntfs3(loop6): Failed to load $Extend (-22). [ 190.501333][ T7961] ntfs3(loop6): Failed to initialize $Extend. [ 190.516450][ T7952] loop3: detected capacity change from 0 to 32768 [ 190.783970][ T7952] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 191.241548][ T5829] ocfs2: Unmounting device (7,3) on (node local) [ 191.382138][ T7993] set_capacity_and_notify: 1 callbacks suppressed [ 191.382165][ T7993] loop6: detected capacity change from 0 to 1024 [ 191.560194][ T8003] loop1: detected capacity change from 0 to 256 [ 191.740753][ T8003] FAT-fs (loop1): Directory bread(block 64) failed [ 191.795232][ T8003] FAT-fs (loop1): Directory bread(block 65) failed [ 191.803653][ T7993] hfsplus: xattr searching failed [ 191.832584][ T7993] hfsplus: found bad thread record in catalog [ 191.847009][ T8003] FAT-fs (loop1): Directory bread(block 66) failed [ 191.873959][ T8003] FAT-fs (loop1): Directory bread(block 67) failed [ 191.890217][ T7993] hfsplus: found bad thread record in catalog [ 191.898479][ T5963] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 191.929686][ T8003] FAT-fs (loop1): Directory bread(block 68) failed [ 191.966747][ T8003] FAT-fs (loop1): Directory bread(block 69) failed [ 192.018833][ T8003] FAT-fs (loop1): Directory bread(block 70) failed [ 192.041389][ T8003] FAT-fs (loop1): Directory bread(block 71) failed [ 192.057542][ T8003] FAT-fs (loop1): Directory bread(block 72) failed [ 192.071535][ T8003] FAT-fs (loop1): Directory bread(block 73) failed [ 192.090776][ T5963] usb 3-1: Using ep0 maxpacket: 32 [ 192.098814][ T59] hfsplus: found bad thread record in catalog [ 192.105186][ T59] hfsplus: found bad thread record in catalog [ 192.128420][ T5963] usb 3-1: unable to get BOS descriptor or descriptor too short [ 192.147182][ T5963] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.178651][ T5963] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 192.248661][ T5907] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 192.269489][ T5963] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 192.301363][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.353627][ T5963] usb 3-1: Product: syz [ 192.364047][ T5963] usb 3-1: Manufacturer: syz [ 192.396418][ T5963] usb 3-1: SerialNumber: syz [ 192.460652][ T8020] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 192.499388][ T5907] usb 1-1: config 0 has an invalid interface number: 22 but max is 0 [ 192.509172][ T5907] usb 1-1: config 0 has no interface number 0 [ 192.515377][ T5907] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.575048][ T5907] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.612265][ T8025] loop3: detected capacity change from 0 to 256 [ 192.624466][ T5907] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 192.658141][ T8025] exfat: Deprecated parameter 'namecase' [ 192.659583][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.728290][ T8025] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 192.763959][ T5907] usb 1-1: config 0 descriptor?? [ 192.912089][ T8032] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.067913][ T5963] usb 3-1: USB disconnect, device number 5 [ 193.257653][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.290861][ T5907] elo 0003:04E7:0030.000D: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.0-1/input22 [ 193.535642][ T5907] usb 1-1: USB disconnect, device number 13 [ 193.701629][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.708751][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.735613][ T8043] fido_id[8043]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 193.842608][ T8053] netlink: 'syz.3.818': attribute type 9 has an invalid length. [ 194.219687][ T8063] loop3: detected capacity change from 0 to 1024 [ 194.247597][ T8063] EXT4-fs: inline encryption not supported [ 194.345135][ T5907] IPVS: starting estimator thread 0... [ 194.420680][ T8063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.436636][ T8072] IPVS: using max 23 ests per chain, 55200 per kthread [ 194.513641][ T8063] EXT4-fs warning (device loop3): ext4_resize_begin:71: won't resize using backup superblock at 1 [ 194.852383][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.876457][ T8085] loop2: detected capacity change from 0 to 2048 [ 194.971778][ T8085] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.325987][ T8100] loop0: detected capacity change from 0 to 22 [ 195.418142][ T8100] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 195.448757][ T8100] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 195.743758][ T8103] loop6: detected capacity change from 0 to 4096 [ 195.862574][ T8103] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 195.990490][ T8103] ntfs3(loop6): Failed to load $Extend (-22). [ 195.990529][ T8103] ntfs3(loop6): Failed to initialize $Extend. [ 196.093302][ T8115] loop0: detected capacity change from 0 to 1024 [ 196.191884][ T8115] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.595617][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.828576][ T8124] loop6: detected capacity change from 0 to 2048 [ 196.871029][ T8124] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.877380][ T8096] loop1: detected capacity change from 0 to 32768 [ 196.953723][ T31] audit: type=1800 audit(1773433744.637:31): pid=8124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.839" name="file1" dev="loop6" ino=1415 res=0 errno=0 [ 197.484549][ T8109] loop3: detected capacity change from 0 to 32768 [ 197.532576][ T8136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.841'. [ 197.597911][ T8109] [ 197.597911][ T8109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.597911][ T8109] [ 197.628792][ T8136] tipc: Invalid UDP bearer configuration [ 197.628860][ T8136] tipc: Enabling of bearer rejected, failed to enable media [ 197.651680][ T8138] loop0: detected capacity change from 0 to 1024 [ 197.662219][ T8110] loop4: detected capacity change from 0 to 40427 [ 197.706115][ T8110] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 197.760925][ T8110] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 197.861082][ T8138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.995927][ T8149] loop2: detected capacity change from 0 to 128 [ 198.043235][ T5829] [ 198.043235][ T5829] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.043235][ T5829] [ 198.120293][ T5829] [ 198.120293][ T5829] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.120293][ T5829] [ 198.134213][ T31] audit: type=1800 audit(1773433745.817:32): pid=8138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.843" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 198.183798][ T8149] EXT4-fs (loop2): Test dummy encryption mode enabled [ 198.313980][ T8149] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.370634][ T8110] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 198.388717][ T8149] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.425470][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.454981][ T8110] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 198.488448][ T8110] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 198.653749][ T5826] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.235124][ T8177] loop1: detected capacity change from 0 to 128 [ 199.835632][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.6.862'. [ 200.006344][ T8193] tipc: Started in network mode [ 200.033695][ T8193] tipc: Node identity 7f000001, cluster identity 4711 [ 200.060757][ T8193] tipc: Enabling of bearer rejected, failed to enable media [ 200.229802][ T5914] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 200.429103][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 200.443313][ T5914] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 200.474449][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.484333][ T8207] netlink: 12 bytes leftover after parsing attributes in process `syz.6.871'. [ 200.552059][ T5914] usb 1-1: Product: syz [ 200.556304][ T5914] usb 1-1: Manufacturer: syz [ 200.573864][ T5914] usb 1-1: SerialNumber: syz [ 200.630579][ T5914] usb 1-1: config 0 descriptor?? [ 200.666457][ T5914] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 200.877477][ T5914] usb 1-1: clie_3_5_startup: get config number bad return length: 0 [ 200.938538][ T5914] visor 1-1:0.0: probe with driver visor failed with error -5 [ 201.056328][ T8221] loop2: detected capacity change from 0 to 1024 [ 201.076126][ T8221] EXT4-fs: Ignoring removed orlov option [ 201.128619][ T5803] usb 1-1: USB disconnect, device number 14 [ 201.192205][ T8221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.329052][ T8221] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4221: comm syz.2.878: Allocating blocks 497-513 which overlap fs metadata [ 201.403370][ T8234] loop6: detected capacity change from 0 to 1024 [ 201.430742][ T8221] EXT4-fs (loop2): Remounting filesystem read-only [ 201.570668][ T1005] hfsplus: b-tree write err: -5, ino 25 [ 201.602024][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.617320][ T1005] hfsplus: b-tree write err: -5, ino 4 [ 201.633811][ T1005] hfsplus: b-tree write err: -5, ino 2 [ 202.172542][ T8218] loop1: detected capacity change from 0 to 32768 [ 202.176721][ T8215] loop3: detected capacity change from 0 to 32768 [ 202.224434][ T8215] [ 202.224434][ T8215] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.224434][ T8215] [ 202.276180][ T8218] jfs_lookup: iget failed on inum 4 [ 202.308199][ T8218] jfs_lookup: iget failed on inum 4 [ 202.538395][ T5829] [ 202.538395][ T5829] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.538395][ T5829] [ 202.561441][ T5829] [ 202.561441][ T5829] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.561441][ T5829] [ 202.972292][ T8262] loop4: detected capacity change from 0 to 256 [ 203.518533][ T5803] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 203.697419][ T5803] usb 2-1: Using ep0 maxpacket: 16 [ 203.738976][ T5803] usb 2-1: config 127 has an invalid interface number: 124 but max is 0 [ 203.764492][ T5803] usb 2-1: config 127 has no interface number 0 [ 203.784224][ T8274] loop4: detected capacity change from 0 to 4096 [ 203.796920][ T5803] usb 2-1: config 127 interface 124 has no altsetting 0 [ 203.827217][ T8274] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 203.838630][ T5803] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 203.867881][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.917389][ T5803] usb 2-1: Product: syz [ 203.930090][ T5803] usb 2-1: Manufacturer: syz [ 203.987513][ T5803] usb 2-1: SerialNumber: syz [ 204.126668][ T8274] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 204.166689][ T8274] ntfs3(loop4): ino=1a, mi_enum_attr [ 204.200777][ T8274] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 204.248108][ T8288] loop6: detected capacity change from 0 to 1024 [ 204.401665][ T8288] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.415905][ T8290] loop2: detected capacity change from 0 to 2048 [ 204.579412][ T8295] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.726506][ T31] audit: type=1800 audit(1773433752.397:33): pid=8288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.908" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 204.869777][ T5803] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 204.961243][ T8300] loop0: detected capacity change from 0 to 2048 [ 205.010539][ T7215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.065994][ T8300] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.176429][ T31] audit: type=1800 audit(1773433752.857:34): pid=8300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.911" name="file1" dev="loop0" ino=1415 res=0 errno=0 [ 205.203240][ T8303] loop2: detected capacity change from 0 to 256 [ 205.240289][ T8303] exfat: Deprecated parameter 'utf8' [ 205.292802][ T8303] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 205.384845][ T5803] usb 2-1: failed to restore interface 124 altsetting 11 (error=-71) [ 205.487666][ T5803] usb 2-1: USB disconnect, device number 6 [ 205.559131][ T8284] loop3: detected capacity change from 0 to 32768 [ 205.644801][ T8284] xfs: Deprecated parameter 'attr2' [ 205.677633][ T8284] XFS: attr2 mount option is deprecated. [ 205.830790][ T8284] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 205.999840][ T8284] XFS (loop3): Ending clean mount [ 206.032794][ T8284] XFS (loop3): Quotacheck needed: Please wait. [ 206.202975][ T8325] macsec1: entered promiscuous mode [ 206.248777][ T8284] XFS (loop3): Quotacheck: Done. [ 206.263314][ T8325] macsec1: entered allmulticast mode [ 206.368817][ T31] audit: type=1800 audit(1773433754.047:35): pid=8284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.906" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 206.586297][ T8334] loop0: detected capacity change from 0 to 2048 [ 206.635881][ T5829] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 206.665006][ T8334] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.110681][ T8343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.186414][ T8315] set_capacity_and_notify: 2 callbacks suppressed [ 207.186443][ T8315] loop2: detected capacity change from 0 to 32768 [ 207.205687][ T8348] loop0: detected capacity change from 0 to 64 [ 207.225762][ T3451] hfsplus: b-tree write err: -5, ino 25 [ 207.251538][ T3451] hfsplus: b-tree write err: -5, ino 4 [ 207.300685][ T31] audit: type=1800 audit(1773433754.987:36): pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.927" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 207.304053][ T8315] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 207.330105][ T3451] hfsplus: b-tree write err: -5, ino 2 [ 207.565347][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.677018][ T29] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 207.764935][ T8315] XFS (loop2): Ending clean mount [ 207.857351][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 207.868484][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 207.888773][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.899118][ T29] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 207.909283][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 207.921930][ T29] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 207.933104][ T29] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 207.964584][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.990023][ T29] usb 2-1: config 0 descriptor?? [ 208.001824][ T8357] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 208.050287][ T5826] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 208.269521][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 208.285374][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 208.300528][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 208.309029][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 208.471284][ T5963] usb 2-1: USB disconnect, device number 7 [ 208.477232][ T5842] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 209.175620][ T8389] loop3: detected capacity change from 0 to 256 [ 209.190283][ T8385] loop2: detected capacity change from 0 to 2048 [ 209.254868][ T8389] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e09, chksum : 0x7e84ed8f, utbl_chksum : 0xe619d30d) [ 209.317835][ T8385] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.404633][ T31] audit: type=1800 audit(1773433757.087:37): pid=8385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.931" name="file1" dev="loop2" ino=1415 res=0 errno=0 [ 209.739177][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'. [ 209.958602][ T8407] netlink: 44 bytes leftover after parsing attributes in process `syz.1.953'. [ 210.028554][ T8407] netlink: 44 bytes leftover after parsing attributes in process `syz.1.953'. [ 210.088663][ T8410] netlink: 332 bytes leftover after parsing attributes in process `syz.6.954'. [ 210.136156][ T8410] netlink: 'syz.6.954': attribute type 9 has an invalid length. [ 210.199112][ T8410] netlink: 108 bytes leftover after parsing attributes in process `syz.6.954'. [ 210.250882][ T8410] netlink: 32 bytes leftover after parsing attributes in process `syz.6.954'. [ 210.636642][ T8424] loop2: detected capacity change from 0 to 256 [ 210.679026][ T31] audit: type=1326 audit(1773433758.367:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8425 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbc99c799 code=0x7ffc0000 [ 210.731800][ T8424] exfat: Deprecated parameter 'utf8' [ 210.748468][ T8430] loop0: detected capacity change from 0 to 256 [ 210.771827][ T31] audit: type=1326 audit(1773433758.397:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8425 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbc99c799 code=0x7ffc0000 [ 210.787328][ T8424] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 210.884064][ T31] audit: type=1326 audit(1773433758.407:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8425 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffbbc99c799 code=0x7ffc0000 [ 210.935551][ T8429] loop6: detected capacity change from 0 to 4096 [ 210.991674][ T8429] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 210.997021][ T31] audit: type=1326 audit(1773433758.407:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8425 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbc99c799 code=0x7ffc0000 [ 211.123780][ T8429] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 211.169667][ T31] audit: type=1326 audit(1773433758.407:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8425 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbc99c799 code=0x7ffc0000 [ 211.219162][ T8433] loop1: detected capacity change from 0 to 2048 [ 211.297541][ T31] audit: type=1326 audit(1773433758.407:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8425 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7ffbbc99c799 code=0x7ffc0000 [ 211.310629][ T8433] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.329843][ T8404] loop3: detected capacity change from 0 to 32768 [ 211.418487][ T31] audit: type=1326 audit(1773433758.407:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8425 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbc99c799 code=0x7ffc0000 [ 211.456601][ T8404] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 211.459477][ T31] audit: type=1800 audit(1773433759.127:45): pid=8433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.965" name="file1" dev="loop1" ino=1415 res=0 errno=0 [ 211.727276][ T8404] XFS (loop3): Ending clean mount [ 212.110525][ T5829] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 212.487139][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.980'. [ 212.924585][ T8474] loop1: detected capacity change from 0 to 4096 [ 212.986945][ T8474] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 213.013930][ T8480] vivid-000: disconnect [ 213.051077][ T8479] vivid-000: reconnect [ 213.068810][ T8474] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 213.087777][ T8474] ntfs3(loop1): ino=1a, mi_enum_attr [ 213.094546][ T8474] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 213.412330][ T8489] loop3: detected capacity change from 0 to 2048 [ 213.466969][ T8489] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.572892][ T31] audit: type=1800 audit(1773433761.247:46): pid=8489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.986" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 213.990877][ T8498] loop2: detected capacity change from 0 to 128 [ 214.039244][ T8498] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 214.074113][ T8498] ext4 filesystem being mounted at /181/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 214.432869][ T5826] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 214.829519][ T8519] loop1: detected capacity change from 0 to 2048 [ 214.906543][ T8519] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.944867][ T8523] loop6: detected capacity change from 0 to 1024 [ 215.238240][ T8529] xt_l2tp: v2 sid > 0xffff: 1114112 [ 215.442867][ T8508] loop3: detected capacity change from 0 to 32768 [ 215.451354][ T3451] hfsplus: b-tree write err: -5, ino 25 [ 215.480225][ T3451] hfsplus: b-tree write err: -5, ino 4 [ 215.499212][ T3451] hfsplus: b-tree write err: -5, ino 2 [ 215.547451][ T8508] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 215.730900][ T8508] XFS (loop3): Ending clean mount [ 215.788726][ T8508] XFS (loop3): Quotacheck needed: Please wait. [ 215.907199][ T8508] XFS (loop3): Quotacheck: Done. [ 215.948386][ T5914] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 216.126798][ T8525] loop0: detected capacity change from 0 to 32768 [ 216.137314][ T5829] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 216.147243][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 216.149839][ T5914] usb 3-1: unable to get BOS descriptor or descriptor too short [ 216.189394][ T8525] (syz.0.1006,8525,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 216.225119][ T5914] usb 3-1: config 4 has too many interfaces: 231, using maximum allowed: 32 [ 216.264823][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 216.266159][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 216.278315][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 216.279373][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 216.300453][ T8525] (syz.0.1006,8525,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 216.334902][ T5914] usb 3-1: config 4 has 1 interface, different from the descriptor's value: 231 [ 216.370522][ T5914] usb 3-1: config 4 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.393165][ T5914] usb 3-1: config 4 interface 0 has no altsetting 0 [ 216.417302][ T5914] usb 3-1: string descriptor 0 read error: -22 [ 216.423659][ T5914] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 216.441814][ T8525] JBD2: Ignoring recovery information on journal [ 216.449572][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.478027][ T5803] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 216.565910][ T5914] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 216.620647][ T8525] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 216.632612][ T5914] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 216.666541][ T5914] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 216.686954][ T5803] usb 5-1: Using ep0 maxpacket: 32 [ 216.714326][ T5914] usb 3-1: media controller created [ 216.723706][ T5803] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 216.798952][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.820901][ T5803] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 216.831510][ T8541] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 216.849096][ T5803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.883423][ T5803] usb 5-1: Product: syz [ 216.904494][ T5803] usb 5-1: Manufacturer: syz [ 216.927233][ T5803] usb 5-1: SerialNumber: syz [ 216.928811][ T5914] zl10353_read_register: readreg error (reg=127, ret==0) [ 216.953592][ T5803] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 217.013226][ T5803] imon 5-1:155.0: unable to initialize intf0, err -19 [ 217.031184][ T5803] imon:imon_probe: failed to initialize context! [ 217.057372][ T5803] imon 5-1:155.0: unable to register, err -19 [ 217.115294][ T5828] ocfs2: Unmounting device (7,0) on (node local) [ 217.178953][ T5914] usb 3-1: USB disconnect, device number 6 [ 217.384895][ T8564] team_slave_0: entered promiscuous mode [ 217.391034][ T8564] team_slave_1: entered promiscuous mode [ 217.453800][ T8564] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 217.538815][ T8568] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1022'. [ 217.854479][ T8575] loop3: detected capacity change from 0 to 1024 [ 217.855310][ T8560] loop1: detected capacity change from 0 to 32768 [ 217.888857][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'. [ 217.910901][ T8575] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 217.959985][ T8560] find_entry called with index = 0 [ 217.981711][ T8560] read_mapping_page failed! [ 218.015380][ T8575] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c841e018, mo2=0000] [ 218.024668][ T8560] ERROR: (device loop1): txAbort: [ 218.024668][ T8560] [ 218.061151][ T8578] jfs_unlink: dtDelete returned -116 [ 218.061736][ T8575] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 2: comm syz.3.1025: lblock 2 mapped to illegal pblock 2 (length 1) [ 218.082568][ T8575] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 218.092622][ T8575] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 218.101761][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 218.101799][ C0] EXT4-fs (loop3): initial error at time 1773433765: ext4_map_blocks:776: inode 3: block 2 [ 218.101869][ C0] EXT4-fs (loop3): last error at time 1773433765: ext4_map_blocks:776: inode 3: block 2 [ 218.112256][ T8578] jfs_unlink: dtDelete returned -116 [ 218.161541][ T8575] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 48: comm syz.3.1025: lblock 0 mapped to illegal pblock 48 (length 1) [ 218.177380][ T8575] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 218.207524][ T8575] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 218.241907][ T8575] EXT4-fs error (device loop3): ext4_acquire_dquot:6999: comm syz.3.1025: Failed to acquire dquot type 0 [ 218.271515][ T8575] loop3: lost filesystem error report for type 5 error -117 [ 218.290756][ T8575] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 218.319599][ T8575] loop3: lost filesystem error report for type 5 error -117 [ 218.319947][ T8575] EXT4-fs error (device loop3): ext4_evict_inode:255: inode #11: comm syz.3.1025: mark_inode_dirty error [ 218.358420][ T8575] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 218.371232][ T8575] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 218.412143][ T8575] EXT4-fs (loop3): 1 orphan inode deleted [ 218.457070][ T8575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.471486][ T769] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 218.556977][ T769] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 218.569814][ T8586] tmpfs: Bad value for 'mpol' [ 218.606951][ T769] EXT4-fs error (device loop3): ext4_release_dquot:7035: comm kworker/u8:7: Failed to release dquot type 0 [ 218.810202][ T49] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 218.845523][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.867147][ T49] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 218.870809][ T49] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 218.926980][ T49] EXT4-fs error (device loop3): ext4_release_dquot:7035: comm kworker/u8:3: Failed to release dquot type 0 [ 218.975729][ T49] loop3: lost filesystem error report for type 5 error -117 [ 218.991261][ T5829] EXT4-fs error (device loop3): __ext4_get_inode_loc:4781: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 219.047162][ T5829] loop3: lost filesystem error report for type 5 error -117 [ 219.047524][ T5829] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 219.105976][ T5829] loop3: lost filesystem error report for type 5 error -117 [ 219.106272][ T5829] EXT4-fs error (device loop3): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 219.179700][ T5829] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 219.209377][ T5914] usb 5-1: USB disconnect, device number 4 [ 219.515444][ T8614] loop6: detected capacity change from 0 to 256 [ 219.517404][ T5803] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 219.606161][ T8616] loop3: detected capacity change from 0 to 64 [ 219.615504][ T8614] exfat: Deprecated parameter 'namecase' [ 219.667047][ T8614] exfat: Deprecated parameter 'utf8' [ 219.718606][ T5803] usb 2-1: Using ep0 maxpacket: 16 [ 219.738708][ T8614] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 219.750877][ T5803] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.750944][ T5803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 219.750994][ T5803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 219.751035][ T5803] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 219.751078][ T5803] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.752733][ T5803] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 219.901563][ T5803] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 219.945540][ T8596] loop2: detected capacity change from 0 to 32768 [ 219.956928][ T5803] usb 2-1: Manufacturer: syz [ 219.978500][ T5803] usb 2-1: config 0 descriptor?? [ 220.038210][ T8596] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1032 (8596) [ 220.140446][ T8596] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 220.177627][ T8596] BTRFS info (device loop2): using sha256 checksum algorithm [ 220.210366][ T8622] capability: warning: `syz.0.1043' uses 32-bit capabilities (legacy support in use) [ 220.424534][ T8596] BTRFS info (device loop2): rebuilding free space tree [ 220.477045][ T5803] rc_core: IR keymap rc-hauppauge not found [ 220.493239][ T5803] Registered IR keymap rc-empty [ 220.504631][ T5803] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 220.518311][ T8596] BTRFS info (device loop2): disabling free space tree [ 220.525355][ T8596] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 220.580561][ T5803] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 220.615642][ T8596] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 220.628944][ T5803] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 220.689620][ T5803] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 220.729064][ T8596] BTRFS info (device loop2): setting nodatasum [ 220.748795][ T8596] BTRFS info (device loop2): setting nodatacow [ 220.776086][ T8596] BTRFS info (device loop2): turning off barriers [ 220.777434][ T5803] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 220.806355][ T8596] BTRFS info (device loop2): force clearing of disk cache [ 220.871802][ T5803] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 220.918829][ T5803] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 220.937911][ T5803] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 220.957641][ T5803] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 220.977099][ T5803] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 220.997087][ T5803] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.017069][ T5803] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.038684][ T5803] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.061264][ T5803] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.090874][ T5803] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 221.090919][ T5803] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 221.111791][ T5803] usb 2-1: USB disconnect, device number 8 [ 221.412801][ T5826] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 222.188987][ T5914] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 222.411367][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 222.418260][ T8682] loop1: detected capacity change from 0 to 256 [ 222.441804][ T5914] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.505545][ T5914] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 222.526470][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.548498][ T8682] FAT-fs (loop1): Directory bread(block 64) failed [ 222.555096][ T8682] FAT-fs (loop1): Directory bread(block 65) failed [ 222.599540][ T5914] usb 1-1: Product: syz [ 222.603771][ T5914] usb 1-1: Manufacturer: syz [ 222.622885][ T8654] loop4: detected capacity change from 0 to 32768 [ 222.631647][ T8682] FAT-fs (loop1): Directory bread(block 66) failed [ 222.640672][ T5914] usb 1-1: SerialNumber: syz [ 222.645509][ T8682] FAT-fs (loop1): Directory bread(block 67) failed [ 222.654787][ T8654] xfs: Deprecated parameter 'attr2' [ 222.668925][ T5914] usb 1-1: config 0 descriptor?? [ 222.674418][ T8682] FAT-fs (loop1): Directory bread(block 68) failed [ 222.688354][ T8654] XFS: attr2 mount option is deprecated. [ 222.694900][ T8682] FAT-fs (loop1): Directory bread(block 69) failed [ 222.713598][ T5914] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 222.740544][ T5914] usb 1-1: selecting invalid altsetting 1 [ 222.767342][ T8654] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 222.821337][ T8682] FAT-fs (loop1): Directory bread(block 70) failed [ 222.870554][ T8682] FAT-fs (loop1): Directory bread(block 71) failed [ 222.948873][ T8682] FAT-fs (loop1): Directory bread(block 72) failed [ 223.003096][ T8666] loop2: detected capacity change from 0 to 32768 [ 223.015507][ T8696] loop6: detected capacity change from 0 to 64 [ 223.018008][ T8654] XFS (loop4): Ending clean mount [ 223.033801][ T8682] FAT-fs (loop1): Directory bread(block 73) failed [ 223.081127][ T8654] XFS (loop4): Quotacheck needed: Please wait. [ 223.160954][ T8666] JBD2: Ignoring recovery information on journal [ 223.167115][ T5914] usb 1-1: USB disconnect, device number 15 [ 223.198401][ T8699] loop3: detected capacity change from 0 to 128 [ 223.285555][ T8666] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 223.300899][ T8699] FAT-fs (loop3): Directory bread(block 162) failed [ 223.373370][ T8699] FAT-fs (loop3): Directory bread(block 163) failed [ 223.398907][ T8654] XFS (loop4): Quotacheck: Done. [ 223.418054][ T8699] FAT-fs (loop3): Directory bread(block 164) failed [ 223.424724][ T8699] FAT-fs (loop3): Directory bread(block 165) failed [ 223.478534][ T8699] FAT-fs (loop3): Directory bread(block 166) failed [ 223.494597][ T8699] FAT-fs (loop3): Directory bread(block 167) failed [ 223.554280][ T8699] FAT-fs (loop3): Directory bread(block 168) failed [ 223.608479][ T8699] FAT-fs (loop3): Directory bread(block 169) failed [ 223.649114][ T8699] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 223.695628][ T5830] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 223.760338][ T8699] FAT-fs (loop3): Directory bread(block 162) failed [ 223.835730][ T8699] FAT-fs (loop3): Directory bread(block 163) failed [ 223.889974][ T8699] syz.3.1066: attempt to access beyond end of device [ 223.889974][ T8699] loop3: rw=8388611, sector=226, nr_sectors = 6 limit=128 [ 224.008507][ T8699] syz.3.1066: attempt to access beyond end of device [ 224.008507][ T8699] loop3: rw=8390659, sector=232, nr_sectors = 2 limit=128 [ 224.263964][ T5826] ocfs2: Unmounting device (7,2) on (node local) [ 224.706206][ T8723] loop6: detected capacity change from 0 to 512 [ 224.793335][ T8723] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 224.877147][ T5803] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 224.982557][ T8723] EXT4-fs warning (device loop6): dx_probe:836: inode #2: comm syz.6.1077: Unimplemented hash flags: 0x0001 [ 224.982630][ T8723] EXT4-fs warning (device loop6): dx_probe:933: inode #2: comm syz.6.1077: Corrupt directory, running e2fsck is recommended [ 225.038988][ T5803] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 225.039042][ T5803] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.039077][ T5803] usb 1-1: config 0 has no interface number 0 [ 225.039134][ T5803] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 225.039177][ T5803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.042546][ T5803] usb 1-1: config 0 descriptor?? [ 225.045396][ T5803] usb 1-1: bad CDC descriptors [ 225.125866][ T8734] netlink: 'syz.4.1081': attribute type 2 has an invalid length. [ 225.277401][ T5963] usb 1-1: USB disconnect, device number 16 [ 225.343082][ T7215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.393863][ T8736] loop1: detected capacity change from 0 to 512 [ 225.467698][ T8736] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 225.675954][ T8740] loop4: detected capacity change from 0 to 4096 [ 225.701056][ T8740] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 225.716079][ T8744] loop3: detected capacity change from 0 to 1024 [ 225.809063][ T8744] hfsplus: b-tree write err: -5, ino 20 [ 226.018536][ T8750] loop1: detected capacity change from 0 to 1024 [ 226.054572][ T8750] EXT4-fs: inline encryption not supported [ 226.077104][ T3451] hfsplus: b-tree write err: -5, ino 25 [ 226.082845][ T3451] hfsplus: b-tree write err: -5, ino 4 [ 226.138915][ T3451] hfsplus: b-tree write err: -5, ino 2 [ 226.144888][ T3451] hfsplus: b-tree write err: -5, ino 20 [ 226.244724][ T8754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1104'. [ 226.291481][ T8750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.528166][ T8750] EXT4-fs error (device loop1): mb_free_blocks:2044: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 226.571191][ T8760] loop4: detected capacity change from 0 to 4096 [ 226.629302][ T8750] EXT4-fs (loop1): Remounting filesystem read-only [ 226.636807][ T8760] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 226.849000][ T8760] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 226.972811][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.284533][ T8775] loop1: detected capacity change from 0 to 256 [ 227.361942][ T8777] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1100'. [ 227.386807][ T8779] loop4: detected capacity change from 0 to 65 [ 227.417284][ T8773] loop0: detected capacity change from 0 to 4096 [ 227.436630][ T8775] FAT-fs (loop1): Directory bread(block 64) failed [ 227.461534][ T8779] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 227.469805][ T8775] FAT-fs (loop1): Directory bread(block 65) failed [ 227.469939][ T8775] FAT-fs (loop1): Directory bread(block 66) failed [ 227.469978][ T8775] FAT-fs (loop1): Directory bread(block 67) failed [ 227.470093][ T8775] FAT-fs (loop1): Directory bread(block 68) failed [ 227.470131][ T8775] FAT-fs (loop1): Directory bread(block 69) failed [ 227.470228][ T8775] FAT-fs (loop1): Directory bread(block 70) failed [ 227.470266][ T8775] FAT-fs (loop1): Directory bread(block 71) failed [ 227.470361][ T8775] FAT-fs (loop1): Directory bread(block 72) failed [ 227.470400][ T8775] FAT-fs (loop1): Directory bread(block 73) failed [ 227.686960][ T8773] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 227.788121][ T8773] ntfs3(loop0): ino=1a, mi_enum_attr [ 227.809905][ T8773] ntfs3(loop0): ino=1a, mi_enum_attr [ 227.837175][ T8773] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 228.154387][ T8761] loop6: detected capacity change from 0 to 32768 [ 228.189818][ T8761] (syz.6.1093,8761,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 228.275031][ T8761] (syz.6.1093,8761,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 228.373401][ T8761] JBD2: Ignoring recovery information on journal [ 228.495065][ T8761] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 228.689484][ T8802] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 228.791991][ T8802] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 228.825463][ T8802] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 228.915962][ T7215] ocfs2: Unmounting device (7,6) on (node local) [ 229.395094][ T8814] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 229.522617][ T8814] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 229.551022][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 229.703189][ T8820] sp0: Synchronizing with TNC [ 229.950077][ T1005] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 230.550786][ T8844] set_capacity_and_notify: 2 callbacks suppressed [ 230.550815][ T8844] loop2: detected capacity change from 0 to 2048 [ 230.628617][ T8844] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 230.709954][ T8853] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 231.049494][ T8857] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1135'. [ 231.101461][ T8857] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1135'. [ 231.132808][ T8857] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1135'. [ 231.482112][ T8866] loop1: detected capacity change from 0 to 2048 [ 231.525854][ T8866] EXT4-fs: Ignoring removed mblk_io_submit option [ 231.664721][ T8866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.756397][ T8850] loop6: detected capacity change from 0 to 32768 [ 231.853987][ T8878] loop2: detected capacity change from 0 to 256 [ 231.862438][ T8850] JBD2: Ignoring recovery information on journal [ 231.937976][ T8850] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 232.055331][ T31] audit: type=1800 audit(1773433779.737:47): pid=8850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1131" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 232.085866][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.153604][ T8878] FAT-fs (loop2): Directory bread(block 64) failed [ 232.198378][ T8878] FAT-fs (loop2): Directory bread(block 65) failed [ 232.205047][ T8878] FAT-fs (loop2): Directory bread(block 66) failed [ 232.265167][ T8878] FAT-fs (loop2): Directory bread(block 67) failed [ 232.318514][ T8878] FAT-fs (loop2): Directory bread(block 68) failed [ 232.349193][ T8878] FAT-fs (loop2): Directory bread(block 69) failed [ 232.357190][ T8878] FAT-fs (loop2): Directory bread(block 70) failed [ 232.363754][ T8878] FAT-fs (loop2): Directory bread(block 71) failed [ 232.439225][ T8878] FAT-fs (loop2): Directory bread(block 72) failed [ 232.439404][ T7215] ocfs2: Unmounting device (7,6) on (node local) [ 232.445809][ T8878] FAT-fs (loop2): Directory bread(block 73) failed [ 232.469808][ T8891] loop1: detected capacity change from 0 to 164 [ 232.717191][ T8891] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 233.151146][ T8906] nftables ruleset with unbound set [ 233.168428][ T5963] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 233.285694][ T8911] loop1: detected capacity change from 0 to 1024 [ 233.332637][ T5963] usb 5-1: Using ep0 maxpacket: 16 [ 233.344107][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.383830][ T8911] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 233.395473][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.423877][ T5963] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 233.489041][ T8911] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c841e018, mo2=0000] [ 233.570483][ T5963] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 233.589905][ T8911] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 2: comm syz.1.1158: lblock 2 mapped to illegal pblock 2 (length 1) [ 233.648642][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.680401][ T8911] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 233.681172][ T8911] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 233.690307][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 233.690344][ C0] EXT4-fs (loop1): initial error at time 1773433781: ext4_map_blocks:776: inode 3: block 2 [ 233.690413][ C0] EXT4-fs (loop1): last error at time 1773433781: ext4_map_blocks:776: inode 3: block 2 [ 233.730193][ T5963] usb 5-1: config 0 descriptor?? [ 233.785598][ T8911] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 48: comm syz.1.1158: lblock 0 mapped to illegal pblock 48 (length 1) [ 233.888428][ T8911] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 233.890648][ T8911] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 233.999609][ T8911] EXT4-fs error (device loop1): ext4_acquire_dquot:6999: comm syz.1.1158: Failed to acquire dquot type 0 [ 233.999722][ T8911] loop1: lost filesystem error report for type 5 error -117 [ 234.000160][ T8911] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 234.000244][ T8911] loop1: lost filesystem error report for type 5 error -117 [ 234.000554][ T8911] EXT4-fs error (device loop1): ext4_evict_inode:255: inode #11: comm syz.1.1158: mark_inode_dirty error [ 234.000600][ T8911] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 234.007764][ T8911] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 234.007888][ T8911] EXT4-fs (loop1): 1 orphan inode deleted [ 234.011162][ T8911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.040402][ T141] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 234.048431][ T141] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 234.048487][ T141] EXT4-fs error (device loop1): ext4_release_dquot:7035: comm kworker/u8:6: Failed to release dquot type 0 [ 234.209768][ T5963] hid_parser_main: 28 callbacks suppressed [ 234.209804][ T5963] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 234.209845][ T5963] microsoft 0003:045E:07DA.000E: ignoring exceeding usage max [ 234.212689][ T5963] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 234.212730][ T5963] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 234.212766][ T5963] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 234.212802][ T5963] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 234.212838][ T5963] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 234.212874][ T5963] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 234.212910][ T5963] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 234.212952][ T5963] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 234.212988][ T5963] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 234.266404][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.266760][ T1005] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 234.266883][ T1005] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 234.273670][ T1005] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 234.273725][ T1005] EXT4-fs error (device loop1): ext4_release_dquot:7035: comm kworker/u8:8: Failed to release dquot type 0 [ 234.273793][ T1005] loop1: lost filesystem error report for type 5 error -117 [ 234.276000][ T5827] EXT4-fs error (device loop1): __ext4_get_inode_loc:4781: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 234.276096][ T5827] loop1: lost filesystem error report for type 5 error -117 [ 234.276410][ T5827] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 234.276445][ T5827] loop1: lost filesystem error report for type 5 error -117 [ 234.276740][ T5827] EXT4-fs error (device loop1): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 234.276784][ T5827] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 234.415786][ T5963] microsoft 0003:045E:07DA.000E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 234.415853][ T5963] microsoft 0003:045E:07DA.000E: no inputs found [ 234.415882][ T5963] microsoft 0003:045E:07DA.000E: could not initialize ff, continuing anyway [ 234.438405][ T5963] usb 5-1: USB disconnect, device number 5 [ 234.690994][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.921995][ T8941] fido_id[8941]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 235.229168][ T8949] loop2: detected capacity change from 0 to 1024 [ 235.317931][ T8949] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 235.375496][ T8949] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 235.453723][ T8952] loop4: detected capacity change from 0 to 512 [ 235.474467][ T8949] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 235.555615][ T8926] loop3: detected capacity change from 0 to 32768 [ 235.562133][ T8952] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 235.586810][ T8949] EXT4-fs error (device loop2): ext4_get_journal_inode:5863: inode #5: comm syz.2.1170: unexpected bad inode w/o EXT4_IGET_BAD [ 235.625285][ T8949] loop2: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 235.625691][ T8949] EXT4-fs (loop2): no journal found [ 235.635061][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 235.635097][ C1] EXT4-fs (loop2): initial error at time 1773433783: ext4_get_journal_inode:5863: inode 5 [ 235.635152][ C1] EXT4-fs (loop2): last error at time 1773433783: ext4_get_journal_inode:5863: inode 5 [ 235.692293][ T8952] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1171: bad orphan inode 16 [ 235.692343][ T8952] loop4: lost filesystem error report for type 5 error -117 [ 235.696895][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 235.696929][ C1] EXT4-fs (loop4): initial error at time 1773433783: ext4_orphan_get:1417 [ 235.696971][ C1] EXT4-fs (loop4): last error at time 1773433783: ext4_orphan_get:1417 [ 235.749671][ T8952] ext4_test_bit(bit=15, block=4) = 0 [ 235.749708][ T8952] EXT4-fs (loop4): 1 orphan inode deleted [ 235.758297][ T8926] JBD2: Ignoring recovery information on journal [ 235.860880][ T8952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.883394][ T8949] EXT4-fs (loop2): can't get journal size [ 235.889534][ T8931] loop0: detected capacity change from 0 to 32768 [ 235.892976][ T8952] EXT4-fs error (device loop4): __ext4_new_inode:1072: comm syz.4.1171: reserved inode found cleared - inode=9 [ 235.913431][ T8949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 235.925980][ T8964] loop6: detected capacity change from 0 to 64 [ 235.967320][ T8926] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 236.065258][ T8931] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 236.139818][ T8949] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (42152!=20869) [ 236.182539][ T31] audit: type=1800 audit(1773433783.867:48): pid=8926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1163" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 236.232901][ T8931] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 236.345720][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.384760][ T8931] JBD2: Ignoring recovery information on journal [ 236.510852][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.520471][ T8954] loop1: detected capacity change from 0 to 32768 [ 236.596255][ T8931] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 236.640291][ T8954] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 236.759082][ T5829] ocfs2: Unmounting device (7,3) on (node local) [ 236.839743][ T8980] loop4: detected capacity change from 0 to 1024 [ 236.909124][ T8954] XFS (loop1): Ending clean mount [ 237.354149][ T5828] ocfs2: Unmounting device (7,0) on (node local) [ 237.378190][ T5827] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 237.406959][ T24] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 237.620507][ T24] usb 4-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 237.698770][ T24] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 237.719757][ T5963] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 237.775442][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.816935][ T24] usb 4-1: Product: syz [ 237.821194][ T24] usb 4-1: Manufacturer: syz [ 237.855641][ T24] usb 4-1: SerialNumber: syz [ 237.938588][ T5963] usb 7-1: Using ep0 maxpacket: 16 [ 237.953354][ T5963] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.953414][ T5963] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.953456][ T5963] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 237.953523][ T5963] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 237.953565][ T5963] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.970834][ T5963] usb 7-1: config 0 descriptor?? [ 238.358960][ T24] usb 4-1: Limiting number of CPorts to U8_MAX [ 238.379113][ T24] usb 4-1: Not enough endpoints found in device, aborting! [ 238.480672][ T5963] input: HID 05ac:8241 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:05AC:8241.000F/input/input12 [ 238.629509][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1188'. [ 238.640745][ T24] usb 4-1: USB disconnect, device number 5 [ 238.658308][ T5963] appleir 0003:05AC:8241.000F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.6-1/input0 [ 238.721096][ T5963] usb 7-1: USB disconnect, device number 2 [ 239.056650][ T9025] loop2: detected capacity change from 0 to 256 [ 239.083258][ T9018] fido_id[9018]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 239.147734][ T9025] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 239.248707][ T5914] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 239.259096][ T5907] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 239.337815][ T9028] tipc: Enabled bearer , priority 10 [ 239.438635][ T5907] usb 1-1: Using ep0 maxpacket: 8 [ 239.446647][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 239.465762][ T5914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.483380][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.501100][ T5914] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 239.528853][ T5914] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 239.543215][ T5907] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.555120][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.563589][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 239.611876][ T5914] usb 5-1: config 0 descriptor?? [ 239.627937][ T5907] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 239.642461][ T5907] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 239.679234][ T5914] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 239.718562][ T5914] dvb-usb: bulk message failed: -22 (3/0) [ 239.728912][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.751598][ T5914] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 239.804541][ T5907] usb 1-1: config 0 descriptor?? [ 239.811715][ T5914] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 239.833710][ T5914] usb 5-1: media controller created [ 239.845694][ T9024] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 239.871416][ T9023] dvb-usb: bulk message failed: -22 (2/0) [ 239.898796][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 239.941723][ T5914] dvb-usb: bulk message failed: -22 (6/0) [ 239.949431][ T5914] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 239.962030][ T5914] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 240.039087][ T5914] dvb-usb: schedule remote query interval to 150 msecs. [ 240.052225][ T5914] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 240.094185][ T5914] usb 5-1: USB disconnect, device number 6 [ 240.274471][ T5847] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 240.288053][ T5847] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 240.294907][ T5847] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 240.303340][ T5847] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 240.360050][ T5914] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 240.478182][ T5907] usb 1-1: USB disconnect, device number 17 [ 240.478795][ T5139] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 241.616706][ T9069] loop3: detected capacity change from 0 to 4096 [ 241.670148][ T9069] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 241.751814][ T9075] loop6: detected capacity change from 0 to 512 [ 241.820527][ T9075] EXT4-fs: Ignoring removed orlov option [ 241.826248][ T9075] EXT4-fs: Ignoring removed mblk_io_submit option [ 241.878420][ T9069] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 241.925150][ T9075] EXT4-fs error (device loop6): ext4_iget_extra_inode:5024: inode #15: comm syz.6.1213: corrupted in-inode xattr: e_value size too large [ 242.034472][ T9075] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 242.036884][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 242.052729][ C0] EXT4-fs (loop6): initial error at time 1773433789: ext4_iget_extra_inode:5024: inode 15 [ 242.062821][ C0] EXT4-fs (loop6): last error at time 1773433789: ext4_iget_extra_inode:5024: inode 15 [ 242.065618][ T9075] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.1213: couldn't read orphan inode 15 (err -117) [ 242.208963][ T9075] loop6: lost filesystem error report for type 5 error -117 [ 242.211649][ T9075] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.239110][ T9069] ntfs3: Cannot use different iocharset when remounting! [ 242.624586][ T9086] loop4: detected capacity change from 0 to 1024 [ 242.642666][ T7215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.674366][ T9086] EXT4-fs: inline encryption not supported [ 242.703213][ T9092] loop1: detected capacity change from 0 to 22 [ 242.720251][ T9086] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 242.742768][ T9092] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 242.797452][ T9092] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 242.918164][ T9086] EXT4-fs error (device loop4): ext4_free_blocks:6723: comm syz.4.1218: Freeing blocks not in datazone - block = 0, count = 4096 [ 243.007101][ T9086] loop4: lost filesystem error report for type 5 error -117 [ 243.015600][ T9086] EXT4-fs (loop4): Remounting filesystem read-only [ 243.023105][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 243.023136][ C1] EXT4-fs (loop4): initial error at time 1773433790: ext4_free_blocks:6723 [ 243.023177][ C1] EXT4-fs (loop4): last error at time 1773433790: ext4_free_blocks:6723 [ 243.079226][ T9086] EXT4-fs (loop4): 1 orphan inode deleted [ 243.098712][ T37] EXT4-fs (loop4): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 243.098760][ T37] Quota error (device loop4): write_blk: dquota write failed [ 243.098786][ T37] Quota error (device loop4): remove_free_dqentry: Can't write block (2) with free entries [ 243.098817][ T37] EXT4-fs (loop4): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 243.098851][ T37] Quota error (device loop4): write_blk: dquota write failed [ 243.098877][ T37] Quota error (device loop4): free_dqentry: Can't move quota data block (2) to free list [ 243.098990][ T37] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 243.099023][ T37] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 243.121606][ T9086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.319589][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.751816][ T9113] netlink: 'syz.3.1231': attribute type 1 has an invalid length. [ 243.751870][ T9113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.913584][ T9117] loop6: detected capacity change from 0 to 1024 [ 244.046423][ T31] audit: type=1800 audit(1773433791.727:49): pid=9117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1233" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 244.070738][ T9121] sp0: Synchronizing with TNC [ 244.140611][ T5997] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 244.273762][ T141] hfsplus: b-tree write err: -5, ino 25 [ 244.302432][ T141] hfsplus: b-tree write err: -5, ino 4 [ 244.340137][ T5997] usb 1-1: Using ep0 maxpacket: 32 [ 244.360759][ T141] hfsplus: b-tree write err: -5, ino 2 [ 244.366451][ T141] hfsplus: b-tree write err: -5, ino 20 [ 244.380983][ T5997] usb 1-1: config 157 has too many interfaces: 246, using maximum allowed: 32 [ 244.396942][ T5997] usb 1-1: config 157 has 1 interface, different from the descriptor's value: 246 [ 244.451837][ T5997] usb 1-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 244.470386][ T5997] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.520195][ T5997] usb 1-1: Product: syz [ 244.524414][ T5997] usb 1-1: Manufacturer: syz [ 244.554892][ T5997] usb 1-1: SerialNumber: syz [ 244.666998][ T29] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 244.853828][ T29] usb 4-1: too many endpoints for config 0 interface 0 altsetting 4: 129, using maximum allowed: 30 [ 244.866348][ T5997] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 244.891097][ T29] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 244.917191][ T29] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.930056][ T29] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 244.945153][ T29] usb 4-1: config 0 interface 0 has no altsetting 0 [ 244.953355][ T29] usb 4-1: New USB device found, idVendor=056a, idProduct=0725, bcdDevice= 0.00 [ 244.966083][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.992918][ T29] usb 4-1: config 0 descriptor?? [ 245.476687][ T29] hid_parser_main: 4 callbacks suppressed [ 245.476720][ T29] wacom 0003:056A:0725.0010: unknown main item tag 0x0 [ 245.514816][ T5997] usb 1-1: reset high-speed USB device number 18 using dummy_hcd [ 245.530095][ T29] wacom 0003:056A:0725.0010: Unknown device_type for 'HID 056a:0725'. Ignoring. [ 245.724697][ T9159] loop2: detected capacity change from 0 to 1024 [ 245.724932][ T5834] usb 4-1: USB disconnect, device number 6 [ 245.928786][ T5997] usb 1-1: [UEAGLE-ATM] interface 1 not found [ 245.959722][ T5997] ueagle-atm 1-1:157.0: usbatm_usb_probe: bind failed: -19! [ 245.982232][ T5997] usb 1-1: USB disconnect, device number 18 [ 246.114984][ T9148] loop6: detected capacity change from 0 to 32768 [ 246.118163][ T59] hfsplus: b-tree write err: -5, ino 25 [ 246.124749][ T59] hfsplus: b-tree write err: -5, ino 4 [ 246.137218][ T59] hfsplus: b-tree write err: -5, ino 2 [ 246.158604][ T59] hfsplus: b-tree write err: -5, ino 20 [ 246.164927][ T9148] (syz.6.1249,9148,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 246.182766][ T9148] (syz.6.1249,9148,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 246.240109][ T9148] JBD2: Ignoring recovery information on journal [ 246.355912][ T9148] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 246.522116][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1257'. [ 246.562523][ T9148] [ 246.564902][ T9148] ====================================================== [ 246.572028][ T9148] WARNING: possible circular locking dependency detected [ 246.579064][ T9148] syzkaller #0 Tainted: G L [ 246.585049][ T9148] ------------------------------------------------------ [ 246.592066][ T9148] syz.6.1249/9148 is trying to acquire lock: [ 246.598045][ T9148] ffff8880520b4e38 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x35b/0x840 [ 246.607419][ T9148] [ 246.607419][ T9148] but task is already holding lock: [ 246.614772][ T9148] ffff88803076ace8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x5c8/0x920 [ 246.625194][ T9148] [ 246.625194][ T9148] which lock already depends on the new lock. [ 246.625194][ T9148] [ 246.635600][ T9148] [ 246.635600][ T9148] the existing dependency chain (in reverse order) is: [ 246.644617][ T9148] [ 246.644617][ T9148] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 246.653165][ T9148] down_read+0x99/0x460 [ 246.657920][ T9148] ocfs2_start_trans+0x5c8/0x920 [ 246.663404][ T9148] ocfs2_group_extend+0x4fb/0x1d10 [ 246.669073][ T9148] ocfs2_ioctl+0x182/0x6e0 [ 246.674031][ T9148] __x64_sys_ioctl+0x18e/0x210 [ 246.679348][ T9148] do_syscall_64+0x106/0xf80 [ 246.684504][ T9148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.691020][ T9148] [ 246.691020][ T9148] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 246.698533][ T9148] ocfs2_start_trans+0x4b7/0x920 [ 246.704103][ T9148] ocfs2_xattr_set+0x12e4/0x2be0 [ 246.709574][ T9148] __vfs_setxattr+0x175/0x1e0 [ 246.714795][ T9148] __vfs_setxattr_noperm+0x127/0x660 [ 246.720629][ T9148] __vfs_setxattr_locked+0x127/0x2b0 [ 246.726464][ T9148] vfs_setxattr+0x14a/0x390 [ 246.731517][ T9148] do_setxattr+0x145/0x180 [ 246.736483][ T9148] file_setxattr+0x139/0x1b0 [ 246.741710][ T9148] path_setxattrat+0x335/0x3b0 [ 246.747023][ T9148] __x64_sys_fsetxattr+0xc5/0x140 [ 246.752603][ T9148] do_syscall_64+0x106/0xf80 [ 246.757737][ T9148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.764169][ T9148] [ 246.764169][ T9148] -> #1 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}: [ 246.774884][ T9148] down_write+0x8b/0x1f0 [ 246.779767][ T9148] ocfs2_reserve_suballoc_bits+0x11c/0x4be0 [ 246.786455][ T9148] ocfs2_reserve_new_metadata_blocks+0x506/0xbe0 [ 246.793325][ T9148] ocfs2_xattr_set+0x18b3/0x2be0 [ 246.798787][ T9148] __vfs_setxattr+0x175/0x1e0 [ 246.804005][ T9148] __vfs_setxattr_noperm+0x127/0x660 [ 246.809844][ T9148] __vfs_setxattr_locked+0x127/0x2b0 [ 246.815678][ T9148] vfs_setxattr+0x14a/0x390 [ 246.820725][ T9148] do_setxattr+0x145/0x180 [ 246.825685][ T9148] file_setxattr+0x139/0x1b0 [ 246.830816][ T9148] path_setxattrat+0x335/0x3b0 [ 246.836127][ T9148] __x64_sys_fsetxattr+0xc5/0x140 [ 246.841705][ T9148] do_syscall_64+0x106/0xf80 [ 246.846838][ T9148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.853264][ T9148] [ 246.853264][ T9148] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}: [ 246.861107][ T9148] __lock_acquire+0x14b8/0x2630 [ 246.866506][ T9148] lock_acquire+0x1cf/0x380 [ 246.871565][ T9148] down_read+0x99/0x460 [ 246.876274][ T9148] ocfs2_init_acl+0x35b/0x840 [ 246.881482][ T9148] ocfs2_mknod+0x1772/0x27d0 [ 246.886600][ T9148] ocfs2_mkdir+0xf2/0x460 [ 246.891453][ T9148] vfs_mkdir+0x361/0x850 [ 246.896227][ T9148] filename_mkdirat+0x48b/0x5e0 [ 246.901620][ T9148] __x64_sys_mkdirat+0x89/0xc0 [ 246.906929][ T9148] do_syscall_64+0x106/0xf80 [ 246.912066][ T9148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.918489][ T9148] [ 246.918489][ T9148] other info that might help us debug this: [ 246.918489][ T9148] [ 246.928707][ T9148] Chain exists of: [ 246.928707][ T9148] &oi->ip_xattr_sem --> sb_internal#2 --> &journal->j_trans_barrier [ 246.928707][ T9148] [ 246.942656][ T9148] Possible unsafe locking scenario: [ 246.942656][ T9148] [ 246.950094][ T9148] CPU0 CPU1 [ 246.955447][ T9148] ---- ---- [ 246.960799][ T9148] rlock(&journal->j_trans_barrier); [ 246.966179][ T9148] lock(sb_internal#2); [ 246.973053][ T9148] lock(&journal->j_trans_barrier); [ 246.980868][ T9148] rlock(&oi->ip_xattr_sem); [ 246.985552][ T9148] [ 246.985552][ T9148] *** DEADLOCK *** [ 246.985552][ T9148] [ 246.993682][ T9148] 8 locks held by syz.6.1249/9148: [ 246.998788][ T9148] #0: ffff88807e546420 (sb_writers#13){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 247.008344][ T9148] #1: ffff8880520b5100 (&type->i_mutex_dir_key#13/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 247.019130][ T9148] #2: ffff8880550edf40 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x11c/0x4be0 [ 247.033126][ T9148] #3: ffff8880552d5f40 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x11c/0x4be0 [ 247.047132][ T9148] #4: ffff8880550ea640 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0xea/0xc00 [ 247.061057][ T9148] #5: ffff88807e546610 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_mknod+0x1643/0x27d0 [ 247.070438][ T9148] #6: ffff88803076ace8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x5c8/0x920 [ 247.081212][ T9148] #7: ffff888051f6e950 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 247.091059][ T9148] [ 247.091059][ T9148] stack backtrace: [ 247.096951][ T9148] CPU: 1 UID: 0 PID: 9148 Comm: syz.6.1249 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.097001][ T9148] Tainted: [L]=SOFTLOCKUP [ 247.097014][ T9148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 247.097036][ T9148] Call Trace: [ 247.097048][ T9148] [ 247.097062][ T9148] dump_stack_lvl+0x100/0x190 [ 247.097118][ T9148] print_circular_bug.cold+0x178/0x1c7 [ 247.097178][ T9148] check_noncircular+0x146/0x160 [ 247.097236][ T9148] __lock_acquire+0x14b8/0x2630 [ 247.097306][ T9148] lock_acquire+0x1cf/0x380 [ 247.097357][ T9148] ? ocfs2_init_acl+0x35b/0x840 [ 247.097396][ T9148] ? __pfx___might_resched+0x10/0x10 [ 247.097437][ T9148] down_read+0x99/0x460 [ 247.097492][ T9148] ? ocfs2_init_acl+0x35b/0x840 [ 247.097528][ T9148] ? __pfx_down_read+0x10/0x10 [ 247.097582][ T9148] ? find_held_lock+0x2b/0x80 [ 247.097622][ T9148] ? jbd2_journal_dirty_metadata+0x5bc/0x9e0 [ 247.097683][ T9148] ? jbd2_journal_dirty_metadata+0x5bc/0x9e0 [ 247.097742][ T9148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.097786][ T9148] ? __jbd2_journal_file_buffer+0x3fa/0x7f0 [ 247.097889][ T9148] ocfs2_init_acl+0x35b/0x840 [ 247.097929][ T9148] ? __pfx_ocfs2_init_acl+0x10/0x10 [ 247.097967][ T9148] ? __entry_text_end+0xfdfb5/0x1020b9 [ 247.098008][ T9148] ? ocfs2_journal_dirty+0x241/0x6d0 [ 247.098060][ T9148] ? __pfx_ocfs2_journal_dirty+0x10/0x10 [ 247.098110][ T9148] ? ocfs2_block_signals+0x88/0xc0 [ 247.098163][ T9148] ? __pfx_ocfs2_block_signals+0x10/0x10 [ 247.098215][ T9148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.098263][ T9148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.098309][ T9148] ocfs2_mknod+0x1772/0x27d0 [ 247.098350][ T9148] ? __lock_acquire+0x449/0x2630 [ 247.098401][ T9148] ? __pfx_ocfs2_mknod+0x10/0x10 [ 247.098435][ T9148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.098478][ T9148] ? do_raw_spin_lock+0x128/0x260 [ 247.098519][ T9148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.098563][ T9148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.098605][ T9148] ? do_raw_spin_lock+0x128/0x260 [ 247.098640][ T9148] ? find_held_lock+0x2b/0x80 [ 247.098679][ T9148] ? ocfs2_inode_unlock_tracker+0x17a/0x210 [ 247.098725][ T9148] ? ocfs2_inode_unlock_tracker+0x17a/0x210 [ 247.098769][ T9148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.098813][ T9148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.098858][ T9148] ? put_pid+0x24/0x30 [ 247.098905][ T9148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.098947][ T9148] ? ocfs2_inode_unlock_tracker+0x1a3/0x210 [ 247.098995][ T9148] ? __pfx_ocfs2_permission+0x10/0x10 [ 247.099048][ T9148] ? __pfx_map_id_range_up+0x10/0x10 [ 247.099093][ T9148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.099136][ T9148] ? current_check_access_path+0x281/0x460 [ 247.099181][ T9148] ? __pfx_make_vfsgid+0x10/0x10 [ 247.099225][ T9148] ocfs2_mkdir+0xf2/0x460 [ 247.099265][ T9148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.099307][ T9148] ? security_inode_permission+0xbf/0x250 [ 247.099345][ T9148] ? __pfx_ocfs2_mkdir+0x10/0x10 [ 247.099382][ T9148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.099428][ T9148] vfs_mkdir+0x361/0x850 [ 247.099469][ T9148] filename_mkdirat+0x48b/0x5e0 [ 247.099525][ T9148] ? __pfx_filename_mkdirat+0x10/0x10 [ 247.099579][ T9148] ? strncpy_from_user+0x19d/0x2d0 [ 247.099616][ T9148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.099660][ T9148] ? do_getname+0x191/0x390 [ 247.099695][ T9148] __x64_sys_mkdirat+0x89/0xc0 [ 247.099749][ T9148] do_syscall_64+0x106/0xf80 [ 247.099799][ T9148] ? irqentry_exit+0x138/0x670 [ 247.099850][ T9148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.099886][ T9148] RIP: 0033:0x7ff97019b607 [ 247.099913][ T9148] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.099947][ T9148] RSP: 002b:00007ff970fefe58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 247.099980][ T9148] RAX: ffffffffffffffda RBX: 00007ff970fefee0 RCX: 00007ff97019b607 [ 247.100004][ T9148] RDX: 00000000000001ff RSI: 0000200000000040 RDI: 00000000ffffff9c [ 247.100026][ T9148] RBP: 0000200000000000 R08: 0000200000000040 R09: 0000000000000000 [ 247.100049][ T9148] R10: 0000200000000000 R11: 0000000000000246 R12: 0000200000000040 [ 247.100071][ T9148] R13: 00007ff970fefea0 R14: 0000000000000000 R15: 0000000000000000 [ 247.100106][ T9148] [ 247.110375][ T9172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1257'. [ 247.591998][ T9172] netlink: 'syz.1.1257': attribute type 12 has an invalid length. [ 247.601016][ T9172] netlink: 'syz.1.1257': attribute type 13 has an invalid length. [ 247.676357][ T7215] ocfs2: Unmounting device (7,6) on (node local) [ 247.938421][ T9160] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 255.140756][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.147905][ T1294] ieee802154 phy1 wpan1: encryption failed: -22