last executing test programs: 2m15.06643505s ago: executing program 3 (id=85): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x502, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f80000001600010025bd7000ffdbdf2500000000000000000000ffff64010100ff"], 0xf8}, 0x1, 0x0, 0x0, 0x880}, 0x48000) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) 2m14.912596469s ago: executing program 3 (id=89): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), 0x4) 2m13.547514859s ago: executing program 3 (id=103): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\twmw'], 0xa) 2m13.546999589s ago: executing program 3 (id=104): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000500)='./file0\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x1, 0x17f, &(0x7f0000000380)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20400, 0x38) getdents64(r0, 0x0, 0x0) 2m13.52816181s ago: executing program 3 (id=105): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x3c, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}]}, 0x3c}}, 0x0) 2m12.773147665s ago: executing program 3 (id=107): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000004, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$cgroup_int(r0, &(0x7f0000000300)=0x7, 0x12) 2m12.569899416s ago: executing program 32 (id=107): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000004, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$cgroup_int(r0, &(0x7f0000000300)=0x7, 0x12) 1m59.585950598s ago: executing program 0 (id=255): io_uring_setup(0x17b6, &(0x7f00000002c0)={0x0, 0xa, 0x100, 0x1, 0x393}) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa10902, 0xf4c, '\x00', @p_u16=0x0}}) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000240)=""/73, 0x49}], 0x1) 1m57.901748876s ago: executing program 0 (id=271): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001ac0)=0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000002300)) 1m57.795690953s ago: executing program 0 (id=272): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) read(r0, 0x0, 0x0) 1m57.462383332s ago: executing program 0 (id=280): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x30024, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 1m56.842092558s ago: executing program 0 (id=287): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0\x00', 0x1}, 0x18) syz_emit_ethernet(0x7e, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x70, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x5, 0x6, 0x0, {0x15, 0x4, 0x3, 0x3, 0x8, 0x67, 0x4, 0x77, 0x1, 0x8, @multicast1, @broadcast, {[@ssrr={0x89, 0x1f, 0xec, [@empty, @dev={0xac, 0x14, 0x14, 0x3d}, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0x35, 0x3, 0x4, [{@loopback}, {@private=0xa010102, 0x4}]}, @ssrr={0x89, 0x7, 0x4b, [@remote]}, @timestamp_prespec={0x44, 0x4, 0x1}]}}}}}}}, 0x0) 1m55.479884648s ago: executing program 0 (id=297): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r0, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4, 0xa}, @NL80211_KEY_IDX={0x5, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m55.408235933s ago: executing program 33 (id=297): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r0, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4, 0xa}, @NL80211_KEY_IDX={0x5, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.545233733s ago: executing program 5 (id=1583): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x40000, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)='P', 0x1}], 0x1}}], 0x1, 0x8800) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x7ff}, 0x8) 3.359957644s ago: executing program 5 (id=1585): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) fcntl$notify(r0, 0x402, 0x16) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev_snmp6\x00') getdents64(r1, &(0x7f0000000040)=""/74, 0x4a) 3.319438136s ago: executing program 5 (id=1587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=adaptive,heap,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00'], 0x1, 0x105da, &(0x7f0000032680)="$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") readlink(&(0x7f0000000580)='./file0/file1\x00', &(0x7f0000000640)=""/230, 0xe6) 2.276041527s ago: executing program 1 (id=1598): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 2.161527294s ago: executing program 5 (id=1601): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x20000400) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIC(r0, 0x5417, 0x0) 2.101772387s ago: executing program 2 (id=1602): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "8ee055", 0x0, 0x2, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}}}}}, 0x0) 2.085494528s ago: executing program 1 (id=1603): pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) splice(r1, 0x0, r0, 0x0, 0x3, 0x0) 1.977935705s ago: executing program 2 (id=1606): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000380), 0xfd, 0x269, &(0x7f0000000780)="$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") capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x83, 0xffffffff}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000003c0)=0x3) 1.863872671s ago: executing program 1 (id=1609): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0813", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.591382267s ago: executing program 2 (id=1613): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x30000002}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1.532468671s ago: executing program 4 (id=1614): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xb, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f00000001c0), 0x0}, 0x20) 1.441904886s ago: executing program 1 (id=1616): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1}], 0x1, 0x40800) 1.413337928s ago: executing program 4 (id=1617): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="88000000", @ANYRES16, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32, @ANYBLOB="6300330080200900ffffffffffff0802110000005050505050508f00ffffffffffffffff64f346deaeefd53988774f2626f200001000060101010101"], 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0303000000000000000006"], 0x1c}}, 0x0) 1.344776562s ago: executing program 2 (id=1619): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, 0x0, 0x0) 1.344301012s ago: executing program 1 (id=1620): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0xfffffffe}]}, 0x10) close(r0) 1.248042177s ago: executing program 4 (id=1622): r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) socket$inet6(0xa, 0x3, 0xff) close(0x4) 1.229614579s ago: executing program 4 (id=1623): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0009000000080026000816"], 0x40}}, 0x0) 1.213177299s ago: executing program 1 (id=1624): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x36, [{{0x9, 0x4, 0x0, 0xb9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x7}]}}, 0x0}, 0x0) 1.043896249s ago: executing program 4 (id=1625): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r1, &(0x7f0000000300), 0x0}, 0x20) 1.04059431s ago: executing program 2 (id=1635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file2\x00', 0x200800, &(0x7f00000000c0)={[{@lazytime}, {}, {@filestreams}, {@uqnoenforce}, {@prjquota}]}, 0x4, 0x9678, &(0x7f000001c340)="$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") chown(&(0x7f0000000000)='./file0\x00', 0xee00, 0x0) 881.454759ms ago: executing program 4 (id=1627): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000400)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c0050890e1d2cc1bbbdf08d08fe06ff2766758d8955927fab01a7ccdecfc59b2041a9461723f1db971e775e0e358c03b00c510998283ed6f1dba0502d352e58b65a28492b0a7053e14eccd84ac5b3452602d77c0ca0"], 0x1, 0x442d, &(0x7f0000004480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00', &(0x7f0000000300)=""/187, 0xbb) 793.872014ms ago: executing program 5 (id=1629): setresuid(0xee00, 0xffffffffffffffff, 0xee01) r0 = getuid() setresuid(r0, r0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 729.851728ms ago: executing program 5 (id=1630): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = epoll_create1(0x0) ppoll(&(0x7f0000000040)=[{r1, 0xbaf03d8f7cf92877}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0xc0000008}) 663.981731ms ago: executing program 6 (id=1631): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) pread64(r1, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 614.230375ms ago: executing program 6 (id=1632): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 518.15914ms ago: executing program 6 (id=1633): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000300000004"], 0x48) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x8040) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[]) 399.731917ms ago: executing program 6 (id=1634): syz_mount_image$fuse(0x0, &(0x7f00000008c0)='./file0\x00', 0xa0012, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000002580), 0x800, &(0x7f00000025c0)={[{@mode}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 353.99118ms ago: executing program 6 (id=1636): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xad356f19b320d419) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) 69.822576ms ago: executing program 2 (id=1637): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) unshare(0x2060600) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r1, r0}, 0xc) 0s ago: executing program 6 (id=1638): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x2210008, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX], 0x7, 0xab, &(0x7f0000000340)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) syncfs(r0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) kernel console output (not intermixed with test programs): che entry [6e4] [ 119.506635][ T6487] SQUASHFS error: read_indexes: reading block [6e4:0] [ 119.515412][ T4243] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 119.523656][ T6487] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 119.530967][ T6487] SQUASHFS error: read_indexes: reading block [6e4:0] [ 119.537915][ T4243] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 119.548522][ T4243] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 119.556762][ T6487] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 119.565792][ T4243] microsoft 0003:045E:07DA.0006: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 119.578221][ T6487] SQUASHFS error: read_indexes: reading block [6e4:0] [ 119.585271][ T4243] microsoft 0003:045E:07DA.0006: no inputs found [ 119.591612][ T4243] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 119.601221][ T6487] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 119.610733][ T5067] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 119.627024][ T6487] SQUASHFS error: read_indexes: reading block [6e4:0] [ 119.636018][ T5067] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.704099][ T5067] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 119.771149][ T5754] usb 5-1: USB disconnect, device number 8 [ 119.948251][ T5760] usb 7-1: USB disconnect, device number 3 [ 120.038347][ T6518] netlink: 'syz.6.640': attribute type 1 has an invalid length. [ 120.360816][ T6534] capability: warning: `syz.6.644' uses 32-bit capabilities (legacy support in use) [ 120.404826][ T6534] program syz.6.644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.527562][ T6508] set_capacity_and_notify: 3 callbacks suppressed [ 120.527576][ T6508] loop1: detected capacity change from 0 to 32768 [ 120.562240][ T5067] gspca_nw80x: reg_r err -71 [ 120.569980][ T5067] nw80x: probe of 3-1:3.0 failed with error -71 [ 120.598262][ T5067] usb 3-1: USB disconnect, device number 3 [ 120.772368][ T4229] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 121.042695][ T4229] usb 5-1: Using ep0 maxpacket: 32 [ 121.163196][ T4229] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 121.178702][ T6508] XFS (loop1): Mounting V5 Filesystem [ 121.343701][ T4229] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 121.373839][ T6581] loop5: detected capacity change from 0 to 4096 [ 121.376943][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 121.440120][ T4229] usb 5-1: Product: syz [ 121.461937][ T4229] usb 5-1: Manufacturer: syz [ 121.480604][ T4229] usb 5-1: SerialNumber: syz [ 121.515003][ T6508] XFS (loop1): Ending clean mount [ 121.537445][ T4229] usb 5-1: config 0 descriptor?? [ 121.593421][ T6537] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 121.735809][ T4187] XFS (loop1): Unmounting Filesystem [ 121.916615][ T4229] usb 5-1: USB disconnect, device number 9 [ 121.950074][ T6598] loop5: detected capacity change from 0 to 128 [ 122.110065][ T6598] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.129025][ T6573] loop2: detected capacity change from 0 to 32768 [ 122.136294][ T6598] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 122.167319][ T6598] fscrypt (loop5, inode 12): Can't use IV_INO_LBLK_64 policy on filesystem 'loop5' because it doesn't have stable inode numbers [ 122.220009][ T6587] loop6: detected capacity change from 0 to 32768 [ 122.284397][ T6573] read_mapping_page failed! [ 122.318383][ T6573] ialloc: diAlloc returned -5! [ 122.433107][ T6609] vivid-000: disconnect [ 122.444191][ T275] read_mapping_page failed! [ 122.462597][ T6605] vivid-000: reconnect [ 122.572077][ T6617] loop4: detected capacity change from 0 to 24 [ 122.628023][ T6617] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 122.676722][ T6617] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 122.809232][ T6614] loop6: detected capacity change from 0 to 8192 [ 122.849737][ T6614] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 122.971010][ T6614] REISERFS (device loop6): using ordered data mode [ 122.982274][ T6614] reiserfs: using flush barriers [ 122.994794][ T6614] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 123.079100][ T6614] REISERFS (device loop6): checking transaction log (loop6) [ 123.120806][ T6614] REISERFS (device loop6): Using r5 hash to sort names [ 123.147484][ T6614] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 123.199324][ T26] audit: type=1800 audit(1769107184.364:26): pid=6614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.661" name="file1" dev="loop6" ino=2 res=0 errno=0 [ 123.205599][ T6640] loop4: detected capacity change from 0 to 512 [ 123.258081][ T5067] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 123.344690][ T6640] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.672: bg 0: block 248: padding at end of block bitmap is not set [ 123.400892][ T6640] Quota error (device loop4): write_blk: dquota write failed [ 123.410002][ T6640] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 123.422314][ T6640] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.672: Failed to acquire dquot type 1 [ 123.488076][ T6640] EXT4-fs (loop4): 1 truncate cleaned up [ 123.499200][ T6640] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.511009][ T6640] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.548538][ T6640] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: writeback. [ 123.592252][ T5067] usb 2-1: Using ep0 maxpacket: 8 [ 123.695809][ T6648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.676'. [ 123.705089][ T6648] netlink: 26 bytes leftover after parsing attributes in process `syz.4.676'. [ 123.742468][ T5067] usb 2-1: unable to get BOS descriptor or descriptor too short [ 123.760248][ T5067] usb 2-1: too many configurations: 73, using maximum allowed: 8 [ 123.782241][ T5638] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 123.852231][ T5067] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 123.861606][ T5067] usb 2-1: can't read configurations, error -71 [ 124.182962][ T5638] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 124.221040][ T5638] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 124.238061][ T5638] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 124.251043][ T5638] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.288162][ T6644] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 124.294422][ T6658] loop2: detected capacity change from 0 to 32768 [ 124.346726][ T6658] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.680 (6658) [ 124.408007][ T6658] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 124.447236][ T6658] BTRFS info (device loop2): enabling auto defrag [ 124.458526][ T6658] BTRFS info (device loop2): force clearing of disk cache [ 124.481143][ T6658] BTRFS info (device loop2): enabling disk space caching [ 124.501509][ T6658] BTRFS info (device loop2): max_inline at 0 [ 124.526510][ T6658] BTRFS info (device loop2): disk space caching is enabled [ 124.547557][ T6658] BTRFS info (device loop2): has skinny extents [ 124.557037][ T5760] usb 7-1: USB disconnect, device number 4 [ 124.706663][ T6662] loop1: detected capacity change from 0 to 32768 [ 124.821118][ T6658] BTRFS info (device loop2): enabling ssd optimizations [ 124.883840][ T6658] BTRFS info (device loop2): clearing free space tree [ 124.892045][ T6662] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 124.892045][ T6662] [ 124.901053][ T6658] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 124.913145][ T6658] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 125.004497][ T6662] ERROR: (device loop1): remounting filesystem as read-only [ 125.012376][ T6690] attempt to access beyond end of device [ 125.012376][ T6690] loop1: rw=2049, want=4680040, limit=32768 [ 125.168560][ T276] blkno = 8ed2c, nblocks = 1 [ 125.182619][ T276] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 125.182619][ T276] [ 125.399687][ T6705] binder: 6704:6705 ioctl c018620b 200000000040 returned -14 [ 125.881359][ T6717] loop4: detected capacity change from 0 to 8192 [ 125.901002][ T6724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.690'. [ 126.030045][ T6717] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 126.088846][ T6717] REISERFS (device loop4): using ordered data mode [ 126.088862][ T6717] reiserfs: using flush barriers [ 126.100621][ T6717] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 126.100995][ T6717] REISERFS (device loop4): checking transaction log (loop4) [ 126.107941][ T6717] REISERFS (device loop4): Using r5 hash to sort names [ 126.108266][ T6717] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 126.108333][ T6717] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 126.230275][ T6717] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 126.254610][ T6717] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 126.269277][ T6742] loop1: detected capacity change from 0 to 2048 [ 126.271002][ T5746] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 126.291445][ T6717] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 126.389051][ T6742] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.531557][ T5746] usb 7-1: Using ep0 maxpacket: 16 [ 126.543368][ T6750] program syz.1.716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.672532][ T5746] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.684683][ T5746] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 126.695022][ T5746] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.702173][ T5067] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 126.711235][ T5746] usb 7-1: config 0 descriptor?? [ 126.770455][ T6745] loop5: detected capacity change from 0 to 32768 [ 126.837135][ T6745] XFS (loop5): Mounting V5 Filesystem [ 126.887825][ T6745] XFS (loop5): Ending clean mount [ 126.925082][ T4243] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 126.956568][ T5067] usb 3-1: Using ep0 maxpacket: 8 [ 126.970096][ T4572] XFS (loop5): Unmounting Filesystem [ 127.082352][ T5067] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 127.091538][ T5067] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.145290][ T5067] pvrusb2: Hardware description: Terratec Grabster AV400 [ 127.162137][ T5067] pvrusb2: ********** [ 127.166155][ T5067] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 127.176910][ T5067] pvrusb2: Important functionality might not be entirely working. [ 127.184913][ T5067] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 127.196612][ T5067] pvrusb2: ********** [ 127.206400][ T5746] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 127.357163][ T2421] pvrusb2: Invalid write control endpoint [ 127.409902][ T2421] pvrusb2: Invalid write control endpoint [ 127.420644][ T2421] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 127.436105][ T2421] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 127.444693][ T2421] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 127.459088][ T2421] pvrusb2: Device being rendered inoperable [ 127.468947][ T2421] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 127.478873][ T4243] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 127.482299][ T2421] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 127.489111][ T4243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.511731][ T2421] pvrusb2: Attached sub-driver cx25840 [ 127.518140][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 127.519692][ T4243] usb 2-1: Product: syz [ 127.538045][ T4243] usb 2-1: Manufacturer: syz [ 127.543004][ T4243] usb 2-1: SerialNumber: syz [ 127.549382][ T4243] usb 2-1: config 0 descriptor?? [ 127.554836][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 127.581137][ T5067] usb 3-1: USB disconnect, device number 4 [ 127.613564][ T4243] hub 2-1:0.0: bad descriptor, ignoring hub [ 127.619481][ T4243] hub: probe of 2-1:0.0 failed with error -5 [ 127.636893][ T5751] usb 7-1: USB disconnect, device number 5 [ 127.646197][ T6770] netlink: 32 bytes leftover after parsing attributes in process `syz.4.720'. [ 127.841170][ T4243] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 127.854541][ T4243] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.882493][ T4243] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 127.901280][ T4243] usb 2-1: media controller created [ 127.914564][ T4243] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.964017][ T4243] DVB: Unable to find symbol dib7000p_attach() [ 127.972573][ T4243] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 127.998907][ T6784] loop4: detected capacity change from 0 to 1024 [ 128.062116][ T4243] rc_core: IR keymap rc-dib0700-rc5 not found [ 128.068284][ T4243] Registered IR keymap rc-empty [ 128.079975][ T4243] dvb-usb: could not initialize remote control. [ 128.086978][ T4243] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 128.151663][ T4243] usb 2-1: USB disconnect, device number 8 [ 128.248665][ T6799] loop4: detected capacity change from 0 to 256 [ 128.262502][ T4243] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 128.319311][ T6801] loop6: detected capacity change from 0 to 1024 [ 128.343410][ T6799] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.379409][ T6799] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.437082][ T26] audit: type=1800 audit(1769107189.604:27): pid=6801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.734" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 128.462106][ T4229] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 128.622320][ T5067] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 128.728530][ T6815] loop6: detected capacity change from 0 to 64 [ 128.832519][ T4229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.843571][ T4243] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 128.861484][ T4229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.877707][ T5067] usb 6-1: Using ep0 maxpacket: 8 [ 128.885100][ T4229] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 128.895314][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.925302][ T4229] usb 3-1: config 0 descriptor?? [ 129.092449][ T4243] usb 5-1: Using ep0 maxpacket: 16 [ 129.109827][ T6820] loop1: detected capacity change from 0 to 40427 [ 129.128635][ T6820] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 129.136560][ T6820] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 129.149908][ T6820] F2FS-fs (loop1): invalid crc value [ 129.167174][ T5067] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 129.188306][ T6820] F2FS-fs (loop1): Found nat_bits in checkpoint [ 129.189936][ T5067] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.209773][ T5067] usb 6-1: Product: syz [ 129.214450][ T4243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.230038][ T5067] usb 6-1: Manufacturer: syz [ 129.235129][ T4243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.237166][ T6820] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 129.245508][ T5067] usb 6-1: SerialNumber: syz [ 129.258031][ T6820] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 129.265474][ T4243] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 129.284730][ T5067] usb 6-1: config 0 descriptor?? [ 129.301839][ T4243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.318044][ T4243] usb 5-1: config 0 descriptor?? [ 129.325097][ T5067] gspca_main: se401-2.14.0 probing 047d:5003 [ 129.333517][ T5738] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 129.423940][ T4229] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 129.433722][ T4229] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 129.602320][ T5738] usb 7-1: Using ep0 maxpacket: 32 [ 129.632256][ T4229] cp2112 0003:10C4:EA90.0008: Part Number: 0x82 Device Version: 0xFE [ 129.733291][ T5738] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.744459][ T5738] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.754262][ T5738] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 129.763492][ T5738] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.777583][ T5738] usb 7-1: config 0 descriptor?? [ 129.813899][ T4243] hid-multitouch 0003:1FD2:6007.0009: unknown main item tag 0x6 [ 129.827852][ T4243] hid-multitouch 0003:1FD2:6007.0009: hidraw1: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 129.852202][ T4229] cp2112 0003:10C4:EA90.0008: error requesting SMBus config [ 129.867545][ T4229] cp2112: probe of 0003:10C4:EA90.0008 failed with error -71 [ 129.877353][ T4229] usb 3-1: USB disconnect, device number 5 [ 129.935328][ T6834] fido_id[6834]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 129.983967][ T5067] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input8 [ 130.061040][ T5067] usb 5-1: USB disconnect, device number 10 [ 130.072322][ T5060] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 130.214430][ T5638] usb 6-1: USB disconnect, device number 7 [ 130.312148][ T5060] usb 2-1: Using ep0 maxpacket: 16 [ 130.342192][ T5738] usbhid 7-1:0.0: can't add hid device: -71 [ 130.348293][ T5738] usbhid: probe of 7-1:0.0 failed with error -71 [ 130.357226][ T5738] usb 7-1: USB disconnect, device number 6 [ 130.592244][ T5060] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 130.618117][ T5060] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.633461][ T5060] usb 2-1: Product: syz [ 130.637659][ T5060] usb 2-1: Manufacturer: syz [ 130.650595][ T5060] usb 2-1: SerialNumber: syz [ 130.677010][ T5060] usb 2-1: config 0 descriptor?? [ 130.723561][ T5060] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 130.942224][ T5060] ssu100: probe of 2-1:0.0 failed with error -71 [ 130.962831][ T5060] usb 2-1: USB disconnect, device number 9 [ 131.052606][ T6861] loop6: detected capacity change from 0 to 8192 [ 131.141385][ T6871] loop5: detected capacity change from 0 to 256 [ 131.177587][ T6871] exfat: Deprecated parameter 'namecase' [ 131.202219][ T6871] exfat: Deprecated parameter 'namecase' [ 131.229643][ T6871] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d) [ 131.445688][ T6857] loop2: detected capacity change from 0 to 32768 [ 131.582887][ T6857] overlayfs: upper fs needs to support d_type. [ 131.589095][ T6857] overlayfs: upper fs does not support tmpfile. [ 131.625383][ T6887] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 131.703799][ T6857] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 131.737084][ T6857] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 131.737084][ T6857] [ 131.785279][ T6882] mmap: syz.4.763 (6882) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 131.804272][ T6857] overlayfs: failed to verify origin (/, ino=2, err=-5) [ 131.811269][ T6857] overlayfs: failed to verify upper root origin [ 131.929759][ T154] read_mapping_page failed! [ 131.936110][ T154] ERROR: (device loop2): txCommit: [ 131.936110][ T154] [ 131.945698][ T154] jfs_write_inode: jfs_commit_inode failed! [ 132.281358][ T6907] loop4: detected capacity change from 0 to 512 [ 132.301718][ T6914] loop2: detected capacity change from 0 to 128 [ 132.358216][ T6914] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 132.382655][ T6907] EXT4-fs (loop4): Unrecognized mount option "smackfstransmute=/!&" or missing value [ 132.425699][ T6914] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 132.452467][ T6921] loop5: detected capacity change from 0 to 256 [ 132.517010][ T6921] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 132.559513][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.788'. [ 132.566887][ T6927] loop6: detected capacity change from 0 to 512 [ 132.613381][ T9] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 132.734237][ T6927] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2806: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 132.785281][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.791617][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.845196][ T6927] EXT4-fs (loop6): 1 truncate cleaned up [ 132.850899][ T6927] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,quota,,errors=continue. Quota mode: writeback. [ 132.997519][ T6945] input: syz0 as /devices/virtual/input/input9 [ 133.008011][ T6947] netlink: 'syz.1.798': attribute type 4 has an invalid length. [ 133.031392][ T6949] loop5: detected capacity change from 0 to 512 [ 133.111146][ T6949] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 133.135982][ T6949] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 133.230911][ T6949] EXT4-fs (loop5): 1 truncate cleaned up [ 133.251406][ T6949] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.273756][ T6959] loop6: detected capacity change from 0 to 4096 [ 133.498820][ T6949] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: none. [ 133.556603][ T5197] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 133.593689][ T5197] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 133.601866][ T6975] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: none. [ 133.777576][ T6984] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 133.829129][ T6984] team0: Port device batadv1 added [ 134.285232][ T7009] loop2: detected capacity change from 0 to 2048 [ 134.429983][ T7009] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 134.482821][ T7009] UDF-fs: Scanning with blocksize 512 failed [ 134.549248][ T7009] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.904384][ T6995] F2FS-fs (loop1): invalid crc value [ 134.966414][ T6995] F2FS-fs (loop1): Found nat_bits in checkpoint [ 134.966765][ T5638] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 135.074631][ T7027] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.834 (7027) [ 135.094195][ T7027] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 135.103786][ T7027] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 135.113801][ T7027] BTRFS info (device loop2): use zstd compression, level 3 [ 135.121028][ T7027] BTRFS info (device loop2): using free space tree [ 135.127639][ T7027] BTRFS info (device loop2): has skinny extents [ 135.156099][ T6995] F2FS-fs (loop1): Start checkpoint disabled! [ 135.184371][ T6995] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 135.279513][ T7025] read_mapping_page failed! [ 135.284642][ T7025] ialloc: diAlloc returned -5! [ 135.326047][ T26] audit: type=1800 audit(1769107196.494:28): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.827" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 135.333313][ T5638] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 135.364485][ T275] read_mapping_page failed! [ 135.392434][ T7027] BTRFS info (device loop2): enabling ssd optimizations [ 135.426697][ T4762] attempt to access beyond end of device [ 135.426697][ T4762] loop1: rw=2049, want=40984, limit=40427 [ 135.498785][ T7050] use of bytesused == 0 is deprecated and will be removed in the future, [ 135.508793][ T7050] use the actual size instead. [ 135.530607][ T5638] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.571895][ T5638] usb 7-1: config 0 descriptor?? [ 135.615989][ T9] read_mapping_page failed! [ 135.625225][ T9] ERROR: (device loop4): txCommit: [ 135.625225][ T9] [ 135.640943][ T9] jfs_write_inode: jfs_commit_inode failed! [ 135.651943][ T5638] cp210x 7-1:0.0: cp210x converter detected [ 135.831104][ T7056] netlink: 'syz.1.841': attribute type 10 has an invalid length. [ 135.882168][ T5638] usb 7-1: cp210x converter now attached to ttyUSB0 [ 136.090579][ T5638] usb 7-1: USB disconnect, device number 7 [ 136.110297][ T5638] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 136.134126][ T5638] cp210x 7-1:0.0: device disconnected [ 136.229275][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.5.835'. [ 136.233513][ T7056] team0: Port device vlan0 added [ 136.411988][ T7072] sch_tbf: burst 3 is lower than device bond0 mtu (1514) ! [ 136.769987][ T7084] set_capacity_and_notify: 4 callbacks suppressed [ 136.770003][ T7084] loop5: detected capacity change from 0 to 4096 [ 136.951782][ T7101] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.341820][ T7113] loop6: detected capacity change from 0 to 2048 [ 137.376551][ T7078] loop1: detected capacity change from 0 to 40427 [ 137.436027][ T7114] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.460220][ T7113] NILFS (loop6): failed to count free inodes: err=-34 [ 137.487737][ T7078] F2FS-fs (loop1): invalid crc value [ 137.527245][ T7078] F2FS-fs (loop1): Found nat_bits in checkpoint [ 137.629394][ T5197] NILFS (loop6): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 137.671802][ T7078] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 137.680726][ T5197] NILFS error (device loop6): nilfs_bmap_truncate: broken bmap (inode number=16) [ 137.731134][ T7078] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 137.731903][ T5197] Remounting filesystem read-only [ 137.761688][ T5197] NILFS (loop6): error -5 truncating bmap (ino=16) [ 137.780239][ T5197] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 137.781076][ T7099] loop4: detected capacity change from 0 to 32768 [ 137.949140][ T7099] ERROR: (device loop4): diAllocBit: iag inconsistent [ 137.949140][ T7099] [ 138.000584][ T7099] ialloc: diAlloc returned -5! [ 138.182434][ T7136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.873'. [ 138.245312][ T7136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.873'. [ 138.262563][ T4209] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 138.346493][ T7142] netlink: 'syz.4.873': attribute type 15 has an invalid length. [ 138.487470][ T7149] loop2: detected capacity change from 0 to 256 [ 138.522863][ T4209] usb 6-1: Using ep0 maxpacket: 32 [ 138.535911][ T7155] loop4: detected capacity change from 0 to 256 [ 138.583369][ T7155] exfat: Deprecated parameter 'utf8' [ 138.597110][ T7149] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 138.613736][ T7155] exfat: Deprecated parameter 'namecase' [ 138.662339][ T4209] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.692246][ T7155] exfat: Deprecated parameter 'namecase' [ 138.703169][ T4209] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.723325][ T7155] exfat: Deprecated parameter 'utf8' [ 138.752216][ T4209] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 138.786335][ T7155] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 138.816454][ T4209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.853192][ T4209] usb 6-1: config 0 descriptor?? [ 139.089342][ T7172] netlink: 16 bytes leftover after parsing attributes in process `syz.4.885'. [ 139.426697][ T4209] usbhid 6-1:0.0: can't add hid device: -71 [ 139.439791][ T4209] usbhid: probe of 6-1:0.0 failed with error -71 [ 139.469406][ T7184] loop1: detected capacity change from 0 to 1024 [ 139.503298][ T4209] usb 6-1: USB disconnect, device number 8 [ 139.517345][ T7166] loop6: detected capacity change from 0 to 32768 [ 139.523950][ T5060] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 139.567705][ T7184] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 139.591936][ T7184] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.627955][ T7166] ERROR: (device loop6): diAllocBit: iag inconsistent [ 139.627955][ T7166] [ 139.646457][ T7166] ialloc: diAlloc returned -5! [ 139.661956][ T7184] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,norecovery,acl,max_batch_time=0x0000000000000007,mblk_io_submit,delalloc,dioread_nolock,,errors=continue. Quota mode: none. [ 139.690189][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.753440][ T7193] netlink: 27 bytes leftover after parsing attributes in process `syz.6.894'. [ 139.799316][ T7184] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 139.842496][ T5638] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 139.854595][ T7195] loop6: detected capacity change from 0 to 8 [ 139.892506][ T5060] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 139.914623][ T5060] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 139.962172][ T5060] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.986911][ T7195] SQUASHFS error: Failed to read block 0x2fc: -5 [ 140.002963][ T5060] usb 3-1: config 0 descriptor?? [ 140.008506][ T7195] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 140.016299][ T7195] SQUASHFS error: Unable to read directory block [2fa:0] [ 140.023873][ T7176] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 140.119596][ T5638] usb 5-1: Using ep0 maxpacket: 8 [ 140.185417][ T7201] loop5: detected capacity change from 0 to 4096 [ 140.230328][ T7201] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 140.242480][ T5638] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 140.261351][ T5638] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.281502][ T5638] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.297734][ T5638] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.311563][ T5638] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.333399][ T5638] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 140.377404][ T5638] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.486488][ T5060] arvo 0003:1E7D:30D4.000A: hidraw0: USB HID v1.01 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 140.612108][ T4572] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 140.638999][ T4572] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22. [ 140.662203][ T4572] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 140.682355][ T5638] usb 5-1: GET_CAPABILITIES returned 0 [ 140.687918][ T5638] usbtmc 5-1:16.0: can't read capabilities [ 140.710477][ T5060] usb 3-1: USB disconnect, device number 6 [ 140.857324][ T5067] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 140.912704][ T5638] usb 5-1: USB disconnect, device number 11 [ 141.102121][ T5067] usb 2-1: Using ep0 maxpacket: 32 [ 141.223007][ T5067] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 141.252901][ T5067] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.291406][ T5067] usb 2-1: config 0 descriptor?? [ 141.340567][ T7237] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.572601][ T5067] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 141.605735][ T5067] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.662675][ T5067] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 141.683801][ T5067] usb 2-1: media controller created [ 141.703940][ T7251] Zero length message leads to an empty skb [ 141.740216][ T5067] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.812371][ T5067] az6027: usb out operation failed. (-71) [ 141.832284][ T5067] az6027: usb out operation failed. (-71) [ 141.838059][ T5067] stb0899_attach: Driver disabled by Kconfig [ 141.854837][ T5067] az6027: no front-end attached [ 141.854837][ T5067] [ 141.860424][ T7260] set_capacity_and_notify: 2 callbacks suppressed [ 141.860437][ T7260] loop6: detected capacity change from 0 to 256 [ 141.882219][ T5067] az6027: usb out operation failed. (-71) [ 141.904532][ T5067] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 141.928242][ T7260] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 141.929285][ T5067] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 141.969789][ T7260] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 142.036984][ T5067] dvb-usb: schedule remote query interval to 400 msecs. [ 142.039575][ T7260] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 142.066580][ T5067] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 142.089980][ T7268] loop4: detected capacity change from 0 to 64 [ 142.110732][ T5067] usb 2-1: USB disconnect, device number 10 [ 142.204346][ T5067] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 142.581303][ T7285] loop4: detected capacity change from 0 to 2048 [ 142.683784][ T7285] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 142.721252][ T7285] NILFS (loop4): mounting unchecked fs [ 142.815713][ T7285] NILFS (loop4): recovery complete [ 142.831523][ T7308] netlink: 260 bytes leftover after parsing attributes in process `syz.1.944'. [ 142.886168][ T7310] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.909294][ T7312] program syz.6.945 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.992108][ T4229] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 143.182392][ T7322] loop6: detected capacity change from 0 to 512 [ 143.229873][ T7327] loop2: detected capacity change from 0 to 128 [ 143.240374][ T4229] usb 6-1: Using ep0 maxpacket: 16 [ 143.268664][ T7322] EXT4-fs (loop6): Ignoring removed bh option [ 143.296478][ T7322] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 143.316952][ T7327] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.362234][ T4229] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 143.417167][ T7322] EXT4-fs (loop6): 1 truncate cleaned up [ 143.429286][ T7327] ext4 filesystem being mounted at /188/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.447281][ T7322] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 143.512210][ T5067] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 143.522531][ T4229] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 143.533715][ T4229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.572230][ T4229] usb 6-1: Product: syz [ 143.576437][ T4229] usb 6-1: Manufacturer: syz [ 143.581029][ T4229] usb 6-1: SerialNumber: syz [ 143.598869][ T4229] usb 6-1: config 0 descriptor?? [ 143.683496][ T4229] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 143.707729][ T4229] usb 6-1: Detected FT232RL [ 143.756245][ T5067] usb 5-1: Using ep0 maxpacket: 8 [ 143.873339][ T5067] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.896141][ T5067] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.906349][ T4229] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 143.918623][ T5067] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 143.940531][ T5067] usb 5-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 143.950845][ T5067] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.963660][ T5067] usb 5-1: config 0 descriptor?? [ 144.125225][ T7369] loop1: detected capacity change from 0 to 512 [ 144.196584][ T4229] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 144.216308][ T7369] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 144.284031][ T7369] EXT4-fs (loop1): 1 truncate cleaned up [ 144.291264][ T7372] loop2: detected capacity change from 0 to 64 [ 144.312722][ T7369] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 144.338415][ T7369] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.1.959: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 144.359941][ T7369] EXT4-fs (loop1): Remounting filesystem read-only [ 144.383838][ T7372] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 144.395330][ T4229] usb 6-1: USB disconnect, device number 9 [ 144.408866][ T4229] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 144.418807][ T4229] ftdi_sio 6-1:0.0: device disconnected [ 144.433646][ T5067] chicony 0003:04F2:1123.000B: unbalanced delimiter at end of report description [ 144.443961][ T7369] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 144.456636][ T5067] chicony 0003:04F2:1123.000B: Chicony hid parse failed: -22 [ 144.464773][ T7378] EXT4-fs (loop1): shut down requested (2) [ 144.471130][ T5067] chicony: probe of 0003:04F2:1123.000B failed with error -22 [ 144.485423][ T7369] EXT4-fs (loop1): Remounting filesystem read-only [ 144.498465][ T7369] EXT4-fs warning (device loop1): ext4_rename_delete:3792: inode #2: comm syz.1.959: Deleting old file: nlink 4, error=-117 [ 144.554208][ T7381] loop6: detected capacity change from 0 to 128 [ 144.657602][ T7381] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 144.675878][ T4229] usb 5-1: USB disconnect, device number 12 [ 144.686220][ T7381] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.726583][ T7383] netlink: 56 bytes leftover after parsing attributes in process `syz.1.964'. [ 144.747110][ T7385] loop2: detected capacity change from 0 to 512 [ 144.768656][ T7383] netlink: 'syz.1.964': attribute type 2 has an invalid length. [ 144.986689][ T7390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.969'. [ 145.036884][ T7390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.969'. [ 145.200037][ T7399] loop6: detected capacity change from 0 to 2048 [ 145.360308][ T7399] NILFS (loop6): invalid segment: Magic number mismatch [ 145.401337][ T7399] NILFS (loop6): trying rollback from an earlier position [ 145.466989][ T7399] NILFS (loop6): recovery complete [ 145.508374][ T7412] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.066470][ T7403] F2FS-fs (loop1): Invalid log sectors per block(570425347) log sectorsize(9) [ 146.075505][ T7403] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 146.085332][ T7403] F2FS-fs (loop1): invalid crc value [ 146.104050][ T7403] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 146.176584][ T7403] F2FS-fs (loop1): recover fsync data on readonly fs [ 146.183475][ T7403] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 146.193110][ T7403] F2FS-fs (loop1): Bad quota inode 2:50331648 [ 146.199619][ T7403] F2FS-fs (loop1): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 146.209950][ T7403] F2FS-fs (loop1): Cannot turn on quota_ino: -22 [ 146.232978][ T7428] netlink: 16 bytes leftover after parsing attributes in process `syz.4.983'. [ 146.244675][ T7403] F2FS-fs (loop1): Try to recover 2th superblock, ret: -30 [ 146.251915][ T7403] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 146.955287][ T7419] JBD2: Ignoring recovery information on journal [ 147.115763][ T7444] set_capacity_and_notify: 3 callbacks suppressed [ 147.115777][ T7444] loop4: detected capacity change from 0 to 32768 [ 147.218300][ T7426] loop6: detected capacity change from 0 to 40427 [ 147.266316][ T7444] XFS (loop4): Mounting V5 Filesystem [ 147.283026][ T7419] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 147.328058][ T7426] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x1ffff [ 147.389406][ T7426] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x4 [ 147.415207][ T7426] F2FS-fs (loop6): invalid crc value [ 147.415292][ T26] audit: type=1800 audit(1769107208.584:29): pid=7419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.979" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 147.470202][ T7426] F2FS-fs (loop6): Found nat_bits in checkpoint [ 147.535151][ T7444] XFS (loop4): Ending clean mount [ 147.612637][ T7466] netlink: 80 bytes leftover after parsing attributes in process `syz.1.996'. [ 147.620022][ T7440] loop2: detected capacity change from 0 to 32768 [ 147.693310][ T7426] F2FS-fs (loop6): Start checkpoint disabled! [ 147.717208][ T4572] ocfs2: Unmounting device (7,5) on (node local) [ 147.726733][ T7440] JFS: Invalid stbl[2] = -55 for inode 2, block = 0 [ 147.741498][ T7426] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 147.836269][ T4189] XFS (loop4): Unmounting Filesystem [ 148.005147][ T4268] attempt to access beyond end of device [ 148.005147][ T4268] loop6: rw=2049, want=40976, limit=40427 [ 148.342363][ T7483] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1005'. [ 148.369345][ T7481] loop2: detected capacity change from 0 to 4096 [ 148.441591][ T7481] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 148.538425][ T7481] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 148.600649][ T7481] ntfs3: loop2: Failed to load $Extend. [ 148.684754][ T7492] loop6: detected capacity change from 0 to 512 [ 149.175377][ T7475] loop1: detected capacity change from 0 to 40427 [ 149.252258][ T7475] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 149.260055][ T7475] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 149.304493][ T7475] F2FS-fs (loop1): invalid crc value [ 149.349094][ T7475] F2FS-fs (loop1): Found nat_bits in checkpoint [ 149.486755][ T7475] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 149.504179][ T7475] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 149.562157][ T5738] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 149.576060][ T7488] loop5: detected capacity change from 0 to 40427 [ 149.626343][ T7488] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 149.626826][ T7500] loop2: detected capacity change from 0 to 32768 [ 149.646347][ T7488] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 149.673457][ T7488] F2FS-fs (loop5): invalid crc value [ 149.733281][ T7488] F2FS-fs (loop5): Found nat_bits in checkpoint [ 149.771374][ T7530] loop4: detected capacity change from 0 to 2048 [ 149.796707][ T7488] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 149.807769][ T7500] XFS (loop2): Mounting V5 Filesystem [ 149.824589][ T7488] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 149.842234][ T5738] usb 7-1: Using ep0 maxpacket: 8 [ 149.944585][ T7500] XFS (loop2): Ending clean mount [ 149.993541][ T5738] usb 7-1: config 0 has too many interfaces: 235, using maximum allowed: 32 [ 150.005332][ T7530] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.012072][ T5738] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 235 [ 150.032436][ T7530] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.128003][ T5738] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 3499, setting to 64 [ 150.229516][ T4191] XFS (loop2): Unmounting Filesystem [ 150.352442][ T5738] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 150.392412][ T5738] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.421467][ T5738] usb 7-1: Product: syz [ 150.431347][ T5738] usb 7-1: Manufacturer: syz [ 150.452154][ T5738] usb 7-1: SerialNumber: syz [ 150.488914][ T5738] usb 7-1: config 0 descriptor?? [ 150.590221][ T5738] snd-usb-audio: probe of 7-1:0.0 failed with error -2 [ 150.698252][ T4557] udevd[4557]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.844124][ T5738] usb 7-1: USB disconnect, device number 8 [ 150.917312][ T7566] loop2: detected capacity change from 0 to 1024 [ 150.985154][ T5751] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 151.025121][ T7566] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 151.089870][ T7566] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 151.136396][ T7551] XFS (loop1): Mounting V5 Filesystem [ 151.204573][ T7551] XFS (loop1): Ending clean mount [ 151.215339][ T7551] XFS (loop1): Quotacheck needed: Please wait. [ 151.384826][ T7551] XFS (loop1): Quotacheck: Done. [ 151.402273][ T5751] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 151.419409][ T5751] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 151.462801][ T5751] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 151.484509][ T5751] usb 5-1: config 220 has no interface number 2 [ 151.532556][ T5751] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 151.548030][ T4187] XFS (loop1): Unmounting Filesystem [ 151.565140][ T5751] usb 5-1: config 220 interface 0 has no altsetting 0 [ 151.582535][ T5751] usb 5-1: config 220 interface 76 has no altsetting 0 [ 151.603677][ T5751] usb 5-1: config 220 interface 1 has no altsetting 0 [ 151.635977][ T7572] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 151.645649][ T7572] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 151.768918][ T5751] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 151.770006][ T7572] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 151.792279][ T5067] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 151.798231][ T5751] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.802128][ T7593] netlink: 1028 bytes leftover after parsing attributes in process `syz.6.1042'. [ 151.818041][ T5751] usb 5-1: Product: syz [ 151.831692][ T7593] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 151.835914][ T5751] usb 5-1: Manufacturer: syz [ 151.850424][ T5751] usb 5-1: SerialNumber: syz [ 151.865900][ T7572] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 152.130525][ T7599] set_capacity_and_notify: 2 callbacks suppressed [ 152.130539][ T7599] loop1: detected capacity change from 0 to 1024 [ 152.221167][ T5067] usb 3-1: unable to get BOS descriptor or descriptor too short [ 152.233889][ T5751] usb 5-1: selecting invalid altsetting 0 [ 152.246154][ T5751] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 152.253631][ T5751] usb 5-1: No valid video chain found. [ 152.310191][ T7599] hfsplus: xattr searching failed [ 152.320429][ T5067] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 152.334641][ T5067] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 152.349969][ T4268] hfsplus: b-tree write err: -5, ino 3 [ 152.359160][ T5067] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 152.373369][ T5751] usb 5-1: selecting invalid altsetting 0 [ 152.378707][ T5067] usb 3-1: config 129 has no interface number 0 [ 152.386186][ T5067] usb 3-1: config 129 has no interface number 1 [ 152.392820][ T5067] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 152.406185][ T5751] usbtest: probe of 5-1:220.1 failed with error -22 [ 152.413470][ T5751] usb 5-1: USB disconnect, device number 13 [ 152.460797][ T5067] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 152.477478][ T5067] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 152.491789][ T5067] usb 3-1: config 129 interface 135 has no altsetting 0 [ 152.514093][ T5067] usb 3-1: config 129 interface 5 has no altsetting 0 [ 152.678312][ T7618] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 152.762338][ T5067] usb 3-1: string descriptor 0 read error: -22 [ 152.770121][ T5067] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 152.805075][ T5067] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.822481][ T7627] loop4: detected capacity change from 0 to 1024 [ 152.832204][ T7629] loop5: detected capacity change from 0 to 1024 [ 152.886726][ T5067] usb 3-1: MIDIStreaming interface descriptor not found [ 152.922469][ T7632] loop1: detected capacity change from 0 to 2048 [ 152.965180][ T7629] hfsplus: bad catalog folder thread [ 152.989836][ T7632] NILFS (loop1): invalid segment: Magic number mismatch [ 153.018231][ T7632] NILFS (loop1): trying rollback from an earlier position [ 153.092609][ T7632] NILFS (loop1): recovery complete [ 153.133363][ T7627] EXT4-fs (loop4): Test dummy encryption mode enabled [ 153.152401][ T7627] EXT4-fs (loop4): Test dummy encryption mode enabled [ 153.162263][ T7643] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.250028][ T7627] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,stripe=0x0000000000000009,data=ordered,test_dummy_encryption,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 153.283872][ T5751] usb 3-1: USB disconnect, device number 7 [ 154.022353][ T5751] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 154.149169][ T7662] loop1: detected capacity change from 0 to 32768 [ 154.250712][ T7662] JBD2: Ignoring recovery information on journal [ 154.286716][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1084'. [ 154.302397][ T5751] usb 7-1: Using ep0 maxpacket: 8 [ 154.330748][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1084'. [ 154.472314][ T5751] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 154.491315][ T5751] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.510549][ T7662] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 154.542231][ T5751] usb 7-1: config 4 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.562160][ T5751] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 154.582046][ T5751] usb 7-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 154.592341][ T5751] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 154.601573][ T5751] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.639812][ T26] audit: type=1800 audit(1769107215.804:30): pid=7662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1068" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 154.683230][ T146] Bluetooth: hci5: urb ffff888023fe9a00 submission failed (90) [ 154.720557][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 154.772315][ T4193] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 154.891709][ T4209] usb 7-1: USB disconnect, device number 9 [ 155.090115][ T7715] loop1: detected capacity change from 0 to 64 [ 155.117065][ T7708] loop4: detected capacity change from 0 to 32768 [ 155.150111][ T7715] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 155.274781][ T7708] XFS (loop4): Mounting V5 Filesystem [ 155.361351][ T7708] XFS (loop4): Ending clean mount [ 155.389566][ T7708] XFS (loop4): Quotacheck needed: Please wait. [ 155.621470][ T7712] loop5: detected capacity change from 0 to 131072 [ 155.640844][ T7725] loop1: detected capacity change from 0 to 1024 [ 155.649961][ T7708] XFS (loop4): Quotacheck: Done. [ 155.699065][ T7725] EXT4-fs (loop1): inline encryption not supported [ 155.742305][ T4193] usb 3-1: Using ep0 maxpacket: 8 [ 155.751878][ T7712] F2FS-fs (loop5): invalid crc value [ 155.767021][ T4189] XFS (loop4): Unmounting Filesystem [ 155.806381][ T7725] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,inlinecrypt,,errors=continue. Quota mode: none. [ 155.872892][ T7712] F2FS-fs (loop5): Found nat_bits in checkpoint [ 155.906643][ T7712] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 155.922192][ T4193] usb 3-1: unable to get BOS descriptor or descriptor too short [ 155.982136][ T4193] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 155.989776][ T4193] usb 3-1: can't read configurations, error -71 [ 156.014830][ T7712] F2FS-fs (loop5): inode (7) has corrupted xattr [ 156.266688][ T7731] loop6: detected capacity change from 0 to 32768 [ 156.371338][ T7741] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 156.496220][ T7731] XFS (loop6): Mounting V5 Filesystem [ 156.549075][ T7741] EXT4-fs (loop1): 1 truncate cleaned up [ 156.562394][ T7741] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,noquota,,errors=continue. Quota mode: none. [ 156.655791][ T7741] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: none. [ 156.745270][ T7731] XFS (loop6): Ending clean mount [ 156.758886][ T7731] XFS (loop6): Quotacheck needed: Please wait. [ 156.856812][ T7731] XFS (loop6): Quotacheck: Done. [ 156.922300][ T7741] EXT4-fs (loop1): Ignoring removed orlov option [ 156.928700][ T7741] EXT4-fs (loop1): Remounting file system with no journal so ignoring journalled data option [ 157.003671][ T7741] EXT4-fs (loop1): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,nouid32,usrjquota=,orlov,norecovery,barrier,data=journal,. Quota mode: none. [ 157.138750][ T7757] set_capacity_and_notify: 1 callbacks suppressed [ 157.138763][ T7757] loop2: detected capacity change from 0 to 32768 [ 157.150347][ T5197] XFS (loop6): Unmounting Filesystem [ 157.383624][ T7757] XFS (loop2): Mounting V5 Filesystem [ 157.452083][ T5067] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 157.520128][ T7757] XFS (loop2): Ending clean mount [ 157.582028][ T7757] XFS (loop2): Quotacheck needed: Please wait. [ 157.702221][ T5067] usb 6-1: Using ep0 maxpacket: 16 [ 157.724409][ T7757] XFS (loop2): Quotacheck: Done. [ 157.832278][ T5067] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 157.852554][ T5067] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.902876][ T5067] usb 6-1: config 0 has no interface number 0 [ 157.986089][ T4191] XFS (loop2): Unmounting Filesystem [ 158.073231][ T5067] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 158.078769][ T7788] loop4: detected capacity change from 0 to 256 [ 158.112322][ T5067] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.132146][ T5067] usb 6-1: Product: syz [ 158.136343][ T5067] usb 6-1: Manufacturer: syz [ 158.149159][ T7765] loop1: detected capacity change from 0 to 32768 [ 158.168739][ T5067] usb 6-1: SerialNumber: syz [ 158.194812][ T7790] tipc: Started in network mode [ 158.210755][ T5067] usb 6-1: config 0 descriptor?? [ 158.215962][ T7790] tipc: Node identity ac14140f, cluster identity 4711 [ 158.235245][ T7765] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 158.285988][ T7765] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 158.294366][ T7790] tipc: New replicast peer: 255.255.255.255 [ 158.294963][ T5067] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 158.301827][ T7790] tipc: Enabled bearer , priority 10 [ 158.328628][ T5067] usb 6-1: No valid video chain found. [ 158.371243][ T7765] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 158.547499][ T7798] loop4: detected capacity change from 0 to 128 [ 158.566916][ T7797] loop6: detected capacity change from 0 to 128 [ 158.604234][ T7765] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 158.631147][ T5754] usb 6-1: USB disconnect, device number 10 [ 158.672074][ T7797] FAT-fs (loop6): bogus number of reserved sectors [ 158.684075][ T7798] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 158.712520][ T7797] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 158.719364][ T7798] hpfs: filesystem error: improperly stopped [ 158.762132][ T7798] hpfs: You really don't want any checks? You are crazy... [ 158.776787][ T7797] FAT-fs (loop6): Can't find a valid FAT filesystem [ 158.797221][ T7798] hpfs: hpfs_map_sector(): read error [ 158.818462][ T7798] hpfs: code page support is disabled [ 158.843050][ T7798] hpfs: hpfs_map_4sectors(): unaligned read [ 158.849290][ T7798] hpfs: hpfs_map_4sectors(): unaligned read [ 158.895039][ T7798] hpfs: filesystem error: unable to find root dir [ 158.965330][ T7798] hpfs: hpfs_map_4sectors(): unaligned read [ 158.973940][ T7798] hpfs: hpfs_map_sector(): read error [ 159.237587][ T7809] loop2: detected capacity change from 0 to 128 [ 159.258647][ T7805] loop4: detected capacity change from 0 to 4096 [ 159.312375][ T5754] tipc: Node number set to 2886997007 [ 159.370703][ T7805] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 159.387223][ T26] audit: type=1800 audit(1769107220.554:31): pid=7809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1121" name="file0" dev="loop2" ino=1048645 res=0 errno=0 [ 159.582505][ T4260] attempt to access beyond end of device [ 159.582505][ T4260] loop2: rw=1, want=250, limit=128 [ 159.618330][ T4260] attempt to access beyond end of device [ 159.618330][ T4260] loop2: rw=1, want=154, limit=128 [ 159.911779][ T7824] loop4: detected capacity change from 0 to 8192 [ 159.984956][ T7803] loop6: detected capacity change from 0 to 32768 [ 160.027237][ T7824] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 160.045136][ T7836] loop1: detected capacity change from 0 to 256 [ 160.108041][ T7824] REISERFS (device loop4): using ordered data mode [ 160.142201][ T7824] reiserfs: using flush barriers [ 160.153959][ T7824] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 160.176865][ T7836] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 160.189675][ T7803] XFS (loop6): Mounting V5 Filesystem [ 160.199886][ T7841] EXT4-fs (loop5): Ignoring removed nobh option [ 160.214654][ T7841] EXT4-fs (loop5): Ignoring removed bh option [ 160.220769][ T7841] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 160.275164][ T7824] REISERFS (device loop4): checking transaction log (loop4) [ 160.285769][ T7824] REISERFS (device loop4): Using rupasov hash to sort names [ 160.364569][ T7841] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,errors=remount-ro,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004005b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,. Quota mode: writeback. [ 160.389535][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.407332][ T7824] REISERFS (device loop4): using 3.5.x disk format [ 160.415615][ T7836] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 160.450553][ T7824] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 160.477482][ T7841] EXT4-fs (loop5): shut down requested (2) [ 160.490007][ T7803] XFS (loop6): Ending clean mount [ 160.504170][ T7803] XFS (loop6): Quotacheck needed: Please wait. [ 160.532250][ T7824] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 160.543479][ T7836] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805e252860 iblock : 8, err : -5) [ 160.583838][ T7824] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 160.602252][ T7803] XFS (loop6): Quotacheck: Done. [ 160.678455][ T7836] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 160.687062][ T7824] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 160.712292][ T7836] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 160.781219][ T7861] tipc: Started in network mode [ 160.793365][ T5197] XFS (loop6): Unmounting Filesystem [ 160.833304][ T7861] tipc: Node identity ac14140f, cluster identity 4711 [ 160.899681][ T7861] tipc: New replicast peer: 255.255.255.255 [ 160.916598][ T7861] tipc: Enabled bearer , priority 10 [ 161.094013][ T7869] program syz.5.1140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.272819][ T7877] exfat: Deprecated parameter 'utf8' [ 161.278333][ T7877] exfat: Deprecated parameter 'utf8' [ 161.329090][ T7877] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 161.490690][ T7882] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 161.937708][ T7907] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1153'. [ 162.034917][ T5067] tipc: Node number set to 2886997007 [ 162.220177][ T7899] set_capacity_and_notify: 3 callbacks suppressed [ 162.220192][ T7899] loop2: detected capacity change from 0 to 32768 [ 162.244703][ T7922] delete_channel: no stack [ 162.336769][ T7899] JBD2: Ignoring recovery information on journal [ 162.343563][ T5067] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 162.398027][ T7926] loop4: detected capacity change from 0 to 8192 [ 162.443169][ T7926] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 162.480441][ T7899] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 162.490404][ T7926] REISERFS (device loop4): using ordered data mode [ 162.531570][ T7926] reiserfs: using flush barriers [ 162.540572][ T7926] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 162.542381][ T4193] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 162.585880][ T7926] REISERFS (device loop4): checking transaction log (loop4) [ 162.596124][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 162.636661][ T7926] REISERFS (device loop4): Using r5 hash to sort names [ 162.649732][ T7926] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 162.661156][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1166'. [ 162.722306][ T5067] usb 2-1: config 0 has no interfaces? [ 162.727921][ T5067] usb 2-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 162.750710][ T5067] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.791194][ T5067] usb 2-1: config 0 descriptor?? [ 162.885740][ T7937] loop5: detected capacity change from 0 to 8192 [ 162.953057][ T4193] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 162.967761][ T4193] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 162.986759][ T7937] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 163.016698][ T7937] REISERFS (device loop5): using ordered data mode [ 163.023932][ T4193] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 163.058001][ T7945] loop4: detected capacity change from 0 to 512 [ 163.064915][ T7937] reiserfs: using flush barriers [ 163.080099][ T4193] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 163.082145][ T7937] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 163.104476][ T5638] usb 2-1: USB disconnect, device number 11 [ 163.120830][ T7937] REISERFS (device loop5): checking transaction log (loop5) [ 163.140803][ T7937] REISERFS (device loop5): Using r5 hash to sort names [ 163.149456][ T7937] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 163.151216][ T7947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1170'. [ 163.169623][ T7937] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 163.192458][ T7945] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 163.233222][ T7945] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8846c098, mo2=0002] [ 163.242846][ T7945] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 163.260248][ T7945] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1169: invalid indirect mapped block 2683928664 (level 1) [ 163.262867][ T4193] usb 7-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 163.302114][ T4193] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.312763][ T4193] usb 7-1: Product: syz [ 163.317267][ T4193] usb 7-1: Manufacturer: syz [ 163.322165][ T4193] usb 7-1: SerialNumber: syz [ 163.330694][ T4193] usb 7-1: config 0 descriptor?? [ 163.355476][ T7945] EXT4-fs (loop4): 1 truncate cleaned up [ 163.361260][ T7945] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,debug,minixdf,jqfmt=vfsv0,usrjquota=.,,errors=continue. Quota mode: writeback. [ 163.363473][ T7947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1170'. [ 163.390404][ T7945] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 163.400484][ T4193] ums-isd200 7-1:0.0: USB Mass Storage device detected [ 163.676170][ T4193] scsi host1: usb-storage 7-1:0.0 [ 163.789245][ T7966] loop5: detected capacity change from 0 to 1024 [ 163.824906][ T7966] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 163.904497][ T7966] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,nojournal_checksum,lazytime,noauto_da_alloc,. Quota mode: writeback. [ 164.066858][ T4193] usb 7-1: USB disconnect, device number 10 [ 164.070161][ T7957] loop4: detected capacity change from 0 to 32768 [ 164.178732][ T7957] JBD2: Ignoring recovery information on journal [ 164.245400][ T7957] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 164.262211][ T7971] loop1: detected capacity change from 0 to 32768 [ 164.281176][ T7957] JBD2: bad block at offset 32 [ 164.299001][ T7957] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 164.371005][ T7957] OCFS2: ERROR (device loop4): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 164.390603][ T7957] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 164.402590][ T7957] OCFS2: File system is now read-only. [ 164.408554][ T7957] (syz.4.1172,7957,0):ocfs2_find_leaf:1941 ERROR: status = -30 [ 164.416333][ T7971] XFS (loop1): Mounting V5 Filesystem [ 164.425607][ T7957] (syz.4.1172,7957,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 164.454673][ T7957] (syz.4.1172,7957,1):ocfs2_fiemap:782 ERROR: status = -30 [ 164.490790][ T7984] loop2: detected capacity change from 0 to 256 [ 164.595106][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 164.639069][ T7971] XFS (loop1): Ending clean mount [ 164.681388][ T7984] FAT-fs (loop2): Directory bread(block 64) failed [ 164.747990][ T7984] FAT-fs (loop2): Directory bread(block 65) failed [ 164.765627][ T7984] FAT-fs (loop2): Directory bread(block 66) failed [ 164.790774][ T7984] FAT-fs (loop2): Directory bread(block 67) failed [ 164.802517][ T7984] FAT-fs (loop2): Directory bread(block 68) failed [ 164.809086][ T7984] FAT-fs (loop2): Directory bread(block 69) failed [ 164.810795][ T7994] tap0: tun_chr_ioctl cmd 2147767511 [ 164.827872][ T7984] FAT-fs (loop2): Directory bread(block 70) failed [ 164.838375][ T7984] FAT-fs (loop2): Directory bread(block 71) failed [ 164.865748][ T7984] FAT-fs (loop2): Directory bread(block 72) failed [ 164.901239][ T7984] FAT-fs (loop2): Directory bread(block 73) failed [ 164.914316][ T4187] XFS (loop1): Unmounting Filesystem [ 165.449107][ T8018] loop1: detected capacity change from 0 to 1024 [ 165.472262][ T8018] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 165.528055][ T8021] loop5: detected capacity change from 0 to 4096 [ 165.548960][ T8021] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 165.572617][ T8021] EXT4-fs (loop5): Test dummy encryption mode enabled [ 165.630732][ T8021] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,discard,noblock_validity,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 165.632340][ T5638] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 165.656598][ C1] vkms_vblank_simulate: vblank timer overrun [ 165.797446][ T8021] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 165.908760][ T8037] mkiss: ax0: crc mode is auto. [ 166.038508][ T5638] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 166.066801][ T5638] usb 3-1: config 0 has no interface number 0 [ 166.098737][ T5638] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 166.135517][ T5638] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 166.173816][ T5638] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 166.199245][ T8041] hfsplus: request for non-existent node 33554434 in B*Tree [ 166.202978][ T5638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.238383][ T8041] hfsplus: request for non-existent node 33554434 in B*Tree [ 166.262316][ T8041] hfsplus: request for non-existent node 33554434 in B*Tree [ 166.272939][ T5638] usb 3-1: config 0 descriptor?? [ 166.289177][ T8041] hfsplus: request for non-existent node 33554434 in B*Tree [ 166.292336][ T8013] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 166.304592][ T8053] netlink: 201392 bytes leftover after parsing attributes in process `syz.6.1206'. [ 166.361897][ T5638] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 166.362411][ T8040] hfsplus: request for non-existent node 33554434 in B*Tree [ 166.411802][ T8051] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196) [ 166.431922][ T8040] hfsplus: request for non-existent node 33554434 in B*Tree [ 166.456587][ T8040] hfsplus: request for non-existent node 33554434 in B*Tree [ 166.470697][ T8040] hfsplus: request for non-existent node 33554434 in B*Tree [ 166.520791][ T4572] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196) [ 166.773393][ T5738] usb 3-1: USB disconnect, device number 10 [ 166.782237][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 167.092364][ T5638] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 167.342137][ T5638] usb 6-1: Using ep0 maxpacket: 32 [ 167.412551][ T8080] input: syz1 as /devices/virtual/input/input13 [ 167.444438][ T8082] set_capacity_and_notify: 4 callbacks suppressed [ 167.444453][ T8082] loop6: detected capacity change from 0 to 256 [ 167.492374][ T5638] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.521373][ T5638] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.541950][ T5638] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 167.551889][ T5638] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.622872][ T5638] usb 6-1: config 0 descriptor?? [ 167.664593][ T5638] hub 6-1:0.0: USB hub found [ 167.885427][ T5638] hub 6-1:0.0: 1 port detected [ 168.047792][ T8116] loop6: detected capacity change from 0 to 1024 [ 168.134298][ T8116] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 168.142473][ T5638] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 168.149378][ T5638] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 168.248284][ T8125] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1238'. [ 168.263310][ T8116] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,resgid=0x0000000000000000,mblk_io_submit,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,jqfmt=vfsv0,. Quota mode: none. [ 168.282263][ T5638] usbhid 6-1:0.0: can't add hid device: -71 [ 168.293418][ T5638] usbhid: probe of 6-1:0.0 failed with error -71 [ 168.322221][ T8126] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1238'. [ 168.343298][ T5638] usb 6-1: USB disconnect, device number 11 [ 168.620165][ T8114] loop4: detected capacity change from 0 to 32768 [ 168.667802][ T8138] loop6: detected capacity change from 0 to 2048 [ 168.713827][ T8142] netlink: 7986 bytes leftover after parsing attributes in process `syz.2.1246'. [ 168.728257][ T8138] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.834432][ T8114] ialloc: diAlloc returned -28! [ 168.919751][ T8151] loop5: detected capacity change from 0 to 1024 [ 168.924459][ T8153] loop2: detected capacity change from 0 to 8 [ 168.974910][ T8157] program syz.1.1255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.023028][ T8153] SQUASHFS error: Failed to read block 0x260685: -5 [ 169.029669][ T8153] SQUASHFS error: Unable to read metadata cache entry [260685] [ 169.073191][ T8153] SQUASHFS error: Unable to read directory block [260685:0] [ 169.126594][ T4260] hfsplus: b-tree write err: -5, ino 4 [ 169.228544][ T8167] loop5: detected capacity change from 0 to 256 [ 169.231441][ T8166] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1257'. [ 169.299451][ T8169] serio: Serial port ttyS3 [ 169.372097][ T8167] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.392345][ T4209] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 169.402077][ T8167] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 169.426041][ T8167] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 169.668309][ T8181] loop5: detected capacity change from 0 to 512 [ 169.802285][ T4209] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 169.811656][ T4209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.824227][ T4209] usb 2-1: config 0 descriptor?? [ 169.873208][ T4209] cp210x 2-1:0.0: cp210x converter detected [ 170.002163][ T4193] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 170.312266][ T4209] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: 2 [ 170.344195][ T8190] input: syz1 as /devices/virtual/input/input14 [ 170.362690][ T4193] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.377156][ T4193] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 170.388292][ T4193] usb 6-1: config 1 has no interface number 0 [ 170.394719][ T4193] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.425812][ T4193] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 170.446610][ T4193] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 170.520943][ T8202] loop4: detected capacity change from 0 to 128 [ 170.594235][ T8202] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 170.633953][ T4193] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.656821][ T8202] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.666192][ T4193] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.676540][ T4193] usb 6-1: Product: syz [ 170.680733][ T4193] usb 6-1: Manufacturer: syz [ 170.711013][ T4193] usb 6-1: SerialNumber: syz [ 170.742276][ T4209] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 170.742548][ T5638] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 170.757650][ T4209] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 170.773961][ T4209] usb 2-1: cp210x converter now attached to ttyUSB0 [ 170.800494][ T4209] usb 2-1: USB disconnect, device number 12 [ 170.810794][ T8211] loop2: detected capacity change from 0 to 1024 [ 170.815050][ T4209] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 170.865012][ T4209] cp210x 2-1:0.0: device disconnected [ 170.900669][ T8211] hfsplus: can't free extent [ 170.907983][ T8212] hfsplus: can't free extent [ 170.912892][ T8212] hfsplus: can't free extent [ 170.995243][ T5638] usb 7-1: Using ep0 maxpacket: 8 [ 171.112302][ T5638] usb 7-1: config 0 interface 0 altsetting 208 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.140187][ T8223] EXT4-fs (loop4): Ignoring removed orlov option [ 171.160892][ T5638] usb 7-1: config 0 interface 0 altsetting 208 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.180121][ T8223] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 171.181550][ T5638] usb 7-1: config 0 interface 0 has no altsetting 0 [ 171.219392][ T5638] usb 7-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 171.237085][ T5638] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.256990][ T8223] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 171.281879][ T5638] usb 7-1: config 0 descriptor?? [ 171.422192][ T4193] cdc_ncm 6-1:1.1: bind() failure [ 171.514054][ T4193] usb 6-1: USB disconnect, device number 12 [ 171.607512][ T8241] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1288'. [ 171.763946][ T5638] holtek 0003:1241:5015.000C: unknown main item tag 0x0 [ 171.763978][ T5638] holtek 0003:1241:5015.000C: unknown global tag 0xd [ 171.763991][ T5638] holtek 0003:1241:5015.000C: item 0 2 1 13 parsing failed [ 171.764370][ T5638] holtek 0003:1241:5015.000C: parse failed [ 171.764393][ T5638] holtek: probe of 0003:1241:5015.000C failed with error -22 [ 171.872086][ T4209] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 171.993779][ T5638] usb 7-1: USB disconnect, device number 11 [ 172.140296][ T4209] usb 3-1: Using ep0 maxpacket: 32 [ 172.244243][ T8261] EXT4-fs (loop4): orphan cleanup on readonly fs [ 172.244641][ T8261] Quota error (device loop4): v2_read_file_info: Number of blocks too big for quota file size (2048 > 1024). [ 172.244997][ T8261] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 172.245022][ T8261] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 172.269540][ T8261] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1296: bg 0: block 67: padding at end of block bitmap is not set [ 172.279170][ T4209] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 172.309914][ T4209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.320052][ T4209] usb 3-1: config 0 descriptor?? [ 172.332401][ T8261] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 172.333380][ T8261] EXT4-fs (loop4): 1 truncate cleaned up [ 172.333401][ T8261] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 172.575111][ T4209] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 172.576833][ T4209] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 172.602541][ T4209] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 172.602602][ T4209] usb 3-1: media controller created [ 172.634591][ T4209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.662547][ T5638] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 172.788456][ T4209] az6027: usb out operation failed. (-71) [ 172.813365][ T4209] az6027: usb out operation failed. (-71) [ 172.819402][ T4209] stb0899_attach: Driver disabled by Kconfig [ 172.852392][ T4209] az6027: no front-end attached [ 172.852392][ T4209] [ 172.884235][ T4209] az6027: usb out operation failed. (-71) [ 172.890000][ T4209] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 172.902284][ T5638] usb 6-1: Using ep0 maxpacket: 32 [ 172.934793][ T8284] set_capacity_and_notify: 2 callbacks suppressed [ 172.934807][ T8284] loop4: detected capacity change from 0 to 512 [ 172.943027][ T4209] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 172.989665][ T4209] dvb-usb: schedule remote query interval to 400 msecs. [ 173.013787][ T4209] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 173.022526][ T5638] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 173.031663][ T4209] usb 3-1: USB disconnect, device number 11 [ 173.045554][ T5638] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.054170][ T8284] EXT4-fs (loop4): Test dummy encryption mode enabled [ 173.060968][ T8284] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 173.123125][ T5638] usb 6-1: config 0 descriptor?? [ 173.153151][ T4209] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 173.166895][ T8284] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #17: comm syz.4.1308: inline data xattr refers to an external xattr inode [ 173.194454][ T5638] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 173.224062][ T8284] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1308: couldn't read orphan inode 17 (err -117) [ 173.239933][ T8284] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x000000000000000c,lazytime,debug_want_extra_isize=0x000000000000006e,block_validity,test_dummy_encryption,quota,,errors=continue. Quota mode: writeback. [ 173.260599][ T8295] loop1: detected capacity change from 0 to 512 [ 173.271603][ T8284] EXT4-fs (loop4): shut down requested (1) [ 173.278449][ T8284] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #2: comm syz.4.1308: directory missing '..' [ 173.347146][ T8295] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 173.405805][ T8295] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,dioread_nolock,quota,,errors=continue. Quota mode: writeback. [ 173.467682][ T8295] ext4 filesystem being mounted at /273/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.609798][ T8289] loop6: detected capacity change from 0 to 32768 [ 173.648872][ T8289] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1311 (8289) [ 173.724195][ T8289] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 173.765346][ T8289] BTRFS info (device loop6): setting nodatasum [ 173.802243][ T8289] BTRFS info (device loop6): force zlib compression, level 3 [ 173.862207][ T8289] BTRFS info (device loop6): enabling ssd optimizations [ 173.886026][ T8289] BTRFS info (device loop6): allowing degraded mounts [ 173.912222][ T8289] BTRFS info (device loop6): using free space tree [ 173.926137][ T8289] BTRFS info (device loop6): has skinny extents [ 174.092182][ T5638] gspca_vc032x: reg_w err -71 [ 174.096899][ T5638] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.131849][ T5638] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.163438][ T5638] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.226477][ T5638] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.231805][ T5638] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.258824][ T5638] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.265401][ T5638] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.275905][ T5638] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.281810][ T5638] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.289985][ T5638] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.299542][ T5638] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.307295][ T5638] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.324182][ T5638] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.344144][ T5638] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.349467][ T5638] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.370204][ T5638] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.381741][ T5638] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.387516][ T5638] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.397385][ T5638] gspca_vc032x: Unknown sensor... [ 174.402829][ T5638] vc032x: probe of 6-1:0.0 failed with error -22 [ 174.411304][ T5638] usb 6-1: USB disconnect, device number 13 [ 174.467773][ T8289] BTRFS info (device loop6): Snapshot src from another FS [ 174.678030][ T4557] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop6 scanned by udevd (4557) [ 174.770214][ T8340] loop1: detected capacity change from 0 to 32768 [ 174.807085][ T8345] loop5: detected capacity change from 0 to 4096 [ 174.929431][ T8349] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.009614][ T8340] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 175.106681][ T8340] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 175.400445][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 175.582964][ T8367] loop4: detected capacity change from 0 to 256 [ 175.819300][ T5068] Bluetooth: hci1: command 0x0406 tx timeout [ 175.825928][ T5068] Bluetooth: hci2: command 0x0406 tx timeout [ 175.830152][ T8376] input: syz0 as /devices/virtual/input/input16 [ 176.046599][ T5068] kernel read not supported for file /dsp1 (pid: 5068 comm: kworker/1:15) [ 176.289814][ T8372] loop2: detected capacity change from 0 to 32768 [ 176.298833][ T8392] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1345'. [ 176.331638][ T8392] netem: unknown loss type 0 [ 176.370662][ T8392] netem: change failed [ 176.431936][ T8403] program syz.4.1349 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.441407][ T8372] XFS (loop2): Mounting V5 Filesystem [ 176.585396][ T8372] XFS (loop2): Ending clean mount [ 176.703290][ T8417] loop4: detected capacity change from 0 to 1024 [ 176.713633][ T4191] XFS (loop2): Unmounting Filesystem [ 176.962158][ T4209] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 177.212392][ T4209] usb 6-1: Using ep0 maxpacket: 8 [ 177.368553][ T4209] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 177.432344][ T4209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.509603][ T4209] pvrusb2: Hardware description: Terratec Grabster AV400 [ 177.523517][ T8447] loop2: detected capacity change from 0 to 1024 [ 177.531339][ T4209] pvrusb2: ********** [ 177.541485][ T4209] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 177.551731][ T4209] pvrusb2: Important functionality might not be entirely working. [ 177.566403][ T4209] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 177.588444][ T4209] pvrusb2: ********** [ 177.663081][ T8447] hfsplus: invalid file type 0174377 for inode 21 [ 177.749614][ T2421] pvrusb2: Invalid write control endpoint [ 177.820648][ T2421] pvrusb2: Invalid write control endpoint [ 177.862333][ T2421] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 177.888417][ T2421] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 177.902571][ T2421] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 177.923062][ T2421] pvrusb2: Device being rendered inoperable [ 177.928381][ T8439] loop4: detected capacity change from 0 to 32768 [ 177.929170][ T2421] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 177.977878][ T5738] usb 6-1: USB disconnect, device number 14 [ 177.992351][ T2421] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 178.008322][ T2421] pvrusb2: Attached sub-driver cx25840 [ 178.013877][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 178.029803][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 178.044935][ T8439] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 178.189054][ T8439] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 178.450777][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 178.919610][ T8477] loop4: detected capacity change from 0 to 4096 [ 178.929181][ T8462] loop2: detected capacity change from 0 to 32768 [ 178.982257][ T8462] XFS: ikeep mount option is deprecated. [ 179.063876][ T8477] ntfs: volume version 3.1. [ 179.123266][ T8477] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 179.143357][ T8477] ntfs: (device loop4): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 179.166507][ T8462] XFS (loop2): Mounting V5 Filesystem [ 179.337596][ T8462] XFS (loop2): Ending clean mount [ 179.400261][ T4191] XFS (loop2): Unmounting Filesystem [ 179.569944][ T8501] loop6: detected capacity change from 0 to 8192 [ 179.642234][ T21] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 179.984786][ T26] audit: type=1326 audit(1769107241.154:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.6.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a19eccb9 code=0x7ffc0000 [ 180.062434][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 180.106612][ T26] audit: type=1326 audit(1769107241.154:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.6.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f58a19eccb9 code=0x7ffc0000 [ 180.162478][ T21] usb 2-1: config 3 has an invalid interface number: 4 but max is 0 [ 180.173953][ T21] usb 2-1: config 3 has an invalid descriptor of length 164, skipping remainder of the config [ 180.188103][ T26] audit: type=1326 audit(1769107241.154:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.6.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a19eccb9 code=0x7ffc0000 [ 180.220727][ T21] usb 2-1: config 3 has no interface number 0 [ 180.231388][ T21] usb 2-1: too many endpoints for config 3 interface 4 altsetting 27: 48, using maximum allowed: 30 [ 180.251614][ T21] usb 2-1: config 3 interface 4 altsetting 27 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 180.265057][ T26] audit: type=1326 audit(1769107241.154:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.6.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a19eccb9 code=0x7ffc0000 [ 180.287211][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.300898][ T21] usb 2-1: config 3 interface 4 has no altsetting 0 [ 180.314022][ T8533] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1401'. [ 180.329086][ T8533] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 180.350563][ T26] audit: type=1326 audit(1769107241.154:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.6.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f58a19eccb9 code=0x7ffc0000 [ 180.372787][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.406145][ T26] audit: type=1326 audit(1769107241.154:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.6.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a19eccb9 code=0x7ffc0000 [ 180.482308][ T21] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 180.502092][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.525138][ T21] usb 2-1: Product: syz [ 180.542108][ T21] usb 2-1: Manufacturer: syz [ 180.554741][ T21] usb 2-1: SerialNumber: syz [ 180.689943][ T8541] comedi comedi3: 8255: I/O port conflict (0xffffffff80000000,4) [ 180.698875][ T8529] loop2: detected capacity change from 0 to 32768 [ 180.715821][ T8541] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 180.742978][ T8541] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 180.758274][ T8541] comedi comedi3: 8255: I/O port conflict (0xd,4) [ 180.801104][ T8541] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 180.817194][ T8529] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 180.841595][ T8541] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 180.849082][ T8529] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 180.871704][ T8541] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 180.883694][ T8541] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 180.890205][ T8541] comedi comedi3: 8255: I/O port conflict (0xfd,4) [ 180.982157][ T8541] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 181.009185][ T8541] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 181.058728][ T8541] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 181.068191][ T8557] binder: 8556:8557 ioctl 400c620e 0 returned -14 [ 181.078234][ T8541] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 181.142107][ T8541] comedi comedi3: 8255: I/O port conflict (0x100006,4) [ 181.153899][ T8541] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 181.192132][ T8541] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 181.198944][ T8541] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 181.231109][ T8541] comedi comedi3: 8255: I/O port conflict (0x40000003,4) [ 181.231810][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 181.265446][ T8541] comedi comedi3: 8255: I/O port conflict (0x8c,4) [ 181.387649][ T21] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 181.422359][ T5639] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 181.502595][ T8567] tipc: Started in network mode [ 181.507510][ T8567] tipc: Node identity ac14140f, cluster identity 4711 [ 181.521738][ T8567] tipc: New replicast peer: 255.255.255.255 [ 181.530091][ T8567] tipc: Enabled bearer , priority 10 [ 181.625261][ T8572] netlink: 'syz.2.1413': attribute type 2 has an invalid length. [ 181.645454][ T8574] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1419'. [ 181.675097][ T8574] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1419'. [ 181.792410][ T5639] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 181.802293][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 181.822231][ T5639] usb 6-1: config 0 has no interface number 0 [ 181.848729][ T5639] usb 6-1: config 0 interface 11 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 181.885908][ T5639] usb 6-1: config 0 interface 11 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 181.933823][ T5639] usb 6-1: config 0 interface 11 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 181.959642][ T8590] loop2: detected capacity change from 0 to 1024 [ 182.132380][ T5639] usb 6-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca [ 182.171643][ T5639] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.210347][ T5639] usb 6-1: Product: syz [ 182.218160][ T8595] loop4: detected capacity change from 0 to 32768 [ 182.240718][ T5639] usb 6-1: Manufacturer: syz [ 182.257556][ T8590] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 182.268579][ T21] usb 2-1: failed to restore interface 4 altsetting 27 (error=-71) [ 182.271444][ T8595] (syz.4.1428,8595,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 182.282084][ T5639] usb 6-1: SerialNumber: syz [ 182.293861][ T8595] (syz.4.1428,8595,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 182.301309][ T21] usb 2-1: USB disconnect, device number 13 [ 182.335629][ T5639] usb 6-1: config 0 descriptor?? [ 182.340602][ T8595] (syz.4.1428,8595,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x729e4f9c, computed 0x295f958d. Applying ECC. [ 182.357512][ T8595] JBD2: Ignoring recovery information on journal [ 182.520677][ T8595] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 182.534046][ T8559] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 182.542427][ T8559] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 182.547550][ T8595] (syz.4.1428,8595,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x729e4f9c, computed 0x295f958d. Applying ECC. [ 182.619722][ T8607] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1433'. [ 182.632400][ T8607] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1433'. [ 182.645135][ T8607] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1433'. [ 182.649177][ T461] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 182.662124][ T5738] tipc: Node number set to 2886997007 [ 182.703964][ T461] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 182.722699][ T8595] (syz.4.1428,8595,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xa1ff4175. Applying ECC. [ 182.725578][ T461] EXT4-fs (loop2): This should not happen!! Data will be lost [ 182.725578][ T461] [ 182.736933][ T8595] (syz.4.1428,8595,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0xfd02ac81 [ 182.756381][ T461] EXT4-fs (loop2): Total free blocks count 0 [ 182.759881][ T8595] (syz.4.1428,8595,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 182.770179][ T461] EXT4-fs (loop2): Free/Dirty block details [ 182.774544][ T8595] (syz.4.1428,8595,0):ocfs2_quota_read:201 ERROR: status = -5 [ 182.774572][ T8595] Quota error (device loop4): find_block_dqentry: Can't read quota tree block 6 [ 182.774736][ T8595] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 182.774761][ T8595] (syz.4.1428,8595,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 182.776946][ T8595] (syz.4.1428,8595,0):ocfs2_mknod:314 ERROR: status = -5 [ 182.787715][ T461] EXT4-fs (loop2): free_blocks=68451041280 [ 182.788998][ T8595] (syz.4.1428,8595,0):ocfs2_mknod:502 ERROR: status = -5 [ 182.808625][ T461] EXT4-fs (loop2): dirty_blocks=16 [ 182.815961][ T8595] (syz.4.1428,8595,0):ocfs2_create:676 ERROR: status = -5 [ 182.872291][ T5639] usb 6-1: Error in usbnet_get_endpoints (-71) [ 182.896730][ T5639] usb 6-1: USB disconnect, device number 15 [ 182.926188][ T461] EXT4-fs (loop2): Block reservation details [ 182.950293][ T461] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 183.099654][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 183.107241][ T8611] loop6: detected capacity change from 0 to 4096 [ 183.149225][ T8611] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 183.502119][ T5639] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 183.616360][ T8621] loop1: detected capacity change from 0 to 4096 [ 183.697471][ T8621] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 183.752095][ T5639] usb 3-1: Using ep0 maxpacket: 16 [ 183.880999][ T8634] loop5: detected capacity change from 0 to 4096 [ 183.893075][ T8639] ntfs3: loop1: ino=1b, "file0" directory corrupted [ 183.920222][ T8640] loop4: detected capacity change from 0 to 512 [ 184.013168][ T8640] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 184.045633][ T8640] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 184.046330][ T5639] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 184.167400][ T8640] EXT4-fs (loop4): 1 truncate cleaned up [ 184.195745][ T8640] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,journal_ioprio=0x0000000000000002,noauto_da_alloc,lazytime,grpjquota=,quota,,errors=continue. Quota mode: writeback. [ 184.231822][ T8646] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.248724][ T5639] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.289139][ T5639] usb 3-1: Product: syz [ 184.316030][ T8643] loop1: detected capacity change from 0 to 128 [ 184.322104][ T5639] usb 3-1: Manufacturer: syz [ 184.326903][ T5639] usb 3-1: SerialNumber: syz [ 184.498177][ T8637] loop6: detected capacity change from 0 to 32768 [ 184.581809][ T8637] [ 184.581809][ T8637] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.581809][ T8637] [ 184.643995][ T5639] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 184.654759][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 184.654770][ T26] audit: type=1800 audit(1769107245.824:39): pid=8637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1448" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 184.692480][ T8637] ERROR: (device loop6): diWrite: ixpxd invalid [ 184.692480][ T8637] [ 184.713231][ T5639] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 184.714300][ T8655] loop1: detected capacity change from 0 to 8192 [ 184.736117][ T8637] ERROR: (device loop6): txCommit: [ 184.736117][ T8637] [ 184.748820][ T5639] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 184.763901][ T5738] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 184.769880][ T5639] usb 3-1: media controller created [ 184.821256][ T8637] [ 184.821256][ T8637] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.821256][ T8637] [ 184.870796][ T8659] loop4: detected capacity change from 0 to 1024 [ 184.879856][ T5639] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.895008][ T8637] [ 184.895008][ T8637] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.895008][ T8637] [ 184.953347][ T5639] zl10353_read_register: readreg error (reg=127, ret==-71) [ 184.953513][ T8659] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 184.992294][ T8637] [ 184.992294][ T8637] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.992294][ T8637] [ 185.050435][ T8637] [ 185.050435][ T8637] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.050435][ T8637] [ 185.079813][ T5639] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5 [ 185.133256][ T5639] usb 3-1: USB disconnect, device number 12 [ 185.153836][ T8659] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 185.192271][ T5738] usb 6-1: config 7 has an invalid interface number: 101 but max is 0 [ 185.200503][ T5738] usb 6-1: config 7 has no interface number 0 [ 185.250473][ T5197] [ 185.250473][ T5197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.250473][ T5197] [ 185.307057][ T5197] [ 185.307057][ T5197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.307057][ T5197] [ 185.426723][ T5738] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 185.455018][ T5738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.467469][ T5738] usb 6-1: Product: syz [ 185.482089][ T5738] usb 6-1: Manufacturer: syz [ 185.486725][ T5738] usb 6-1: SerialNumber: syz [ 185.681607][ T8676] loop6: detected capacity change from 0 to 128 [ 186.172121][ T4293] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 186.236088][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1477'. [ 186.338422][ T5738] as10x_usb: device has been detected [ 186.345064][ T5738] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 186.370130][ T5738] usb 6-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 186.442176][ T4293] usb 3-1: Using ep0 maxpacket: 16 [ 186.602302][ T4293] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 186.614817][ T4293] usb 3-1: config 0 has no interface number 0 [ 186.626619][ T4293] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 186.641302][ T4293] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 186.672255][ T5738] as10x_usb: error during firmware upload part1 [ 186.679337][ T5738] Registered device Elgato EyeTV DTT Deluxe [ 186.696417][ T5738] usb 6-1: USB disconnect, device number 16 [ 186.754239][ T5738] Unregistered device Elgato EyeTV DTT Deluxe [ 186.764759][ T5738] as10x_usb: device has been disconnected [ 186.792341][ T4293] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 186.806207][ T4293] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 186.814802][ T4293] usb 3-1: Product: syz [ 186.824004][ T4293] usb 3-1: SerialNumber: syz [ 186.835407][ T4293] usb 3-1: config 0 descriptor?? [ 186.919299][ T4293] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 186.935853][ T4293] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input17 [ 187.195638][ T5639] usb 3-1: USB disconnect, device number 13 [ 187.201603][ T8723] loop6: detected capacity change from 0 to 1024 [ 187.222423][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 187.229801][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 187.250983][ T5639] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 187.281369][ T8723] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 187.381433][ T8723] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,norecovery,resgid=0x0000000000000000,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,grpid,auto_da_alloc=0x0000000000000343,grpid,barrier=0x0000000000000007,nombcache,. Quota mode: none. [ 187.614373][ T8717] loop4: detected capacity change from 0 to 32768 [ 187.681743][ T8717] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.1480 (8717) [ 187.716272][ T8717] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 187.746835][ T8717] BTRFS info (device loop4): enabling auto defrag [ 187.764436][ T8717] BTRFS info (device loop4): force clearing of disk cache [ 187.808042][ T8748] loop2: detected capacity change from 0 to 512 [ 187.815440][ T8717] BTRFS info (device loop4): enabling disk space caching [ 187.841963][ T8717] BTRFS info (device loop4): max_inline at 0 [ 187.848371][ T8717] BTRFS info (device loop4): disk space caching is enabled [ 187.909708][ T8717] BTRFS info (device loop4): has skinny extents [ 188.232182][ T8717] BTRFS info (device loop4): enabling ssd optimizations [ 188.242642][ T8717] BTRFS info (device loop4): clearing free space tree [ 188.255664][ T8717] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 188.340232][ T8717] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 188.487438][ T8742] loop5: detected capacity change from 0 to 40427 [ 188.562458][ T5738] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 188.601512][ T8742] F2FS-fs (loop5): invalid crc value [ 188.604450][ T8746] loop6: detected capacity change from 0 to 32768 [ 188.681736][ T8742] F2FS-fs (loop5): Found nat_bits in checkpoint [ 188.826175][ T8742] F2FS-fs (loop5): Start checkpoint disabled! [ 188.893548][ T8742] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 188.999650][ T5738] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 189.010126][ T5738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.024813][ T5738] usb 3-1: config 0 descriptor?? [ 189.095596][ T5738] cp210x 3-1:0.0: cp210x converter detected [ 189.218985][ T4762] attempt to access beyond end of device [ 189.218985][ T4762] loop5: rw=2049, want=40984, limit=40427 [ 189.254102][ T8789] erofs: (device loop1): mounted with root inode @ nid 36. [ 189.311873][ T26] audit: type=1800 audit(1769107250.474:40): pid=8789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1504" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 189.521122][ T8795] set_capacity_and_notify: 1 callbacks suppressed [ 189.521136][ T8795] loop1: detected capacity change from 0 to 2048 [ 189.581896][ T8795] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 189.599392][ T8795] NILFS (loop1): unrecognized mount option "‹ìY]Kõ½¦¾1b±uçGÏG㮞[ÑR˜at€’´:3gU(k´nËÿŽ_ôZ2é‰M¡6¾ùÒ" [ 189.613348][ T8797] program syz.4.1507 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.777980][ T5738] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 189.797182][ T5738] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 189.837039][ T5738] usb 3-1: cp210x converter now attached to ttyUSB0 [ 189.849489][ T8795] loop1: detected capacity change from 0 to 1764 [ 189.866676][ T8807] loop4: detected capacity change from 0 to 512 [ 189.882504][ T5738] usb 3-1: USB disconnect, device number 14 [ 189.907194][ T5738] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 189.939676][ T5738] cp210x 3-1:0.0: device disconnected [ 189.957914][ T8811] syz.5.1511 uses obsolete (PF_INET,SOCK_PACKET) [ 189.968752][ T8795] gfs2: Unexpected value for 'discard' [ 189.983610][ T8811] netlink: 'syz.5.1511': attribute type 10 has an invalid length. [ 190.002677][ T8807] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 190.007390][ T8811] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1511'. [ 190.024046][ T8811] device bond0 entered promiscuous mode [ 190.029620][ T8811] device bond_slave_0 entered promiscuous mode [ 190.036765][ T8811] device bond_slave_1 entered promiscuous mode [ 190.043793][ T8811] bridge0: port 3(bond0) entered blocking state [ 190.050309][ T8811] bridge0: port 3(bond0) entered disabled state [ 190.055341][ T8807] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.059120][ T8811] bridge0: port 3(bond0) entered blocking state [ 190.074028][ T8811] bridge0: port 3(bond0) entered forwarding state [ 190.113722][ T8807] EXT4-fs (loop4): shut down requested (1) [ 190.512216][ T5746] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 190.821268][ T8838] program syz.4.1524 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.933232][ T5746] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 190.982490][ T5746] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 191.335929][ T5639] Bluetooth: hci3: command 0x0406 tx timeout [ 191.768616][ T8841] loop5: detected capacity change from 0 to 131072 [ 191.785076][ T5746] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.841749][ T8841] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 191.850060][ T8841] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 191.869432][ T8841] F2FS-fs (loop5): invalid crc value [ 191.891337][ T8828] loop2: detected capacity change from 0 to 262144 [ 191.893571][ T5746] usb 7-1: config 0 descriptor?? [ 191.959773][ T8823] loop1: detected capacity change from 0 to 32768 [ 191.962311][ T8820] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 191.983616][ T8841] F2FS-fs (loop5): Found nat_bits in checkpoint [ 192.031900][ T8828] F2FS-fs (loop2): invalid crc value [ 192.071313][ T8828] F2FS-fs (loop2): Found nat_bits in checkpoint [ 192.085587][ T8841] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 192.092758][ T8841] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 192.106320][ T8828] F2FS-fs (loop2): Start checkpoint disabled! [ 192.133366][ T8828] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 192.141621][ T8841] F2FS-fs (loop5): checksum invalid, nid = 4, ino_of_node = 4, 8e2acc4a vs. 159afe7 [ 192.208548][ T8823] XFS (loop1): Mounting V5 Filesystem [ 192.374379][ T8823] XFS (loop1): Ending clean mount [ 192.395919][ T8823] XFS (loop1): Quotacheck needed: Please wait. [ 192.466011][ T5746] kone 0003:1E7D:2CED.000D: hidraw0: USB HID v1.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.6-1/input0 [ 192.516978][ T8823] XFS (loop1): Quotacheck: Done. [ 192.579801][ T8869] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1531'. [ 192.640105][ T8869] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 192.675210][ T4187] XFS (loop1): Unmounting Filesystem [ 192.762977][ T5639] usb 7-1: USB disconnect, device number 12 [ 192.893108][ T8871] fido_id[8871]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 193.631542][ T8894] loop6: detected capacity change from 0 to 32768 [ 193.682170][ T8894] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 193.690406][ T8894] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 193.701129][ T8894] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 193.701129][ T8894] inode = 1 19 [ 193.701129][ T8894] function = gfs2_check_internal_file_size, file = fs/gfs2/inode.h, line = 87 [ 193.720698][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.727968][ T8894] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 193.741580][ T8894] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 193.750140][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1545'. [ 193.750476][ T8894] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 193.765890][ T8894] gfs2: fsid=syz:syz.0: File system withdrawn [ 193.772077][ T8894] CPU: 1 PID: 8894 Comm: syz.6.1542 Not tainted syzkaller #0 [ 193.779499][ T8894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.789571][ T8894] Call Trace: [ 193.792861][ T8894] [ 193.795796][ T8894] dump_stack_lvl+0x188/0x250 [ 193.800490][ T8894] ? kobject_uevent_env+0x371/0x890 [ 193.805700][ T8894] ? show_regs_print_info+0x20/0x20 [ 193.810914][ T8894] ? load_image+0x400/0x400 [ 193.815429][ T8894] ? kobject_uevent_env+0x371/0x890 [ 193.820637][ T8894] ? lockref_put_or_lock+0x6e/0xb0 [ 193.825761][ T8894] gfs2_withdraw+0x1149/0x1490 [ 193.830542][ T8894] ? gfs2_lm+0x240/0x240 [ 193.834803][ T8894] ? gfs2_glock_nq+0xcb0/0x1550 [ 193.839662][ T8894] ? gfs2_consist_inode_i+0xc0/0xe0 [ 193.844868][ T8894] gfs2_jdesc_check+0x137/0x290 [ 193.849730][ T8894] init_journal+0xd02/0x22f0 [ 193.854364][ T8894] ? end_bio_io_page+0x100/0x100 [ 193.859306][ T8894] ? vsnprintf+0x1b21/0x1c20 [ 193.863912][ T8894] ? snprintf+0xe5/0x140 [ 193.868173][ T8894] ? init_journal+0x74d/0x22f0 [ 193.872952][ T8894] ? vscnprintf+0x80/0x80 [ 193.877288][ T8894] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 193.882409][ T8894] init_inodes+0xdb/0x320 [ 193.886753][ T8894] gfs2_fill_super+0x16b2/0x1f00 [ 193.891717][ T8894] ? gfs2_reconfigure+0xd30/0xd30 [ 193.896750][ T8894] ? gfs2_glock_nq_num+0x82/0x1b0 [ 193.901793][ T8894] ? sb_set_blocksize+0xa5/0xe0 [ 193.906646][ T8894] get_tree_bdev+0x3f1/0x610 [ 193.911245][ T8894] ? gfs2_reconfigure+0xd30/0xd30 [ 193.916275][ T8894] gfs2_get_tree+0x4d/0x1e0 [ 193.920786][ T8894] vfs_get_tree+0x88/0x270 [ 193.925208][ T8894] do_new_mount+0x24a/0xa40 [ 193.929734][ T8894] __se_sys_mount+0x2e3/0x3d0 [ 193.934419][ T8894] ? __x64_sys_mount+0xc0/0xc0 [ 193.939196][ T8894] ? lockdep_hardirqs_on+0x94/0x140 [ 193.944408][ T8894] ? __x64_sys_mount+0x1c/0xc0 [ 193.949183][ T8894] do_syscall_64+0x4c/0xa0 [ 193.953608][ T8894] ? clear_bhb_loop+0x30/0x80 [ 193.958330][ T8894] ? clear_bhb_loop+0x30/0x80 [ 193.963017][ T8894] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.968913][ T8894] RIP: 0033:0x7f58a19edf4a [ 193.973342][ T8894] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.992960][ T8894] RSP: 002b:00007f589fc47e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 194.001388][ T8894] RAX: ffffffffffffffda RBX: 00007f589fc47ee0 RCX: 00007f58a19edf4a [ 194.009380][ T8894] RDX: 0000200000000100 RSI: 0000200000012500 RDI: 00007f589fc47ea0 [ 194.017354][ T8894] RBP: 0000200000000100 R08: 00007f589fc47ee0 R09: 0000000000000010 [ 194.025332][ T8894] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000012500 [ 194.033292][ T8894] R13: 00007f589fc47ea0 R14: 000000000001260c R15: 0000200000000040 [ 194.041261][ T8894] [ 194.044365][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.050873][ T8894] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5 [ 194.228656][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.235022][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.623540][ T8922] tipc: Enabling of bearer rejected, already enabled [ 195.068864][ T8938] loop6: detected capacity change from 0 to 1024 [ 195.280298][ T8905] loop2: detected capacity change from 0 to 40427 [ 195.329746][ T8943] loop6: detected capacity change from 0 to 1764 [ 195.377136][ T8905] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 195.411230][ T8905] F2FS-fs (loop2): invalid crc value [ 195.455061][ T8905] F2FS-fs (loop2): Found nat_bits in checkpoint [ 195.617597][ T8905] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 195.651464][ T8932] loop5: detected capacity change from 0 to 32768 [ 195.833275][ T4191] attempt to access beyond end of device [ 195.833275][ T4191] loop2: rw=2049, want=45104, limit=40427 [ 195.902659][ T8954] (syz.5.1567,8954,1):dlmfs_mkdir:413 ERROR: invalid domain name for directory. [ 196.010513][ T8917] loop4: detected capacity change from 0 to 65536 [ 196.342291][ T8917] XFS (loop4): Mounting V5 Filesystem [ 196.472372][ T21] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 196.493954][ T8917] XFS (loop4): Ending clean mount [ 196.544096][ T8989] loop2: detected capacity change from 0 to 4096 [ 196.575638][ T4189] XFS (loop4): Unmounting Filesystem [ 196.618511][ T8992] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.793998][ T8973] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 196.872137][ T21] usb 7-1: unable to get BOS descriptor or descriptor too short [ 196.942270][ T21] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 196.949880][ T21] usb 7-1: can't read configurations, error -71 [ 196.998073][ T9002] netlink: 'syz.2.1586': attribute type 1 has an invalid length. [ 197.335178][ T9008] loop2: detected capacity change from 0 to 256 [ 197.419154][ T8986] loop1: detected capacity change from 0 to 32768 [ 197.595841][ T9010] netlink: 'syz.6.1590': attribute type 3 has an invalid length. [ 197.667722][ T9010] netlink: 'syz.6.1590': attribute type 1 has an invalid length. [ 197.721605][ T9010] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.1590'. [ 197.741175][ T9004] loop5: detected capacity change from 0 to 131072 [ 197.836520][ T9004] F2FS-fs (loop5): invalid crc value [ 197.872614][ T9004] F2FS-fs (loop5): Found nat_bits in checkpoint [ 197.926594][ T9004] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 197.945377][ T9004] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 198.396179][ T9046] loop2: detected capacity change from 0 to 128 [ 198.543070][ T9046] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 198.566759][ T9046] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.064223][ T9079] device syz_tun entered promiscuous mode [ 199.097807][ T9079] device syz_tun left promiscuous mode [ 199.532071][ T5747] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 199.647272][ T9088] XFS (loop2): Mounting V5 Filesystem [ 199.826708][ T9115] program syz.6.1633 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.883282][ T9088] XFS (loop2): Ending clean mount [ 199.907456][ T9088] XFS (loop2): Quotacheck needed: Please wait. [ 199.922790][ T5747] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.939615][ T5747] usb 2-1: config 0 interface 0 has no altsetting 0 [ 199.947387][ T5747] usb 2-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.00 [ 199.957543][ T5747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.982964][ T5747] usb 2-1: config 0 descriptor?? [ 200.048772][ T9119] tap0: tun_chr_ioctl cmd 1074025677 [ 200.079367][ T9119] tap0: linktype set to 805 [ 200.112558][ T9088] XFS (loop2): Quotacheck: Done. [ 200.193452][ T9095] set_capacity_and_notify: 1 callbacks suppressed [ 200.193465][ T9095] loop4: detected capacity change from 0 to 32768 [ 200.221030][ T4191] XFS (loop2): Unmounting Filesystem [ 200.283283][ T9121] loop6: detected capacity change from 0 to 64 [ 200.345967][ T9095] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 200.410943][ T9121] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 200.455945][ T5747] wacom 0003:056A:00D2.000E: Unknown device_type for 'HID 056a:00d2'. Assuming pen. [ 200.476609][ T9095] [ 200.478971][ T9095] ====================================================== [ 200.485982][ T9095] WARNING: possible circular locking dependency detected [ 200.493001][ T9095] syzkaller #0 Not tainted [ 200.497407][ T9095] ------------------------------------------------------ [ 200.504418][ T9095] syz.4.1627/9095 is trying to acquire lock: [ 200.510383][ T9095] ffff88805e3609c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 200.523581][ T9095] [ 200.523581][ T9095] but task is already holding lock: [ 200.530935][ T9095] ffff88805e343ff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x464/0x13e0 [ 200.540387][ T9095] [ 200.540387][ T9095] which lock already depends on the new lock. [ 200.540387][ T9095] [ 200.550762][ T9095] [ 200.550762][ T9095] the existing dependency chain (in reverse order) is: [ 200.559752][ T9095] [ 200.559752][ T9095] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 200.567541][ T9095] down_read+0x44/0x2e0 [ 200.572205][ T9095] ocfs2_init_acl+0x307/0x770 [ 200.577381][ T9095] ocfs2_mknod+0x15cb/0x2510 [ 200.582470][ T9095] ocfs2_create+0x192/0x420 [ 200.587483][ T9095] path_openat+0x11db/0x2fa0 [ 200.592579][ T9095] do_filp_open+0x1e2/0x410 [ 200.597594][ T9095] do_sys_openat2+0x150/0x4b0 [ 200.602770][ T9095] __x64_sys_open+0x11b/0x140 [ 200.607961][ T9095] do_syscall_64+0x4c/0xa0 [ 200.612882][ T9095] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.619291][ T9095] [ 200.619291][ T9095] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 200.627787][ T9095] down_read+0x44/0x2e0 [ 200.632451][ T9095] ocfs2_start_trans+0x3a6/0x6f0 [ 200.637906][ T9095] ocfs2_shutdown_local_alloc+0x1f8/0xaa0 [ 200.644125][ T9095] ocfs2_dismount_volume+0x1e1/0x8a0 [ 200.649913][ T9095] generic_shutdown_super+0x130/0x300 [ 200.655783][ T9095] kill_block_super+0x7c/0xe0 [ 200.660959][ T9095] deactivate_locked_super+0x93/0xf0 [ 200.666741][ T9095] cleanup_mnt+0x42d/0x4e0 [ 200.671662][ T9095] task_work_run+0x125/0x1a0 [ 200.676780][ T9095] exit_to_user_mode_loop+0x10f/0x130 [ 200.682664][ T9095] exit_to_user_mode_prepare+0xee/0x180 [ 200.688727][ T9095] syscall_exit_to_user_mode+0x16/0x40 [ 200.694683][ T9095] do_syscall_64+0x58/0xa0 [ 200.699595][ T9095] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.705983][ T9095] [ 200.705983][ T9095] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 200.713428][ T9095] ocfs2_start_trans+0x2a7/0x6f0 [ 200.718865][ T9095] ocfs2_mknod+0xf5a/0x2510 [ 200.723871][ T9095] ocfs2_create+0x192/0x420 [ 200.728887][ T9095] path_openat+0x11db/0x2fa0 [ 200.733974][ T9095] do_filp_open+0x1e2/0x410 [ 200.738972][ T9095] do_sys_openat2+0x150/0x4b0 [ 200.744156][ T9095] __x64_sys_open+0x11b/0x140 [ 200.749343][ T9095] do_syscall_64+0x4c/0xa0 [ 200.754257][ T9095] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.760653][ T9095] [ 200.760653][ T9095] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 200.771142][ T9095] down_write+0x38/0x60 [ 200.775814][ T9095] ocfs2_reserve_local_alloc_bits+0x11c/0x25f0 [ 200.782473][ T9095] ocfs2_reserve_clusters_with_limit+0x1b6/0xc10 [ 200.789319][ T9095] ocfs2_mknod+0xef8/0x2510 [ 200.794322][ T9095] ocfs2_create+0x192/0x420 [ 200.799322][ T9095] path_openat+0x11db/0x2fa0 [ 200.804409][ T9095] do_filp_open+0x1e2/0x410 [ 200.809411][ T9095] do_sys_openat2+0x150/0x4b0 [ 200.814582][ T9095] __x64_sys_open+0x11b/0x140 [ 200.819753][ T9095] do_syscall_64+0x4c/0xa0 [ 200.824665][ T9095] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.831055][ T9095] [ 200.831055][ T9095] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 200.841535][ T9095] __lock_acquire+0x2c42/0x7d10 [ 200.846892][ T9095] lock_acquire+0x19e/0x400 [ 200.851896][ T9095] down_write+0x38/0x60 [ 200.856548][ T9095] ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 200.862945][ T9095] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 200.869785][ T9095] ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 200.875915][ T9095] ocfs2_xattr_set+0xc38/0x13e0 [ 200.881263][ T9095] __vfs_setxattr+0x3e0/0x420 [ 200.886442][ T9095] __vfs_setxattr_noperm+0x129/0x5e0 [ 200.892227][ T9095] vfs_setxattr+0x167/0x2e0 [ 200.897224][ T9095] setxattr+0x36c/0x390 [ 200.901875][ T9095] path_setxattr+0x147/0x290 [ 200.906963][ T9095] __x64_sys_setxattr+0xb7/0xd0 [ 200.912312][ T9095] do_syscall_64+0x4c/0xa0 [ 200.917225][ T9095] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.923617][ T9095] [ 200.923617][ T9095] other info that might help us debug this: [ 200.923617][ T9095] [ 200.933838][ T9095] Chain exists of: [ 200.933838][ T9095] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 200.933838][ T9095] [ 200.950757][ T9095] Possible unsafe locking scenario: [ 200.950757][ T9095] [ 200.958187][ T9095] CPU0 CPU1 [ 200.963533][ T9095] ---- ---- [ 200.968888][ T9095] lock(&oi->ip_xattr_sem); [ 200.973453][ T9095] lock(&journal->j_trans_barrier); [ 200.981230][ T9095] lock(&oi->ip_xattr_sem); [ 200.988316][ T9095] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 200.995578][ T9095] [ 200.995578][ T9095] *** DEADLOCK *** [ 200.995578][ T9095] [ 201.003704][ T9095] 3 locks held by syz.4.1627/9095: [ 201.008804][ T9095] #0: ffff8880604b4460 (sb_writers#30){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 201.018001][ T9095] #1: ffff88805e3442c8 (&sb->s_type->i_mutex_key#35){+.+.}-{3:3}, at: vfs_setxattr+0x140/0x2e0 [ 201.028409][ T9095] #2: ffff88805e343ff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x464/0x13e0 [ 201.038296][ T9095] [ 201.038296][ T9095] stack backtrace: [ 201.044161][ T9095] CPU: 0 PID: 9095 Comm: syz.4.1627 Not tainted syzkaller #0 [ 201.051508][ T9095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.061544][ T9095] Call Trace: [ 201.064805][ T9095] [ 201.067725][ T9095] dump_stack_lvl+0x188/0x250 [ 201.072406][ T9095] ? load_image+0x400/0x400 [ 201.076913][ T9095] ? show_regs_print_info+0x20/0x20 [ 201.082100][ T9095] ? print_circular_bug+0x12b/0x1a0 [ 201.087292][ T9095] check_noncircular+0x296/0x330 [ 201.092219][ T9095] ? add_chain_block+0x940/0x940 [ 201.097143][ T9095] ? lockdep_lock+0xf1/0x1f0 [ 201.101718][ T9095] ? mark_lock+0x94/0x320 [ 201.106026][ T9095] __lock_acquire+0x2c42/0x7d10 [ 201.110867][ T9095] ? verify_lock_unused+0x140/0x140 [ 201.116047][ T9095] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 201.121677][ T9095] ? do_raw_spin_lock+0x128/0x2f0 [ 201.126680][ T9095] ? mutex_unlock+0x10/0x10 [ 201.131165][ T9095] ? __rwlock_init+0x140/0x140 [ 201.135907][ T9095] ? do_raw_spin_unlock+0x11d/0x230 [ 201.141084][ T9095] lock_acquire+0x19e/0x400 [ 201.145566][ T9095] ? ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 201.151622][ T9095] ? __bfs+0x2a3/0x5c0 [ 201.155669][ T9095] ? __might_sleep+0xf0/0xf0 [ 201.160241][ T9095] ? read_lock_is_recursive+0x10/0x10 [ 201.165599][ T9095] ? verify_lock_unused+0x140/0x140 [ 201.170782][ T9095] down_write+0x38/0x60 [ 201.174919][ T9095] ? ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 201.180970][ T9095] ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 201.186851][ T9095] ? mark_lock+0x94/0x320 [ 201.191162][ T9095] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 201.197120][ T9095] ? lock_chain_count+0x20/0x20 [ 201.201947][ T9095] ? __rwlock_init+0x140/0x140 [ 201.206689][ T9095] ? ocfs2_block_group_search+0x470/0x470 [ 201.212385][ T9095] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 201.218261][ T9095] ? lockdep_hardirqs_on+0x94/0x140 [ 201.223457][ T9095] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 201.229359][ T9095] ? _raw_spin_unlock+0x40/0x40 [ 201.234198][ T9095] ? stack_trace_save+0xa6/0xf0 [ 201.239031][ T9095] ? stack_trace_snprint+0xf0/0xf0 [ 201.244122][ T9095] ? stack_depot_save+0x404/0x440 [ 201.249132][ T9095] ? __kasan_kmalloc+0xcc/0xf0 [ 201.253880][ T9095] ? __kasan_kmalloc+0xb5/0xf0 [ 201.258637][ T9095] ? ocfs2_reserve_new_metadata_blocks+0x109/0x9a0 [ 201.265124][ T9095] ? ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 201.270912][ T9095] ? ocfs2_xattr_set+0xc38/0x13e0 [ 201.275915][ T9095] ? __vfs_setxattr+0x3e0/0x420 [ 201.280745][ T9095] ? __vfs_setxattr_noperm+0x129/0x5e0 [ 201.286186][ T9095] ? vfs_setxattr+0x167/0x2e0 [ 201.291344][ T9095] ? setxattr+0x36c/0x390 [ 201.295655][ T9095] ? path_setxattr+0x147/0x290 [ 201.300402][ T9095] ? __x64_sys_setxattr+0xb7/0xd0 [ 201.305563][ T9095] ? do_syscall_64+0x4c/0xa0 [ 201.310138][ T9095] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.316205][ T9095] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 201.322539][ T9095] ? ocfs2_init_steal_slots+0x150/0x150 [ 201.328086][ T9095] ? ocfs2_xattr_block_set+0x2e10/0x2e10 [ 201.333700][ T9095] ? do_raw_spin_lock+0x128/0x2f0 [ 201.338708][ T9095] ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 201.344320][ T9095] ? _raw_spin_unlock+0x24/0x40 [ 201.349152][ T9095] ? ocfs2_prepare_refcount_xattr+0xff0/0xff0 [ 201.355196][ T9095] ? ocfs2_truncate_log_needs_flush+0x12c/0x300 [ 201.361417][ T9095] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 201.367293][ T9095] ? up_write+0x1bb/0x420 [ 201.371609][ T9095] ocfs2_xattr_set+0xc38/0x13e0 [ 201.376439][ T9095] ? __switch_to_asm+0x34/0x60 [ 201.381185][ T9095] ? __ocfs2_xattr_set_handle+0xf30/0xf30 [ 201.386887][ T9095] ? mark_lock+0x94/0x320 [ 201.391201][ T9095] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 201.397168][ T9095] ? aa_get_newest_label+0xf5/0x5a0 [ 201.402353][ T9095] ? posix_xattr_acl+0x8f/0xb0 [ 201.407115][ T9095] ? evm_protect_xattr+0x33c/0x9b0 [ 201.412212][ T9095] ? ocfs2_xattr_trusted_get+0x40/0x40 [ 201.417650][ T9095] __vfs_setxattr+0x3e0/0x420 [ 201.422318][ T9095] __vfs_setxattr_noperm+0x129/0x5e0 [ 201.427601][ T9095] vfs_setxattr+0x167/0x2e0 [ 201.432085][ T9095] ? xattr_permission+0x500/0x500 [ 201.437086][ T9095] ? _copy_from_user+0x111/0x170 [ 201.442003][ T9095] ? setxattr+0x2cc/0x390 [ 201.446317][ T9095] setxattr+0x36c/0x390 [ 201.450456][ T9095] ? path_setxattr+0x290/0x290 [ 201.455207][ T9095] ? __mnt_want_write+0x1e2/0x260 [ 201.460213][ T9095] path_setxattr+0x147/0x290 [ 201.464782][ T9095] ? simple_xattr_list_add+0xf0/0xf0 [ 201.470047][ T9095] ? lock_chain_count+0x20/0x20 [ 201.474878][ T9095] ? vtime_user_exit+0x2c8/0x3e0 [ 201.479794][ T9095] __x64_sys_setxattr+0xb7/0xd0 [ 201.484667][ T9095] do_syscall_64+0x4c/0xa0 [ 201.489061][ T9095] ? clear_bhb_loop+0x30/0x80 [ 201.493717][ T9095] ? clear_bhb_loop+0x30/0x80 [ 201.498377][ T9095] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.504249][ T9095] RIP: 0033:0x7ff0146cecb9 [ 201.508645][ T9095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.528234][ T9095] RSP: 002b:00007ff01292a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 201.536742][ T9095] RAX: ffffffffffffffda RBX: 00007ff014949fa0 RCX: 00007ff0146cecb9 [ 201.544696][ T9095] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000200000000000 [ 201.552649][ T9095] RBP: 00007ff01473cbf7 R08: 0000000000000000 R09: 0000000000000000 [ 201.560597][ T9095] R10: 0000000000000841 R11: 0000000000000246 R12: 0000000000000000 [ 201.568542][ T9095] R13: 00007ff01494a038 R14: 00007ff014949fa0 R15: 00007ffe22e8d1b8 [ 201.576499][ T9095] [ 201.618054][ T5747] wacom 0003:056A:00D2.000E: hidraw0: USB HID v8.00 Device [HID 056a:00d2] on usb-dummy_hcd.1-1/input0 [ 201.632383][ T5747] input: Wacom Bamboo Craft Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00D2.000E/input/input18 [ 201.649636][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 201.721736][ T5747] usb 2-1: USB disconnect, device number 14 [ 201.826317][ T9126] fido_id[9126]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory