last executing test programs: 2m37.074970812s ago: executing program 4 (id=369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x4}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x881}, 0x8000) 2m36.859829097s ago: executing program 4 (id=373): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x2}, 0x1c) 2m36.704177461s ago: executing program 4 (id=375): ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5452, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7a0af8ff75257075bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000006000000b7000000000000009500000000000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b257183fa3bcd48666d1ddd73f3047d248df061222193165274bc7f2382f6cda4bfdd45be583823c0f09601f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce7243d1aebd00000000000000005839c77edf2d34b12cd48a0c20fb7dd843267e0331759f4ec6b5b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dcc718a09f4886afc26abba34635d0e8b54bc76be40d435aa8b5202db761014b1b999a12df6bee431a666100"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) 2m36.514559495s ago: executing program 4 (id=377): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$eJzs3ctrW1caAPDvyvJjnGTsgYFJZmUYmDGEyOOMJ5mBLlK6KIUGAu26iZEVk1q2giWH2BjSUArdFNrQRaHdZJ226a7bPrbtv9BuSikJaeuEJnRRXK4esRxLjpzYchP/fnCtc+7D53z3ce6R7kEKYM8aSf9kIg5FxNtJxFB9fhIRvdVUNuJEbb27K8v5dEpidfWln5LqOndWlvPRtE0MDsa+euZgRHzxRsThzMZyy4tLM5PFYmG+nh+rzJ4fKy8uHTk3OzldmC7MHRufmDh6/L/H+7cv1l++Xtp/853n//XxiV9f/9v1t75M4kTsry9rjmO7jMRIbZ9Eb7oL13luuwvbZcluV4BHkl6aPbWrPA7FUDb6Ot82u5MVAwB2zKWIWAUA9pjE/R8A9pjG5wB3Vpbz6bR6aXc/j+i2W89GxEAt/sbzzdqSbP2Z3UD1OejgnWTd844kIoa3ofyRiPjg01c+TKfYoeeQAK28djkizgyPNNr/tfYn2TBmoabzARn/biQ2GRww8kBe+wfd81na//nfWv9v7frL3O//RIv+T3+La/dRjMT6EScbr//MjW0opq20//dM79rYtrtN8dcN99RzB6p9vt7k7LliIW3b/hwRo9Hbn+bHNylj9PZvt9fNaIq4uf/385VXr6Xlp69ra2RuZB9ocqcmK5OPG3fDrcsRf8+2ij+5f/yTNv3fUx2W8cL/33y/3bI0/jTexrQ+/p0fVbZ6NeKf0Tr+hmSz8YnHxqqnw1jjpGjhk+/eG2xXfvPxT6e0/Np7gQPbH2wL6fEf3Dz+4aR5vGZ562V8dXXo83bL2sff0Pr870terqYbl9LFyUplfjyiL3lx4/yja9s28o310/hH/9H6+t/s/E/fE57pMP7szR8/emj8jRkb4q8b6LCwLUrjn9rS8d964vrdmZ525Xd2/CfSRM9ofU4n7d9m9eprWueRdxwAAAAAAAAAAAAAAAAAAAAAAAAAbEEmIvZHksndT2cyuVxUf8P7rzGYKZbKlcNnSwtzU1H9rezh6M00vupyqOn7UMfr34ffyB99IP+fiPhLRLzb/6dqPpcvFad2O3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqNvX5vf/Uz/0117v7WoNAYAdMfDQNW4XulIRAKBrHn7/j4j+na8HANA9Hd3/AYCnivs/AOw97v8AsPcMRGR3uw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA81U6dPJlOq/dWlvNpfurC4sJM6cKRqUJ5Jje7kM/lS/Pnc9Ol0nSxkMuXZps2/abV/yuWSucnYm7h4lilUK6MlReXTs+WFuYqp8/NTk4XThd6uxYZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHSuvLg0M1ksFubriWuDEevndCnRU69QVwt9IhOrQ7U99Uepz84nvj/y7cHN1rmy4TSWeOzEbrZKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+O3wMAAP//mc0dAw==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) 2m35.976249158s ago: executing program 4 (id=381): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000024c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x28, r1, 0x739, 0x2070bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004010}, 0x4) 2m35.187493757s ago: executing program 4 (id=388): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x1c}, 0x60) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m34.833517705s ago: executing program 32 (id=388): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x1c}, 0x60) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.900415988s ago: executing program 0 (id=2051): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xad, &(0x7f00000003c0), &(0x7f0000000200)=0x1f) 3.748440452s ago: executing program 0 (id=2053): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc) 3.543779107s ago: executing program 0 (id=2055): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000d40)={0x2020}, 0x2020) 2.742699336s ago: executing program 2 (id=2061): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, &(0x7f0000000040)=0x60) 2.630351058s ago: executing program 2 (id=2062): syz_mount_image$minix(&(0x7f00000003c0), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000005b00)=ANY=[], 0x1, 0x18f, &(0x7f0000000480)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 2.421117243s ago: executing program 0 (id=2064): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file1\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff6}, {&(0x7f00000001c0)=[0x20], 0x1, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0x9}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x9, 0xffff}}) 1.977249214s ago: executing program 0 (id=2068): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) ioctl$COMEDI_BUFINFO(r0, 0xc02c640e, &(0x7f0000000080)={0x1, 0x7, 0x2, 0x6, 0xe5, 0x0, 0x7}) 1.781433198s ago: executing program 0 (id=2071): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") creat(&(0x7f00000001c0)='./file0\x00', 0x0) chown(&(0x7f0000000100)='./file0\x00', 0x0, 0xee01) 1.528868074s ago: executing program 1 (id=2074): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x2, 0x3, 0x9, 0x0, 0xc96e}, 0x20) 1.397192567s ago: executing program 2 (id=2076): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)={0x24, 0x12, 0x1, 0x70bd27, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x4, 0x31}]}, 0x24}], 0x1}, 0x4000800) 1.376723718s ago: executing program 1 (id=2077): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0000ec0000000c00018006000600800a0000100002800c000b"], 0x34}}, 0xc000) 1.222897341s ago: executing program 1 (id=2079): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1.003541297s ago: executing program 3 (id=2082): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x20, r1, 0x1, 0x70bd2c, 0x3, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}]}, 0x20}}, 0x0) 1.003421446s ago: executing program 5 (id=2083): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r0, 0x540b, 0x0) 1.003307877s ago: executing program 1 (id=2084): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2c7, &(0x7f0000000280)="$eJzs3buLXFUcB/Df3Z2XEZwprETwgilsDNm0NrPIBAanEGUKtdBgEpCdQUhgwQeOqWxtLP0LBMHOf8LGwj5gK9i5YODKfe08MjPJBCfr4/MpkrPnnO85v3v3zi5bzJkPXpye3Ezj9r3P70enk8RBP/pxlkQvDqL2ZSzpfx0AwL/ZWZbF71lpeSTZmstHO/stDQDYk82//zf4Ye8lAQB79vY7775xPBoN3krTTlyffnU6zv+yz/8vx49vx0cxiVtxNbrxICI7V7avZ1k2a6S5Xlyezk7HeXL6/k/V+se/RRT5o+hGr+hazg9Hg6O0tJCf5XVcqvbv5/lr0Y3n1+w/HA2urcnHuBWvvLxQ/5Xoxs8fxscxiZtFEUX+1T+Ho8EXR2n6evbNH5+9l5eX55PZ6bhdzJvLDp/ytwYAAAAAAAAAAAAAAAAAAAAAgP+wK2najrT4pxeXp3lXdf7O4YP8i2aktd7y+Txl/vyU4JXzgWZZfFufz3M1TdOsmjjPN+KFRjQu5qoBAAAAAAAAAAAAAAAAAADgn+XuJ5+e3JhMbt35Wxr1aQD12/qfdJ3+Qs9LsWZOL8572vMtD6ptt6wch/WcJGJrGfmKOxXffPTuGxrPbEp99/2ut67z6DnNJ6hwx0b9dJ3cSNbfw3bUPZ36IflxcU4rHnOv1qahbKfHr7V2qPu48fuXqldT69miZ7ZlciTbCnvt13KlqidZvYpWcVfXxptVo3wtVEPPLcQ7Oz3PD/+sSJzWAQAAAAAAAAAAAAAAAAAAezV/0++awXsbQr8Myw/5j96eqwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAp2P++f+bGmfZQ0OzKrwyOeLNWI234s7dC75EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/gf+CgAA//8tV14E") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) 974.502698ms ago: executing program 3 (id=2085): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000880)=""/193, &(0x7f0000000180)=0xc1) 823.520091ms ago: executing program 5 (id=2086): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000400)) 803.302002ms ago: executing program 2 (id=2087): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000002c0)={0x1d8, 0x2, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)=@fd={0x9, 0x2, 0x4, 0x400, 0x8, {}, {0x3, 0x8, 0x5, 0xc6, 0x0, 0x8, "abb70983"}, 0x5, 0x4, {}, 0xb11e}) 783.756202ms ago: executing program 1 (id=2088): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x38, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x234e}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 783.273432ms ago: executing program 3 (id=2089): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 747.498233ms ago: executing program 3 (id=2090): r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) mq_notify(r0, &(0x7f00000003c0)={0x0, 0xd, 0x1, @thr={0x0, 0x0}}) read(r0, 0x0, 0x0) 734.183543ms ago: executing program 5 (id=2091): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) 639.571846ms ago: executing program 2 (id=2092): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="00fb1d0aaef4b769fc3fb5aa3decb84c4cd8249e036321a59d9937a73dda6d93546aefa51e4a8115f9e83b20b0ccd486a700e2fbd9ab1af29aa30f2907"], 0x1, 0x5d3, &(0x7f00000006c0)="$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") setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50) 614.948546ms ago: executing program 3 (id=2093): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) 613.463986ms ago: executing program 1 (id=2094): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000000)="c8d8f0a6328c956e116270373116497ab176cab79e0c226b02a392ac7a7f7fb2022d51a1f241fa30a593795d77fe74587cf85ea76ae90be548244109fca438ec3290008f8420b5", 0x40}, 0x38) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) syz_usb_connect$uac2(0x5, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000004090054c00400001020301090296000301053009080b00010107208c0904000000010120000924010040041d000708240b0001ff23000c2403"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) 491.637729ms ago: executing program 5 (id=2095): r0 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) 273.790484ms ago: executing program 3 (id=2096): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000600)='./file1\x00', 0x800000, &(0x7f0000000100)=ANY=[], 0xfc, 0x234, &(0x7f0000000640)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r0, r0, 0x0, 0x5) 246.233745ms ago: executing program 2 (id=2097): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9c010000", @ANYRES16=r1, @ANYBLOB="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"], 0x19c}}, 0x0) 187.570606ms ago: executing program 5 (id=2098): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000004200010200000000000000b9d5bb"], 0x14}}, 0x40044c4) 0s ago: executing program 5 (id=2099): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x71, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x281, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0xc1, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000140)={0x0, 0xb, 0x28, {0x28, 0x2, "c26313852642792c3cbdeace918d0fb74237cc4b44b72fb0038881ce2a52973661d67a0c5544"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): T4738] usb 1-1: USB disconnect, device number 12 [ 170.110453][ T13] usb 3-1: config 0 descriptor?? [ 170.155422][ T4229] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.196586][ T4229] usb 2-1: config 0 interface 0 has no altsetting 0 [ 170.203418][ T4229] usb 2-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 170.212710][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.231718][ T4229] usb 2-1: config 0 descriptor?? [ 170.503293][ T7370] set_capacity_and_notify: 1 callbacks suppressed [ 170.503307][ T7370] loop5: detected capacity change from 0 to 32768 [ 170.531714][ T7372] loop0: detected capacity change from 0 to 128 [ 170.577213][ T13] pantherlord 0003:0F30:0111.000E: unknown main item tag 0x6 [ 170.599067][ T13] pantherlord 0003:0F30:0111.000E: unknown main item tag 0x0 [ 170.601189][ T7372] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.607699][ T13] pantherlord 0003:0F30:0111.000E: unknown main item tag 0x0 [ 170.625361][ T13] pantherlord 0003:0F30:0111.000E: unknown main item tag 0x3 [ 170.636995][ T13] input: HID 0f30:0111 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0F30:0111.000E/input/input9 [ 170.654186][ T13] pantherlord 0003:0F30:0111.000E: input,hidraw0: USB HID v0.00 Joystick [HID 0f30:0111] on usb-dummy_hcd.2-1/input0 [ 170.667072][ T13] pantherlord 0003:0F30:0111.000E: no fields in the report [ 170.682551][ T7372] ext4 filesystem being mounted at /211/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.721501][ T4229] wacom 0003:056A:5000.000F: unknown main item tag 0x6 [ 170.771695][ T4229] wacom 0003:056A:5000.000F: unknown main item tag 0x0 [ 170.800415][ T4229] wacom 0003:056A:5000.000F: unknown main item tag 0x0 [ 170.826354][ T4229] wacom 0003:056A:5000.000F: unknown main item tag 0x0 [ 170.847607][ T4229] wacom 0003:056A:5000.000F: hidraw1: USB HID v0.05 Device [HID 056a:5000] on usb-dummy_hcd.1-1/input0 [ 170.919247][ T13] usb 3-1: USB disconnect, device number 6 [ 170.991109][ T4740] usb 2-1: USB disconnect, device number 10 [ 171.114174][ T7379] fido_id[7379]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 171.122219][ T7378] fido_id[7378]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 171.436683][ T4197] Bluetooth: hci1: link tx timeout [ 171.450058][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.462351][ T4197] Bluetooth: hci1: link tx timeout [ 171.467719][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.475767][ T4197] Bluetooth: hci1: link tx timeout [ 171.480934][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.489252][ T4197] Bluetooth: hci1: link tx timeout [ 171.494416][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.564670][ T4197] Bluetooth: hci1: link tx timeout [ 171.569951][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.578376][ T4197] Bluetooth: hci1: link tx timeout [ 171.583527][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.615262][ T4197] Bluetooth: hci1: link tx timeout [ 171.620482][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.641416][ T7399] loop1: detected capacity change from 0 to 4096 [ 171.674993][ T4197] Bluetooth: hci1: link tx timeout [ 171.680286][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.688554][ T4197] Bluetooth: hci1: link tx timeout [ 171.694071][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.702712][ T4197] Bluetooth: hci1: link tx timeout [ 171.707977][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.715778][ T4229] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 171.724592][ T4197] Bluetooth: hci1: link tx timeout [ 171.730118][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.738307][ T4197] Bluetooth: hci1: link tx timeout [ 171.743463][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.752234][ T4197] Bluetooth: hci1: link tx timeout [ 171.757888][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.825938][ T7399] ntfs: volume version 3.1. [ 171.882049][ T7399] ntfs: (device loop1): ntfs_read_locked_inode(): Inode is not in use! [ 171.900105][ T7399] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x20 as bad. Run chkdsk. [ 171.967331][ T4229] usb 1-1: Using ep0 maxpacket: 8 [ 171.995692][ T4186] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 172.125191][ T4229] usb 1-1: unable to get BOS descriptor or descriptor too short [ 172.205571][ T4229] usb 1-1: config 4 interface 0 has no altsetting 0 [ 172.347474][ T7421] netlink: 'syz.1.1085': attribute type 29 has an invalid length. [ 172.347821][ T7421] netlink: 'syz.1.1085': attribute type 29 has an invalid length. [ 172.349070][ T7421] netlink: 'syz.1.1085': attribute type 29 has an invalid length. [ 172.445313][ T4229] usb 1-1: string descriptor 0 read error: -22 [ 172.445383][ T4229] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 172.445410][ T4229] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 172.491383][ T4229] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 172.510279][ T4229] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 172.510672][ T4229] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 172.513543][ T4229] usb 1-1: media controller created [ 172.528336][ T7424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1087'. [ 172.528590][ T7424] Zero length message leads to an empty skb [ 172.543754][ T4229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.803399][ T7433] loop2: detected capacity change from 0 to 128 [ 172.856913][ T7433] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.857020][ T7433] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.920080][ T7405] loop5: detected capacity change from 0 to 32768 [ 172.964141][ T7405] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 172.964267][ T7405] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 173.075626][ T7405] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 173.090883][ T7438] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1093'. [ 173.155140][ T7405] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 173.470566][ T13] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 173.495162][ T4740] Bluetooth: hci1: command 0x0406 tx timeout [ 173.676686][ T4229] zl10353_read_register: readreg error (reg=127, ret==0) [ 173.678358][ T7443] loop1: detected capacity change from 0 to 32768 [ 173.686304][ T7395] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 173.801787][ T7443] XFS (loop1): Mounting V5 Filesystem [ 173.837283][ T4229] usb 1-1: USB disconnect, device number 13 [ 173.895405][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.935028][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.970434][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.014924][ T13] usb 4-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 174.039869][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.061806][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1102'. [ 174.087024][ T13] usb 4-1: config 0 descriptor?? [ 174.108541][ T7443] XFS (loop1): Ending clean mount [ 174.216781][ T4186] XFS (loop1): Unmounting Filesystem [ 174.249849][ T7448] loop2: detected capacity change from 0 to 40427 [ 174.322278][ T7448] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 174.352547][ T7448] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 174.374389][ T7469] loop5: detected capacity change from 0 to 8192 [ 174.415627][ T7448] F2FS-fs (loop2): invalid crc value [ 174.440036][ T7472] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1106'. [ 174.474966][ T7469] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 174.492121][ T7448] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 174.510982][ T7469] REISERFS (device loop5): using ordered data mode [ 174.518381][ T7469] reiserfs: using flush barriers [ 174.528769][ T7469] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 174.550211][ T7469] REISERFS (device loop5): checking transaction log (loop5) [ 174.560833][ T7469] REISERFS (device loop5): Using r5 hash to sort names [ 174.573587][ T7469] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 174.595024][ T7469] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 174.611983][ T13] kye 0003:0458:5019.0010: ignoring exceeding usage max [ 174.623765][ T13] kye 0003:0458:5019.0010: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.3-1/input0 [ 174.635402][ T13] kye 0003:0458:5019.0010: tablet-enabling feature report not found [ 174.643432][ T13] kye 0003:0458:5019.0010: tablet enabling failed [ 174.691464][ T7469] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 174.801167][ T7469] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 174.848541][ T7477] loop0: detected capacity change from 0 to 8192 [ 174.856290][ T7469] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 174.900342][ T7448] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 174.919542][ T7448] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 174.939370][ T4229] usb 4-1: USB disconnect, device number 8 [ 174.980706][ T7477] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 175.018951][ T7477] REISERFS (device loop0): using ordered data mode [ 175.045438][ T7477] reiserfs: using flush barriers [ 175.063040][ T7477] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 175.165658][ T7477] REISERFS (device loop0): checking transaction log (loop0) [ 175.184633][ T7477] REISERFS (device loop0): Using r5 hash to sort names [ 175.234474][ T7477] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 176.004574][ T7507] loop5: detected capacity change from 0 to 2048 [ 176.079097][ T7507] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.107542][ T4229] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 176.139219][ T7509] loop0: detected capacity change from 0 to 4096 [ 176.203089][ T7509] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 176.300655][ T7509] ntfs3: loop0: Failed to load $Extend. [ 176.469284][ T7511] loop1: detected capacity change from 0 to 8192 [ 176.516863][ T7491] loop3: detected capacity change from 0 to 32768 [ 176.545156][ T4229] usb 3-1: unable to get BOS descriptor or descriptor too short [ 176.611699][ T7511] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 176.650868][ T4229] usb 3-1: not running at top speed; connect to a high speed hub [ 176.674929][ T7511] REISERFS (device loop1): using ordered data mode [ 176.681491][ T7511] reiserfs: using flush barriers [ 176.745612][ T4229] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 176.764341][ T7511] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 176.775835][ T4229] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 176.799545][ T4229] usb 3-1: config 1 interface 0 has no altsetting 0 [ 176.811092][ T7491] XFS (loop3): Mounting V5 Filesystem [ 176.875286][ T7511] REISERFS (device loop1): checking transaction log (loop1) [ 176.887051][ T7511] REISERFS (device loop1): Using r5 hash to sort names [ 176.971082][ T4229] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 176.990521][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.005329][ T7511] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 177.019862][ T4229] usb 3-1: Product: syz [ 177.032763][ T7511] REISERFS warning (device loop1): vs-2180 finish_unfinished: iget failed for [1 1 0x0 SD] [ 177.042797][ T4229] usb 3-1: Manufacturer: syz [ 177.043577][ T4229] usb 3-1: SerialNumber: syz [ 177.113484][ T7491] XFS (loop3): Ending clean mount [ 177.125733][ T7501] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 177.141232][ T7501] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 177.244328][ T4193] XFS (loop3): Unmounting Filesystem [ 177.384775][ T7521] loop0: detected capacity change from 0 to 32768 [ 177.449390][ T7541] loop1: detected capacity change from 0 to 512 [ 177.609078][ T7541] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2761: inode #11: comm syz.1.1129: corrupted xattr block 95 [ 177.653598][ T4229] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 6 proto 2 vid 0x0525 pid 0xA4A8 [ 177.690991][ T7547] program syz.5.1135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.749527][ T7541] EXT4-fs (loop1): Remounting filesystem read-only [ 177.779194][ T7541] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1129: bg 0: block 7: invalid block bitmap [ 177.831680][ T7541] EXT4-fs (loop1): Remounting filesystem read-only [ 177.850554][ T4229] usb 3-1: USB disconnect, device number 7 [ 177.879254][ T4229] usblp0: removed [ 177.925822][ T7541] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 177.996906][ T7541] EXT4-fs (loop1): Remounting filesystem read-only [ 178.006464][ T7555] loop3: detected capacity change from 0 to 256 [ 178.013820][ T7541] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2928: inode #11: comm syz.1.1129: corrupted xattr block 95 [ 178.123314][ T7541] EXT4-fs (loop1): Remounting filesystem read-only [ 178.140341][ T7541] EXT4-fs warning (device loop1): ext4_evict_inode:304: xattr delete (err -117) [ 178.184425][ T7541] EXT4-fs (loop1): 1 orphan inode deleted [ 178.211576][ T7541] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,errors=remount-ro,init_itable,block_validity,noquota,lazytime,. Quota mode: none. [ 178.293416][ T7541] EXT4-fs warning (device loop1): ext4_resize_begin:73: won't resize using backup superblock at 1 [ 178.395441][ T7567] ieee802154 phy0 wpan0: encryption failed: -22 [ 178.414943][ T7569] tipc: Enabling of bearer rejected, failed to enable media [ 178.423196][ T7563] loop5: detected capacity change from 0 to 4096 [ 178.600487][ T7579] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.633226][ T7582] loop3: detected capacity change from 0 to 512 [ 178.682556][ T7584] binder: BINDER_SET_CONTEXT_MGR already set [ 178.713407][ T7584] binder: 7583:7584 ioctl 40046207 0 returned -16 [ 178.725446][ T7582] EXT4-fs (loop3): Test dummy encryption mode enabled [ 178.748427][ T7582] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.1150: inode has both inline data and extents flags [ 178.868162][ T7582] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.1150: couldn't read orphan inode 15 (err -117) [ 178.915264][ T7582] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 179.013635][ T7605] loop0: detected capacity change from 0 to 512 [ 179.105018][ T4229] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 179.140194][ T7605] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.1161: missing EA_INODE flag [ 179.250544][ T7605] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1161: error while reading EA inode 12 err=-117 [ 179.264658][ T7605] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.1161: inode #1025: comm syz.0.1161: iget: illegal inode # [ 179.279204][ T7605] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1161: error while reading EA inode 1025 err=-117 [ 179.312778][ T7605] EXT4-fs (loop0): 1 orphan inode deleted [ 179.325013][ T7605] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 179.354948][ T4229] usb 3-1: Using ep0 maxpacket: 8 [ 179.515508][ T4229] usb 3-1: unable to get BOS descriptor or descriptor too short [ 179.605452][ T4229] usb 3-1: config 4 interface 0 has no altsetting 0 [ 179.727389][ T7625] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 179.738895][ T7625] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.791011][ T7608] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 179.797749][ T7608] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 179.805761][ T4740] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 179.815294][ T7608] F2FS-fs (loop3): invalid crc value [ 179.823572][ T7608] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 179.845447][ T4229] usb 3-1: string descriptor 0 read error: -22 [ 179.851719][ T4229] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 179.891683][ T4229] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 179.961951][ T4229] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 179.982590][ T7608] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 179.993023][ T7608] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 180.047654][ T4229] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 180.115284][ T4229] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 180.122816][ T4229] usb 3-1: media controller created [ 180.165891][ T7593] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 180.175398][ T4740] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 180.183528][ T4740] usb 1-1: config 0 has no interface number 0 [ 180.217849][ T4740] usb 1-1: config 0 interface 12 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.231034][ T4229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 180.239872][ T4740] usb 1-1: config 0 interface 12 has no altsetting 0 [ 180.272374][ T4740] usb 1-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 180.289517][ T4740] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.305062][ T4229] zl10353_read_register: readreg error (reg=127, ret==0) [ 180.315826][ T4740] usb 1-1: config 0 descriptor?? [ 180.405243][ T4229] usb 3-1: USB disconnect, device number 8 [ 180.834486][ T4740] logitech-djreceiver 0003:046D:C532.0011: unknown main item tag 0x0 [ 180.865160][ T4740] logitech-djreceiver 0003:046D:C532.0011: unknown main item tag 0x0 [ 180.895278][ T4740] logitech-djreceiver 0003:046D:C532.0011: unknown main item tag 0x0 [ 180.895975][ T7644] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.1176 (7644) [ 180.903464][ T4740] logitech-djreceiver 0003:046D:C532.0011: unknown main item tag 0x0 [ 180.972025][ T7653] ieee802154 phy0 wpan0: encryption failed: -22 [ 180.995352][ T4740] logitech-djreceiver 0003:046D:C532.0011: unknown main item tag 0x0 [ 181.041259][ T4740] logitech-djreceiver 0003:046D:C532.0011: unknown main item tag 0x0 [ 181.075464][ T4740] logitech-djreceiver 0003:046D:C532.0011: unknown main item tag 0x0 [ 181.116223][ T4740] logitech-djreceiver 0003:046D:C532.0011: hidraw0: USB HID v0.00 Device [HID 046d:c532] on usb-dummy_hcd.0-1/input12 [ 181.181961][ T4740] usb 1-1: USB disconnect, device number 14 [ 181.230343][ T7644] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 181.244989][ T7644] BTRFS info (device loop5): force zlib compression, level 3 [ 181.269631][ T7646] set_capacity_and_notify: 3 callbacks suppressed [ 181.269646][ T7646] loop1: detected capacity change from 0 to 32768 [ 181.284091][ T7644] BTRFS info (device loop5): allowing degraded mounts [ 181.316264][ T7644] BTRFS info (device loop5): setting nodatasum [ 181.334064][ T7644] BTRFS info (device loop5): using free space tree [ 181.399650][ T7644] BTRFS info (device loop5): has skinny extents [ 181.512286][ T7661] fido_id[7661]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 181.738110][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1190'. [ 182.034610][ T4180] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop5 scanned by udevd (4180) [ 182.214597][ T7699] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 182.624265][ T7691] loop3: detected capacity change from 0 to 32768 [ 182.757935][ T7691] XFS (loop3): Mounting V5 Filesystem [ 182.898971][ T7691] XFS (loop3): Ending clean mount [ 182.913239][ T7695] loop2: detected capacity change from 0 to 32768 [ 182.935462][ T7695] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 182.994958][ T7695] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 183.004290][ T7725] loop5: detected capacity change from 0 to 1024 [ 183.039485][ T7695] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 183.065848][ T4193] XFS (loop3): Unmounting Filesystem [ 183.287548][ T7695] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 183.402085][ T7702] loop1: detected capacity change from 0 to 32768 [ 183.505190][ T7702] JBD2: Ignoring recovery information on journal [ 183.601991][ T7730] loop3: detected capacity change from 0 to 16 [ 183.644146][ T7730] erofs: (device loop3): mounted with root inode @ nid 36. [ 183.699610][ T7730] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 183.770156][ T7702] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 183.778134][ T7730] erofs: (device loop3): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 183.801088][ T7730] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 183.865167][ T7730] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 183.874372][ T7730] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 183.902202][ T7735] loop5: detected capacity change from 0 to 1024 [ 183.935282][ T7730] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 183.975184][ T7730] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 184.021069][ T7730] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 184.048119][ T7730] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 184.091918][ T7730] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 184.121052][ T26] audit: type=1800 audit(1788882382.160:12): pid=7730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1202" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 184.148269][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 184.168086][ T7737] loop0: detected capacity change from 0 to 8192 [ 184.186662][ T7735] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,lazytime,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,init_itable,grpid,noauto_da_alloc,nouid32,,errors=continue. Quota mode: none. [ 184.243359][ T7737] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 184.352610][ T7737] REISERFS (device loop0): using ordered data mode [ 184.368547][ T7737] reiserfs: using flush barriers [ 184.415099][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1207'. [ 184.445029][ T7737] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 184.486822][ T7737] REISERFS (device loop0): checking transaction log (loop0) [ 184.566435][ T7737] REISERFS (device loop0): Using r5 hash to sort names [ 184.595206][ T7737] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 184.645646][ T7737] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 184.749824][ T7737] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 184.821411][ T7737] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 184.860089][ T7737] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 184.967571][ T7765] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 185.070890][ T7772] loop3: detected capacity change from 0 to 512 [ 185.090695][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 185.126634][ T7770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1217'. [ 185.131084][ T7772] EXT4-fs (loop3): Ignoring removed oldalloc option [ 185.137472][ T7774] loop1: detected capacity change from 0 to 1024 [ 185.164988][ T7772] EXT4-fs (loop3): inline encryption not supported [ 185.232866][ T7772] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,nodiscard,oldalloc,inlinecrypt,,errors=continue. Quota mode: none. [ 185.252149][ T7774] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,lazytime,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,init_itable,grpid,noauto_da_alloc,nouid32,,errors=continue. Quota mode: none. [ 185.370522][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1223'. [ 185.460982][ T7779] device batadv0 entered promiscuous mode [ 185.469034][ T7779] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 185.491725][ T7779] device batadv0 left promiscuous mode [ 185.635104][ T4418] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 185.910912][ T4418] usb 4-1: Using ep0 maxpacket: 16 [ 186.040859][ T4418] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.064915][ T4418] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.275224][ T4418] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.294059][ T4418] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.303061][ T7793] set_capacity_and_notify: 1 callbacks suppressed [ 186.303076][ T7793] loop2: detected capacity change from 0 to 32768 [ 186.316472][ T4418] usb 4-1: Product: syz [ 186.320662][ T4418] usb 4-1: Manufacturer: syz [ 186.325677][ T4418] usb 4-1: SerialNumber: syz [ 186.338944][ T7783] loop1: detected capacity change from 0 to 40427 [ 186.390914][ T7783] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 186.402481][ T7783] F2FS-fs (loop1): invalid crc value [ 186.424141][ T7783] F2FS-fs (loop1): Found nat_bits in checkpoint [ 186.492154][ T7793] XFS (loop2): Mounting V5 Filesystem [ 186.519132][ T7783] F2FS-fs (loop1): recover fsync data on readonly fs [ 186.526621][ T7783] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 186.533356][ T7783] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 186.560254][ T7783] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 186.666197][ T7793] XFS (loop2): Ending clean mount [ 186.676739][ T4418] usb 4-1: 0:2 : does not exist [ 186.712672][ T7793] XFS (loop2): Quotacheck needed: Please wait. [ 186.724998][ T4418] usb 4-1: USB disconnect, device number 9 [ 186.819725][ T7793] XFS (loop2): Quotacheck: Done. [ 186.872582][ T7783] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=38d380e8, run fsck to fix. [ 186.978182][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.016185][ T4192] XFS (loop2): Unmounting Filesystem [ 187.043462][ T7805] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1231'. [ 187.365263][ T4418] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 187.775545][ T4418] usb 1-1: unable to get BOS descriptor or descriptor too short [ 187.841941][ T7829] loop2: detected capacity change from 0 to 8192 [ 187.855033][ T4418] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 187.869744][ T4418] usb 1-1: can't read configurations, error -71 [ 187.966306][ T7829] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 188.016041][ T7829] REISERFS (device loop2): using ordered data mode [ 188.022601][ T7829] reiserfs: using flush barriers [ 188.166995][ T7829] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 188.186786][ T7835] loop5: detected capacity change from 0 to 32768 [ 188.205262][ T7829] REISERFS (device loop2): checking transaction log (loop2) [ 188.241075][ T7835] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1244 (7835) [ 188.272601][ T7829] REISERFS (device loop2): Using r5 hash to sort names [ 188.296554][ T7829] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 188.321084][ T7835] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 188.357510][ T7835] BTRFS info (device loop5): setting nodatasum [ 188.363926][ T7829] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 188.382569][ T7835] BTRFS info (device loop5): force zlib compression, level 3 [ 188.389611][ T7845] device ip6_vti0 entered promiscuous mode [ 188.415184][ T7835] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 188.436732][ T7829] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 188.461191][ T7835] BTRFS info (device loop5): use lzo compression, level 0 [ 188.468548][ T7835] BTRFS info (device loop5): turning on flush-on-commit [ 188.485812][ T7829] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 188.504941][ T7835] BTRFS info (device loop5): enabling auto defrag [ 188.523487][ T7835] BTRFS info (device loop5): max_inline at 4096 [ 188.544378][ T7829] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 188.564931][ T7835] BTRFS info (device loop5): using free space tree [ 188.610931][ T7835] BTRFS info (device loop5): has skinny extents [ 188.855707][ T7835] BTRFS info (device loop5): enabling ssd optimizations [ 188.889345][ T7846] loop3: detected capacity change from 0 to 40427 [ 188.905974][ T7827] loop1: detected capacity change from 0 to 32768 [ 188.963467][ T7846] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 189.020728][ T7846] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 189.090651][ T7846] F2FS-fs (loop3): Found nat_bits in checkpoint [ 189.185457][ T7827] JBD2: Ignoring recovery information on journal [ 189.253215][ T7827] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 189.315422][ T7827] JBD2: bad block at offset 32 [ 189.329634][ T7846] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 189.339985][ T7846] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 189.376226][ T7827] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 189.424612][ T7827] ocfs2: Unmounting device (7,1) on (node local) [ 189.991216][ T7880] loop3: detected capacity change from 0 to 2048 [ 190.033900][ T7883] loop1: detected capacity change from 0 to 512 [ 190.053733][ T7851] loop0: detected capacity change from 0 to 32768 [ 190.092630][ T7880] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.140016][ T7883] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 190.258367][ T7883] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 190.279324][ T7851] XFS (loop0): Mounting V5 Filesystem [ 190.321183][ T7883] System zones: 1-12 [ 190.337592][ T7883] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.1254: corrupted in-inode xattr [ 190.371672][ T7900] loop2: detected capacity change from 0 to 512 [ 190.433817][ T7883] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.1254: couldn't read orphan inode 15 (err -117) [ 190.448077][ T7883] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,nolazytime,debug,noload,nombcache,commit=0x0000000000000005,lazytime,acl,,errors=continue. Quota mode: none. [ 190.525988][ T7900] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.1261: iget: bad i_size value: 38620345925642 [ 190.616852][ T7851] XFS (loop0): Ending clean mount [ 190.655847][ T7900] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.1261: couldn't read orphan inode 15 (err -117) [ 190.670383][ T7900] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 190.690478][ T7851] XFS (loop0): Quotacheck needed: Please wait. [ 190.880154][ T7851] XFS (loop0): Quotacheck: Done. [ 191.001207][ T4196] XFS (loop0): Unmounting Filesystem [ 191.033756][ T7921] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 191.097229][ T4743] Bluetooth: hci2: command 0x0406 tx timeout [ 191.102853][ T4419] Bluetooth: hci0: command 0x0406 tx timeout [ 191.118354][ T4419] Bluetooth: hci4: command 0x0406 tx timeout [ 191.119612][ T4743] Bluetooth: hci3: command 0x0406 tx timeout [ 191.186983][ T7921] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 191.207180][ T7921] EXT4-fs (loop5): orphan cleanup on readonly fs [ 191.227139][ T7921] Quota error (device loop5): v2_read_file_info: Block with free entry too big (4294967071 >= 6). [ 191.283050][ T7921] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 191.384914][ T7921] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 191.412508][ T7921] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1269: bg 0: block 15: invalid block bitmap [ 191.455755][ T7921] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 191.484538][ T7921] EXT4-fs (loop5): 1 truncate cleaned up [ 191.493885][ T7921] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 191.582218][ T7929] netlink: 'syz.2.1273': attribute type 19 has an invalid length. [ 191.940654][ T7944] set_capacity_and_notify: 1 callbacks suppressed [ 191.940690][ T7944] loop5: detected capacity change from 0 to 512 [ 192.008843][ T7944] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 192.116077][ T7944] EXT4-fs (loop5): 1 truncate cleaned up [ 192.121807][ T7944] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,abort,mb_optimize_scan=0x0000000000000000,minixdf,jqfmt=vfsv0,usrjquota=.",errors=continue. Quota mode: writeback. [ 192.514583][ T7971] netlink: 'syz.2.1293': attribute type 1 has an invalid length. [ 192.584254][ T7975] loop5: detected capacity change from 0 to 512 [ 192.713069][ T7975] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 192.769255][ T7975] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 192.807341][ T7975] System zones: 1-12 [ 192.817764][ T7975] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.1289: corrupted in-inode xattr [ 192.872900][ T7975] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.1289: couldn't read orphan inode 15 (err -117) [ 192.915396][ T7975] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nolazytime,debug,noload,nombcache,commit=0x0000000000000005,lazytime,acl,,errors=continue. Quota mode: none. [ 193.019791][ T7994] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 193.188894][ T8000] Bluetooth: hci0: unsupported parameter 5135 [ 193.213150][ T8000] Bluetooth: hci0: unsupported parameter 8192 [ 193.236331][ T8000] Bluetooth: hci0: unsupported parameter 5135 [ 193.261987][ T8000] Bluetooth: hci0: unsupported parameter 8192 [ 193.567396][ T7981] loop3: detected capacity change from 0 to 32768 [ 193.822432][ T7981] XFS (loop3): Mounting V5 Filesystem [ 194.007393][ T7981] XFS (loop3): Ending clean mount [ 194.057486][ T7981] XFS (loop3): Quotacheck needed: Please wait. [ 194.147843][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.154299][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.160676][ T4743] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 194.185523][ T7981] XFS (loop3): Quotacheck: Done. [ 194.300480][ T4193] XFS (loop3): Unmounting Filesystem [ 194.620428][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1326'. [ 194.695210][ T4743] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 194.715233][ T4743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.723278][ T4743] usb 1-1: Product: syz [ 194.784946][ T4743] usb 1-1: Manufacturer: syz [ 194.789737][ T4743] usb 1-1: SerialNumber: syz [ 194.878488][ T4743] ums-karma 1-1:1.0: USB Mass Storage device detected [ 194.911196][ T4743] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 194.911196][ T4743] Please send a copy of this message to and [ 195.312617][ T8030] loop1: detected capacity change from 0 to 32768 [ 195.356200][ T8030] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1317 (8030) [ 195.379347][ T4743] ums-karma: probe of 1-1:1.0 failed with error -5 [ 195.411448][ T4743] usb 1-1: USB disconnect, device number 17 [ 195.479475][ T8053] loop3: detected capacity change from 0 to 256 [ 195.491055][ T8030] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 195.521558][ T8030] BTRFS info (device loop1): force zlib compression, level 3 [ 195.536931][ T8030] BTRFS info (device loop1): allowing degraded mounts [ 195.554020][ T8030] BTRFS info (device loop1): setting nodatasum [ 195.561100][ T8053] exfat: Deprecated parameter 'utf8' [ 195.572948][ T8053] exfat: Deprecated parameter 'namecase' [ 195.574656][ T8030] BTRFS info (device loop1): using free space tree [ 195.594932][ T8030] BTRFS info (device loop1): has skinny extents [ 195.597352][ T8053] exfat: Deprecated parameter 'namecase' [ 195.626118][ T8053] exfat: Deprecated parameter 'utf8' [ 195.698936][ T8053] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 195.745352][ T4737] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 195.923472][ T8074] loop0: detected capacity change from 0 to 512 [ 196.081130][ T8074] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 196.116939][ T4737] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.137830][ T4737] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.158816][ T8074] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 196.166782][ T4737] usb 6-1: config 0 interface 0 has no altsetting 0 [ 196.173599][ T4737] usb 6-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.00 [ 196.201009][ T4737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.202478][ T8078] loop3: detected capacity change from 0 to 512 [ 196.221879][ T4737] usb 6-1: config 0 descriptor?? [ 196.237652][ T8074] System zones: 1-12 [ 196.244269][ T8074] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.1327: corrupted in-inode xattr [ 196.271388][ T8074] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.1327: couldn't read orphan inode 15 (err -117) [ 196.289088][ T8074] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nolazytime,debug,noload,nombcache,commit=0x0000000000000005,lazytime,acl,,errors=continue. Quota mode: none. [ 196.397388][ T8078] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 196.422465][ T8078] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 1024: comm syz.3.1330: invalid block [ 196.440164][ T8078] EXT4-fs (loop3): 1 truncate cleaned up [ 196.474261][ T8078] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,abort,mb_optimize_scan=0x0000000000000000,minixdf,jqfmt=vfsv0,usrjquota=.",errors=continue. Quota mode: writeback. [ 196.585297][ T7998] syz.2.1303 (7998): drop_caches: 1 [ 196.750636][ T4737] input: HID 18d1:5030 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:18D1:5030.0012/input/input13 [ 196.935380][ T4737] hid-generic 0003:18D1:5030.0012: input,hidraw0: USB HID v0.06 Keyboard [HID 18d1:5030] on usb-dummy_hcd.5-1/input0 [ 196.979260][ T4737] usb 6-1: USB disconnect, device number 5 [ 197.249178][ T4230] kernel write not supported for file /sg0 (pid: 4230 comm: kworker/1:7) [ 197.451099][ T8110] loop1: detected capacity change from 0 to 2048 [ 197.473783][ T8096] fido_id[8096]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 197.581391][ T8118] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.616134][ T8110] NILFS (loop1): Segment number 63 to be freed is out of range [ 197.650321][ T8121] loop5: detected capacity change from 0 to 256 [ 197.706351][ T8121] exfat: Deprecated parameter 'namecase' [ 197.725877][ T8121] exfat: Deprecated parameter 'utf8' [ 197.766679][ T8121] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 198.039158][ T8134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1351'. [ 198.066287][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1351'. [ 198.085089][ T8134] netlink: 'syz.3.1351': attribute type 1 has an invalid length. [ 198.103623][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1351'. [ 198.457343][ T8154] loop3: detected capacity change from 0 to 2048 [ 198.472087][ T8151] loop2: detected capacity change from 0 to 4096 [ 198.545540][ T8158] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.574939][ T2302] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 198.695269][ T8161] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.854985][ T2302] usb 2-1: Using ep0 maxpacket: 8 [ 198.905167][ T8170] netlink: 'syz.2.1365': attribute type 29 has an invalid length. [ 198.913571][ T8170] netlink: 'syz.2.1365': attribute type 29 has an invalid length. [ 198.939813][ T8170] netlink: 'syz.2.1365': attribute type 29 has an invalid length. [ 199.005105][ T2302] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 199.030798][ T2302] usb 2-1: config 2 has no interface number 0 [ 199.040479][ T2302] usb 2-1: config 2 interface 31 has no altsetting 0 [ 199.135344][ T4230] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 199.247339][ T2302] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 199.285000][ T2302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.328042][ T2302] usb 2-1: Product: syz [ 199.332283][ T2302] usb 2-1: Manufacturer: syz [ 199.355298][ T2302] usb 2-1: SerialNumber: syz [ 199.391276][ T8188] loop5: detected capacity change from 0 to 2048 [ 199.458331][ T8193] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 199.510672][ T4230] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.539340][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.565026][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.575647][ T4230] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.589325][ T4230] usb 4-1: New USB device found, idVendor=04e7, idProduct=0050, bcdDevice= 0.00 [ 199.598706][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.650733][ T4230] usb 4-1: config 0 descriptor?? [ 199.746435][ T8205] loop2: detected capacity change from 0 to 1024 [ 199.965418][ T4428] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 199.984474][ T8211] loop2: detected capacity change from 0 to 2048 [ 200.052483][ T8211] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.083233][ T26] audit: type=1800 audit(1788882398.120:13): pid=8211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1386" name="file1" dev="loop2" ino=1367 res=0 errno=0 [ 200.106576][ T2302] ch9200: probe of 2-1:2.31 failed with error -22 [ 200.131070][ T2302] usb 2-1: USB disconnect, device number 11 [ 200.141634][ T4230] input: HID 04e7:0050 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:04E7:0050.0013/input/input14 [ 200.245090][ T4428] usb 1-1: Using ep0 maxpacket: 8 [ 200.287424][ T4230] hid-accutouch 0003:04E7:0050.0013: input,hidraw0: USB HID v0.00 Joystick [HID 04e7:0050] on usb-dummy_hcd.3-1/input0 [ 200.341528][ T4175] usb 4-1: USB disconnect, device number 10 [ 200.384149][ T4428] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 200.392938][ T4418] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 200.427288][ T4428] usb 1-1: config 0 has no interface number 0 [ 200.454623][ T8220] fido_id[8220]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 200.605049][ T4428] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 200.614180][ T4428] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.653604][ T4428] usb 1-1: Product: syz [ 200.659235][ T4428] usb 1-1: Manufacturer: syz [ 200.663881][ T4428] usb 1-1: SerialNumber: syz [ 200.676402][ T4428] usb 1-1: config 0 descriptor?? [ 200.701493][ T8224] syz.1.1391 (8224): drop_caches: 1 [ 200.825184][ T4418] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 200.860831][ T4418] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 200.884066][ T4418] usb 6-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 200.895715][ T4418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.913865][ T4418] usb 6-1: config 0 descriptor?? [ 200.921478][ T8222] loop2: detected capacity change from 0 to 32768 [ 200.935207][ T4428] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 200.941874][ T4428] usb 1-1: Failed to initialize entity for entity 6 [ 200.959548][ T4428] usb 1-1: Failed to register entities (-22). [ 200.977109][ T8217] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 201.100821][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1397'. [ 201.114176][ T8222] XFS (loop2): Mounting V5 Filesystem [ 201.174185][ T4428] usb 1-1: USB disconnect, device number 18 [ 201.302036][ T8222] XFS (loop2): Ending clean mount [ 201.323692][ T8222] XFS (loop2): Quotacheck needed: Please wait. [ 201.436566][ T8222] XFS (loop2): Quotacheck: Done. [ 201.466761][ T4418] elecom 0003:056E:00FD.0014: unknown main item tag 0x1 [ 201.484970][ T4418] elecom 0003:056E:00FD.0014: unknown global tag 0xd [ 201.494088][ T4418] elecom 0003:056E:00FD.0014: item 0 0 1 13 parsing failed [ 201.504371][ T4418] elecom: probe of 0003:056E:00FD.0014 failed with error -22 [ 201.531272][ T8250] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1401'. [ 201.632542][ T4192] XFS (loop2): Unmounting Filesystem [ 201.675847][ T4230] usb 6-1: USB disconnect, device number 6 [ 201.726709][ T8230] loop3: detected capacity change from 0 to 32768 [ 201.743204][ T8230] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1395 (8230) [ 201.793673][ T8230] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 201.813547][ T8230] BTRFS info (device loop3): setting nodatacow, compression disabled [ 201.832694][ T8230] BTRFS info (device loop3): force clearing of disk cache [ 201.842777][ T8230] BTRFS info (device loop3): turning off barriers [ 201.852239][ T8230] BTRFS info (device loop3): use no compression [ 201.858957][ T8230] BTRFS info (device loop3): disabling free space tree [ 201.867308][ T8230] BTRFS info (device loop3): enabling ssd optimizations [ 201.874380][ T8230] BTRFS info (device loop3): using spread ssd allocation scheme [ 201.882456][ T8230] BTRFS info (device loop3): turning on flush-on-commit [ 201.902626][ T8230] BTRFS info (device loop3): has skinny extents [ 201.934932][ T4418] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 202.027040][ T8230] BTRFS info (device loop3): clearing free space tree [ 202.033900][ T8230] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 202.044944][ T8230] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 202.097739][ T8230] BTRFS info (device loop3): checking UUID tree [ 202.304142][ T8276] loop5: detected capacity change from 0 to 512 [ 202.325238][ T4418] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.441017][ T4418] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06 [ 202.467787][ T4418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 202.494303][ T4418] usb 2-1: SerialNumber: syz [ 202.501538][ T4418] usb 2-1: config 0 descriptor?? [ 202.563682][ T4418] usb 2-1: selecting invalid altsetting 1 [ 202.588426][ T4418] usb 2-1: Can not set alternate setting to 1, error: -22 [ 202.596052][ T8254] loop0: detected capacity change from 0 to 65536 [ 202.603390][ T4418] synaptics_usb: probe of 2-1:0.0 failed with error -22 [ 202.671774][ T4416] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 202.697439][ T8254] XFS (loop0): Mounting V5 Filesystem [ 202.759855][ T4418] usb 2-1: USB disconnect, device number 12 [ 202.822970][ T8254] XFS (loop0): Ending clean mount [ 202.891856][ T8254] XFS (loop0): Quotacheck needed: Please wait. [ 202.962843][ T8290] loop3: detected capacity change from 0 to 512 [ 202.984657][ T8290] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 203.026072][ T8254] XFS (loop0): Quotacheck: Done. [ 203.057614][ T8290] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 203.086935][ T4416] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 203.097943][ T8290] EXT4-fs (loop3): 1 truncate cleaned up [ 203.103612][ T8290] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,lazytime,quota,,errors=continue. Quota mode: writeback. [ 203.124327][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.144867][ T4416] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.201949][ T4196] XFS (loop0): Unmounting Filesystem [ 203.236632][ T4416] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 203.251304][ T4416] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 203.260302][ T4416] usb 6-1: SerialNumber: syz [ 203.577723][ T4416] usb 6-1: 0:2 : does not exist [ 203.692739][ T4416] usb 6-1: USB disconnect, device number 7 [ 203.701778][ T8307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1415'. [ 203.719646][ T8306] loop2: detected capacity change from 0 to 512 [ 203.826287][ T8306] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 203.926348][ T8306] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 203.956633][ T8099] udevd[8099]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.956826][ T8306] System zones: 1-12 [ 204.086790][ T8306] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.1414: corrupted in-inode xattr [ 204.103961][ T8321] loop5: detected capacity change from 0 to 64 [ 204.111221][ T8306] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.1414: couldn't read orphan inode 15 (err -117) [ 204.124452][ T8306] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nolazytime,debug,noload,nombcache,commit=0x0000000000000005,lazytime,acl,,errors=continue. Quota mode: none. [ 204.368537][ T8326] loop3: detected capacity change from 0 to 1024 [ 204.598921][ T8328] loop0: detected capacity change from 0 to 4096 [ 204.700416][ T8328] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 204.765342][ T8328] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 204.866092][ T8328] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 204.904960][ T8328] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 204.954938][ T8328] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 205.025880][ T8328] ntfs: volume version 3.1. [ 205.034238][ T8328] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 205.105734][ T8328] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 205.161049][ T8328] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 205.182688][ T8328] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 205.201016][ T8322] loop1: detected capacity change from 0 to 32768 [ 205.240892][ T8328] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 205.281060][ T8322] JBD2: Ignoring recovery information on journal [ 205.305016][ T8328] ntfs: (device loop0): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute name is placed after the attribute value. [ 205.404970][ T8328] ntfs: (device loop0): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 205.455152][ T8328] ntfs: (device loop0): load_and_init_quota(): Failed to load $Quota/$Q index. [ 205.477850][ T8328] ntfs: (device loop0): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 205.495424][ T8341] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1428'. [ 205.507606][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1429'. [ 205.536963][ T8341] netlink: 'syz.3.1428': attribute type 1 has an invalid length. [ 205.562412][ T8342] device bridge0 entered promiscuous mode [ 205.582375][ T8322] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 205.584455][ T8328] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp850. You might want to try to use the mount option nls=utf8. [ 205.613361][ T8342] bridge0: port 3(macvlan2) entered blocking state [ 205.675292][ T8342] bridge0: port 3(macvlan2) entered disabled state [ 205.729679][ T8342] device bridge0 left promiscuous mode [ 205.746875][ T8328] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 205.919388][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 206.088382][ T8352] loop0: detected capacity change from 0 to 1764 [ 206.195159][ T4428] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 206.444920][ T4428] usb 4-1: Using ep0 maxpacket: 16 [ 206.548614][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1442'. [ 206.590841][ T8370] nbd: socks must be embedded in a SOCK_ITEM attr [ 206.624759][ T8374] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1444'. [ 206.634358][ T4428] usb 4-1: unable to get BOS descriptor or descriptor too short [ 206.645176][ T8374] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1444'. [ 206.692666][ T8372] loop2: detected capacity change from 0 to 4096 [ 206.755203][ T4428] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.773551][ T4428] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 206.805576][ T8372] ntfs: volume version 3.1. [ 206.835088][ T4428] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.937855][ T8382] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.1448'. [ 207.013977][ T8382] openvswitch: netlink: Tunnel attr 159 out of range max 16 [ 207.045126][ T4428] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 207.071816][ T4428] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.092448][ T4428] usb 4-1: Product: syz [ 207.108420][ T4428] usb 4-1: Manufacturer: syz [ 207.113639][ T4428] usb 4-1: SerialNumber: syz [ 207.210425][ T8390] loop5: detected capacity change from 0 to 1764 [ 207.282318][ T8392] EXT4-fs (loop1): Ignoring removed orlov option [ 207.372363][ T8397] EXT4-fs (loop2): 1 truncate cleaned up [ 207.378687][ T8397] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 207.401207][ T8392] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,jqfmt=vfsold,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 207.430807][ T4428] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 207.441609][ T4428] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 207.623152][ T8405] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.645219][ T4428] usb 4-1: 2:1 : can't get High Capability descriptor [ 207.837768][ T8412] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1460'. [ 207.925246][ T4428] usb 4-1: USB disconnect, device number 11 [ 207.958249][ T8415] set_capacity_and_notify: 2 callbacks suppressed [ 207.958265][ T8415] loop5: detected capacity change from 0 to 1024 [ 208.454253][ T8421] loop2: detected capacity change from 0 to 32768 [ 208.491724][ T8427] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1468'. [ 208.547544][ T8421] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9" [ 208.561908][ T8421] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 0)... [ 208.593439][ T8421] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: journal 0 mapped with 16 extents in 0ms [ 208.610995][ T4226] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0, already locked for use [ 208.621656][ T4226] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Looking at journal... [ 208.660869][ T8409] loop1: detected capacity change from 0 to 32768 [ 208.781219][ T4226] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Journal head lookup took 159ms [ 208.796206][ T4226] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Done [ 208.807088][ T8421] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: first mount done, others may mount [ 208.888654][ T8409] XFS (loop1): Mounting V5 Filesystem [ 209.109196][ T8451] device netdevsim0 entered promiscuous mode [ 209.132126][ T8409] XFS (loop1): Ending clean mount [ 209.175634][ T8457] loop3: detected capacity change from 0 to 64 [ 209.196017][ T8409] XFS (loop1): Quotacheck needed: Please wait. [ 209.293428][ T8457] MINIX-fs: mounting file system with errors, running fsck is recommended [ 209.351430][ T8457] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 209.379929][ T8460] loop2: detected capacity change from 0 to 1024 [ 209.392729][ T8423] loop0: detected capacity change from 0 to 32768 [ 209.443200][ T8409] XFS (loop1): Quotacheck: Done. [ 209.488584][ T8457] Trying to free block not in datazone [ 209.515409][ T8460] hfsplus: invalid length 2325 has been corrected to 255 [ 209.524696][ T8460] hfsplus: invalid length 2325 has been corrected to 255 [ 209.542189][ T8460] hfsplus: invalid length 2325 has been corrected to 255 [ 209.583557][ T8423] XFS (loop0): Mounting V5 Filesystem [ 209.613947][ T4186] XFS (loop1): Unmounting Filesystem [ 209.791941][ T8423] XFS (loop0): Ending clean mount [ 209.843344][ T8481] loop3: detected capacity change from 0 to 1024 [ 209.891387][ T8423] XFS (loop0): Quotacheck needed: Please wait. [ 209.998626][ T8423] XFS (loop0): Quotacheck: Done. [ 210.179673][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1486'. [ 210.234962][ T4196] XFS (loop0): Unmounting Filesystem [ 210.414137][ T8496] netem: change failed [ 211.207110][ T8525] loop1: detected capacity change from 0 to 1024 [ 211.236804][ T8492] loop2: detected capacity change from 0 to 32768 [ 211.323200][ T8525] EXT4-fs (loop1): Ignoring removed orlov option [ 211.372994][ T8525] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 211.402395][ T8530] loop3: detected capacity change from 0 to 4096 [ 211.409986][ T8492] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 211.478496][ T8530] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 211.527335][ T8525] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,resgid=0x0000000000000000,auto_da_alloc=0x0000000000000009,bsdgroups,debug_want_extra_isize=0x0000000000000080,sb=0x0000000000000008,errors=continue,noinit_itable,orlov,,errors=continue. Quota mode: none. [ 211.784122][ T4192] ocfs2: Unmounting device (7,2) on (node local) [ 211.977118][ T8545] overlayfs: unrecognized mount option "\']*=°¢°­ô[\1\@" or missing value [ 212.417941][ T8560] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1513'. [ 212.461454][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1522'. [ 212.488304][ T8531] XFS (loop5): Mounting V5 Filesystem [ 212.678528][ T8531] XFS (loop5): Ending clean mount [ 212.800406][ T8585] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.816969][ T5321] XFS (loop5): Unmounting Filesystem [ 212.886672][ T8576] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 127 already freed [ 212.917848][ T8576] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 212.983018][ T8588] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 213.035035][ T8583] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 213.130263][ T8583] ntfs3: loop3: Failed to load $Extend. [ 213.900060][ T8617] set_capacity_and_notify: 6 callbacks suppressed [ 213.900076][ T8617] loop3: detected capacity change from 0 to 128 [ 213.920861][ T8619] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 213.961213][ T8619] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 214.011811][ T8619] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 214.018768][ T8622] loop2: detected capacity change from 0 to 256 [ 214.030608][ T8590] loop1: detected capacity change from 0 to 32768 [ 214.031695][ T8619] comedi comedi3: 8255: I/O port conflict (0x100,4) [ 214.044270][ T8619] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 214.051067][ T8619] comedi comedi3: 8255: I/O port conflict (0x20000000,4) [ 214.068725][ T8619] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 214.076301][ T8619] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 214.087405][ T8617] hpfs: bad mount options. [ 214.191737][ T8590] jfs_lookup: iget failed on inum 4 [ 214.422694][ T8630] netlink: 'syz.2.1554': attribute type 29 has an invalid length. [ 214.447629][ T8635] loop0: detected capacity change from 0 to 64 [ 214.468412][ T8630] netlink: 'syz.2.1554': attribute type 29 has an invalid length. [ 214.477319][ T8637] netlink: 'syz.2.1554': attribute type 29 has an invalid length. [ 214.495835][ T8633] loop1: detected capacity change from 0 to 1024 [ 214.579165][ T8633] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 214.593222][ T4226] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 214.855545][ T8650] loop1: detected capacity change from 0 to 512 [ 214.879930][ T8650] EXT4-fs (loop1): inline encryption not supported [ 214.915246][ T8650] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 214.965558][ T8650] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.1560: bad orphan inode 15 [ 214.985118][ T4226] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 214.996875][ T4226] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 215.008860][ T4226] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 215.019299][ T4226] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 128 [ 215.029469][ T4226] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 215.038834][ T4226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.065481][ T8628] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 215.123510][ T8650] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x00000000000000ff,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,norecovery,noblock_validity,resgid=0x0000000000000000,inlinecrypt,errors=continue,,errors=continue. Quota mode: none. [ 215.317676][ T8650] EXT4-fs error (device loop1): __ext4_new_inode:1084: comm syz.1.1560: reserved inode found cleared - inode=18 [ 215.526158][ T4226] ims_pcu 4-1:1.0: Failed to set line state, error: -71 [ 215.580372][ T8664] loop2: detected capacity change from 0 to 4096 [ 215.587080][ T4226] ims_pcu: probe of 4-1:1.0 failed with error -71 [ 215.601283][ T8645] loop5: detected capacity change from 0 to 32768 [ 215.641416][ T4226] usb 4-1: USB disconnect, device number 12 [ 215.691911][ T8664] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 215.735048][ T8664] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 215.788190][ T8664] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 215.918108][ T8652] loop0: detected capacity change from 0 to 32768 [ 216.065620][ T8676] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 216.088556][ T8678] program syz.5.1574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.435067][ T4226] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 216.578482][ T8700] loop5: detected capacity change from 0 to 1024 [ 216.615781][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1596'. [ 216.664377][ T8699] overlayfs: filesystem on './file0' not supported [ 216.742255][ T1232] hfsplus: b-tree write err: -5, ino 25 [ 216.763791][ T1232] hfsplus: b-tree write err: -5, ino 4 [ 216.769973][ T1232] hfsplus: b-tree write err: -5, ino 2 [ 216.795275][ T4226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 216.813491][ T4226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.823728][ T4226] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.843175][ T4226] usb 4-1: New USB device found, idVendor=17ef, idProduct=6049, bcdDevice= 0.00 [ 216.853877][ T4226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.876019][ T8706] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 216.915756][ T8706] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 216.951821][ T4226] usb 4-1: config 0 descriptor?? [ 217.341887][ T8718] EXT4-fs (loop0): 1 truncate cleaned up [ 217.365022][ T8718] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,sysvgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,noauto_da_alloc,discard,grpjquota=,inode_readahead_blks=0x0000000000000800,nodiscard,,errors=continue. Quota mode: none. [ 217.451370][ T4226] input: HID 17ef:6049 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:17EF:6049.0015/input/input16 [ 217.558604][ T4226] lenovo 0003:17EF:6049.0015: input,hidraw0: USB HID v0.00 Joystick [HID 17ef:6049] on usb-dummy_hcd.3-1/input0 [ 217.687926][ T21] usb 4-1: USB disconnect, device number 13 [ 217.794120][ T8733] fido_id[8733]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 217.980528][ T8708] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 217.988381][ T8708] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 218.046122][ T8708] F2FS-fs (loop2): invalid crc value [ 218.111367][ T8708] F2FS-fs (loop2): Found nat_bits in checkpoint [ 218.189781][ T8708] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 218.210373][ T8708] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 218.501448][ T8749] 9pnet_rdma: rdma_create_trans (8749): problem binding to privport: 13 [ 218.718766][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1611'. [ 218.757021][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1611'. [ 218.945293][ T8765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1614'. [ 219.110053][ T8775] set_capacity_and_notify: 6 callbacks suppressed [ 219.110070][ T8775] loop5: detected capacity change from 0 to 256 [ 219.198941][ T8775] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 219.214545][ T8779] netlink: 'syz.0.1621': attribute type 9 has an invalid length. [ 219.235989][ T8779] netlink: 'syz.0.1621': attribute type 23 has an invalid length. [ 219.244111][ T8779] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.1621'. [ 219.259089][ T8783] process 'syz.1.1623' launched '/proc/sys/vm/drop_caches' with NULL argv: empty string added [ 219.732345][ T8810] loop1: detected capacity change from 0 to 64 [ 219.794101][ T8812] loop0: detected capacity change from 0 to 512 [ 219.829543][ T8816] loop2: detected capacity change from 0 to 512 [ 219.931457][ T8816] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 219.941882][ T8812] EXT4-fs (loop0): Test dummy encryption mode enabled [ 219.954186][ T8810] MINIX-fs: mounting file system with errors, running fsck is recommended [ 220.015293][ T8810] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 220.024008][ T8816] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 220.041489][ T8812] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.1636: inode #1: comm syz.0.1636: iget: illegal inode # [ 220.070149][ T8816] EXT4-fs (loop2): orphan cleanup on readonly fs [ 220.072813][ T8812] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1636: error while reading EA inode 1 err=-117 [ 220.090966][ T8812] EXT4-fs (loop0): 1 orphan inode deleted [ 220.096870][ T8812] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,inode_readahead_blks=0x0000000000800000,resgid=0x0000000000000000,noinit_itable,errors=continue,minixdf,usrjquota=,test_dummy_encryption=v1,discard,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 220.140545][ T8810] Trying to free block not in datazone [ 220.146864][ T8816] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #13: comm syz.2.1637: iget: bad i_size value: 12154761577498 [ 220.216265][ T8816] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.1637: couldn't read orphan inode 13 (err -117) [ 220.291442][ T8816] EXT4-fs (loop2): mounted filesystem without journal. Opts: commit=0x0000000000000000,noblock_validity,user_xattr,,errors=continue. Quota mode: none. [ 220.342504][ T8831] loop3: detected capacity change from 0 to 256 [ 220.371692][ T8816] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1637: dx entry: limit 65535 != root limit 120 [ 220.416122][ T8831] exfat: Deprecated parameter 'utf8' [ 220.441588][ T8816] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1637: Corrupt directory, running e2fsck is recommended [ 220.446281][ T8831] exfat: Deprecated parameter 'namecase' [ 220.458029][ T8816] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.1637: path /310/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 220.519550][ T8831] exfat: Deprecated parameter 'utf8' [ 220.575564][ T8831] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 220.638667][ T4226] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 220.895343][ T4226] usb 1-1: Using ep0 maxpacket: 16 [ 221.015176][ T4226] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.033709][ T8852] loop3: detected capacity change from 0 to 512 [ 221.041288][ T4226] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.062259][ T4226] usb 1-1: config 0 interface 0 has no altsetting 0 [ 221.089438][ T8829] loop5: detected capacity change from 0 to 32768 [ 221.093263][ T4226] usb 1-1: New USB device found, idVendor=046d, idProduct=c283, bcdDevice= 0.00 [ 221.118350][ T4226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.138594][ T4226] usb 1-1: config 0 descriptor?? [ 221.248943][ T8829] JBD2: Ignoring recovery information on journal [ 221.286251][ T8852] EXT4-fs (loop3): inline encryption not supported [ 221.405643][ T8852] EXT4-fs (loop3): 1 orphan inode deleted [ 221.411439][ T8852] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,inlinecrypt,usrquota,jqfmt=vfsv1,jqfmt=vfsv0,delalloc,journal_dev=0x0000000000000008,debug_want_extra_isize=0x000000000000005c,i_version,,errors=continue. Quota mode: writeback. [ 221.540816][ T8829] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 221.609313][ T4226] input: HID 046d:c283 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:C283.0016/input/input17 [ 221.711029][ T4226] logitech 0003:046D:C283.0016: input,hidraw0: USB HID v0.01 Joystick [HID 046d:c283] on usb-dummy_hcd.0-1/input0 [ 221.744033][ T4226] logitech 0003:046D:C283.0016: missing HID_OUTPUT_REPORT 0 [ 221.818184][ T8863] loop3: detected capacity change from 0 to 64 [ 221.825364][ T4226] usb 1-1: USB disconnect, device number 19 [ 221.832483][ T5321] ocfs2: Unmounting device (7,5) on (node local) [ 221.953696][ T8863] Trying to free block not in datazone [ 222.036494][ T8864] fido_id[8864]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 222.183805][ T8868] ieee802154 phy0 wpan0: encryption failed: -22 [ 222.314036][ T8854] loop2: detected capacity change from 0 to 65536 [ 222.359887][ T8854] XFS: ikeep mount option is deprecated. [ 222.378174][ T8859] loop1: detected capacity change from 0 to 32768 [ 222.398033][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1655'. [ 222.433590][ T8870] device bridge0 entered promiscuous mode [ 222.476964][ T8859] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1651 (8859) [ 222.535752][ T8870] bridge0: port 3(macvlan2) entered blocking state [ 222.542552][ T8870] bridge0: port 3(macvlan2) entered disabled state [ 222.550060][ T8854] XFS (loop2): Mounting V5 Filesystem [ 222.557701][ T8870] device bridge0 left promiscuous mode [ 222.618069][ T8859] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 222.657810][ T8859] BTRFS info (device loop1): using free space tree [ 222.673421][ T8859] BTRFS info (device loop1): has skinny extents [ 222.689561][ T8866] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 222.696720][ T8854] XFS (loop2): Ending clean mount [ 222.725250][ T8866] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 222.826689][ T8866] F2FS-fs (loop5): invalid crc value [ 222.932881][ T8866] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 222.985732][ T8859] BTRFS info (device loop1): enabling ssd optimizations [ 223.065725][ T4192] XFS (loop2): Unmounting Filesystem [ 223.152280][ T8866] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 223.162068][ T8866] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 223.270626][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 223.270642][ T26] audit: type=1800 audit(1788882421.310:14): pid=8866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1653" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 223.543655][ T5321] attempt to access beyond end of device [ 223.543655][ T5321] loop5: rw=2049, want=45104, limit=40427 [ 223.834123][ T8914] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 224.038344][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1664'. [ 224.290597][ T8929] set_capacity_and_notify: 2 callbacks suppressed [ 224.290614][ T8929] loop3: detected capacity change from 0 to 256 [ 224.380646][ T8929] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67992c0, utbl_chksum : 0xe619d30d) [ 224.451766][ T8929] exFAT-fs (loop3): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 224.488319][ T8929] exFAT-fs (loop3): Filesystem has been set read-only [ 224.554515][ T8937] loop2: detected capacity change from 0 to 64 [ 224.824399][ T8949] netlink: 'syz.3.1678': attribute type 29 has an invalid length. [ 225.166136][ T8971] loop3: detected capacity change from 0 to 64 [ 225.206097][ T8975] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1689'. [ 225.359815][ T8981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1692'. [ 225.636199][ T8993] loop5: detected capacity change from 0 to 64 [ 225.807938][ T9003] loop2: detected capacity change from 0 to 256 [ 225.948101][ T9003] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 226.012472][ T9007] loop5: detected capacity change from 0 to 2048 [ 226.100650][ T9007] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 226.149282][ T9007] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 226.201990][ T9007] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.234930][ T4227] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 226.405877][ T9019] mmap: syz.5.1711 (9019) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 226.552414][ T9025] loop2: detected capacity change from 0 to 1024 [ 226.705530][ T9025] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 226.798836][ T4227] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 226.809035][ T8965] loop0: detected capacity change from 0 to 40427 [ 226.852580][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.880999][ T4227] usb 2-1: Product: syz [ 226.905791][ T4227] usb 2-1: Manufacturer: syz [ 226.911703][ T8965] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 226.926770][ T4227] usb 2-1: SerialNumber: syz [ 226.937507][ T8965] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 227.049646][ T8965] F2FS-fs (loop0): invalid crc value [ 227.057311][ T9033] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1717'. [ 227.124429][ T9031] loop3: detected capacity change from 0 to 2048 [ 227.160983][ T8965] F2FS-fs (loop0): Found nat_bits in checkpoint [ 227.313960][ T9031] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 227.356860][ T9031] NILFS (loop3): mounting unchecked fs [ 227.373530][ T8122] udevd[8122]: incorrect nilfs2 checksum on /dev/loop3 [ 227.411879][ T9039] loop2: detected capacity change from 0 to 1024 [ 227.420938][ T9031] NILFS (loop3): recovery complete [ 227.476260][ T9040] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.542388][ T9039] hfsplus: xattr searching failed [ 227.584133][ T9041] hfsplus: xattr searching failed [ 227.721632][ T9043] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 227.794298][ T8965] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 227.803101][ T9043] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 227.865225][ T4260] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 227.895988][ T9043] System zones: 0-1, 15-15, 18-18, 34-34 [ 227.902766][ T9043] EXT4-fs (loop5): orphan cleanup on readonly fs [ 227.935260][ T8965] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 227.953526][ T9043] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 228.025381][ T9043] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 228.141646][ T9043] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 228.209441][ T9043] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1721: bg 0: block 40: padding at end of block bitmap is not set [ 228.339433][ T9043] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 228.376919][ T9043] EXT4-fs (loop5): 1 truncate cleaned up [ 228.393331][ T9043] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 228.521036][ T4591] usb 2-1: USB disconnect, device number 13 [ 228.564856][ T9056] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 228.741880][ T26] audit: type=1326 audit(1788882426.780:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.5.1729" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76c9bcc159 code=0x7ffc0000 [ 228.800641][ T26] audit: type=1326 audit(1788882426.810:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.5.1729" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76c9bcc159 code=0x7ffc0000 [ 228.862637][ T26] audit: type=1326 audit(1788882426.810:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.5.1729" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76c9bcc159 code=0x7ffc0000 [ 228.888069][ T9046] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 228.894451][ T9046] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 228.923385][ T26] audit: type=1326 audit(1788882426.810:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.5.1729" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76c9bcc159 code=0x7ffc0000 [ 228.948174][ T9046] F2FS-fs (loop3): invalid crc value [ 228.953838][ T26] audit: type=1326 audit(1788882426.810:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.5.1729" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f76c9bcc159 code=0x7ffc0000 [ 229.001597][ T9063] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 229.012938][ T26] audit: type=1326 audit(1788882426.810:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.5.1729" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76c9bcc159 code=0x7ffc0000 [ 229.040868][ T26] audit: type=1326 audit(1788882426.810:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.5.1729" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76c9bcc159 code=0x7ffc0000 [ 229.069037][ T9046] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 229.086137][ T9063] EXT4-fs error (device loop5): ext4_get_journal_inode:5187: inode #32: comm syz.5.1731: iget: special inode unallocated [ 229.086940][ T9065] SQUASHFS error: xz decompression failed, data probably corrupt [ 229.109725][ T26] audit: type=1326 audit(1788882426.810:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.5.1729" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f76c9bcc159 code=0x7ffc0000 [ 229.135505][ T9063] EXT4-fs (loop5): no journal found [ 229.140853][ T9063] EXT4-fs (loop5): can't get journal size [ 229.175105][ T4260] usb 2-1: Service connection timeout for: 256 [ 229.181496][ T4260] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 229.193053][ T9063] EXT4-fs (loop5): filesystem is read-only [ 229.225068][ T9063] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,noload,noblock_validity,bsdgroups,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 229.249108][ T4260] ath9k_htc: Failed to initialize the device [ 229.285219][ T9065] SQUASHFS error: Failed to read block 0x108: -5 [ 229.291629][ T9065] SQUASHFS error: Unable to read metadata cache entry [106] [ 229.325144][ T9065] SQUASHFS error: Unable to read inode 0x101f [ 229.333617][ T4591] usb 2-1: ath9k_htc: USB layer deinitialized [ 229.364963][ T26] audit: type=1326 audit(1788882426.810:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.5.1729" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f76c9bcc159 code=0x7ffc0000 [ 229.451237][ T9046] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 229.467772][ T9046] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 229.583475][ T26] audit: type=1800 audit(1788882427.620:24): pid=9046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1720" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 229.693397][ T4193] attempt to access beyond end of device [ 229.693397][ T4193] loop3: rw=2049, want=45104, limit=40427 [ 229.832221][ T9083] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1726'. [ 230.670148][ T9112] set_capacity_and_notify: 4 callbacks suppressed [ 230.670165][ T9112] loop2: detected capacity change from 0 to 164 [ 230.754871][ T4260] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 230.899686][ T9094] loop1: detected capacity change from 0 to 32768 [ 231.034898][ T4260] usb 4-1: Using ep0 maxpacket: 16 [ 231.093685][ T9094] XFS (loop1): Mounting V5 Filesystem [ 231.135446][ T9130] netlink: 'syz.5.1757': attribute type 2 has an invalid length. [ 231.143230][ T9130] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.1757'. [ 231.185196][ T4260] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.204188][ T4260] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 231.205825][ T4226] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 231.265078][ T4260] usb 4-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 231.274251][ T4260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.341201][ T9094] XFS (loop1): Ending clean mount [ 231.376611][ T4260] usb 4-1: config 0 descriptor?? [ 231.538594][ T4186] XFS (loop1): Unmounting Filesystem [ 231.595242][ T4226] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 231.614254][ T4226] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 231.636191][ T9110] loop0: detected capacity change from 0 to 40427 [ 231.656990][ T9110] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 231.663381][ T9110] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 231.777185][ T9110] F2FS-fs (loop0): invalid crc value [ 231.805263][ T4226] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 231.845991][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.854066][ T4226] usb 3-1: Product: syz [ 231.861135][ T4226] usb 3-1: Manufacturer: syz [ 231.865844][ T4226] usb 3-1: SerialNumber: syz [ 231.869591][ T4260] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 231.910612][ T9110] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 231.919124][ T4226] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 231.925902][ T4260] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 231.964349][ T4260] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 232.003741][ T4260] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 232.017554][ T4260] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 232.017972][ T4226] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 232.017972][ T4226] Please send a copy of this message to and [ 232.024505][ T4260] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 232.056969][ T4260] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 232.063892][ T4260] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 232.071428][ T4260] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 232.078428][ T4260] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 232.085375][ T4260] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 232.092273][ T4260] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 232.101263][ T4260] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 232.109803][ T4260] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 232.118375][ T4260] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 232.125341][ T4260] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 232.132235][ T4260] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 232.139553][ T4260] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 232.146702][ T4260] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 232.153600][ T4260] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 232.160607][ T4260] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 232.167659][ T4260] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 232.174640][ T4260] acrux 0003:1A34:F705.0017: unknown main item tag 0x0 [ 232.189125][ T4260] acrux 0003:1A34:F705.0017: hidraw0: USB HID v20.00 Device [HID 1a34:f705] on usb-dummy_hcd.3-1/input0 [ 232.212492][ T4260] acrux 0003:1A34:F705.0017: no inputs found [ 232.221606][ T4260] acrux 0003:1A34:F705.0017: Failed to enable force feedback support, error: -19 [ 232.343860][ T4260] usb 4-1: USB disconnect, device number 14 [ 232.452006][ T9110] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 232.471857][ T9110] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 232.483590][ T9161] loop1: detected capacity change from 0 to 512 [ 232.540734][ T4226] ums-sddr09: probe of 3-1:1.0 failed with error -5 [ 232.566744][ T9158] fido_id[9158]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 232.693852][ T9161] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 232.705565][ T9161] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.744441][ T4591] usb 3-1: USB disconnect, device number 9 [ 232.808299][ T4196] attempt to access beyond end of device [ 232.808299][ T4196] loop0: rw=2049, want=45104, limit=40427 [ 233.062975][ T9171] loop3: detected capacity change from 0 to 1024 [ 233.503178][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1777'. [ 233.521026][ T9178] loop3: detected capacity change from 0 to 4096 [ 233.535021][ T4260] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 233.577732][ T9178] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 233.802525][ T9178] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 233.815149][ T4260] usb 2-1: Using ep0 maxpacket: 8 [ 233.872338][ T4253] ntfs3: loop3: ino=1b, Internal error [ 233.879960][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1782'. [ 233.885848][ T4253] ntfs3: loop3: ntfs3_write_inode r=1b failed, -22. [ 233.904039][ T4193] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 233.921312][ T4193] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 233.955396][ T4260] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.966739][ T4416] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 233.986997][ T4260] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.020433][ T4260] usb 2-1: config 0 interface 0 has no altsetting 0 [ 234.038404][ T4260] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 234.057856][ T4260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.109476][ T4260] usb 2-1: config 0 descriptor?? [ 234.124746][ T9202] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 234.264117][ T9209] loop3: detected capacity change from 0 to 64 [ 234.274955][ T4416] usb 3-1: Using ep0 maxpacket: 32 [ 234.405711][ T4416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.437296][ T4416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.467968][ T4416] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 234.498024][ T4416] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.520897][ T4416] usb 3-1: config 0 descriptor?? [ 234.586944][ T4416] hub 3-1:0.0: USB hub found [ 234.644976][ T4260] input: HID 5543:0042 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:0042.0018/input/input19 [ 234.754095][ T4260] uclogic 0003:5543:0042.0018: input,hidraw0: USB HID v0.0a Joystick [HID 5543:0042] on usb-dummy_hcd.1-1/input0 [ 234.805183][ T4416] hub 3-1:0.0: config failed, hub has too many ports! (err -19) [ 234.867661][ T4227] usb 2-1: USB disconnect, device number 14 [ 235.046080][ T9228] fido_id[9228]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 235.150860][ T4416] usbhid 3-1:0.0: can't add hid device: -71 [ 235.157279][ T4416] usbhid: probe of 3-1:0.0 failed with error -71 [ 235.206219][ T4416] usb 3-1: USB disconnect, device number 10 [ 235.267023][ T9215] loop5: detected capacity change from 0 to 32768 [ 235.452574][ T9215] XFS (loop5): Mounting V5 Filesystem [ 235.593839][ T9254] loop2: detected capacity change from 0 to 64 [ 235.716457][ T9215] XFS (loop5): Ending clean mount [ 235.867595][ T9260] loop1: detected capacity change from 0 to 64 [ 235.938265][ T5321] XFS (loop5): Unmounting Filesystem [ 236.409983][ T4416] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 236.675066][ T4260] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 236.675847][ T4416] usb 2-1: Using ep0 maxpacket: 8 [ 236.804992][ T4416] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 236.806416][ T9266] loop0: detected capacity change from 0 to 32768 [ 236.864074][ T9266] ialloc: diAlloc returned -5! [ 236.910633][ T275] ERROR: (device loop0): diUpdatePMap: the iag is outside the map [ 236.910633][ T275] [ 236.935025][ T4260] usb 4-1: Using ep0 maxpacket: 32 [ 236.975370][ T275] ERROR: (device loop0): remounting filesystem as read-only [ 236.995460][ T4416] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 237.007867][ T9271] loop5: detected capacity change from 0 to 32768 [ 237.016342][ T4416] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 237.027655][ T4416] usb 2-1: Product: syz [ 237.031865][ T4416] usb 2-1: Manufacturer: syz [ 237.037202][ T4416] usb 2-1: SerialNumber: syz [ 237.055116][ T4260] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 237.066626][ T4260] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 97, changing to 10 [ 237.091806][ T4260] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 25972, setting to 1024 [ 237.153853][ T9271] XFS (loop5): Mounting V5 Filesystem [ 237.256857][ T9271] XFS (loop5): Ending clean mount [ 237.303476][ T5321] XFS (loop5): Unmounting Filesystem [ 237.315278][ T4416] usb 2-1: Handspring Visor / Palm OS: port 200, is for unknown use [ 237.323367][ T4416] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 237.332508][ T4260] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 237.364317][ T4260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.374944][ T4260] usb 4-1: Product: syz [ 237.379147][ T4260] usb 4-1: Manufacturer: syz [ 237.383883][ T4260] usb 4-1: SerialNumber: syz [ 237.388707][ T4416] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 237.405169][ T4260] usb 4-1: config 0 descriptor?? [ 237.431582][ T9269] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 237.450029][ T4260] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input20 [ 237.542900][ T4416] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 237.551953][ T4430] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 237.572017][ T4416] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 237.616795][ T4416] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 237.692802][ T4416] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 237.724005][ T4416] usb 2-1: USB disconnect, device number 15 [ 237.778722][ T4227] usb 4-1: USB disconnect, device number 15 [ 237.787560][ T4416] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 237.834479][ T4416] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 237.845056][ T4430] usb 3-1: Using ep0 maxpacket: 32 [ 237.868802][ T4416] visor 2-1:1.0: device disconnected [ 237.997460][ T4430] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 238.015281][ T4430] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.039245][ T4430] usb 3-1: config 0 descriptor?? [ 238.097305][ T4430] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 238.162553][ T9302] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1824'. [ 238.255226][ T4591] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 238.556970][ T9321] loop3: detected capacity change from 0 to 128 [ 238.582743][ T9321] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 238.595847][ T9317] loop0: detected capacity change from 0 to 4096 [ 238.609072][ T9321] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.618560][ T4591] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.654923][ T4591] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.675752][ T4591] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 238.704750][ T9317] __ntfs_error: 1 callbacks suppressed [ 238.704768][ T9317] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 238.744339][ T4591] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 238.760389][ T4430] gspca_vc032x: reg_w err -71 [ 238.765887][ T4591] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.772204][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 238.781123][ T9317] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 238.803222][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 238.807782][ T4591] usb 6-1: config 0 descriptor?? [ 238.814834][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 238.820154][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 238.828519][ T9317] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 238.844814][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 238.850138][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 238.872344][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 238.878094][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 238.884275][ T9317] ntfs: volume version 3.1. [ 238.889194][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 238.894502][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 238.900489][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 238.925009][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 238.930536][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 238.944876][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 238.955096][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 238.960503][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 238.990092][ T4197] Bluetooth: hci1: link tx timeout [ 238.995330][ T4197] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 239.003094][ T4197] Bluetooth: hci1: link tx timeout [ 239.008287][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 239.015432][ T4585] Bluetooth: hci0: command 0x0c20 tx timeout [ 239.017911][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 239.027530][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 239.033409][ T4430] gspca_vc032x: Unknown sensor... [ 239.039088][ T4430] vc032x: probe of 3-1:0.0 failed with error -22 [ 239.054561][ T4430] usb 3-1: USB disconnect, device number 11 [ 239.086844][ T4196] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 239.337929][ T4591] plantronics 0003:047F:FFFF.0019: unbalanced delimiter at end of report description [ 239.355376][ T4591] plantronics 0003:047F:FFFF.0019: parse failed [ 239.363038][ T4591] plantronics: probe of 0003:047F:FFFF.0019 failed with error -22 [ 239.540127][ T4585] usb 6-1: USB disconnect, device number 8 [ 239.892811][ T9368] loop1: detected capacity change from 0 to 256 [ 240.024483][ T9368] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 240.094204][ T9368] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 240.162491][ T9368] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 240.705100][ T4430] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 240.790686][ T9403] loop2: detected capacity change from 0 to 8192 [ 240.833320][ T9403] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 240.878988][ T9408] loop1: detected capacity change from 0 to 4096 [ 240.975165][ T4430] usb 1-1: Using ep0 maxpacket: 32 [ 241.032472][ T9408] ntfs: volume version 3.1. [ 241.097052][ T4227] Bluetooth: hci1: command 0x0406 tx timeout [ 241.115291][ T4430] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 241.350386][ T4430] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 241.361962][ T4430] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.376963][ T4430] usb 1-1: Product: syz [ 241.381255][ T4430] usb 1-1: Manufacturer: syz [ 241.401055][ T4430] usb 1-1: SerialNumber: syz [ 241.444027][ T4430] usb 1-1: config 0 descriptor?? [ 241.485281][ T9397] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 241.514079][ T9436] loop2: detected capacity change from 0 to 512 [ 241.614622][ T9441] loop1: detected capacity change from 0 to 512 [ 241.636914][ T9445] loop5: detected capacity change from 0 to 128 [ 241.657599][ T9436] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 241.671112][ T9436] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.698699][ T9436] EXT4-fs warning (device loop2): verify_group_input:147: Cannot add at group 509 (only 1 groups) [ 241.720240][ T9441] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 241.745331][ T4430] usb 1-1: USB disconnect, device number 20 [ 241.753031][ T9445] EXT4-fs (loop5): Ignoring removed nobh option [ 241.832212][ T9441] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.890778][ T9445] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,nobh,user_xattr,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 241.942918][ T9445] ext4 filesystem being mounted at /344/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 242.097855][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.212107][ T9462] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1883'. [ 242.245282][ T9462] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1883'. [ 242.982582][ T9492] loop3: detected capacity change from 0 to 512 [ 243.094469][ T9495] loop0: detected capacity change from 0 to 512 [ 243.247290][ T9495] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 243.316493][ T9495] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.469828][ T9506] kernel profiling enabled (shift: 5) [ 243.643646][ T9510] loop2: detected capacity change from 0 to 128 [ 243.751044][ T9510] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 243.804454][ T9510] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 243.825308][ T9470] loop1: detected capacity change from 0 to 40427 [ 243.860184][ T9510] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.1904: Block bitmap for bg 0 marked uninitialized [ 243.968350][ T9470] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 243.984870][ T9470] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 243.997720][ T9516] ALSA: mixer_oss: invalid OSS volume 'LIDE' [ 244.008572][ T9500] loop3: detected capacity change from 0 to 32768 [ 244.017193][ T9470] F2FS-fs (loop1): invalid crc value [ 244.031500][ T9470] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 244.144773][ T9470] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 244.167115][ T9500] XFS (loop3): Mounting V5 Filesystem [ 244.175609][ T9470] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 244.272892][ T9530] netlink: 'syz.0.1908': attribute type 4 has an invalid length. [ 244.351187][ T9530] netlink: 'syz.0.1908': attribute type 8 has an invalid length. [ 244.354999][ T9500] XFS (loop3): Ending clean mount [ 244.360450][ T9530] netlink: 197324 bytes leftover after parsing attributes in process `syz.0.1908'. [ 244.412894][ T9541] netlink: 774 bytes leftover after parsing attributes in process `syz.5.1913'. [ 244.427904][ T9500] XFS (loop3): Quotacheck needed: Please wait. [ 244.454741][ T9541] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1913'. [ 244.501684][ T4186] attempt to access beyond end of device [ 244.501684][ T4186] loop1: rw=2049, want=45104, limit=40427 [ 244.549691][ T9500] XFS (loop3): Quotacheck: Done. [ 244.695210][ T4193] XFS (loop3): Unmounting Filesystem [ 245.525354][ T9566] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1925'. [ 245.671700][ T9564] loop5: detected capacity change from 0 to 8192 [ 245.785638][ T9564] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 245.855890][ T9572] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 245.971711][ T9578] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1929'. [ 246.172802][ T9587] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.0.1933:9587 [ 246.232746][ T9589] set_capacity_and_notify: 2 callbacks suppressed [ 246.232761][ T9589] loop5: detected capacity change from 0 to 1024 [ 246.252308][ T4418] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 246.443371][ T9593] loop0: detected capacity change from 0 to 64 [ 246.525102][ T4418] usb 4-1: Using ep0 maxpacket: 8 [ 246.664748][ T4418] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 246.835127][ T4418] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 246.853359][ T4418] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.896812][ T4418] usb 4-1: Product: syz [ 246.914889][ T4418] usb 4-1: Manufacturer: syz [ 246.932365][ T4418] usb 4-1: SerialNumber: syz [ 246.974128][ T4418] usb 4-1: config 0 descriptor?? [ 247.037078][ T4418] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 247.056741][ T4418] usb 4-1: setting power ON [ 247.077711][ T4418] dvb-usb: bulk message failed: -22 (2/0) [ 247.100063][ T9609] loop0: detected capacity change from 0 to 64 [ 247.137904][ T4418] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 247.165189][ T4418] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 247.179753][ T4418] usb 4-1: media controller created [ 247.245009][ T9580] dvb-usb: bulk message failed: -22 (3/0) [ 247.269746][ T9580] dvb-usb: bulk message failed: -22 (3/0) [ 247.301039][ T4418] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 247.401606][ T4418] usb 4-1: selecting invalid altsetting 6 [ 247.425171][ T4418] usb 4-1: digital interface selection failed (-22) [ 247.453619][ T4418] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 247.525567][ T4418] usb 4-1: setting power OFF [ 247.530998][ T4418] dvb-usb: bulk message failed: -22 (2/0) [ 247.564962][ T4418] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 247.610554][ T4418] (NULL device *): no alternate interface [ 247.676112][ T4418] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 247.761464][ T4418] usb 4-1: USB disconnect, device number 16 [ 247.946056][ T9622] loop3: detected capacity change from 0 to 256 [ 247.975418][ T9619] Bluetooth: hci0: unsupported parameter 5134 [ 247.981586][ T9619] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 248.015622][ T9622] exfat: Deprecated parameter 'namecase' [ 248.022283][ T9622] exfat: Deprecated parameter 'namecase' [ 248.042249][ T9603] loop5: detected capacity change from 0 to 32768 [ 248.085779][ T9622] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 248.100366][ T9625] loop1: detected capacity change from 0 to 128 [ 248.220899][ T9625] EXT4-fs (loop1): Ignoring removed nobh option [ 248.255903][ T9603] XFS (loop5): Mounting V5 Filesystem [ 248.300881][ T9625] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,nobh,user_xattr,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 248.351985][ T9625] ext4 filesystem being mounted at /345/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 248.491680][ T9603] XFS (loop5): Ending clean mount [ 248.656336][ T5321] XFS (loop5): Unmounting Filesystem [ 249.492210][ T9667] xt_TPROXY: Can be used only with -p tcp or -p udp [ 249.526470][ T9667] tmpfs: Unexpected value for 'inode32' [ 249.597933][ T9663] loop1: detected capacity change from 0 to 2048 [ 249.697317][ T9663] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.844053][ T9679] loop5: detected capacity change from 0 to 64 [ 249.973381][ T9683] loop3: detected capacity change from 0 to 64 [ 250.104762][ T9683] hfs: unable to locate alternate MDB [ 250.110602][ T9683] hfs: continuing without an alternate MDB [ 250.426580][ T9693] loop5: detected capacity change from 0 to 4096 [ 250.512339][ T9693] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 250.525623][ T9697] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 250.548756][ T9697] EXT4-fs (loop2): inline encryption not supported [ 250.589467][ T9697] EXT4-fs (loop2): Test dummy encryption mode enabled [ 250.634630][ T9697] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 250.684974][ T9697] System zones: 0-5 [ 250.697326][ T9706] mkiss: ax0: crc mode is auto. [ 250.725040][ T9697] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback. [ 250.909835][ T9712] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1987'. [ 251.063749][ T9713] hfs: hfs: Invalid key length: 94 [ 251.129887][ T9715] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 251.174053][ T4186] hfs: node 4:3 still has 1 user(s)! [ 251.213844][ T26] audit: type=1800 audit(1788882450.247:26): pid=9715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1992" name="file2" dev="loop5" ino=1048646 res=0 errno=0 [ 251.440184][ T9728] set_capacity_and_notify: 5 callbacks suppressed [ 251.440202][ T9728] loop2: detected capacity change from 0 to 1024 [ 251.512418][ T9732] sg_write: data in/out 134155232/590 bytes for SCSI command 0x0-- guessing data in; [ 251.512418][ T9732] program syz.3.1999 not setting count and/or reply_len properly [ 252.205499][ T9751] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2007'. [ 252.335140][ T4227] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 252.624232][ T9769] loop0: detected capacity change from 0 to 512 [ 252.677700][ T9772] loop3: detected capacity change from 0 to 16 [ 252.704316][ T9772] erofs: (device loop3): mounted with root inode @ nid 36. [ 252.719636][ T9769] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 252.757955][ T9769] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 252.765894][ T4227] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 221, using maximum allowed: 30 [ 252.791154][ T9772] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 252.805608][ T9769] EXT4-fs (loop0): 1 truncate cleaned up [ 252.811303][ T9769] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 252.847977][ T4227] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 221 [ 252.854479][ T9775] loop1: detected capacity change from 0 to 4096 [ 252.869381][ T9772] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 252.899336][ T4227] usb 3-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 252.915196][ T9775] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 252.921179][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.982265][ T4227] usb 3-1: config 0 descriptor?? [ 253.220607][ T154] ntfs3: loop1: ntfs3_write_inode r=1e failed, -22. [ 253.245367][ T154] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 253.277784][ T9785] loop3: detected capacity change from 0 to 1024 [ 253.313674][ T4186] ntfs3: loop1: ntfs_evict_inode r=1e failed, -22. [ 253.365620][ T9785] EXT4-fs (loop3): Ignoring removed bh option [ 253.470211][ T4227] hid (null): unknown global tag 0xc [ 253.478913][ T9785] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000004,bh,init_itable,. Quota mode: none. [ 253.481706][ T4227] hid (null): unknown global tag 0xd [ 253.657025][ T4227] hid (null): usage index exceeded [ 253.690067][ T4227] elecom 0003:056E:00E6.001A: ignoring exceeding usage max [ 253.757319][ T4227] elecom 0003:056E:00E6.001A: unknown global tag 0xc [ 253.784430][ T4227] elecom 0003:056E:00E6.001A: item 0 4 1 12 parsing failed [ 253.803106][ T4227] elecom: probe of 0003:056E:00E6.001A failed with error -22 [ 253.858671][ T4227] usb 3-1: USB disconnect, device number 12 [ 254.372868][ T9821] rdma_op ffff88807411d9f0 conn xmit_rdma 0000000000000000 [ 254.448467][ T9809] loop3: detected capacity change from 0 to 32768 [ 254.522244][ T9809] (syz.3.2032,9809,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 254.551308][ T9809] (syz.3.2032,9809,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 254.644409][ T9809] JBD2: Ignoring recovery information on journal [ 254.664191][ T9812] loop1: detected capacity change from 0 to 32768 [ 254.715860][ T9832] netlink: 'syz.2.2043': attribute type 4 has an invalid length. [ 254.725247][ T9832] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2043'. [ 254.789912][ T9809] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 254.883343][ T9812] XFS (loop1): Mounting V5 Filesystem [ 254.923899][ T9815] loop5: detected capacity change from 0 to 40427 [ 255.025479][ T9815] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 255.033380][ T9815] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 255.076499][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 255.097565][ T9815] F2FS-fs (loop5): invalid crc value [ 255.102082][ T9812] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 255.157616][ T9815] F2FS-fs (loop5): Found nat_bits in checkpoint [ 255.219280][ T9812] XFS (loop1): Starting recovery (logdev: internal) [ 255.341380][ T9815] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 255.357171][ T9812] XFS (loop1): Ending recovery (logdev: internal) [ 255.364078][ T9815] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 255.507187][ T4418] XFS (loop1): Metadata corruption detected at xfs_inobt_verify+0xc1/0x220, xfs_finobt block 0x8 [ 255.544952][ T4418] XFS (loop1): Unmount and run xfs_repair [ 255.574838][ T4418] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 255.583779][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.590155][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.637515][ T4418] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 255.676915][ T4418] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 255.715060][ T4418] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 255.753949][ T4418] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 255.825501][ T4418] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 255.844716][ T4418] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 255.877398][ T4418] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 255.901057][ T9874] loop3: detected capacity change from 0 to 4096 [ 255.907804][ T4418] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 255.944827][ T9812] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x8 len 8 error 117 [ 255.981207][ T9874] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 256.022879][ T9868] XFS (loop1): Metadata corruption detected at xfs_inobt_verify+0xc1/0x220, xfs_finobt block 0x8 [ 256.060873][ T9868] XFS (loop1): Unmount and run xfs_repair [ 256.091037][ T9868] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 256.112715][ T9874] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 256.121391][ T9868] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 256.170597][ T9868] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 256.180936][ T9874] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 256.212723][ T9874] ntfs3: loop3: Failed to load $Bitmap. [ 256.222615][ T9874] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 256.231653][ T9868] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 256.258222][ T9874] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 256.265316][ T9868] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 256.274574][ T9868] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 256.291585][ T9868] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 256.364739][ T9868] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 256.381273][ T9868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 256.404056][ T9868] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x8 len 8 error 117 [ 256.494266][ T9884] loop2: detected capacity change from 0 to 64 [ 256.588678][ T4186] XFS (loop1): Unmounting Filesystem [ 256.590430][ T9874] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 256.793511][ T9886] loop0: detected capacity change from 0 to 4096 [ 256.834208][ T9890] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2065'. [ 256.854970][ T9892] loop3: detected capacity change from 0 to 256 [ 256.967242][ T9892] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 256.975096][ T9893] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 257.589564][ T26] audit: type=1800 audit(1788882456.627:27): pid=9884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2062" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 257.733759][ T9918] openvswitch: netlink: Actions may not be safe on all matching packets [ 258.065485][ T9933] loop1: detected capacity change from 0 to 256 [ 258.141760][ T9938] netlink: 'syz.2.2076': attribute type 49 has an invalid length. [ 258.204037][ T9904] loop0: detected capacity change from 0 to 32768 [ 258.325105][ T9904] (syz.0.2071,9904,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 258.365803][ T9904] (syz.0.2071,9904,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 258.449276][ T9952] loop2: detected capacity change from 0 to 1024 [ 258.475208][ T9904] JBD2: Ignoring recovery information on journal [ 258.631965][ T9904] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 258.780660][ T4591] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 258.856236][ T9965] loop3: detected capacity change from 0 to 64 [ 258.927941][ T9969] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2097'. [ 258.943353][ T9969] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2097'. [ 258.962857][ T9969] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2097'. [ 258.987909][ T9904] [ 258.990365][ T9904] ====================================================== [ 258.997834][ T9904] WARNING: possible circular locking dependency detected [ 259.004882][ T9904] syzkaller #0 Not tainted [ 259.009313][ T9904] ------------------------------------------------------ [ 259.016344][ T9904] syz.0.2071/9904 is trying to acquire lock: [ 259.022344][ T9904] ffff88805e7f31b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x307/0x770 [ 259.031704][ T9904] [ 259.031704][ T9904] but task is already holding lock: [ 259.039103][ T9904] ffff88805d9544e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0 [ 259.049445][ T9904] [ 259.049445][ T9904] which lock already depends on the new lock. [ 259.049445][ T9904] [ 259.059958][ T9904] [ 259.059958][ T9904] the existing dependency chain (in reverse order) is: [ 259.068996][ T9904] [ 259.068996][ T9904] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 259.077549][ T9904] down_read+0x44/0x2e0 [ 259.082258][ T9904] ocfs2_start_trans+0x3a6/0x6f0 [ 259.087744][ T9904] ocfs2_update_inode_atime+0xed/0x580 [ 259.093769][ T9904] ocfs2_inode_lock_atime+0x338/0x530 [ 259.099683][ T9904] ocfs2_readdir+0x184/0x470 [ 259.104831][ T9904] iterate_dir+0x213/0x550 [ 259.109792][ T9904] __se_sys_getdents64+0xf2/0x270 [ 259.115361][ T9904] do_syscall_64+0x4c/0xa0 [ 259.120320][ T9904] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 259.126768][ T9904] [ 259.126768][ T9904] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 259.134275][ T9904] ocfs2_start_trans+0x2a7/0x6f0 [ 259.139766][ T9904] ocfs2_xattr_set+0xe8b/0x1390 [ 259.145272][ T9904] ocfs2_set_acl+0x4d4/0x580 [ 259.150408][ T9904] ocfs2_iop_set_acl+0x190/0x2b0 [ 259.155896][ T9904] posix_acl_xattr_set+0x324/0x390 [ 259.161574][ T9904] __vfs_setxattr+0x3d8/0x410 [ 259.166804][ T9904] __vfs_setxattr_noperm+0x126/0x5e0 [ 259.172639][ T9904] vfs_setxattr+0x167/0x2e0 [ 259.177704][ T9904] setxattr+0x2cb/0x360 [ 259.182414][ T9904] path_setxattr+0x147/0x290 [ 259.187550][ T9904] __x64_sys_setxattr+0xb7/0xd0 [ 259.192947][ T9904] do_syscall_64+0x4c/0xa0 [ 259.197911][ T9904] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 259.204353][ T9904] [ 259.204353][ T9904] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 259.214904][ T9904] down_write+0x38/0x60 [ 259.219613][ T9904] ocfs2_reserve_suballoc_bits+0x16d/0x44b0 [ 259.226148][ T9904] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 259.233025][ T9904] ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 259.239211][ T9904] ocfs2_xattr_set+0xc68/0x1390 [ 259.244613][ T9904] ocfs2_set_acl+0x4d4/0x580 [ 259.249753][ T9904] ocfs2_iop_set_acl+0x190/0x2b0 [ 259.255250][ T9904] posix_acl_xattr_set+0x324/0x390 [ 259.260907][ T9904] __vfs_setxattr+0x3d8/0x410 [ 259.266127][ T9904] __vfs_setxattr_noperm+0x126/0x5e0 [ 259.271959][ T9904] vfs_setxattr+0x167/0x2e0 [ 259.277013][ T9904] setxattr+0x2cb/0x360 [ 259.281722][ T9904] path_setxattr+0x147/0x290 [ 259.286866][ T9904] __x64_sys_setxattr+0xb7/0xd0 [ 259.292264][ T9904] do_syscall_64+0x4c/0xa0 [ 259.297229][ T9904] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 259.303670][ T9904] [ 259.303670][ T9904] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 259.311530][ T9904] __lock_acquire+0x2c66/0x7b50 [ 259.316943][ T9904] lock_acquire+0x19e/0x400 [ 259.322001][ T9904] down_read+0x44/0x2e0 [ 259.326713][ T9904] ocfs2_init_acl+0x307/0x770 [ 259.331956][ T9904] ocfs2_mknod+0x15de/0x2510 [ 259.337098][ T9904] ocfs2_create+0x192/0x420 [ 259.342148][ T9904] path_openat+0x120a/0x2fb0 [ 259.347287][ T9904] do_filp_open+0x1df/0x400 [ 259.352339][ T9904] do_sys_openat2+0x14b/0x500 [ 259.357569][ T9904] __x64_sys_creat+0x8c/0xb0 [ 259.362707][ T9904] do_syscall_64+0x4c/0xa0 [ 259.367672][ T9904] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 259.374119][ T9904] [ 259.374119][ T9904] other info that might help us debug this: [ 259.374119][ T9904] [ 259.384376][ T9904] Chain exists of: [ 259.384376][ T9904] &oi->ip_xattr_sem --> sb_internal#3 --> &journal->j_trans_barrier [ 259.384376][ T9904] [ 259.398383][ T9904] Possible unsafe locking scenario: [ 259.398383][ T9904] [ 259.405850][ T9904] CPU0 CPU1 [ 259.411229][ T9904] ---- ---- [ 259.416609][ T9904] lock(&journal->j_trans_barrier); [ 259.421922][ T9904] lock(sb_internal#3); [ 259.428711][ T9904] lock(&journal->j_trans_barrier); [ 259.436551][ T9904] lock(&oi->ip_xattr_sem); [ 259.441164][ T9904] [ 259.441164][ T9904] *** DEADLOCK *** [ 259.441164][ T9904] [ 259.443482][ T26] audit: type=1800 audit(1788882458.223:28): pid=9965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2096" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 259.449335][ T9904] 8 locks held by syz.0.2071/9904: [ 259.449348][ T9904] #0: ffff8880752f6460 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 259.449409][ T9904] #1: ffff88805e7f3488 (&type->i_mutex_dir_key#14){+.+.}-{3:3}, at: path_openat+0x821/0x2fb0 [ 259.449466][ T9904] #2: ffff88805e4a3488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16d/0x44b0 [ 259.449528][ T9904] #3: ffff88805e4a6d88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16d/0x44b0 [ 259.449588][ T9904] #4: ffff88805e4a5108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x11c/0x2630 [ 259.449650][ T9904] #5: ffff8880752f6650 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_mknod+0xf70/0x2510 [ 259.449702][ T9904] #6: ffff88805d9544e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0 [ 259.449761][ T9904] #7: ffff888024a9e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 259.449811][ T9904] [ 259.449811][ T9904] stack backtrace: [ 259.449819][ T9904] CPU: 1 PID: 9904 Comm: syz.0.2071 Not tainted syzkaller #0 [ 259.449838][ T9904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 259.449868][ T9904] Call Trace: [ 259.449876][ T9904] [ 259.499418][ T4418] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 259.508554][ T9904] dump_stack_lvl+0x188/0x250 [ 259.607425][ T9904] ? load_image+0x410/0x410 [ 259.612005][ T9904] ? show_regs_print_info+0x20/0x20 [ 259.617287][ T9904] ? print_circular_bug+0x12b/0x1a0 [ 259.622522][ T9904] check_noncircular+0x296/0x330 [ 259.627489][ T9904] ? add_chain_block+0x9b0/0x9b0 [ 259.632461][ T9904] ? _find_first_zero_bit+0xd1/0xf0 [ 259.637692][ T9904] ? add_lock_to_list+0x18d/0x280 [ 259.642749][ T9904] __lock_acquire+0x2c66/0x7b50 [ 259.647640][ T9904] ? from_kuid_munged+0x6e0/0x6e0 [ 259.652728][ T9904] ? verify_lock_unused+0x140/0x140 [ 259.657971][ T9904] ? __lock_acquire+0x7b50/0x7b50 [ 259.663021][ T9904] ? do_raw_spin_lock+0x128/0x2f0 [ 259.668096][ T9904] lock_acquire+0x19e/0x400 [ 259.672790][ T9904] ? ocfs2_init_acl+0x307/0x770 [ 259.677674][ T9904] ? __might_sleep+0xf0/0xf0 [ 259.682287][ T9904] ? read_lock_is_recursive+0x10/0x10 [ 259.687696][ T9904] ? trace_ocfs2_claim_new_inode_at_loc+0x1c0/0x1c0 [ 259.694323][ T9904] ? rcu_lock_release+0x5/0x20 [ 259.699135][ T9904] down_read+0x44/0x2e0 [ 259.703319][ T9904] ? ocfs2_init_acl+0x307/0x770 [ 259.708200][ T9904] ocfs2_init_acl+0x307/0x770 [ 259.712918][ T9904] ? ocfs2_mknod_locked+0x155/0x290 [ 259.718145][ T9904] ? ocfs2_acl_chmod+0x330/0x330 [ 259.723121][ T9904] ? dquot_alloc_inode+0x821/0x9b0 [ 259.728266][ T9904] ? ocfs2_block_signals+0x97/0xe0 [ 259.733406][ T9904] ? ocfs2_init_security_get+0x135/0x1a0 [ 259.739068][ T9904] ocfs2_mknod+0x15de/0x2510 [ 259.743695][ T9904] ? ocfs2_mkdir+0x420/0x420 [ 259.748341][ T9904] ? __rwlock_init+0x140/0x140 [ 259.753150][ T9904] ? lockdep_hardirqs_on+0x94/0x140 [ 259.758391][ T9904] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 259.764317][ T9904] ? _raw_spin_unlock+0x40/0x40 [ 259.769203][ T9904] ? __wake_up_common+0x5b/0x4d0 [ 259.774179][ T9904] ? ocfs2_inode_unlock+0xa1/0x140 [ 259.779324][ T9904] ? __lock_acquire+0x7b50/0x7b50 [ 259.784390][ T9904] ? __rwlock_init+0x140/0x140 [ 259.789179][ T9904] ? do_raw_spin_unlock+0x11d/0x230 [ 259.794400][ T9904] ? rcu_is_watching+0x11/0xa0 [ 259.799217][ T9904] ? ocfs2_lookup+0x4a8/0x960 [ 259.803921][ T9904] ocfs2_create+0x192/0x420 [ 259.808450][ T9904] ? ocfs2_update_inode_fsync_trans+0x200/0x200 [ 259.814717][ T9904] ? ocfs2_lookup+0x960/0x960 [ 259.819428][ T9904] ? HAS_UNMAPPED_ID+0x1c5/0x220 [ 259.824403][ T9904] ? inode_permission+0xef/0x480 [ 259.829365][ T9904] ? bpf_lsm_inode_create+0x5/0x10 [ 259.834500][ T9904] ? security_inode_create+0xb3/0x100 [ 259.839898][ T9904] ? ocfs2_lookup+0x960/0x960 [ 259.844603][ T9904] path_openat+0x120a/0x2fb0 [ 259.849238][ T9904] ? do_filp_open+0x400/0x400 [ 259.853947][ T9904] do_filp_open+0x1df/0x400 [ 259.858485][ T9904] ? vfs_tmpfile+0x300/0x300 [ 259.863111][ T9904] ? _raw_spin_unlock+0x24/0x40 [ 259.867993][ T9904] ? alloc_fd+0x59e/0x650 [ 259.872352][ T9904] do_sys_openat2+0x14b/0x500 [ 259.877052][ T9904] ? do_sys_open+0xe0/0xe0 [ 259.881525][ T9904] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 259.887537][ T9904] ? lock_chain_count+0x20/0x20 [ 259.892424][ T9904] __x64_sys_creat+0x8c/0xb0 [ 259.897054][ T9904] do_syscall_64+0x4c/0xa0 [ 259.901508][ T9904] ? clear_bhb_loop+0x30/0x80 [ 259.906235][ T9904] ? clear_bhb_loop+0x30/0x80 [ 259.910943][ T9904] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 259.916878][ T9904] RIP: 0033:0x7f5bcf6a7159 [ 259.921323][ T9904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.940966][ T9904] RSP: 002b:00007f5bcd8ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 259.949405][ T9904] RAX: ffffffffffffffda RBX: 00007f5bcf92efa0 RCX: 00007f5bcf6a7159 [ 259.957398][ T9904] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 259.965391][ T9904] RBP: 00007f5bcf73e03b R08: 0000000000000000 R09: 0000000000000000 [ 259.973378][ T9904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.981370][ T9904] R13: 00007f5bcf92f038 R14: 00007f5bcf92efa0 R15: 00007ffc71bbbd68 [ 259.989384][ T9904] [ 259.992451][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.000614][ T4418] usb 6-1: Using ep0 maxpacket: 8 [ 260.090730][ T4196] ocfs2: Unmounting device (7,0) on (node local) [ 260.145026][ T4418] usb 6-1: config 0 interface 0 has no altsetting 0 [ 260.151704][ T4418] usb 6-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 260.174986][ T4418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.215286][ T4591] usb 2-1: unable to get BOS descriptor or descriptor too short [ 260.215662][ T4418] usb 6-1: config 0 descriptor?? [ 260.305284][ T4591] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.315945][ T4591] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 260.485223][ T4591] usb 2-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 260.494412][ T4591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.502464][ T4591] usb 2-1: Product: syz [ 260.506751][ T4591] usb 2-1: Manufacturer: syz [ 260.511370][ T4591] usb 2-1: SerialNumber: syz [ 260.706263][ T4418] logitech 0003:046D:C298.001B: unknown main item tag 0x0 [ 260.713423][ T4418] logitech 0003:046D:C298.001B: unknown main item tag 0x1 [ 260.723866][ T4418] logitech 0003:046D:C298.001B: unknown main item tag 0x0 [ 260.731072][ T4418] logitech 0003:046D:C298.001B: unknown main item tag 0x5 [ 260.738385][ T4418] logitech 0003:046D:C298.001B: unknown main item tag 0x6 [ 260.751158][ T4418] logitech 0003:046D:C298.001B: hidraw0: USB HID v2.81 Device [HID 046d:c298] on usb-dummy_hcd.5-1/input0 [ 260.762726][ T4418] logitech 0003:046D:C298.001B: no inputs found [ 260.875204][ T4591] usb 2-1: unit 115 not found! [ 260.880009][ T4591] usb 2-1: unit 255 not found! [ 260.891022][ T4591] usb 2-1: USB disconnect, device number 16 [ 260.919699][ T4585] usb 6-1: USB disconnect, device number 9 [ 261.095668][ T8099] udevd[8099]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory