last executing test programs: 10m4.686117956s ago: executing program 2 (id=9111): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f00000002c0)=0x3) 10m4.468455871s ago: executing program 2 (id=9115): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x6, 0x7ff00007}]}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 10m4.13269898s ago: executing program 2 (id=9122): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x8, 0x4) 10m3.941626085s ago: executing program 2 (id=9135): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f00000000c0)={[{@nls={'nls', 0x3d, 'iso8859-4'}}, {@barrier}, {@part={'part', 0x3d, 0x1fb38dde}}, {@force}, {@umask={'umask', 0x3d, 0x8}}, {@nodecompose}, {@part={'part', 0x3d, 0x7}}, {@nobarrier}]}, 0xfe, 0x5e5, &(0x7f0000002900)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 10m3.509307265s ago: executing program 2 (id=9130): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x8, r0, 0x0, 0x4, 0x0) 10m2.788877853s ago: executing program 2 (id=9134): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv4_getnexthop={0x18, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfc}, 0x18}, 0x1, 0xffffffffffffffa6, 0x0, 0x4000000}, 0x880) 10m2.368126033s ago: executing program 32 (id=9134): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv4_getnexthop={0x18, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfc}, 0x18}, 0x1, 0xffffffffffffffa6, 0x0, 0x4000000}, 0x880) 7m24.961861917s ago: executing program 4 (id=11759): creat(0x0, 0xecf86c37d53049cc) ioprio_set$uid(0x3, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010106000009040000ff02020000052406800005240002000d240f0100000000e2ffffffff032402", @ANYRESHEX=0x0], 0x0) 7m22.963653837s ago: executing program 4 (id=11773): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[]) 7m22.82236983s ago: executing program 4 (id=11775): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed0f6de8360d499042ddc7d02b6c0772128257702bfe6d0971f00fea85da062cdc", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x24) 7m22.387791371s ago: executing program 4 (id=11779): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x207, &(0x7f0000000080)={[{@bsdgroups}, {@jqfmt_vfsv1}, {@noinit_itable}, {@nodiscard}, {@noquota}]}, 0x5, 0x481, &(0x7f0000000880)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x208c828, 0x0) 7m21.650475889s ago: executing program 4 (id=11784): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x1c, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) 7m20.898134668s ago: executing program 4 (id=11789): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000029c0)={0xa, {"a2e3ad214fc752f91b2809094bf70e0dd038e7ff7fc6e5539b3266078b089b3b083867090890e0878f0e1ac6e7049b3d6d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b34390d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 7m20.593658325s ago: executing program 33 (id=11789): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000029c0)={0xa, {"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", 0x1000}}, 0x1006) 5m46.655722831s ago: executing program 6 (id=12736): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x25dfdbfa, {0x0, 0x0, 0x0, r1, 0x8013, 0x1b223}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xfffffff7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xc094) 5m46.411753857s ago: executing program 6 (id=12741): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw6\x00') read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020) 5m46.198443312s ago: executing program 6 (id=12746): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x1, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000040)) 5m46.095911744s ago: executing program 6 (id=12749): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000000)='./file1\x00', 0x1010004, &(0x7f0000000040)={[{@map_acorn}, {@block={'block', 0x3d, 0x400}, 0x0}, {@map_acorn}, {@nocompress}, {@session={'session', 0x3d, 0x3b}}, {@uid={'uid', 0x3d, 0xee00}, 0x41}, {@showassoc}, {@map_off}]}, 0xfd, 0x645, &(0x7f0000001000)="$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") mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) 5m45.848671741s ago: executing program 6 (id=12753): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c", @ANYRES8=0x0, @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5m45.09007276s ago: executing program 6 (id=12765): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000001200)="6d12483bb95dab4da2", 0x9, 0x6, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 5m44.721109459s ago: executing program 34 (id=12765): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000001200)="6d12483bb95dab4da2", 0x9, 0x6, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 4m51.139696041s ago: executing program 5 (id=13315): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001180)={0x20, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}, @typed={0x8, 0xac, 0x0, 0x0, @uid}]}, 0x20}], 0x1}, 0x800) 4m50.984926145s ago: executing program 5 (id=13317): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x20}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x8, 0x0, 0x3}]}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) 4m50.678290672s ago: executing program 5 (id=13323): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f000000cac0)=[{&(0x7f0000000040)="419591c78b30640ee91c8fc7c6079c0213a13dce386a64f8a51e9b3939", 0xfe8e}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000004c0)=0x7f) 4m49.889518082s ago: executing program 5 (id=13336): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000000c0)={[{@fat=@gid}, {@uni_xlateno}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@shortname_win95}, {@rodir}, {@utf8}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@utf8no}, {@shortname_lower}, {@shortname_lower}, {@shortname_win95}]}, 0x3, 0x29e, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 4m49.441637963s ago: executing program 5 (id=13344): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x14, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x2a}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m48.828855008s ago: executing program 5 (id=13350): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000c40)=[{&(0x7f0000000180)='\r', 0x1}, {&(0x7f0000000840)='\x00', 0x1}, {&(0x7f0000001100)='\x00', 0x1}], 0x3, 0xc) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) 4m48.465454648s ago: executing program 35 (id=13350): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000c40)=[{&(0x7f0000000180)='\r', 0x1}, {&(0x7f0000000840)='\x00', 0x1}, {&(0x7f0000001100)='\x00', 0x1}], 0x3, 0xc) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) 4.43844502s ago: executing program 0 (id=16750): socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) link(0x0, 0x0) 4.266814105s ago: executing program 0 (id=16752): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xba4e7a40265e5c0b, 0x2c, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 3.439199665s ago: executing program 8 (id=16760): syz_mount_image$hfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYRES16=0x0], 0xff, 0x27f, &(0x7f00000002c0)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 3.214529281s ago: executing program 8 (id=16763): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000440)={[{@redirect_dir_off}, {@xino_on}, {@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2.905826878s ago: executing program 7 (id=16766): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="68000000310005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803000000000000", 0x68, 0x0, 0x0, 0x0) 2.806204481s ago: executing program 8 (id=16767): syz_mount_image$ocfs2(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x8c0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1, 0x4421, &(0x7f0000004500)="$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") r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0xffffc002, '\x00', @p_u8=&(0x7f0000000280)=0x1f}}) 2.781420161s ago: executing program 7 (id=16768): io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 2.621443535s ago: executing program 1 (id=16770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200fffe2400048020000180070001006374000014000280080002400000000d08000440000000060900010073797a30000000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x40840}, 0x0) 2.570109876s ago: executing program 7 (id=16771): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x10000004, 0x4) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x10) 2.484491638s ago: executing program 1 (id=16772): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000240)={0x0, @src_change}) 2.444271899s ago: executing program 7 (id=16773): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.331199472s ago: executing program 1 (id=16775): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x61d0, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 2.181402296s ago: executing program 7 (id=16776): r0 = socket(0x11, 0xa, 0x5) unshare(0x22020600) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) 2.123456187s ago: executing program 3 (id=16777): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x20) 2.056586089s ago: executing program 1 (id=16778): syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000180)='./file1\x00', 0x1008800, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x4, 0x272, &(0x7f0000001f40)="$eJzs3U9LW1kUAPDzYkRHGCLMgCgD8wb3QR1mrwwKMoGBkSxmViNjZAbjCApCu9B01XVX3bSbfoB2U+i20EXptl+gFIotdKNduSikxKRGY1L/lJhSf7+NB+8579773iMvWeTk7x9WV5bWNpb39nYiM5j0Z6fj4dh+EsORib6oqwQA8DXZr1Zjt1rX67UAAJfD8x8Arp7m8z858fxPKo33BN/dGx/txeIAgK7w+R8Arp6FP//6baZQmP1jNx2MWL25Wdws1v/Wx2eW478oRykmIhfvI6qH6vHt+cLsRFrzejiKq9uN+u3NYt/x+snIxfDJ+rn5wuxkWne8vj+GGvUvhqIUU5GL79vXT7Wr74+I8SPz5yMXz/+JtSjHUtRqm/Vbk2n66++FlvkHDvIAAAAAAAAAAAAAAAAAAAAAAKAb8pmD1jnVgTRt278nn08/ahmv1x/tD/RNm/5Ac4f9gVr7+2RjLNvbvQMAAAAAAAAAAAAAAAAAAMCXYuPa9ZXFcrm0/qng/2f3n5yWc8YgaczbNmcgIj5/ijMG3/706k7nnBvnOT8XCKY7Dz3+set7Px7UTvt5q57u/Dv688bIL51yItu1NWdOuSjZdtt5m+twazVuyMrF1/Pg8Jq+OzX51sJl3eF9rf8ZuTu9+Gjr5ZuzHqdXr0gAAAAAAAAAAAAAAAAAAHB1Nb/02+uVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvNH//v0OQRC3IRkTnnHJpPYnk4Hhthiq93iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwIAAD//7QZm14=") mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.99900617s ago: executing program 7 (id=16779): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000240)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@inode64}, {@heartbeat_none}, {@inode64}]}, 0x0, 0x4703, &(0x7f0000004800)="$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") setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {}, [], {0x4, 0x3}, [], {0x10, 0x1}, {0x20, 0x6}}, 0x24, 0x0) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.894745173s ago: executing program 3 (id=16780): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d00000000140002800800010001000000080002"], 0x74}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1.891306633s ago: executing program 1 (id=16781): unshare(0x26020400) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0xfffffffffffffffa) 1.752532216s ago: executing program 1 (id=16782): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000000500)={0x20, 0x0, 0x10, "025b8c6f2261832b1a8d801657547f59"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) 1.670371148s ago: executing program 3 (id=16783): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000a00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000003000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 1.554276652s ago: executing program 3 (id=16784): r0 = memfd_create(&(0x7f00000000c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\x89cqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4w\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x7) fcntl$addseals(r0, 0x409, 0x4) ftruncate(r0, 0x8800000) 1.288818828s ago: executing program 3 (id=16785): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4004, @broadcast, 'macvlan1\x00'}}, 0x1e) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000240)='\x00W', 0x5ea}], 0x1) 1.178951451s ago: executing program 0 (id=16786): unshare(0x2a020480) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, 0x0) 1.143859732s ago: executing program 8 (id=16787): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x840, &(0x7f0000000140), 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c0000000100000002"], 0x36e5476d) 1.060801644s ago: executing program 3 (id=16788): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f00000004c0)={0x4, 0xffffffffffffffff, 0x3ffffc, 0x1, 0x0, 0x0, 0x2401}) 1.050008564s ago: executing program 0 (id=16789): socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x800884, &(0x7f0000000cc0)={[{@errors_remount}, {@gid={'gid', 0x3d, 0xee00}}, {@errors_remount}, {@disable_sparse_yes}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x3}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x7}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@show_sys_files_no}, {@disable_sparse_no}, {}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x10000000000000}}, {@show_sys_files_no}]}, 0xdd, 0x1ee81, &(0x7f0000000e00)="$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") 612.176165ms ago: executing program 8 (id=16790): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() kcmp(r1, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 315.702212ms ago: executing program 0 (id=16791): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x4, 0x10000006, 0xffff7ffd, 0xfffffffd, 0x9}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x3) 112.437347ms ago: executing program 8 (id=16792): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) bind$rxrpc(r0, &(0x7f0000000380)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @local}}, 0x24) 0s ago: executing program 0 (id=16793): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xeef, 0x72d0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x24, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x3e, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) kernel console output (not intermixed with test programs): ivid-001: Insert EAV Code in Image: false [ 971.752883][ T4681] vivid-001: Reduced Framerate: false [ 971.772886][ T4681] vivid-001: Enable Capture Cropping: true [ 971.819699][ T4681] vivid-001: Enable Capture Composing: true [ 971.857059][ T4681] vivid-001: Enable Capture Scaler: true [ 971.929419][ T4681] vivid-001: Timestamp Source: Start of Exposure [ 971.981517][ T4681] vivid-001: Colorspace: SMPTE 170M [ 971.999635][ T4681] vivid-001: Transfer Function: Default [ 972.032724][ T4681] vivid-001: Y'CbCr Encoding: Default [ 972.068547][ T4681] vivid-001: HSV Encoding: Hue 0-179 [ 972.094902][ T4681] vivid-001: Quantization: Default [ 972.100106][ T4681] vivid-001: Apply Alpha To Red Only: false [ 972.132836][ T4681] vivid-001: Standard Aspect Ratio: 16x9 Anamorphic [ 972.200049][ T4681] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 972.244594][ T4681] vivid-001: DV Timings: 640x480p59 inactive [ 972.250705][ T4681] vivid-001: DV Timings Aspect Ratio: 16x9 [ 972.323175][ T4681] vivid-001: Maximum EDID Blocks: 2 [ 972.328466][ T4681] vivid-001: Limited RGB Range (16-235): true [ 972.392114][ T4681] vivid-001: Rx RGB Quantization Range: Automatic [ 972.392232][ T4681] vivid-001: Power Present: 0x00000001 [ 972.392342][ T4681] tpg source WxH: 720x576 (Y'CbCr) [ 972.392393][ T4681] tpg field: 4 [ 972.392403][ T4681] tpg crop: 64x576@0x0 [ 972.392417][ T4681] tpg compose: 16x576@0x0 [ 972.392433][ T4681] tpg colorspace: 1 [ 972.392442][ T4681] tpg transfer function: 0/2 [ 972.392454][ T4681] tpg Y'CbCr encoding: 0/1 [ 972.392465][ T4681] tpg quantization: 0/1 [ 972.392476][ T4681] tpg RGB range: 0/1 [ 972.392487][ T4681] vivid-001: ================== END STATUS ================== [ 972.610469][ T4717] loop8: detected capacity change from 0 to 512 [ 972.715477][ T4717] EXT4-fs error (device loop8): ext4_read_inode_bitmap:140: comm syz.8.14519: Invalid inode bitmap blk 4 in block_group 0 [ 972.715833][ T4717] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 973.105672][ T4731] loop8: detected capacity change from 0 to 64 [ 973.265029][ T4738] sch_fq: defrate 4294967295 ignored. [ 973.735040][ T4755] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14535'. [ 974.204724][ T4763] loop7: detected capacity change from 0 to 4096 [ 974.391244][ T4763] ntfs: volume version 3.1. [ 975.194238][ T4806] loop7: detected capacity change from 0 to 1764 [ 975.361558][ T4812] loop8: detected capacity change from 0 to 512 [ 975.375698][T30860] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 975.605290][ T4812] EXT4-fs (loop8): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback. [ 975.648781][ T4812] EXT4-fs warning (device loop8): verify_group_input:147: Cannot add at group 3391 (only 1 groups) [ 975.683025][T30860] usb 2-1: Using ep0 maxpacket: 8 [ 975.821476][T30860] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 975.857384][T30860] usb 2-1: config 0 interface 0 has no altsetting 0 [ 975.884940][T30860] usb 2-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 975.945695][T30860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.033863][T30860] usb 2-1: config 0 descriptor?? [ 976.306560][ T4846] fuse: Bad value for 'fd' [ 976.357023][ T4846] cgroup: Unexpected value for 'all' [ 976.523748][T30860] hid-alps 0003:044E:1215.0023: unknown main item tag 0x0 [ 976.532587][T30860] hid-alps 0003:044E:1215.0023: unknown main item tag 0x0 [ 976.564390][T30860] hid-alps 0003:044E:1215.0023: unknown main item tag 0x0 [ 976.592025][T30860] hid-alps 0003:044E:1215.0023: unknown main item tag 0x0 [ 976.620970][T30860] hid-alps 0003:044E:1215.0023: unknown main item tag 0x0 [ 976.660254][T30860] hid-alps 0003:044E:1215.0023: item fetching failed at offset 32/40 [ 976.691108][T30860] hid-alps 0003:044E:1215.0023: parse failed [ 976.720880][T30860] hid-alps: probe of 0003:044E:1215.0023 failed with error -22 [ 976.771522][T30860] usb 2-1: USB disconnect, device number 90 [ 977.316992][ T4884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14592'. [ 977.438842][T30860] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 977.671557][ T4900] sock: sock_set_timeout: `syz.1.14598' (pid 4900) tries to set negative timeout [ 977.737998][T30860] usb 8-1: Using ep0 maxpacket: 32 [ 977.964310][T30860] usb 8-1: unable to get BOS descriptor or descriptor too short [ 977.999714][ T4912] device sit0 entered promiscuous mode [ 978.026088][ T4912] netlink: 'syz.3.14604': attribute type 1 has an invalid length. [ 978.072587][ T4912] netlink: 1 bytes leftover after parsing attributes in process `syz.3.14604'. [ 978.087079][T30860] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 978.102833][T30860] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 978.152932][T30860] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 978.397241][T30860] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 978.443314][T30860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.451438][T30860] usb 8-1: Product: syz [ 978.494611][T30860] usb 8-1: Manufacturer: syz [ 978.509666][T30860] usb 8-1: SerialNumber: syz [ 978.756882][ T4873] udc-core: couldn't find an available UDC or it's busy [ 978.774382][ T4873] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 978.787907][ T4873] udc-core: couldn't find an available UDC or it's busy [ 978.818693][ T4873] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 978.983255][T30860] usb 8-1: 0:2 : does not exist [ 979.032930][T30860] usb 8-1: USB disconnect, device number 9 [ 979.321159][T23155] udevd[23155]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 979.525748][ T4946] netlink: 'syz.7.14618': attribute type 49 has an invalid length. [ 979.772956][T30878] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 979.787036][ T4952] loop7: detected capacity change from 0 to 1024 [ 979.961072][ T4952] EXT4-fs (loop7): inline encryption not supported [ 980.030440][ T4952] EXT4-fs error (device loop7): ext4_ext_check_inode:501: inode #3: comm syz.7.14622: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 980.063634][T30878] usb 2-1: Using ep0 maxpacket: 32 [ 980.163982][ T4952] EXT4-fs (loop7): Remounting filesystem read-only [ 980.203205][T30878] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 980.224622][T30878] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 980.250829][ T4952] EXT4-fs error (device loop7): ext4_quota_enable:6447: comm syz.7.14622: Bad quota inode: 3, type: 0 [ 980.256006][T30878] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 980.336161][T30878] usb 2-1: config 0 interface 0 has no altsetting 0 [ 980.361730][ T4952] EXT4-fs (loop7): Remounting filesystem read-only [ 980.366242][T30878] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 980.387595][ T4952] EXT4-fs warning (device loop7): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 980.428707][T30878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.468294][T30878] usb 2-1: config 0 descriptor?? [ 980.487825][ T4952] EXT4-fs (loop7): mount failed [ 980.786392][T14381] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 980.921030][ T4980] loop8: detected capacity change from 0 to 256 [ 980.987512][T30878] input: HID 17ef:6067 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:17EF:6067.0024/input/input77 [ 981.125049][T30878] lenovo 0003:17EF:6067.0024: input,hidraw0: USB HID v80.00 Joystick [HID 17ef:6067] on usb-dummy_hcd.1-1/input0 [ 981.173842][T14381] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.194790][T14381] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 981.250398][T14381] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 981.270420][T30858] usb 2-1: USB disconnect, device number 91 [ 981.291723][T14381] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 981.329582][T14381] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.356219][T14381] usb 4-1: config 0 descriptor?? [ 981.496221][ T4991] fido_id[4991]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 981.858510][T14381] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 981.891253][ T5007] sock: sock_set_timeout: `syz.1.14645' (pid 5007) tries to set negative timeout [ 981.950315][T14381] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 981.980786][ T5009] sg_read: process 5993 (syz.0.14646) changed security contexts after opening file descriptor, this is not allowed. [ 982.063317][T30858] usb 4-1: USB disconnect, device number 87 [ 982.214909][ T5010] fido_id[5010]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 982.356838][ T5019] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.365740][ T5019] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.374536][ T5019] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.383304][ T5019] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 983.071034][ T5041] loop7: detected capacity change from 0 to 2048 [ 983.220452][ T5041] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 983.688742][ T5063] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 984.051353][ T5077] 0x000000000000-0x000000020000 : "" [ 984.093313][ T5077] ftl_cs: FTL header not found. [ 984.892720][ T5104] loop8: detected capacity change from 0 to 64 [ 984.991108][ T7] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 985.215761][T14381] Bluetooth: hci4: command 0x0406 tx timeout [ 985.224229][T30860] kernel read not supported for file /dsp (pid: 30860 comm: kworker/1:3) [ 985.239906][ T5113] 0x000000000000-0x000000020000 : "" [ 985.261070][ T5113] ftl_cs: FTL header not found. [ 985.364123][ T7] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 985.414065][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 985.459793][ T5120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14697'. [ 985.477551][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.501481][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 985.558736][ T7] usb 2-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 985.601805][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.661996][ T7] usb 2-1: config 0 descriptor?? [ 985.790688][ T5132] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14704'. [ 985.832885][ T5132] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14704'. [ 985.875283][ T5132] netlink: 'syz.8.14704': attribute type 1 has an invalid length. [ 985.913707][ T5132] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14704'. [ 986.162929][ T5145] loop8: detected capacity change from 0 to 256 [ 986.175420][ T7] hid (null): unknown global tag 0xe [ 986.191029][ T7] hid (null): unknown global tag 0xc [ 986.238484][ T7] hid-generic 0003:05AC:0323.0026: ignoring exceeding usage max [ 986.253776][ T5145] exfat: Deprecated parameter 'namecase' [ 986.259618][ T5145] exfat: Deprecated parameter 'namecase' [ 986.318567][ T7] hid-generic 0003:05AC:0323.0026: unknown global tag 0xe [ 986.330592][ T5145] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 986.346019][ T7] hid-generic 0003:05AC:0323.0026: item 0 0 1 14 parsing failed [ 986.365320][ T7] hid-generic: probe of 0003:05AC:0323.0026 failed with error -22 [ 986.437530][ T7] usb 2-1: USB disconnect, device number 92 [ 987.006199][ T5148] loop8: detected capacity change from 0 to 256 [ 987.105480][ T5155] 0x000000000000-0x000000020000 : "" [ 987.175420][ T5155] ftl_cs: FTL header not found. [ 987.368122][ T5157] loop7: detected capacity change from 0 to 4096 [ 987.551861][ T5157] NILFS (loop7): invalid segment: Checksum error in segment payload [ 987.576811][ T5157] NILFS (loop7): trying rollback from an earlier position [ 987.688656][ T5157] NILFS (loop7): recovery complete [ 987.764784][ T5179] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 987.786727][T30860] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 987.872529][ T5157] NILFS (loop7): nilfs_palloc_freev (ino=3): entry number 3348 already freed [ 987.929648][ T5157] NILFS (loop7): nilfs_sufile_do_free: segment 9 is already clean [ 988.263937][T30860] usb 2-1: too many endpoints for config 0 interface 0 altsetting 7: 132, using maximum allowed: 30 [ 988.291224][T30860] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 988.345023][T30860] usb 2-1: config 0 interface 0 has no altsetting 0 [ 988.368998][T30860] usb 2-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 988.411301][T30860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.445975][T30860] usb 2-1: config 0 descriptor?? [ 988.464136][T14381] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 988.742444][ T5196] 0x000000000000-0x000000020000 : "" [ 988.785012][ T5196] ftl_cs: FTL header not found. [ 988.838576][T14381] usb 8-1: config 1 has an invalid interface number: 128 but max is 1 [ 988.858621][T14381] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 988.910893][T14381] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 988.948895][T30860] saitek 0003:06A3:0CCD.0027: hidraw0: USB HID v28.a9 Device [HID 06a3:0ccd] on usb-dummy_hcd.1-1/input0 [ 988.962768][T14381] usb 8-1: config 1 has no interface number 0 [ 989.014504][T14381] usb 8-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 989.078626][T14381] usb 8-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.185598][ T5515] usb 2-1: USB disconnect, device number 93 [ 989.205153][ T5209] netlink: 124 bytes leftover after parsing attributes in process `syz.0.14736'. [ 989.236919][ T5203] fido_id[5203]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 989.284270][T14381] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 989.302316][T14381] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.338701][T14381] usb 8-1: Product: syz [ 989.356365][T14381] usb 8-1: Manufacturer: syz [ 989.387705][T14381] usb 8-1: SerialNumber: syz [ 989.468651][T14381] cdc_wdm 8-1:1.128: skipping garbage [ 989.499898][T14381] cdc_wdm 8-1:1.128: cdc-wdm0: USB WDM device [ 989.527986][T14381] cdc_wdm 8-1:1.128: Unknown control protocol [ 989.738996][T30878] usb 8-1: USB disconnect, device number 10 [ 990.095068][ T5227] lo speed is unknown, defaulting to 1000 [ 990.358758][ T5206] loop8: detected capacity change from 0 to 32768 [ 990.492414][ T5206] JBD2: Ignoring recovery information on journal [ 990.647751][ T5241] netlink: 'syz.0.14750': attribute type 4 has an invalid length. [ 990.676564][ T5206] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 990.688839][ T5241] netlink: 168 bytes leftover after parsing attributes in process `syz.0.14750'. [ 990.747275][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 990.747291][ T26] audit: type=1800 audit(1788476525.617:40): pid=5206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.14735" name="file1" dev="loop8" ino=17058 res=0 errno=0 [ 990.867894][ T5515] kernel write not supported for file /sg0 (pid: 5515 comm: kworker/0:9) [ 990.920209][ T1643] ocfs2: Unmounting device (7,8) on (node local) [ 991.183846][ T5256] binder: 5255:5256 ioctl 4018620d 0 returned -22 [ 991.224891][ T5256] binder: 5255:5256 ioctl c0046209 0 returned -22 [ 991.805136][ T5276] loop7: detected capacity change from 0 to 512 [ 991.890730][ T5276] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 991.904896][ T4230] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 991.942042][ T5276] EXT4-fs (loop7): 1 truncate cleaned up [ 991.947955][ T5276] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier=0x0000000000000101,barrier,,errors=continue. Quota mode: none. [ 992.314187][ T4230] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.344223][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.376307][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 992.410658][ T4230] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 992.439860][ T4230] usb 2-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00 [ 992.459610][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.517433][ T4230] usb 2-1: config 0 descriptor?? [ 992.987437][ T4230] hid-generic 0003:047E:FFFF.0028: unknown main item tag 0x0 [ 992.996327][ T5303] loop7: detected capacity change from 0 to 128 [ 993.037416][ T4230] hid-generic 0003:047E:FFFF.0028: unknown main item tag 0x0 [ 993.058697][ T4230] hid-generic 0003:047E:FFFF.0028: unknown main item tag 0x0 [ 993.114163][ T5303] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 993.117145][ T5305] netlink: 96 bytes leftover after parsing attributes in process `syz.8.14777'. [ 993.143842][ T4230] hid-generic 0003:047E:FFFF.0028: unknown main item tag 0x0 [ 993.167014][ T4230] hid-generic 0003:047E:FFFF.0028: No inputs registered, leaving [ 993.251832][ T4230] hid-generic 0003:047E:FFFF.0028: hidraw0: USB HID v0.00 Joystick [HID 047e:ffff] on usb-dummy_hcd.1-1/input0 [ 993.296395][ T4893] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 993.326651][ T4230] usb 2-1: USB disconnect, device number 94 [ 993.467734][ T5312] loop7: detected capacity change from 0 to 64 [ 993.567653][ T26] audit: type=1800 audit(1788476528.437:41): pid=5312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.14779" name="file1" dev="loop7" ino=21 res=0 errno=0 [ 993.667482][ T5306] fido_id[5306]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 994.068326][ T5326] loop8: detected capacity change from 0 to 512 [ 994.230626][ T5326] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 994.329807][ T5326] EXT4-fs (loop8): 1 truncate cleaned up [ 994.347924][ T5326] EXT4-fs (loop8): mounted filesystem without journal. Opts: barrier=0x0000000000000101,barrier,,errors=continue. Quota mode: none. [ 994.794479][ T5342] loop8: detected capacity change from 0 to 64 [ 994.954099][ T7] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 994.975941][ T26] audit: type=1800 audit(1788476529.847:42): pid=5342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.14796" name="file1" dev="loop8" ino=21 res=0 errno=0 [ 995.344326][ T7] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 995.374276][ T7] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.413927][ T7] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 995.443005][ T7] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 995.482479][ T7] usb 8-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00 [ 995.523918][ T7] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.564084][ T7] usb 8-1: config 0 descriptor?? [ 996.046792][ T7] hid-generic 0003:047E:FFFF.0029: unknown main item tag 0x0 [ 996.085974][ T7] hid-generic 0003:047E:FFFF.0029: unknown main item tag 0x0 [ 996.116939][ T5356] loop8: detected capacity change from 0 to 256 [ 996.124308][ T7] hid-generic 0003:047E:FFFF.0029: unknown main item tag 0x0 [ 996.142580][ T7] hid-generic 0003:047E:FFFF.0029: unknown main item tag 0x0 [ 996.184688][ T7] hid-generic 0003:047E:FFFF.0029: No inputs registered, leaving [ 996.235422][ T7] hid-generic 0003:047E:FFFF.0029: hidraw0: USB HID v0.00 Joystick [HID 047e:ffff] on usb-dummy_hcd.7-1/input0 [ 996.367698][ T7] usb 8-1: USB disconnect, device number 11 [ 996.606274][ T5363] fido_id[5363]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 996.776399][ T5367] loop8: detected capacity change from 0 to 2048 [ 997.074056][ T5367] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 997.192356][ T26] audit: type=1800 audit(1788476532.057:43): pid=5367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.14808" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 997.636476][ T5384] Trying to write to read-only block-device nullb0 [ 998.015212][ T5400] loop7: detected capacity change from 0 to 64 [ 998.434447][T32428] hfs: node 4:3 still has 1 user(s)! [ 999.234159][ T5392] loop8: detected capacity change from 0 to 32768 [ 999.360286][ T5418] loop7: detected capacity change from 0 to 256 [ 1000.270272][ T5443] Bluetooth: hci0: unsupported parameter 5134 [ 1000.310930][ T5443] Bluetooth: hci0: unsupported parameter 8192 [ 1000.347983][ T5443] Bluetooth: hci0: unsupported parameter 5134 [ 1000.372922][ T5443] Bluetooth: hci0: unsupported parameter 8192 [ 1000.573913][ T4230] Bluetooth: hci3: command 0x0406 tx timeout [ 1000.693854][T30858] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1000.802106][ T5425] loop8: detected capacity change from 0 to 32768 [ 1000.966933][ T5425] XFS (loop8): Mounting V5 Filesystem [ 1000.973342][T30858] usb 4-1: Using ep0 maxpacket: 32 [ 1001.093182][T30858] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1001.099867][T30858] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 1001.126011][T30858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.163476][T30858] usb 4-1: config 0 descriptor?? [ 1001.235168][ T5430] loop7: detected capacity change from 0 to 32768 [ 1001.247784][ T5425] XFS (loop8): Ending clean mount [ 1001.338551][ T5430] (syz.7.14838,5430,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1001.414957][ T5430] (syz.7.14838,5430,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1001.492682][ T5430] (syz.7.14838,5430,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 1001.532374][ T5430] JBD2: Ignoring recovery information on journal [ 1001.611130][ T1643] XFS (loop8): Unmounting Filesystem [ 1001.667268][T30858] cmedia_hs100b 0003:0D8C:0014.002A: unknown main item tag 0x1 [ 1001.685205][T30858] cmedia_hs100b 0003:0D8C:0014.002A: unknown main item tag 0x4 [ 1001.705345][T30858] cmedia_hs100b 0003:0D8C:0014.002A: ignoring exceeding usage max [ 1001.733946][T30858] cmedia_hs100b 0003:0D8C:0014.002A: hidraw0: USB HID v0.81 Device [HID 0d8c:0014] on usb-dummy_hcd.3-1/input0 [ 1001.768692][ T5430] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1001.902977][T30858] usb 4-1: USB disconnect, device number 88 [ 1001.936881][ T5461] fido_id[5461]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0014.002A/report_descriptor': No such file or directory [ 1002.208041][T32428] ocfs2: Unmounting device (7,7) on (node local) [ 1003.465096][ T5480] loop7: detected capacity change from 0 to 32768 [ 1003.756045][ T5484] loop8: detected capacity change from 0 to 32768 [ 1003.925909][ T5484] XFS (loop8): Mounting V5 Filesystem [ 1004.279139][ T5484] XFS (loop8): Ending clean mount [ 1004.480972][ T1643] XFS (loop8): Unmounting Filesystem [ 1005.627975][ T5503] loop7: detected capacity change from 0 to 32768 [ 1005.683347][ T5527] hugetlbfs: Bad value 'e' for mount option 'nr_inodes' [ 1005.683347][ T5527] [ 1005.739842][ T5529] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14874'. [ 1005.831315][ T5503] XFS (loop7): Mounting V5 Filesystem [ 1006.006032][ T5545] netlink: 'syz.3.14878': attribute type 13 has an invalid length. [ 1006.016564][ T5545] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.14878'. [ 1006.091360][ T5503] XFS (loop7): Ending clean mount [ 1006.229898][T32428] XFS (loop7): Unmounting Filesystem [ 1006.657913][ T5559] netlink: 79 bytes leftover after parsing attributes in process `syz.3.14885'. [ 1007.281720][ T5571] Bluetooth: hci0: unsupported parameter 5134 [ 1007.357120][ T5571] Bluetooth: hci0: unsupported parameter 8192 [ 1007.390277][ T5571] Bluetooth: hci0: unsupported parameter 5134 [ 1007.418356][ T5571] Bluetooth: hci0: unsupported parameter 8192 [ 1007.515119][ T5550] loop8: detected capacity change from 0 to 32768 [ 1007.608327][ T4230] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1007.617997][ T5550] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.14889 (5550) [ 1007.700884][ T5550] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 1007.731994][ T5550] BTRFS info (device loop8): setting nodatacow, compression disabled [ 1007.799014][ T5550] BTRFS info (device loop8): force clearing of disk cache [ 1007.824773][ T5550] BTRFS info (device loop8): turning off barriers [ 1007.864114][ T5550] BTRFS info (device loop8): use no compression [ 1007.870534][ T5550] BTRFS info (device loop8): disabling free space tree [ 1007.912927][ T5550] BTRFS info (device loop8): enabling ssd optimizations [ 1007.932887][ T5550] BTRFS info (device loop8): using spread ssd allocation scheme [ 1007.964175][ T5550] BTRFS info (device loop8): turning on flush-on-commit [ 1007.991575][ T5550] BTRFS info (device loop8): has skinny extents [ 1008.004932][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1008.029297][ T4230] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1008.125809][ T4230] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 1008.157519][ T5550] BTRFS info (device loop8): clearing free space tree [ 1008.173646][ T5550] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1008.254189][ T5550] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1008.265776][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.340105][ T4230] usb 4-1: config 0 descriptor?? [ 1008.389261][ T5550] BTRFS info (device loop8): checking UUID tree [ 1008.910255][ T4230] input: Retrode SNES Mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0403:97C1.002B/input/input80 [ 1009.015873][ T5575] loop7: detected capacity change from 0 to 32768 [ 1009.034054][ T5623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14906'. [ 1009.100559][ T4230] hid-retrode 0003:0403:97C1.002B: input,hidraw0: USB HID v0.00 Joystick [HID 0403:97c1] on usb-dummy_hcd.3-1/input0 [ 1009.157764][ T4230] usb 4-1: USB disconnect, device number 89 [ 1009.372281][ C0] vkms_vblank_simulate: vblank timer overrun [ 1009.495682][ T5634] fido_id[5634]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1009.515596][ T5636] netlink: 'syz.0.14909': attribute type 29 has an invalid length. [ 1009.544585][ T5636] netlink: 'syz.0.14909': attribute type 29 has an invalid length. [ 1009.592071][ T5636] netlink: 'syz.0.14909': attribute type 29 has an invalid length. [ 1010.223023][ T5648] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14916'. [ 1010.388686][ C0] vkms_vblank_simulate: vblank timer overrun [ 1010.394277][ T5575] XFS (loop7): Mounting V5 Filesystem [ 1010.598454][ T5575] XFS (loop7): log mount failed [ 1011.653081][T30860] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1012.100924][T30860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.142631][T30860] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1012.176757][T30860] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 1012.213096][T30860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.250227][T30860] usb 2-1: config 0 descriptor?? [ 1012.804193][T30860] input: Retrode SNES Mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0403:97C1.002C/input/input81 [ 1012.857822][ T5712] ALSA: mixer_oss: invalid OSS volume '' [ 1012.912937][ T5713] vivid-006: disconnect [ 1012.935114][T30860] hid-retrode 0003:0403:97C1.002C: input,hidraw0: USB HID v0.00 Joystick [HID 0403:97c1] on usb-dummy_hcd.1-1/input0 [ 1012.948996][ T5710] vivid-006: reconnect [ 1013.026242][T30860] usb 2-1: USB disconnect, device number 95 [ 1013.221913][ T5714] fido_id[5714]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1013.872164][ T5748] binder_alloc: binder_alloc_mmap_handler: 5747 200000ffc000-200001000000 already mapped failed -16 [ 1013.947486][ T5745] loop8: detected capacity change from 0 to 4096 [ 1014.069001][ T5754] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1014.249059][ T5745] NILFS (loop8): nilfs_sufile_do_free: segment 9 is already clean [ 1014.297965][ T5745] NILFS (loop8): nilfs_sufile_do_free: segment 9 is already clean [ 1014.478405][T19100] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1014.770959][T19100] usb 8-1: Using ep0 maxpacket: 8 [ 1014.896659][T19100] usb 8-1: config 0 has no interfaces? [ 1014.915103][T19100] usb 8-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 1014.989666][T19100] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.036039][T19100] usb 8-1: config 0 descriptor?? [ 1015.306074][T19100] usb 8-1: USB disconnect, device number 12 [ 1015.692088][ T5804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14986'. [ 1016.420645][ T5790] loop8: detected capacity change from 0 to 32768 [ 1016.600878][ T5790] ERROR: (device loop8): dbAlloc: the hint is outside the map [ 1016.600878][ T5790] [ 1016.694966][ T5790] read_mapping_page failed! [ 1016.699544][ T5790] ERROR: (device loop8): txCommit: [ 1016.699544][ T5790] [ 1018.354722][ T5879] netlink: 20 bytes leftover after parsing attributes in process `syz.7.15019'. [ 1018.556819][ T4230] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1018.822140][ T4230] usb 4-1: Using ep0 maxpacket: 8 [ 1018.944658][ T4230] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1018.951465][ T4230] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 1019.002238][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.038511][ T4230] usb 4-1: config 0 descriptor?? [ 1019.482409][ T5898] loop7: detected capacity change from 0 to 4096 [ 1019.535559][ T4230] logitech 0003:046D:C298.002D: unknown main item tag 0x0 [ 1019.564360][ T4230] logitech 0003:046D:C298.002D: unknown main item tag 0x1 [ 1019.571660][ T4230] logitech 0003:046D:C298.002D: unknown main item tag 0x0 [ 1019.604704][ T5898] ntfs3: Unknown parameter 't' [ 1019.630050][ T4230] logitech 0003:046D:C298.002D: unknown main item tag 0x5 [ 1019.648913][ T4230] logitech 0003:046D:C298.002D: unknown main item tag 0x6 [ 1019.669207][ T4230] logitech 0003:046D:C298.002D: hidraw0: USB HID v2.81 Device [HID 046d:c298] on usb-dummy_hcd.3-1/input0 [ 1019.726379][ T4230] logitech 0003:046D:C298.002D: no inputs found [ 1019.806359][ T4230] usb 4-1: USB disconnect, device number 90 [ 1020.052708][ T5903] fido_id[5903]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1022.317521][ T5944] loop8: detected capacity change from 0 to 4096 [ 1022.444836][ T5944] NILFS (loop8): invalid segment: Checksum error in segment payload [ 1022.502896][ T5944] NILFS (loop8): trying rollback from an earlier position [ 1022.569349][ T5944] NILFS (loop8): recovery complete [ 1022.613805][ T5953] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1022.700710][ T5944] IPv6: addrconf: prefix option has invalid lifetime [ 1022.778165][ T5944] IPv6: addrconf: prefix option has invalid lifetime [ 1022.905238][ T5918] loop7: detected capacity change from 0 to 32768 [ 1023.071561][ T5918] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.15034 (5918) [ 1023.310769][ T5918] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 1023.369815][ T5918] BTRFS info (device loop7): setting nodatacow, compression disabled [ 1023.445690][ T5918] BTRFS info (device loop7): disabling tree log [ 1023.452014][ T5918] BTRFS info (device loop7): turning on async discard [ 1023.735148][ T5918] BTRFS info (device loop7): max_inline at 0 [ 1023.748118][ T5918] BTRFS info (device loop7): using free space tree [ 1023.804878][ T5918] BTRFS info (device loop7): has skinny extents [ 1023.836879][ T5981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.938455][T24230] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 1024.010702][T24230] bond0: now running without any active interface! [ 1024.109470][T24230] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 1024.138662][T24230] bond0: (slave bridge_slave_1): link status definitely down, disabling slave [ 1024.234199][ T5918] BTRFS error (device loop7): open_ctree failed: -12 [ 1025.205417][ T6009] netlink: 'syz.8.15071': attribute type 16 has an invalid length. [ 1025.480554][ T6021] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1025.557853][ T6021] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1025.614043][ T6026] binder_alloc: binder_alloc_mmap_handler: 6023 200000ffc000-200001000000 already mapped failed -16 [ 1025.634094][ T6021] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1025.640708][ T6021] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 1025.744112][ T6021] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1025.751242][ T6021] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1025.846434][ T6021] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1025.938332][ T6021] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1025.983801][ T6021] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 1025.990321][ T6021] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 1026.024214][ T6021] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1026.030715][ T6021] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1026.080529][ T6021] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1026.174191][ T6021] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1027.130286][ T6068] netlink: 32 bytes leftover after parsing attributes in process `syz.7.15100'. [ 1027.608357][ T6085] binder_alloc: binder_alloc_mmap_handler: 6084 200000ffc000-200001000000 already mapped failed -16 [ 1027.848246][ T6096] netlink: 'syz.7.15112': attribute type 19 has an invalid length. [ 1028.408026][ T6119] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15123'. [ 1028.425627][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15123'. [ 1028.755386][ T6133] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 1028.813331][ T6133] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1028.843635][ T6133] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 1029.003088][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15134'. [ 1029.297672][ T6148] 0x000000000000-0x000000000038 : "" [ 1029.353371][ T6148] ftl_cs: FTL header corrupt! [ 1029.920899][ T6170] netlink: 'syz.8.15146': attribute type 3 has an invalid length. [ 1030.025146][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15148'. [ 1030.098612][T30878] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1030.209599][ T6179] loop7: detected capacity change from 0 to 512 [ 1030.274309][ T6184] loop8: detected capacity change from 0 to 256 [ 1030.333973][ T6179] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1030.398726][ T6179] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1030.450704][ T6179] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1030.554600][ T6179] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1030.570286][ T6179] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e041e01c, mo2=0100] [ 1030.579631][ T6179] EXT4-fs (loop7): failed to initialize system zone (-117) [ 1030.588918][T30878] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1030.599926][ T6179] EXT4-fs (loop7): mount failed [ 1030.623080][T30878] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1030.896606][T30878] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 1030.923623][T30878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.951962][T30878] usb 4-1: Product: syz [ 1030.972876][T30878] usb 4-1: Manufacturer: syz [ 1031.008113][T30878] usb 4-1: SerialNumber: syz [ 1031.103755][T30878] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 1031.147398][ T6205] loop8: detected capacity change from 0 to 256 [ 1031.190100][T30878] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1031.190100][T30878] Please send a copy of this message to and [ 1031.642625][ T6224] netlink: 260 bytes leftover after parsing attributes in process `syz.0.15169'. [ 1031.751136][T30878] ums-sddr09: probe of 4-1:1.0 failed with error -5 [ 1031.848835][ T6230] loop8: detected capacity change from 0 to 1024 [ 1031.906910][ T4173] usb 4-1: USB disconnect, device number 91 [ 1032.080475][ T6230] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1032.137030][ T6230] EXT4-fs error (device loop8): ext4_get_journal_inode:5187: inode #32: comm syz.8.15173: iget: special inode unallocated [ 1032.207515][ T6230] EXT4-fs (loop8): no journal found [ 1032.254619][ T6230] EXT4-fs (loop8): can't get journal size [ 1032.282077][ T6230] EXT4-fs (loop8): filesystem is read-only [ 1032.309886][ T6230] EXT4-fs (loop8): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,noload,noblock_validity,noblock_validity,grpjquota=,,errors=continue. Quota mode: none. [ 1033.000111][ T6270] netlink: 'syz.3.15192': attribute type 29 has an invalid length. [ 1033.046447][ T6264] loop8: detected capacity change from 0 to 4096 [ 1033.083605][ T6268] loop7: detected capacity change from 0 to 2048 [ 1033.154231][ T6268] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=27485, location=27485 [ 1033.180699][ T6264] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 1033.242808][ T6268] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1034.752838][T30878] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 1035.253266][T30878] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1035.265677][ T6361] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1035.282830][T30878] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1035.293220][T30878] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1035.302310][T30878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.380847][T30878] usb 2-1: config 0 descriptor?? [ 1035.413943][ T6329] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1035.975180][T30878] petalynx 0003:18B1:0037.002E: ignoring exceeding usage max [ 1035.997410][T30878] petalynx 0003:18B1:0037.002E: hidraw0: USB HID v0.c1 Device [HID 18b1:0037] on usb-dummy_hcd.1-1/input0 [ 1036.211512][T30878] usb 2-1: USB disconnect, device number 96 [ 1036.306790][ T6386] fido_id[6386]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1036.684137][ T6373] loop7: detected capacity change from 0 to 32768 [ 1036.851355][ T6373] read_mapping_page failed! [ 1036.856755][ T6373] ialloc: diAlloc returned -5! [ 1038.309469][ T6446] loop7: detected capacity change from 0 to 8192 [ 1038.442586][ T6446] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 1038.462453][ T6446] REISERFS (device loop7): using ordered data mode [ 1038.482427][ T6446] reiserfs: using flush barriers [ 1038.537253][ T6446] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1038.555330][ T6446] REISERFS (device loop7): checking transaction log (loop7) [ 1038.895218][ T6446] REISERFS (device loop7): Using tea hash to sort names [ 1038.926793][ T6446] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 1039.212369][ T4173] kernel write not supported for file /sg0 (pid: 4173 comm: kworker/0:3) [ 1040.819452][ T6531] netlink: 'syz.1.15316': attribute type 62 has an invalid length. [ 1040.923690][ T6492] loop8: detected capacity change from 0 to 32768 [ 1040.930534][ T6536] damon: kdamond (6536) starts [ 1041.060589][ T6535] loop7: detected capacity change from 0 to 2048 [ 1041.283819][ T6535] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1041.601080][ C1] vkms_vblank_simulate: vblank timer overrun [ 1042.291873][ T6585] loop7: detected capacity change from 0 to 256 [ 1042.399824][ T6585] FAT-fs (loop7): Directory bread(block 64) failed [ 1042.454028][ T6585] FAT-fs (loop7): Directory bread(block 65) failed [ 1042.460704][ T6585] FAT-fs (loop7): Directory bread(block 66) failed [ 1042.511698][ T6585] FAT-fs (loop7): Directory bread(block 67) failed [ 1042.563826][ T6585] FAT-fs (loop7): Directory bread(block 68) failed [ 1042.570481][ T6585] FAT-fs (loop7): Directory bread(block 69) failed [ 1042.620243][ T6585] FAT-fs (loop7): Directory bread(block 70) failed [ 1042.685204][ T6585] FAT-fs (loop7): Directory bread(block 71) failed [ 1042.729755][ T6585] FAT-fs (loop7): Directory bread(block 72) failed [ 1042.780675][ T6585] FAT-fs (loop7): Directory bread(block 73) failed [ 1043.021717][ T26] audit: type=1800 audit(1788476577.887:44): pid=6585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.15341" name="file1" dev="loop7" ino=1048785 res=0 errno=0 [ 1043.108827][ T6585] attempt to access beyond end of device [ 1043.108827][ T6585] loop7: rw=2049, want=1228, limit=256 [ 1043.741494][ T6615] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15354'. [ 1044.570885][ T6639] netlink: 56 bytes leftover after parsing attributes in process `syz.7.15367'. [ 1046.022609][ T6646] loop7: detected capacity change from 0 to 32768 [ 1046.044802][ T4173] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1046.121206][ T6691] netlink: 'syz.3.15392': attribute type 11 has an invalid length. [ 1046.304281][ T4173] usb 2-1: Using ep0 maxpacket: 8 [ 1046.327379][ T6646] XFS (loop7): Mounting V5 Filesystem [ 1046.424275][ T4173] usb 2-1: too many endpoints for config 0 interface 0 altsetting 251: 223, using maximum allowed: 30 [ 1046.467729][ T4173] usb 2-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 1046.489335][ T6646] XFS (loop7): Ending clean mount [ 1046.531928][ T6646] XFS (loop7): Quotacheck needed: Please wait. [ 1046.591521][ T4173] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1046.643402][ T4173] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1046.652509][ T4173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.758525][ T4173] usb 2-1: config 0 descriptor?? [ 1046.851598][ T6646] XFS (loop7): Quotacheck: Done. [ 1047.226369][T32428] XFS (loop7): Unmounting Filesystem [ 1047.277409][ T4173] uclogic 0003:5543:0042.002F: unexpected long global item [ 1047.302376][ T4173] uclogic 0003:5543:0042.002F: parse failed [ 1047.342695][ T4173] uclogic: probe of 0003:5543:0042.002F failed with error -22 [ 1047.490825][ T6729] vivid-001: ================= START STATUS ================= [ 1047.523461][T30878] usb 2-1: USB disconnect, device number 97 [ 1047.563826][ T6729] vivid-001: Test Pattern: 75% Colorbar [ 1047.596498][ T6729] vivid-001: Fill Percentage of Frame: 100 [ 1047.624322][ T6729] vivid-001: Horizontal Movement: No Movement [ 1047.653132][ T6729] vivid-001: Vertical Movement: No Movement [ 1047.660729][ T6729] vivid-001: OSD Text Mode: All [ 1047.671821][ T6729] vivid-001: Show Border: true [ 1047.680410][ T6729] vivid-001: Show Square: true [ 1047.691768][ T6729] vivid-001: Sensor Flipped Horizontally: false [ 1047.709091][ T6729] vivid-001: Sensor Flipped Vertically: true [ 1047.722600][ T6729] vivid-001: Insert SAV Code in Image: true [ 1047.732729][ T6729] vivid-001: Insert EAV Code in Image: false [ 1047.747360][ T6729] vivid-001: Reduced Framerate: false [ 1047.757325][ T6729] vivid-001: Enable Capture Cropping: true [ 1047.767853][ T6729] vivid-001: Enable Capture Composing: true [ 1047.782327][ T6729] vivid-001: Enable Capture Scaler: true [ 1047.792645][ T6729] vivid-001: Timestamp Source: Start of Exposure [ 1047.843947][ T6729] vivid-001: Colorspace: Rec. 709 [ 1047.849069][ T6729] vivid-001: Transfer Function: Default [ 1047.911416][ T6729] vivid-001: Y'CbCr Encoding: Default [ 1047.953254][ T6729] vivid-001: HSV Encoding: Hue 0-179 [ 1047.968879][ T6729] vivid-001: Quantization: Default [ 1048.004077][ T6729] vivid-001: Apply Alpha To Red Only: false [ 1048.025891][ T6729] vivid-001: Standard Aspect Ratio: 16x9 Anamorphic [ 1048.077178][ T6729] vivid-001: DV Timings Signal Mode: Current DV Timings [ 1048.142837][ T6729] vivid-001: DV Timings: 640x480p59 inactive [ 1048.167481][ T6729] vivid-001: DV Timings Aspect Ratio: 16x9 [ 1048.192744][ T6744] sch_fq: defrate 4294967295 ignored. [ 1048.224626][ T6729] vivid-001: Maximum EDID Blocks: 2 [ 1048.229915][ T6729] vivid-001: Limited RGB Range (16-235): true [ 1048.292870][ T6729] vivid-001: Rx RGB Quantization Range: Automatic [ 1048.319674][ T6729] vivid-001: Power Present: 0x00000001 [ 1048.382834][ T6729] tpg source WxH: 1280x720 (Y'CbCr) [ 1048.388101][ T6729] tpg field: 1 [ 1048.391521][ T6729] tpg crop: 1280x720@0x0 [ 1048.479586][ T6729] tpg compose: 1280x720@0x0 [ 1048.503120][ T6729] tpg colorspace: 3 [ 1048.532808][ T6729] tpg transfer function: 0/2 [ 1048.537472][ T6729] tpg Y'CbCr encoding: 0/1 [ 1048.602803][ T6729] tpg quantization: 0/1 [ 1048.607223][ T6729] tpg RGB range: 0/1 [ 1048.611151][ T6729] vivid-001: ================== END STATUS ================== [ 1049.195600][ T6778] fuse: Bad value for 'fd' [ 1049.232268][ T6778] cgroup: Unexpected value for 'all' [ 1049.336824][ T6783] device sit0 entered promiscuous mode [ 1049.374619][ T6783] netlink: 'syz.0.15440': attribute type 1 has an invalid length. [ 1049.418032][ T6783] netlink: 1 bytes leftover after parsing attributes in process `syz.0.15440'. [ 1049.647407][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15434'. [ 1050.396963][ T4173] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1050.654004][ T4173] usb 2-1: Using ep0 maxpacket: 32 [ 1050.814311][ T4173] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1050.896401][ T4173] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1050.940616][ T4173] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.986730][ T4173] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1051.059326][ T6849] sock: sock_set_timeout: `syz.3.15459' (pid 6849) tries to set negative timeout [ 1051.194166][ T4173] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1051.222626][ T4173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.250821][ T4173] usb 2-1: Product: syz [ 1051.266386][ T4173] usb 2-1: Manufacturer: syz [ 1051.271049][ T4173] usb 2-1: SerialNumber: syz [ 1051.557702][ T6815] udc-core: couldn't find an available UDC or it's busy [ 1051.582268][ T6815] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1051.602169][ T6815] udc-core: couldn't find an available UDC or it's busy [ 1051.612007][ T6815] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1051.754325][ T4173] usb 2-1: 0:2 : does not exist [ 1051.809492][ T4173] usb 2-1: USB disconnect, device number 98 [ 1051.890002][ T6854] loop7: detected capacity change from 0 to 32768 [ 1051.957189][ T6854] JBD2: Ignoring recovery information on journal [ 1052.076834][T23155] udevd[23155]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1052.219710][ T6854] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1052.387955][ T6872] netlink: 'syz.8.15469': attribute type 49 has an invalid length. [ 1052.578577][T32428] ocfs2: Unmounting device (7,7) on (node local) [ 1052.743345][ T6886] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.15478'. [ 1052.756806][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15475'. [ 1052.805674][ T6886] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1053.368273][ T6910] loop7: detected capacity change from 0 to 512 [ 1053.569389][ T6910] EXT4-fs (loop7): 1 orphan inode deleted [ 1053.624136][ T6910] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 1053.698479][ T6910] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1053.712455][ T6926] netlink: 124 bytes leftover after parsing attributes in process `syz.8.15495'. [ 1053.792350][ T6910] EXT4-fs warning (device loop7): verify_group_input:165: Last group not full [ 1053.883549][T30858] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 1054.323145][T30858] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1054.351893][T30858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1054.380292][T30858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.428058][T30858] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1054.517266][T30858] usb 4-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 1054.547537][T30858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.583783][T30858] usb 4-1: config 0 descriptor?? [ 1054.756363][ T6955] loop8: detected capacity change from 0 to 1764 [ 1054.809662][ T6961] loop7: detected capacity change from 0 to 512 [ 1054.919163][ T6961] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.15509: Invalid inode bitmap blk 4 in block_group 0 [ 1054.960478][ T6961] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 1055.095143][T30858] hid (null): unknown global tag 0xe [ 1055.100552][T30858] hid (null): unknown global tag 0xc [ 1055.118818][T30858] hid-generic 0003:05AC:0323.0030: ignoring exceeding usage max [ 1055.145528][T30858] hid-generic 0003:05AC:0323.0030: unknown global tag 0xe [ 1055.186056][T30858] hid-generic 0003:05AC:0323.0030: item 0 0 1 14 parsing failed [ 1055.214894][T30858] hid-generic: probe of 0003:05AC:0323.0030 failed with error -22 [ 1055.373872][T30858] usb 4-1: USB disconnect, device number 92 [ 1055.606925][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15519'. [ 1055.656629][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15519'. [ 1055.707589][ T6984] netlink: 'syz.7.15519': attribute type 1 has an invalid length. [ 1055.760619][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15519'. [ 1056.395441][ T7012] tipc: Cannot configure node identity twice [ 1057.274409][ T7050] netlink: 'syz.1.15553': attribute type 2 has an invalid length. [ 1057.364341][T14378] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1057.479701][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15557'. [ 1057.609503][T14378] usb 4-1: Using ep0 maxpacket: 8 [ 1057.734345][T14378] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1057.811518][T14378] usb 4-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 1057.852017][T14378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.884690][T14378] usb 4-1: config 0 descriptor?? [ 1057.931989][ T7072] loop7: detected capacity change from 0 to 1024 [ 1058.275385][ T7084] loop7: detected capacity change from 0 to 512 [ 1058.397613][T14378] wacom 0003:056A:0018.0031: unknown main item tag 0x0 [ 1058.414527][ T7084] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1058.437758][T14378] wacom 0003:056A:0018.0031: unknown main item tag 0x0 [ 1058.453796][T14378] wacom 0003:056A:0018.0031: unknown main item tag 0x0 [ 1058.480395][T14378] wacom 0003:056A:0018.0031: unknown main item tag 0x0 [ 1058.568505][ T7084] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1058.597723][T14378] wacom 0003:056A:0018.0031: unknown main item tag 0x0 [ 1058.642343][T14378] wacom 0003:056A:0018.0031: unknown main item tag 0x0 [ 1058.653397][ T7084] Quota error (device loop7): write_blk: dquota write failed [ 1058.681193][ T7084] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 1058.711491][ T7084] Quota error (device loop7): write_blk: dquota write failed [ 1058.712365][T14378] wacom 0003:056A:0018.0031: unknown main item tag 0x0 [ 1058.731848][ T7084] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1058.790714][T14378] wacom 0003:056A:0018.0031: Unknown device_type for 'HID 056a:0018'. Assuming pen. [ 1058.795315][ T7084] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.15568: Failed to acquire dquot type 1 [ 1058.879556][T14378] wacom 0003:056A:0018.0031: hidraw0: USB HID v0.00 Device [HID 056a:0018] on usb-dummy_hcd.3-1/input0 [ 1058.907420][ T7084] EXT4-fs (loop7): 1 truncate cleaned up [ 1058.934963][ T7084] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,noblock_validity,noquota,nouid32,norecovery,abort,max_batch_time=0x0000000000000005,nouid32,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 1058.972098][T14378] input: Wacom BambooFun 6x8 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0018.0031/input/input83 [ 1059.030939][ T7105] tipc: Started in network mode [ 1059.073098][ T7105] tipc: Node identity , cluster identity 4711 [ 1059.113873][T14378] usb 4-1: USB disconnect, device number 93 [ 1059.206238][ T7084] Quota error (device loop7): write_blk: dquota write failed [ 1059.280146][ T7084] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1059.329197][ T7118] program syz.8.15593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1059.356740][ T7084] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.15568: Failed to acquire dquot type 1 [ 1059.443207][ T7112] fido_id[7112]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1061.184542][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15613'. [ 1061.554013][ T7179] loop7: detected capacity change from 0 to 4096 [ 1061.701630][ T7188] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1061.784413][ T7179] NILFS (loop7): nilfs_palloc_freev (ino=3): entry number 127 already freed [ 1061.867491][ T7179] NILFS (loop7): nilfs_sufile_do_free: segment 9 is already clean [ 1063.201390][ T7227] netlink: 20 bytes leftover after parsing attributes in process `syz.7.15648'. [ 1063.283185][ T7227] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15648'. [ 1064.155914][ T7259] loop7: detected capacity change from 0 to 512 [ 1064.227919][ T7259] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1064.289528][ T7267] loop8: detected capacity change from 0 to 512 [ 1064.296194][T30878] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1064.314805][ T7259] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 1064.364946][ T7267] EXT4-fs (loop8): Ignoring removed orlov option [ 1064.415151][ T7267] EXT4-fs (loop8): Ignoring removed oldalloc option [ 1064.465196][ T7259] EXT4-fs (loop7): 1 truncate cleaned up [ 1064.470910][ T7259] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,lazytime,quota,,errors=continue. Quota mode: writeback. [ 1064.502840][ T7267] EXT4-fs error (device loop8): ext4_orphan_get:1406: inode #15: comm syz.8.15655: iget: bad extended attribute block 1 [ 1064.554317][ T7267] EXT4-fs error (device loop8): ext4_orphan_get:1411: comm syz.8.15655: couldn't read orphan inode 15 (err -117) [ 1064.568120][ T7267] EXT4-fs (loop8): mounted filesystem without journal. Opts: orlov,resgid=0x000000000000ee00,oldalloc,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 1064.813296][T30878] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1064.822168][T30878] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.872978][T30878] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1064.939478][T30878] usb 2-1: config 1 has no interface number 0 [ 1064.969875][T30878] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1065.036151][T30878] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1065.229818][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15665'. [ 1065.295114][T30878] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1065.320889][T30878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.349394][T30878] usb 2-1: Product: syz [ 1065.364450][T30878] usb 2-1: Manufacturer: syz [ 1065.369294][T30878] usb 2-1: SerialNumber: syz [ 1065.454282][T30878] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1065.476326][T30878] cdc_ncm 2-1:1.1: bind() failure [ 1065.690169][T19098] usb 2-1: USB disconnect, device number 99 [ 1065.807280][ T7309] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15675'. [ 1066.385071][ T7331] netlink: 'syz.1.15687': attribute type 12 has an invalid length. [ 1066.427310][ T7331] netlink: 'syz.1.15687': attribute type 29 has an invalid length. [ 1066.441597][ T7331] netlink: 148 bytes leftover after parsing attributes in process `syz.1.15687'. [ 1066.467758][ T7337] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15690'. [ 1066.476915][ T7331] netlink: 59 bytes leftover after parsing attributes in process `syz.1.15687'. [ 1066.885328][ T7350] ip_tables: iptables: counters copy to user failed while replacing table [ 1067.222487][ T7360] loop7: detected capacity change from 0 to 4096 [ 1067.347158][ T7371] sctp: [Deprecated]: syz.3.15706 (pid 7371) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1067.347158][ T7371] Use struct sctp_sack_info instead [ 1067.413996][ T7373] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1067.451212][ T7360] NILFS (loop7): nilfs_palloc_freev (ino=3): entry number 127 already freed [ 1067.493932][ T7360] NILFS (loop7): nilfs_palloc_freev (ino=3): entry number 226 already freed [ 1067.524560][ T7360] NILFS (loop7): nilfs_sufile_do_free: segment 9 is already clean [ 1067.546001][ T7377] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15708'. [ 1067.784523][ T7385] loop7: detected capacity change from 0 to 64 [ 1067.903594][T30878] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1067.914117][ T26] audit: type=1800 audit(1788476602.787:45): pid=7385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.15710" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 1068.202922][T30878] usb 4-1: Using ep0 maxpacket: 32 [ 1068.354781][T30878] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1068.372872][T30878] usb 4-1: config 0 has no interface number 0 [ 1068.606089][T30878] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1068.633579][ T7406] netlink: 'syz.1.15722': attribute type 15 has an invalid length. [ 1068.641798][T30878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.672010][T30878] usb 4-1: Product: syz [ 1068.677822][ T7406] netlink: 'syz.1.15722': attribute type 7 has an invalid length. [ 1068.686077][T30878] usb 4-1: Manufacturer: syz [ 1068.706053][T30878] usb 4-1: SerialNumber: syz [ 1068.721501][ T7406] netlink: 52 bytes leftover after parsing attributes in process `syz.1.15722'. [ 1068.734102][T30878] usb 4-1: config 0 descriptor?? [ 1068.791466][T30878] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1068.996876][T30878] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1069.040537][T30878] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1069.471301][ T7421] loop7: detected capacity change from 0 to 1024 [ 1069.588353][T30876] usb 4-1: USB disconnect, device number 94 [ 1069.594529][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1069.609397][ T7421] attempt to access beyond end of device [ 1069.609397][ T7421] loop7: rw=0, want=393348, limit=1024 [ 1069.625295][T30876] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1069.672454][ T7421] attempt to access beyond end of device [ 1069.672454][ T7421] loop7: rw=2049, want=393222, limit=1024 [ 1069.690581][T30876] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1069.714319][ T7425] comedi comedi3: das16m1: I/O port conflict (0x500,8) [ 1069.732121][ T7421] Buffer I/O error on dev loop7, logical block 196610, lost async page write [ 1069.763228][T30876] quatech2 4-1:0.51: device disconnected [ 1069.833979][ T7421] attempt to access beyond end of device [ 1069.833979][ T7421] loop7: rw=2049, want=393342, limit=1024 [ 1069.987980][ T7404] loop8: detected capacity change from 0 to 40427 [ 1070.082111][ T7404] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1070.137811][ T7404] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1070.223171][ T7404] F2FS-fs (loop8): invalid crc value [ 1070.237297][T14378] ODEBUG: Out of memory. ODEBUG disabled [ 1070.290527][ T7404] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1070.620210][ T7404] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1070.637690][ T7404] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1070.824116][ T5510] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1071.034839][ T7468] netlink: 72 bytes leftover after parsing attributes in process `syz.0.15751'. [ 1071.135724][ T7462] loop7: detected capacity change from 0 to 4096 [ 1071.184562][ T5510] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.207748][ T5510] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1071.249472][ T7462] ntfs3: loop7: ino=3, Correct links count -> 2. [ 1071.283866][ T5510] usb 2-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00 [ 1071.321047][ T5510] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.756148][ T7487] netlink: 'syz.8.15748': attribute type 4 has an invalid length. [ 1071.844080][ T5510] dvb_usb_af9035 2-1:1.0: command=00 checksum mismatch (0000 != fdfc) [ 1071.895258][ T5510] dvb_usb_af9035: probe of 2-1:1.0 failed with error -5 [ 1071.942453][T30876] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1072.044080][ T5510] usb 2-1: USB disconnect, device number 100 [ 1072.233470][T30876] usb 4-1: Using ep0 maxpacket: 32 [ 1072.330953][ T7504] sock: sock_set_timeout: `syz.0.15766' (pid 7504) tries to set negative timeout [ 1072.373167][T30876] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1072.392546][T30876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.403188][T30876] usb 4-1: config 0 descriptor?? [ 1072.482189][T30876] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1072.893215][T30876] gspca_sunplus: reg_w_riv err -71 [ 1072.916331][T30876] sunplus: probe of 4-1:0.0 failed with error -71 [ 1072.969712][T30876] usb 4-1: USB disconnect, device number 95 [ 1073.108905][ T7524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15776'. [ 1073.153698][ T7526] hugetlbfs: Bad value 'e' for mount option 'nr_inodes' [ 1073.153698][ T7526] [ 1073.180882][ T7492] loop8: detected capacity change from 0 to 32768 [ 1073.453667][ T7492] XFS (loop8): Mounting V5 Filesystem [ 1073.752072][ T7492] XFS (loop8): Ending clean mount [ 1073.778927][ T7492] XFS (loop8): Quotacheck needed: Please wait. [ 1074.048906][ T7492] XFS (loop8): Quotacheck: Done. [ 1074.097033][ T7558] netlink: 79 bytes leftover after parsing attributes in process `syz.7.15784'. [ 1074.255082][ T1643] XFS (loop8): Unmounting Filesystem [ 1075.455399][ T7597] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 1075.491727][ T7598] loop7: detected capacity change from 0 to 512 [ 1075.524554][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15810'. [ 1075.535061][ T7597] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1075.566088][ T7597] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 1075.720430][ T7598] EXT4-fs error (device loop7): ext4_orphan_get:1406: inode #15: comm syz.7.15821: inode has both inline data and extents flags [ 1075.761121][ T7609] netlink: 'syz.8.15812': attribute type 19 has an invalid length. [ 1075.855533][ T7598] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.15821: couldn't read orphan inode 15 (err -117) [ 1075.949671][ T7598] EXT4-fs (loop7): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 1076.909645][ T7649] loop7: detected capacity change from 0 to 128 [ 1077.049906][ T7651] vivid-002: disconnect [ 1077.093915][ T7650] vivid-002: reconnect [ 1077.101346][ T7653] netlink: 'syz.8.15835': attribute type 29 has an invalid length. [ 1077.140824][ T7653] netlink: 'syz.8.15835': attribute type 29 has an invalid length. [ 1077.234798][ T7653] netlink: 'syz.8.15835': attribute type 29 has an invalid length. [ 1078.142265][ T7675] loop8: detected capacity change from 0 to 128 [ 1078.244979][ T7675] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1078.350202][ T7675] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1078.356081][ T7683] netlink: 'syz.3.15847': attribute type 2 has an invalid length. [ 1078.455179][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15848'. [ 1078.684280][ T7694] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 1078.684280][ T7694] [ 1078.735230][ T7695] loop7: detected capacity change from 0 to 1024 [ 1078.964857][ T7695] EXT4-fs (loop7): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: none. [ 1079.015966][ T7695] EXT4-fs error (device loop7): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.7.15854: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 1079.080909][ T7708] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set [ 1079.193636][ T7695] EXT4-fs error (device loop7) in ext4_delete_entry:2800: Corrupt filesystem [ 1079.231736][ T7695] EXT4-fs warning (device loop7): ext4_rename_delete:3792: inode #2: comm syz.7.15854: Deleting old file: nlink 1, error=-117 [ 1079.321909][T30876] kernel read not supported for file /dsp (pid: 30876 comm: kworker/1:10) [ 1079.807528][ T7738] batman_adv: batadv0: Adding interface: macvlan0 [ 1079.827806][ T7738] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1079.942912][ T7707] loop8: detected capacity change from 0 to 32768 [ 1079.996212][ T7738] batman_adv: batadv0: Interface activated: macvlan0 [ 1080.156987][ T7707] XFS (loop8): Mounting V5 Filesystem [ 1080.461487][ T7707] XFS (loop8): Ending clean mount [ 1080.568889][ T7762] overlayfs: unrecognized mount option "\t access off=176 size=4 [ 1080.568889][ T7762] verification time 264 usec [ 1080.568889][ T7762] stack depth 0 [ 1080.568889][ T7762] processed 2 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0 [ 1080.568889][ T7762] " or missing value [ 1080.610409][ T1643] XFS (loop8): Unmounting Filesystem [ 1081.099940][ T7776] lo speed is unknown, defaulting to 1000 [ 1081.248179][ T7742] loop7: detected capacity change from 0 to 32768 [ 1081.314795][ T7742] [ 1081.314795][ T7742] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1081.314795][ T7742] [ 1081.446644][ T155] ERROR: (device loop7): diWrite: ixpxd invalid [ 1081.446644][ T155] [ 1081.464156][ T7778] loop8: detected capacity change from 0 to 256 [ 1081.467974][ T155] ERROR: (device loop7): remounting filesystem as read-only [ 1081.491618][ T155] ERROR: (device loop7): txCommit: [ 1081.491618][ T155] [ 1081.547407][ T155] jfs_write_inode: jfs_commit_inode failed! [ 1081.586443][T32428] [ 1081.586443][T32428] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1081.586443][T32428] [ 1081.623012][T32428] [ 1081.623012][T32428] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1081.623012][T32428] [ 1081.864376][ T7783] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15900'. [ 1083.049037][ T7819] loop7: detected capacity change from 0 to 1024 [ 1083.122720][ T7819] hfsplus: request for non-existent node 100663296 in B*Tree [ 1083.152246][ T7819] hfsplus: request for non-existent node 100663296 in B*Tree [ 1083.202410][ T7819] hfsplus: failed to load root directory [ 1084.441079][ T7849] loop8: detected capacity change from 0 to 1024 [ 1084.500330][T30860] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1084.579453][ T7849] hfsplus: request for non-existent node 100663296 in B*Tree [ 1084.603965][ T7849] hfsplus: request for non-existent node 100663296 in B*Tree [ 1084.625330][ T7849] hfsplus: failed to load root directory [ 1084.683523][ T4173] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 1084.793337][T30860] usb 4-1: Using ep0 maxpacket: 8 [ 1084.955233][T30860] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1084.996799][T30860] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1085.025178][T30860] usb 4-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 1085.044226][ T4173] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1085.058869][T30860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.073929][ T4173] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.115902][ T4173] usb 8-1: config 0 descriptor?? [ 1085.122472][T30860] usb 4-1: config 0 descriptor?? [ 1085.156902][ T7859] lo speed is unknown, defaulting to 1000 [ 1085.158547][ T4173] cp210x 8-1:0.0: cp210x converter detected [ 1085.590184][ T4173] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1085.655565][T30860] hid-alps 0003:044E:1215.0032: unknown main item tag 0x0 [ 1085.683162][T30860] hid-alps 0003:044E:1215.0032: unknown main item tag 0x0 [ 1085.690547][T30860] hid-alps 0003:044E:1215.0032: unknown main item tag 0x0 [ 1085.765533][T30860] hid-alps 0003:044E:1215.0032: unknown main item tag 0x0 [ 1085.783058][T30860] hid-alps 0003:044E:1215.0032: unknown main item tag 0x0 [ 1085.790362][T30860] hid-alps 0003:044E:1215.0032: item fetching failed at offset 32/40 [ 1085.811205][ T4173] usb 8-1: USB disconnect, device number 13 [ 1085.839510][T30860] hid-alps 0003:044E:1215.0032: parse failed [ 1085.852867][T30860] hid-alps: probe of 0003:044E:1215.0032 failed with error -22 [ 1085.855426][ T4173] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1085.917914][T30860] usb 4-1: USB disconnect, device number 96 [ 1086.043910][ T4173] cp210x 8-1:0.0: device disconnected [ 1086.247847][ T7879] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1087.150315][ T7902] loop8: detected capacity change from 0 to 4096 [ 1087.163879][ T7903] loop7: detected capacity change from 0 to 4096 [ 1087.327001][ T7902] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 1087.418042][ T7903] ntfs: (device loop7): parse_options(): NLS character set is­Ü]9-5 not found. Using previous one cp866. [ 1087.509570][ T7903] ntfs: (device loop7): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1087.597682][ T7903] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1087.675033][ T7903] ntfs: (device loop7): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1087.742381][ T7903] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1087.889853][ T7903] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1087.978718][ T7903] ntfs: volume version 3.1. [ 1087.980827][ T7903] ntfs: (device loop7): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1087.981301][ T7903] ntfs: (device loop7): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1087.981865][ T7903] ntfs: (device loop7): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1087.981890][ T7903] ntfs: (device loop7): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1088.347938][ T7922] loop8: detected capacity change from 0 to 4096 [ 1088.390845][ T7922] EXT4-fs (loop8): Journaled quota options ignored when QUOTA feature is enabled [ 1088.438498][ T7922] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled [ 1088.584575][ T7922] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a80ec118, mo2=0002] [ 1088.688253][ T7922] System zones: 0-5 [ 1088.784213][ T7922] EXT4-fs (loop8): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,grpjquota=./file1,noload,init_itable=0x000000000a2a41b4,nodiscard,jqfmt=vfsv1,debug,journal_ioprio=0x0000000000000000,usrquota,dioread_lock,,errors=continue. Quota mode: writeback. [ 1088.965399][ T7922] EXT4-fs error (device loop8): ext4_iget_extra_inode:4573: inode #15: comm syz.8.15957: corrupted in-inode xattr [ 1089.865528][ T7969] lo speed is unknown, defaulting to 1000 [ 1091.678406][ T7994] loop7: detected capacity change from 0 to 4096 [ 1091.984082][ T8005] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1093.822203][ T8021] netlink: 'syz.0.15998': attribute type 1 has an invalid length. [ 1093.876292][ T8021] netlink: 'syz.0.15998': attribute type 2 has an invalid length. [ 1094.625372][ T8035] netlink: 9 bytes leftover after parsing attributes in process `syz.1.16005'. [ 1094.692820][ T8035] device gretap0 entered promiscuous mode [ 1094.760474][ T8037] netlink: 5 bytes leftover after parsing attributes in process `syz.1.16005'. [ 1094.846546][ T8037] 0ªî{X¹¦: renamed from gretap0 [ 1094.883477][ T8037] device 30ªî{X¹¦ left promiscuous mode [ 1094.933711][ T8037] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1095.512886][ T8044] loop8: detected capacity change from 0 to 64 [ 1095.595117][ T8033] loop7: detected capacity change from 0 to 32768 [ 1096.517711][ T8068] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1096.658529][ T8072] loop7: detected capacity change from 0 to 256 [ 1097.150483][ T8076] loop8: detected capacity change from 0 to 4096 [ 1097.635246][ T8094] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1097.987247][ T8100] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1098.475628][ T8108] loop7: detected capacity change from 0 to 4096 [ 1098.603639][ T8108] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 1098.834159][T32428] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22. [ 1099.054521][ T4173] Bluetooth: hci3: command 0x0405 tx timeout [ 1099.640266][ T8143] netlink: 16 bytes leftover after parsing attributes in process `syz.7.16053'. [ 1099.944489][ T8152] tipc: Enabling of bearer rejected, failed to enable media [ 1100.197661][ T8154] loop7: detected capacity change from 0 to 4096 [ 1100.426080][ T8154] __ntfs_error: 6 callbacks suppressed [ 1100.426099][ T8154] ntfs: (device loop7): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1100.525210][ T8154] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1100.612072][ T8154] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1100.755061][ T8173] ip_tables: iptables: counters copy to user failed while replacing table [ 1100.794233][ T8154] ntfs: volume version 3.1. [ 1100.816026][ T8154] ntfs: (device loop7): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 1100.888862][ T8154] ntfs: (device loop7): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 1100.945634][ T8181] UHID_CREATE from different security context by process 6758 (syz.3.16069), this is not allowed. [ 1101.004123][ T8154] ntfs: (device loop7): load_and_init_quota(): Failed to load $Quota/$Q index. [ 1101.094105][ T8154] ntfs: (device loop7): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 1101.264536][ T8154] ntfs: (device loop7): ntfs_read_locked_inode(): Inode is an extent inode! [ 1101.317336][ T8154] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x44 as bad. Run chkdsk. [ 1101.683160][ T8207] trusted_key: encrypted_key: master key parameter is missing [ 1101.959984][ T8215] loop8: detected capacity change from 0 to 2048 [ 1102.353957][ T8215] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1103.162219][ T8252] tipc: Started in network mode [ 1103.245930][ T8252] tipc: Node identity 000000003a0000000000000000000001, cluster identity 4711 [ 1103.334018][ T8252] tipc: Enabling of bearer rejected, failed to enable media [ 1104.068315][ T8284] netlink: 52 bytes leftover after parsing attributes in process `syz.3.16107'. [ 1104.084919][ T8286] sp0: Synchronizing with TNC [ 1104.231927][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16109'. [ 1104.296383][ T8290] device erspan0 entered promiscuous mode [ 1104.302706][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16110'. [ 1104.390556][ T8290] device erspan0 left promiscuous mode [ 1105.102971][T30878] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1105.131133][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16119'. [ 1105.182222][ T8312] block nbd0: Unsupported socket: shutdown callout must be supported. [ 1105.475050][ T8295] loop7: detected capacity change from 0 to 32768 [ 1105.562418][ T8295] JBD2: Ignoring recovery information on journal [ 1105.574522][T30878] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1105.673995][T30878] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1105.681635][T30878] usb 2-1: can't read configurations, error -71 [ 1105.703313][ T8295] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1105.871866][T32428] ocfs2: Unmounting device (7,7) on (node local) [ 1106.330889][ T8330] PM: Enabling pm_trace changes system date and time during resume. [ 1106.330889][ T8330] PM: Correct system time has to be restored manually after resume. [ 1106.954079][ T4235] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 1106.980428][ T8346] loop8: detected capacity change from 0 to 128 [ 1107.067176][ T26] audit: type=1800 audit(1788476641.937:46): pid=8346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.16134" name="file1" dev="loop8" ino=1048794 res=0 errno=0 [ 1107.113804][ T8346] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1107.153018][ T8346] FAT-fs (loop8): Filesystem has been set read-only [ 1107.324985][ T4235] usb 8-1: config 0 interface 0 altsetting 192 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1107.340872][ T4235] usb 8-1: config 0 interface 0 altsetting 192 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1107.379812][ T4235] usb 8-1: config 0 interface 0 altsetting 192 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1107.450279][ T4235] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1107.516428][ T4235] usb 8-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 1107.552411][ T4235] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.588315][ T4235] usb 8-1: config 0 descriptor?? [ 1107.634441][ T8340] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1108.101323][ T4235] input: HID 046d:ca04 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:046D:CA04.0033/input/input86 [ 1108.379844][ T4235] logitech 0003:046D:CA04.0033: input,hidraw0: USB HID v0.00 Joystick [HID 046d:ca04] on usb-dummy_hcd.7-1/input0 [ 1108.420399][ T4235] logitech 0003:046D:CA04.0033: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 1108.576955][ T4235] usb 8-1: USB disconnect, device number 14 [ 1108.700947][ T8388] fido_id[8388]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1109.270197][ T8412] netlink: 'syz.1.16157': attribute type 1 has an invalid length. [ 1109.358056][ T8414] loop7: detected capacity change from 0 to 2048 [ 1109.494617][ T8414] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1109.561769][ T8414] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1109.592876][T30876] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1109.983146][T30876] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1110.017394][T30876] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 19 [ 1110.164468][T30876] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1110.182781][T30876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1110.211396][T30876] usb 4-1: SerialNumber: syz [ 1110.294594][T30876] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1110.317467][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16167'. [ 1110.371518][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16167'. [ 1110.404286][ T8436] netlink: 'syz.1.16167': attribute type 15 has an invalid length. [ 1110.517601][T30876] usb 4-1: USB disconnect, device number 97 [ 1111.061313][ T8456] loop8: detected capacity change from 0 to 4096 [ 1111.136316][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1111.235259][ T8456] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 1111.311878][ T8456] ntfs3: loop8: Failed to load $Extend. [ 1111.322949][T30878] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1111.591595][ T8470] Bluetooth: hci0: unsupported parameter 5161 [ 1111.605886][ T8470] Bluetooth: hci0: unsupported parameter 8192 [ 1111.631614][ T8470] Bluetooth: hci0: unsupported parameter 5161 [ 1111.662954][ T8470] Bluetooth: hci0: unsupported parameter 8192 [ 1111.842980][T30878] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.862001][ T8473] loop8: detected capacity change from 0 to 512 [ 1111.882790][T30878] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1111.932792][T30878] usb 8-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1111.972482][T30878] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.990930][ T8473] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1112.012631][T30878] usb 8-1: config 0 descriptor?? [ 1112.048670][ T8473] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 1112.168214][ T8473] EXT4-fs (loop8): Errors on filesystem, clearing orphan list. [ 1112.204236][ T8473] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,auto_da_alloc,prjquota,noauto_da_alloc,quota,usrjquota=jqfmt=vfsv1,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 1112.442620][ T8473] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 1112.585894][ T8494] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 1112.733443][T30878] hid-led: probe of 0003:27B8:01ED.0034 failed with error -71 [ 1112.793005][T30878] usb 8-1: USB disconnect, device number 15 [ 1113.043053][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16196'. [ 1113.066444][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16196'. [ 1113.366814][ T8510] loop8: detected capacity change from 0 to 256 [ 1113.539497][ T8510] FAT-fs (loop8): Directory bread(block 64) failed [ 1113.558914][ T8510] FAT-fs (loop8): Directory bread(block 65) failed [ 1113.584982][ T8510] FAT-fs (loop8): Directory bread(block 66) failed [ 1113.610137][ T8510] FAT-fs (loop8): Directory bread(block 67) failed [ 1113.687460][ T8510] FAT-fs (loop8): Directory bread(block 68) failed [ 1113.759558][ T8510] FAT-fs (loop8): Directory bread(block 69) failed [ 1113.783880][ T8510] FAT-fs (loop8): Directory bread(block 70) failed [ 1113.810921][ T8510] FAT-fs (loop8): Directory bread(block 71) failed [ 1113.882611][ T8510] FAT-fs (loop8): Directory bread(block 72) failed [ 1113.920791][ T8510] FAT-fs (loop8): Directory bread(block 73) failed [ 1114.491744][ T8552] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 1114.962308][ T8568] netlink: 'syz.7.16226': attribute type 10 has an invalid length. [ 1114.975456][ T8566] loop8: detected capacity change from 0 to 4096 [ 1115.115601][ T8568] team0: Device ipvlan1 failed to register rx_handler [ 1115.159921][ T8566] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 1115.208198][ T8575] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1115.642240][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16232'. [ 1115.671597][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16233'. [ 1115.778354][ T8528] Invalid option length (224) for dns_resolver key [ 1117.122255][ T8638] loop8: detected capacity change from 0 to 512 [ 1117.143276][T30878] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 1117.497260][ T8603] loop7: detected capacity change from 0 to 32768 [ 1117.531585][ T8650] binder: 8649:8650 ioctl c0306201 2000000004c0 returned -14 [ 1117.622142][T30878] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1117.645380][ T8603] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.16241 (8603) [ 1117.652827][T30878] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 62535, setting to 64 [ 1117.704133][T30878] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1117.747297][ T8603] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 1117.797930][ T8603] BTRFS info (device loop7): setting nodatasum [ 1117.823957][ T8603] BTRFS info (device loop7): force zlib compression, level 3 [ 1117.832815][T30878] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06 [ 1117.852698][T30878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1117.872430][ T8603] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1117.911061][T30878] usb 2-1: SerialNumber: syz [ 1117.930535][ T8603] BTRFS info (device loop7): use lzo compression, level 0 [ 1117.949986][T30878] usb 2-1: config 0 descriptor?? [ 1117.968850][ T8603] BTRFS info (device loop7): turning on flush-on-commit [ 1118.006357][ T8624] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1118.034795][ T8603] BTRFS info (device loop7): enabling auto defrag [ 1118.041313][ T8603] BTRFS info (device loop7): max_inline at 4096 [ 1118.087177][ T8603] BTRFS info (device loop7): using free space tree [ 1118.127805][ T8603] BTRFS info (device loop7): has skinny extents [ 1118.255279][ T8624] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1118.277062][T30878] input: USB Synaptics Device 06cb:0006 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input87 [ 1118.507190][ T8648] loop8: detected capacity change from 0 to 40427 [ 1118.533882][T30878] usb 2-1: USB disconnect, device number 103 [ 1118.621106][ T8648] F2FS-fs (loop8): invalid crc value [ 1118.663869][ T8603] BTRFS info (device loop7): enabling ssd optimizations [ 1118.672594][ T8648] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1118.992878][ T8648] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1119.152147][T23155] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop7 scanned by udevd (23155) [ 1120.076325][ T1643] attempt to access beyond end of device [ 1120.076325][ T1643] loop8: rw=2049, want=45104, limit=40427 [ 1120.453181][ T8718] loop7: detected capacity change from 0 to 8 [ 1120.604462][ T8722] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16288'. [ 1120.673397][ T8718] SQUASHFS error: Unable to read directory block [629:46] [ 1121.399694][ T8747] netlink: 100 bytes leftover after parsing attributes in process `syz.8.16298'. [ 1122.690520][ T8750] loop7: detected capacity change from 0 to 32768 [ 1122.828337][T31333] Bluetooth: hci3: command 0x0405 tx timeout [ 1123.191147][ T8805] vivid-001: disconnect [ 1123.234209][ T8804] vivid-001: reconnect [ 1123.982915][T30880] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1124.126143][ T13] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 1124.272861][T30880] usb 4-1: Using ep0 maxpacket: 16 [ 1124.403039][T30880] usb 4-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 1124.424425][T30880] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1124.458056][T30880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1124.474030][T30880] usb 4-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 1124.502775][T30880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.506691][ T13] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1124.525218][T30880] usb 4-1: config 0 descriptor?? [ 1124.537923][ T13] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1124.581414][ T13] usb 8-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1124.608847][ T13] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.637612][ T13] usb 8-1: config 0 descriptor?? [ 1124.998868][T30880] uclogic 0003:2179:0077.0035: ignoring exceeding usage max [ 1125.026667][T30880] uclogic 0003:2179:0077.0035: No inputs registered, leaving [ 1125.083237][T30880] uclogic 0003:2179:0077.0035: hidraw0: USB HID v0.05 Device [HID 2179:0077] on usb-dummy_hcd.3-1/input0 [ 1125.116700][ T13] isku 0003:1E7D:319C.0036: item fetching failed at offset 6/7 [ 1125.174646][ T13] isku 0003:1E7D:319C.0036: parse failed [ 1125.194147][ T13] isku: probe of 0003:1E7D:319C.0036 failed with error -22 [ 1125.297108][T30880] usb 4-1: USB disconnect, device number 98 [ 1125.361953][ T13] usb 8-1: USB disconnect, device number 16 [ 1125.420231][ T8835] fido_id[8835]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1125.468928][ T26] audit: type=1326 audit(1788476660.327:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.1.16343" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f076968f159 code=0x0 [ 1126.039340][ T8854] loop7: detected capacity change from 0 to 128 [ 1126.338612][ T8862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1126.467522][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16357'. [ 1126.788476][T31333] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1126.844659][ T26] audit: type=1326 audit(1788476661.717:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.0.16363" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86f21bc159 code=0x0 [ 1126.874126][T31333] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1127.019194][ T8880] fido_id[8880]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1127.274115][ T8890] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16367'. [ 1127.298916][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16369'. [ 1127.385798][ T8895] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1127.392299][ T8895] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1127.457217][ T8895] comedi comedi3: 8255: I/O port conflict (0x8000,4) [ 1127.489953][ T8895] comedi comedi3: 8255: I/O port conflict (0xffff,4) [ 1127.512578][ T8899] loop8: detected capacity change from 0 to 1024 [ 1127.523853][ T8895] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1127.540698][ T8895] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1127.564079][ T8895] comedi comedi3: 8255: I/O port conflict (0x54c6cff3,4) [ 1127.591105][ T8895] comedi comedi3: 8255: I/O port conflict (0xfa,4) [ 1127.630336][ T8895] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 1127.667985][ T8895] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1127.694042][ T8895] comedi comedi3: 8255: I/O port conflict (0xfffffffffbfffff7,4) [ 1127.735209][ T8895] comedi comedi3: 8255: I/O port conflict (0x400001,4) [ 1127.742237][ T8895] comedi comedi3: 8255: I/O port conflict (0x10000006,4) [ 1127.769376][ T144] hfsplus: bad catalog file entry [ 1127.960769][ T8911] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.16378' resets device [ 1127.974187][T30880] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1128.059511][ T8916] loop8: detected capacity change from 0 to 256 [ 1128.089908][ T8916] exfat: Deprecated parameter 'utf8' [ 1128.135687][ T8916] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1128.196604][ T8916] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 1128.310322][T30880] usb 4-1: Using ep0 maxpacket: 32 [ 1128.369209][ T8926] binder: 8925:8926 ioctl 40046205 0 returned -22 [ 1128.535444][ T8932] loop8: detected capacity change from 0 to 764 [ 1128.614138][ T1111] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1128.643027][T30880] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1128.652134][T30880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.699433][T30880] usb 4-1: Product: syz [ 1128.703718][T30880] usb 4-1: Manufacturer: syz [ 1128.754250][T30880] usb 4-1: SerialNumber: syz [ 1128.754662][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16392'. [ 1128.788051][ T8940] bridge_slave_0: default FDB implementation only supports local addresses [ 1128.806721][T30880] usb 4-1: config 0 descriptor?? [ 1128.861652][T30880] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1128.866262][ T1111] usb 8-1: Using ep0 maxpacket: 32 [ 1128.893843][T30880] dvb-usb: bulk message failed: -22 (4/0) [ 1128.899662][T30880] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1128.934504][T30880] dvb-usb: bulk message failed: -22 (5/0) [ 1128.940319][T30880] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1128.961442][ T8946] comedi: No check for data length of config insn id 1986356271 is implemented [ 1128.980404][ T8946] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1129.006875][T30880] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1129.017723][ T1111] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1129.026387][ T8946] comedi: Assuming n=65536 is correct [ 1129.034386][ T1111] usb 8-1: config 0 has no interface number 0 [ 1129.103867][T30880] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1129.111944][T30880] usb 4-1: media controller created [ 1129.182629][T30880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1129.194201][ T1111] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1129.216918][ T1111] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.248480][ T1111] usb 8-1: Product: syz [ 1129.261550][ T1111] usb 8-1: Manufacturer: syz [ 1129.291849][ T1111] usb 8-1: SerialNumber: syz [ 1129.302992][T30880] usb 4-1: selecting invalid altsetting 3 [ 1129.320901][ T1111] usb 8-1: config 0 descriptor?? [ 1129.332770][T30880] ttusb2: set interface to alts=3 failed [ 1129.405310][ T1111] smsc95xx v2.0.0 [ 1129.461952][T30880] DVB: Unable to find symbol tda10086_attach() [ 1129.470674][T30880] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1129.590453][T30880] dvb-usb: bulk message failed: -22 (4/0) [ 1129.596349][T30880] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1129.672104][T30880] dvb-usb: bulk message failed: -22 (5/0) [ 1129.708403][T30880] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1129.759041][T30880] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1129.852819][T30880] usb 4-1: USB disconnect, device number 99 [ 1129.930780][T30880] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1130.084001][ T1111] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1130.128919][ T1111] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1130.190173][ T1111] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1130.231339][ T1111] smsc95xx: probe of 8-1:0.67 failed with error -71 [ 1130.290852][ T1111] usb 8-1: USB disconnect, device number 17 [ 1131.219287][ T1111] kernel write not supported for file /uhid (pid: 1111 comm: kworker/0:2) [ 1131.461422][ T9034] netlink: 7 bytes leftover after parsing attributes in process `syz.8.16435'. [ 1131.578578][ T9039] netlink: 64 bytes leftover after parsing attributes in process `syz.1.16437'. [ 1131.674087][ T1111] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1131.843057][ T9041] loop8: detected capacity change from 0 to 4096 [ 1131.908564][ T9041] ntfs3: loop8: Different NTFS' sector size (2048) and media sector size (512) [ 1131.916144][ T1111] usb 8-1: Using ep0 maxpacket: 32 [ 1132.050480][ T1111] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.111308][ T9041] ntfs3: loop8: Failed to load root. [ 1132.214307][ T1111] usb 8-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 1132.231051][ T1111] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1132.271159][ T1111] usb 8-1: Product: syz [ 1132.301766][ T1111] usb 8-1: Manufacturer: syz [ 1132.331790][ T1111] usb 8-1: SerialNumber: syz [ 1132.415318][ T1111] asix: probe of 8-1:2.0 failed with error -22 [ 1132.638798][T30878] usb 8-1: USB disconnect, device number 18 [ 1133.315515][ T9064] netlink: 7 bytes leftover after parsing attributes in process `syz.7.16449'. [ 1134.212935][T30878] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1134.394152][ T9089] openvswitch: netlink: Actions may not be safe on all matching packets [ 1134.412121][ T9091] loop7: detected capacity change from 0 to 128 [ 1134.484024][T30878] usb 4-1: Using ep0 maxpacket: 32 [ 1134.555623][ T9091] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1134.589027][ T9091] FAT-fs (loop7): Filesystem has been set read-only [ 1134.629700][ T9091] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1134.679663][ T9091] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1134.693052][T30878] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1134.702058][ T9091] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1134.719807][ T9091] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1134.731415][ T9091] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1134.754131][ T9091] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1134.785655][ T9091] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1134.803636][ T9091] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1134.846734][ T9091] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1134.888596][ T26] audit: type=1800 audit(1788476669.757:49): pid=9091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.16463" name="file1" dev="loop7" ino=1048803 res=0 errno=0 [ 1134.938490][ T9091] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1134.990330][T30878] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 1135.010251][T30878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.034061][T30878] usb 4-1: Product: syz [ 1135.038285][T30878] usb 4-1: Manufacturer: syz [ 1135.072768][T30878] usb 4-1: SerialNumber: syz [ 1135.135980][T30878] usb 4-1: selecting invalid altsetting 1 [ 1135.173537][T30878] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1135.225734][T30878] usb 4-1: selecting invalid altsetting 1 [ 1135.232187][T30878] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 1135.292449][T30878] usb 4-1: selecting invalid altsetting 1 [ 1135.356100][T30878] snd-usb-audio: probe of 4-1:1.2 failed with error -22 [ 1135.370188][ T9106] [U]  [ 1135.412385][ T4273] udevd[4273]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1135.417320][T30878] usb 4-1: USB disconnect, device number 100 [ 1135.794154][ T4235] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1135.805958][ T9120] loop7: detected capacity change from 0 to 8 [ 1136.044117][ T4235] usb 2-1: Using ep0 maxpacket: 32 [ 1136.164138][ T4235] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1136.170854][ T4235] usb 2-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.00 [ 1136.222458][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.263316][ T9137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16485'. [ 1136.296016][ T4235] usb 2-1: config 0 descriptor?? [ 1136.588392][ T9149] netlink: 180 bytes leftover after parsing attributes in process `syz.0.16491'. [ 1136.625113][ T9149] nbd: must specify a device to reconfigure [ 1136.775775][ T4235] hid_mf 0003:0079:1803.0038: unknown main item tag 0x3 [ 1136.796919][ T4235] hid_mf 0003:0079:1803.0038: unknown main item tag 0x0 [ 1136.832536][ T4235] hid_mf 0003:0079:1803.0038: global environment stack underflow [ 1136.855579][ T4235] hid_mf 0003:0079:1803.0038: item 0 0 1 11 parsing failed [ 1136.895632][ T4235] hid_mf 0003:0079:1803.0038: HID parse failed. [ 1136.925997][ T4235] hid_mf: probe of 0003:0079:1803.0038 failed with error -22 [ 1136.952945][T30878] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1136.976974][ T4235] usb 2-1: USB disconnect, device number 104 [ 1137.086291][ T9131] loop7: detected capacity change from 0 to 32768 [ 1137.207716][ T9131] JBD2: Ignoring recovery information on journal [ 1137.228382][ T9131] jbd2_journal_bmap: journal block not found at offset 32 on loop7-75 [ 1137.238153][T30878] usb 4-1: Using ep0 maxpacket: 16 [ 1137.255067][ T9131] JBD2: bad block at offset 32 [ 1137.366080][ T9131] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1137.405409][T30878] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1137.432771][T30878] usb 4-1: config 1 has no interface number 0 [ 1137.438963][T30878] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1137.511395][T30878] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1137.531275][ T9174] loop8: detected capacity change from 0 to 2048 [ 1137.553735][T30878] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1137.607015][T32428] ocfs2: Unmounting device (7,7) on (node local) [ 1137.648241][ T9174] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found! [ 1137.682825][ T9174] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1137.785686][T30878] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1137.807010][T30878] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1137.842505][T30878] usb 4-1: Product: syz [ 1137.859034][T30878] usb 4-1: Manufacturer: syz [ 1137.875571][T30878] usb 4-1: SerialNumber: syz [ 1137.923801][ T9154] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1137.930936][ T9154] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1138.035490][ T9183] netlink: 180 bytes leftover after parsing attributes in process `syz.7.16504'. [ 1138.080010][ T9183] nbd: must specify a device to reconfigure [ 1138.202202][ T9190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16508'. [ 1138.285261][ T9193] netlink: 'syz.8.16510': attribute type 1 has an invalid length. [ 1138.436565][ T9154] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1138.464973][ T9154] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1138.598242][ T9205] netlink: 'syz.7.16516': attribute type 1 has an invalid length. [ 1138.703538][T30878] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 1138.751298][T30878] aqc111: probe of 4-1:1.105 failed with error -71 [ 1138.770643][ T9213] loop8: detected capacity change from 0 to 512 [ 1138.793016][T30878] usb 4-1: USB disconnect, device number 101 [ 1138.945805][ T9213] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1138.971015][ T9213] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #11: comm syz.8.16520: ea_inode with extended attributes [ 1138.994842][ T9213] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.16520: error while reading EA inode 11 err=-117 [ 1139.074002][ T9213] EXT4-fs (loop8): 1 orphan inode deleted [ 1139.107141][ T9213] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodioread_nolock,dioread_lock,debug_want_extra_isize=0x0000000000000006,nojournal_checksum,resgid=0x0000000000000000,acl,barrier,,errors=continue. Quota mode: none. [ 1139.225920][ T9219] loop7: detected capacity change from 0 to 4096 [ 1140.587519][ T9239] loop7: detected capacity change from 0 to 32768 [ 1140.845455][ T9239] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1140.919743][ T9265] binder: 9264:9265 ioctl c018620b 200000000040 returned -14 [ 1141.160164][T32428] ocfs2: Unmounting device (7,7) on (node local) [ 1141.645907][ T9281] usb usb9: usbfs: process 9281 (syz.1.16551) did not claim interface 36 before use [ 1142.126839][ T9295] loop7: detected capacity change from 0 to 1024 [ 1142.861479][ T9319] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16571'. [ 1143.234111][ T5510] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1143.245758][ T9329] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1143.272814][ T9329] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1143.608591][ T5510] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.639783][ T5510] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1143.668511][ T9311] loop7: detected capacity change from 0 to 40427 [ 1143.684864][ T5510] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 1143.705309][ T5510] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.724968][ T9333] loop8: detected capacity change from 0 to 32768 [ 1143.761920][ T9311] F2FS-fs (loop7): Fix alignment : internally, start(4096) end(16896) block(12288) [ 1143.767574][ T9333] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9" [ 1143.786470][ T9333] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 0)... [ 1143.880483][ T9311] F2FS-fs (loop7): invalid crc value [ 1143.969536][ T9311] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1143.988252][ T9333] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: journal 0 mapped with 16 extents in 0ms [ 1144.009029][T30880] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0, already locked for use [ 1144.017384][ T5510] dvbdev: DVB: registering new adapter (DEC2000-t) [ 1144.032845][T30880] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Looking at journal... [ 1144.043180][T30878] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1144.085981][ T5510] usb 2-1: DVB: registering adapter 2 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 1144.204171][ T5510] ttusb_dec_send_command: command bulk message failed: error -71 [ 1144.269360][T30880] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Journal head lookup took 236ms [ 1144.281283][ T5510] usb 2-1: USB disconnect, device number 105 [ 1144.309973][T30880] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Done [ 1144.364647][ T9333] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: first mount done, others may mount [ 1144.384733][ T9311] F2FS-fs (loop7): recover fsync data on readonly fs [ 1144.400792][ T9311] F2FS-fs (loop7): Cannot turn on quotas: -2 on 1 [ 1144.408566][T30878] usb 4-1: Using ep0 maxpacket: 32 [ 1144.415854][ T9311] F2FS-fs (loop7): Cannot turn on quotas: -2 on 2 [ 1144.502196][ T9311] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1144.543089][T30878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1144.572777][T30878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1144.592801][T30878] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1144.625199][T30878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.667701][T30878] usb 4-1: config 0 descriptor?? [ 1145.170425][T30878] ft260 0003:0403:6030.0039: unknown main item tag 0x7 [ 1145.209477][T30878] ft260 0003:0403:6030.0039: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 1145.328292][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16586'. [ 1145.370812][T30878] ft260 0003:0403:6030.0039: failed to retrieve chip version [ 1145.394275][T30878] ft260: probe of 0003:0403:6030.0039 failed with error -71 [ 1145.463325][T30878] usb 4-1: USB disconnect, device number 102 [ 1145.715976][ T9357] fido_id[9357]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1146.177947][ T9371] loop7: detected capacity change from 0 to 32768 [ 1146.257955][ T9371] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9" [ 1146.272503][ T9371] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 0)... [ 1146.358100][ T9371] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: journal 0 mapped with 16 extents in 0ms [ 1146.425047][ T1111] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0, already locked for use [ 1146.461105][ T1111] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Looking at journal... [ 1146.718723][ T1111] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Journal head lookup took 257ms [ 1146.767867][ T1111] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Done [ 1146.794610][ T9371] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: first mount done, others may mount [ 1146.825422][T30878] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1146.991147][ T9411] ip_tables: iptables: counters copy to user failed while replacing table [ 1147.069202][ T9412] loop8: detected capacity change from 0 to 1024 [ 1147.212321][ T9412] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1147.235177][ T9412] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 1147.272703][ T9412] EXT4-fs (loop8): journal inode is deleted [ 1147.364031][T30878] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1147.372280][T30878] usb 4-1: config 0 has no interface number 0 [ 1147.409020][T30878] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1147.665230][T30878] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1147.693886][T30878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.730558][T30878] usb 4-1: Product: syz [ 1147.745281][T30878] usb 4-1: Manufacturer: syz [ 1147.749981][T30878] usb 4-1: SerialNumber: syz [ 1147.803751][T30878] usb 4-1: config 0 descriptor?? [ 1147.865922][T30878] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 1148.040132][ T9439] Cannot find add_set index 46338 as target [ 1148.101119][T30878] usb 4-1: USB disconnect, device number 103 [ 1148.123379][T30878] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 1148.556794][ T9428] loop8: detected capacity change from 0 to 32768 [ 1149.493411][ T9487] netlink: 2 bytes leftover after parsing attributes in process `syz.8.16643'. [ 1150.632250][ T9525] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 1150.896275][ T9539] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 1150.938501][ T9539] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1150.970108][ T9539] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1150.999388][ T9539] comedi comedi3: 8255: I/O port conflict (0xf0000,4) [ 1151.021033][ T9539] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 1151.029909][ T9539] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1151.038539][ T9539] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 1151.066960][ T9539] comedi comedi3: 8255: I/O port conflict (0x5c95238c,4) [ 1151.121054][ T9539] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 1151.151668][ T9539] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1151.194433][ T9539] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 1151.242867][ T9539] comedi comedi3: 8255: I/O port conflict (0x400e1c8,4) [ 1151.270207][ T9539] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1151.284031][ T1111] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1151.300650][ T9539] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 1151.376056][ T9547] loop8: detected capacity change from 0 to 4096 [ 1151.434062][ T9547] ntfs3: loop8: Different NTFS' sector size (2048) and media sector size (512) [ 1151.525299][ T9547] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 1151.533995][ T1111] usb 2-1: Using ep0 maxpacket: 16 [ 1151.570533][ T9547] ntfs3: loop8: Failed to load $AttrDef -> 0 [ 1151.654192][ T1111] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1151.690804][ T1111] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1151.769541][ T1111] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1151.811035][ T1111] usb 2-1: New USB device found, idVendor=046d, idProduct=c283, bcdDevice= 0.00 [ 1151.861960][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.920377][ T1111] usb 2-1: config 0 descriptor?? [ 1152.418267][ T1111] input: HID 046d:c283 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:046D:C283.003A/input/input89 [ 1152.526510][ T9575] loop7: detected capacity change from 0 to 256 [ 1152.546940][ T1111] logitech 0003:046D:C283.003A: input,hidraw0: USB HID v0.01 Joystick [HID 046d:c283] on usb-dummy_hcd.1-1/input0 [ 1152.622067][ T1111] logitech 0003:046D:C283.003A: missing HID_OUTPUT_REPORT 0 [ 1152.755276][ T1111] usb 2-1: USB disconnect, device number 106 [ 1152.908420][ T9589] loop8: detected capacity change from 0 to 256 [ 1153.066077][ T9585] fido_id[9585]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1153.169105][ T9591] loop7: detected capacity change from 0 to 4096 [ 1153.176042][ T9589] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xecc0b056, utbl_chksum : 0xe619d30d) [ 1153.256276][ T9589] attempt to access beyond end of device [ 1153.256276][ T9589] loop8: rw=2049, want=34225520826, limit=256 [ 1153.301437][ T9589] Buffer I/O error on dev loop8, logical block 34225520825, lost async page write [ 1153.327042][ T9589] attempt to access beyond end of device [ 1153.327042][ T9589] loop8: rw=2049, want=34225520827, limit=256 [ 1153.361765][ T9589] Buffer I/O error on dev loop8, logical block 34225520826, lost async page write [ 1153.434698][ T9589] attempt to access beyond end of device [ 1153.434698][ T9589] loop8: rw=2049, want=34225520828, limit=256 [ 1153.448222][ T9591] ntfs: (device loop7): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1153.494059][ T9589] Buffer I/O error on dev loop8, logical block 34225520827, lost async page write [ 1153.657503][ T9591] ntfs: volume version 3.1. [ 1153.883383][ T9617] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16706'. [ 1154.495821][ T9639] loop8: detected capacity change from 0 to 64 [ 1154.549239][ T9641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16717'. [ 1154.976310][ C0] vkms_vblank_simulate: vblank timer overrun [ 1155.273808][ T9653] lec:lec_atm_close: lec0: Shut down! [ 1155.509188][ T9670] loop7: detected capacity change from 0 to 1024 [ 1155.710546][ T9670] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1155.867649][ T9670] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsv0,barrier=0x000000000000000. Quota mode: none. [ 1155.896353][ C0] vkms_vblank_simulate: vblank timer overrun [ 1156.123030][ T9690] netlink: 'syz.1.16735': attribute type 5 has an invalid length. [ 1156.130916][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16735'. [ 1156.215813][T30878] Process accounting resumed [ 1156.272697][ T9670] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: none. [ 1156.729175][ T9704] loop7: detected capacity change from 0 to 256 [ 1156.847035][T30878] lec:lec_start_xmit: lec0:No lecd attached [ 1156.856989][ T9704] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x596330fe, utbl_chksum : 0xe619d30d) [ 1157.454194][T30878] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1157.873150][T30878] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.902784][T30878] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1158.033943][ T5510] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1158.173095][T30878] usb 8-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 1158.211078][T30878] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.232756][T30878] usb 8-1: Product: syz [ 1158.236995][T30878] usb 8-1: Manufacturer: syz [ 1158.272358][T30878] usb 8-1: SerialNumber: syz [ 1158.276423][ T5510] usb 4-1: Using ep0 maxpacket: 8 [ 1158.376430][T30878] usb 8-1: unsupported MDLM descriptors [ 1158.405037][ T5510] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1158.412582][ T5510] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 1158.461333][ T5510] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.510771][ T5510] usb 4-1: config 0 descriptor?? [ 1158.789946][T30878] usb 8-1: USB disconnect, device number 19 [ 1158.856742][ T9764] loop8: detected capacity change from 0 to 64 [ 1158.918718][ T9764] hfs: filesystem is marked locked, mounting read-only. [ 1158.958094][ T9764] hfs: filesystem is marked locked, leaving read-only. [ 1159.018676][ T5510] logitech-djreceiver 0003:046D:C534.003B: unknown main item tag 0x4 [ 1159.041064][ T5510] logitech-djreceiver 0003:046D:C534.003B: ignoring exceeding usage max [ 1159.068423][ T5510] logitech-djreceiver 0003:046D:C534.003B: unknown main item tag 0x4 [ 1159.090376][ T5510] logitech-djreceiver 0003:046D:C534.003B: hidraw0: USB HID v0.81 Device [HID 046d:c534] on usb-dummy_hcd.3-1/input0 [ 1159.255264][ T9772] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1159.317808][ T9772] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 1159.330255][T30878] usb 4-1: USB disconnect, device number 104 [ 1160.112179][ T9794] lec:lec_atm_close: lec0: Shut down! [ 1160.402819][ T9808] netlink: 48 bytes leftover after parsing attributes in process `syz.3.16780'. [ 1160.655498][ T9782] loop8: detected capacity change from 0 to 32768 [ 1160.775755][ T9782] JBD2: Ignoring recovery information on journal [ 1160.892431][ T9782] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1160.913141][T30876] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 1161.157217][ T1643] ocfs2: Unmounting device (7,8) on (node local) [ 1161.289930][ T9824] loop8: detected capacity change from 0 to 128 [ 1161.399288][ T9824] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1161.423336][T30876] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 1161.431943][ T9824] ext4 filesystem being mounted at /571/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1161.470441][T30876] usb 2-1: config 0 has no interface number 0 [ 1161.522791][T30876] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1161.670087][ T9805] loop7: detected capacity change from 0 to 32768 [ 1161.763343][T30876] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1161.795531][ T9805] (syz.7.16779,9805,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1161.799272][T30876] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1161.852505][ T9805] (syz.7.16779,9805,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1161.891535][T30876] usb 2-1: Manufacturer: syz [ 1161.920394][T30876] usb 2-1: SerialNumber: syz [ 1161.964224][T30876] usb 2-1: config 0 descriptor?? [ 1162.028946][ T9805] JBD2: Ignoring recovery information on journal [ 1162.230790][ T9805] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1162.302171][ T9805] [ 1162.304571][ T9805] ====================================================== [ 1162.311621][ T9805] WARNING: possible circular locking dependency detected [ 1162.318720][ T9805] syzkaller #0 Not tainted [ 1162.323163][ T9805] ------------------------------------------------------ [ 1162.330201][ T9805] syz.7.16779/9805 is trying to acquire lock: [ 1162.336299][ T9805] ffff88804c439808 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16d/0x44b0 [ 1162.349640][ T9805] [ 1162.349640][ T9805] but task is already holding lock: [ 1162.357076][ T9805] ffff88804c4cb1b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x47d/0x1390 [ 1162.366700][ T9805] [ 1162.366700][ T9805] which lock already depends on the new lock. [ 1162.366700][ T9805] [ 1162.377137][ T9805] [ 1162.377137][ T9805] the existing dependency chain (in reverse order) is: [ 1162.386181][ T9805] [ 1162.386181][ T9805] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 1162.394047][ T9805] down_read+0x44/0x2e0 [ 1162.398807][ T9805] ocfs2_init_acl+0x307/0x770 [ 1162.404121][ T9805] ocfs2_mknod+0x15de/0x2510 [ 1162.409270][ T9805] vfs_mknod+0x430/0x4c0 [ 1162.414158][ T9805] do_mknodat+0x453/0x630 [ 1162.419071][ T9805] __x64_sys_mknod+0x8a/0xa0 [ 1162.424413][ T9805] do_syscall_64+0x4c/0xa0 [ 1162.429384][ T9805] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1162.435835][ T9805] [ 1162.435835][ T9805] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1162.444432][ T9805] down_read+0x44/0x2e0 [ 1162.449148][ T9805] ocfs2_start_trans+0x3a6/0x6f0 [ 1162.454760][ T9805] ocfs2_mknod+0xf70/0x2510 [ 1162.459825][ T9805] vfs_mknod+0x430/0x4c0 [ 1162.464623][ T9805] do_mknodat+0x453/0x630 [ 1162.469544][ T9805] __x64_sys_mknod+0x8a/0xa0 [ 1162.474696][ T9805] do_syscall_64+0x4c/0xa0 [ 1162.479669][ T9805] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1162.486123][ T9805] [ 1162.486123][ T9805] -> #2 (sb_internal#5){.+.+}-{0:0}: [ 1162.493641][ T9805] ocfs2_start_trans+0x2a7/0x6f0 [ 1162.499138][ T9805] ocfs2_mknod+0xf70/0x2510 [ 1162.504193][ T9805] vfs_mknod+0x430/0x4c0 [ 1162.508987][ T9805] do_mknodat+0x453/0x630 [ 1162.513876][ T9805] __x64_sys_mknod+0x8a/0xa0 [ 1162.519015][ T9805] do_syscall_64+0x4c/0xa0 [ 1162.523987][ T9805] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1162.530438][ T9805] [ 1162.530438][ T9805] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 1162.540988][ T9805] down_write+0x38/0x60 [ 1162.545706][ T9805] ocfs2_reserve_local_alloc_bits+0x11c/0x2630 [ 1162.552424][ T9805] ocfs2_reserve_clusters_with_limit+0x1b6/0xc10 [ 1162.559451][ T9805] ocfs2_mknod+0xf0e/0x2510 [ 1162.564507][ T9805] vfs_mknod+0x430/0x4c0 [ 1162.569309][ T9805] do_mknodat+0x453/0x630 [ 1162.574195][ T9805] __x64_sys_mknod+0x8a/0xa0 [ 1162.579338][ T9805] do_syscall_64+0x4c/0xa0 [ 1162.584312][ T9805] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1162.590767][ T9805] [ 1162.590767][ T9805] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 1162.601322][ T9805] __lock_acquire+0x2c66/0x7b50 [ 1162.606770][ T9805] lock_acquire+0x19e/0x400 [ 1162.611836][ T9805] down_write+0x38/0x60 [ 1162.616632][ T9805] ocfs2_reserve_suballoc_bits+0x16d/0x44b0 [ 1162.623086][ T9805] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 1162.629967][ T9805] ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 1162.636169][ T9805] ocfs2_xattr_set+0xc68/0x1390 [ 1162.641579][ T9805] ocfs2_set_acl+0x4d4/0x580 [ 1162.646739][ T9805] ocfs2_iop_set_acl+0x190/0x2b0 [ 1162.652225][ T9805] posix_acl_xattr_set+0x324/0x390 [ 1162.657966][ T9805] __vfs_setxattr+0x3d8/0x410 [ 1162.663257][ T9805] __vfs_setxattr_noperm+0x126/0x5e0 [ 1162.669092][ T9805] vfs_setxattr+0x167/0x2e0 [ 1162.674150][ T9805] setxattr+0x2cb/0x360 [ 1162.678866][ T9805] path_setxattr+0x147/0x290 [ 1162.684019][ T9805] __x64_sys_setxattr+0xb7/0xd0 [ 1162.689423][ T9805] do_syscall_64+0x4c/0xa0 [ 1162.694397][ T9805] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1162.700843][ T9805] [ 1162.700843][ T9805] other info that might help us debug this: [ 1162.700843][ T9805] [ 1162.711097][ T9805] Chain exists of: [ 1162.711097][ T9805] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 1162.711097][ T9805] [ 1162.728093][ T9805] Possible unsafe locking scenario: [ 1162.728093][ T9805] [ 1162.735668][ T9805] CPU0 CPU1 [ 1162.741062][ T9805] ---- ---- [ 1162.746462][ T9805] lock(&oi->ip_xattr_sem); [ 1162.751088][ T9805] lock(&journal->j_trans_barrier); [ 1162.759033][ T9805] lock(&oi->ip_xattr_sem); [ 1162.766179][ T9805] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 1162.773511][ T9805] [ 1162.773511][ T9805] *** DEADLOCK *** [ 1162.773511][ T9805] [ 1162.781681][ T9805] 3 locks held by syz.7.16779/9805: [ 1162.786924][ T9805] #0: ffff88805112a460 (sb_writers#37){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 1162.796216][ T9805] #1: ffff88804c4cb488 (&type->i_mutex_dir_key#33){+.+.}-{3:3}, at: vfs_setxattr+0x140/0x2e0 [ 1162.806550][ T9805] #2: ffff88804c4cb1b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x47d/0x1390 [ 1162.816558][ T9805] [ 1162.816558][ T9805] stack backtrace: [ 1162.822475][ T9805] CPU: 1 PID: 9805 Comm: syz.7.16779 Not tainted syzkaller #0 [ 1162.829974][ T9805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1162.840079][ T9805] Call Trace: [ 1162.843396][ T9805] [ 1162.846358][ T9805] dump_stack_lvl+0x188/0x250 [ 1162.851083][ T9805] ? load_image+0x410/0x410 [ 1162.855647][ T9805] ? show_regs_print_info+0x20/0x20 [ 1162.860903][ T9805] ? print_circular_bug+0x12b/0x1a0 [ 1162.866319][ T9805] check_noncircular+0x296/0x330 [ 1162.871306][ T9805] ? look_up_lock_class+0x71/0x110 [ 1162.876470][ T9805] ? add_chain_block+0x9b0/0x9b0 [ 1162.881452][ T9805] ? lockdep_lock+0xf1/0x1f0 [ 1162.886100][ T9805] ? mark_lock+0x94/0x320 [ 1162.890474][ T9805] ? _find_first_zero_bit+0xd1/0xf0 [ 1162.895741][ T9805] __lock_acquire+0x2c66/0x7b50 [ 1162.900693][ T9805] ? igrab+0x87/0x90 [ 1162.904632][ T9805] ? verify_lock_unused+0x140/0x140 [ 1162.909912][ T9805] ? do_raw_spin_lock+0x128/0x2f0 [ 1162.914985][ T9805] ? __rwlock_init+0x140/0x140 [ 1162.919795][ T9805] ? do_raw_spin_unlock+0x11d/0x230 [ 1162.925036][ T9805] ? _raw_spin_unlock+0x24/0x40 [ 1162.930084][ T9805] lock_acquire+0x19e/0x400 [ 1162.934625][ T9805] ? ocfs2_reserve_suballoc_bits+0x16d/0x44b0 [ 1162.940737][ T9805] ? __might_sleep+0xf0/0xf0 [ 1162.945554][ T9805] ? read_lock_is_recursive+0x10/0x10 [ 1162.951000][ T9805] ? verify_lock_unused+0x140/0x140 [ 1162.956249][ T9805] down_write+0x38/0x60 [ 1162.960556][ T9805] ? ocfs2_reserve_suballoc_bits+0x16d/0x44b0 [ 1162.966664][ T9805] ocfs2_reserve_suballoc_bits+0x16d/0x44b0 [ 1162.972596][ T9805] ? __lock_acquire+0x7b50/0x7b50 [ 1162.977665][ T9805] ? mark_lock+0x94/0x320 [ 1162.982030][ T9805] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1162.988060][ T9805] ? lock_chain_count+0x20/0x20 [ 1162.993048][ T9805] ? __rwlock_init+0x140/0x140 [ 1162.997852][ T9805] ? ocfs2_block_group_search+0x470/0x470 [ 1163.003610][ T9805] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1163.009541][ T9805] ? lockdep_hardirqs_on+0x94/0x140 [ 1163.014808][ T9805] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1163.020736][ T9805] ? _raw_spin_unlock+0x40/0x40 [ 1163.025623][ T9805] ? stack_trace_save+0xa6/0xf0 [ 1163.030511][ T9805] ? stack_trace_snprint+0xe0/0xe0 [ 1163.035656][ T9805] ? stack_depot_save+0x41b/0x460 [ 1163.040794][ T9805] ? __kasan_kmalloc+0xc6/0xe0 [ 1163.045816][ T9805] ? __kasan_kmalloc+0xaf/0xe0 [ 1163.050610][ T9805] ? ocfs2_reserve_new_metadata_blocks+0x109/0x9a0 [ 1163.057172][ T9805] ? ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 1163.063019][ T9805] ? ocfs2_xattr_set+0xc68/0x1390 [ 1163.068170][ T9805] ? ocfs2_set_acl+0x4d4/0x580 [ 1163.072973][ T9805] ? ocfs2_iop_set_acl+0x190/0x2b0 [ 1163.078127][ T9805] ? posix_acl_xattr_set+0x324/0x390 [ 1163.083441][ T9805] ? __vfs_setxattr+0x3d8/0x410 [ 1163.088346][ T9805] ? __vfs_setxattr_noperm+0x126/0x5e0 [ 1163.093834][ T9805] ? vfs_setxattr+0x167/0x2e0 [ 1163.098555][ T9805] ? setxattr+0x2cb/0x360 [ 1163.102913][ T9805] ? path_setxattr+0x147/0x290 [ 1163.107708][ T9805] ? __x64_sys_setxattr+0xb7/0xd0 [ 1163.112760][ T9805] ? do_syscall_64+0x4c/0xa0 [ 1163.117384][ T9805] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1163.123510][ T9805] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 1163.129920][ T9805] ? ocfs2_init_steal_slots+0x150/0x150 [ 1163.135501][ T9805] ? ocfs2_xattr_block_set+0x2da0/0x2da0 [ 1163.141198][ T9805] ? do_raw_spin_lock+0x128/0x2f0 [ 1163.146262][ T9805] ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 1163.151940][ T9805] ? ocfs2_prepare_refcount_xattr+0xfe0/0xfe0 [ 1163.158041][ T9805] ? ocfs2_truncate_log_needs_flush+0x12c/0x300 [ 1163.164429][ T9805] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 1163.170363][ T9805] ? ocfs2_xattr_ibody_find+0xc6/0x780 [ 1163.175863][ T9805] ? up_write+0x1b6/0x410 [ 1163.180234][ T9805] ocfs2_xattr_set+0xc68/0x1390 [ 1163.185154][ T9805] ? __ocfs2_xattr_set_handle+0xf20/0xf20 [ 1163.190921][ T9805] ? __vfs_setxattr+0x3d8/0x410 [ 1163.195802][ T9805] ? __vfs_setxattr_noperm+0x126/0x5e0 [ 1163.201388][ T9805] ? vfs_setxattr+0x167/0x2e0 [ 1163.206104][ T9805] ? setxattr+0x2cb/0x360 [ 1163.210577][ T9805] ? __x64_sys_setxattr+0xb7/0xd0 [ 1163.215635][ T9805] ? do_syscall_64+0x4c/0xa0 [ 1163.220256][ T9805] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1163.226388][ T9805] ocfs2_set_acl+0x4d4/0x580 [ 1163.231026][ T9805] ocfs2_iop_set_acl+0x190/0x2b0 [ 1163.236001][ T9805] ? ocfs2_xattr_get+0x260/0x260 [ 1163.240981][ T9805] ? posix_acl_valid+0x37d/0x3f0 [ 1163.245951][ T9805] posix_acl_xattr_set+0x324/0x390 [ 1163.251112][ T9805] ? posix_acl_xattr_get+0x540/0x540 [ 1163.256448][ T9805] __vfs_setxattr+0x3d8/0x410 [ 1163.261261][ T9805] __vfs_setxattr_noperm+0x126/0x5e0 [ 1163.266797][ T9805] vfs_setxattr+0x167/0x2e0 [ 1163.271356][ T9805] ? xattr_permission+0x510/0x510 [ 1163.276418][ T9805] ? _copy_from_user+0x111/0x170 [ 1163.281410][ T9805] ? posix_acl_fix_xattr_from_user+0xcf/0x110 [ 1163.287541][ T9805] setxattr+0x2cb/0x360 [ 1163.291740][ T9805] ? path_setxattr+0x290/0x290 [ 1163.296557][ T9805] ? __mnt_want_write+0x1e2/0x260 [ 1163.301905][ T9805] path_setxattr+0x147/0x290 [ 1163.306621][ T9805] ? simple_xattr_list_add+0xf0/0xf0 [ 1163.311974][ T9805] ? lock_chain_count+0x20/0x20 [ 1163.316907][ T9805] __x64_sys_setxattr+0xb7/0xd0 [ 1163.321799][ T9805] do_syscall_64+0x4c/0xa0 [ 1163.326294][ T9805] ? clear_bhb_loop+0x30/0x80 [ 1163.331011][ T9805] ? clear_bhb_loop+0x30/0x80 [ 1163.335723][ T9805] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1163.341681][ T9805] RIP: 0033:0x7fc321247159 [ 1163.346132][ T9805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1163.365776][ T9805] RSP: 002b:00007fc31f49f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1163.374231][ T9805] RAX: ffffffffffffffda RBX: 00007fc3214cefa0 RCX: 00007fc321247159 [ 1163.382241][ T9805] RDX: 0000200000000300 RSI: 00002000000000c0 RDI: 0000200000000040 [ 1163.390286][ T9805] RBP: 00007fc3212de024 R08: 0000000000000000 R09: 0000000000000000 [ 1163.398304][ T9805] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 1163.406312][ T9805] R13: 00007fc3214cf038 R14: 00007fc3214cefa0 R15: 00007fff245f9b48 [ 1163.414345][ T9805] [ 1163.435173][ C1] ------------[ cut here ]------------ [ 1163.440690][ C1] NETDEV WATCHDOG: lec0 (): transmit queue 0 timed out [ 1163.448338][ C1] WARNING: CPU: 1 PID: 20 at net/sched/sch_generic.c:481 dev_watchdog+0x85d/0xa40 [ 1163.457705][ C1] Modules linked in: [ 1163.461635][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 1163.468979][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1163.479092][ C1] RIP: 0010:dev_watchdog+0x85d/0xa40 [ 1163.484472][ C1] Code: a3 72 05 01 48 8b 5c 24 20 48 89 df e8 6c f2 e3 ff 48 c7 c7 80 44 22 8b 48 89 de 48 8b 1c 24 48 89 c2 44 89 e1 e8 83 b5 b0 01 <0f> 0b e9 51 fe ff ff e8 47 5b 74 f9 0f 0b e9 33 fe ff ff 89 d9 80 [ 1163.504138][ C1] RSP: 0018:ffffc90000da7990 EFLAGS: 00010246 [ 1163.510243][ C1] RAX: 8b87ad60acde3600 RBX: ffff888079070448 RCX: ffff888017a08000 [ 1163.518442][ C1] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 1163.526735][ C1] RBP: dffffc0000000000 R08: ffffc90000da74c7 R09: 1ffff920001b4e98 [ 1163.534810][ C1] R10: dffffc0000000000 R11: fffff520001b4e99 R12: 0000000000000000 [ 1163.542855][ C1] R13: ffff888079070540 R14: 0000000000000000 R15: dffffc0000000000 [ 1163.550868][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1163.559944][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1163.566596][ C1] CR2: 00007f3adb10c6c8 CR3: 000000007e002000 CR4: 00000000003506e0 [ 1163.574626][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1163.582635][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1163.590681][ C1] Call Trace: [ 1163.594016][ C1] [ 1163.596983][ C1] ? dev_init_scheduler+0x360/0x360 [ 1163.602250][ C1] call_timer_fn+0x17b/0x540 [ 1163.606918][ C1] ? dev_init_scheduler+0x360/0x360 [ 1163.612150][ C1] ? __run_timers+0x810/0x810 [ 1163.616900][ C1] ? dev_init_scheduler+0x360/0x360 [ 1163.622175][ C1] __run_timers+0x56c/0x810 [ 1163.626747][ C1] ? detach_timer+0x2b0/0x2b0 [ 1163.631468][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 1163.636766][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 1163.641654][ C1] run_timer_softirq+0x63/0xf0 [ 1163.646473][ C1] handle_softirqs+0x336/0x830 [ 1163.651368][ C1] ? run_ksoftirqd+0xa4/0x100 [ 1163.656204][ C1] ? do_softirq+0x210/0x210 [ 1163.660746][ C1] ? preempt_schedule_common+0xa5/0xd0 [ 1163.666273][ C1] ? takeover_tasklets+0x770/0x770 [ 1163.671421][ C1] ? preempt_schedule+0xbc/0xd0 [ 1163.676340][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1163.681584][ C1] run_ksoftirqd+0xa4/0x100 [ 1163.686149][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1163.691486][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 1163.696951][ C1] ? smpboot_thread_fn+0x5d9/0x990 [ 1163.702214][ C1] smpboot_thread_fn+0x520/0x990 [ 1163.707221][ C1] kthread+0x42e/0x520 [ 1163.711326][ C1] ? cpu_report_death+0x180/0x180 [ 1163.716407][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1163.721037][ C1] ret_from_fork+0x1f/0x30 [ 1163.725525][ C1] [ 1163.728605][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1163.735913][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 1163.743223][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1163.753306][ C1] Call Trace: [ 1163.756613][ C1] [ 1163.759572][ C1] dump_stack_lvl+0x188/0x250 [ 1163.764294][ C1] ? show_regs_print_info+0x20/0x20 [ 1163.769532][ C1] ? load_image+0x410/0x410 [ 1163.774072][ C1] panic+0x2f8/0x850 [ 1163.778102][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1163.782648][ C1] ? ret_from_fork+0x1f/0x30 [ 1163.787303][ C1] ? dev_watchdog+0x85d/0xa40 [ 1163.792016][ C1] __warn+0x248/0x2b0 [ 1163.796035][ C1] ? dev_watchdog+0x85d/0xa40 [ 1163.800752][ C1] report_bug+0x1b9/0x2e0 [ 1163.805156][ C1] handle_bug+0x3a/0x70 [ 1163.809342][ C1] exc_invalid_op+0x16/0x40 [ 1163.813884][ C1] asm_exc_invalid_op+0x16/0x20 [ 1163.818767][ C1] RIP: 0010:dev_watchdog+0x85d/0xa40 [ 1163.824095][ C1] Code: a3 72 05 01 48 8b 5c 24 20 48 89 df e8 6c f2 e3 ff 48 c7 c7 80 44 22 8b 48 89 de 48 8b 1c 24 48 89 c2 44 89 e1 e8 83 b5 b0 01 <0f> 0b e9 51 fe ff ff e8 47 5b 74 f9 0f 0b e9 33 fe ff ff 89 d9 80 [ 1163.843725][ C1] RSP: 0018:ffffc90000da7990 EFLAGS: 00010246 [ 1163.849860][ C1] RAX: 8b87ad60acde3600 RBX: ffff888079070448 RCX: ffff888017a08000 [ 1163.858071][ C1] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 1163.866099][ C1] RBP: dffffc0000000000 R08: ffffc90000da74c7 R09: 1ffff920001b4e98 [ 1163.874142][ C1] R10: dffffc0000000000 R11: fffff520001b4e99 R12: 0000000000000000 [ 1163.882233][ C1] R13: ffff888079070540 R14: 0000000000000000 R15: dffffc0000000000 [ 1163.890441][ C1] ? dev_init_scheduler+0x360/0x360 [ 1163.895690][ C1] call_timer_fn+0x17b/0x540 [ 1163.900314][ C1] ? dev_init_scheduler+0x360/0x360 [ 1163.905615][ C1] ? __run_timers+0x810/0x810 [ 1163.910397][ C1] ? dev_init_scheduler+0x360/0x360 [ 1163.915731][ C1] __run_timers+0x56c/0x810 [ 1163.920285][ C1] ? detach_timer+0x2b0/0x2b0 [ 1163.925130][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 1163.930379][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 1163.935273][ C1] run_timer_softirq+0x63/0xf0 [ 1163.940086][ C1] handle_softirqs+0x336/0x830 [ 1163.944897][ C1] ? run_ksoftirqd+0xa4/0x100 [ 1163.949702][ C1] ? do_softirq+0x210/0x210 [ 1163.954239][ C1] ? preempt_schedule_common+0xa5/0xd0 [ 1163.959733][ C1] ? takeover_tasklets+0x770/0x770 [ 1163.964887][ C1] ? preempt_schedule+0xbc/0xd0 [ 1163.969870][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1163.975108][ C1] run_ksoftirqd+0xa4/0x100 [ 1163.979644][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1163.984878][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 1163.990284][ C1] ? smpboot_thread_fn+0x5d9/0x990 [ 1163.995438][ C1] smpboot_thread_fn+0x520/0x990 [ 1164.000420][ C1] kthread+0x42e/0x520 [ 1164.004531][ C1] ? cpu_report_death+0x180/0x180 [ 1164.009592][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1164.014212][ C1] ret_from_fork+0x1f/0x30 [ 1164.018672][ C1] [ 1164.022036][ C1] Kernel Offset: disabled [ 1164.026380][ C1] Rebooting in 86400 seconds..