last executing test programs: 36.972035671s ago: executing program 2 (id=2596): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000200)='./bus\x00', 0x300000a, &(0x7f0000000340)={[{@nodatacow}, {@fatal_errors_bug}, {@nodiscard}, {@clear_cache}, {@discard_async}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x40942, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfea7) 35.810649279s ago: executing program 2 (id=2601): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x8b, 0x0, 0x5}]}) 34.732239927s ago: executing program 2 (id=2605): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setuid(0xee00) 33.727300111s ago: executing program 2 (id=2610): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x48082) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000c00)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965722c63726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYRESDEC=r0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030362c626172726965722c6e6f626172726965722c736d61636b66737472616e736d7574653d55dac73dddd1aa0ff491f57216572f1e671a989f42c64dc0b65d67d4250567573bb5e8d8c2d916d55de0fad0693e50202f126e0e71e930d123c47bc4a1d2ab46e52a07fd8ca501f330abb8b07d3a5364154ec1faf99b6a9779abe230ce8f5a290ef9442c7569643c", @ANYRES32, @ANYBLOB="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", @ANYRES8, @ANYBLOB="069a8d832cbb2aa0e92a5d6083319d9fc77f6d6f182e2a5415c2f49ae5e513f0723ec491ea310f2bb11284da5060cf06", @ANYRES64], 0x1, 0x6f8, &(0x7f0000000300)="$eJzs3TtoJOcdAPD/rFarXQXOOvseTjBY+MAJEbmTTsiJ0uQSQlBhgnGK1OJO5xO30hlJDrojxHIefQpXqZxCnUkRnCrNQVLHGIJblYYEN67UKczszGpWu9pd6fS6+PcTs/PNfM/5z87M7g5iAvjaWpiK6tNIYmHqzc10eWd7tjmyPTuWZzcjohYRlYhqaxbJamS5d/IpvpmuzMsnh/Xz4fL8259/tfNFa6maT1n5Sr96PdS6V23lU0xGxEg+7zZ6SIufHOy+o727h7Y3rKS9hWnAbhSBiz89U6vwzPa6bLXzPv539tqv+lGOW+CCSlrXzS4TEeMRUY9oXfXzs0PlbEd38rbOewAAAABwVI2jV3lhN3ZjMy6dxnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/1X+/P8knypFejKS4vn/tXxd5OkLaPCDED8ba82fnv5gAAAAAAAAAODUvbobu7EZl4rlvSS75/9a6R7/N+K9WI+lWIubsRmLsREbsRYzETFRaqi2ubixsTaT1Yy40qfm7fi0R83bh4/xzglvMwAAAAAAAABccPUB+Q9Hu9f9Nhb27/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBFkESMtGbZdKVIT0SlGhH1iKil5bYiPi3Sz4mk18qnZz8OAAAAeCb1zsWkPkSdF96P3diMS8XyXpJ957+WfV+ux3uxGhuxHBvRjKW4l3+HTr/1V3a2Z5s727MrUZ9dSVf+/b97mVY7P/7ySEPPWozWbw+9e345K9GI+7GcrbkZdyOJVpeVvJWXd7Zn0/lKOq5sbB0+SMeU/CjXZzQjpfS99OX6J1n6j52/IlSPtInHMJZHpbeJLHe0HZHpfGxpjctFBHpHYuDeqfbtaSYq7V9+rvTvqXfMP+jf+/iBUj1/uTkXByNxOyrtPXStKxKjnZW//bePf/mgufrwwf31qYuzST29P7DEwUjMliJxvf974rmKxGDTWSSutpcX4mfxi5iKL8feirVYjl/FYmzE0mSRv5i/n9PXif6R+my8vPTWoJGkx+Rk+/zVa0yT0TGmmIyfZqnFeC3bp5diOZJ4FBFL8Ub2dztm2meD/T18dYijvjLEmbbkxneyWTtM0Ti87F+Ga/KkpHG9XIpr+Zw7keWV1+xH6cWeUSqudcNfj0qq38oTaQu/63t9OGsHIzFTisRLh71fWiH9c/apYb25+nDtweK7Q/b3ej5Pj6M/XKirRLqHX4x6vnGXs9ckO6ams7yX2lfYznjV8jsuLZWuvKvteq0j9efxKO51HKnfj7mYi/ms9LWs9GjXFSvNu95uqfMcnualn7Sq7Rs75c9bj6LZ+jwEwMU2/t3xWuM/jX81Pmr8vvGg8Wb9J2M/GHulFqP/HP1hdXrk9coryV/jo/jN/vd/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+NYfP3m42GwurfVOVHpnJf1rLTb3igeJ9SnTkUjyR+UMUThZf/xkb2CD/RNj+fCOWf0kE8XTGstZxdMUOwtPnuIwkq2D+6s+eF8UT3kaooukK+Bp5WOPueh5f83oBdiVBxOTx6xe3q48UbxhS4WP/u5t9NpfIxHRq/CAE8fIM596gHN2a2Pl3Vvrj598b3ll8Z2ld5ZWR+fm5qfn596YvXV/ubk03XotVTj1h98CZ6X8caKtFhGvDq7b50GtAAAAAAAAAAAAwCk6i/+FOO9tBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5vC1NRfRpJzEzfnE6Xd7Znm+lUpPdLViOiEhHJryOSf0TcidYUE6XmksP6+XB5/u3Pv9r5Yr+talG+ErF1aL3hbOVTTEbESD4/qfbuDm6vtp8c65GdtCOTBuxGETg4b/8LAAD//6Nb8HA=") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 33.494416607s ago: executing program 2 (id=2611): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000080)='P\x00') 32.804502005s ago: executing program 2 (id=2617): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210128bd7000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000a0034000202020202020000080026006c090000240051"], 0x58}, 0x1, 0x0, 0x0, 0xf040}, 0x0) 32.57675057s ago: executing program 32 (id=2617): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210128bd7000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000a0034000202020202020000080026006c090000240051"], 0x58}, 0x1, 0x0, 0x0, 0xf040}, 0x0) 7.25499553s ago: executing program 4 (id=2730): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004500)="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", 0x2000, &(0x7f00000070c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.047910025s ago: executing program 4 (id=2735): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r0, 0x0) accept$ax25(r0, 0x0, 0x0) 6.816131251s ago: executing program 1 (id=2737): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000204355420000001800000109022400010000000b0904000001030000000921fd7f000122ea0009058103"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x87, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x1, 0x1, 0x5, 0x80, 0xf4, "", [{{0x9, 0x4, 0x0, 0x1b, 0x2, 0x2, 0x6, 0x0, 0x6, {{0xb, 0x24, 0x6, 0x0, 0x0, "bbb3dd760c9c"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x17cb, 0x160, 0x4, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0xf, 0x5, 0x7}, @country_functional={0xa, 0x24, 0x7, 0x5, 0x1, [0x0, 0x4d7]}, @dmm={0x7, 0x24, 0x14, 0x40, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0xb, 0x93, 0x2, 0x7f}, @country_functional={0xe, 0x24, 0x7, 0x7, 0x1, [0xc1a, 0x8, 0x3, 0x8]}, @dmm={0x7, 0x24, 0x14, 0x5, 0x41e}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x30, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xff, 0x2, 0x7f}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.649102465s ago: executing program 4 (id=2738): fsopen(0x0, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x57e, 0x2009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1001, 0xff, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7f, 0x1, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x0, 0x31, 0x6, {0x6, 0x0, "0fa5a0ee"}}, 0x0}, 0x0) 4.727099943s ago: executing program 1 (id=2753): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x1, 0x0, 0xdddd0000, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000440)={0x1, 0x0, 0x200000000000000, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) 4.628921635s ago: executing program 4 (id=2754): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setrlimit(0xc, &(0x7f0000000040)={0x6, 0x792}) 4.383860861s ago: executing program 1 (id=2756): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e9e, &(0x7f000000bc00)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) syz_mount_image$vfat(&(0x7f0000000700), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x290c471, 0x0, 0x1, 0x0, &(0x7f0000000740)) rmdir(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.947720172s ago: executing program 0 (id=2758): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000b40)='net/udplite\x00') pread64(r1, &(0x7f0000000280)=""/131, 0x83, 0x4) 3.700870198s ago: executing program 0 (id=2760): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:01.0/d3cold_allowed\x00', 0x1, 0x40) write(r0, &(0x7f0000000240)='PN', 0x2) 3.495904003s ago: executing program 0 (id=2762): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x3, 0x100, @val=0x80}}}}}}}, 0x0) 3.380310056s ago: executing program 4 (id=2764): syz_mount_image$xfs(&(0x7f0000000540), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000001340)={[{@lazytime}, {@uqnoenforce}, {@swalloc}, {@filestreams}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@dax}], [{@flag='nomand'}]}, 0x4, 0x9633, &(0x7f0000009680)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 3.331865147s ago: executing program 0 (id=2765): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000780)={0x0, 0x0, 0x2, "66c6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.276131669s ago: executing program 1 (id=2766): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000000780)=""/4110, 0x100e) 2.519705478s ago: executing program 1 (id=2772): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 2.253343834s ago: executing program 1 (id=2774): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 1.738915697s ago: executing program 4 (id=2777): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./bus\x00', 0x8c0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") open(&(0x7f0000000d00)='./file0\x00', 0x12f27f, 0xf) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=@known='user.incfs.metadata\x00', 0x0, 0x0) 1.711959938s ago: executing program 3 (id=2778): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000540)='./file1\x00', 0xa00010, &(0x7f0000000340)=ANY=[@ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812b372cae837c9e5c5c80c719abec2f0e1d37f96e0ef730264db1304c9f6fcd0b44f81a2583c4b1e50d5065bd8bfde0204c4b2178ec7f063a115baa7010100000000000022042a718d3742f6df4c32f92c9e6991c943ec3cfb707b5168952d8f1c8a47f0db71e8083ec8c7aca0c65aa2f9090d2a72cb7eb0d61a6f79abeadbcb8f55e2113fedfeabd409ec9fd22ed33f2cfbba2c689c00"/361, @ANYRESHEX=0xee01, @ANYRES16, @ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC], 0xd, 0x643, &(0x7f0000001380)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$cgroup_int(r0, &(0x7f0000001340)=0xd, 0x12) 1.142370612s ago: executing program 3 (id=2779): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x2c, 0x6, 0xff, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x0, 0x0, 0x3ff, {[@mptcp=@ack={0x1e, 0x18, 0x10, 0x1, "afa332de600b4ceb9757b4000000000000000000"}]}}}}}}}}, 0x0) 1.040811695s ago: executing program 0 (id=2780): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000001800)=ANY=[@ANYRES16=0x0], 0x1, 0x384, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)={0x780440d44e0f187e, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fallocate(r0, 0x0, 0x3, 0x9) 963.647406ms ago: executing program 3 (id=2781): r0 = getpid() r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x40, 0x9, r0, 0x0, 0x1, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0xffffffffffff7fff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0xb, 0x20000000, 0x0, 0x3, 0x3, 0x2, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x100000, 0x800, 0x0, 0x4, 0x0, 0x0, 0x8003, 0xfffffffb, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x401, 0x0, 0x8000000000000000, 0x0, 0x5, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0xfa4, 0x0, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0xfffffff8, 0x0, 0x7f, 0xfffffffe, 0xfffffffffffffffc, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x6, 0x0, 0x4e]}) 803.93497ms ago: executing program 3 (id=2782): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) 536.296707ms ago: executing program 3 (id=2783): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f0000001000)="$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") mount(0x0, 0x0, 0x0, 0x8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x8, 0x0, 0x4, 0x0, 0x4, 0x6, 0xa, 0x3, 0xa42c}) 85.670188ms ago: executing program 3 (id=2784): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0fc5:1227:b\nni', 0xe) 0s ago: executing program 0 (id=2785): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) ioctl$BTRFS_IOC_DEFRAG(r0, 0x4c00, 0x3) kernel console output (not intermixed with test programs): [ T173] usb 2-1: SerialNumber: syz [ 956.452339][ T173] usb 2-1: config 0 descriptor?? [ 956.461453][ T173] hub 2-1:0.0: bad descriptor, ignoring hub [ 956.487979][ T173] hub: probe of 2-1:0.0 failed with error -5 [ 956.522160][ T173] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input19 [ 956.670715][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.384457][ T5818] usb 2-1: USB disconnect, device number 20 [ 957.666982][T14986] loop2: detected capacity change from 0 to 2048 [ 957.698583][T14986] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 957.740487][T14971] loop3: detected capacity change from 0 to 40427 [ 957.753417][T14971] F2FS-fs (loop3): invalid crc value [ 957.783672][T14971] F2FS-fs (loop3): Found nat_bits in checkpoint [ 957.967313][T14971] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 958.145628][T14991] loop0: detected capacity change from 0 to 8192 [ 958.379293][ T5779] syz-executor: attempt to access beyond end of device [ 958.379293][ T5779] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 958.557396][ T5779] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 959.298107][T15006] loop1: detected capacity change from 0 to 512 [ 959.334460][T15006] EXT4-fs (loop1): Test dummy encryption mode enabled [ 959.378964][T15006] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 959.422012][T15006] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 959.431642][T15006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 959.466321][T15006] EXT4-fs warning (device loop1): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 959.490966][T15010] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 959.577352][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.696991][T15016] jffs2: notice: (15016) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 959.752033][T15014] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 959.840866][ T56] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 960.051475][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 960.077814][ T56] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 960.090835][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 960.101227][ T56] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 960.114420][ T56] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 960.124014][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.149526][ T56] usb 3-1: config 0 descriptor?? [ 960.508577][ T173] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 960.508600][ T56] hdpvr 3-1:0.0: firmware version 0x0 dated [ 960.531714][ T56] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 960.577260][T15027] netlink: 'syz.3.2336': attribute type 29 has an invalid length. [ 960.585945][T15027] netlink: 'syz.3.2336': attribute type 29 has an invalid length. [ 960.597707][T15027] netlink: 'syz.3.2336': attribute type 29 has an invalid length. [ 960.738544][ T173] usb 1-1: Using ep0 maxpacket: 16 [ 960.799484][ T173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 960.888174][ T173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 960.888226][ T173] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 960.888368][ T173] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 960.888429][ T173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.155031][ T56] hdpvr 3-1:0.0: Could not setup controls [ 961.164154][ T56] hdpvr 3-1:0.0: registering videodev failed [ 961.244882][ T56] hdpvr: probe of 3-1:0.0 failed with error -71 [ 961.252373][ T173] usb 1-1: config 0 descriptor?? [ 961.267914][ T56] usb 3-1: USB disconnect, device number 33 [ 961.387279][T15035] set_capacity_and_notify: 1 callbacks suppressed [ 961.387295][T15035] loop1: detected capacity change from 0 to 2048 [ 961.451562][T15035] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 962.026091][ T173] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 962.156908][ T173] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 962.182193][ T173] microsoft 0003:045E:07DA.0018: ignoring exceeding usage max [ 962.206589][ T173] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 962.224942][ T173] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 962.256285][ T173] microsoft 0003:045E:07DA.0018: unsupported Resolution Multiplier 0 [ 962.268406][ T8288] udevd[8288]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 962.288797][ T173] microsoft 0003:045E:07DA.0018: implement() called with n (56) > 32! (kworker/0:2) [ 962.354397][ T173] microsoft 0003:045E:07DA.0018: No inputs registered, leaving [ 962.385459][ T173] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 962.417549][ T173] microsoft 0003:045E:07DA.0018: no inputs found [ 962.427657][ T173] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway [ 962.465571][ T173] usb 1-1: USB disconnect, device number 35 [ 962.531161][ T8] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 962.542285][T15043] fido_id[15043]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 962.742054][ T8] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.760911][ T8] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 962.789820][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 962.797634][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 962.807172][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.822028][ T8] usb 3-1: config 0 descriptor?? [ 962.848687][T15032] loop3: detected capacity change from 0 to 65536 [ 962.879123][T15032] XFS: ikeep mount option is deprecated. [ 962.899701][T15032] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 962.937782][T15032] XFS (loop3): Ending clean mount [ 963.045207][ T5779] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 963.275427][ T8] input: HID 046d:c287 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:C287.0019/input/input20 [ 963.811233][ T8] logitech 0003:046D:C287.0019: input,hidraw0: USB HID v0.00 Joystick [HID 046d:c287] on usb-dummy_hcd.2-1/input0 [ 963.871121][ T8] logitech 0003:046D:C287.0019: missing HID_OUTPUT_REPORT 0 [ 963.951913][T15065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2346'. [ 964.335571][T15065] vlan3: entered promiscuous mode [ 964.352575][T15065] gretap0: entered promiscuous mode [ 964.359419][ T8] usb 3-1: USB disconnect, device number 34 [ 964.675941][T15072] tipc: Enabling of bearer rejected, failed to enable media [ 964.920949][T13785] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 964.973007][ T8] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 965.111036][T13785] usb 4-1: Using ep0 maxpacket: 16 [ 965.127432][T13785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.139545][T13785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 965.149561][T13785] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 965.164039][T13785] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 965.173339][T13785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.180365][T13785] usb 4-1: config 0 descriptor?? [ 965.246752][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.259078][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 965.273494][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 965.273553][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 965.273577][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.276270][ T8] usb 3-1: config 0 descriptor?? [ 965.594922][T15086] loop1: detected capacity change from 0 to 128 [ 965.678290][T13785] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001A/input/input21 [ 965.798524][T13785] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 965.809768][ T8] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 965.886604][ T8] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 966.261853][ T8] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 966.318814][ T8] usb 3-1: USB disconnect, device number 35 [ 966.329591][ T27] usb 4-1: USB disconnect, device number 31 [ 966.516134][T15090] fido_id[15090]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 967.733832][T15105] loop3: detected capacity change from 0 to 2048 [ 968.244532][T15105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 968.287767][ T28] audit: type=1800 audit(1788424229.026:124): pid=15105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2361" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 968.356611][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 969.708330][T15104] loop2: detected capacity change from 0 to 40427 [ 969.825354][T15114] loop1: detected capacity change from 0 to 32768 [ 969.857849][T15114] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.2364 (15114) [ 969.859658][T15104] F2FS-fs (loop2): invalid crc value [ 969.941087][T15114] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 969.948455][T15104] F2FS-fs (loop2): Found nat_bits in checkpoint [ 969.987010][T15114] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 970.027257][T15114] BTRFS info (device loop1): enabling disk space caching [ 970.036464][T15114] BTRFS info (device loop1): force clearing of disk cache [ 970.066803][T15114] BTRFS info (device loop1): disk space caching is enabled [ 970.076211][T15125] loop3: detected capacity change from 0 to 8192 [ 970.124051][T15104] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 970.136878][T15125] loop3: p1 < > p3 < > p4 [ 970.191640][T15125] loop3: p4 size 3081 extends beyond EOD, truncated [ 970.199658][T15114] BTRFS info (device loop1): auto enabling async discard [ 970.254704][T15114] BTRFS info (device loop1): rebuilding free space tree [ 970.306880][T15114] BTRFS info (device loop1): disabling free space tree [ 970.335071][T15114] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 970.392740][T15114] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 970.514857][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 970.527886][ T6089] udevd[6089]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 970.545268][ T8288] udevd[8288]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 970.745125][ T5780] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 971.191831][T15150] loop3: detected capacity change from 0 to 32768 [ 971.211856][T15150] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 971.260972][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 971.278663][ T8288] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 971.460873][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 971.467481][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 3: 255, using maximum allowed: 30 [ 971.478766][ T9] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 971.492385][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 971.499022][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 971.508167][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.519054][ T9] usb 3-1: config 0 descriptor?? [ 971.938116][ T9] appleir 0003:05AC:8243.001C: unknown main item tag 0x4 [ 971.945358][ T9] appleir 0003:05AC:8243.001C: item fetching failed at offset 21/24 [ 971.954280][ T9] appleir 0003:05AC:8243.001C: parse failed [ 971.960309][ T9] appleir: probe of 0003:05AC:8243.001C failed with error -22 [ 972.154816][ T9] usb 3-1: USB disconnect, device number 36 [ 973.061027][ T27] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 973.075623][ T8] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 973.254931][ T27] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 973.264412][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.279138][ T27] usb 2-1: Product: syz [ 973.284631][ T27] usb 2-1: Manufacturer: syz [ 973.284650][ T27] usb 2-1: SerialNumber: syz [ 973.291756][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 973.292489][ T27] usb 2-1: config 0 descriptor?? [ 973.294436][ T27] hub 2-1:0.0: bad descriptor, ignoring hub [ 973.294460][ T27] hub: probe of 2-1:0.0 failed with error -5 [ 973.301690][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.301724][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 973.301747][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 973.301812][ T8] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 973.301833][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.304531][ T8] usb 3-1: config 0 descriptor?? [ 973.629807][ T27] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 973.653385][ T27] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 973.653925][ T27] dib0700: firmware download failed at 7 with -22 [ 973.734558][ T27] usb 2-1: USB disconnect, device number 21 [ 974.116905][ T8] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001D/input/input22 [ 974.193511][ T27] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 974.409901][ T8] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 974.627504][ T27] usb 2-1: string descriptor 0 read error: -22 [ 974.628440][ T27] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 974.628526][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.661375][ T27] usb 2-1: config 0 descriptor?? [ 974.683013][ T8] usb 3-1: USB disconnect, device number 37 [ 974.702176][ T27] hub 2-1:0.0: bad descriptor, ignoring hub [ 974.702206][ T27] hub: probe of 2-1:0.0 failed with error -5 [ 974.847501][T15177] fido_id[15177]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 974.980709][ T27] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 975.006331][ T27] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 975.032049][ T27] dib0700: firmware download failed at 7 with -22 [ 975.100909][ T27] usb 2-1: USB disconnect, device number 22 [ 975.312825][T15185] loop2: detected capacity change from 0 to 16 [ 975.345122][T15185] erofs: (device loop2): mounted with root inode @ nid 36. [ 975.431456][ T173] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 975.526892][T15189] loop2: detected capacity change from 0 to 128 [ 975.569174][T15189] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 975.588295][T15189] ext4 filesystem being mounted at /611/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 975.676422][ T173] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 975.698111][ T173] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 975.791788][ T173] usb 4-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 975.801738][ T173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.809988][ T173] usb 4-1: Product: syz [ 975.907080][ T173] usb 4-1: Manufacturer: syz [ 975.941492][ T5778] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 975.958188][ T173] usb 4-1: SerialNumber: syz [ 975.982030][ T173] ums-onetouch 4-1:1.0: USB Mass Storage device detected [ 976.263655][ T173] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23 [ 976.292044][ T173] input input23: usb_submit_urb failed [ 976.311526][ T173] input: failed to attach handler kbd to device input23, error: -5 [ 976.326479][ T5127] input input23: usb_submit_urb failed [ 976.342846][ T173] scsi host1: usb-storage 4-1:1.0 [ 976.357380][ T173] usb 4-1: USB disconnect, device number 32 [ 976.369205][ T5127] input input23: usb_submit_urb failed [ 976.891193][ T173] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 976.941315][T15217] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2392'. [ 976.952578][T13785] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 976.966500][T15217] vlan2: entered promiscuous mode [ 976.980006][T15217] gretap0: entered promiscuous mode [ 977.095618][ T173] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 977.120790][ T173] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 977.148748][ T173] usb 4-1: string descriptor 0 read error: -22 [ 977.151381][T13785] usb 2-1: Using ep0 maxpacket: 32 [ 977.159617][ T173] usb 4-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 977.169855][ T173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.177178][T13785] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 977.196395][T13785] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.207242][ T173] ums-onetouch 4-1:1.0: USB Mass Storage device detected [ 977.227380][T13785] usb 2-1: config 0 has no interface number 0 [ 977.240847][T13785] usb 2-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 977.272331][ T173] input: Maxtor Onetouch 0d49:7000 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24 [ 977.286817][T13785] usb 2-1: config 0 interface 196 has no altsetting 0 [ 977.288578][ T173] input input24: usb_submit_urb failed [ 977.301106][ T173] input: failed to attach handler kbd to device input24, error: -5 [ 977.321050][ T5127] input input24: usb_submit_urb failed [ 977.326720][ T173] scsi host1: usb-storage 4-1:1.0 [ 977.335391][T13785] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 977.363090][T13785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.364844][ T5768] input input24: usb_submit_urb failed [ 977.371253][ T56] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 977.384872][ T5127] input input24: usb_submit_urb failed [ 977.403703][ T27] usb 4-1: USB disconnect, device number 33 [ 977.414433][ T5127] input input24: usb_submit_urb failed [ 977.430249][T13785] usb 2-1: Product: syz [ 977.459778][T13785] usb 2-1: Manufacturer: syz [ 977.471204][T13785] usb 2-1: SerialNumber: syz [ 977.484513][T13785] usb 2-1: config 0 descriptor?? [ 977.508475][T13785] ipheth 2-1:0.196: Unable to find endpoints [ 977.631201][ T56] usb 3-1: Using ep0 maxpacket: 16 [ 977.640066][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 977.666065][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 977.690475][ T56] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 977.736961][ T56] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 977.761085][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.784871][ T5840] usb 2-1: USB disconnect, device number 23 [ 977.799484][ T56] usb 3-1: config 0 descriptor?? [ 978.249623][ T56] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001E/input/input25 [ 978.373609][ T56] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 978.454700][ T8] usb 3-1: USB disconnect, device number 38 [ 978.470866][ T5840] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 978.558709][T15254] fido_id[15254]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 978.627100][T15256] loop1: detected capacity change from 0 to 4096 [ 978.684771][ T5840] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 978.691893][T15256] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 978.705402][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.718322][T15256] ntfs3: loop1: Failed to load $Extend (-22). [ 978.735496][ T5840] usb 1-1: Product: syz [ 978.739774][ T5840] usb 1-1: Manufacturer: syz [ 978.744562][T15256] ntfs3: loop1: Failed to initialize $Extend. [ 978.757171][ T5840] usb 1-1: SerialNumber: syz [ 978.783327][ T5840] usb 1-1: config 0 descriptor?? [ 978.801998][ T5840] hub 1-1:0.0: bad descriptor, ignoring hub [ 978.810902][ T5840] hub: probe of 1-1:0.0 failed with error -5 [ 979.013369][ T5840] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 979.035207][ T5840] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 979.050488][ T5840] dib0700: firmware download failed at 7 with -22 [ 979.061755][ T27] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 979.253202][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 979.271229][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 979.291227][ T5840] usb 1-1: reset high-speed USB device number 36 using dummy_hcd [ 979.318202][ T27] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 979.335029][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 979.348202][ T27] usb 4-1: SerialNumber: syz [ 979.543773][ T5840] usb 1-1: device firmware changed [ 979.547960][ T5840] usb 1-1: USB disconnect, device number 36 [ 979.739821][ T27] usb 4-1: 0:2 : does not exist [ 979.858871][ T27] usb 4-1: USB disconnect, device number 34 [ 979.901900][ T5840] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 979.952159][ T5768] udevd[5768]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 980.125448][ T5840] usb 1-1: string descriptor 0 read error: -22 [ 980.135706][ T5840] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 980.174414][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.243249][ T5840] usb 1-1: config 0 descriptor?? [ 980.269766][ T5840] hub 1-1:0.0: bad descriptor, ignoring hub [ 980.292172][ T5840] hub: probe of 1-1:0.0 failed with error -5 [ 980.697778][ T5840] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 980.724391][ T5840] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 980.732937][ T5840] dib0700: firmware download failed at 7 with -22 [ 980.777148][T15282] loop2: detected capacity change from 0 to 2048 [ 980.784506][ T5840] usb 1-1: USB disconnect, device number 37 [ 980.787086][T15271] loop1: detected capacity change from 0 to 32768 [ 980.837463][T15282] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 980.865605][T15282] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 980.897266][T15271] ERROR: (device loop1): diAllocAG: numfree > numinos [ 980.897266][T15271] [ 980.934409][T15271] ialloc: diAlloc returned -5! [ 980.947843][T15282] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 980.980862][ T56] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 981.191045][ T56] usb 4-1: Using ep0 maxpacket: 16 [ 981.201810][ T56] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.224235][ T56] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 981.244542][ T56] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 981.270900][ T56] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 981.290528][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.313005][ T56] usb 4-1: config 0 descriptor?? [ 981.873522][ T56] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 981.882068][ T56] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 981.889411][ T56] microsoft 0003:045E:07DA.001F: ignoring exceeding usage max [ 981.899364][ T56] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 981.917675][ T56] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 981.956216][ T56] microsoft 0003:045E:07DA.001F: unsupported Resolution Multiplier 0 [ 981.978969][ T56] microsoft 0003:045E:07DA.001F: implement() called with n (56) > 32! (kworker/1:2) [ 982.022931][ T56] microsoft 0003:045E:07DA.001F: No inputs registered, leaving [ 982.037926][ T56] microsoft 0003:045E:07DA.001F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 982.081280][ T56] microsoft 0003:045E:07DA.001F: no inputs found [ 982.089318][ T56] microsoft 0003:045E:07DA.001F: could not initialize ff, continuing anyway [ 982.123257][ T56] usb 4-1: USB disconnect, device number 35 [ 982.194870][T15294] fido_id[15294]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 983.279135][T15286] loop2: detected capacity change from 0 to 40427 [ 983.321822][T15286] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 983.329703][T15286] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 983.382859][T15286] F2FS-fs (loop2): invalid crc value [ 983.432873][T15286] F2FS-fs (loop2): Found nat_bits in checkpoint [ 983.648543][T15286] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 983.665996][T15286] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 984.964129][ T173] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 985.055140][T15317] loop3: detected capacity change from 0 to 32768 [ 985.077988][T15317] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.2424 (15317) [ 985.184093][T15317] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 985.202003][T15317] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 985.211842][T15317] BTRFS info (device loop3): using free space tree [ 985.224022][T15312] loop1: detected capacity change from 0 to 65536 [ 985.232239][T15312] XFS: ikeep mount option is deprecated. [ 985.245092][ T173] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 985.289353][ T173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.306442][T15312] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 985.330525][ T173] usb 3-1: Product: syz [ 985.345662][T15317] BTRFS info (device loop3): enabling ssd optimizations [ 985.358686][ T173] usb 3-1: Manufacturer: syz [ 985.375926][ T173] usb 3-1: SerialNumber: syz [ 985.384035][T15317] BTRFS info (device loop3): auto enabling async discard [ 985.415371][ T173] usb 3-1: config 0 descriptor?? [ 985.436602][T15312] XFS (loop1): Ending clean mount [ 985.456456][ T173] hub 3-1:0.0: bad descriptor, ignoring hub [ 985.470796][ T173] hub: probe of 3-1:0.0 failed with error -5 [ 985.560871][ T27] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 985.653577][ T173] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 985.690076][ T173] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 985.720212][ T5780] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 985.730979][ T173] dib0700: firmware download failed at 7 with -22 [ 985.774415][ T27] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 985.798276][ T27] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 985.811399][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 985.819478][ T27] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 985.836154][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.848108][ T27] usb 1-1: config 0 descriptor?? [ 985.858675][T15338] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 985.990969][ T173] usb 3-1: reset high-speed USB device number 39 using dummy_hcd [ 986.245609][ T173] usb 3-1: device firmware changed [ 986.262636][ T173] usb 3-1: USB disconnect, device number 39 [ 986.309116][ T27] hid-thrustmaster 0003:044F:B65D.0020: unknown main item tag 0x2 [ 986.341191][ T27] hid-thrustmaster 0003:044F:B65D.0020: unknown main item tag 0x7 [ 986.365947][ T27] hid-thrustmaster 0003:044F:B65D.0020: hidraw0: USB HID v0.0c Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 986.401167][ T27] hid-thrustmaster 0003:044F:B65D.0020: Wrong number of endpoints? [ 986.514789][ C1] hid-thrustmaster 0003:044F:B65D.0020: Unknown packet type 0x0, unable to proceed further with wheel init [ 986.547598][ T5779] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 986.630927][ T173] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 986.728309][ T56] usb 1-1: USB disconnect, device number 38 [ 986.826515][ T173] usb 3-1: string descriptor 0 read error: -22 [ 986.833631][ T173] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 986.857801][ T173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.881553][ T173] usb 3-1: config 0 descriptor?? [ 986.901385][ T173] hub 3-1:0.0: bad descriptor, ignoring hub [ 986.907573][ T173] hub: probe of 3-1:0.0 failed with error -5 [ 987.030521][T15353] loop1: detected capacity change from 0 to 40427 [ 987.044972][T15353] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 987.054177][T15353] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 987.066447][T15353] F2FS-fs (loop1): Image doesn't support compression [ 987.073621][T15353] F2FS-fs (loop1): Image doesn't support compression [ 987.082826][T15353] F2FS-fs (loop1): invalid crc value [ 987.155506][ T173] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 987.182401][ T173] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 987.196498][ T173] dib0700: firmware download failed at 7 with -22 [ 987.242195][ T173] usb 3-1: USB disconnect, device number 40 [ 987.290248][T15353] F2FS-fs (loop1): Start checkpoint disabled! [ 987.310404][T15353] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 987.317885][T15353] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 987.339802][T15353] F2FS-fs (loop1): Stopped filesystem due to reason: 0 [ 988.178099][T15366] loop2: detected capacity change from 0 to 4096 [ 988.194814][T15366] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 988.270540][T15366] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 988.280853][ T56] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 988.401819][ T27] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 988.489681][ T56] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 988.500954][ T8] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 988.502191][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 988.520026][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.530411][ T56] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 988.548319][ T56] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 988.567317][ T56] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 988.576217][ T56] usb 1-1: Manufacturer: syz [ 988.586507][ T56] usb 1-1: config 0 descriptor?? [ 988.607278][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 988.617531][ T27] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 988.628142][ T27] usb 4-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 988.637857][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.653219][ T27] ums-alauda 4-1:1.0: USB Mass Storage device detected [ 988.673043][ T27] ums-alauda 4-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 988.673043][ T27] Please send a copy of this message to and [ 988.701057][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 988.707081][ T27] scsi host1: usb-storage 4-1:1.0 [ 988.715411][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 988.750779][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.760680][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 988.778454][ T8] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 988.787777][T15372] loop2: detected capacity change from 0 to 32768 [ 988.811261][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.828889][ T8] usb 2-1: config 0 descriptor?? [ 988.833220][T15372] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 988.924499][T15372] XFS (loop2): Ending clean mount [ 989.009847][T15372] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 989.026183][T15372] XFS (loop2): Unmount and run xfs_repair [ 989.033319][T15372] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 989.051047][T15372] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 989.060135][T15372] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 989.073657][ T56] appleir 0003:05AC:8243.0021: unknown main item tag 0x0 [ 989.081477][T15372] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 989.090366][T15372] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 989.105981][ T56] appleir 0003:05AC:8243.0021: No inputs registered, leaving [ 989.115680][T15372] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 989.131198][T15372] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 989.132142][ T56] appleir 0003:05AC:8243.0021: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 989.148134][T15372] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 989.160507][T15372] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 989.212437][T15372] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 989.259822][ T8] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 989.283229][ T8] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 989.299116][T15372] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0xc7d/0x1230 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 989.315489][ T8] microsoft 0003:045E:07DA.0022: ignoring exceeding usage max [ 989.328089][ T8] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 989.337294][ T8] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 989.348252][T15372] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 989.358119][ T8] microsoft 0003:045E:07DA.0022: unsupported Resolution Multiplier 0 [ 989.372090][ T8] microsoft 0003:045E:07DA.0022: implement() called with n (56) > 32! (kworker/0:0) [ 989.455816][ T5778] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 989.462717][ T8] microsoft 0003:045E:07DA.0022: No inputs registered, leaving [ 989.499141][ T8] microsoft 0003:045E:07DA.0022: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 989.508483][ T27] usb 1-1: USB disconnect, device number 39 [ 989.540438][ T8] microsoft 0003:045E:07DA.0022: no inputs found [ 989.561166][ T8] microsoft 0003:045E:07DA.0022: could not initialize ff, continuing anyway [ 989.600428][ T8] usb 2-1: USB disconnect, device number 24 [ 989.703872][T15386] fido_id[15386]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 989.787817][ T7053] scsi 1:0:0:0: Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 989.822417][ T7053] scsi 1:0:0:1: Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 989.874868][ T7044] sd 1:0:0:0: [sdb] Media removed, stopped polling [ 989.876790][ T7053] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 989.914991][ T7044] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 989.934068][ T7053] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 990.076111][ T8] usb 4-1: USB disconnect, device number 36 [ 990.087875][ T7044] sd 1:0:0:1: [sdc] Media removed, stopped polling [ 990.100866][ T27] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 990.185453][ T7044] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 990.207185][ T8288] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 990.288848][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 990.317414][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 990.340400][ T27] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 990.350279][ T27] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 990.351411][ T5772] udevd[5772]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 990.365526][ T27] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 990.415090][ T27] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 990.452989][ T27] usb 3-1: config 1 interface 1 has no altsetting 0 [ 990.474220][ T27] usb 3-1: string descriptor 0 read error: -22 [ 990.496024][ T27] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 990.507606][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.687714][ T5768] udevd[5768]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 990.809002][ T8288] udevd[8288]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 990.828287][ T27] usb 3-1: 2:0: failed to get current value for ch 0 (-32) [ 990.871352][T15402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2440'. [ 990.974066][T15391] loop1: detected capacity change from 0 to 32768 [ 991.048498][ T27] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 991.156869][ T27] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 991.162456][T15391] JBD2: Ignoring recovery information on journal [ 991.285179][ T27] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 991.299129][ T27] usb 3-1: USB disconnect, device number 41 [ 991.595506][T15391] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 991.927533][ T5780] ocfs2: Unmounting device (7,1) on (node local) [ 992.015225][T15400] loop3: detected capacity change from 0 to 32768 [ 992.046000][T15400] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 992.289323][ T5768] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 992.548606][T15427] loop2: detected capacity change from 0 to 512 [ 993.287609][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.287668][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.596374][T15419] loop1: detected capacity change from 0 to 40427 [ 994.635623][T15419] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 994.669744][T15419] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 994.746155][T15419] F2FS-fs (loop1): Found nat_bits in checkpoint [ 994.847738][T15419] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 994.855168][T15419] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 994.979101][T15419] syz.1.2443: attempt to access beyond end of device [ 994.979101][T15419] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 995.035948][ T27] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 995.051154][T13785] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 995.242250][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 995.252830][ T27] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 995.271006][ T27] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 995.286221][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 995.286478][T13785] usb 3-1: not running at top speed; connect to a high speed hub [ 995.305033][ T27] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 995.317515][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 995.328734][ T27] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 995.345645][T13785] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 995.355995][T13785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.366289][ T27] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 995.378891][T13785] usb 3-1: Product: syz [ 995.384604][T13785] usb 3-1: Manufacturer: syz [ 995.389442][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.400328][T13785] usb 3-1: SerialNumber: syz [ 995.423053][T13785] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected [ 995.472758][T13785] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 995.492888][T13785] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 995.507145][T13785] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 995.537638][T13785] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 995.671508][ T27] usb 4-1: GET_CAPABILITIES returned 0 [ 995.677151][ T27] usbtmc 4-1:16.0: can't read capabilities [ 995.815267][ C1] usb 3-1: malformed indat packet [ 995.820650][ C1] usb 3-1: malformed indat packet [ 995.826009][ C1] usb 3-1: malformed indat packet [ 995.831418][ C1] usb 3-1: malformed indat packet [ 995.836740][ C1] usb 3-1: malformed indat packet [ 995.842527][ C1] usb 3-1: malformed indat packet [ 995.847870][ C1] usb 3-1: malformed indat packet [ 995.930403][T13785] usb 4-1: USB disconnect, device number 37 [ 996.057354][ T173] usb 3-1: USB disconnect, device number 42 [ 996.081730][ T173] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 996.131116][ T173] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 996.155630][ T173] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 996.178073][ T173] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 996.207631][ T173] keyspan 3-1:1.0: device disconnected [ 996.258608][T15460] loop1: detected capacity change from 0 to 32768 [ 996.289509][T15460] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 996.360955][T15460] XFS (loop1): Ending clean mount [ 996.413786][ T56] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 996.444325][ T56] XFS (loop1): Unmount and run xfs_repair [ 996.450650][ T56] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 996.479361][ T56] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 996.514888][ T56] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 996.550882][ T56] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 996.559812][ T56] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 996.590983][ T56] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 996.610968][ T56] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 996.636005][ T56] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 996.660862][ T56] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 996.676063][T15460] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 996.868319][T15460] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0xc7d/0x1230 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 996.886510][T15460] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 996.961757][ T56] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 997.182591][ T56] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 997.189597][ T8] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 997.191257][ T56] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 997.208949][ T56] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 997.220861][ T56] usb 4-1: config 220 has no interface number 2 [ 997.221069][ T56] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 997.221161][ T56] usb 4-1: config 220 interface 0 has no altsetting 0 [ 997.221240][ T56] usb 4-1: config 220 interface 76 has no altsetting 0 [ 997.221325][ T56] usb 4-1: config 220 interface 1 has no altsetting 0 [ 997.224522][ T56] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 997.286212][ T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.286275][ T56] usb 4-1: Product: syz [ 997.286350][ T56] usb 4-1: Manufacturer: syz [ 997.286427][ T56] usb 4-1: SerialNumber: syz [ 997.319360][ T5780] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 997.427118][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 997.451664][ T8] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 997.451697][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.453681][ T8] usb 3-1: config 0 descriptor?? [ 997.616929][ T56] usb 4-1: selecting invalid altsetting 0 [ 997.641379][ T56] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 997.647806][ T56] usb 4-1: No valid video chain found. [ 997.683483][ T56] usb 4-1: selecting invalid altsetting 0 [ 997.689292][ T56] usbtest: probe of 4-1:220.1 failed with error -22 [ 997.697648][ T8] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 997.728840][ T56] usb 4-1: USB disconnect, device number 38 [ 997.731293][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 997.752407][ T8] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 997.759697][ T8] usb 3-1: media controller created [ 997.841026][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 997.909212][T15483] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 997.933486][ T8] az6027: usb out operation failed. (-71) [ 997.940490][ T8] az6027: usb out operation failed. (-71) [ 997.948812][ T8] stb0899_attach: Driver disabled by Kconfig [ 997.956600][ T8] az6027: no front-end attached [ 997.956600][ T8] [ 997.964739][ T8] az6027: usb out operation failed. (-71) [ 997.970500][ T8] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 997.984768][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input26 [ 998.008230][ T8] dvb-usb: schedule remote query interval to 400 msecs. [ 998.017720][ T8] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 998.034882][ T8] usb 3-1: USB disconnect, device number 43 [ 998.122734][ T8] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 998.171416][ T27] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 998.371178][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 998.378524][ T27] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 998.391091][ T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 998.426725][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 998.448479][ T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 998.480372][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 998.497906][ T27] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 998.516839][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 998.526189][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.761031][ T27] usb 2-1: GET_CAPABILITIES returned 0 [ 998.766618][ T27] usbtmc 2-1:16.0: can't read capabilities [ 999.016542][ T27] usb 2-1: USB disconnect, device number 25 [ 999.060982][T15502] loop3: detected capacity change from 0 to 512 [ 999.146139][T15504] loop2: detected capacity change from 0 to 2048 [ 999.169499][T15504] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=4294967289, location=4294967289 [ 999.234638][T15504] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1000.191104][ T8] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1000.213078][T15515] loop3: detected capacity change from 0 to 512 [ 1000.222916][T15515] EXT4-fs: Ignoring removed nobh option [ 1000.276568][T15515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1000.291920][T13785] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1000.299708][T15515] ext4 filesystem being mounted at /580/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1000.327063][T15515] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.2481: corrupted inode contents [ 1000.355750][T15515] EXT4-fs error (device loop3): ext4_dirty_inode:6144: inode #2: comm syz.3.2481: mark_inode_dirty error [ 1000.370353][T15515] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.2481: corrupted inode contents [ 1000.388962][T15519] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.2481: corrupted inode contents [ 1000.405994][T15519] EXT4-fs error (device loop3): ext4_dirty_inode:6144: inode #2: comm syz.3.2481: mark_inode_dirty error [ 1000.418419][T15519] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.2481: corrupted inode contents [ 1000.432507][T15519] EXT4-fs error (device loop3): __ext4_ext_dirty:208: inode #2: comm syz.3.2481: mark_inode_dirty error [ 1000.434402][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 1000.451284][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.467016][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1000.480039][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1000.480238][T13785] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1000.494359][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1000.504383][T13785] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1000.519223][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1000.533517][T13785] usb 2-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 1000.550626][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.550852][T13785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.562403][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1000.577027][ T8] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1000.586529][ T8] usb 3-1: Manufacturer: syz [ 1000.595748][ T8] usb 3-1: config 0 descriptor?? [ 1000.614847][T13785] usb 2-1: Product: syz [ 1000.624930][T13785] usb 2-1: Manufacturer: syz [ 1000.629589][T13785] usb 2-1: SerialNumber: syz [ 1000.673378][T13785] ums-onetouch 2-1:1.0: USB Mass Storage device detected [ 1000.704582][T13785] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/input/input27 [ 1000.718236][T13785] input input27: usb_submit_urb failed [ 1000.724697][T13785] input: failed to attach handler kbd to device input27, error: -5 [ 1000.740555][ T5127] input input27: usb_submit_urb failed [ 1000.747217][ T5127] input input27: usb_submit_urb failed [ 1000.754104][T13785] scsi host1: usb-storage 2-1:1.0 [ 1000.858883][ T8288] input input27: usb_submit_urb failed [ 1000.899234][ T5127] input input27: usb_submit_urb failed [ 1000.929600][ T5127] input input27: usb_submit_urb failed [ 1000.992353][ T8] rc_core: IR keymap rc-hauppauge not found [ 1000.998338][ T8] Registered IR keymap rc-empty [ 1001.001647][T13785] usb 2-1: USB disconnect, device number 26 [ 1001.022015][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1001.058471][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1001.102909][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1001.116924][T15525] loop3: detected capacity change from 0 to 32768 [ 1001.117891][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input28 [ 1001.140229][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1001.155884][T15525] JBD2: Ignoring recovery information on journal [ 1001.191364][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1001.199359][T15525] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1001.223539][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1001.291691][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1001.338115][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1001.367710][ T5779] ocfs2: Unmounting device (7,3) on (node local) [ 1001.403260][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1001.435462][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1001.471053][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1001.550912][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1001.582224][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1001.601068][T13785] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1001.623216][ T8] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1001.640053][ T8] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1001.663098][ T8] usb 3-1: USB disconnect, device number 44 [ 1001.807458][T13785] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1001.818519][T13785] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1001.833551][T13785] usb 2-1: string descriptor 0 read error: -22 [ 1001.842845][T13785] usb 2-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 1001.853815][T13785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.868440][T13785] ums-onetouch 2-1:1.0: USB Mass Storage device detected [ 1001.883457][T13785] input: Maxtor Onetouch 0d49:7000 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input29 [ 1001.896837][T13785] input input29: usb_submit_urb failed [ 1001.902878][T13785] input: failed to attach handler kbd to device input29, error: -5 [ 1001.912491][ T5127] input input29: usb_submit_urb failed [ 1001.920697][ T5127] input input29: usb_submit_urb failed [ 1001.930548][T13785] scsi host1: usb-storage 2-1:1.0 [ 1001.944563][ T5768] input input29: usb_submit_urb failed [ 1001.970294][ T5127] input input29: usb_submit_urb failed [ 1002.027345][ T5127] input input29: usb_submit_urb failed [ 1002.391315][ T8] usb 2-1: USB disconnect, device number 27 [ 1003.433657][T15556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2491'. [ 1003.585452][T15541] loop2: detected capacity change from 0 to 32768 [ 1003.605707][T15541] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1003.626401][T15541] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1003.646363][T15541] BTRFS info (device loop2): setting nodatasum [ 1003.667308][T15541] BTRFS info (device loop2): force zlib compression, level 3 [ 1003.675293][T15541] BTRFS info (device loop2): turning on flush-on-commit [ 1003.717786][T15541] BTRFS info (device loop2): max_inline at 4096 [ 1003.735074][T15541] BTRFS info (device loop2): using free space tree [ 1003.802949][T15541] BTRFS info (device loop2): enabling ssd optimizations [ 1003.821157][ T56] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1004.031016][ T56] usb 1-1: Using ep0 maxpacket: 16 [ 1004.058643][ T56] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.083523][ T56] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1004.108264][T15555] loop1: detected capacity change from 0 to 32768 [ 1004.115086][ T56] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1004.132521][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.153863][ T56] usb 1-1: Product: syz [ 1004.158294][ T56] usb 1-1: Manufacturer: syz [ 1004.195168][ T56] usb 1-1: SerialNumber: syz [ 1004.314250][T15555] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.2489 (15555) [ 1004.401188][ T5778] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1004.457733][T15555] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1004.458136][T15555] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1004.458272][T15555] BTRFS info (device loop1): using free space tree [ 1004.633217][ T56] usb 1-1: 0:2 : does not exist [ 1004.652776][ T56] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1004.678186][ T56] usb 1-1: USB disconnect, device number 40 [ 1004.822920][ T5772] udevd[5772]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1004.879430][T15555] BTRFS info (device loop1): enabling ssd optimizations [ 1004.912274][T15555] BTRFS info (device loop1): auto enabling async discard [ 1006.937195][ T5780] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1007.390912][T13785] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1007.404798][ T8] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1007.585106][T13785] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1007.614039][T13785] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1007.622891][ T8] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1007.623297][T13785] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1007.650347][T13785] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1007.655215][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.658416][T13785] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1007.677963][T13785] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1007.678052][T13785] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1007.679519][T13785] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1007.704027][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.734693][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1007.761997][T13785] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1007.762129][T13785] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1007.772422][T13785] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1007.792087][ T8] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1007.848145][T13785] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1007.848325][T13785] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1007.853039][T13785] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1007.931092][T13785] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1007.931195][T13785] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1007.932648][T13785] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1007.961331][T13785] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1007.961426][T13785] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1007.963650][T13785] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1007.985320][ T8] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1007.991915][T13785] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1008.014890][T13785] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1008.016634][T13785] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1008.045640][T13785] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1008.045736][T13785] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1008.057396][T13785] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1008.082414][ T8] usb 4-1: Manufacturer: syz [ 1008.147055][T13785] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1008.147190][T13785] usb 1-1: Product: syz [ 1008.147343][T13785] usb 1-1: Manufacturer: syz [ 1008.147458][T13785] usb 1-1: SerialNumber: syz [ 1008.235087][T13785] usb 1-1: config 0 descriptor?? [ 1008.267566][T13785] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1008.316980][ T8] usb 4-1: config 0 descriptor?? [ 1008.637215][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 1008.638662][ T5818] usb 1-1: USB disconnect, device number 41 [ 1008.682245][ T5818] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1008.779318][ T8] appleir 0003:05AC:8243.0023: unknown main item tag 0x0 [ 1009.056744][ T8] appleir 0003:05AC:8243.0023: No inputs registered, leaving [ 1009.171524][ T8] appleir 0003:05AC:8243.0023: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1009.246702][ T8] usb 4-1: USB disconnect, device number 39 [ 1009.376925][T15661] fido_id[15661]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1010.581564][T13785] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1010.813002][T13785] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1010.823435][T13785] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1010.857502][T13785] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1010.867598][T13785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1010.876075][T13785] usb 2-1: SerialNumber: syz [ 1010.977284][T15678] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1011.226125][T15666] loop2: detected capacity change from 0 to 32768 [ 1011.250003][T15666] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.2519 (15666) [ 1011.292181][T15678] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1011.312367][T15666] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1011.343423][T15666] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 1011.381706][T15666] BTRFS info (device loop2): using free space tree [ 1011.500073][T15666] BTRFS info (device loop2): enabling ssd optimizations [ 1011.508458][T15666] BTRFS info (device loop2): auto enabling async discard [ 1011.641104][ T5840] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1011.831231][ T5840] usb 1-1: Using ep0 maxpacket: 32 [ 1011.853335][ T5840] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 1011.895562][ T5840] usb 1-1: config 0 has no interface number 0 [ 1011.906446][T13785] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1011.920683][ T5840] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1011.960667][ T5840] usb 1-1: config 0 interface 85 has no altsetting 0 [ 1012.005561][ T5840] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1012.016130][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.165810][ T5840] usb 1-1: Product: syz [ 1012.181930][ T5840] usb 1-1: Manufacturer: syz [ 1012.186780][ T5840] usb 1-1: SerialNumber: syz [ 1012.225808][ T5840] usb 1-1: config 0 descriptor?? [ 1012.304876][ T9] usb 2-1: USB disconnect, device number 28 [ 1012.315070][ T9] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 1012.652779][ T5840] appletouch 1-1:0.85: Geyser mode initialized. [ 1012.682824][ T5840] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input30 [ 1013.086756][ T5840] usb 1-1: USB disconnect, device number 42 [ 1013.159370][ T5840] appletouch 1-1:0.85: input: appletouch disconnected [ 1013.268861][ T5778] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1013.751226][T15745] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2538'. [ 1014.280102][T15764] loop2: detected capacity change from 0 to 128 [ 1014.321846][T15764] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1014.392744][T15764] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1014.612957][ T1149] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1015.011203][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1015.200114][T15791] loop1: detected capacity change from 0 to 1024 [ 1015.232107][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1015.242181][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1015.317592][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1015.328884][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1015.339581][ T9] usb 3-1: SerialNumber: syz [ 1015.369762][T15778] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1015.610720][T15778] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1016.052225][ T9] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1016.094126][T15800] netlink: 774 bytes leftover after parsing attributes in process `syz.3.2552'. [ 1016.104164][T15800] netlink: 'syz.3.2552': attribute type 1 has an invalid length. [ 1016.358345][T15793] loop1: detected capacity change from 0 to 32768 [ 1016.389753][ T9] usb 3-1: USB disconnect, device number 45 [ 1016.413303][ T9] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 1016.661131][T15793] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1017.066600][T15814] loop2: detected capacity change from 0 to 16 [ 1017.093239][ T5780] ocfs2: Unmounting device (7,1) on (node local) [ 1017.184015][T15814] erofs: (device loop2): mounted with root inode @ nid 36. [ 1017.266281][ T28] audit: type=1800 audit(1788424278.016:125): pid=15814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2555" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1017.582980][T15830] loop1: detected capacity change from 0 to 512 [ 1017.594044][T15830] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1017.675100][T15830] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1017.798931][T15830] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.2556: bg 0: block 248: padding at end of block bitmap is not set [ 1017.916813][T15830] Quota error (device loop1): write_blk: dquota write failed [ 1017.940052][T15830] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1017.950409][T15830] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.2556: Failed to acquire dquot type 1 [ 1018.007817][T15830] EXT4-fs (loop1): 1 truncate cleaned up [ 1018.228515][T15830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1018.597212][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1018.613004][ T7072] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 1018.640641][ T7072] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:31: Failed to release dquot type 1 [ 1018.829702][T15858] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2567'. [ 1019.689903][T15873] loop3: detected capacity change from 0 to 4096 [ 1020.230985][T15873] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1020.714304][T15900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2580'. [ 1020.731088][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1020.980839][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1021.002885][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1021.062445][ T9] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 1021.088556][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.105182][ T9] usb 3-1: Product: syz [ 1021.109491][ T9] usb 3-1: Manufacturer: syz [ 1021.118691][ T9] usb 3-1: SerialNumber: syz [ 1021.134991][ T9] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 1021.150213][ T9] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1021.150213][ T9] Please send a copy of this message to and [ 1021.684239][T15928] loop1: detected capacity change from 0 to 128 [ 1021.719437][T15928] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1021.751302][T15928] ext4 filesystem being mounted at /649/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1021.776559][T15928] syz.1.2590 (pid 15928) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1021.822487][ T9] ums-sddr09: probe of 3-1:1.0 failed with error -5 [ 1021.836268][ T5780] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1021.873903][ T173] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1022.122892][ T173] usb 1-1: Using ep0 maxpacket: 16 [ 1022.127251][ T5840] usb 3-1: USB disconnect, device number 46 [ 1022.180499][ T173] usb 1-1: config 0 has no interfaces? [ 1022.305447][ T173] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1022.368315][ T173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.517667][ T173] usb 1-1: Product: syz [ 1022.534451][ T173] usb 1-1: Manufacturer: syz [ 1022.540878][ T173] usb 1-1: SerialNumber: syz [ 1022.571898][ T173] r8152-cfgselector 1-1: config 0 descriptor?? [ 1022.639625][T15939] loop3: detected capacity change from 0 to 128 [ 1022.657692][T15939] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1022.667387][T15939] System zones: 1-3, 19-19, 35-36 [ 1022.674920][T15939] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: writeback. [ 1022.726567][ T5779] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1022.831072][ T173] r8152-cfgselector 1-1: Needed 2 retries to read version [ 1022.840825][ T173] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1022.891092][ T5840] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1022.914495][T15946] loop3: detected capacity change from 0 to 2048 [ 1022.946311][T15946] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1023.027535][ T27] r8152-cfgselector 1-1: USB disconnect, device number 43 [ 1023.138072][T15949] loop3: detected capacity change from 0 to 256 [ 1023.262829][ T5840] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1023.300098][ T5840] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1023.314060][ T5840] usb 2-1: can't read configurations, error -71 [ 1023.354890][T15944] loop2: detected capacity change from 0 to 32768 [ 1023.376181][T15944] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2596 (15944) [ 1023.408839][T15944] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1023.419644][T15944] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1023.430164][T15944] BTRFS info (device loop2): setting nodatacow, compression disabled [ 1023.438804][T15944] BTRFS info (device loop2): force clearing of disk cache [ 1023.447709][T15944] BTRFS info (device loop2): turning on async discard [ 1023.455200][T15944] BTRFS info (device loop2): turning off barriers [ 1023.462223][T15944] BTRFS info (device loop2): disabling free space tree [ 1023.471645][T15944] BTRFS info (device loop2): enabling ssd optimizations [ 1023.478851][T15944] BTRFS info (device loop2): using spread ssd allocation scheme [ 1023.487582][T15944] BTRFS info (device loop2): not using ssd optimizations [ 1023.495454][T15944] BTRFS info (device loop2): not using spread ssd allocation scheme [ 1023.546297][T15944] BTRFS info (device loop2): rebuilding free space tree [ 1023.590864][ T173] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1023.614013][T15944] BTRFS info (device loop2): disabling free space tree [ 1023.639707][T15944] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1023.665258][T15944] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1023.787024][ T173] usb 4-1: Using ep0 maxpacket: 32 [ 1023.797161][ T173] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1023.820923][ T173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.859857][ T173] usb 4-1: config 0 descriptor?? [ 1023.993295][ T5778] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1024.126843][ T173] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1024.160450][ T173] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1024.248679][ T173] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1024.330936][ T173] usb 4-1: media controller created [ 1024.769716][ T173] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1024.875849][ T173] az6027: usb out operation failed. (-71) [ 1024.903442][ T173] az6027: usb out operation failed. (-71) [ 1024.940877][ T173] stb0899_attach: Driver disabled by Kconfig [ 1024.946939][ T173] az6027: no front-end attached [ 1024.946939][ T173] [ 1025.001131][ T173] az6027: usb out operation failed. (-71) [ 1025.006932][ T173] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1025.059390][ T173] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input31 [ 1025.105377][ T173] dvb-usb: schedule remote query interval to 400 msecs. [ 1025.138225][ T173] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1025.222352][ T173] usb 4-1: USB disconnect, device number 40 [ 1025.267621][T15982] loop3: detected capacity change from 0 to 8192 [ 1025.293249][T15982] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1025.321236][T15982] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1025.330535][T15982] REISERFS (device loop3): using ordered data mode [ 1025.344862][T15982] reiserfs: using flush barriers [ 1025.350879][ T5818] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1025.387208][T15982] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1025.435815][ T173] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1025.469034][T15982] REISERFS (device loop3): checking transaction log (loop3) [ 1025.535557][T15982] REISERFS (device loop3): Using r5 hash to sort names [ 1025.561224][T15982] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1025.607091][ T5818] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1025.621182][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.637218][ T5818] usb 2-1: config 0 descriptor?? [ 1025.653541][ T5818] cp210x 2-1:0.0: cp210x converter detected [ 1026.065936][T16000] loop2: detected capacity change from 0 to 1024 [ 1026.218774][ T5778] hfsplus: bad catalog entry type [ 1026.266637][ T5818] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1026.286722][ T5818] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1026.306422][ T5818] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1026.332157][ T5818] usb 2-1: USB disconnect, device number 31 [ 1026.344811][ T5818] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1026.362017][ T5818] cp210x 2-1:0.0: device disconnected [ 1026.450595][ T7034] hfsplus: b-tree write err: -5, ino 25 [ 1026.465323][ T7034] hfsplus: b-tree write err: -5, ino 4 [ 1026.471939][ T7034] hfsplus: b-tree write err: -5, ino 2 [ 1026.477651][ T7034] hfsplus: b-tree write err: -5, ino 17 [ 1026.535525][T16008] loop3: detected capacity change from 0 to 256 [ 1026.567242][ T28] audit: type=1800 audit(1788424287.316:126): pid=16008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2613" name="file1" dev="loop3" ino=1048929 res=0 errno=0 [ 1026.568306][T16008] FAT-fs (loop3): error, clusters badly computed (0 != 128) [ 1026.609711][T16008] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1026.690523][T16008] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1026.994698][ T7032] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.084886][ T173] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1027.117402][ T7032] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.247606][T16019] loop1: detected capacity change from 0 to 4096 [ 1027.257053][ T7032] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.284727][ T173] usb 4-1: Using ep0 maxpacket: 32 [ 1027.303672][ T173] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1027.321113][ T173] usb 4-1: config 0 has no interface number 0 [ 1027.327804][ T173] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1027.356315][T16019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1027.359971][ T173] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1027.387591][ T173] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1027.403930][ T173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.412162][ T173] usb 4-1: Product: syz [ 1027.416446][ T173] usb 4-1: Manufacturer: syz [ 1027.423814][ T173] usb 4-1: SerialNumber: syz [ 1027.439824][ T173] usb 4-1: config 0 descriptor?? [ 1027.460681][ T7032] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.542341][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.700986][ T8] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1027.753897][ T7032] tipc: Disabling bearer [ 1027.797015][ T7032] tipc: Left network mode [ 1027.894913][ T173] appletouch 4-1:0.85: Geyser mode initialized. [ 1027.917875][ T8] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1027.943387][ T173] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input32 [ 1027.957509][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.980898][T16031] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1028.007823][ T8] usb 1-1: Product: syz [ 1028.012221][T16031] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1028.027439][ T8] usb 1-1: Manufacturer: syz [ 1028.032137][ T8] usb 1-1: SerialNumber: syz [ 1028.038384][T16031] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1028.057603][T16031] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1028.066296][T16031] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1028.076868][T16031] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1028.097628][ T173] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1028.342039][ T5840] usb 1-1: USB disconnect, device number 44 [ 1028.363833][ T8] usb 4-1: USB disconnect, device number 41 [ 1028.377712][ T8] appletouch 4-1:0.85: input: appletouch disconnected [ 1028.822823][T16030] chnl_net:caif_netlink_parms(): no params data found [ 1028.917787][T16030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.925203][T16030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.933356][T16030] bridge_slave_0: entered allmulticast mode [ 1028.940550][T16030] bridge_slave_0: entered promiscuous mode [ 1028.949323][T16030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.956620][T16030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.964360][T16030] bridge_slave_1: entered allmulticast mode [ 1028.971945][T16030] bridge_slave_1: entered promiscuous mode [ 1029.041086][T16054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2623'. [ 1029.106756][T16030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.214459][ T173] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1029.221721][T16030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1029.247623][ T173] ath9k_htc: Failed to initialize the device [ 1029.275019][ T5840] usb 1-1: ath9k_htc: USB layer deinitialized [ 1029.321898][T16030] team0: Port device team_slave_0 added [ 1029.326678][T16059] loop3: detected capacity change from 0 to 1024 [ 1029.432775][T16030] team0: Port device team_slave_1 added [ 1029.691705][ T5840] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1029.743547][T16030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.761186][T16030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.810896][T16030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.891511][ T5840] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1029.935495][ T5840] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1289, setting to 1024 [ 1029.961454][T16030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.968467][T16030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.978499][ T5840] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1030.028438][T16076] loop3: detected capacity change from 0 to 512 [ 1030.039587][ T5840] usb 1-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 1030.078709][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.097965][T16030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.166586][T16031] Bluetooth: hci1: command tx timeout [ 1030.456969][T16030] hsr_slave_0: entered promiscuous mode [ 1030.466851][T16030] hsr_slave_1: entered promiscuous mode [ 1030.475345][T16030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1030.484507][T16030] Cannot create hsr debugfs directory [ 1030.530645][ T7032] hsr_slave_0: left promiscuous mode [ 1030.537054][ T7032] hsr_slave_1: left promiscuous mode [ 1030.544136][ T7032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1030.554333][ T173] usb 1-1: USB disconnect, device number 45 [ 1030.562354][T16031] Bluetooth: hci4: Reading Intel version command failed (-71) [ 1030.568178][ T7032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1030.622463][ T7032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1030.636734][ T7032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1030.645456][ T7032] bridge_slave_1: left allmulticast mode [ 1030.652694][ T7032] bridge_slave_1: left promiscuous mode [ 1030.661552][ T7032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.676314][ T7032] bridge_slave_0: left allmulticast mode [ 1030.682463][ T7032] bridge_slave_0: left promiscuous mode [ 1030.688169][ T7032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.722678][ T7032] veth1_macvtap: left promiscuous mode [ 1030.728850][ T7032] veth0_macvtap: left promiscuous mode [ 1030.735850][ T7032] veth1_vlan: left promiscuous mode [ 1030.741419][ T7032] veth0_vlan: left promiscuous mode [ 1031.218864][ T7032] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 1031.887673][ T7032] team0 (unregistering): Port device team_slave_1 removed [ 1031.987068][ T7032] team0 (unregistering): Port device team_slave_0 removed [ 1032.071293][ T7032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1032.157986][ T7032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1032.242742][ T51] Bluetooth: hci1: command tx timeout [ 1032.889594][ T7032] bond0 (unregistering): Released all slaves [ 1033.087967][T16082] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2629'. [ 1033.544213][T16099] loop1: detected capacity change from 0 to 8192 [ 1033.613708][T16099] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1033.630906][T16099] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1033.701216][T16099] REISERFS (device loop1): using ordered data mode [ 1033.748363][T16099] reiserfs: using flush barriers [ 1033.811606][T16099] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1033.871484][T16099] REISERFS (device loop1): checking transaction log (loop1) [ 1033.942888][T16030] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1033.969746][T16099] REISERFS (device loop1): Using r5 hash to sort names [ 1033.996530][T16099] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1034.092256][T16030] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1034.195951][T16030] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1034.224268][T16030] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1034.280972][ T7032] IPVS: stop unused estimator thread 0... [ 1034.320989][ T51] Bluetooth: hci1: command tx timeout [ 1034.393885][T16103] loop3: detected capacity change from 0 to 32768 [ 1034.625669][T16030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1034.702660][T16030] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.768160][ T7044] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.775396][ T7044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.820050][ T7044] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.827286][ T7044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.950949][ T27] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 1035.153332][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.173600][ T27] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1035.219684][ T27] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1035.253893][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.291770][ T27] usb 2-1: config 0 descriptor?? [ 1035.313125][ T27] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1035.344067][ T27] dvb-usb: bulk message failed: -22 (3/0) [ 1035.375881][ T27] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1035.415577][ T27] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1035.436390][ T27] usb 2-1: media controller created [ 1035.452703][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1035.508239][ T27] dvb-usb: bulk message failed: -22 (6/0) [ 1035.533851][ T27] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1035.542119][T16127] dibusb: i2c wr: len=61 is too big! [ 1035.542119][T16127] [ 1035.552185][T16030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1035.563200][ T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input33 [ 1035.625895][ T27] dvb-usb: schedule remote query interval to 150 msecs. [ 1035.660375][ T27] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1035.695326][ T27] usb 2-1: USB disconnect, device number 32 [ 1035.783800][ T27] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1036.185156][T16030] veth0_vlan: entered promiscuous mode [ 1036.245739][T16030] veth1_vlan: entered promiscuous mode [ 1036.274660][T16166] loop3: detected capacity change from 0 to 1024 [ 1036.351750][T16030] veth0_macvtap: entered promiscuous mode [ 1036.377139][T16030] veth1_macvtap: entered promiscuous mode [ 1036.400941][ T51] Bluetooth: hci1: command tx timeout [ 1036.408001][T16166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1036.445232][T16166] ext4 filesystem being mounted at /630/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1036.497715][T16030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.527853][T16030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.540439][T16030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.568588][T16030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.580830][T16030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.610885][T16030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.614410][T16166] EXT4-fs error (device loop3): ext4_free_blocks:6694: comm syz.3.2647: Freeing blocks not in datazone - block = 0, count = 16 [ 1036.632483][T16030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1036.647265][T16030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.658117][T16030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.690918][T16030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.721055][T16030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.751121][T16030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.774452][T16030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.797977][T16030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1036.805198][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1036.854168][T16030] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.901564][T16030] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.910343][T16030] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.961007][T16030] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.259468][T16191] loop3: detected capacity change from 0 to 2048 [ 1037.283498][ T7044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.314444][ T7044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.370692][T16191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1037.417275][T16191] ext4 filesystem being mounted at /632/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1037.475092][ T7040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.498731][T16191] fs-verity: sha512 using implementation "sha512-avx2" [ 1037.514675][ T7040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.549644][T16191] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 5 vs 100663301 free clusters [ 1037.592762][T16191] fs-verity (loop3, inode 13): ext4_end_enable_verity() failed with err -28 [ 1037.776068][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.875930][T16206] loop1: detected capacity change from 0 to 256 [ 1037.908744][T16206] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1038.017328][T16210] loop3: detected capacity change from 0 to 512 [ 1038.066808][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2657'. [ 1038.105984][T16210] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.2656: bad orphan inode 13 [ 1038.133991][T16210] ext4_test_bit(bit=12, block=4) = 1 [ 1038.135930][T16213] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 1038.149645][T16210] is_bad_inode(inode)=0 [ 1038.157370][T16210] NEXT_ORPHAN(inode)=0 [ 1038.183566][T16210] max_ino=32 [ 1038.194432][T16216] loop4: detected capacity change from 0 to 512 [ 1038.205479][T16210] i_nlink=1 [ 1038.209917][T16210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1038.299927][T16216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1038.354034][T16216] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1038.409044][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.633056][T16231] loop3: detected capacity change from 0 to 128 [ 1038.642329][T16030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.671179][T16231] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1038.729720][T16231] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1039.130875][ T5815] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 1039.323135][ T5815] usb 5-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 1039.340865][ T5815] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 1039.382046][ T5815] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1039.399103][ T5815] usb 5-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.00 [ 1039.424604][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.440939][ T5818] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1039.444195][ T5815] usb 5-1: config 0 descriptor?? [ 1039.555745][T16237] loop1: detected capacity change from 0 to 32768 [ 1039.611604][T16237] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1039.652704][ T5818] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.670880][ T5818] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1039.718046][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.739684][ T5818] usb 4-1: config 0 descriptor?? [ 1039.889246][ T5815] wacom 0003:056A:0013.0024: ignoring exceeding usage max [ 1039.918523][T16237] XFS (loop1): Ending clean mount [ 1039.957768][ T5815] wacom 0003:056A:0013.0024: unknown main item tag 0x6 [ 1039.977602][T16237] XFS (loop1): Quotacheck needed: Please wait. [ 1040.010998][ T5815] wacom 0003:056A:0013.0024: ignoring exceeding usage max [ 1040.039610][ T5815] wacom 0003:056A:0013.0024: Unknown device_type for 'HID 056a:0013'. Assuming pen. [ 1040.101077][ T5815] wacom 0003:056A:0013.0024: hidraw0: USB HID v0.81 Device [HID 056a:0013] on usb-dummy_hcd.4-1/input0 [ 1040.153776][T16237] XFS (loop1): Quotacheck: Done. [ 1040.170449][ T5815] input: Wacom Graphire3 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0013.0024/input/input34 [ 1040.331276][ T5815] usb 5-1: USB disconnect, device number 2 [ 1040.396687][ T5818] ath6kl: Failed to read usb control message: -71 [ 1040.414753][ T5780] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1040.434581][ T5818] ath6kl: Unable to read the bmi data from the device: -71 [ 1040.435245][T16272] fido_id[16272]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1040.443713][ T5818] ath6kl: unable to read target info byte count: -71 [ 1040.483223][ T5818] ath6kl: Failed to init ath6kl core: -71 [ 1040.489526][ T5818] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 1040.511892][ T5818] usb 4-1: USB disconnect, device number 42 [ 1041.170147][T16289] loop4: detected capacity change from 0 to 1024 [ 1041.185940][T16286] loop3: detected capacity change from 0 to 764 [ 1041.563556][T16298] loop7: detected capacity change from 0 to 7 [ 1041.594722][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1041.603973][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1041.616715][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1041.625986][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1041.635565][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1041.644872][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1041.660795][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1041.670061][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1041.691535][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1041.700803][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1041.710542][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1041.719771][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1041.728273][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1041.737488][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1041.745422][T16298] ldm_validate_partition_table(): Disk read failed. [ 1041.754580][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1041.763829][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1041.784060][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1041.793321][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1041.811472][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1041.820685][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1041.835645][T16298] Dev loop7: unable to read RDB block 0 [ 1041.864990][T16298] loop7: unable to read partition table [ 1041.891143][T16298] loop7: partition table beyond EOD, truncated [ 1041.946953][T16298] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1042.472297][ T5818] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1042.670866][ T5818] usb 5-1: Using ep0 maxpacket: 8 [ 1042.682950][ T5818] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1042.693913][T16305] loop3: detected capacity change from 0 to 32768 [ 1042.712938][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1042.741368][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1042.781188][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1042.807727][ T5818] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1042.847398][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1042.868425][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1042.891499][ T5818] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1042.914170][ T5818] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1042.930949][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.955473][ T5818] usb 5-1: Product: syz [ 1042.970046][ T5818] usb 5-1: Manufacturer: syz [ 1042.983224][ T5818] usb 5-1: SerialNumber: syz [ 1043.012232][ T5818] usb 5-1: config 0 descriptor?? [ 1043.018971][T16309] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1043.072841][ T5818] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 1043.147145][ T5818] snd-usb-audio: probe of 5-1:0.0 failed with error -12 [ 1043.264927][ T8977] udevd[8977]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1043.640859][ T5815] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1043.708809][T16339] loop3: detected capacity change from 0 to 256 [ 1043.720647][T16339] exfat: Deprecated parameter 'namecase' [ 1043.727413][T16339] exfat: Deprecated parameter 'namecase' [ 1043.734219][T16339] exfat: Deprecated parameter 'namecase' [ 1043.757874][T16339] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1043.790878][ T5818] usb 5-1: USB disconnect, device number 3 [ 1043.805144][ T5840] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1043.841335][ T5815] usb 2-1: Using ep0 maxpacket: 32 [ 1043.865678][ T5815] usb 2-1: config 0 has no interfaces? [ 1043.908359][ T5815] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1043.928181][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.950994][ T5815] usb 2-1: Product: syz [ 1043.963915][ T5815] usb 2-1: Manufacturer: syz [ 1043.972222][ T5815] usb 2-1: SerialNumber: syz [ 1043.980896][ T5815] usb 2-1: config 0 descriptor?? [ 1044.002128][ T5840] usb 1-1: Using ep0 maxpacket: 16 [ 1044.023688][ T5840] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1044.054158][ T5840] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.068338][ T5840] usb 1-1: config 5 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1044.084637][ T5840] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1044.094624][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.103061][ T5840] usb 1-1: Product: syz [ 1044.107403][ T5840] usb 1-1: Manufacturer: syz [ 1044.115185][ T5840] usb 1-1: SerialNumber: syz [ 1044.215059][T13785] usb 2-1: USB disconnect, device number 33 [ 1044.345527][ T5840] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 1044.354694][ T5840] snd-usb-audio: probe of 1-1:5.0 failed with error -22 [ 1044.815626][ T5840] usb 1-1: USB disconnect, device number 46 [ 1044.904700][ T5768] udevd[5768]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:5.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1045.123555][T16353] loop1: detected capacity change from 0 to 4096 [ 1045.157645][T16353] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1045.192147][T16347] loop4: detected capacity change from 0 to 131072 [ 1045.203351][T16347] F2FS-fs (loop4): invalid crc value [ 1045.220913][ T5818] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1045.244219][T16347] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1045.299979][T16347] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1045.420907][ T5818] usb 4-1: Using ep0 maxpacket: 16 [ 1045.437969][ T5818] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.469369][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1045.483496][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1045.507330][ T5818] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1045.526299][ T5818] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1045.541223][ T5818] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1045.563973][ T5818] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1045.582055][ T5818] usb 4-1: Manufacturer: syz [ 1045.602552][ T5818] usb 4-1: config 0 descriptor?? [ 1045.832433][T16345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.859633][T16345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1046.051297][ T5818] rc_core: IR keymap rc-hauppauge not found [ 1046.057283][ T5818] Registered IR keymap rc-empty [ 1046.080981][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1046.130009][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1046.181899][ T5818] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1046.222591][ T5818] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input37 [ 1046.274403][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1046.331176][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1046.364602][T16359] loop1: detected capacity change from 0 to 32768 [ 1046.391320][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1046.441388][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1046.492192][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1046.531685][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1046.561256][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1046.621834][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1046.670887][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1046.714775][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1046.755117][ T5818] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1046.782490][ T5818] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1046.817957][ T5818] usb 4-1: USB disconnect, device number 43 [ 1047.072896][T16377] erspan0: entered promiscuous mode [ 1047.301729][ T5840] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1047.856790][T16388] loop1: detected capacity change from 0 to 512 [ 1047.949368][T16388] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 1048.007574][T16388] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.2701: corrupted in-inode xattr: e_value size too large [ 1048.059546][T16388] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.2701: couldn't read orphan inode 15 (err -117) [ 1048.102400][T16388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1048.225188][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.301187][ T5818] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1048.369812][T16382] loop3: detected capacity change from 0 to 131072 [ 1048.378798][T16382] F2FS-fs (loop3): invalid crc value [ 1048.410913][T16382] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1048.443892][ T5840] usb 1-1: Using ep0 maxpacket: 8 [ 1048.466325][T16382] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 1048.479119][ T5840] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1048.500056][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.508364][ T5840] usb 1-1: Product: syz [ 1048.512804][ T5840] usb 1-1: Manufacturer: syz [ 1048.517441][ T5840] usb 1-1: SerialNumber: syz [ 1048.534554][ T5840] usb 1-1: config 0 descriptor?? [ 1048.538478][ T5818] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1048.560269][ T5840] gspca_main: se401-2.14.0 probing 047d:5003 [ 1048.566006][ T5818] usb 5-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 1048.607455][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.630883][ T5818] usb 5-1: Product: syz [ 1048.648330][ T5818] usb 5-1: Manufacturer: syz [ 1048.666243][ T5818] usb 5-1: SerialNumber: syz [ 1048.909234][ T5818] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1048.919824][ T5818] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1048.968369][ T5818] usb 5-1: USB disconnect, device number 4 [ 1048.989913][ T5840] gspca_se401: Bayer format not supported! [ 1049.116211][ T8288] udevd[8288]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1049.164766][T16410] loop1: detected capacity change from 0 to 512 [ 1049.195593][T16410] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2707: invalid indirect mapped block 10 (level 1) [ 1049.234186][ T5840] usb 1-1: USB disconnect, device number 47 [ 1049.279504][T16410] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2707: invalid indirect mapped block 8 (level 1) [ 1049.332928][T16410] EXT4-fs (loop1): 1 truncate cleaned up [ 1049.352392][T16410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1049.394258][T16410] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 213 vs 220 free clusters [ 1049.565261][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.728231][T16420] loop1: detected capacity change from 0 to 256 [ 1049.751970][T16420] exfat: Deprecated parameter 'namecase' [ 1049.757699][T16420] exfat: Deprecated parameter 'utf8' [ 1049.801270][T16420] exfat: Deprecated parameter 'namecase' [ 1049.812935][T16420] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1049.878465][T16420] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 1050.239796][T16428] í [ 1050.380895][ T5840] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1050.480060][T16416] loop4: detected capacity change from 0 to 40427 [ 1050.510881][T16416] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1050.523941][T16416] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1050.543756][T16416] F2FS-fs (loop4): invalid crc value [ 1050.554550][T16416] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1050.600883][ T5840] usb 4-1: Using ep0 maxpacket: 32 [ 1050.612558][ T5815] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 1050.618020][T16416] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1050.627428][T16416] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1050.632871][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.670884][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.693601][ T5840] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1050.729023][ T5840] usb 4-1: New USB device strings: Mfr=24, Product=0, SerialNumber=0 [ 1050.750382][ T5840] usb 4-1: Manufacturer: syz [ 1050.772042][ T5840] usb 4-1: config 0 descriptor?? [ 1050.832686][ T5815] usb 2-1: not running at top speed; connect to a high speed hub [ 1050.853980][ T5815] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.870950][ T5815] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1050.900489][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.909720][T16445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2719'. [ 1050.924343][T16445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1050.938059][ T5815] usb 2-1: Found UVC 1.00 device (046d:0825) [ 1050.945190][T16445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.957163][T16445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1050.968124][T16445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1051.019280][T16426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.033376][T16426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.273838][ T5840] hid (null): unknown global tag 0xd [ 1051.325971][ T5840] input: syz Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:0042.0025/input/input38 [ 1051.368822][T16449] loop4: detected capacity change from 0 to 128 [ 1051.393315][T16449] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1051.409120][T16449] hpfs: filesystem error: improperly stopped [ 1051.419314][T16449] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1051.431841][T16449] hpfs: You really don't want any checks? You are crazy... [ 1051.439214][ T5840] input: syz Mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:0042.0025/input/input39 [ 1051.439623][T16449] hpfs: hpfs_map_sector(): read error [ 1051.457362][T16449] hpfs: code page support is disabled [ 1051.488648][T16449] hpfs: hpfs_map_4sectors(): unaligned read [ 1051.491800][ T5840] uclogic 0003:5543:0042.0025: input,hidraw0: USB HID v7f.fd Mouse [syz] on usb-dummy_hcd.3-1/input0 [ 1051.498788][T16449] hpfs: hpfs_map_4sectors(): unaligned read [ 1051.525367][ T5840] usb 4-1: USB disconnect, device number 44 [ 1051.530862][T16449] hpfs: filesystem error: unable to find root dir [ 1051.734194][ T5772] udevd[5772]: setting owner of /dev/input/mouse2 to uid=0, gid=104 failed: No such file or directory [ 1051.781359][ T5815] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 1051.817444][T16454] fido_id[16454]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1051.821593][ T5815] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 1051.876285][ T5815] usb 2-1: USB disconnect, device number 34 [ 1052.713007][T16486] loop3: detected capacity change from 0 to 4096 [ 1052.767183][T16486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1053.250956][ T56] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1053.364210][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.391275][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 1053.431628][ T56] usb 2-1: Using ep0 maxpacket: 32 [ 1053.455959][ T56] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.489242][ T56] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1053.501058][ T56] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1053.532990][ T56] usb 2-1: New USB device strings: Mfr=24, Product=0, SerialNumber=0 [ 1053.552687][ T56] usb 2-1: Manufacturer: syz [ 1053.571946][ T56] usb 2-1: config 0 descriptor?? [ 1053.613018][ T9] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1053.650866][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1053.667839][ T9] usb 5-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 1053.686693][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.714488][ T9] usb 5-1: config 0 descriptor?? [ 1053.803707][T16503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.834724][T16503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.055725][ T56] hid (null): unknown global tag 0xd [ 1054.088248][ T56] input: syz Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:0042.0026/input/input40 [ 1054.144340][ T56] input: syz Mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:0042.0026/input/input41 [ 1054.181329][ T56] uclogic 0003:5543:0042.0026: input,hidraw0: USB HID v7f.fd Mouse [syz] on usb-dummy_hcd.1-1/input0 [ 1054.202264][ T9] nintendo 0003:057E:2009.0027: item fetching failed at offset 5/6 [ 1054.248235][ T9] nintendo 0003:057E:2009.0027: HID parse failed [ 1054.289475][ T9] nintendo 0003:057E:2009.0027: probe - fail = -22 [ 1054.305110][ T9] nintendo: probe of 0003:057E:2009.0027 failed with error -22 [ 1054.389569][ T27] usb 2-1: USB disconnect, device number 35 [ 1054.484412][ T173] usb 5-1: USB disconnect, device number 5 [ 1054.569550][T16544] fido_id[16544]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1054.727456][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.735399][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.899870][T16591] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1056.063453][T16578] loop1: detected capacity change from 0 to 32768 [ 1056.741126][ T5818] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1056.976585][ T5818] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1057.010621][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.051733][ T5818] usb 1-1: config 0 descriptor?? [ 1057.126491][T16609] loop4: detected capacity change from 0 to 32768 [ 1057.210943][T16609] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 1057.275982][ T5818] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 1057.293890][ T5818] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1057.344099][T16609] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1057.530188][ T5818] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 1057.561099][ T5818] [drm] Initialized udl on minor 2 [ 1057.625328][T16609] XFS (loop4): Ending clean mount [ 1057.647440][T16609] XFS (loop4): Quotacheck needed: Please wait. [ 1057.763972][T16609] XFS (loop4): Quotacheck: Done. [ 1057.861500][ T56] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 1057.881313][ T5818] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 1057.943955][ T5818] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1057.968525][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1057.985506][T16030] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1058.001105][ T5818] usb 1-1: USB disconnect, device number 48 [ 1058.033480][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1058.067911][ T56] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1058.114194][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.149938][ T56] usb 2-1: config 0 descriptor?? [ 1058.172835][ T56] pwc: Samsung MPC-C10 USB webcam detected. [ 1058.174463][T16663] loop3: detected capacity change from 0 to 1024 [ 1058.375056][ T56] pwc: send_video_command error -71 [ 1058.401313][ T56] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1058.418472][ T56] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 1058.437924][ T56] usb 2-1: USB disconnect, device number 36 [ 1058.931242][ T56] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1059.133475][ T56] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1059.159326][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.211474][ T56] usb 2-1: config 0 descriptor?? [ 1059.230479][ T56] pwc: Samsung MPC-C10 USB webcam detected. [ 1059.262525][T16672] loop4: detected capacity change from 0 to 32768 [ 1059.296056][T16693] loop3: detected capacity change from 0 to 2048 [ 1059.354957][T16672] JBD2: Ignoring recovery information on journal [ 1059.379518][T16693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1059.576113][T16672] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1059.643734][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.659573][ T56] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1059.677703][ T56] pwc: recv_control_msg error -71 req 02 val 2700 [ 1059.712584][ T56] pwc: recv_control_msg error -71 req 04 val 1700 [ 1059.714085][ T28] audit: type=1800 audit(1788424320.456:127): pid=16672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2777" name="file0" dev="loop4" ino=17058 res=0 errno=0 [ 1059.719526][ T56] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1059.754281][T16672] [ 1059.756661][T16672] ====================================================== [ 1059.763690][T16672] WARNING: possible circular locking dependency detected [ 1059.770740][T16672] syzkaller #0 Not tainted [ 1059.775166][T16672] ------------------------------------------------------ [ 1059.782199][T16672] syz.4.2777/16672 is trying to acquire lock: [ 1059.788375][T16672] ffff888059a809d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1059.801697][T16672] [ 1059.801697][T16672] but task is already holding lock: [ 1059.809079][T16672] ffff888059adce38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x495/0x13a0 [ 1059.818651][T16672] [ 1059.818651][T16672] which lock already depends on the new lock. [ 1059.818651][T16672] [ 1059.829046][T16672] [ 1059.829046][T16672] the existing dependency chain (in reverse order) is: [ 1059.838048][T16672] [ 1059.838048][T16672] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 1059.845865][T16672] down_read+0x46/0x2e0 [ 1059.850663][T16672] ocfs2_init_acl+0x30a/0x770 [ 1059.855872][T16672] ocfs2_mknod+0x1427/0x2310 [ 1059.860987][T16672] vfs_mknod+0x325/0x360 [ 1059.865792][T16672] do_mknodat+0x386/0x500 [ 1059.870666][T16672] __x64_sys_mknodat+0xa9/0xc0 [ 1059.875952][T16672] do_syscall_64+0x55/0xb0 [ 1059.880982][T16672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1059.887439][T16672] [ 1059.887439][T16672] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1059.895969][T16672] down_read+0x46/0x2e0 [ 1059.900656][T16672] ocfs2_start_trans+0x3a8/0x6f0 [ 1059.906122][T16672] ocfs2_mknod+0xf33/0x2310 [ 1059.911144][T16672] ocfs2_create+0x196/0x430 [ 1059.916164][T16672] path_openat+0x1705/0x3270 [ 1059.921269][T16672] do_filp_open+0x1f2/0x430 [ 1059.926286][T16672] do_sys_openat2+0x134/0x1d0 [ 1059.931480][T16672] __x64_sys_openat+0x139/0x160 [ 1059.936847][T16672] do_syscall_64+0x55/0xb0 [ 1059.941787][T16672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1059.948197][T16672] [ 1059.948197][T16672] -> #2 (sb_internal#5){.+.+}-{0:0}: [ 1059.955676][T16672] ocfs2_start_trans+0x2a9/0x6f0 [ 1059.961140][T16672] ocfs2_mknod+0xf33/0x2310 [ 1059.966166][T16672] ocfs2_create+0x196/0x430 [ 1059.971184][T16672] path_openat+0x1705/0x3270 [ 1059.976294][T16672] do_filp_open+0x1f2/0x430 [ 1059.981321][T16672] do_sys_openat2+0x134/0x1d0 [ 1059.986518][T16672] __x64_sys_openat+0x139/0x160 [ 1059.991888][T16672] do_syscall_64+0x55/0xb0 [ 1059.996824][T16672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1060.003352][T16672] [ 1060.003352][T16672] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 1060.013870][T16672] down_write+0x97/0x200 [ 1060.018641][T16672] ocfs2_reserve_local_alloc_bits+0x120/0x2620 [ 1060.025310][T16672] ocfs2_reserve_clusters_with_limit+0x1ba/0xc20 [ 1060.032159][T16672] ocfs2_mknod+0xed1/0x2310 [ 1060.037176][T16672] ocfs2_create+0x196/0x430 [ 1060.042196][T16672] path_openat+0x1705/0x3270 [ 1060.047319][T16672] do_filp_open+0x1f2/0x430 [ 1060.052359][T16672] do_sys_openat2+0x134/0x1d0 [ 1060.057564][T16672] __x64_sys_openat+0x139/0x160 [ 1060.062943][T16672] do_syscall_64+0x55/0xb0 [ 1060.067880][T16672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1060.074294][T16672] [ 1060.074294][T16672] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 1060.084811][T16672] __lock_acquire+0x37ef/0x7d80 [ 1060.090229][T16672] lock_acquire+0x19e/0x420 [ 1060.095245][T16672] down_write+0x97/0x200 [ 1060.100005][T16672] ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1060.106414][T16672] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 1060.113266][T16672] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 1060.119424][T16672] ocfs2_xattr_set+0xc75/0x13a0 [ 1060.124789][T16672] __vfs_setxattr+0x437/0x470 [ 1060.129986][T16672] __vfs_setxattr_noperm+0x12a/0x5e0 [ 1060.135792][T16672] vfs_setxattr+0x16b/0x2f0 [ 1060.140854][T16672] path_setxattr+0x33a/0x590 [ 1060.145962][T16672] __x64_sys_setxattr+0xbb/0xd0 [ 1060.151331][T16672] do_syscall_64+0x55/0xb0 [ 1060.156265][T16672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1060.162708][T16672] [ 1060.162708][T16672] other info that might help us debug this: [ 1060.162708][T16672] [ 1060.172930][T16672] Chain exists of: [ 1060.172930][T16672] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 1060.172930][T16672] [ 1060.189878][T16672] Possible unsafe locking scenario: [ 1060.189878][T16672] [ 1060.197320][T16672] CPU0 CPU1 [ 1060.202674][T16672] ---- ---- [ 1060.208028][T16672] lock(&oi->ip_xattr_sem); [ 1060.212618][T16672] lock(&journal->j_trans_barrier); [ 1060.220415][T16672] lock(&oi->ip_xattr_sem); [ 1060.227516][T16672] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 1060.234800][T16672] [ 1060.234800][T16672] *** DEADLOCK *** [ 1060.234800][T16672] [ 1060.242934][T16672] 3 locks held by syz.4.2777/16672: [ 1060.248123][T16672] #0: ffff88805e90c418 (sb_writers#36){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1060.257397][T16672] #1: ffff888059add118 (&sb->s_type->i_mutex_key#37){+.+.}-{3:3}, at: vfs_setxattr+0x144/0x2f0 [ 1060.267945][T16672] #2: ffff888059adce38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x495/0x13a0 [ 1060.277880][T16672] [ 1060.277880][T16672] stack backtrace: [ 1060.283782][T16672] CPU: 1 PID: 16672 Comm: syz.4.2777 Not tainted syzkaller #0 [ 1060.291237][T16672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1060.301311][T16672] Call Trace: [ 1060.304603][T16672] [ 1060.307537][T16672] dump_stack_lvl+0x18c/0x250 [ 1060.312315][T16672] ? load_image+0x420/0x420 [ 1060.316858][T16672] ? show_regs_print_info+0x20/0x20 [ 1060.322059][T16672] ? print_circular_bug+0x12b/0x1a0 [ 1060.327256][T16672] check_noncircular+0x2fc/0x400 [ 1060.332205][T16672] ? print_deadlock_bug+0x5d0/0x5d0 [ 1060.337407][T16672] ? lockdep_lock+0xf5/0x230 [ 1060.342001][T16672] ? _find_first_zero_bit+0xd6/0x100 [ 1060.347330][T16672] __lock_acquire+0x37ef/0x7d80 [ 1060.352186][T16672] ? verify_lock_unused+0x140/0x140 [ 1060.357386][T16672] ? stack_trace_snprint+0xf0/0xf0 [ 1060.362500][T16672] ? check_noncircular+0x18a/0x400 [ 1060.367635][T16672] ? verify_lock_unused+0x140/0x140 [ 1060.372855][T16672] ? igrab+0x8b/0xa0 [ 1060.376752][T16672] ? __lock_acquire+0x7d80/0x7d80 [ 1060.381793][T16672] ? do_raw_spin_lock+0x11f/0x2b0 [ 1060.386842][T16672] lock_acquire+0x19e/0x420 [ 1060.391352][T16672] ? ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1060.397427][T16672] ? _raw_spin_unlock+0x28/0x40 [ 1060.402276][T16672] ? ocfs2_get_system_file_inode+0x1f9/0x820 [ 1060.408253][T16672] ? __might_sleep+0xe0/0xe0 [ 1060.412884][T16672] ? read_lock_is_recursive+0x20/0x20 [ 1060.418257][T16672] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 1060.424410][T16672] ? verify_lock_unused+0x140/0x140 [ 1060.429609][T16672] ? check_noncircular+0x18a/0x400 [ 1060.434721][T16672] down_write+0x97/0x200 [ 1060.438967][T16672] ? ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1060.445043][T16672] ? down_read_killable+0x340/0x340 [ 1060.450248][T16672] ? deref_stack_reg+0x1ab/0x230 [ 1060.455216][T16672] ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1060.461119][T16672] ? mark_lock+0x94/0x320 [ 1060.465453][T16672] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1060.471434][T16672] ? __lock_acquire+0x7d80/0x7d80 [ 1060.476460][T16672] ? lock_chain_count+0x20/0x20 [ 1060.481309][T16672] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1060.487197][T16672] ? lockdep_hardirqs_on+0x98/0x150 [ 1060.492397][T16672] ? ocfs2_block_group_search+0x470/0x470 [ 1060.498121][T16672] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1060.504013][T16672] ? _raw_spin_unlock+0x40/0x40 [ 1060.508860][T16672] ? stack_trace_save+0xaa/0x100 [ 1060.513799][T16672] ? stack_trace_snprint+0xf0/0xf0 [ 1060.518912][T16672] ? __stack_depot_save+0x575/0x660 [ 1060.524113][T16672] ? kasan_set_track+0x5f/0x70 [ 1060.528874][T16672] ? kasan_set_track+0x4e/0x70 [ 1060.533633][T16672] ? __kasan_kmalloc+0x8f/0xa0 [ 1060.538394][T16672] ? ocfs2_reserve_new_metadata_blocks+0x10d/0x9a0 [ 1060.544896][T16672] ? ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 1060.550698][T16672] ? ocfs2_xattr_set+0xc75/0x13a0 [ 1060.555720][T16672] ? __vfs_setxattr+0x437/0x470 [ 1060.560568][T16672] ? __vfs_setxattr_noperm+0x12a/0x5e0 [ 1060.566027][T16672] ? vfs_setxattr+0x16b/0x2f0 [ 1060.570707][T16672] ? path_setxattr+0x33a/0x590 [ 1060.575478][T16672] ? __x64_sys_setxattr+0xbb/0xd0 [ 1060.580510][T16672] ? do_syscall_64+0x55/0xb0 [ 1060.585100][T16672] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1060.591183][T16672] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 1060.597520][T16672] ? ocfs2_init_steal_slots+0x160/0x160 [ 1060.603066][T16672] ? ocfs2_xattr_block_set+0x2dc0/0x2dc0 [ 1060.608705][T16672] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 1060.614335][T16672] ? _raw_spin_unlock+0x28/0x40 [ 1060.619183][T16672] ? ocfs2_prepare_refcount_xattr+0xff0/0xff0 [ 1060.625249][T16672] ? ocfs2_truncate_log_needs_flush+0x130/0x310 [ 1060.631487][T16672] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 1060.637377][T16672] ? down_write+0x16e/0x200 [ 1060.641879][T16672] ? down_read_killable+0x340/0x340 [ 1060.647080][T16672] ? up_write+0x1be/0x410 [ 1060.651410][T16672] ocfs2_xattr_set+0xc75/0x13a0 [ 1060.656270][T16672] ? __ocfs2_xattr_set_handle+0xf30/0xf30 [ 1060.661993][T16672] ? aa_get_newest_label+0xfd/0x5c0 [ 1060.667234][T16672] ? ocfs2_inode_unlock_tracker+0x270/0x2e0 [ 1060.673127][T16672] ? __rwlock_init+0x150/0x150 [ 1060.677892][T16672] ? do_raw_spin_unlock+0x121/0x230 [ 1060.683091][T16672] ? put_pid+0xde/0x120 [ 1060.687247][T16672] ? ocfs2_xattr_user_set+0xab/0xf0 [ 1060.692444][T16672] ? ocfs2_xattr_user_get+0xe0/0xe0 [ 1060.697641][T16672] __vfs_setxattr+0x437/0x470 [ 1060.702322][T16672] __vfs_setxattr_noperm+0x12a/0x5e0 [ 1060.707611][T16672] vfs_setxattr+0x16b/0x2f0 [ 1060.712123][T16672] ? xattr_permission+0x460/0x460 [ 1060.717144][T16672] ? __mnt_want_write+0x223/0x2a0 [ 1060.722170][T16672] ? path_setxattr+0x2ec/0x590 [ 1060.726939][T16672] path_setxattr+0x33a/0x590 [ 1060.731533][T16672] ? simple_xattrs_free+0x150/0x150 [ 1060.736742][T16672] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1060.742724][T16672] ? lock_chain_count+0x20/0x20 [ 1060.747572][T16672] __x64_sys_setxattr+0xbb/0xd0 [ 1060.752443][T16672] do_syscall_64+0x55/0xb0 [ 1060.756861][T16672] ? clear_bhb_loop+0x40/0x90 [ 1060.761535][T16672] ? clear_bhb_loop+0x40/0x90 [ 1060.766210][T16672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1060.772119][T16672] RIP: 0033:0x7fc60cd9e159 [ 1060.776536][T16672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1060.796178][T16672] RSP: 002b:00007fc60dbe6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1060.804590][T16672] RAX: ffffffffffffffda RBX: 00007fc60d025fa0 RCX: 00007fc60cd9e159 [ 1060.812561][T16672] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000200000000080 [ 1060.820527][T16672] RBP: 00007fc60ce35024 R08: 0000000000000000 R09: 0000000000000000 [ 1060.828496][T16672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1060.836461][T16672] R13: 00007fc60d026038 R14: 00007fc60d025fa0 R15: 00007ffc9c352b08 [ 1060.844433][T16672] [ 1060.847565][ C1] vkms_vblank_simulate: vblank timer overrun [ 1060.902101][ T56] pwc: recv_control_msg error -71 req 04 val 1000 [ 1060.935233][ T56] pwc: recv_control_msg error -71 req 04 val 1300 [ 1060.978595][ T56] pwc: recv_control_msg error -71 req 04 val 1400 [ 1061.029199][ T56] pwc: recv_control_msg error -71 req 02 val 2000 [ 1061.044245][T16715] block device autoloading is deprecated and will be removed. [ 1061.062261][ T56] pwc: recv_control_msg error -71 req 02 val 2100 [ 1061.085950][ T56] pwc: recv_control_msg error -71 req 02 val 2200 [ 1061.086551][T16030] ocfs2: Unmounting device (7,4) on (node local) [ 1061.109057][ T56] pwc: recv_control_msg error -71 req 06 val 0600 [ 1061.122475][ T56] pwc: recv_control_msg error -71 req 04 val 1500 [ 1061.131783][ T56] pwc: recv_control_msg error -71 req 02 val 2500 [ 1061.138750][ T56] pwc: recv_control_msg error -71 req 02 val 2400 [ 1061.146803][ T56] pwc: recv_control_msg error -71 req 02 val 2600 [ 1061.154287][ T56] pwc: recv_control_msg error -71 req 02 val 2900 [ 1061.175097][ T56] pwc: recv_control_msg error -71 req 02 val 2800 [ 1061.188948][ T56] pwc: recv_control_msg error -71 req 04 val 1100 [ 1061.196767][ T56] pwc: recv_control_msg error -71 req 04 val 1200 [ 1061.225980][ T56] pwc: Registered as video103. [ 1061.244003][ T56] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input42 [ 1061.279348][ T56] usb 2-1: USB disconnect, device number 37