last executing test programs: 1.688648671s ago: executing program 3 (id=868): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x7, @random="07311916f2d1", 'vlan0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) 1.687333281s ago: executing program 1 (id=878): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000380)={[{@noload}, {@usrquota}, {@grpquota}, {@errors_remount}, {@quota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@resgid}, {@barrier}]}, 0x2, 0xbd9, &(0x7f0000000ec0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 1.584173277s ago: executing program 4 (id=881): unshare(0x62040200) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000780)={0x0, {{0xa, 0x4e20, 0x7, @mcast2, 0x4}}, 0x1}, 0x90) 1.463849485s ago: executing program 2 (id=872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.392976778s ago: executing program 2 (id=873): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000980)={0x2, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x6, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x5, 0x9, '\x00', 0x13}, {0x7, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0x10}, {0x5, 0x8, 0xf8, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x63}, {0x2, 0x7, 0x2, '\x00', 0xa}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x3, 0x3, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xd, '\x00', 0x3}, {0x7f, 0x6, 0xce, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) 1.289165805s ago: executing program 4 (id=874): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e1c, 0x0, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="24000000000000002900000032000000ff010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000018"], 0x40, 0x7ffffff7}}], 0x1, 0x0) 1.242557008s ago: executing program 2 (id=875): setuid(0xee01) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000495"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.144957613s ago: executing program 4 (id=876): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x20}}, 0x0) 1.127592694s ago: executing program 2 (id=888): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, r1, 0x8003, 0x386}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 1.076813527s ago: executing program 0 (id=877): setresuid(0x0, 0xee01, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000200)={'sit0\x00', 0x0}) 1.057403748s ago: executing program 1 (id=879): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000002c0)="68cabf2dfb58fc0a1d6b689866f0256fd4b2c587d7bc4e1c9f93bbb5acf038084947c0ab78f3ff849ba4d69ec470c98173f6509fe73ec4767ce98c2a9a64653c459fdf5da594445fcffb7f1f99121b01007a572e9056ed5c1699d09924b324e7c38e0f0ea0e2688e5ca2ab", 0x6b}], 0x2}, 0x80d0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 981.756973ms ago: executing program 2 (id=880): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x54, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x5e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}]}, 0x54}}, 0x0) 938.269135ms ago: executing program 0 (id=882): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3010000}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x51}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 920.927327ms ago: executing program 4 (id=883): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00f7a98a6f3da4519f4b38d9450092aac2c7cefa"], 0x1, 0x1cf, &(0x7f00000002c0)="$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") io_uring_setup(0x4b57, &(0x7f00000000c0)={0x0, 0xa68c, 0x1, 0x1, 0x12e}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002"], 0x8000) 919.926656ms ago: executing program 3 (id=884): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket(0x11, 0x80802, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) 798.814314ms ago: executing program 1 (id=885): unshare(0x8040480) r0 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x7, 0x8, 0x6}, 0x10) 745.553257ms ago: executing program 3 (id=886): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) 744.147696ms ago: executing program 2 (id=897): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x80}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_012={0x1, 0x0, 0xa, "96"}, @global=@item_012={0x2, 0x1, 0x3, "eafb"}]}}, 0x0}, 0x0) 727.327797ms ago: executing program 0 (id=887): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4fa7, 0x105, 0x2, 0x10000425, 0x2, 0x2, 0x0, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x0, 0x8, 0xfffffffa, 0x1ff, 0x80000089, 0xa, 0x400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x4, 0x5, 0x8000000, 0x485b]}) 667.320031ms ago: executing program 1 (id=889): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 666.190231ms ago: executing program 4 (id=890): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f00000019c0)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x10}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x6, @remote, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000000c0)='1', 0x1}], 0x1}}], 0x2, 0x4000840) setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000d80ffff", 0x8) 591.329316ms ago: executing program 0 (id=891): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="73a79f33e0afb744166a1f921a4e123d48034a64d48aba5d2755a98f944a4b954a13c751fab1e95181a836aa2719bd144124c64ebda0422f1bad3a1d32556cc080a41ca07d365ad7db"], 0x1, 0x35b, &(0x7f0000000440)="$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") r0 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0xe25, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0505510, &(0x7f0000000080)) 452.348704ms ago: executing program 4 (id=892): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000380)={[{@noload}, {@usrquota}, {@grpquota}, {@errors_remount}, {@quota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@resgid}, {@barrier}]}, 0x2, 0xbd9, &(0x7f0000000ec0)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbba7j89MNCjTyXsnfvnI2K4Uf9qszVmClGrbwejPyIOP0ii/WutSePfHttIRHx878wbWYsefQ95O7XliPjlVuc/qdc/XP8W9+b604gY7UL8kYfGP6b6z3Uhft71A/BkunO+cSHbfP1L1+9/YovrX2GLa9cPkff1r3X/t7rp/m+j/r4O93//3GWMm6+8eKPTXFb/n2//7fVWy+Jn28cq6hHcX474VWGr+pP1+pMO9V/cZYzStzcqnebyrn/tpYjjsXX9Lcn2v090cmq6Whlt/N0yxvJ74691ip93/dn5P9yh/tbvP3U6/9d3GeM/Fy68uWnnvY3u9vWnnxaTf9d7xeae/0/Mz8+ORRSTf2zef2r7XFrHtB4jq//Eb7d//W9Vf/aeUGs+D9laYLm5zcZPPRTzL7duvtUpn9b6L8/zf6nD+W+v/93C5vP/zC5j/O6d5050mmtf/2Yti99aCwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABASxoRQ5Gk5fV+mpbLEUci4udxOK1em5v//dS1/129lM1FDEd/OjVdrYxGRKkxTrLxWL2/MT710PiPEXE0Il4oHaqPy5PXqpfyLh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB1RyJiKJK0HBFpRKyW0rRczjsrAAAAoOuG804AAAAA6DnrfwAAADj4rP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosaO/vnM3iYja2UP1lik25/pzzQzotTTvBIDc9OWdAJCbQt4JALl5xDW+2wU4gJId5gc7zgx0PRcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9q/jx+7cTSKidvZQvWWKzbn+XDMDei1t6yc55gHsvb7tJgt7lwew97zE4clljQ/stPYf3Dim9v2ZgZ7lBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD+M1RvSVqOiGJzX7kc8ZOIGI7+ZGq6WhmNiJ9GxIel/oFsPJZzzgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTf3MLizES1WpnNOmk0O+t7utRJYmNPXzNyl0P0vpM08q7tl3wOdmfg2Z2O+W88Zohi7ItK92knz3clAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyMrewODNRrVZm5/LOBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjb3MLizES1WpntYSfvGgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyM93AQAA///zTQWD") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 450.587564ms ago: executing program 1 (id=903): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x81}, 0x4c800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 449.975184ms ago: executing program 3 (id=893): setresuid(0x0, 0xee01, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000200)={'sit0\x00', 0x0}) 356.734829ms ago: executing program 3 (id=894): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000047400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 337.375981ms ago: executing program 0 (id=895): unshare(0x22020400) r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) 174.21338ms ago: executing program 0 (id=896): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x0, 0x0}, {0x1, 0x2a19, 0x0, 0x0}], 0x2}) 150.955222ms ago: executing program 3 (id=898): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x54, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x5e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}]}, 0x54}}, 0x0) 0s ago: executing program 1 (id=899): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x380401a, &(0x7f0000000380)=ANY=[@ANYBLOB='errors=continue,usrquota,integrity,iocharset=cp857,noquota,grpquota,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c007bd598141a550dbf02d47ded539aef16b5f1cf677018ad5588131d50bbd580000000000000000b9b0fa44661887a1633f523184b4e52fbab2783d4a8e4c913491c6800c959a6cba88690ccbce67e3919"], 0x1, 0x61a4, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) fsync(r0) kernel console output (not intermixed with test programs): 4293] Bluetooth: hci2: command 0x0419 tx timeout [ 67.752002][ T4293] Bluetooth: hci1: command 0x0419 tx timeout [ 67.762124][ T4293] Bluetooth: hci4: command 0x0419 tx timeout [ 67.778964][ T4293] Bluetooth: hci0: command 0x0419 tx timeout [ 67.857291][ T4242] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.957583][ T4234] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 67.973138][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.981382][ T4234] usb 4-1: Product: syz [ 67.986095][ T4293] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 67.994129][ T4234] usb 4-1: Manufacturer: syz [ 67.998764][ T4234] usb 4-1: SerialNumber: syz [ 68.008962][ T4234] usb 4-1: config 0 descriptor?? [ 68.018742][ T4347] loop0: detected capacity change from 0 to 2048 [ 68.036117][ T4347] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=3932051, location=3932051 [ 68.055579][ T4347] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 68.067264][ T4234] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 68.112821][ T4242] usb 5-1: Using ep0 maxpacket: 16 [ 68.228350][ T4350] loop0: detected capacity change from 0 to 512 [ 68.238645][ T4242] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 68.249558][ T4242] usb 5-1: config 0 has no interface number 0 [ 68.256897][ T4242] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.268667][ T4242] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.278890][ T4242] usb 5-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 68.288252][ T4242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.302655][ T4293] usb 2-1: Using ep0 maxpacket: 16 [ 68.309945][ T4242] usb 5-1: config 0 descriptor?? [ 68.412419][ T4352] loop0: detected capacity change from 0 to 256 [ 68.453641][ T4352] ======================================================= [ 68.453641][ T4352] WARNING: The mand mount option has been deprecated and [ 68.453641][ T4352] and is ignored by this kernel. Remove the mand [ 68.453641][ T4352] option from the mount to silence this warning. [ 68.453641][ T4352] ======================================================= [ 68.453748][ T4293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.527741][ T4352] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 68.530443][ T4293] usb 2-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 68.572316][ T4293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.599454][ T4293] usb 2-1: config 0 descriptor?? [ 68.772879][ T4234] ssu100: probe of 4-1:0.0 failed with error -71 [ 68.799818][ T4234] usb 4-1: USB disconnect, device number 2 [ 68.832089][ T4242] holtek_mouse 0003:04D9:A081.0001: hidraw0: USB HID v0.00 Device [HID 04d9:a081] on usb-dummy_hcd.4-1/input1 [ 69.028477][ T4249] usb 5-1: USB disconnect, device number 2 [ 69.111386][ T4362] loop0: detected capacity change from 0 to 32768 [ 69.119322][ T4293] wacom 0003:056A:00FA.0002: hidraw0: USB HID v0.00 Device [HID 056a:00fa] on usb-dummy_hcd.1-1/input0 [ 69.358994][ T4366] loop0: detected capacity change from 0 to 4096 [ 69.376173][ T4293] usb 2-1: USB disconnect, device number 2 [ 69.692580][ T4376] netlink: 40 bytes leftover after parsing attributes in process `syz.0.35'. [ 69.701652][ T4376] nbd: must specify at least one socket [ 69.809482][ T4381] loop0: detected capacity change from 0 to 256 [ 69.859225][ T4381] exfat: Deprecated parameter 'utf8' [ 69.915509][ T4381] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 70.067902][ T4388] loop1: detected capacity change from 0 to 128 [ 70.200850][ T4394] loop3: detected capacity change from 0 to 512 [ 70.268098][ T4394] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 70.308305][ T4394] EXT4-fs (loop3): Ignoring removed bh option [ 70.331933][ T4394] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 70.458978][ T4394] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.44: invalid indirect mapped block 256 (level 2) [ 70.495822][ T4394] EXT4-fs (loop3): 2 truncates cleaned up [ 70.505001][ T4394] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,quota,journal_ioprio=0x0000000000000005,jqfmt=vfsv1,bh,inode_readahead_blks=0x0000000002000000,min_batch_time=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 70.571978][ T4394] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.44: bg 0: block 5: invalid block bitmap [ 70.592959][ T4394] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 70.605975][ T4394] EXT4-fs (loop3): This should not happen!! Data will be lost [ 70.605975][ T4394] [ 70.619356][ T4394] EXT4-fs (loop3): Total free blocks count 0 [ 70.626064][ T4394] EXT4-fs (loop3): Free/Dirty block details [ 70.632265][ T4394] EXT4-fs (loop3): free_blocks=0 [ 70.637934][ T4394] EXT4-fs (loop3): dirty_blocks=66 [ 70.663542][ T4394] EXT4-fs (loop3): Block reservation details [ 70.682949][ T4394] EXT4-fs (loop3): i_reserved_data_blocks=66 [ 70.830525][ T154] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 70.863898][ T154] EXT4-fs (loop3): This should not happen!! Data will be lost [ 70.863898][ T154] [ 71.157894][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.164545][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.400208][ T4441] loop1: detected capacity change from 0 to 512 [ 71.485431][ T4441] EXT4-fs (loop1): 1 truncate cleaned up [ 71.532075][ T4441] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 71.645194][ T4441] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.65: bg 0: block 465: padding at end of block bitmap is not set [ 71.678388][ T4448] [U] [ 71.729496][ T4441] EXT4-fs (loop1): Remounting filesystem read-only [ 71.893393][ T26] audit: type=1326 audit(1769469804.812:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3c2eceb9 code=0x7ffc0000 [ 71.921445][ T26] audit: type=1326 audit(1769469804.832:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3c2eceb9 code=0x7ffc0000 [ 72.041100][ T26] audit: type=1326 audit(1769469804.872:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d3c2eceb9 code=0x7ffc0000 [ 72.181820][ T26] audit: type=1326 audit(1769469804.882:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3c2eceb9 code=0x7ffc0000 [ 72.320251][ T26] audit: type=1326 audit(1769469804.882:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3c2eceb9 code=0x7ffc0000 [ 72.411275][ T26] audit: type=1326 audit(1769469804.882:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1d3c2eceb9 code=0x7ffc0000 [ 72.522818][ T4295] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 72.547644][ T26] audit: type=1326 audit(1769469804.882:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3c2eceb9 code=0x7ffc0000 [ 72.643661][ T26] audit: type=1326 audit(1769469804.882:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3c2eceb9 code=0x7ffc0000 [ 72.730026][ T4486] loop1: detected capacity change from 0 to 64 [ 72.952746][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 72.964511][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.992939][ T4295] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 73.002014][ T4295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.054479][ T4295] usb 1-1: config 0 descriptor?? [ 73.118710][ T4462] loop3: detected capacity change from 0 to 32768 [ 73.219072][ T4497] netlink: 200 bytes leftover after parsing attributes in process `syz.1.91'. [ 73.555267][ T4295] lenovo 0003:17EF:6047.0003: invalid report_size 7604 [ 73.574609][ T4295] lenovo 0003:17EF:6047.0003: item 0 2 1 7 parsing failed [ 73.582233][ T4295] lenovo 0003:17EF:6047.0003: hid_parse failed [ 73.638392][ T4295] lenovo: probe of 0003:17EF:6047.0003 failed with error -22 [ 73.777209][ T4234] usb 1-1: USB disconnect, device number 2 [ 73.830559][ T4515] loop1: detected capacity change from 0 to 2048 [ 73.932246][ T4493] loop2: detected capacity change from 0 to 32768 [ 73.982783][ T4295] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.077412][ T4493] XFS (loop2): Mounting V5 Filesystem [ 74.242576][ T4295] usb 5-1: Using ep0 maxpacket: 32 [ 74.333981][ T4493] XFS (loop2): Ending clean mount [ 74.372855][ T4295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.432776][ T4295] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 74.441893][ T4295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.504328][ T4295] usb 5-1: config 0 descriptor?? [ 74.544007][ T4187] XFS (loop2): Unmounting Filesystem [ 74.683847][ T4521] loop3: detected capacity change from 0 to 40427 [ 74.704647][ T4521] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 74.745474][ T4521] F2FS-fs (loop3): invalid crc value [ 74.762688][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 74.789234][ T4521] F2FS-fs (loop3): Found nat_bits in checkpoint [ 74.947485][ T4521] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 74.967461][ T4543] loop2: detected capacity change from 0 to 4096 [ 74.999125][ T4295] kye 0003:0458:5013.0004: hidraw0: USB HID v0.04 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 75.014762][ T4543] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 75.053343][ T4295] kye 0003:0458:5013.0004: tablet-enabling feature report not found [ 75.062124][ T4295] kye 0003:0458:5013.0004: tablet enabling failed [ 75.113619][ T4543] ntfs3: loop2: try to read out of volume at offset 0xffffffff0000 [ 75.152813][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.176843][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.236733][ T4242] usb 5-1: USB disconnect, device number 3 [ 75.243207][ T4185] attempt to access beyond end of device [ 75.243207][ T4185] loop3: rw=2049, want=45104, limit=40427 [ 75.288866][ T4545] fido_id[4545]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 75.293557][ T23] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 75.348697][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 75.374536][ T23] usb 2-1: SerialNumber: syz [ 75.398949][ T26] audit: type=1326 audit(1769469808.312:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4537 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60671caeb9 code=0x7fc00000 [ 75.425469][ T26] audit: type=1326 audit(1769469808.312:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4537 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f60671caeb9 code=0x7fc00000 [ 75.652909][ T4249] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.667061][ T23] usb 2-1: 0:2 : does not exist [ 75.763251][ T23] usb 2-1: USB disconnect, device number 3 [ 75.870402][ T4563] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 75.926922][ T4565] loop4: detected capacity change from 0 to 512 [ 76.019033][ T4565] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 76.041018][ T4565] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 76.043398][ T4249] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.063284][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.096756][ T4565] EXT4-fs (loop4): 1 truncate cleaned up [ 76.133319][ T4565] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota="data_err=ignore,noload,nombcache,usrjquota="errors=continue,errors=remount-ro,barrier,. Quota mode: writeback. [ 76.162879][ T4249] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.239494][ T4249] usb 3-1: config 0 interface 0 has no altsetting 0 [ 76.258606][ T4249] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 76.281757][ T4249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.291226][ T4565] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #2: block 4: comm syz.4.119: lblock 0 mapped to illegal pblock 4 (length 1) [ 76.308894][ T4249] usb 3-1: config 0 descriptor?? [ 76.347172][ T4565] EXT4-fs (loop4): Remounting filesystem read-only [ 76.607199][ T4568] loop0: detected capacity change from 0 to 32768 [ 76.654218][ T4588] loop4: detected capacity change from 0 to 2048 [ 76.730615][ T4568] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 76.741210][ T4592] loop1: detected capacity change from 0 to 512 [ 76.753627][ T4568] JBD2: Ignoring recovery information on journal [ 76.776676][ T4592] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 76.827721][ T4249] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 76.858506][ T4594] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.870555][ T4588] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 76.882850][ T4592] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.893113][ T4249] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 76.918652][ T4568] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 76.940625][ T4249] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 76.978561][ T4588] Remounting filesystem read-only [ 76.999317][ T4249] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 77.024981][ T4592] EXT4-fs (loop1): 1 truncate cleaned up [ 77.062701][ T4592] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,init_itable=0x000000007fffffff,dioread_lock,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 77.079265][ T4249] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 77.113330][ T4592] EXT4-fs warning (device loop1): ext4_group_extend:1823: can't shrink FS - resize aborted [ 77.133436][ T4249] sunplus 0003:04FC:05D8.0005: hidraw0: USB HID v0.00 Device [HID 04fc:05d8] on usb-dummy_hcd.2-1/input0 [ 77.186401][ T4588] NILFS (loop4): mounting fs with errors [ 77.206075][ T4249] usb 3-1: USB disconnect, device number 2 [ 77.245752][ T4588] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 77.279376][ T4588] Remounting filesystem read-only [ 77.302336][ T4588] NILFS (loop4): error -5 reading inode: ino=15 [ 77.331255][ T4598] fido_id[4598]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 77.401798][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 77.564709][ T4586] ialloc: diAlloc returned -5! [ 77.631311][ T4586] ialloc: diAlloc returned -5! [ 78.045267][ T4618] set_capacity_and_notify: 2 callbacks suppressed [ 78.045282][ T4618] loop2: detected capacity change from 0 to 256 [ 78.075034][ T4619] loop3: detected capacity change from 0 to 1024 [ 78.216161][ T4618] FAT-fs (loop2): Directory bread(block 64) failed [ 78.243410][ T4618] FAT-fs (loop2): Directory bread(block 65) failed [ 78.250067][ T4618] FAT-fs (loop2): Directory bread(block 66) failed [ 78.312684][ T4618] FAT-fs (loop2): Directory bread(block 67) failed [ 78.337418][ T4618] FAT-fs (loop2): Directory bread(block 68) failed [ 78.340094][ T3092] hfsplus: b-tree write err: -5, ino 4 [ 78.358943][ T4618] FAT-fs (loop2): Directory bread(block 69) failed [ 78.378151][ T4618] FAT-fs (loop2): Directory bread(block 70) failed [ 78.405457][ T4618] FAT-fs (loop2): Directory bread(block 71) failed [ 78.416398][ T4633] capability: warning: `syz.1.150' uses deprecated v2 capabilities in a way that may be insecure [ 78.433593][ T4618] FAT-fs (loop2): Directory bread(block 72) failed [ 78.450357][ T4618] FAT-fs (loop2): Directory bread(block 73) failed [ 78.468782][ T4634] loop0: detected capacity change from 0 to 2048 [ 78.539193][ T4636] loop3: detected capacity change from 0 to 2048 [ 78.564801][ T3561] loop0: p1 p3 p4 [ 78.578863][ T3561] loop0: p4 size 589824 extends beyond EOD, truncated [ 78.600505][ T4636] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,noblock_validity,errors=remount-ro,. Quota mode: none. [ 78.648706][ T4634] loop0: p1 p3 p4 [ 78.664242][ T4608] loop4: detected capacity change from 0 to 32768 [ 78.674850][ T4634] loop0: p4 size 589824 extends beyond EOD, truncated [ 78.701330][ T4636] EXT4-fs error (device loop3): ext4_ext_precache:626: inode #2: comm syz.3.148: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 78.729170][ T4608] [ 78.729170][ T4608] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.729170][ T4608] [ 78.739681][ T4636] EXT4-fs (loop3): Remounting filesystem read-only [ 78.824097][ T4647] loop1: detected capacity change from 0 to 512 [ 78.868546][ T4608] ERROR: (device loop4): diWrite: ixpxd invalid [ 78.868546][ T4608] [ 78.890118][ T4608] ERROR: (device loop4): txCommit: [ 78.890118][ T4608] [ 78.912995][ T4647] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 78.940064][ T4648] jfs_create: dtSearch returned -17 [ 78.994588][ T4647] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.154: invalid indirect mapped block 4294967295 (level 0) [ 79.045484][ T4655] loop3: detected capacity change from 0 to 128 [ 79.081832][ T4200] [ 79.081832][ T4200] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.081832][ T4200] [ 79.105211][ T4647] EXT4-fs (loop1): Remounting filesystem read-only [ 79.111764][ T4647] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.154: invalid indirect mapped block 4294967295 (level 1) [ 79.141749][ T4655] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.160383][ T4200] [ 79.160383][ T4200] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.160383][ T4200] [ 79.171282][ T4655] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.193485][ T4647] EXT4-fs (loop1): Remounting filesystem read-only [ 79.242635][ T4647] EXT4-fs (loop1): 1 orphan inode deleted [ 79.268398][ T4647] EXT4-fs (loop1): 1 truncate cleaned up [ 79.286996][ T4647] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,block_validity,block_validity,block_validity,quota,jqfmt=vfsv0,. Quota mode: writeback. [ 79.385876][ T4647] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.154: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 79.436257][ T4647] EXT4-fs (loop1): Remounting filesystem read-only [ 79.541115][ T4674] loop2: detected capacity change from 0 to 256 [ 79.681419][ T4674] FAT-fs (loop2): Directory bread(block 64) failed [ 79.696433][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 79.724411][ T4678] loop4: detected capacity change from 0 to 16 [ 79.731386][ T4674] FAT-fs (loop2): Directory bread(block 65) failed [ 79.745249][ T4674] FAT-fs (loop2): Directory bread(block 66) failed [ 79.751895][ T4674] FAT-fs (loop2): Directory bread(block 67) failed [ 79.762613][ T4674] FAT-fs (loop2): Directory bread(block 68) failed [ 79.769252][ T4674] FAT-fs (loop2): Directory bread(block 69) failed [ 79.782308][ T4680] udevd[4680]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 79.802410][ T4679] udevd[4679]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 79.814567][ T4674] FAT-fs (loop2): Directory bread(block 70) failed [ 79.821126][ T4674] FAT-fs (loop2): Directory bread(block 71) failed [ 79.835860][ T4678] erofs: (device loop4): mounted with root inode @ nid 36. [ 79.872056][ T4674] FAT-fs (loop2): Directory bread(block 72) failed [ 79.890017][ T4683] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 79.903615][ T4674] FAT-fs (loop2): Directory bread(block 73) failed [ 79.928470][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 79.928485][ T26] audit: type=1800 audit(1769469812.832:42): pid=4678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.160" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 79.984777][ T4683] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 79.991378][ T4683] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 80.027814][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 80.045653][ T4679] udevd[4679]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 80.058721][ T4680] udevd[4680]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 80.081206][ T4683] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 80.148583][ T4683] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 80.203169][ T4683] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 80.209829][ T4683] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 80.328779][ T4683] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 80.389051][ T4683] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 80.409522][ T4683] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 80.439181][ T4683] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 80.461707][ T4683] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 80.503248][ T4683] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 80.537733][ T4683] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 80.591745][ T4683] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 80.601406][ T4683] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 80.613852][ T4683] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 80.639201][ T4683] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 80.771966][ T4700] ieee802154 phy0 wpan0: encryption failed: -22 [ 80.817673][ T4672] loop3: detected capacity change from 0 to 32768 [ 80.911198][ T4672] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 80.945571][ T4672] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 80.963526][ T4704] exfat: Deprecated parameter 'utf8' [ 80.991571][ T4704] exfat: Deprecated parameter 'utf8' [ 81.010595][ T4672] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 81.042248][ T4704] exfat: Deprecated parameter 'namecase' [ 81.113177][ T4704] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 81.153876][ T4672] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 81.629511][ T4726] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 81.730237][ T4726] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start f8000002) [ 81.741964][ T4726] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start f8000002) [ 81.765806][ T4726] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start f8000002) [ 81.776576][ T26] audit: type=1800 audit(1769469814.692:43): pid=4726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.190" name="/" dev="loop2" ino=1048620 res=0 errno=0 [ 81.796198][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.836774][ T4726] syz.2.190 (4726) used greatest stack depth: 20720 bytes left [ 81.899418][ T4730] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.981884][ T4732] erofs: (device loop3): mounted with root inode @ nid 36. [ 82.053347][ T4730] EXT4-fs error (device loop4): ext4_empty_dir:3154: inode #12: block 80: comm syz.4.191: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 82.084285][ T4732] attempt to access beyond end of device [ 82.084285][ T4732] loop3: rw=524288, want=48, limit=16 [ 82.114743][ T4730] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz.4.191: directory missing '..' [ 82.131515][ T4732] attempt to access beyond end of device [ 82.131515][ T4732] loop3: rw=524288, want=40, limit=16 [ 82.204714][ T4742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 82.493211][ T4751] SQUASHFS error: zlib decompression failed, data probably corrupt [ 82.527489][ T4751] SQUASHFS error: Failed to read block 0x9b: -5 [ 82.534135][ T4751] SQUASHFS error: Unable to read metadata cache entry [99] [ 82.541455][ T4751] SQUASHFS error: Unable to read inode 0x127 [ 82.547251][ T4746] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 82.547591][ T4746] REISERFS (device loop1): using ordered data mode [ 82.547604][ T4746] reiserfs: using flush barriers [ 82.569739][ T4746] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 82.588951][ T4754] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 82.605007][ T4746] REISERFS (device loop1): checking transaction log (loop1) [ 82.649350][ T4754] EXT4-fs (loop4): Ignoring removed nobh option [ 82.687120][ T4757] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 82.705546][ T4754] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c018, mo2=0003] [ 82.779791][ T4754] System zones: 1-2, 4-12, 8-8 [ 82.832199][ T4754] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.199: iget: bad i_size value: 38620345925642 [ 82.890941][ T4754] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.199: couldn't read orphan inode 15 (err -117) [ 82.925391][ T4757] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 82.955708][ T4754] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,jqfmt=vfsv1,grpquota,debug,usrjquota=,init_itable,nobh,,errors=continue. Quota mode: writeback. [ 82.987550][ T4746] REISERFS (device loop1): Using tea hash to sort names [ 83.005469][ T4762] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: writeback. [ 83.058243][ T4746] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 83.291607][ T4772] set_capacity_and_notify: 8 callbacks suppressed [ 83.291623][ T4772] loop3: detected capacity change from 0 to 16 [ 83.372637][ T4772] erofs: (device loop3): mounted with root inode @ nid 36. [ 83.421036][ T4772] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36 [ 83.482261][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 83.523606][ T4772] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 352255 of nid 36 [ 83.572630][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 83.592730][ T4772] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36 [ 83.610137][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 83.620029][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 83.634062][ T4772] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 339967 of nid 36 [ 83.644903][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 83.712911][ T4772] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 80 of nid 36 [ 83.748417][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 81 @ nid 36 [ 83.771861][ T4772] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 331775 of nid 36 [ 83.796739][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 83.825511][ T4785] loop4: detected capacity change from 0 to 8192 [ 83.832280][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 83.842851][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 83.851976][ T4772] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 315391 of nid 36 [ 83.863173][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 83.883624][ T4772] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 72 of nid 36 [ 83.919481][ T4785] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 83.955984][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 73 @ nid 36 [ 83.966746][ T4785] REISERFS (device loop4): using ordered data mode [ 83.976636][ T4772] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 299007 of nid 36 [ 83.986763][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 83.996392][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 84.005492][ T4772] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 84.006314][ T4785] reiserfs: using flush barriers [ 84.016763][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 84.029381][ T4772] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 286719 of nid 36 [ 84.039766][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 69 @ nid 36 [ 84.054663][ T4772] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 84.064028][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 68 @ nid 36 [ 84.073302][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 67 @ nid 36 [ 84.082366][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 66 @ nid 36 [ 84.092270][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 65 @ nid 36 [ 84.105855][ T4785] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.114373][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 84.178529][ T4785] REISERFS (device loop4): checking transaction log (loop4) [ 84.205219][ T4785] REISERFS (device loop4): Using rupasov hash to sort names [ 84.210055][ T4772] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 62 of nid 36 [ 84.244096][ T4785] REISERFS (device loop4): using 3.5.x disk format [ 84.250825][ T4785] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 84.275299][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 84.320440][ T4772] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 258047 of nid 36 [ 84.331875][ T4785] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 84.362798][ T4785] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 84.381709][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 84.382951][ T4785] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 84.409474][ T4785] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 84.419728][ T4772] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 253951 of nid 36 [ 84.468111][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 84.495878][ T4772] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 84.502279][ T4800] loop2: detected capacity change from 0 to 64 [ 84.522587][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 84.552008][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 84.598691][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 84.648052][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 84.668286][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 84.684407][ T4772] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 225279 of nid 36 [ 84.704170][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 84.722147][ T4772] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 84.734134][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 84.759934][ T4772] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 217087 of nid 36 [ 84.810905][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 84.840667][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 84.872588][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 84.894991][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 84.935263][ T4772] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 200703 of nid 36 [ 84.958030][ T4808] netlink: 'syz.4.224': attribute type 3 has an invalid length. [ 84.970370][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 85.010096][ T4772] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 42 of nid 36 [ 85.035685][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 85.054815][ T4792] loop1: detected capacity change from 0 to 32768 [ 85.072703][ T4772] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 176127 of nid 36 [ 85.098646][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 85.101472][ T4810] loop4: detected capacity change from 0 to 128 [ 85.116149][ T4772] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 172031 of nid 36 [ 85.127338][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 85.137802][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 85.137830][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 85.137854][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 37 @ nid 36 [ 85.137872][ T4772] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 85.137888][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 85.137910][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 35 @ nid 36 [ 85.137933][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 85.137956][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 33 @ nid 36 [ 85.137978][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 85.138001][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 85.138059][ T4772] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 28 of nid 36 [ 85.242937][ T4810] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 85.328728][ T4810] hpfs: filesystem error: improperly stopped [ 85.342787][ T4810] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 85.355174][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 29 @ nid 36 [ 85.373885][ T4792] XFS (loop1): Mounting V5 Filesystem [ 85.396693][ T4810] hpfs: You really don't want any checks? You are crazy... [ 85.419587][ T4772] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 118783 of nid 36 [ 85.499209][ T4810] hpfs: hpfs_map_sector(): read error [ 85.529350][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 28 @ nid 36 [ 85.547304][ T4810] hpfs: code page support is disabled [ 85.574825][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 85.582363][ T4810] hpfs: hpfs_map_4sectors(): unaligned read [ 85.602992][ T4792] XFS (loop1): Ending clean mount [ 85.605449][ T4772] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 110591 of nid 36 [ 85.632799][ T4810] hpfs: hpfs_map_4sectors(): unaligned read [ 85.638807][ T4810] hpfs: filesystem error: unable to find root dir [ 85.688473][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 85.735884][ T4772] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 85.746981][ T4184] XFS (loop1): Unmounting Filesystem [ 85.779518][ T4817] loop2: detected capacity change from 0 to 40427 [ 85.811166][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 85.842156][ T4772] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 85.864594][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 85.877644][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 85.888889][ T4817] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 85.910649][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 85.920988][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 85.930291][ T4772] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 85.930672][ C1] vkms_vblank_simulate: vblank timer overrun [ 85.940979][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 85.956782][ T4817] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 85.988477][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 86.007820][ T4772] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 86.017511][ T4817] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 86.032967][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 86.047210][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 86.083788][ T4835] netlink: 16 bytes leftover after parsing attributes in process `syz.4.234'. [ 86.096793][ T4832] loop0: detected capacity change from 0 to 1024 [ 86.103791][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 86.121711][ T4817] F2FS-fs (loop2): Found nat_bits in checkpoint [ 86.158542][ T4772] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 86.187326][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 86.196861][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 5 @ nid 36 [ 86.262637][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 86.273893][ T4832] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 86.292339][ T4832] System zones: 0-1, 3-8 [ 86.305137][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 3 @ nid 36 [ 86.361096][ T4772] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 36 [ 86.371865][ T4772] attempt to access beyond end of device [ 86.371865][ T4772] loop3: rw=524288, want=13478624104, limit=16 [ 86.384328][ T4772] attempt to access beyond end of device [ 86.384328][ T4772] loop3: rw=524288, want=13478624080, limit=16 [ 86.388270][ T4832] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,barrier,debug,quota,,errors=continue. Quota mode: writeback. [ 86.396109][ T4772] attempt to access beyond end of device [ 86.396109][ T4772] loop3: rw=524288, want=56, limit=16 [ 86.396205][ T4772] attempt to access beyond end of device [ 86.396205][ T4772] loop3: rw=524288, want=40, limit=16 [ 86.396267][ T4772] attempt to access beyond end of device [ 86.396267][ T4772] loop3: rw=524288, want=96, limit=16 [ 86.396420][ T4772] attempt to access beyond end of device [ 86.396420][ T4772] loop3: rw=524288, want=32, limit=16 [ 86.457686][ T4817] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 86.471441][ T4817] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 86.501125][ T4832] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.514210][ T1111] cfg80211: failed to load regulatory.db [ 86.528758][ T4772] attempt to access beyond end of device [ 86.528758][ T4772] loop3: rw=524288, want=15495015312, limit=16 [ 86.573456][ T4772] attempt to access beyond end of device [ 86.573456][ T4772] loop3: rw=524288, want=15495015288, limit=16 [ 86.586313][ T4845] loop4: detected capacity change from 0 to 64 [ 86.645271][ T26] audit: type=1800 audit(1769469819.562:44): pid=4832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.233" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 86.892366][ T4850] loop1: detected capacity change from 0 to 4096 [ 87.043714][ T4856] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.825621][ T4884] program syz.1.251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.900193][ T4880] loop2: detected capacity change from 0 to 32768 [ 88.013425][ T4880] XFS (loop2): sunit and swidth must be specified together [ 88.024698][ T4888] erofs: (device loop3): mounted with root inode @ nid 36. [ 88.071817][ T4888] handle_bad_sector: 1 callbacks suppressed [ 88.071833][ T4888] attempt to access beyond end of device [ 88.071833][ T4888] loop3: rw=524288, want=328, limit=16 [ 88.179247][ T4888] attempt to access beyond end of device [ 88.179247][ T4888] loop3: rw=524288, want=336, limit=16 [ 88.255506][ T4860] (syz.0.243,4860,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 88.296580][ T4860] (syz.0.243,4860,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 88.376097][ T4897] device veth0_virt_wifi entered promiscuous mode [ 88.431372][ T4860] JBD2: Ignoring recovery information on journal [ 88.462750][ T4295] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.569969][ T4860] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 88.753390][ T4295] usb 3-1: Using ep0 maxpacket: 32 [ 88.837634][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 88.897259][ T4295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.917584][ T4295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.938572][ T4295] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 88.943329][ T1111] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 88.977191][ T4295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.019202][ T4295] usb 3-1: config 0 descriptor?? [ 89.119964][ T4914] set_capacity_and_notify: 2 callbacks suppressed [ 89.119979][ T4914] loop3: detected capacity change from 0 to 1024 [ 89.202748][ T1111] usb 5-1: Using ep0 maxpacket: 8 [ 89.235265][ T4914] hfsplus: bad catalog entry type [ 89.333085][ T1111] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 45, changing to 9 [ 89.368123][ T1111] usb 5-1: config 1 interface 0 has no altsetting 0 [ 89.388208][ T4910] loop1: detected capacity change from 0 to 32768 [ 89.457795][ T4925] loop3: detected capacity change from 0 to 512 [ 89.465682][ T4910] XFS (loop1): Mounting V5 Filesystem [ 89.510213][ T4910] XFS (loop1): Ending clean mount [ 89.518688][ T4295] greenasia 0003:0E8F:0012.0006: item fetching failed at offset 0/3 [ 89.527319][ T4295] greenasia 0003:0E8F:0012.0006: parse failed [ 89.533759][ T4295] greenasia: probe of 0003:0E8F:0012.0006 failed with error -22 [ 89.553255][ T1111] usb 5-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 89.557803][ T4925] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.572613][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.593737][ T4910] XFS (loop1): Quotacheck needed: Please wait. [ 89.597136][ T4925] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 89.609106][ T1111] usb 5-1: Product: syz [ 89.618761][ T1111] usb 5-1: Manufacturer: syz [ 89.623616][ T1111] usb 5-1: SerialNumber: syz [ 89.632046][ T4925] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 89.667889][ T4925] EXT4-fs (loop3): 1 truncate cleaned up [ 89.673668][ T4925] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 89.727754][ T4242] usb 3-1: USB disconnect, device number 3 [ 89.778473][ T4910] XFS (loop1): Quotacheck: Done. [ 89.923298][ T4184] XFS (loop1): Unmounting Filesystem [ 89.998147][ T1111] usbhid 5-1:1.0: can't add hid device: -71 [ 90.005370][ T1111] usbhid: probe of 5-1:1.0 failed with error -71 [ 90.036592][ T1111] usb 5-1: USB disconnect, device number 4 [ 90.166364][ T4937] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.242567][ T4295] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 90.294899][ T4942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'. [ 90.304678][ T4942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'. [ 90.643947][ T4295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 90.669497][ T4295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.684547][ T4960] netlink: 'syz.4.285': attribute type 3 has an invalid length. [ 90.701226][ T4295] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 90.710826][ T4295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.742140][ T4295] usb 4-1: config 0 descriptor?? [ 90.882598][ T1111] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 91.032697][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 91.122584][ T1111] usb 3-1: Using ep0 maxpacket: 32 [ 91.152788][ T4189] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 91.238554][ T4295] corsair-psu 0003:1B1C:1C0C.0007: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0c] on usb-dummy_hcd.3-1/input0 [ 91.272661][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 91.322753][ T4295] corsair-psu 0003:1B1C:1C0C.0007: unable to initialize device (-38) [ 91.335614][ T4295] corsair-psu: probe of 0003:1B1C:1C0C.0007 failed with error -38 [ 91.392938][ T23] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 91.401277][ T23] usb 2-1: config 0 has no interface number 0 [ 91.408360][ T1111] usb 3-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 91.417898][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.426573][ T1111] usb 3-1: Product: syz [ 91.430990][ T1111] usb 3-1: Manufacturer: syz [ 91.436112][ T1111] usb 3-1: SerialNumber: syz [ 91.453077][ T1111] usb 3-1: config 0 descriptor?? [ 91.459762][ T4242] usb 4-1: USB disconnect, device number 3 [ 91.495266][ T1111] dw2102: su3000_identify_state [ 91.500195][ T1111] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 91.509776][ T1111] dw2102: su3000_power_ctrl: 1, initialized 0 [ 91.516794][ T1111] dvb-usb: bulk message failed: -22 (2/0) [ 91.528408][ T1111] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 91.543996][ T4189] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 91.552600][ T4189] usb 5-1: config 0 has no interface number 0 [ 91.553681][ T1111] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 91.558722][ T4189] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 91.573206][ T23] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 91.578977][ T4189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.595615][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.604031][ T1111] usb 3-1: media controller created [ 91.609715][ T1111] dvb-usb: bulk message failed: -22 (6/0) [ 91.621221][ T23] usb 2-1: Product: syz [ 91.624579][ T4189] usb 5-1: config 0 descriptor?? [ 91.631707][ T23] usb 2-1: Manufacturer: syz [ 91.637051][ T1111] dw2102: i2c transfer failed. [ 91.642198][ T1111] dvb-usb: bulk message failed: -22 (6/0) [ 91.648297][ T23] usb 2-1: SerialNumber: syz [ 91.655111][ T1111] dw2102: i2c transfer failed. [ 91.659918][ T1111] dvb-usb: bulk message failed: -22 (6/0) [ 91.666879][ T23] usb 2-1: config 0 descriptor?? [ 91.671987][ T1111] dw2102: i2c transfer failed. [ 91.677510][ T1111] dvb-usb: bulk message failed: -22 (6/0) [ 91.683710][ T1111] dw2102: i2c transfer failed. [ 91.689771][ T1111] dvb-usb: bulk message failed: -22 (6/0) [ 91.700374][ T1111] dw2102: i2c transfer failed. [ 91.707880][ T23] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 91.717560][ T23] usb 2-1: selecting invalid altsetting 1 [ 91.718413][ T4189] usb 5-1: selecting invalid altsetting 1 [ 91.723784][ T23] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 91.734823][ T4958] dw2102: i2c wr: len=66 is too big! [ 91.734823][ T4958] [ 91.745713][ T4189] dvb_ttusb_budget: ttusb_init_controller: error [ 91.752449][ T1111] dvb-usb: bulk message failed: -22 (6/0) [ 91.758379][ T1111] dw2102: i2c transfer failed. [ 91.759851][ T4189] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 91.770630][ T23] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 91.782042][ T1111] dvb-usb: MAC address: 02:02:02:02:02:02 [ 91.809669][ T1111] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.829604][ T1111] dvb-usb: bulk message failed: -22 (3/0) [ 91.835420][ T1111] dw2102: command 0x0e transfer failed. [ 91.841597][ T1111] dvb-usb: bulk message failed: -22 (3/0) [ 91.853026][ T1111] dw2102: command 0x0e transfer failed. [ 91.858763][ T23] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 91.868494][ T23] usb 2-1: media controller created [ 91.894081][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.918306][ T4189] DVB: Unable to find symbol cx22700_attach() [ 91.948673][ T4189] DVB: Unable to find symbol tda10046_attach() [ 91.955509][ T4189] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 91.963192][ T23] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 91.972762][ T23] zl10353_read_register: readreg error (reg=127, ret==-71) [ 91.986084][ T4189] usb 5-1: USB disconnect, device number 5 [ 92.008148][ T23] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 92.086539][ T23] usb 2-1: USB disconnect, device number 4 [ 92.161525][ T4975] loop3: detected capacity change from 0 to 2048 [ 92.183130][ T1111] dvb-usb: bulk message failed: -22 (3/0) [ 92.188959][ T4975] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.201163][ T1111] dw2102: command 0x0e transfer failed. [ 92.213509][ T1111] dvb-usb: bulk message failed: -22 (3/0) [ 92.220373][ T1111] dw2102: command 0x0e transfer failed. [ 92.228121][ T1111] dvb-usb: bulk message failed: -22 (1/0) [ 92.236320][ T1111] dw2102: command 0x51 transfer failed. [ 92.350069][ T1111] DVB: Unable to find symbol ds3000_attach() [ 92.356342][ T1111] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 92.478600][ T4982] loop2: detected capacity change from 0 to 4096 [ 92.502787][ T1111] rc_core: IR keymap rc-su3000 not found [ 92.508930][ T1111] Registered IR keymap rc-empty [ 92.557262][ T4982] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,usrquota,grpquota,errors=remount-ro,quota,debug_want_extra_isize=0x0000000000000008,resgid=0x0000000000000000,barrier,. Quota mode: writeback. [ 92.618867][ T4982] EXT4-fs error (device loop2): ext4_get_first_dir_block:3617: inode #12: block 80: comm syz.2.294: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 92.644355][ T1111] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 92.656908][ T3092] tipc: Subscription rejected, illegal request [ 92.750710][ T1111] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input9 [ 92.832233][ T4982] EXT4-fs (loop2): Remounting filesystem read-only [ 92.840491][ T1111] dvb-usb: schedule remote query interval to 150 msecs. [ 92.857397][ T4982] EXT4-fs error (device loop2): ext4_get_first_dir_block:3619: inode #12: comm syz.2.294: directory missing '..' [ 92.873220][ T1111] dw2102: su3000_power_ctrl: 0, initialized 1 [ 92.879326][ T1111] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 92.904531][ T5002] netlink: 104 bytes leftover after parsing attributes in process `syz.0.301'. [ 92.923280][ T4982] EXT4-fs (loop2): Remounting filesystem read-only [ 92.943714][ T1111] usb 3-1: USB disconnect, device number 4 [ 93.081225][ T1111] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 93.527651][ T5030] loop0: detected capacity change from 0 to 512 [ 93.759282][ T5030] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 93.798869][ T5037] loop2: detected capacity change from 0 to 8192 [ 93.805692][ T5030] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.870172][ T5037] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 93.907314][ T5037] REISERFS (device loop2): using ordered data mode [ 93.930777][ T5037] reiserfs: using flush barriers [ 93.937081][ T5037] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 93.954291][ T5037] REISERFS (device loop2): checking transaction log (loop2) [ 94.034223][ T5037] REISERFS (device loop2): Using tea hash to sort names [ 94.041762][ T5037] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 94.461775][ T5060] loop3: detected capacity change from 0 to 8192 [ 94.507902][ T5060] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 94.543525][ T5060] REISERFS (device loop3): using ordered data mode [ 94.559833][ T5060] reiserfs: using flush barriers [ 94.623190][ T5060] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 94.675074][ T5075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.329'. [ 94.727807][ T5060] REISERFS (device loop3): checking transaction log (loop3) [ 94.799421][ T5060] REISERFS (device loop3): Using r5 hash to sort names [ 94.821788][ T5083] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 94.872047][ T5085] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 94.904622][ T5082] loop2: detected capacity change from 0 to 1024 [ 94.960161][ T5087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.340'. [ 95.044613][ T5091] loop1: detected capacity change from 0 to 64 [ 95.109204][ T1572] hfsplus: b-tree write err: -5, ino 4 [ 95.248707][ T5102] loop2: detected capacity change from 0 to 512 [ 95.320716][ T5102] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.357792][ T5102] EXT4-fs (loop2): orphan cleanup on readonly fs [ 95.370349][ T5102] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 95.388972][ T5102] Quota error (device loop2): write_blk: dquota write failed [ 95.399174][ T5102] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 95.410135][ T5102] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.347: Failed to acquire dquot type 0 [ 95.422680][ T5102] EXT4-fs (loop2): 1 truncate cleaned up [ 95.469850][ T5102] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,noblock_validity,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000000,nogrpid,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x00000000000000072,errors=continue. Quota mode: writeback. [ 95.755422][ T5108] loop1: detected capacity change from 0 to 8192 [ 95.816655][ T5108] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 95.871648][ T5103] loop0: detected capacity change from 0 to 32768 [ 95.880012][ T5108] REISERFS (device loop1): using ordered data mode [ 95.888017][ T5108] reiserfs: using flush barriers [ 95.898245][ T5108] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 95.916778][ T5108] REISERFS (device loop1): checking transaction log (loop1) [ 95.942000][ T5108] REISERFS (device loop1): Using r5 hash to sort names [ 95.949888][ T5108] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 95.963710][ T5108] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 96.006371][ T5122] loop2: detected capacity change from 0 to 1024 [ 96.057373][ T5103] XFS (loop0): Mounting V5 Filesystem [ 96.141599][ T5129] loop4: detected capacity change from 0 to 256 [ 96.315140][ T5122] hfsplus: bad catalog entry type [ 96.320353][ T5103] XFS (loop0): Ending clean mount [ 96.349955][ T5129] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.398518][ T5103] XFS (loop0): Quotacheck needed: Please wait. [ 96.449351][ T5132] loop3: detected capacity change from 0 to 32768 [ 96.473169][ T5129] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.498870][ T3092] hfsplus: b-tree write err: -5, ino 4 [ 96.506293][ T5129] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.538035][ T5132] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.357 (5132) [ 96.589986][ T5132] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 96.599026][ T5132] BTRFS info (device loop3): force clearing of disk cache [ 96.606677][ T5132] BTRFS info (device loop3): force zlib compression, level 3 [ 96.614519][ T5132] BTRFS info (device loop3): enabling auto defrag [ 96.620997][ T5132] BTRFS info (device loop3): max_inline at 0 [ 96.627076][ T5132] BTRFS info (device loop3): enabling disk space caching [ 96.634195][ T5132] BTRFS info (device loop3): disk space caching is enabled [ 96.641416][ T5132] BTRFS info (device loop3): has skinny extents [ 96.748949][ T5103] XFS (loop0): Quotacheck: Done. [ 96.869584][ T5150] loop1: detected capacity change from 0 to 256 [ 96.887255][ T4186] XFS (loop0): Unmounting Filesystem [ 97.011398][ T5150] FAT-fs (loop1): Directory bread(block 64) failed [ 97.022741][ T5155] EXT4-fs (loop2): inline encryption not supported [ 97.044489][ T4279] BTRFS error (device loop3): bad fsid on block 5341184 [ 97.055257][ T5150] FAT-fs (loop1): Directory bread(block 65) failed [ 97.055465][ T5132] BTRFS warning (device loop3): failed to read root (objectid=10): -5 [ 97.063528][ T5150] FAT-fs (loop1): Directory bread(block 66) failed [ 97.077587][ T5150] FAT-fs (loop1): Directory bread(block 67) failed [ 97.084558][ T5150] FAT-fs (loop1): Directory bread(block 68) failed [ 97.091650][ T5150] FAT-fs (loop1): Directory bread(block 69) failed [ 97.098886][ T5150] FAT-fs (loop1): Directory bread(block 70) failed [ 97.105783][ T5150] FAT-fs (loop1): Directory bread(block 71) failed [ 97.112386][ T5150] FAT-fs (loop1): Directory bread(block 72) failed [ 97.121506][ T5150] FAT-fs (loop1): Directory bread(block 73) failed [ 97.344708][ T5155] EXT4-fs (loop2): Test dummy encryption mode enabled [ 97.359922][ T5155] EXT4-fs error (device loop2): __ext4_iget:4912: inode #11: block 1: comm syz.2.362: invalid block [ 97.380206][ T5132] BTRFS error (device loop3): open_ctree failed: -22 [ 97.437779][ T5155] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.362: couldn't read orphan inode 11 (err -117) [ 97.460826][ T5155] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,journal_dev=0x0000000000000005,max_dir_size_kb=0x0000000000000004,noquota,nodiscard,sb=0x00000000000000ff,inlinecrypt,debug_want_extra_isize=0x0000000000000004,test_dummy_encryption,,errors=continue. Quota mode: none. [ 97.772121][ T4177] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4177) [ 98.727874][ T4249] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 98.927101][ T5228] ax25_connect(): syz.3.389 uses autobind, please contact jreuter@yaina.de [ 99.006856][ T5206] XFS (loop1): Mounting V5 Filesystem [ 99.037186][ T5230] rock: directory entry would overflow storage [ 99.057352][ T5214] XFS (loop4): Mounting V5 Filesystem [ 99.087765][ T5230] rock: sig=0x66, size=4, remaining=3 [ 99.102841][ T4249] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 99.118483][ T4249] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 99.127766][ T4249] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 99.138260][ T4249] usb 3-1: config 220 has no interface number 2 [ 99.144653][ T4249] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 99.157979][ T4249] usb 3-1: config 220 interface 0 has no altsetting 0 [ 99.165198][ T4249] usb 3-1: config 220 interface 76 has no altsetting 0 [ 99.172247][ T4249] usb 3-1: config 220 interface 1 has no altsetting 0 [ 99.182435][ T5206] XFS (loop1): Ending clean mount [ 99.226551][ T5214] XFS (loop4): Ending clean mount [ 99.247178][ T5230] rock: directory entry would overflow storage [ 99.313398][ T5230] rock: sig=0x66, size=4, remaining=3 [ 99.342629][ T4249] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 99.351706][ T4249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.365271][ T4184] XFS (loop1): Unmounting Filesystem [ 99.380692][ T4249] usb 3-1: Product: syz [ 99.389670][ T4249] usb 3-1: Manufacturer: syz [ 99.395586][ T4249] usb 3-1: SerialNumber: syz [ 99.410768][ T4200] XFS (loop4): Unmounting Filesystem [ 99.803725][ T4249] usb 3-1: selecting invalid altsetting 0 [ 99.810738][ T4249] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 99.831566][ T4249] usb 3-1: No valid video chain found. [ 99.904429][ T5259] set_capacity_and_notify: 4 callbacks suppressed [ 99.904445][ T5259] loop0: detected capacity change from 0 to 64 [ 99.953854][ T4249] usb 3-1: selecting invalid altsetting 0 [ 99.959740][ T4249] usbtest: probe of 3-1:220.1 failed with error -22 [ 100.023332][ T4249] usb 3-1: USB disconnect, device number 5 [ 100.247998][ T5269] loop0: detected capacity change from 0 to 512 [ 100.290948][ T5269] EXT4-fs (loop0): Ignoring removed nobh option [ 100.315504][ T5251] loop3: detected capacity change from 0 to 32768 [ 100.374747][ T5269] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #3: comm syz.0.400: corrupted inode contents [ 100.377365][ T5269] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #3: comm syz.0.400: mark_inode_dirty error [ 100.405840][ T5269] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #3: comm syz.0.400: corrupted inode contents [ 100.417897][ T5269] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.400: mark_inode_dirty error [ 100.438038][ T5269] Quota error (device loop0): write_blk: dquota write failed [ 100.438272][ T5269] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 100.438316][ T5269] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.400: Failed to acquire dquot type 0 [ 100.447305][ T5269] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.400: corrupted inode contents [ 100.457256][ T5269] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #16: comm syz.0.400: mark_inode_dirty error [ 100.457674][ T5269] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.400: corrupted inode contents [ 100.458010][ T5269] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.400: mark_inode_dirty error [ 100.458460][ T5269] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.400: corrupted inode contents [ 100.460317][ T5269] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 100.460657][ T5269] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.400: corrupted inode contents [ 100.465587][ T5269] EXT4-fs error (device loop0): ext4_truncate:4279: inode #16: comm syz.0.400: mark_inode_dirty error [ 100.465993][ T5269] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 100.487749][ T5251] XFS (loop3): Mounting V5 Filesystem [ 100.489288][ T5269] EXT4-fs (loop0): 1 truncate cleaned up [ 100.489312][ T5269] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nobh,,errors=continue. Quota mode: writeback. [ 100.489420][ T5269] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.749026][ T5251] XFS (loop3): Ending clean mount [ 100.751319][ T5251] XFS (loop3): Quotacheck needed: Please wait. [ 100.791865][ T5265] loop4: detected capacity change from 0 to 32768 [ 100.855372][ T5251] XFS (loop3): Quotacheck: Done. [ 101.012693][ T4185] XFS (loop3): Unmounting Filesystem [ 101.868483][ T5327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.419'. [ 102.270391][ T5307] loop2: detected capacity change from 0 to 32768 [ 102.285284][ T5344] loop4: detected capacity change from 0 to 4096 [ 102.317093][ T5352] loop1: detected capacity change from 0 to 128 [ 102.388740][ T5307] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 102.419585][ T5357] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.420695][ T5352] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985 [ 102.435648][ T5344] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 102.513469][ T5352] ; already mounted read-only [ 102.518252][ T5352] hpfs: filesystem error: improperly stopped [ 102.573937][ T5352] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 102.592789][ T5352] hpfs: You really don't want any checks? You are crazy... [ 102.600559][ T5352] hpfs: hpfs_map_sector(): read error [ 102.607966][ T5344] NILFS (loop4): mounting fs with errors [ 102.627806][ T4187] ocfs2: Unmounting device (7,2) on (node local) [ 102.695371][ T5352] hpfs: code page support is disabled [ 102.700868][ T5352] hpfs: hpfs_map_4sectors(): unaligned read [ 102.765867][ T5352] hpfs: hpfs_map_4sectors(): unaligned read [ 102.771822][ T5352] hpfs: filesystem error: unable to find root dir [ 103.107894][ T5384] loop0: detected capacity change from 0 to 128 [ 103.291300][ T5382] loop2: detected capacity change from 0 to 4096 [ 103.319215][ T5382] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 103.432887][ T5382] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 103.540634][ T5394] sp0: Synchronizing with TNC [ 103.552651][ T5176] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 103.560562][ T5382] ntfs3: loop2: ino=1e, "file1" encrypted i/o not supported [ 103.647935][ T5392] loop4: detected capacity change from 0 to 8192 [ 103.657297][ T4298] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 103.685247][ T4187] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 103.700809][ T4187] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 103.731367][ T4187] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 103.757070][ T1572] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 103.774652][ T4187] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 103.922893][ T5176] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 103.948715][ T5176] usb 2-1: config 0 has no interface number 0 [ 103.969970][ T5176] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.035833][ T5176] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.054998][ T5369] F2FS-fs (loop3): build fault injection attr: rate: 693, type: 0x1ffff [ 104.074003][ T5176] usb 2-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 104.108855][ T5176] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.116638][ T5369] F2FS-fs (loop3): invalid crc value [ 104.137349][ T5408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.456'. [ 104.185243][ T5176] usb 2-1: config 0 descriptor?? [ 104.197331][ T5369] F2FS-fs (loop3): Found nat_bits in checkpoint [ 104.358233][ T5369] F2FS-fs (loop3): Start checkpoint disabled! [ 104.442595][ T5369] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 104.684496][ T5176] logitech-djreceiver 0003:046D:C534.0008: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.1-1/input28 [ 104.737353][ T5437] netlink: 'syz.0.469': attribute type 29 has an invalid length. [ 104.748027][ T5437] netlink: 'syz.0.469': attribute type 29 has an invalid length. [ 104.762366][ T5437] netlink: 'syz.0.469': attribute type 29 has an invalid length. [ 104.862701][ T4293] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 104.889540][ T4242] usb 2-1: USB disconnect, device number 5 [ 105.039816][ T5440] set_capacity_and_notify: 1 callbacks suppressed [ 105.039832][ T5440] loop0: detected capacity change from 0 to 4096 [ 105.112697][ T4293] usb 3-1: Using ep0 maxpacket: 8 [ 105.142046][ T5440] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 105.183212][ T5440] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 105.202620][ T5440] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 105.230106][ T5440] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 105.278042][ T5446] loop3: detected capacity change from 0 to 64 [ 105.278070][ T5435] loop4: detected capacity change from 0 to 32768 [ 105.328687][ T5440] ntfs: volume version 3.1. [ 105.331062][ T5435] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 105.357273][ T5435] JBD2: Ignoring recovery information on journal [ 105.381470][ T5440] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 105.420122][ T5440] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 105.432585][ T5440] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 105.462874][ T4293] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 105.473243][ T4293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 105.481370][ T4293] usb 3-1: Product: syz [ 105.485758][ T4293] usb 3-1: Manufacturer: syz [ 105.490475][ T4293] usb 3-1: SerialNumber: syz [ 105.497879][ T4293] usb 3-1: config 0 descriptor?? [ 105.554957][ T4293] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 105.582061][ T5435] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 105.792859][ T4293] gspca_sn9c2028: read1 error -71 [ 105.814556][ T4293] gspca_sn9c2028: read1 error -71 [ 105.842008][ T5435] process 'syz.4.467' launched './file2' with NULL argv: empty string added [ 105.863981][ T4293] gspca_sn9c2028: read1 error -71 [ 105.869202][ T4293] sn9c2028: probe of 3-1:0.0 failed with error -71 [ 105.897254][ T4293] usb 3-1: USB disconnect, device number 6 [ 106.043983][ T4200] ocfs2: Unmounting device (7,4) on (node local) [ 106.096138][ T5465] loop0: detected capacity change from 0 to 4096 [ 106.187375][ T5466] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.443823][ T5458] loop3: detected capacity change from 0 to 32768 [ 106.525479][ T5458] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop3 scanned by syz.3.478 (5458) [ 106.559800][ T5479] sp0: Synchronizing with TNC [ 106.569403][ T5477] [U] è [ 106.607312][ T5458] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 106.632674][ T5458] BTRFS info (device loop3): using free space tree [ 106.683262][ T5458] BTRFS info (device loop3): has skinny extents [ 106.742764][ T5176] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 106.982831][ T5458] BTRFS info (device loop3): enabling ssd optimizations [ 107.123008][ T5176] usb 2-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 107.157947][ T5176] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.199402][ T5176] usb 2-1: config 0 descriptor?? [ 107.476461][ T5176] snd-usb-hiface: probe of 2-1:0.0 failed with error -22 [ 107.607036][ T5517] loop4: detected capacity change from 0 to 8192 [ 107.649818][ T5482] loop0: detected capacity change from 0 to 32768 [ 107.735821][ T4295] usb 2-1: USB disconnect, device number 6 [ 107.790785][ T5482] [ 107.790785][ T5482] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.790785][ T5482] [ 107.841954][ T5517] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 107.883032][ T5517] REISERFS (device loop4): using ordered data mode [ 107.889621][ T5517] reiserfs: using flush barriers [ 107.902525][ T4293] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 107.924344][ T5482] ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 107.924344][ T5482] [ 107.950053][ T5517] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 107.983466][ T5517] REISERFS (device loop4): checking transaction log (loop4) [ 108.002418][ T5517] REISERFS (device loop4): Using r5 hash to sort names [ 108.043259][ T5517] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 108.062695][ T5482] ERROR: (device loop0): jfs_unlink: [ 108.062695][ T5482] [ 108.098096][ T5517] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 108.175450][ T4186] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 108.175450][ T4186] [ 108.183477][ T5517] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 108.242796][ T144] ERROR: (device loop0): diWrite: ixpxd invalid [ 108.242796][ T144] [ 108.262756][ T144] ERROR: (device loop0): txCommit: [ 108.262756][ T144] [ 108.270329][ T144] jfs_write_inode: jfs_commit_inode failed! [ 108.312257][ T4186] [ 108.312257][ T4186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.312257][ T4186] [ 108.323057][ T4293] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.362757][ T4293] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.379080][ T4186] [ 108.379080][ T4186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.379080][ T4186] [ 108.518618][ T4293] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 108.553045][ T4293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 108.561084][ T4293] usb 3-1: SerialNumber: syz [ 108.622576][ T5526] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 108.802643][ T5525] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 108.862625][ T5526] usb 4-1: Using ep0 maxpacket: 8 [ 108.925438][ T4293] usb 3-1: 0:2 : does not exist [ 108.962675][ T4293] usb 3-1: USB disconnect, device number 7 [ 108.985310][ T5526] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.012882][ T5526] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.033287][ T5526] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 109.052604][ T5526] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.069307][ T5526] usb 4-1: config 0 descriptor?? [ 109.176049][ T5525] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.194709][ T5525] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.204290][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.302889][ T5525] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 109.322376][ T5525] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 109.342725][ T5525] usb 2-1: SerialNumber: syz [ 109.564355][ T5526] cherry 0003:046A:0027.0009: unknown main item tag 0x0 [ 109.578728][ T5526] cherry 0003:046A:0027.0009: unknown main item tag 0x0 [ 109.602765][ T5526] cherry 0003:046A:0027.0009: unknown main item tag 0x0 [ 109.620509][ T5526] cherry 0003:046A:0027.0009: item fetching failed at offset 14/69 [ 109.631658][ T5525] usb 2-1: 0:2 : does not exist [ 109.639026][ T5525] usb 2-1: unit 255 not found! [ 109.649504][ T5526] cherry: probe of 0003:046A:0027.0009 failed with error -22 [ 109.680204][ T5525] usb 2-1: USB disconnect, device number 7 [ 109.781293][ T4249] usb 4-1: USB disconnect, device number 4 [ 109.943975][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.314334][ T5550] loop2: detected capacity change from 0 to 40427 [ 110.341364][ T5550] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 110.370943][ T5550] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 110.396118][ T5550] F2FS-fs (loop2): invalid crc value [ 110.434127][ T5550] F2FS-fs (loop2): Found nat_bits in checkpoint [ 110.551729][ T5550] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 110.569480][ T5550] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 110.801513][ T5586] loop4: detected capacity change from 0 to 256 [ 110.976015][ T5586] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012c80, chksum : 0x0ff561db, utbl_chksum : 0xe619d30d) [ 111.180371][ T5601] loop4: detected capacity change from 0 to 64 [ 111.620161][ T5616] ALSA: mixer_oss: invalid OSS volume '' [ 111.766695][ T5620] loop0: detected capacity change from 0 to 512 [ 111.810075][ T5622] netlink: 'syz.1.542': attribute type 4 has an invalid length. [ 112.017319][ T5620] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 112.055774][ T5620] EXT4-fs (loop0): 1 truncate cleaned up [ 112.095767][ T5620] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota="errors=continue,noload,nombcache,usrjquota="errors=continue,usrjquota=,barrier,,errors=continue. Quota mode: writeback. [ 112.209528][ T5634] netlink: 96 bytes leftover after parsing attributes in process `syz.4.546'. [ 112.365586][ T5638] loop1: detected capacity change from 0 to 256 [ 112.380949][ T5620] EXT4-fs (loop0): Ignoring removed orlov option [ 112.398273][ T5620] EXT4-fs error (device loop0): ext4_remount:6060: comm syz.0.541: Abort forced by user [ 112.434120][ T5620] EXT4-fs (loop0): Remounting filesystem read-only [ 112.456373][ T5620] EXT4-fs (loop0): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,orlov,abort,nombcache,stripe=0x0000000000000010,. Quota mode: writeback. [ 112.516591][ T5638] FAT-fs (loop1): Directory bread(block 64) failed [ 112.534302][ T5638] FAT-fs (loop1): Directory bread(block 65) failed [ 112.553088][ T5647] loop2: detected capacity change from 0 to 256 [ 112.563251][ T5638] FAT-fs (loop1): Directory bread(block 66) failed [ 112.616304][ T5638] FAT-fs (loop1): Directory bread(block 67) failed [ 112.628687][ T5638] FAT-fs (loop1): Directory bread(block 68) failed [ 112.648480][ T5638] FAT-fs (loop1): Directory bread(block 69) failed [ 112.672178][ T5638] FAT-fs (loop1): Directory bread(block 70) failed [ 112.689452][ T5647] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 112.722580][ T5638] FAT-fs (loop1): Directory bread(block 71) failed [ 112.730006][ T5638] FAT-fs (loop1): Directory bread(block 72) failed [ 112.730044][ T5638] FAT-fs (loop1): Directory bread(block 73) failed [ 112.832598][ T4295] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 113.186004][ T5664] loop0: detected capacity change from 0 to 64 [ 113.262684][ T4295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.284731][ T4295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.302879][ T4295] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.321904][ T4295] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.332910][ T4295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.342839][ T5525] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 113.359275][ T4295] usb 5-1: config 0 descriptor?? [ 113.488322][ T26] audit: type=1326 audit(1769469846.402:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5673 comm="syz.1.568" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe74633eb9 code=0x0 [ 113.509823][ T5676] loop3: detected capacity change from 0 to 256 [ 113.607097][ T5676] FAT-fs (loop3): Directory bread(block 64) failed [ 113.623851][ T5681] loop0: detected capacity change from 0 to 1024 [ 113.630521][ T5676] FAT-fs (loop3): Directory bread(block 65) failed [ 113.639173][ T5676] FAT-fs (loop3): Directory bread(block 66) failed [ 113.645994][ T5676] FAT-fs (loop3): Directory bread(block 67) failed [ 113.682603][ T5676] FAT-fs (loop3): Directory bread(block 68) failed [ 113.689272][ T5676] FAT-fs (loop3): Directory bread(block 69) failed [ 113.716795][ T5525] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 113.725459][ T5681] attempt to access beyond end of device [ 113.725459][ T5681] loop0: rw=0, want=5780, limit=1024 [ 113.740479][ T5525] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 113.741202][ T5676] FAT-fs (loop3): Directory bread(block 70) failed [ 113.775927][ T5525] usb 3-1: config 220 has no interface number 2 [ 113.788114][ T5676] FAT-fs (loop3): Directory bread(block 71) failed [ 113.797802][ T5525] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 113.802914][ T5676] FAT-fs (loop3): Directory bread(block 72) failed [ 113.832069][ T5676] FAT-fs (loop3): Directory bread(block 73) failed [ 113.838883][ T5525] usb 3-1: config 220 interface 0 has no altsetting 0 [ 113.853689][ T5525] usb 3-1: config 220 interface 76 has no altsetting 0 [ 113.868575][ T5525] usb 3-1: config 220 interface 1 has no altsetting 0 [ 113.884563][ T4295] plantronics 0003:047F:FFFF.000A: nested delimiters [ 113.891382][ T4295] plantronics 0003:047F:FFFF.000A: item 0 4 2 10 parsing failed [ 113.929127][ T4295] plantronics 0003:047F:FFFF.000A: parse failed [ 113.940742][ T4295] plantronics: probe of 0003:047F:FFFF.000A failed with error -22 [ 114.010569][ T5683] loop0: detected capacity change from 0 to 64 [ 114.032895][ T5525] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 114.052214][ T5525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.063529][ T5525] usb 3-1: Product: syz [ 114.067732][ T5525] usb 3-1: Manufacturer: syz [ 114.072354][ T5525] usb 3-1: SerialNumber: syz [ 114.096765][ T5524] usb 5-1: USB disconnect, device number 6 [ 114.128962][ T26] audit: type=1800 audit(1769469847.042:46): pid=5683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.570" name="file2" dev="loop0" ino=21 res=0 errno=0 [ 114.317981][ T5687] sp0: Synchronizing with TNC [ 114.391910][ T5689] netlink: 24 bytes leftover after parsing attributes in process `syz.1.573'. [ 114.401394][ T5689] netlink: 56 bytes leftover after parsing attributes in process `syz.1.573'. [ 114.422805][ T5689] netlink: 'syz.1.573': attribute type 10 has an invalid length. [ 114.442966][ T5525] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 114.449483][ T5525] usb 3-1: No valid video chain found. [ 114.462623][ T5525] usb 3-1: selecting invalid altsetting 0 [ 114.573933][ T5525] usb 3-1: selecting invalid altsetting 0 [ 114.579721][ T5525] usbtest: probe of 3-1:220.1 failed with error -22 [ 114.632730][ T5525] usb 3-1: USB disconnect, device number 8 [ 114.674550][ T5697] mkiss: ax0: crc mode is auto. [ 115.347975][ T5695] set_capacity_and_notify: 2 callbacks suppressed [ 115.347990][ T5695] loop1: detected capacity change from 0 to 32768 [ 115.405284][ T5695] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.576 (5695) [ 115.420788][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 115.442871][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 115.451250][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 115.492995][ T5695] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 115.532133][ T5695] BTRFS info (device loop1): using free space tree [ 115.554088][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 115.561527][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 115.579946][ T5695] BTRFS info (device loop1): has skinny extents [ 115.600491][ T5727] loop4: detected capacity change from 0 to 4096 [ 115.609705][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 115.640344][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 115.675546][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 115.696089][ T5746] netlink: 'syz.2.598': attribute type 3 has an invalid length. [ 115.702328][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 115.745397][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 115.783181][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 115.792815][ T5695] BTRFS info (device loop1): enabling ssd optimizations [ 115.815252][ T5763] loop0: detected capacity change from 0 to 512 [ 115.821710][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 115.846646][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 115.869319][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 115.898544][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 115.913526][ T5763] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 115.921811][ T5763] System zones: 0-2, 18-18, 34-34 [ 115.928730][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 115.936350][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 115.945638][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 115.953335][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 115.961698][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 115.969749][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 115.977345][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 115.984848][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 115.992259][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 115.999759][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 116.007207][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 116.014697][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 116.022102][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 116.026302][ T5763] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.600: bg 0: block 248: padding at end of block bitmap is not set [ 116.030208][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 116.051313][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 116.063750][ T5763] Quota error (device loop0): write_blk: dquota write failed [ 116.071225][ T5763] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 116.081265][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 116.088739][ T4293] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 116.096631][ T5763] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.600: Failed to acquire dquot type 1 [ 116.112582][ T4293] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 116.222929][ T5727] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 116.258105][ T5763] EXT4-fs (loop0): 1 truncate cleaned up [ 116.258692][ T5769] device sit0 entered promiscuous mode [ 116.292644][ T5763] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback. [ 116.404051][ T5769] netlink: 'syz.2.602': attribute type 1 has an invalid length. [ 116.411993][ T5763] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.431837][ T5770] fido_id[5770]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 116.462593][ T5769] netlink: 1 bytes leftover after parsing attributes in process `syz.2.602'. [ 116.930564][ T9] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 116.971829][ T4200] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 116.992115][ T4200] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 117.006112][ T4200] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 117.020431][ T4298] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 117.030981][ T5789] IPVS: sync thread started: state = BACKUP, mcast_ifn = vxcan1, syncid = 3, id = 0 [ 117.061696][ T4200] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 117.756684][ T5819] loop4: detected capacity change from 0 to 4096 [ 117.862430][ T5819] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 117.878656][ T5819] ntfs3: loop4: try to read out of volume at offset 0xffffffff0000 [ 118.058515][ T5837] loop0: detected capacity change from 0 to 1024 [ 118.069235][ T5838] loop1: detected capacity change from 0 to 512 [ 118.106856][ T4293] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 118.146352][ T5837] EXT4-fs (loop0): Ignoring removed bh option [ 118.156873][ T5838] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 118.204860][ T5838] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 118.218501][ T5838] EXT4-fs (loop1): 1 truncate cleaned up [ 118.225212][ T5838] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota="data_err=ignore,noload,nombcache,usrjquota="errors=continue,errors=remount-ro,barrier,. Quota mode: writeback. [ 118.264224][ T5837] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,nobarrier,max_dir_size_kb=0x00000000000000eb,abort,user_xattr,bh,errors=remount-ro,. Quota mode: none. [ 118.299835][ T5838] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #2: block 4: comm syz.1.629: lblock 0 mapped to illegal pblock 4 (length 1) [ 118.347686][ T5838] EXT4-fs (loop1): Remounting filesystem read-only [ 118.472549][ T26] audit: type=1326 audit(1769469851.382:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde397b1eb9 code=0x7fc00000 [ 118.532730][ T4293] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.553688][ T4293] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.592974][ T26] audit: type=1326 audit(1769469851.382:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde397b1eb9 code=0x7fc00000 [ 118.682953][ T4293] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 118.692661][ T26] audit: type=1326 audit(1769469851.382:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde397b1eb9 code=0x7fc00000 [ 118.702624][ T4293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 118.749815][ T5855] loop0: detected capacity change from 0 to 128 [ 118.765863][ T26] audit: type=1326 audit(1769469851.382:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde397b1eb9 code=0x7fc00000 [ 118.773791][ T4293] usb 4-1: SerialNumber: syz [ 118.811983][ T26] audit: type=1326 audit(1769469851.382:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde397b1eb9 code=0x7fc00000 [ 118.842529][ T26] audit: type=1326 audit(1769469851.382:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde397b1eb9 code=0x7fc00000 [ 118.871777][ T26] audit: type=1326 audit(1769469851.382:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde397b1eb9 code=0x7fc00000 [ 118.901804][ T26] audit: type=1326 audit(1769469851.382:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde397b1eb9 code=0x7fc00000 [ 118.931645][ T26] audit: type=1326 audit(1769469851.382:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde397b1eb9 code=0x7fc00000 [ 118.959867][ T26] audit: type=1326 audit(1769469851.382:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde397b1eb9 code=0x7fc00000 [ 118.994695][ T5855] EXT4-fs (loop0): Test dummy encryption mode enabled [ 119.003211][ T1108] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 119.012652][ T5855] EXT4-fs (loop0): Test dummy encryption mode enabled [ 119.019465][ T5855] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 119.029003][ T26] audit: type=1326 audit(1769469851.382:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde397b1eb9 code=0x7fc00000 [ 119.079071][ T5855] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 119.115224][ T4293] usb 4-1: 0:2 : does not exist [ 119.132910][ T5855] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.204620][ T4293] usb 4-1: USB disconnect, device number 5 [ 119.245670][ T5847] loop4: detected capacity change from 0 to 32768 [ 119.326144][ T5847] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 119.343618][ T5847] JBD2: Ignoring recovery information on journal [ 119.432871][ T1108] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.476272][ T1108] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.500034][ T5847] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 119.509954][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.543989][ T1108] usb 2-1: config 0 interface 0 has no altsetting 0 [ 119.554070][ T1108] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 119.608466][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.625961][ T1108] usb 2-1: config 0 descriptor?? [ 119.741516][ T4200] ocfs2: Unmounting device (7,4) on (node local) [ 120.050679][ T5884] netlink: 763 bytes leftover after parsing attributes in process `syz.0.652'. [ 120.120228][ T1108] sunplus 0003:04FC:05D8.000C: unknown main item tag 0x0 [ 120.139277][ T1108] sunplus 0003:04FC:05D8.000C: unknown main item tag 0x0 [ 120.161979][ T1108] sunplus 0003:04FC:05D8.000C: unknown main item tag 0x0 [ 120.179042][ T5888] loop3: detected capacity change from 0 to 1024 [ 120.183120][ T1108] sunplus 0003:04FC:05D8.000C: unknown main item tag 0x0 [ 120.196420][ T5862] loop2: detected capacity change from 0 to 32768 [ 120.220553][ T1108] sunplus 0003:04FC:05D8.000C: unknown main item tag 0x0 [ 120.238459][ T1108] sunplus 0003:04FC:05D8.000C: hidraw0: USB HID v0.00 Device [HID 04fc:05d8] on usb-dummy_hcd.1-1/input0 [ 120.304290][ T5862] ialloc: diAlloc returned -5! [ 120.340760][ T1108] usb 2-1: USB disconnect, device number 8 [ 120.344518][ T5862] ialloc: diAlloc returned -5! [ 120.372877][ T5888] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,journal_dev=0x00000000000000ff,nombcache,nobarrier,init_itable,errors=remount-ro,. Quota mode: none. [ 120.392106][ T5901] loop4: detected capacity change from 0 to 8 [ 120.553876][ T5905] loop0: detected capacity change from 0 to 512 [ 120.631519][ T5905] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none. [ 120.648109][ T5913] netlink: 180 bytes leftover after parsing attributes in process `syz.3.660'. [ 120.660390][ T5909] netlink: 180 bytes leftover after parsing attributes in process `syz.3.660'. [ 120.740498][ T5917] loop4: detected capacity change from 0 to 64 [ 120.813814][ T5921] loop2: detected capacity change from 0 to 512 [ 120.925742][ T5921] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 120.939040][ T5921] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.032323][ T5923] fido_id[5923]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 121.106334][ T5931] loop3: detected capacity change from 0 to 2048 [ 121.147706][ T5931] EXT4-fs (loop3): Ignoring removed orlov option [ 121.174568][ T5931] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,journal_dev=0x0000000000000001,bsdgroups,errors=remount-ro,resgid=0x0000000000000000,orlov,nodiscard,. Quota mode: none. [ 121.211506][ T5931] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 121.511092][ T5936] loop2: detected capacity change from 0 to 32768 [ 121.594911][ T5936] JBD2: Ignoring recovery information on journal [ 121.652567][ T5787] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 121.747883][ T5936] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 121.892720][ T5787] usb 5-1: Using ep0 maxpacket: 16 [ 122.022933][ T5787] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 122.036783][ T5787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.056476][ T4187] ocfs2: Unmounting device (7,2) on (node local) [ 122.064177][ T5787] usb 5-1: config 0 descriptor?? [ 122.408377][ T5969] loop2: detected capacity change from 0 to 512 [ 122.511575][ T5969] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 122.545895][ T5787] corsair-psu 0003:1B1C:1C09.000D: unknown main item tag 0x3 [ 122.575449][ T5976] loop3: detected capacity change from 0 to 1024 [ 122.582418][ T5969] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.592799][ T5787] corsair-psu 0003:1B1C:1C09.000D: item fetching failed at offset 5/7 [ 122.654335][ T5787] corsair-psu: probe of 0003:1B1C:1C09.000D failed with error -22 [ 122.680741][ T5976] hfsplus: bad catalog entry type [ 122.767109][ T1108] usb 5-1: USB disconnect, device number 7 [ 122.785866][ T1572] hfsplus: b-tree write err: -5, ino 4 [ 123.565526][ T6008] netlink: 'syz.3.703': attribute type 3 has an invalid length. [ 123.885283][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 123.885298][ T26] audit: type=1326 audit(1769469856.802:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.3.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80188c0eb9 code=0x7ffc0000 [ 123.998114][ T26] audit: type=1326 audit(1769469856.842:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.3.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f80188c0eb9 code=0x7ffc0000 [ 124.063614][ T26] audit: type=1326 audit(1769469856.842:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.3.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80188c0eb9 code=0x7ffc0000 [ 124.161002][ T26] audit: type=1326 audit(1769469856.842:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.3.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f80188c0eb9 code=0x7ffc0000 [ 124.238873][ T26] audit: type=1326 audit(1769469856.842:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.3.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80188c0eb9 code=0x7ffc0000 [ 124.301681][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'. [ 124.392214][ T6035] loop3: detected capacity change from 0 to 4096 [ 124.418584][ T6042] loop0: detected capacity change from 0 to 4096 [ 124.472735][ T5787] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 124.489546][ T6035] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 124.513908][ T6035] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 124.528293][ T6035] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 124.533601][ T5169] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 124.540999][ T6035] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 124.572276][ T6035] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 124.585848][ T6042] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 124.602762][ T6035] ntfs: volume version 3.1. [ 124.671093][ T6042] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz.0.721: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 124.696914][ T6042] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.721: directory missing '..' [ 124.850069][ T6046] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 124.862813][ T5787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.878839][ T5787] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 124.880546][ T6048] erofs: (device loop0): mounted with root inode @ nid 36. [ 124.889444][ T5787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.905776][ T6046] System zones: 0-1, 3-8 [ 124.911135][ T6046] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,barrier,debug,quota,,errors=continue. Quota mode: writeback. [ 124.928357][ T5787] usb 2-1: config 0 descriptor?? [ 124.934186][ T6046] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.945256][ T5169] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 124.962567][ T5169] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.985052][ T6048] attempt to access beyond end of device [ 124.985052][ T6048] loop0: rw=524288, want=48, limit=16 [ 125.066262][ T6048] attempt to access beyond end of device [ 125.066262][ T6048] loop0: rw=524288, want=40, limit=16 [ 125.132832][ T5169] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 125.141920][ T5169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.150443][ T5169] usb 3-1: Product: syz [ 125.154908][ T5169] usb 3-1: Manufacturer: syz [ 125.159527][ T5169] usb 3-1: SerialNumber: syz [ 125.207482][ T5169] usb 3-1: config 0 descriptor?? [ 125.244681][ T6054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.725'. [ 125.255368][ T5169] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 125.263853][ T5169] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 125.288742][ T5169] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 125.310201][ T5169] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 125.335535][ T5169] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 125.344661][ T5169] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 125.352634][ T5169] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 125.369711][ T5169] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 125.381115][ T5169] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 125.401333][ T5169] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 125.417281][ T5787] pyra 0003:1E7D:2C24.000E: hidraw0: USB HID v0.01 Device [HID 1e7d:2c24] on usb-dummy_hcd.1-1/input0 [ 125.435271][ T5169] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 125.456338][ T5169] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 125.470638][ T5169] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 125.493952][ T5169] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 125.507748][ T5169] usb 3-1: USB disconnect, device number 9 [ 125.537101][ T5169] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 125.613122][ T5169] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 125.657413][ T5169] keyspan 3-1:0.0: device disconnected [ 125.677791][ T5176] usb 2-1: USB disconnect, device number 9 [ 125.683173][ T4680] udevd[4680]: setting mode of /dev/bus/usb/003/009 to 020664 failed: No such file or directory [ 125.722796][ T4680] udevd[4680]: setting owner of /dev/bus/usb/003/009 to uid=0, gid=0 failed: No such file or directory [ 125.990185][ T6078] set_capacity_and_notify: 2 callbacks suppressed [ 125.990202][ T6078] loop3: detected capacity change from 0 to 2048 [ 126.054207][ T6078] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=3932051, location=3932051 [ 126.084398][ T6078] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.169793][ T6082] loop2: detected capacity change from 0 to 8192 [ 126.193560][ T6082] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 126.216526][ T6082] REISERFS (device loop2): using ordered data mode [ 126.246492][ T6082] reiserfs: using flush barriers [ 126.262944][ T6082] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 126.285862][ T6082] REISERFS (device loop2): checking transaction log (loop2) [ 126.335242][ T6082] REISERFS (device loop2): Using r5 hash to sort names [ 126.343528][ T6082] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 126.357718][ T6082] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 126.390703][ T6089] loop3: detected capacity change from 0 to 1024 [ 126.410623][ T6082] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 126.430008][ T6091] loop1: detected capacity change from 0 to 1024 [ 126.452770][ T6089] EXT4-fs (loop3): Ignoring removed bh option [ 126.509099][ T6091] hfsplus: bad catalog entry type [ 126.529748][ T6089] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,nobarrier,max_dir_size_kb=0x00000000000000eb,abort,user_xattr,bh,errors=remount-ro,. Quota mode: none. [ 126.730097][ T6096] loop1: detected capacity change from 0 to 64 [ 127.228764][ T6114] loop1: detected capacity change from 0 to 4096 [ 127.283926][ T6118] loop4: detected capacity change from 0 to 4096 [ 127.361264][ T6118] ntfs: volume version 3.1. [ 127.408289][ T5169] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 127.687022][ T5169] usb 4-1: Using ep0 maxpacket: 32 [ 127.694095][ T6126] loop4: detected capacity change from 0 to 2048 [ 127.804265][ T6126] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.815386][ T5169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.852698][ T5169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.932690][ T5169] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 127.942154][ T5169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.016889][ T6126] EXT4-fs (loop4): can't change dax mount option while remounting [ 128.040029][ T5169] usb 4-1: config 0 descriptor?? [ 128.242698][ T6124] loop1: detected capacity change from 0 to 32768 [ 128.292317][ T6124] (syz.1.755,6124,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 128.309852][ T6124] (syz.1.755,6124,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 128.352755][ T6124] JBD2: Ignoring recovery information on journal [ 128.383338][ T6142] loop2: detected capacity change from 0 to 4096 [ 128.409382][ T6124] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 128.511180][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 128.554064][ T5169] greenasia 0003:0E8F:0012.000F: item fetching failed at offset 0/3 [ 128.579331][ T5169] greenasia 0003:0E8F:0012.000F: parse failed [ 128.594075][ T4187] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 128.600777][ T4187] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 128.608240][ T5787] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 128.621583][ T5169] greenasia: probe of 0003:0E8F:0012.000F failed with error -22 [ 128.771135][ T5169] usb 4-1: USB disconnect, device number 6 [ 128.824368][ T6148] ntfs: volume version 3.1. [ 128.892650][ T5787] usb 5-1: Using ep0 maxpacket: 8 [ 129.137140][ T6152] __ntfs_error: 15 callbacks suppressed [ 129.137156][ T6152] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 129.155346][ T6152] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 129.164523][ T6152] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 129.179782][ T6152] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 129.211309][ T6152] ntfs: volume version 3.1. [ 129.226706][ T6152] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 129.238408][ T5787] usb 5-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 129.247796][ T6152] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 129.259523][ T5787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 129.274155][ T5787] usb 5-1: Product: syz [ 129.278459][ T6152] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 129.308213][ T5787] usb 5-1: Manufacturer: syz [ 129.323092][ T5787] usb 5-1: SerialNumber: syz [ 129.352263][ T5787] usb 5-1: config 0 descriptor?? [ 129.409388][ T5787] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 129.585045][ T6156] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,usrquota,grpquota,errors=remount-ro,quota,debug_want_extra_isize=0x0000000000000008,resgid=0x0000000000000000,barrier,. Quota mode: writeback. [ 129.605711][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.613225][ T5787] gspca_sn9c2028: read1 error -71 [ 129.622175][ T26] audit: type=1326 audit(1769469862.532:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.0.772" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60671caeb9 code=0x0 [ 129.653019][ T5787] gspca_sn9c2028: read1 error -71 [ 129.673288][ T5787] gspca_sn9c2028: read1 error -71 [ 129.679844][ T5787] sn9c2028: probe of 5-1:0.0 failed with error -71 [ 129.730666][ T5787] usb 5-1: USB disconnect, device number 8 [ 129.815353][ T6156] EXT4-fs error (device loop3): ext4_get_first_dir_block:3617: inode #12: block 80: comm syz.3.768: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 129.913810][ T6156] EXT4-fs (loop3): Remounting filesystem read-only [ 129.928388][ T6156] EXT4-fs error (device loop3): ext4_get_first_dir_block:3619: inode #12: comm syz.3.768: directory missing '..' [ 129.954941][ T6156] EXT4-fs (loop3): Remounting filesystem read-only [ 130.350486][ T6180] FAT-fs (loop3): Directory bread(block 64) failed [ 130.369099][ T6180] FAT-fs (loop3): Directory bread(block 65) failed [ 130.399484][ T6180] FAT-fs (loop3): Directory bread(block 66) failed [ 130.432412][ T6180] FAT-fs (loop3): Directory bread(block 67) failed [ 130.440789][ T6180] FAT-fs (loop3): Directory bread(block 68) failed [ 130.452828][ T6180] FAT-fs (loop3): Directory bread(block 69) failed [ 130.467559][ T6180] FAT-fs (loop3): Directory bread(block 70) failed [ 130.504149][ T6180] FAT-fs (loop3): Directory bread(block 71) failed [ 130.512796][ T6173] (syz.2.776,6173,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 130.572640][ T6180] FAT-fs (loop3): Directory bread(block 72) failed [ 130.583817][ T6180] FAT-fs (loop3): Directory bread(block 73) failed [ 130.585883][ T6173] (syz.2.776,6173,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 130.643330][ T6173] JBD2: Ignoring recovery information on journal [ 130.824594][ T6173] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 130.997091][ T4187] ocfs2: Unmounting device (7,2) on (node local) [ 131.045693][ T6178] JBD2: Ignoring recovery information on journal [ 131.104527][ T6178] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 131.187684][ T4200] ocfs2: Unmounting device (7,4) on (node local) [ 131.297043][ T6203] blk_update_request: I/O error, dev loop2, sector 36028796951855104 op 0x3:(DISCARD) flags 0x0 phys_seg 1 prio class 0 [ 131.383401][ T6203] blk_update_request: I/O error, dev loop2, sector 36028796960243704 op 0x3:(DISCARD) flags 0x0 phys_seg 1 prio class 0 [ 131.419549][ T6203] blk_update_request: I/O error, dev loop2, sector 36028796968632304 op 0x3:(DISCARD) flags 0x0 phys_seg 1 prio class 0 [ 131.475173][ T6206] set_capacity_and_notify: 8 callbacks suppressed [ 131.475189][ T6206] loop4: detected capacity change from 0 to 4096 [ 131.495995][ T6203] blk_update_request: I/O error, dev loop2, sector 36028796977020904 op 0x3:(DISCARD) flags 0x0 phys_seg 1 prio class 0 [ 131.549385][ T6203] blk_update_request: I/O error, dev loop2, sector 36028796985409504 op 0x3:(DISCARD) flags 0x0 phys_seg 1 prio class 0 [ 131.594014][ T6203] blk_update_request: I/O error, dev loop2, sector 36028796993798104 op 0x3:(DISCARD) flags 0x0 phys_seg 1 prio class 0 [ 131.607189][ T6203] blk_update_request: I/O error, dev loop2, sector 36028797002186704 op 0x3:(DISCARD) flags 0x0 phys_seg 1 prio class 0 [ 131.650997][ T6203] blk_update_request: I/O error, dev loop2, sector 36028797010575304 op 0x3:(DISCARD) flags 0x0 phys_seg 1 prio class 0 [ 131.720643][ T150] blk_update_request: I/O error, dev loop2, sector 36028797018963904 op 0x3:(DISCARD) flags 0x800 phys_seg 1 prio class 0 [ 131.807811][ T6216] loop0: detected capacity change from 0 to 512 [ 131.824883][ T4200] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 131.854153][ T4200] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 131.984306][ T6216] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 132.005892][ T6224] loop1: detected capacity change from 0 to 4096 [ 132.033095][ T6228] loop4: detected capacity change from 0 to 1024 [ 132.041640][ T6216] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.155518][ T6231] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.157223][ T6224] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 132.340684][ T6224] NILFS (loop1): mounting fs with errors [ 132.350147][ T1572] hfsplus: b-tree write err: -5, ino 8 [ 132.586690][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.593174][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.656686][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.807'. [ 132.879109][ T6219] loop3: detected capacity change from 0 to 32768 [ 132.940623][ T6219] (syz.3.796,6219,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 133.019621][ T6261] loop4: detected capacity change from 0 to 512 [ 133.027641][ T6219] (syz.3.796,6219,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 133.090484][ T6219] JBD2: Ignoring recovery information on journal [ 133.186746][ T6261] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 133.284557][ T6261] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.307197][ T6219] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 133.408083][ T6273] ALSA: mixer_oss: invalid OSS volume '' [ 133.636110][ T4185] ocfs2: Unmounting device (7,3) on (node local) [ 134.037728][ T6302] loop1: detected capacity change from 0 to 512 [ 134.233982][ T6302] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 134.252741][ T6302] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.280721][ T6321] program syz.4.836 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.363054][ T6324] loop3: detected capacity change from 0 to 256 [ 134.491935][ T6324] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 134.542736][ T6324] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 134.567292][ T6324] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 134.658256][ T6326] loop1: detected capacity change from 0 to 1024 [ 134.761176][ T6326] hfsplus: bad catalog entry type [ 134.854481][ T4298] hfsplus: b-tree write err: -5, ino 4 [ 135.297436][ T6328] loop3: detected capacity change from 0 to 32768 [ 135.358869][ T6328] XFS (loop3): Mounting V5 Filesystem [ 135.453400][ T6328] XFS (loop3): Ending clean mount [ 135.503891][ T6331] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 135.601748][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 135.696156][ T4185] XFS (loop3): Unmounting Filesystem [ 136.708264][ T6397] set_capacity_and_notify: 1 callbacks suppressed [ 136.708281][ T6397] loop1: detected capacity change from 0 to 4096 [ 136.844028][ T6397] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,usrquota,grpquota,errors=remount-ro,quota,debug_want_extra_isize=0x0000000000000008,resgid=0x0000000000000000,barrier,. Quota mode: writeback. [ 137.000643][ T6397] EXT4-fs error (device loop1): ext4_get_first_dir_block:3617: inode #12: block 80: comm syz.1.878: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 137.038648][ T6397] EXT4-fs (loop1): Remounting filesystem read-only [ 137.055955][ T6397] EXT4-fs error (device loop1): ext4_get_first_dir_block:3619: inode #12: comm syz.1.878: directory missing '..' [ 137.119748][ T6397] EXT4-fs (loop1): Remounting filesystem read-only [ 137.180348][ T6419] team0: Cannot enslave team device to itself [ 137.396349][ T6432] loop4: detected capacity change from 0 to 8 [ 137.400174][ T6433] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 137.422391][ T6434] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 1 [ 137.433426][ T6435] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 2 [ 137.453903][ T6437] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 3 [ 137.737600][ T6451] loop0: detected capacity change from 0 to 160 [ 137.832577][ T5166] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 137.951704][ T6460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.894'. [ 138.060198][ T6458] loop4: detected capacity change from 0 to 4096 [ 138.082627][ T5166] usb 3-1: Using ep0 maxpacket: 8 [ 138.178703][ T6458] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,usrquota,grpquota,errors=remount-ro,quota,debug_want_extra_isize=0x0000000000000008,resgid=0x0000000000000000,barrier,. Quota mode: writeback. [ 138.224210][ T5166] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.237419][ T5166] usb 3-1: config 0 interface 0 has no altsetting 0 [ 138.250068][ T5166] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 138.259612][ T5166] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.279467][ T5166] usb 3-1: config 0 descriptor?? [ 138.289071][ T6458] [ 138.291433][ T6458] ====================================================== [ 138.298638][ T6458] WARNING: possible circular locking dependency detected [ 138.305688][ T6458] syzkaller #0 Not tainted [ 138.310129][ T6458] ------------------------------------------------------ [ 138.317166][ T6458] syz.4.892/6458 is trying to acquire lock: [ 138.323077][ T6458] ffff88806042ace8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 138.332018][ T6458] [ 138.332018][ T6458] but task is already holding lock: [ 138.339397][ T6458] ffff888060468278 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8bf/0x1b30 [ 138.348926][ T6458] [ 138.348926][ T6458] which lock already depends on the new lock. [ 138.348926][ T6458] [ 138.359346][ T6458] [ 138.359346][ T6458] the existing dependency chain (in reverse order) is: [ 138.368380][ T6458] [ 138.368380][ T6458] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 138.376234][ T6458] down_write+0x38/0x60 [ 138.380943][ T6458] ext4_map_blocks+0x8bf/0x1b30 [ 138.386346][ T6458] ext4_getblk+0x176/0x670 [ 138.391307][ T6458] ext4_bread+0x26/0x180 [ 138.396098][ T6458] ext4_quota_write+0x236/0x580 [ 138.401506][ T6458] do_insert_tree+0x115c/0x1970 [ 138.406907][ T6458] do_insert_tree+0x5b1/0x1970 [ 138.412224][ T6458] do_insert_tree+0x5b1/0x1970 [ 138.417542][ T6458] do_insert_tree+0x5b1/0x1970 [ 138.422856][ T6458] qtree_write_dquot+0x361/0x4b0 [ 138.428355][ T6458] v2_write_dquot+0x108/0x190 [ 138.433577][ T6458] dquot_acquire+0x2d5/0x520 [ 138.438713][ T6458] ext4_acquire_dquot+0x2d9/0x4a0 [ 138.444291][ T6458] dqget+0x778/0xeb0 [ 138.448732][ T6458] __dquot_initialize+0x333/0xcd0 [ 138.454308][ T6458] ext4_set_acl+0x14a/0x5a0 [ 138.459361][ T6458] posix_acl_xattr_set+0x36f/0x3e0 [ 138.465024][ T6458] __vfs_setxattr+0x3e0/0x420 [ 138.470256][ T6458] __vfs_setxattr_noperm+0x129/0x5e0 [ 138.476100][ T6458] vfs_setxattr+0x167/0x2e0 [ 138.481148][ T6458] setxattr+0x36c/0x390 [ 138.485844][ T6458] path_setxattr+0x147/0x290 [ 138.490979][ T6458] __x64_sys_setxattr+0xb7/0xd0 [ 138.496373][ T6458] do_syscall_64+0x4c/0xa0 [ 138.501422][ T6458] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.507864][ T6458] [ 138.507864][ T6458] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 138.515977][ T6458] down_read+0x44/0x2e0 [ 138.520684][ T6458] v2_read_dquot+0x4a/0x110 [ 138.525738][ T6458] dquot_acquire+0x152/0x520 [ 138.530883][ T6458] ext4_acquire_dquot+0x2d9/0x4a0 [ 138.536453][ T6458] dqget+0x778/0xeb0 [ 138.540898][ T6458] __dquot_initialize+0x3c3/0xcd0 [ 138.546478][ T6458] ext4_rmdir+0x115/0x9e0 [ 138.551354][ T6458] vfs_rmdir+0x1b2/0x430 [ 138.556170][ T6458] do_rmdir+0x2a1/0x740 [ 138.560873][ T6458] __x64_sys_rmdir+0x45/0x50 [ 138.566008][ T6458] do_syscall_64+0x4c/0xa0 [ 138.570973][ T6458] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.577413][ T6458] [ 138.577413][ T6458] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 138.585092][ T6458] __lock_acquire+0x2c42/0x7d10 [ 138.590499][ T6458] lock_acquire+0x19e/0x400 [ 138.595558][ T6458] __mutex_lock_common+0x1e3/0x2400 [ 138.601306][ T6458] mutex_lock_nested+0x17/0x20 [ 138.606619][ T6458] dquot_commit+0x5a/0x410 [ 138.611585][ T6458] ext4_write_dquot+0x1f0/0x360 [ 138.616987][ T6458] mark_all_dquot_dirty+0xf9/0x400 [ 138.622650][ T6458] __dquot_alloc_space+0x5d0/0xe20 [ 138.628311][ T6458] ext4_mb_new_blocks+0xf81/0x4980 [ 138.633971][ T6458] ext4_ext_map_blocks+0x191c/0x6580 [ 138.639809][ T6458] ext4_map_blocks+0x98e/0x1b30 [ 138.645212][ T6458] ext4_getblk+0x176/0x670 [ 138.650171][ T6458] ext4_bread+0x26/0x180 [ 138.654967][ T6458] ext4_append+0x2be/0x560 [ 138.659925][ T6458] ext4_init_new_dir+0x2a2/0x940 [ 138.665408][ T6458] ext4_mkdir+0x4fb/0xce0 [ 138.670286][ T6458] vfs_mkdir+0x387/0x570 [ 138.675070][ T6458] do_mkdirat+0x1df/0x5b0 [ 138.679942][ T6458] __x64_sys_mkdirat+0x85/0x90 [ 138.685245][ T6458] do_syscall_64+0x4c/0xa0 [ 138.690202][ T6458] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.696643][ T6458] [ 138.696643][ T6458] other info that might help us debug this: [ 138.696643][ T6458] [ 138.706889][ T6458] Chain exists of: [ 138.706889][ T6458] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 138.706889][ T6458] [ 138.720571][ T6458] Possible unsafe locking scenario: [ 138.720571][ T6458] [ 138.728044][ T6458] CPU0 CPU1 [ 138.733424][ T6458] ---- ---- [ 138.738806][ T6458] lock(&ei->i_data_sem/2); [ 138.743430][ T6458] lock(&s->s_dquot.dqio_sem); [ 138.750820][ T6458] lock(&ei->i_data_sem/2); [ 138.757997][ T6458] lock(&dquot->dq_lock); [ 138.762437][ T6458] [ 138.762437][ T6458] *** DEADLOCK *** [ 138.762437][ T6458] [ 138.770590][ T6458] 4 locks held by syz.4.892/6458: [ 138.775630][ T6458] #0: ffff888077cd0460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 138.784817][ T6458] #1: ffff8880604d5da8 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: filename_create+0x208/0x470 [ 138.795482][ T6458] #2: ffff888060468278 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8bf/0x1b30 [ 138.805449][ T6458] #3: ffffffff8c441478 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 138.814546][ T6458] [ 138.814546][ T6458] stack backtrace: [ 138.820469][ T6458] CPU: 1 PID: 6458 Comm: syz.4.892 Not tainted syzkaller #0 [ 138.827777][ T6458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.837864][ T6458] Call Trace: [ 138.841171][ T6458] [ 138.844121][ T6458] dump_stack_lvl+0x188/0x250 [ 138.848834][ T6458] ? load_image+0x400/0x400 [ 138.853369][ T6458] ? show_regs_print_info+0x20/0x20 [ 138.858610][ T6458] ? print_circular_bug+0x12b/0x1a0 [ 138.863848][ T6458] check_noncircular+0x296/0x330 [ 138.868823][ T6458] ? add_chain_block+0x940/0x940 [ 138.873785][ T6458] ? lockdep_lock+0xf1/0x1f0 [ 138.878414][ T6458] ? __lock_acquire+0x13bc/0x7d10 [ 138.883465][ T6458] ? mark_lock+0x94/0x320 [ 138.887820][ T6458] __lock_acquire+0x2c42/0x7d10 [ 138.892714][ T6458] ? add_chain_block+0x940/0x940 [ 138.897676][ T6458] ? lockdep_lock+0xf1/0x1f0 [ 138.902294][ T6458] ? verify_lock_unused+0x140/0x140 [ 138.907522][ T6458] ? lockdep_unlock+0x143/0x2e0 [ 138.912405][ T6458] ? mark_lock+0x94/0x320 [ 138.916767][ T6458] ? __lock_acquire+0x13bc/0x7d10 [ 138.921833][ T6458] lock_acquire+0x19e/0x400 [ 138.926368][ T6458] ? dquot_commit+0x5a/0x410 [ 138.930993][ T6458] ? __might_sleep+0xf0/0xf0 [ 138.935605][ T6458] ? read_lock_is_recursive+0x10/0x10 [ 138.941019][ T6458] ? dquot_commit+0x5a/0x410 [ 138.945639][ T6458] __mutex_lock_common+0x1e3/0x2400 [ 138.950871][ T6458] ? dquot_commit+0x5a/0x410 [ 138.955492][ T6458] ? __might_sleep+0xf0/0xf0 [ 138.960107][ T6458] ? mutex_lock_io_nested+0x60/0x60 [ 138.965517][ T6458] mutex_lock_nested+0x17/0x20 [ 138.970315][ T6458] dquot_commit+0x5a/0x410 [ 138.974765][ T6458] ? __ext4_journal_start_sb+0x1bd/0x360 [ 138.980426][ T6458] ext4_write_dquot+0x1f0/0x360 [ 138.985310][ T6458] mark_all_dquot_dirty+0xf9/0x400 [ 138.990459][ T6458] __dquot_alloc_space+0x5d0/0xe20 [ 138.995620][ T6458] ext4_mb_new_blocks+0xf81/0x4980 [ 139.000783][ T6458] ? memset+0x1e/0x40 [ 139.004801][ T6458] ? ext4_mb_pa_callback+0xd0/0xd0 [ 139.009941][ T6458] ? ext4_ext_check_overlap+0x15f/0x560 [ 139.015515][ T6458] ? ext4_inode_to_goal_block+0x313/0x450 [ 139.021270][ T6458] ext4_ext_map_blocks+0x191c/0x6580 [ 139.026584][ T6458] ? kasan_quarantine_put+0xd4/0x220 [ 139.031918][ T6458] ? ext4_ext_release+0x10/0x10 [ 139.036813][ T6458] ? rwsem_write_trylock+0x135/0x1c0 [ 139.042138][ T6458] ? ext4_es_lookup_extent+0x60a/0xa00 [ 139.047631][ T6458] ext4_map_blocks+0x98e/0x1b30 [ 139.052507][ T6458] ? ext4_map_blocks+0x56a/0x1b30 [ 139.057561][ T6458] ? ext4_issue_zeroout+0x250/0x250 [ 139.062794][ T6458] ext4_getblk+0x176/0x670 [ 139.067235][ T6458] ? ext4_get_block_unwritten+0x30/0x30 [ 139.072814][ T6458] ? __brelse+0x55/0x90 [ 139.076995][ T6458] ext4_bread+0x26/0x180 [ 139.081253][ T6458] ext4_append+0x2be/0x560 [ 139.085695][ T6458] ? ext4_init_new_dir+0x940/0x940 [ 139.090831][ T6458] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 139.096582][ T6458] ext4_init_new_dir+0x2a2/0x940 [ 139.101559][ T6458] ext4_mkdir+0x4fb/0xce0 [ 139.105924][ T6458] ? ext4_symlink+0xca0/0xca0 [ 139.110640][ T6458] ? inode_permission+0xef/0x480 [ 139.115600][ T6458] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 139.120652][ T6458] ? security_inode_mkdir+0xb3/0x100 [ 139.125969][ T6458] vfs_mkdir+0x387/0x570 [ 139.130244][ T6458] do_mkdirat+0x1df/0x5b0 [ 139.134611][ T6458] ? vfs_mkdir+0x570/0x570 [ 139.139058][ T6458] ? getname_flags+0x1fe/0x500 [ 139.143852][ T6458] __x64_sys_mkdirat+0x85/0x90 [ 139.148650][ T6458] do_syscall_64+0x4c/0xa0 [ 139.153090][ T6458] ? clear_bhb_loop+0x30/0x80 [ 139.157787][ T6458] ? clear_bhb_loop+0x30/0x80 [ 139.162483][ T6458] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.168417][ T6458] RIP: 0033:0x7f1d3c2ebd97 [ 139.172851][ T6458] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.192582][ T6458] RSP: 002b:00007f1d3a547e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 139.201027][ T6458] RAX: ffffffffffffffda RBX: 00007f1d3a547ee0 RCX: 00007f1d3c2ebd97 [ 139.209018][ T6458] RDX: 00000000000001ff RSI: 0000200000000280 RDI: 00000000ffffff9c [ 139.217099][ T6458] RBP: 00002000000002c0 R08: 00002000000007c0 R09: 0000000000000000 [ 139.225095][ T6458] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000200000000280 [ 139.233087][ T6458] R13: 00007f1d3a547ea0 R14: 0000000000000000 R15: 0000000000000000 [ 139.241085][ T6458] [ 139.300209][ T6458] EXT4-fs error (device loop4): ext4_get_first_dir_block:3617: inode #12: block 80: comm syz.4.892: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 139.365113][ T6458] EXT4-fs (loop4): Remounting filesystem read-only [ 139.371666][ T6458] EXT4-fs error (device loop4): ext4_get_first_dir_block:3619: inode #12: comm syz.4.892: directory missing '..' [ 139.404748][ T6458] EXT4-fs (loop4): Remounting filesystem read-only [ 139.500738][ T6470] loop1: detected capacity change from 0 to 32768 [ 139.764457][ T5166] uclogic 0003:5543:0042.0010: unbalanced collection at end of report description [ 139.774082][ T5166] uclogic 0003:5543:0042.0010: parse failed [ 139.779986][ T5166] uclogic: probe of 0003:5543:0042.0010 failed with error -22 [ 139.971379][ T4293] usb 3-1: USB disconnect, device number 10