last executing test programs: 2.931277641s ago: executing program 4 (id=1947): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x860001) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="0a7b7deddd00", 0x0, 0x0, 0x0, 0x0, 0x0}) 2.858614968s ago: executing program 4 (id=1948): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000140)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5608, 0x1) 2.858000628s ago: executing program 4 (id=1959): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB='\t\x00'], 0x10) 2.809505343s ago: executing program 0 (id=1949): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000200), 0x4) 2.809392683s ago: executing program 4 (id=1951): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYRESOCT, @ANYBLOB="013ced044bdd1d80c6c30a8a0e15d76458f224ae55e562e8a59bca5c1f9d57c0bf983de420f461a7414616093c243234af9243259143a1df24ac0219d7c378a66c310c8b4a0a5be52831340548247ed220c3c9fbc83337fa0b63b0a54e73ff5f9b6625b0faa1fb755e1af638d96ec92d0802aa01c49d12703c6452c7b0edad1ecfdc926cf6ee88d55c25512d52b43a773f9c"], 0xfe, 0x61ac, &(0x7f0000001340)="$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") symlink(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.197795359s ago: executing program 0 (id=1958): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4421, &(0x7f0000004500)="$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") symlink(&(0x7f0000001000)='.\x00', &(0x7f0000000140)='./file0\x00') lchown(&(0x7f0000000000)='./file0\x00', 0xee00, 0x0) 2.132403675s ago: executing program 1 (id=1960): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8800, &(0x7f0000001580)={[{@uid_forget}, {@noadinicb}, {@uid_ignore}, {@gid_ignore}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@nostrict}, {@mode={'mode', 0x3d, 0x992}}]}, 0x1, 0xc39, &(0x7f0000000240)="$eJzs3U9sHNd9B/DfGy5F0m4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmFoSJNXIbtowvfTQQ4Ci6CEnAq1RIEUDoymKHtnWBZKLD4VPPREtbARFD2wRIKeAxcy+FVf/LNkkJcr6fGzqOzv73sx7M+MZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+8cvb48+lBtwIAuJ/OT3/1+AnPfwB4pFzw//8AAAAAAAAAAAAAAHDQpSjiiUixdH4rzVafu4bPtTtXr81MTN6+2kiqag5U5cuf4edPnDz1pRfGT/fyw+vvtafitekLZ+svL15ZWm6trLTm6zOd9tzifOuet7Db+jcbqw5A/crrV+cvXVqpn3ju5A1fXxv9YOjxI6Nnxp859nSv7MzE5OR0X5na4Mfe+y3uNMLjUBRxLFI8+/0fp2ZEFLH7Y3GXa2e/jVSdGKs6MTMxWXVkod3srJZfTvUORBFR76vU6B2j+3AudqURsVY2v2zwWNm96aXmcvPiQqs+1Vxeba+2FztTqdvasj/1KOJ0iliPiM2hWzc3GEXUIsV3D2+lixEx0DsOX6wGBt+5HcU+9vEelO2sD0asFw/BOTvAhqKIVyPFT94pYq48ZvknvhDxapn/GPFWmS9FpPLCOBXxfnUdjTzglrMXalHEn5Xn/8xWmq/uB737yrmv1b/SubTYV7Z3X3nonw/30wG/Nw1HEc3qjr+VPv5vdgAAAAAAAAAAAAAAAADYayNRxFOR4pV//4NqXHFU49IPnxn/3dGf7x8z/uRdtlOWfS4i1op7G5N7KA8hnkpTKT3gscSPsuEo4o/y+L9vP+jGAAAAAAAAAAAAAAAAAAAAPNKKeC9SvPju0bQe/XOKtzuX6xeaFxe60+X25v7tzZm+vb29XU/dbOSczbmWcz3nRs7NnFHk+jkbOWdzruVcz7mRczNnDOT6ORs5Z3Ou5VzPuZFzM2fUcv2cjZyzOddyrufcyLmZMw7I3L0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ8kRRTxs0jxnW9spUgR0YiYjW5uDPXKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP0lAq4geRov57jevrahGRqn+7jpa/nIrGoTI/HY3xMl+KxtmczSprjW8/gPazO4OpiB9FiqHht6+f8Hz+B7ufrl8G8dY3dz79Uq2bA70vRz8YevzI4TPjk7/y5J2W0+0aMHau3bl6rT4zMTk53be6lvf+6b51o3m/xd50nYhYeePN15sLC61lC4/GQq27UIs93fJIxN5ucO8Wat2FfL+KB96eOyw0DkYzdhaiuvff9p7NJ0b5/H8/Uvzmu//Re+D3nv8/1/10/QkfP/3jnef/izdvaJ+e/0/0rXsx/25ksBYxvHplafBIxPDKG28ea19pXm5dbnVOHT/+5fHxL588PngoYvhSe6HVt7TrQwUAAAAAAAAAAAAAAABwf6UifjtSNH+0leoRca0arzV6ZvyZY08PxEA13uqGcVuvTV84W3958crScmtlpTVfn+m05xbnW/e6u+FquNfMxOS+dOauRva5/SPDLy8uvbHcvvz7q7f9/rHhsxdXVpebc7f/OkaiiGj0rxmrGjwzMVk1eqHd7FRVp/ZoYOZgKuI/I8XcqXr6fF6Xx/+V8d5gX9n+8f9rfeur5X0a//epm/aTUhE/jRS/8edPxuerdj4WtxyzXO6vI8XY6c/lcnGoLNdrQ/e9At2RgWXZ/40Uf/+zG8v2+v7ETtnnP9rRPfjK8384UvzgT78Xv5rX3fj+h53xn/3n/7GbN7RP5/8zfeseu+F9BbvuOvn8H4sULz3xdvxaXvdh7/8oYnt7+1sRR3Ph6+/n2Kfz/9m+daPR3e+v7133AQAAAAAAAAAAHlqDqYi/iRRPT9bSC3ndvfz9v/mbN7RPf//rF/vWzd+n+Yp2fVABAAAA4IAYTEW8Fykur759fQx13/jvG8d//tbO3OsT6aZvqz/n+4XqvQF7+ed//Ubzfmd3320AAAAAAAAAAAAAAAAAAAA4UFIq4oU8n/rsXeZT34gUr/z3s7lcOlKW680DP1r9Onx+sXPs7MLC4lxztXlxoVWfXmrOtcq6n4kUW3/1uVy3qOZX7803353jfXi7Nxf7cqSY/Nte2e5c7L25ybvzgXfnYi/LfipS/Nff3Vi2N4/1Z3fKnijL/mWk+Po/3b7skZ2yJ8uy34sUP/x6vVf2sbJs7/2o3XeSDtdiofXc3OLCLa9CrRS7PjUAAAAAAAAAAAAAAAAAAAA8QgZTEX8SKf7nynqs5WH/ef7/3gz8tV7Zt77ZN9//Ta5V8/yPVvP/32n548z/P7pnPQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIdHiiLejBRL57fSxlD5uWv4XLtz9drMxOTtq42kquZAVb78GX7+xMlTX3ph/HQvP7z+XnsqXpu+cLb+8uKVpeXWykprvj7Tac8tzrfueQu7rb9z6LrGqgNQv/L61flLl1bqJ547ecPX10Y/GHr8yOiZ8WeOPd0rOzMxOTndV6Y2+BH2/pEat+NQFPEXkeLZ7/84/fNQRBG7PxZ3uXb220jVibGqEzMTk1VHFtrNzmr55VTvQBQR9b5Kjd4xug/nYlcaEWtl88sGj5Xdm15qLjcvLrTqU83l1fZqe7EzlbqtLftTjyJOp4j1iNgcunVzg1HE65Hiu4e30r8MRQz0jsMXz09/9fiJO7ej2Mc+3oOynfXBiPXiIThnB9hQFPEPkeIn7xyNfx2KqEX3J74Q8Wp/wZciUnlhnIp4/zbXEQ+nWhTxf+X5P7OV3hkq7we9+8q5r9W/0rm02Fe2d185SM+H7Y9+LY7swW7v3QG/Nw1HET+s7vhb6d/8dw0AAAAAAAAAAAAAAABwgBTxy5HixXePpmp88PUxxe3O5fqF5sWF7rC+3ti/esQflrm9vb1dT91s5JzNuZZzPedGzs2cUeT6ORs5Z3Ou5VzPuZFzM2cM5Po5Gzlnc67lXM+5kXMzZ9Sq2N7e/la3fi3Xz7mWc70WUZT18+fNnHFAxu4BAAAAAAAAAAAAAAAAAACfLEX1T4rvfGMrVXOpNiJmo5sb5gP9xPv/AAAA//+ZYP5q") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) 1.892443597s ago: executing program 4 (id=1961): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000340)=0x8) 1.870499159s ago: executing program 1 (id=1962): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000400)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfc, 0x11, 0x0, @broadcast, @multicast1=0xe000c800}, {0x4, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x7, 0x0, @void}}}}}}}, 0x0) 1.798659595s ago: executing program 1 (id=1963): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x0, 0x746, 0x0, 0x4}, 0xc) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000002140)) 1.740904281s ago: executing program 1 (id=1964): unshare(0x28000600) r0 = mq_open(&(0x7f0000000440)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxselin\x05x\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc088cf2, 0x0, 0x0) pread64(r0, &(0x7f00000003c0)=""/32, 0x20, 0x0) 1.624808571s ago: executing program 1 (id=1965): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000005800)={[{@noinline_xattr}, {@four_active_logs}, {@discard}, {@fault_injection={'fault_injection', 0x3d, 0xa0c8}}, {@fault_type={'fault_type', 0x3d, 0x6}}, {@user_xattr}, {@inline_data}, {@fastboot}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x5548, &(0x7f00000058c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 1.31711274s ago: executing program 0 (id=1967): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000240)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@user_xattr}, {@grpjquota_path}, {@resuid}, {@prjquota}, {@usrjquota}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x409e}}, {@test_dummy_encryption}]}, 0xff, 0x468, &(0x7f0000000780)="$eJzs289vFFUcAPDvzG4BQdmKiIIgVTRp/NHSgsrBxGg08aCJiR7wWNtCkIUaWhMhjVZj8GhIvBuPJv4FnjwZ9WTiFY8mhoQoMQG9uGZ2Z0q77JbWbtlN9/NJBt6befve+3bmzb6dtxtA3xrK/kki7o6IyxFRaWSXFxhq/Hfj2vzk39fmJ5Oo1d78I6mXu35tfrKWK163I69zOI1IP03yRmJgabWz5y+cnqhWp8/l+dG5M++Nzp6/8PSpMxMnp09Onx0/duzokbHnnh1/pkWvf7u01jiz+K7v+3Bm/95X3770+uTxS+/8+E3W3z0HGsezONZa5+0MZYH/2fjbNB97vNONddm/tZtxJuVu94bVKkVEOR+cl6MSpbh58irxyidd7RywobJ79tb2hxdqwCaWRLd7AHRH8Uafff4ttjs09egJV19sfADK4r6Rb40j5UjzMgMb2P5QRBxf+OfLbIum5xC1Fs8NAADW67ts/vNUq/lfGnuWlNuZrw0NRsS9EbErIu6LiN0RcX9EvewDEfHgGtsfasrfOv9Mr/yvwFYpm/89n69tLZ//FbO/GCzluXvq8Q8kJ05Vpw/nf5PhGNia5cdaVV5U8fIvn7drf+n8L9uy9ou5YF7JlXLjAd22Ys/UxNxEpyalVz+O2FduFX+yuBKQRMTeiNi3tqp3FolTT3y9v12h28e/gg6sM9W+KiqZX4im+AvJyuuTo9uiOn14tLgqbvXTzxffaNf+uuLvgOz8b19+/TeVqPyVLF2vnV088MJq27j462dtP1OWV3/9L8qu/y3JW/U13S35vg8m5ubOjUVsSV6r55ftH7/52iJflM/iHz7Uevzvyl+Txf9QRGQX8YGIeDgiDubn7pGIeDQiDq0Q/w8vPfZuu2O9cP6nWt7/Fq//weXnf+2J0unvv23X/uruf0frqeF8T/3+dxvtu1PcRpuuZgAAANjE0vp345N0ZDGdpiMjje/w747taXVmdu7JEzPvn51qfId+MAbS4klXZcnz0LFkIa+xkR/PnxUXx4/kz42/KN1Vz49MzlSnuhw79LsdbcZ/5vdSt3sHbDi/14L+1Tz+0y71A7jzvP9D/zL+oX8Z/9C/Wo3/j5ry1gJgM6pVut0DoHvM/6F/Gf/Qv4x/6Evr+V3/RiXKK/x6X6JXEpH2RDd6JnGwh0ZTuQOju8s3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA75LwAA///foPki") symlink(&(0x7f0000000580)='.\x00', &(0x7f0000000480)='./bus\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0, 0x100) 1.054714594s ago: executing program 2 (id=1971): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040)=0x2, 0x4) bind$rds(r0, &(0x7f0000000080)={0x2, 0x1, @local}, 0x10) 1.011106388s ago: executing program 2 (id=1973): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xc, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000300), 0x0}, 0x20) 984.29764ms ago: executing program 2 (id=1975): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/108, &(0x7f0000000200)=0x6c) 928.281905ms ago: executing program 2 (id=1977): unshare(0x600) r0 = socket$netlink(0x10, 0x3, 0x4) pwrite64(r0, 0x0, 0x0, 0x4) 887.230359ms ago: executing program 3 (id=1978): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x19) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)) 858.496972ms ago: executing program 3 (id=1979): r0 = getpid() r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000840)={0x1, 0x1, 0x800, 0x0, r0}) 794.278248ms ago: executing program 4 (id=1980): syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402ecffffffff08058102"], 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) 788.647658ms ago: executing program 3 (id=1990): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400), 0xfffffffffffffdbc, 0x0, 0x0}) 642.160421ms ago: executing program 3 (id=1981): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x800442d3, &(0x7f0000000080)={'macsec0\x00', @dev}) 641.621621ms ago: executing program 2 (id=1992): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x6, 0x4, {0xb, @pix={0x0, 0xfffffffd}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000280)={0x0, 0x3, 0x1, {0xb}}) 594.840016ms ago: executing program 2 (id=1982): syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file1\x00', 0x2800400, &(0x7f00000002c0)=ANY=[@ANYBLOB="6c6f63616c616c6c6f633d31383434363734343037333730393535313630382c726573765f6c6576656c3d30303030303030303030303030303030303030322c6865617274626561743d6e6f6e652c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c6e6f696e74722c636f686572656e63793d66756c6c2c6e6f61636c2c636f686572656e63793d66756c6c2c646174613d6f7264657265642c00a6bbbf4f1c4504306b696ca03fb375edc4c5f0f579bf2195c3cc88165b8c279abaa84a848971253cb6e898fee96fa6"], 0x8, 0x446c, &(0x7f0000004780)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x5, 0x6800000, 0x9, 0xfffffffd, 0xc6}) 538.300061ms ago: executing program 0 (id=1983): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, {0x2, 0x0, @empty}}) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6013c07200183a000000000000000000000000001600000000ffffac1e00010000907800000000fe80"], 0x0) 521.441953ms ago: executing program 3 (id=1984): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file1\x00', 0x441c, &(0x7f0000000080)={[{@nodiscard}, {@order_strict}, {@nobarrier}, {@norecovery}, {@discard}, {}, {@errors_continue}, {@nobarrier}, {@nobarrier}]}, 0x1, 0xaab, &(0x7f0000002000)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 507.524444ms ago: executing program 1 (id=1985): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x55d, &(0x7f0000000ec0)="$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") r0 = open(&(0x7f0000000000)='./file1\x00', 0x14927e, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 382.138785ms ago: executing program 0 (id=1986): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc080661a, &(0x7f0000000000)={@desc={0x1, 0x0, @desc1}}) 64.515055ms ago: executing program 3 (id=1987): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xa3020000) 0s ago: executing program 0 (id=1988): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f00000002c0)={[{@grpquota}, {@delalloc}, {@resuid}, {@data_err_abort}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0x0, &(0x7f0000000000)={0x101000000, 0x84d, 0x0, 0x1}) kernel console output (not intermixed with test programs): loop1): using free space tree [ 157.559017][ T6944] BTRFS info (device loop1): has skinny extents [ 157.584876][ T6954] loop0: detected capacity change from 0 to 40427 [ 157.660819][ T6954] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 157.728996][ T6954] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 157.765508][ T6954] F2FS-fs (loop0): Found nat_bits in checkpoint [ 157.807043][ T6944] BTRFS info (device loop1): enabling ssd optimizations [ 157.859911][ T6954] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 157.913332][ T6954] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 158.035029][ T6991] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1120'. [ 158.068404][ T6960] loop2: detected capacity change from 0 to 40427 [ 158.226040][ T6960] F2FS-fs (loop2): Invalid segment/section count (24 != 24 * 3) [ 158.240563][ T6960] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 158.280374][ T6558] attempt to access beyond end of device [ 158.280374][ T6558] loop0: rw=2049, want=45104, limit=40427 [ 158.322374][ T6999] loop1: detected capacity change from 0 to 512 [ 158.329052][ T6960] F2FS-fs (loop2): invalid crc value [ 158.364897][ T6960] F2FS-fs (loop2): Found nat_bits in checkpoint [ 158.483762][ T6960] F2FS-fs (loop2): Start checkpoint disabled! [ 158.507097][ T6960] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 158.548045][ T6960] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 158.568335][ T7004] loop1: detected capacity change from 0 to 64 [ 158.687043][ T26] audit: type=1800 audit(1727519491.636:14): pid=6960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1116" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 158.807454][ T7011] loop4: detected capacity change from 0 to 1024 [ 158.825048][ T6960] attempt to access beyond end of device [ 158.825048][ T6960] loop2: rw=2049, want=78672, limit=40427 [ 158.877071][ T3994] attempt to access beyond end of device [ 158.877071][ T3994] loop2: rw=2049, want=45104, limit=40427 [ 158.973377][ T7015] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1121'. [ 158.989760][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1121'. [ 159.003810][ T7015] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1121'. [ 159.746738][ T3569] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 159.765307][ T7058] loop0: detected capacity change from 0 to 1024 [ 159.851729][ T7058] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,min_batch_time=0x0000000000000004,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,errors=remount-ro,dioread_lock,user_xattr,quota,. Quota mode: writeback. [ 159.910566][ T3726] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 159.944434][ T7058] EXT4-fs error (device loop0): ext4_lookup:1856: comm syz.0.1149: inode #12: comm syz.0.1149: iget: illegal inode # [ 159.961840][ T7067] loop3: detected capacity change from 0 to 512 [ 160.008844][ T7058] EXT4-fs (loop0): Remounting filesystem read-only [ 160.019924][ T7040] loop4: detected capacity change from 0 to 32768 [ 160.024748][ T7068] EXT4-fs error (device loop0): ext4_lookup:1856: comm syz.0.1149: inode #12: comm syz.0.1149: iget: illegal inode # [ 160.071997][ T7067] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,barrier=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 160.088098][ T7067] ext4 filesystem being mounted at /199/bus supports timestamps until 2038 (0x7fffffff) [ 160.107377][ T7040] XFS (loop4): Mounting V5 Filesystem [ 160.170452][ T3726] usb 2-1: Using ep0 maxpacket: 16 [ 160.203317][ T7040] XFS (loop4): Ending clean mount [ 160.269799][ T3574] XFS (loop4): Unmounting Filesystem [ 160.310910][ T3726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.323863][ T3726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.334256][ T3726] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 160.340064][ T7084] loop3: detected capacity change from 0 to 64 [ 160.347359][ T3726] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 160.368824][ T3726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.415930][ T3726] usb 2-1: config 0 descriptor?? [ 160.495356][ T7087] netlink: 'syz.0.1157': attribute type 1 has an invalid length. [ 160.900540][ T2987] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 160.942411][ T3726] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 160.956529][ T3726] microsoft 0003:045E:07DA.001C: ignoring exceeding usage max [ 161.021782][ T3726] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.001C/input/input31 [ 161.148074][ T3726] microsoft 0003:045E:07DA.001C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 161.155279][ T2987] usb 1-1: Using ep0 maxpacket: 16 [ 161.260517][ T3726] usb 2-1: USB disconnect, device number 15 [ 161.295306][ T7145] smc: net device ip6tnl0 applied user defined pnetid SYZ0 [ 161.378090][ T7141] loop2: detected capacity change from 0 to 4096 [ 161.443770][ T2987] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 161.463766][ T2987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.500847][ T2987] usb 1-1: Product: syz [ 161.510436][ T2987] usb 1-1: Manufacturer: syz [ 161.515057][ T2987] usb 1-1: SerialNumber: syz [ 161.527426][ T2987] usb 1-1: config 0 descriptor?? [ 161.556024][ T7155] hsr0: VLAN not yet supported [ 161.583012][ T2987] hub 1-1:0.0: bad descriptor, ignoring hub [ 161.599975][ T2987] hub: probe of 1-1:0.0 failed with error -5 [ 161.854259][ T3726] usb 1-1: USB disconnect, device number 8 [ 161.890049][ T7174] loop4: detected capacity change from 0 to 256 [ 162.069426][ T7180] UBIFS error (pid: 7180): cannot open "./file0", error -22 [ 162.140362][ T3724] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 162.151019][ T7186] dccp_invalid_packet: pskb_may_pull failed [ 162.339553][ T7194] loop4: detected capacity change from 0 to 512 [ 162.435104][ T7194] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 162.487695][ T7194] EXT4-fs (loop4): 1 truncate cleaned up [ 162.502919][ T7194] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 162.504459][ T7188] loop3: detected capacity change from 0 to 32768 [ 162.594436][ T3724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.627251][ T3724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.643655][ T3724] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.667483][ T3724] usb 2-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 162.668181][ T7188] ERROR: (device loop3): dbAllocAG: Corrupt dmapctl page [ 162.668181][ T7188] [ 162.685322][ T3724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.718175][ T3724] usb 2-1: config 0 descriptor?? [ 162.740706][ T7188] ERROR: (device loop3): remounting filesystem as read-only [ 162.748096][ T7188] ERROR: (device loop3): dbDiscardAG: -EIO [ 162.748096][ T7188] [ 162.814824][ T7215] loop4: detected capacity change from 0 to 512 [ 162.882909][ T7215] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 162.892480][ T7215] EXT4-fs (loop4): orphan cleanup on readonly fs [ 162.899238][ T7215] Quota error (device loop4): v2_read_file_info: Free block number too big (0 >= 0). [ 162.917717][ T7215] EXT4-fs warning (device loop4): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 162.943180][ T7215] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 162.954521][ T7215] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1205: bg 0: block 40: padding at end of block bitmap is not set [ 162.977943][ T7215] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 162.989683][ T7215] EXT4-fs (loop4): 1 truncate cleaned up [ 162.995710][ T7215] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 163.141013][ T7212] loop2: detected capacity change from 0 to 32768 [ 163.194242][ T3724] holtek_mouse 0003:04D9:A070.001D: hidraw0: USB HID v0.00 Device [HID 04d9:a070] on usb-dummy_hcd.1-1/input0 [ 163.284654][ T7212] XFS (loop2): Mounting V5 Filesystem [ 163.350691][ T7212] XFS (loop2): Ending clean mount [ 163.361248][ T7212] XFS (loop2): Quotacheck needed: Please wait. [ 163.400127][ T7212] XFS (loop2): Quotacheck: Done. [ 163.402982][ T3612] usb 2-1: USB disconnect, device number 16 [ 163.481303][ T3568] XFS (loop2): Unmounting Filesystem [ 163.492710][ T3785] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 163.643663][ T7218] loop3: detected capacity change from 0 to 32768 [ 163.737447][ T7218] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1209 (7218) [ 163.801793][ T7218] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 163.840675][ T7218] BTRFS info (device loop3): using free space tree [ 163.851430][ T7218] BTRFS info (device loop3): has skinny extents [ 163.871094][ T3785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.888290][ T3785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.950674][ T3785] usb 5-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 163.960538][ T3785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.992169][ T3785] usb 5-1: config 0 descriptor?? [ 164.200507][ T7218] BTRFS info (device loop3): enabling ssd optimizations [ 164.473491][ T3785] wacom 0003:056A:0325.001E: unbalanced delimiter at end of report description [ 164.512317][ T3785] wacom 0003:056A:0325.001E: parse failed [ 164.518091][ T3785] wacom: probe of 0003:056A:0325.001E failed with error -22 [ 164.583518][ T7238] loop0: detected capacity change from 0 to 32768 [ 164.684288][ T7238] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1216 (7238) [ 164.854429][ T7259] loop1: detected capacity change from 0 to 32768 [ 164.874039][ T4110] usb 5-1: USB disconnect, device number 15 [ 164.918352][ T7259] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 164.938083][ T7238] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 164.958658][ T7259] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 164.966154][ T7238] BTRFS info (device loop0): setting nodatasum [ 164.978685][ T7275] loop2: detected capacity change from 0 to 32768 [ 164.986489][ T7238] BTRFS info (device loop0): enabling auto defrag [ 164.995362][ T7238] BTRFS info (device loop0): disabling tree log [ 165.011759][ T7259] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 165.025865][ T3726] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 165.033162][ T7238] BTRFS info (device loop0): using free space tree [ 165.039686][ T7238] BTRFS info (device loop0): has skinny extents [ 165.046761][ T3726] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 165.118982][ T3726] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 72ms [ 165.159476][ T3726] gfs2: fsid=syz:syz.0: jid=0: Done [ 165.186982][ T7259] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 165.343110][ T7238] BTRFS info (device loop0): enabling ssd optimizations [ 165.391823][ T7306] loop4: detected capacity change from 0 to 2048 [ 165.453723][ T7306] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.489167][ T7306] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038 (0x7fffffff) [ 166.035756][ T7326] netlink: zone id is out of range [ 166.047949][ T7326] netlink: zone id is out of range [ 166.058591][ T7326] netlink: zone id is out of range [ 166.109838][ T7326] netlink: zone id is out of range [ 166.135722][ T7326] netlink: zone id is out of range [ 166.148077][ T7326] netlink: zone id is out of range [ 166.167675][ T7326] netlink: zone id is out of range [ 166.184055][ T7326] netlink: zone id is out of range [ 166.197875][ T7326] netlink: zone id is out of range [ 166.250486][ T3725] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 166.315916][ T7314] loop2: detected capacity change from 0 to 32768 [ 166.340567][ T3727] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 166.434243][ T7314] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1225 (7314) [ 166.469234][ T7314] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 166.500522][ T7314] BTRFS info (device loop2): turning on flush-on-commit [ 166.508151][ T7314] BTRFS info (device loop2): metadata ratio 7 [ 166.520378][ T3725] usb 2-1: Using ep0 maxpacket: 16 [ 166.540925][ T7314] BTRFS info (device loop2): using free space tree [ 166.567956][ T7314] BTRFS info (device loop2): has skinny extents [ 166.638282][ T7330] loop3: detected capacity change from 0 to 32768 [ 166.663286][ T3725] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.683878][ T7330] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1238 (7330) [ 166.722152][ T3725] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.733953][ T7332] loop4: detected capacity change from 0 to 32768 [ 166.745336][ T3725] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 166.762823][ T3725] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 166.772937][ T3725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.790209][ T3725] usb 2-1: config 0 descriptor?? [ 166.797914][ T7330] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 166.809676][ T7330] BTRFS info (device loop3): using free space tree [ 166.817297][ T7330] BTRFS info (device loop3): has skinny extents [ 166.824664][ T7314] BTRFS info (device loop2): enabling ssd optimizations [ 166.843361][ T7332] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1239 (7332) [ 166.878835][ T7314] BTRFS info (device loop2): checking UUID tree [ 166.910193][ T7332] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 166.920767][ T3727] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=4b.d6 [ 166.930173][ T3727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.931101][ T7332] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 166.960462][ T3727] usb 1-1: Product: syz [ 166.964799][ T3727] usb 1-1: Manufacturer: syz [ 166.969534][ T3727] usb 1-1: SerialNumber: syz [ 166.976848][ T3727] usb 1-1: config 0 descriptor?? [ 166.984965][ T7332] BTRFS info (device loop4): trying to use backup root at mount time [ 166.993679][ T7332] BTRFS info (device loop4): force clearing of disk cache [ 167.001575][ T7332] BTRFS info (device loop4): enabling ssd optimizations [ 167.008527][ T7332] BTRFS info (device loop4): using spread ssd allocation scheme [ 167.039174][ T3727] asix: probe of 1-1:0.0 failed with error -22 [ 167.071778][ T7332] BTRFS info (device loop4): enabling disk space caching [ 167.078857][ T7332] BTRFS info (device loop4): disk space caching is enabled [ 167.092291][ T7332] BTRFS info (device loop4): has skinny extents [ 167.159100][ T7330] BTRFS info (device loop3): enabling ssd optimizations [ 167.251226][ T3727] Bluetooth: hci3: command 0x0405 tx timeout [ 167.290509][ T3725] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.001F/input/input32 [ 167.374864][ T2987] usb 1-1: USB disconnect, device number 9 [ 167.383430][ T3725] microsoft 0003:045E:07DA.001F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 167.541689][ T3725] usb 2-1: USB disconnect, device number 17 [ 168.268403][ T7405] loop0: detected capacity change from 0 to 2048 [ 168.433215][ T7405] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.468473][ T7418] loop1: detected capacity change from 0 to 512 [ 168.479079][ T7393] loop2: detected capacity change from 0 to 32768 [ 168.482923][ T7405] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038 (0x7fffffff) [ 168.727226][ T7418] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 168.762337][ T7426] loop4: detected capacity change from 0 to 4096 [ 168.769034][ T7418] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038 (0x7fffffff) [ 168.776931][ T7430] netlink: 'syz.0.1254': attribute type 3 has an invalid length. [ 169.119655][ T7444] sp0: Synchronizing with TNC [ 169.446933][ T7463] loop2: detected capacity change from 0 to 256 [ 169.515780][ T7463] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.690021][ T7475] loop0: detected capacity change from 0 to 164 [ 169.704140][ T7476] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1277'. [ 169.754744][ T3578] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 169.763937][ T7478] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1278'. [ 169.825166][ T7442] loop3: detected capacity change from 0 to 32768 [ 169.881386][ T7442] jfs: Unrecognized mount option "gid=0x0000000000000000" or missing value [ 169.966918][ T7490] loop0: detected capacity change from 0 to 1024 [ 170.015936][ T7490] EXT4-fs (loop0): INFO: recovery required on readonly filesystem [ 170.050554][ T3578] usb 2-1: Using ep0 maxpacket: 8 [ 170.056224][ T7490] EXT4-fs (loop0): write access will be enabled during recovery [ 170.095043][ T7490] JBD2: no valid journal superblock found [ 170.101109][ T4113] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 170.120142][ T7490] EXT4-fs (loop0): error loading journal [ 170.180807][ T3578] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 170.199647][ T3578] usb 2-1: config 0 has no interface number 0 [ 170.217287][ T3578] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 170.239771][ T3578] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.264465][ T3578] usb 2-1: config 0 descriptor?? [ 170.412364][ T7506] program syz.3.1292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.476580][ T4113] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 170.497120][ T4113] usb 3-1: config 0 has no interface number 0 [ 170.510551][ T3578] viperboard 2-1:0.143: version 0.00 found at bus 002 address 018 [ 170.612900][ T3578] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 170.644181][ T3578] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 170.672507][ T4113] usb 3-1: New USB device found, idVendor=2639, idProduct=0012, bcdDevice=65.b5 [ 170.672764][ T3578] usb 2-1: USB disconnect, device number 18 [ 170.692595][ T4113] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.732422][ T4113] usb 3-1: Product: syz [ 170.746935][ T4113] usb 3-1: Manufacturer: syz [ 170.757071][ T4113] usb 3-1: SerialNumber: syz [ 170.771892][ T3722] Bluetooth: hci1: command 0x0406 tx timeout [ 170.781072][ T3722] Bluetooth: hci2: command 0x0406 tx timeout [ 170.795769][ T4113] usb 3-1: config 0 descriptor?? [ 170.857508][ T4113] xsens_mt 3-1:0.1: xsens_mt converter detected [ 170.874553][ T4113] usb 3-1: xsens_mt converter now attached to ttyUSB0 [ 171.063732][ T7482] udc-core: couldn't find an available UDC or it's busy [ 171.082686][ T7482] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 171.105818][ T7482] udc-core: couldn't find an available UDC or it's busy [ 171.134136][ T7482] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 171.159512][ T4113] usb 3-1: USB disconnect, device number 15 [ 171.180150][ T7509] loop4: detected capacity change from 0 to 32768 [ 171.186099][ T4113] xsens_mt ttyUSB0: xsens_mt converter now disconnected from ttyUSB0 [ 171.207699][ T4113] xsens_mt 3-1:0.1: device disconnected [ 171.347393][ T7509] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 171.552864][ T3574] ocfs2: Unmounting device (7,4) on (node local) [ 171.725196][ T7554] tipc: Started in network mode [ 171.749576][ T7554] tipc: Node identity , cluster identity 4711 [ 171.813225][ T7554] tipc: Failed to set node id, please configure manually [ 171.850485][ T7554] tipc: Enabling of bearer rejected, failed to enable media [ 171.885966][ T7559] loop2: detected capacity change from 0 to 128 [ 171.905888][ T7534] loop0: detected capacity change from 0 to 32768 [ 171.947107][ T7548] loop3: detected capacity change from 0 to 32768 [ 172.047608][ T7534] XFS (loop0): Mounting V5 Filesystem [ 172.083159][ T7548] XFS (loop3): Mounting V5 Filesystem [ 172.215127][ T7534] XFS (loop0): Ending clean mount [ 172.228984][ T7534] XFS (loop0): Quotacheck needed: Please wait. [ 172.286720][ T7548] XFS (loop3): Ending clean mount [ 172.332094][ T7548] XFS (loop3): Quotacheck needed: Please wait. [ 172.359202][ T7534] XFS (loop0): Quotacheck: Done. [ 172.448947][ T7548] XFS (loop3): Quotacheck: Done. [ 172.469092][ T6558] XFS (loop0): Unmounting Filesystem [ 172.539432][ T7605] loop4: detected capacity change from 0 to 512 [ 172.563547][ T3581] XFS (loop3): Unmounting Filesystem [ 172.637939][ T7609] usb usb8: usbfs: process 7609 (syz.2.1336) did not claim interface 0 before use [ 172.720037][ T7605] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 172.736162][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1337'. [ 172.751339][ T7605] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 172.759635][ T7605] System zones: 0-2, 18-18, 34-35 [ 172.766510][ T7605] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 172.789991][ T7605] EXT4-fs (loop4): shut down requested (0) [ 173.085997][ T7624] loop0: detected capacity change from 0 to 256 [ 173.181586][ T7624] exfat: Deprecated parameter 'namecase' [ 173.197517][ T7624] exfat: Deprecated parameter 'namecase' [ 173.228972][ T7634] binder: 7633:7634 ioctl c0306201 20000580 returned -22 [ 173.287588][ T7624] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 173.299898][ T7640] loop4: detected capacity change from 0 to 256 [ 173.337025][ T7642] loop3: detected capacity change from 0 to 1024 [ 173.343521][ T26] audit: type=1804 audit(1727519506.286:15): pid=7624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1331" name="/newroot/54/file0/file1" dev="loop0" ino=1048694 res=1 errno=0 [ 173.380414][ T3611] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 173.400039][ T7640] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x726863a3, utbl_chksum : 0xe619d30d) [ 173.457880][ T7644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1350'. [ 173.487984][ T7642] hfsplus: bad catalog entry type [ 173.521805][ T7644] tipc: Started in network mode [ 173.548228][ T7644] tipc: Node identity , cluster identity 4711 [ 173.555204][ T3625] hfsplus: b-tree write err: -5, ino 4 [ 173.560704][ T2987] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 173.566606][ T7644] tipc: Failed to set node id, please configure manually [ 173.576312][ T7644] tipc: Enabling of bearer rejected, failed to enable media [ 173.662178][ T7646] loop4: detected capacity change from 0 to 256 [ 173.679245][ T7650] netlink: 'syz.0.1353': attribute type 1 has an invalid length. [ 173.701363][ T7646] exfat: Deprecated parameter 'utf8' [ 173.729386][ T7646] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 173.770620][ T3611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.783597][ T7654] device gre0 entered promiscuous mode [ 173.786076][ T7652] loop3: detected capacity change from 0 to 190 [ 173.796049][ T3611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.806010][ T3611] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 173.815254][ T2987] usb 3-1: Using ep0 maxpacket: 32 [ 173.820694][ T3611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.835573][ T3611] usb 2-1: config 0 descriptor?? [ 173.837468][ T7654] net_ratelimit: 3 callbacks suppressed [ 173.837481][ T7654] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 173.929365][ T7652] ntfs: (device loop3): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 173.947303][ T2987] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 173.958054][ T2987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.960596][ T7659] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1357'. [ 173.971650][ T7652] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 174.009247][ T2987] usb 3-1: config 0 descriptor?? [ 174.020865][ T7652] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 174.033979][ T7656] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1357'. [ 174.037412][ T7652] ntfs: volume version 0.0. [ 174.062408][ T7652] ntfs: (device loop3): load_system_files(): Disabling sparse support due to NTFS volume version 0.0 (need at least version 3.0). [ 174.091782][ T7652] ntfs: (device loop3): ntfs_read_locked_inode(): Inode is not in use! [ 174.112795][ T7652] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 174.141236][ T7652] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 174.177391][ T7664] loop0: detected capacity change from 0 to 2048 [ 174.186808][ T7652] attempt to access beyond end of device [ 174.186808][ T7652] loop3: rw=0, want=560, limit=190 [ 174.210478][ T7652] ntfs: (device loop3): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x45. [ 174.229744][ T7652] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Failed to map directory index page, error 5. [ 174.242706][ T7664] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 174.280499][ T2987] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 174.302398][ T2987] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 174.323362][ T3611] uclogic 0003:5543:0042.0020: unknown main item tag 0x0 [ 174.358664][ T3611] uclogic 0003:5543:0042.0020: unknown main item tag 0x0 [ 174.397097][ T7664] EXT4-fs error (device loop0): ext4_find_dest_de:2113: inode #12: block 9: comm syz.0.1358: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 174.418129][ T2987] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 174.426881][ T3611] uclogic 0003:5543:0042.0020: unknown main item tag 0x0 [ 174.436803][ T2987] usb 3-1: media controller created [ 174.442595][ T3611] uclogic 0003:5543:0042.0020: unknown main item tag 0x0 [ 174.460666][ T3611] uclogic 0003:5543:0042.0020: unknown main item tag 0x0 [ 174.466223][ T7662] loop4: detected capacity change from 0 to 32768 [ 174.467830][ T3611] uclogic 0003:5543:0042.0020: unknown main item tag 0x0 [ 174.483766][ T2987] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 174.494352][ T3611] uclogic 0003:5543:0042.0020: unknown main item tag 0x0 [ 174.509809][ T3611] uclogic 0003:5543:0042.0020: No inputs registered, leaving [ 174.554144][ T3611] uclogic 0003:5543:0042.0020: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.1-1/input0 [ 174.575192][ T3611] usb 2-1: USB disconnect, device number 19 [ 174.790542][ T2987] az6027: usb out operation failed. (-71) [ 174.805224][ T2987] stb0899_attach: Driver disabled by Kconfig [ 174.826281][ T7678] program syz.0.1364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.843831][ T2987] az6027: no front-end attached [ 174.843831][ T2987] [ 174.886832][ T2987] az6027: usb out operation failed. (-71) [ 174.905816][ T2987] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 174.930190][ T2987] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input33 [ 175.013308][ T2987] dvb-usb: schedule remote query interval to 400 msecs. [ 175.045960][ T2987] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 175.055077][ T7686] loop0: detected capacity change from 0 to 2048 [ 175.072270][ T2987] usb 3-1: USB disconnect, device number 16 [ 175.153904][ T2987] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 175.163752][ T7686] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.241212][ T7704] netlink: 'syz.4.1373': attribute type 298 has an invalid length. [ 175.370426][ T4111] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 175.620413][ T4111] usb 4-1: Using ep0 maxpacket: 8 [ 175.685502][ T7732] loop2: detected capacity change from 0 to 256 [ 175.736894][ T7729] loop4: detected capacity change from 0 to 4096 [ 175.857474][ T7729] ntfs: volume version 3.1. [ 175.897879][ T7742] loop2: detected capacity change from 0 to 256 [ 175.904497][ T4111] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 175.925743][ T4111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.936891][ T4111] usb 4-1: Product: syz [ 175.956176][ T4111] usb 4-1: Manufacturer: syz [ 175.965896][ T4111] usb 4-1: SerialNumber: syz [ 175.975985][ T4111] usb 4-1: config 0 descriptor?? [ 176.022323][ T4111] gspca_main: se401-2.14.0 probing 047d:5003 [ 176.065947][ T7742] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 176.233735][ T7754] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1387'. [ 176.250479][ T7754] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1387'. [ 176.417162][ T7759] loop2: detected capacity change from 0 to 4096 [ 176.451503][ T4111] gspca_se401: Bayer format not supported! [ 176.500764][ T7768] dccp_invalid_packet: P.Data Offset(172) too large [ 176.559981][ T7759] ntfs: volume version 3.1. [ 176.669700][ T2987] usb 4-1: USB disconnect, device number 14 [ 176.770631][ T3722] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 177.320795][ T3722] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 177.334466][ T3722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.349475][ T3722] usb 2-1: Product: syz [ 177.351107][ T7771] loop4: detected capacity change from 0 to 40427 [ 177.357198][ T3722] usb 2-1: Manufacturer: syz [ 177.374313][ T3722] usb 2-1: SerialNumber: syz [ 177.417298][ T3722] usb 2-1: config 0 descriptor?? [ 177.443832][ T7771] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 177.463703][ T7771] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 177.488089][ T3722] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 177.526202][ T7771] F2FS-fs (loop4): invalid crc value [ 177.578843][ T7771] F2FS-fs (loop4): Found nat_bits in checkpoint [ 177.626983][ T21] kernel write not supported for file 586/task/587/clear_refs (pid: 21 comm: kworker/1:0) [ 177.716292][ T7810] loop0: detected capacity change from 0 to 512 [ 177.733955][ T7771] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 177.750869][ T7771] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 177.844057][ T7771] attempt to access beyond end of device [ 177.844057][ T7771] loop4: rw=2051, want=45056, limit=40427 [ 177.844341][ T7771] attempt to access beyond end of device [ 177.844341][ T7771] loop4: rw=2051, want=131072, limit=40427 [ 177.904553][ T7771] F2FS-fs (loop4): Issue discard(4614, 4614, 1018) failed, ret: -5 [ 177.904945][ T7771] F2FS-fs (loop4): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 177.925163][ T7810] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 177.999118][ T7795] loop3: detected capacity change from 0 to 32768 [ 178.014395][ T7810] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038 (0x7fffffff) [ 178.063402][ T7795] jfs_lookup: iget failed on inum 32 [ 178.072383][ T7810] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.1410: Failed to acquire dquot type 0 [ 178.164356][ T3722] gspca_sunplus: reg_r err -71 [ 178.164427][ T3722] sunplus: probe of 2-1:0.0 failed with error -71 [ 178.173198][ T3722] usb 2-1: USB disconnect, device number 20 [ 178.654625][ T7836] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.662611][ T7836] IPv6: NLM_F_CREATE should be set when creating new route [ 178.720840][ T3578] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 178.910594][ T7839] loop1: detected capacity change from 0 to 8192 [ 178.959635][ T7848] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1426'. [ 178.980444][ T3578] usb 4-1: Using ep0 maxpacket: 16 [ 179.006707][ T7839] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 179.139553][ T3578] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.165419][ T3578] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.180704][ T3578] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 179.195995][ T3578] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 179.215693][ T3578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.237979][ T3578] usb 4-1: config 0 descriptor?? [ 179.338929][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 179.338944][ T26] audit: type=1326 audit(1727519512.286:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e78e5ff9 code=0x7fc00000 [ 179.455038][ T26] audit: type=1326 audit(1727519512.326:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f56e78e5ff9 code=0x7fc00000 [ 179.467371][ T7871] loop1: detected capacity change from 0 to 1024 [ 179.524447][ T26] audit: type=1326 audit(1727519512.326:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e78e5ff9 code=0x7fc00000 [ 179.534304][ T7876] loop0: detected capacity change from 0 to 256 [ 179.617678][ T26] audit: type=1326 audit(1727519512.326:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e78e5ff9 code=0x7fc00000 [ 179.688020][ T26] audit: type=1326 audit(1727519512.326:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e78e5ff9 code=0x7fc00000 [ 179.743044][ T3578] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 179.765049][ T26] audit: type=1326 audit(1727519512.326:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e78e5ff9 code=0x7fc00000 [ 179.774435][ T3578] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 179.837299][ T3578] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 179.867926][ T26] audit: type=1326 audit(1727519512.326:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e78e5ff9 code=0x7fc00000 [ 179.880375][ T3578] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 179.951325][ T3578] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 179.976103][ T3578] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 179.982525][ T26] audit: type=1326 audit(1727519512.326:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e78e5ff9 code=0x7fc00000 [ 179.990362][ T3578] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 180.042083][ T3578] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 180.051450][ T26] audit: type=1326 audit(1727519512.326:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e78e5ff9 code=0x7fc00000 [ 180.072769][ T3578] microsoft 0003:045E:07DA.0021: No inputs registered, leaving [ 180.101043][ T3578] microsoft 0003:045E:07DA.0021: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 180.132687][ T26] audit: type=1326 audit(1727519512.326:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e78e5ff9 code=0x7fc00000 [ 180.140358][ T3578] microsoft 0003:045E:07DA.0021: no inputs found [ 180.222763][ T3578] microsoft 0003:045E:07DA.0021: could not initialize ff, continuing anyway [ 180.270704][ T3578] usb 4-1: USB disconnect, device number 15 [ 180.491367][ T7884] loop4: detected capacity change from 0 to 32768 [ 180.546184][ T7884] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1443 (7884) [ 180.596278][ T7884] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 180.636242][ T7884] BTRFS info (device loop4): metadata ratio 1025 [ 180.686943][ T7898] loop3: detected capacity change from 0 to 128 [ 180.692522][ T7884] BTRFS info (device loop4): doing ref verification [ 180.730363][ T7884] BTRFS info (device loop4): force clearing of disk cache [ 180.765929][ T7884] BTRFS info (device loop4): turning off barriers [ 180.783392][ T7891] loop0: detected capacity change from 0 to 32768 [ 180.788391][ T7898] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 180.789978][ T7884] BTRFS info (device loop4): setting nodatacow, compression disabled [ 180.839149][ T7884] BTRFS info (device loop4): enabling ssd optimizations [ 180.869660][ T7884] BTRFS info (device loop4): using spread ssd allocation scheme [ 180.891414][ T7884] BTRFS info (device loop4): not using ssd optimizations [ 180.936292][ T7884] BTRFS info (device loop4): not using spread ssd allocation scheme [ 180.951825][ T7884] BTRFS info (device loop4): using free space tree [ 180.970146][ T7891] [ 180.970146][ T7891] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.970146][ T7891] [ 180.990391][ T7884] BTRFS info (device loop4): has skinny extents [ 181.073074][ T7895] loop1: detected capacity change from 0 to 32768 [ 181.089584][ T7891] read_mapping_page failed! [ 181.109655][ T7891] ERROR: (device loop0): txCommit: [ 181.109655][ T7891] [ 181.206806][ T3994] [ 181.206806][ T3994] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.206806][ T3994] [ 181.243152][ T3994] [ 181.243152][ T3994] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.243152][ T3994] [ 181.284866][ T274] [ 181.284866][ T274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.284866][ T274] [ 181.312339][ T7889] loop2: detected capacity change from 0 to 65536 [ 181.319522][ T6558] [ 181.319522][ T6558] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.319522][ T6558] [ 181.338619][ T7884] BTRFS info (device loop4): clearing free space tree [ 181.340403][ T6558] [ 181.340403][ T6558] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.340403][ T6558] [ 181.357158][ T7884] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 181.367372][ T7884] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 181.406405][ T7884] BTRFS info (device loop4): creating free space tree [ 181.421386][ T7884] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 181.431595][ T7884] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 181.450889][ T7889] XFS (loop2): Mounting V5 Filesystem [ 181.521858][ T7909] loop3: detected capacity change from 0 to 32768 [ 181.625187][ T7909] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 181.649066][ T7933] loop0: detected capacity change from 0 to 4096 [ 181.656006][ T7889] XFS (loop2): Ending clean mount [ 181.715305][ T7933] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 181.774575][ T7937] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 181.827178][ T7940] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=io+mem:owns=io+mem [ 181.839960][ T3568] XFS (loop2): Unmounting Filesystem [ 182.212930][ T3581] ocfs2: Unmounting device (7,3) on (node local) [ 182.440818][ T3770] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 182.497827][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1462'. [ 182.700417][ T3770] usb 2-1: Using ep0 maxpacket: 8 [ 182.820555][ T3770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.848756][ T3770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.869132][ T3770] usb 2-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 182.874226][ T7975] loop0: detected capacity change from 0 to 512 [ 182.908720][ T3770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.936447][ T3770] usb 2-1: config 0 descriptor?? [ 183.012606][ T7975] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1466: invalid indirect mapped block 256 (level 2) [ 183.057811][ T7985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1468'. [ 183.107559][ T7975] EXT4-fs (loop0): 2 truncates cleaned up [ 183.113739][ T7975] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 183.362090][ T8001] netlink: 'syz.2.1470': attribute type 2 has an invalid length. [ 183.435055][ T3770] wacom 0003:056A:003F.0022: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.1-1/input0 [ 183.484541][ T7956] loop4: detected capacity change from 0 to 40427 [ 183.525748][ T8009] loop2: detected capacity change from 0 to 512 [ 183.546001][ T8004] loop3: detected capacity change from 0 to 4096 [ 183.557436][ T7956] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 183.565512][ T7956] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 183.579913][ T8009] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 183.598722][ T8009] EXT4-fs (loop2): Ignoring removed nobh option [ 183.613941][ T7956] F2FS-fs (loop4): invalid crc value [ 183.650542][ T8004] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 183.670036][ T7956] F2FS-fs (loop4): Found nat_bits in checkpoint [ 183.683665][ T8009] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e002e018, mo2=0000] [ 183.692103][ T3727] usb 2-1: USB disconnect, device number 21 [ 183.702745][ T8009] System zones: 0-2, 18-18, 34-34 [ 183.763282][ T8009] EXT4-fs (loop2): 1 orphan inode deleted [ 183.776214][ T8009] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,debug,nogrpid,grpjquota=,usrjquota=wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8/,barrier,nobh,bsddf,noquota,,errors=continue. Quota mode: writeback. [ 183.790436][ T7956] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 183.800711][ T8009] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038 (0x7fffffff) [ 183.825483][ T7956] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 183.879160][ T8009] EXT4-fs warning (device loop2): verify_group_input:165: Last group not full [ 184.084507][ T8027] loop3: detected capacity change from 0 to 256 [ 184.171696][ T8027] exfat: Deprecated parameter 'namecase' [ 184.176753][ T8031] loop0: detected capacity change from 0 to 256 [ 184.177395][ T8027] exfat: Deprecated parameter 'utf8' [ 184.190009][ T3785] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 184.203654][ T3785] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 184.236291][ T8033] loop4: detected capacity change from 0 to 1024 [ 184.252581][ T8031] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 184.265321][ T8027] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 184.274690][ T8033] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 184.318335][ T8033] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 184.437289][ T8033] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000001,barrier,nojournal_checksum,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,dioread_nolock,nodelalloc,acl,auto_da_alloc=0x0000000000000343,,errors=continue. Quota mode: none. [ 184.597134][ T8033] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #11: comm syz.4.1477: missing EA_INODE flag [ 184.667627][ T8033] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1477: error while reading EA inode 11 err=-117 [ 184.816395][ T8057] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1501'. [ 184.872285][ T8060] loop1: detected capacity change from 0 to 512 [ 184.932829][ T8060] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 184.963103][ T8060] EXT4-fs (loop1): Ignoring removed nobh option [ 184.972348][ T8061] loop2: detected capacity change from 0 to 4096 [ 184.979161][ T8063] [U] ^R [ 185.030841][ T8060] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e002e018, mo2=0000] [ 185.055610][ T8068] loop0: detected capacity change from 0 to 4096 [ 185.062438][ T8060] System zones: 0-2, 18-18, 34-34 [ 185.071717][ T8071] loop4: detected capacity change from 0 to 512 [ 185.103151][ T8060] EXT4-fs (loop1): 1 orphan inode deleted [ 185.108918][ T8060] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,debug,nogrpid,grpjquota=,usrjquota=wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8/,barrier,nobh,bsddf,noquota,,errors=continue. Quota mode: writeback. [ 185.185169][ T8071] EXT4-fs (loop4): Ignoring removed oldalloc option [ 185.201547][ T8073] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.219309][ T8072] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.261073][ T8060] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038 (0x7fffffff) [ 185.283230][ T8071] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1497: inode #1: comm syz.4.1497: iget: illegal inode # [ 185.330887][ T8052] loop3: detected capacity change from 0 to 32768 [ 185.338043][ T8071] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1497: error while reading EA inode 1 err=-117 [ 185.362526][ T8060] EXT4-fs warning (device loop1): verify_group_input:165: Last group not full [ 185.421283][ T8071] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1497: inode #1: comm syz.4.1497: iget: illegal inode # [ 185.457331][ T8052] JBD2: Ignoring recovery information on journal [ 185.500391][ T8071] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1497: error while reading EA inode 1 err=-117 [ 185.518535][ T8052] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 185.571878][ T8080] loop0: detected capacity change from 0 to 4096 [ 185.593949][ T8071] EXT4-fs (loop4): 1 orphan inode deleted [ 185.599708][ T8071] EXT4-fs (loop4): mounted filesystem without journal. Opts: oldalloc,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 185.641142][ T3581] ocfs2: Unmounting device (7,3) on (node local) [ 185.661402][ T8080] ntfs3: Invalid value for uid. [ 185.827574][ T8091] [U] ^R [ 186.309684][ T8124] loop1: detected capacity change from 0 to 256 [ 186.594907][ T8144] loop0: detected capacity change from 0 to 512 [ 186.595010][ T8140] loop1: detected capacity change from 0 to 64 [ 186.642186][ T8144] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 186.669490][ T8140] hfs: request for non-existent node 16777216 in B*Tree [ 186.703570][ T8144] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #15: comm syz.0.1530: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 186.733636][ T8140] hfs: request for non-existent node 16777216 in B*Tree [ 186.804193][ T8144] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1530: couldn't read orphan inode 15 (err -117) [ 186.819696][ T8152] loop4: detected capacity change from 0 to 16 [ 186.880415][ T8144] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 186.905715][ T8144] ext2 filesystem being mounted at /105/file2 supports timestamps until 2038 (0x7fffffff) [ 186.907153][ T8152] erofs: (device loop4): mounted with root inode @ nid 36. [ 187.298677][ T8164] loop0: detected capacity change from 0 to 512 [ 187.382325][ T8150] loop3: detected capacity change from 0 to 32768 [ 187.444601][ T8164] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1538: casefold flag without casefold feature [ 187.605264][ T8158] loop1: detected capacity change from 0 to 32768 [ 187.626281][ T8164] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1538: couldn't read orphan inode 15 (err -117) [ 187.652366][ T8164] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 187.750171][ T8160] loop4: detected capacity change from 0 to 32768 [ 187.888686][ T8158] XFS (loop1): Mounting V5 Filesystem [ 187.888686][ T8160] XFS (loop4): Mounting V5 Filesystem [ 187.999500][ T8160] XFS (loop4): Ending clean mount [ 188.022825][ T8189] loop0: detected capacity change from 0 to 8192 [ 188.034261][ T8158] XFS (loop1): Ending clean mount [ 188.040094][ T8160] XFS (loop4): Quotacheck needed: Please wait. [ 188.061005][ T21] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 188.130836][ T8189] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 188.163683][ T8189] REISERFS (device loop0): using ordered data mode [ 188.172301][ T8189] reiserfs: using flush barriers [ 188.187197][ T8189] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 188.213081][ T8160] XFS (loop4): Quotacheck: Done. [ 188.241476][ T8169] loop2: detected capacity change from 0 to 32768 [ 188.248496][ T8189] REISERFS (device loop0): checking transaction log (loop0) [ 188.252926][ T3572] XFS (loop1): Unmounting Filesystem [ 188.291796][ T3574] XFS (loop4): Unmounting Filesystem [ 188.309499][ T8189] REISERFS (device loop0): Using r5 hash to sort names [ 188.317673][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 188.326269][ T8189] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 188.346022][ T8189] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 188.401411][ T8169] XFS (loop2): Mounting V5 Filesystem [ 188.461808][ T21] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 188.469063][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 188.481223][ T21] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 188.491595][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.507276][ T21] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 188.535484][ T8169] XFS (loop2): Starting recovery (logdev: internal) [ 188.655434][ T8169] XFS (loop2): Ending recovery (logdev: internal) [ 188.656318][ T8202] loop0: detected capacity change from 0 to 1024 [ 188.702804][ T21] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 188.739621][ T8202] hfsplus: bad catalog entry type [ 188.740331][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.773256][ T21] usb 4-1: Product: syz [ 188.777447][ T21] usb 4-1: Manufacturer: syz [ 188.793488][ T21] usb 4-1: SerialNumber: syz [ 188.834011][ T144] hfsplus: b-tree write err: -5, ino 4 [ 188.835195][ T21] usb 4-1: config 0 descriptor?? [ 188.856115][ T3568] XFS (loop2): Unmounting Filesystem [ 188.872102][ T8176] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 188.976033][ T21] mcba_usb 4-1:0.0 can0: couldn't setup read URBs [ 188.995373][ T21] mcba_usb 4-1:0.0 can0: couldn't start device: -90 [ 189.107851][ T21] mcba_usb: probe of 4-1:0.0 failed with error -90 [ 189.137056][ T21] usb 4-1: USB disconnect, device number 16 [ 189.662281][ T8204] loop1: detected capacity change from 0 to 32768 [ 189.726927][ T8204] JBD2: Ignoring recovery information on journal [ 189.827552][ T8204] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 189.877135][ T8228] loop3: detected capacity change from 0 to 1024 [ 190.024353][ T3572] ocfs2: Unmounting device (7,1) on (node local) [ 190.058231][ T8228] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,min_batch_time=0x0000000000000004,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,errors=remount-ro,dioread_lock,user_xattr,quota,. Quota mode: writeback. [ 190.111407][ T8228] EXT4-fs error (device loop3): ext4_lookup:1856: comm syz.3.1556: inode #12: comm syz.3.1556: iget: illegal inode # [ 190.138851][ T8222] loop4: detected capacity change from 0 to 40427 [ 190.163209][ T8228] EXT4-fs (loop3): Remounting filesystem read-only [ 190.183501][ T8222] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 190.192903][ T8222] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 190.234586][ T8232] EXT4-fs error (device loop3): ext4_lookup:1856: comm syz.3.1556: inode #12: comm syz.3.1556: iget: illegal inode # [ 190.239303][ T8222] F2FS-fs (loop4): invalid crc value [ 190.284863][ T8222] F2FS-fs (loop4): Found nat_bits in checkpoint [ 190.357036][ T8221] loop0: detected capacity change from 0 to 32768 [ 190.446802][ T8222] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 190.466460][ T8222] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 190.476096][ T8221] ERROR: (device loop0): diWrite: ixpxd invalid [ 190.476096][ T8221] [ 190.497561][ T8222] attempt to access beyond end of device [ 190.497561][ T8222] loop4: rw=0, want=45072, limit=40427 [ 190.513110][ T8221] ERROR: (device loop0): remounting filesystem as read-only [ 190.532917][ T8221] ERROR: (device loop0): txCommit: [ 190.532917][ T8221] [ 190.577746][ T8224] loop2: detected capacity change from 0 to 32768 [ 190.770999][ T410] attempt to access beyond end of device [ 190.770999][ T410] loop4: rw=2049, want=40968, limit=40427 [ 191.097971][ T8247] loop0: detected capacity change from 0 to 1024 [ 191.182644][ T8252] loop2: detected capacity change from 0 to 128 [ 191.200194][ T8247] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 191.220102][ T8247] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038 (0x7fffffff) [ 191.222373][ T8252] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 191.362057][ T8252] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 191.532148][ T8243] loop1: detected capacity change from 0 to 32768 [ 191.615245][ T8239] loop3: detected capacity change from 0 to 40427 [ 191.626369][ T8243] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1559 (8243) [ 191.675687][ T8243] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 191.709899][ T8239] F2FS-fs (loop3): invalid crc value [ 191.751569][ T8239] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x293/0x700 [ 191.766701][ T8243] BTRFS info (device loop1): using free space tree [ 191.793441][ T8243] BTRFS info (device loop1): has skinny extents [ 191.800648][ T8239] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x4d1/0xb70 [ 191.829444][ T8239] F2FS-fs (loop3): Found nat_bits in checkpoint [ 191.993877][ T8239] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x4d1/0xb70 [ 192.030277][ T8239] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x4d1/0xb70 [ 192.045578][ T8239] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x293/0x700 [ 192.179546][ T8309] loop4: detected capacity change from 0 to 2048 [ 192.186605][ T8243] BTRFS info (device loop1): enabling ssd optimizations [ 192.200645][ T8309] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 192.203835][ T8239] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 192.256643][ T8239] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xef/0x6b0 [ 192.280385][ T8317] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.280637][ T8309] attempt to access beyond end of device [ 192.280637][ T8309] loop4: rw=524288, want=33554432, limit=2048 [ 192.333197][ T8239] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x1a2/0xa80 [ 192.450569][ T3581] attempt to access beyond end of device [ 192.450569][ T3581] loop3: rw=2049, want=40968, limit=40427 [ 192.464099][ T3770] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 192.832652][ T3770] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.853242][ T3770] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.872085][ T8331] loop2: detected capacity change from 0 to 64 [ 192.961214][ T3770] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 192.971170][ T3770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 192.979399][ T3770] usb 1-1: SerialNumber: syz [ 193.019241][ T8333] loop1: detected capacity change from 0 to 1024 [ 193.174171][ T8333] EXT4-fs (loop1): Test dummy encryption mode enabled [ 193.200664][ T8333] EXT4-fs (loop1): Ignoring removed orlov option [ 193.238003][ T8333] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 193.252659][ T3770] usb 1-1: 0:2 : does not exist [ 193.294189][ T8344] loop2: detected capacity change from 0 to 4096 [ 193.316612][ T8344] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 193.450246][ T3770] usb 1-1: USB disconnect, device number 10 [ 193.480727][ T3560] udevd[3560]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.549229][ T3568] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 193.567334][ T3568] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 193.590364][ T3568] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 193.717308][ T8337] loop4: detected capacity change from 0 to 40427 [ 193.746307][ T8358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1599'. [ 193.773057][ T8360] loop2: detected capacity change from 0 to 256 [ 193.785657][ T8337] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 193.807811][ T8337] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 193.827181][ T8337] F2FS-fs (loop4): invalid crc value [ 193.861876][ T8337] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 193.900747][ T3722] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 193.915986][ T8337] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 193.974263][ T8337] F2FS-fs (loop4): recover fsync data on readonly fs [ 193.992123][ T8337] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 194.000034][ T8337] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 194.057623][ T8372] loop2: detected capacity change from 0 to 128 [ 194.160535][ T3722] usb 2-1: Using ep0 maxpacket: 16 [ 194.184255][ T8372] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 194.210820][ T8372] ext4 filesystem being mounted at /345/mnt supports timestamps until 2038 (0x7fffffff) [ 194.220614][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.220708][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.280699][ T3722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.297548][ T3722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.340132][ T3722] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 194.370858][ T3722] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 194.389892][ T3722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.410565][ T3722] usb 2-1: config 0 descriptor?? [ 194.641549][ T3770] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 194.902591][ T3770] usb 4-1: Using ep0 maxpacket: 16 [ 194.916092][ T3722] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0024/input/input38 [ 194.961636][ T3722] microsoft 0003:045E:07DA.0024: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 195.020659][ T3770] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.038324][ T3770] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.049060][ T3770] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 195.067869][ T3770] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 195.078926][ T3770] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.093166][ T8386] loop2: detected capacity change from 0 to 32768 [ 195.094845][ T3770] usb 4-1: config 0 descriptor?? [ 195.110468][ T3727] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 195.131306][ T8388] loop4: detected capacity change from 0 to 40427 [ 195.136440][ T3778] usb 2-1: USB disconnect, device number 22 [ 195.179526][ T8388] F2FS-fs (loop4): Invalid segment/section count (24 != 24 * 3) [ 195.194329][ T8386] XFS (loop2): Mounting V5 Filesystem [ 195.212734][ T8388] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 195.224042][ T8388] F2FS-fs (loop4): invalid crc value [ 195.249359][ T8388] F2FS-fs (loop4): Found nat_bits in checkpoint [ 195.320729][ T8388] F2FS-fs (loop4): Start checkpoint disabled! [ 195.333280][ T8386] XFS (loop2): Ending clean mount [ 195.373970][ T8388] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 195.388147][ T8388] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 195.394796][ T3568] XFS (loop2): Unmounting Filesystem [ 195.418107][ T26] kauditd_printk_skb: 48 callbacks suppressed [ 195.418122][ T26] audit: type=1800 audit(1727519528.356:75): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1609" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 195.420530][ T8388] attempt to access beyond end of device [ 195.420530][ T8388] loop4: rw=2049, want=78672, limit=40427 [ 195.498260][ T1244] attempt to access beyond end of device [ 195.498260][ T1244] loop4: rw=2049, want=40976, limit=40427 [ 195.550641][ T3727] usb 1-1: config 0 has an invalid descriptor of length 75, skipping remainder of the config [ 195.565293][ T3727] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 195.583194][ T3770] microsoft 0003:045E:07DA.0025: ignoring exceeding usage max [ 195.604758][ T3770] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0025/input/input39 [ 195.621906][ T3770] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 195.717708][ T8403] loop1: detected capacity change from 0 to 512 [ 195.775834][ T3727] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 195.786956][ T3727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.801490][ T3727] usb 1-1: Product: syz [ 195.805674][ T3727] usb 1-1: Manufacturer: syz [ 195.818540][ T8403] EXT4-fs (loop1): Ignoring removed orlov option [ 195.828795][ T8403] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 195.852436][ T3727] usb 1-1: SerialNumber: syz [ 195.872159][ T8403] EXT4-fs (loop1): 1 truncate cleaned up [ 195.877820][ T8403] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,resuid=0x000000000000ee01,orlov,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 195.881504][ T3727] usb 1-1: config 0 descriptor?? [ 195.977960][ T3578] usb 4-1: USB disconnect, device number 17 [ 196.045587][ T26] audit: type=1326 audit(1727519528.996:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.4.1622" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56e78e5ff9 code=0x0 [ 196.181417][ T3727] redrat3 1-1:0.0: Couldn't find all endpoints [ 196.195020][ T3727] usb 1-1: USB disconnect, device number 11 [ 196.338709][ T8422] loop1: detected capacity change from 0 to 32768 [ 196.671003][ T8430] loop1: detected capacity change from 0 to 4096 [ 196.678646][ T8430] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 196.727774][ T8430] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 196.766862][ T8430] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 196.790562][ T3727] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 196.798279][ T8430] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 196.834379][ T8430] ntfs: (device loop1): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 196.845472][ T8430] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 196.858953][ T8430] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 196.860550][ T3778] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 196.873071][ T8430] ntfs: volume version 3.1. [ 196.883318][ T8430] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 197.048526][ T3727] usb 1-1: Using ep0 maxpacket: 16 [ 197.190539][ T3727] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC5, skipping [ 197.207462][ T3727] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 197.260454][ T3778] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.271448][ T3778] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.281424][ T3778] usb 4-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 197.290589][ T3778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.306146][ T3778] usb 4-1: config 0 descriptor?? [ 197.320556][ T3770] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 197.331883][ T8438] loop4: detected capacity change from 0 to 32768 [ 197.380842][ T3727] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 197.389992][ T3727] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 197.399009][ T3727] usb 1-1: Product: syz [ 197.403320][ T3727] usb 1-1: Manufacturer: syz [ 197.407912][ T3727] usb 1-1: SerialNumber: syz [ 197.413979][ T3727] usb 1-1: config 0 descriptor?? [ 197.433660][ T8438] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1630 (8438) [ 197.446435][ T3722] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 197.459500][ T8438] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 197.469877][ T3727] usb 1-1: NFC: intf ffff888079d7a000 id ffffffff8d149a80 [ 197.477501][ T8438] BTRFS info (device loop4): using free space tree [ 197.487169][ T8438] BTRFS info (device loop4): has skinny extents [ 197.525234][ T8438] BTRFS info (device loop4): enabling ssd optimizations [ 197.695995][ T3640] usb 1-1: USB disconnect, device number 12 [ 197.702523][ T3770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.709300][ T3722] usb 3-1: Using ep0 maxpacket: 16 [ 197.747545][ T3770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.771894][ T3770] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 197.790074][ T3778] wacom 0003:056A:0325.0026: unbalanced delimiter at end of report description [ 197.804594][ T3770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.815238][ T3778] wacom 0003:056A:0325.0026: parse failed [ 197.828988][ T3770] usb 2-1: config 0 descriptor?? [ 197.834294][ T3778] wacom: probe of 0003:056A:0325.0026 failed with error -22 [ 197.851013][ T3722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.870334][ T3722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.880423][ T3722] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 197.893674][ T3722] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 197.902977][ T3722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.917975][ T3722] usb 3-1: config 0 descriptor?? [ 197.960212][ T8471] loop4: detected capacity change from 0 to 512 [ 198.008774][ T21] usb 4-1: USB disconnect, device number 18 [ 198.083317][ T8471] EXT4-fs (loop4): Test dummy encryption mode enabled [ 198.107586][ T8471] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.1637: inline data xattr refers to an external xattr inode [ 198.123028][ T8471] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1637: couldn't read orphan inode 12 (err -117) [ 198.136216][ T8471] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,grpjquota=,resuid=0x0000000000000000,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000000409e,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 198.214550][ T8471] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 198.230258][ T8471] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1637: Directory hole found for htree leaf block 0 [ 198.326256][ T3770] pyra 0003:1E7D:2C24.0027: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.1-1/input0 [ 198.418069][ T3722] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 198.425647][ T3722] microsoft 0003:045E:07DA.0028: ignoring exceeding usage max [ 198.460850][ T3722] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0028/input/input41 [ 198.526478][ T3770] usb 2-1: USB disconnect, device number 23 [ 198.557030][ T3722] microsoft 0003:045E:07DA.0028: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 198.635316][ T3722] usb 3-1: USB disconnect, device number 17 [ 198.857296][ T8487] loop4: detected capacity change from 0 to 32768 [ 198.893655][ T8485] loop0: detected capacity change from 0 to 32768 [ 198.934193][ T8487] XFS (loop4): Mounting V5 Filesystem [ 199.009063][ T8487] XFS (loop4): Ending clean mount [ 199.017105][ T8487] XFS (loop4): Quotacheck needed: Please wait. [ 199.109931][ T8487] XFS (loop4): Quotacheck: Done. [ 199.157097][ T3574] XFS (loop4): Unmounting Filesystem [ 199.544266][ T8514] loop1: detected capacity change from 0 to 256 [ 199.589562][ T8514] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.836399][ T8528] loop2: detected capacity change from 0 to 2048 [ 200.009697][ T8528] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.049243][ T8528] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038 (0x7fffffff) [ 200.120498][ T3643] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 200.141530][ T8503] loop3: detected capacity change from 0 to 32768 [ 200.207493][ T8503] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1646 (8503) [ 200.296237][ T8503] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 200.310758][ T8503] BTRFS info (device loop3): using free space tree [ 200.326235][ T8503] BTRFS info (device loop3): has skinny extents [ 200.501309][ T3643] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.546014][ T3643] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.556297][ T3643] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.575210][ T3643] usb 1-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 200.584690][ T3643] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.601685][ T3643] usb 1-1: config 0 descriptor?? [ 200.659745][ T8585] loop2: detected capacity change from 0 to 256 [ 200.725369][ T8503] BTRFS info (device loop3): enabling ssd optimizations [ 200.908167][ T8571] loop1: detected capacity change from 0 to 32768 [ 200.978598][ T8571] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1673 (8571) [ 200.997439][ T8552] loop4: detected capacity change from 0 to 32768 [ 201.063206][ T8571] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 201.081833][ T8552] jfs: Unrecognized mount option "gid=0x0000000000000000" or missing value [ 201.088705][ T3643] holtek_mouse 0003:04D9:A070.0029: hidraw0: USB HID v0.00 Device [HID 04d9:a070] on usb-dummy_hcd.0-1/input0 [ 201.116531][ T8571] BTRFS info (device loop1): turning on flush-on-commit [ 201.159033][ T8571] BTRFS info (device loop1): metadata ratio 7 [ 201.210468][ T8571] BTRFS info (device loop1): using free space tree [ 201.236748][ T8571] BTRFS info (device loop1): has skinny extents [ 201.353596][ T3722] usb 1-1: USB disconnect, device number 13 [ 201.420459][ T2118] Bluetooth: hci4: command 0x0406 tx timeout [ 201.578987][ T8623] program syz.4.1669 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.607355][ T8571] BTRFS info (device loop1): enabling ssd optimizations [ 201.626840][ T8571] BTRFS info (device loop1): checking UUID tree [ 201.813923][ T4301] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop1 scanned by udevd (4301) [ 201.989649][ T8643] loop4: detected capacity change from 0 to 64 [ 202.533369][ T8630] loop3: detected capacity change from 0 to 32768 [ 202.630442][ T3787] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 202.736893][ T8644] loop0: detected capacity change from 0 to 32768 [ 202.836598][ T8644] XFS (loop0): Mounting V5 Filesystem [ 202.872201][ T3787] usb 3-1: Using ep0 maxpacket: 16 [ 202.924005][ T8644] XFS (loop0): Ending clean mount [ 202.970709][ T2118] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 202.996017][ T6558] XFS (loop0): Unmounting Filesystem [ 203.000650][ T3787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.023138][ T3787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.028914][ T8679] loop3: detected capacity change from 0 to 512 [ 203.048364][ T8679] EXT4-fs (loop3): Ignoring removed orlov option [ 203.054944][ T3787] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 203.071637][ T8679] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 203.074981][ T3787] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 203.086692][ T8679] EXT4-fs (loop3): 1 truncate cleaned up [ 203.094676][ T3787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.096947][ T8679] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,resuid=0x000000000000ee01,orlov,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 203.107194][ T3787] usb 3-1: config 0 descriptor?? [ 203.250785][ T2118] usb 5-1: Using ep0 maxpacket: 16 [ 203.380791][ T2118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.393118][ T2118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.403649][ T2118] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 203.416789][ T2118] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 203.425952][ T2118] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.436192][ T2118] usb 5-1: config 0 descriptor?? [ 203.621561][ T3787] microsoft 0003:045E:07DA.002A: ignoring exceeding usage max [ 203.645342][ T3787] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.002A/input/input42 [ 203.665560][ T3787] microsoft 0003:045E:07DA.002A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 203.850122][ T3643] usb 3-1: USB disconnect, device number 18 [ 203.937136][ T2118] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.002B/input/input43 [ 204.015545][ T2118] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 204.147234][ T2118] usb 5-1: USB disconnect, device number 16 [ 204.424144][ T8693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1700'. [ 204.794407][ T8722] loop3: detected capacity change from 0 to 128 [ 204.900447][ T4111] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 205.000514][ T2118] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 205.085938][ T2988] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 205.125034][ T8736] loop3: detected capacity change from 0 to 256 [ 205.150380][ T4111] usb 3-1: Using ep0 maxpacket: 16 [ 205.250639][ T2118] usb 5-1: Using ep0 maxpacket: 16 [ 205.257628][ T8736] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x726863a3, utbl_chksum : 0xe619d30d) [ 205.270487][ T4111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.283479][ T4111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.303203][ T4111] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 205.318211][ T4111] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 205.329675][ T4111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.342288][ T4111] usb 3-1: config 0 descriptor?? [ 205.350507][ T2988] usb 2-1: Using ep0 maxpacket: 16 [ 205.392386][ T2118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.421886][ T2118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.440495][ T2118] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 205.459208][ T2118] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 205.474691][ T2988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.488164][ T2988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.490371][ T2118] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.503620][ T2988] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 205.523592][ T2118] usb 5-1: config 0 descriptor?? [ 205.561179][ T2988] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 205.595614][ T8744] loop0: detected capacity change from 0 to 256 [ 205.600562][ T2988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.611246][ T8744] exfat: Deprecated parameter 'utf8' [ 205.628315][ T8744] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 205.645420][ T2988] usb 2-1: config 0 descriptor?? [ 205.809098][ T8738] loop3: detected capacity change from 0 to 32768 [ 205.834331][ T4111] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.002C/input/input44 [ 205.848598][ T4111] microsoft 0003:045E:07DA.002C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 205.928230][ T8738] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 206.000807][ T3581] ocfs2: Unmounting device (7,3) on (node local) [ 206.019671][ T2118] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 206.019704][ T2118] microsoft 0003:045E:07DA.002D: ignoring exceeding usage max [ 206.026665][ T2118] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.002D/input/input45 [ 206.056865][ T3643] usb 3-1: USB disconnect, device number 19 [ 206.110239][ T2118] microsoft 0003:045E:07DA.002D: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 206.142193][ T2988] microsoft 0003:045E:07DA.002E: ignoring exceeding usage max [ 206.180567][ T2988] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.002E/input/input46 [ 206.266724][ T2988] microsoft 0003:045E:07DA.002E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 206.366901][ T2988] usb 5-1: USB disconnect, device number 17 [ 206.445402][ T8756] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1723'. [ 206.472741][ T8753] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1723'. [ 206.473249][ T3787] usb 2-1: USB disconnect, device number 24 [ 206.740509][ T3643] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 206.913510][ T8758] loop4: detected capacity change from 0 to 128 [ 206.933967][ T8761] netlink: 'syz.2.1738': attribute type 298 has an invalid length. [ 207.120616][ T3643] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 207.132924][ T3643] usb 1-1: config 0 has no interface number 0 [ 207.288648][ T8785] loop3: detected capacity change from 0 to 1024 [ 207.307899][ T8789] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1742'. [ 207.370727][ T3643] usb 1-1: New USB device found, idVendor=2639, idProduct=0012, bcdDevice=65.b5 [ 207.372728][ T8785] EXT4-fs (loop3): INFO: recovery required on readonly filesystem [ 207.409283][ T8795] loop4: detected capacity change from 0 to 256 [ 207.409852][ T8795] exfat: Deprecated parameter 'namecase' [ 207.409882][ T8795] exfat: Deprecated parameter 'namecase' [ 207.411427][ T3643] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.411451][ T3643] usb 1-1: Product: syz [ 207.411466][ T3643] usb 1-1: Manufacturer: syz [ 207.411481][ T3643] usb 1-1: SerialNumber: syz [ 207.417126][ T3643] usb 1-1: config 0 descriptor?? [ 207.421113][ T8785] EXT4-fs (loop3): write access will be enabled during recovery [ 207.421333][ T8785] JBD2: no valid journal superblock found [ 207.421352][ T8785] EXT4-fs (loop3): error loading journal [ 207.431736][ T8795] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 207.451876][ T3643] xsens_mt 1-1:0.1: xsens_mt converter detected [ 207.453444][ T3643] usb 1-1: xsens_mt converter now attached to ttyUSB0 [ 207.456646][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 207.456658][ T26] audit: type=1804 audit(1727519540.406:77): pid=8795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1745" name="/newroot/336/file0/file1" dev="loop4" ino=1048712 res=1 errno=0 [ 207.509085][ T8797] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1747'. [ 207.509109][ T8797] tipc: Started in network mode [ 207.509121][ T8797] tipc: Node identity , cluster identity 4711 [ 207.509134][ T8797] tipc: Failed to set node id, please configure manually [ 207.509160][ T8797] tipc: Enabling of bearer rejected, failed to enable media [ 207.637340][ T8801] loop4: detected capacity change from 0 to 256 [ 207.666907][ T8755] udc-core: couldn't find an available UDC or it's busy [ 207.666925][ T8755] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 207.669263][ T8755] udc-core: couldn't find an available UDC or it's busy [ 207.669280][ T8755] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 207.670171][ T21] usb 1-1: USB disconnect, device number 14 [ 207.672896][ T21] xsens_mt ttyUSB0: xsens_mt converter now disconnected from ttyUSB0 [ 207.673250][ T21] xsens_mt 1-1:0.1: device disconnected [ 207.858095][ T8804] loop3: detected capacity change from 0 to 4096 [ 207.879272][ T8806] loop4: detected capacity change from 0 to 4096 [ 207.896233][ T8804] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 208.033703][ T8804] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 208.108739][ T8807] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.166291][ T8804] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 208.205602][ T8804] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 208.277661][ T8804] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 208.340739][ T8804] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 208.384420][ T8804] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 208.413881][ T8817] device gre0 entered promiscuous mode [ 208.419641][ T8804] ntfs: volume version 3.1. [ 208.430157][ T8804] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 208.460899][ T8804] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 208.495673][ T8817] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 208.578300][ T8814] loop1: detected capacity change from 0 to 4096 [ 208.660969][ T8829] loop4: detected capacity change from 0 to 256 [ 208.674454][ T8830] loop2: detected capacity change from 0 to 256 [ 208.767465][ T8829] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 208.796507][ T8830] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x726863a3, utbl_chksum : 0xe619d30d) [ 208.822307][ T8814] ntfs: volume version 3.1. [ 209.217936][ T8848] loop1: detected capacity change from 0 to 2048 [ 209.432959][ T8869] device gre0 entered promiscuous mode [ 209.465269][ T8869] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 209.610717][ T8848] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 209.789248][ T8848] EXT4-fs error (device loop1): ext4_find_dest_de:2113: inode #12: block 9: comm syz.1.1762: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 210.098693][ T8841] loop3: detected capacity change from 0 to 32768 [ 210.268936][ T8841] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 210.268936][ T8841] [ 210.338112][ T8886] loop1: detected capacity change from 0 to 256 [ 210.426252][ T8867] loop4: detected capacity change from 0 to 32768 [ 210.485413][ T8867] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1770 (8867) [ 210.564022][ T8892] loop3: detected capacity change from 0 to 1024 [ 210.580246][ T8867] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 210.607598][ T8886] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x726863a3, utbl_chksum : 0xe619d30d) [ 210.610221][ T8874] loop0: detected capacity change from 0 to 32768 [ 210.656189][ T8867] BTRFS info (device loop4): using free space tree [ 210.663244][ T8867] BTRFS info (device loop4): has skinny extents [ 210.956101][ T8884] loop2: detected capacity change from 0 to 32768 [ 211.017183][ T8867] BTRFS info (device loop4): enabling ssd optimizations [ 211.145072][ T8884] XFS (loop2): Mounting V5 Filesystem [ 211.159089][ T8926] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 211.752506][ T8920] loop3: detected capacity change from 0 to 32768 [ 211.771101][ T8934] loop1: detected capacity change from 0 to 4096 [ 211.822924][ T3643] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 211.850503][ T8920] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1780 (8920) [ 211.859754][ T8934] ntfs: volume version 3.1. [ 211.881842][ T8884] XFS (loop2): Ending clean mount [ 211.928156][ T8920] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 211.956072][ T8920] BTRFS info (device loop3): using free space tree [ 211.971091][ T3568] XFS (loop2): Unmounting Filesystem [ 212.000545][ T8920] BTRFS info (device loop3): has skinny extents [ 212.238033][ T8960] loop1: detected capacity change from 0 to 512 [ 212.256214][ T8920] BTRFS info (device loop3): enabling ssd optimizations [ 212.263686][ T3643] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.274825][ T3643] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.285661][ T3643] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 212.295804][ T3643] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.307583][ T3643] usb 1-1: config 0 descriptor?? [ 212.424415][ T8960] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 212.445957][ T8960] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038 (0x7fffffff) [ 212.488172][ T8960] __quota_error: 36 callbacks suppressed [ 212.488190][ T8960] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 212.516108][ T8960] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 212.526575][ T8960] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.1788: Failed to acquire dquot type 0 [ 212.820104][ T3643] uclogic 0003:5543:0042.002F: unknown main item tag 0x0 [ 212.857685][ T3643] uclogic 0003:5543:0042.002F: unknown main item tag 0x0 [ 212.860821][ T8980] dccp_invalid_packet: pskb_may_pull failed [ 212.875713][ T3643] uclogic 0003:5543:0042.002F: unknown main item tag 0x0 [ 212.885847][ T3643] uclogic 0003:5543:0042.002F: unknown main item tag 0x0 [ 212.935306][ T3643] uclogic 0003:5543:0042.002F: unknown main item tag 0x0 [ 212.966206][ T3643] uclogic 0003:5543:0042.002F: unknown main item tag 0x0 [ 212.994147][ T3643] uclogic 0003:5543:0042.002F: unknown main item tag 0x0 [ 213.035400][ T3643] uclogic 0003:5543:0042.002F: No inputs registered, leaving [ 213.089932][ T3643] uclogic 0003:5543:0042.002F: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.0-1/input0 [ 213.138567][ T3643] usb 1-1: USB disconnect, device number 15 [ 213.697053][ T8978] loop4: detected capacity change from 0 to 32768 [ 213.893878][ T8978] XFS (loop4): Mounting V5 Filesystem [ 213.974960][ T8994] loop2: detected capacity change from 0 to 32768 [ 214.006240][ T9017] loop0: detected capacity change from 0 to 2048 [ 214.027598][ T8989] loop3: detected capacity change from 0 to 32768 [ 214.100549][ T9026] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 214.101768][ T9017] NILFS (loop0): corrupt root inode [ 214.172573][ T8978] XFS (loop4): Ending clean mount [ 214.224720][ T8978] XFS (loop4): Quotacheck needed: Please wait. [ 214.389419][ T9003] loop1: detected capacity change from 0 to 32768 [ 214.428994][ T8978] XFS (loop4): Quotacheck: Done. [ 214.473056][ T9003] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1804 (9003) [ 214.584376][ T3574] XFS (loop4): Unmounting Filesystem [ 214.586941][ T9039] loop0: detected capacity change from 0 to 256 [ 214.622645][ T9003] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 214.666111][ T9003] BTRFS info (device loop1): using free space tree [ 214.698514][ T9003] BTRFS info (device loop1): has skinny extents [ 214.813704][ T9039] FAT-fs (loop0): Directory bread(block 64) failed [ 214.855642][ T9039] FAT-fs (loop0): Directory bread(block 65) failed [ 214.863376][ T9039] FAT-fs (loop0): Directory bread(block 66) failed [ 214.880660][ T9039] FAT-fs (loop0): Directory bread(block 67) failed [ 214.904393][ T9039] FAT-fs (loop0): Directory bread(block 68) failed [ 214.950038][ T9039] FAT-fs (loop0): Directory bread(block 69) failed [ 214.960620][ T9039] FAT-fs (loop0): Directory bread(block 70) failed [ 214.967161][ T9039] FAT-fs (loop0): Directory bread(block 71) failed [ 214.982737][ T9039] FAT-fs (loop0): Directory bread(block 72) failed [ 215.030482][ T9039] FAT-fs (loop0): Directory bread(block 73) failed [ 215.056668][ T9003] BTRFS info (device loop1): enabling ssd optimizations [ 215.233787][ T9039] FAT-fs (loop0): Filesystem has been set read-only [ 215.272198][ T26] audit: type=1800 audit(1727519548.216:79): pid=9039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1811" name="cgroup.controllers" dev="loop0" ino=1048716 res=0 errno=0 [ 215.320192][ T9039] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000656c) [ 215.708006][ T9089] loop3: detected capacity change from 0 to 8192 [ 215.782018][ T9089] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 215.857348][ T9045] loop2: detected capacity change from 0 to 32768 [ 215.933502][ T9045] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 215.976073][ T9045] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 215.996678][ T9094] sp0: Synchronizing with TNC [ 216.014592][ T9045] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 216.058156][ T21] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 216.080443][ T21] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 216.174674][ T21] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 94ms [ 216.185103][ T21] gfs2: fsid=syz:syz.0: jid=0: Done [ 216.202272][ T9045] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 216.378213][ T9108] loop3: detected capacity change from 0 to 8 [ 216.518844][ T9110] loop1: detected capacity change from 0 to 1024 [ 216.548157][ T9108] SQUASHFS error: zlib decompression failed, data probably corrupt [ 216.572257][ T9112] loop2: detected capacity change from 0 to 2048 [ 216.586536][ T9108] SQUASHFS error: Failed to read block 0x13e: -5 [ 216.593324][ T9108] SQUASHFS error: Unable to read metadata cache entry [13c] [ 216.608389][ T9108] SQUASHFS error: Unable to read directory block [13c:26] [ 216.616176][ T4113] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 216.634710][ T9110] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 216.653907][ T9112] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 216.677795][ T9098] loop0: detected capacity change from 0 to 32768 [ 216.686837][ T9110] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a003c018, mo2=0002] [ 216.699113][ T9110] System zones: 0-1, 3-12 [ 216.705285][ T9115] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 216.705799][ T9112] attempt to access beyond end of device [ 216.705799][ T9112] loop2: rw=524288, want=33554432, limit=2048 [ 216.728947][ T9110] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,bsddf,auto_da_alloc=0x0000000000000000,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,acl,debug,,errors=continue. Quota mode: none. [ 216.801825][ T9098] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1830 (9098) [ 216.872006][ T9098] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 216.883985][ T4113] usb 5-1: Using ep0 maxpacket: 16 [ 216.911196][ T9098] BTRFS info (device loop0): using free space tree [ 216.917740][ T9098] BTRFS info (device loop0): has skinny extents [ 216.969147][ T9122] loop2: detected capacity change from 0 to 256 [ 217.000653][ T4113] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.012147][ T4113] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.037816][ T9122] FAT-fs (loop2): Directory bread(block 64) failed [ 217.074269][ T4113] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 217.110604][ T9122] FAT-fs (loop2): Directory bread(block 65) failed [ 217.117270][ T9122] FAT-fs (loop2): Directory bread(block 66) failed [ 217.132176][ T9128] loop1: detected capacity change from 0 to 2048 [ 217.138705][ T4113] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 217.158426][ T9122] FAT-fs (loop2): Directory bread(block 67) failed [ 217.165313][ T4113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.174276][ T9122] FAT-fs (loop2): Directory bread(block 68) failed [ 217.188390][ T4113] usb 5-1: config 0 descriptor?? [ 217.190639][ T9122] FAT-fs (loop2): Directory bread(block 69) failed [ 217.209889][ T9098] BTRFS info (device loop0): enabling ssd optimizations [ 217.217145][ T9122] FAT-fs (loop2): Directory bread(block 70) failed [ 217.230063][ T9122] FAT-fs (loop2): Directory bread(block 71) failed [ 217.239736][ T9122] FAT-fs (loop2): Directory bread(block 72) failed [ 217.266605][ T9128] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 217.319921][ T9122] FAT-fs (loop2): Directory bread(block 73) failed [ 217.334391][ T9118] loop3: detected capacity change from 0 to 32768 [ 217.378005][ T9128] attempt to access beyond end of device [ 217.378005][ T9128] loop1: rw=524288, want=33554432, limit=2048 [ 217.393469][ T9118] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.1828 (9118) [ 217.401537][ T9144] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.452338][ T9118] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1828 (9118) [ 217.495385][ T9122] FAT-fs (loop2): Filesystem has been set read-only [ 217.520517][ T9118] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 217.540471][ T9118] BTRFS info (device loop3): using free space tree [ 217.547417][ T26] audit: type=1800 audit(1727519550.496:80): pid=9122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1831" name="cgroup.controllers" dev="loop2" ino=1048718 res=0 errno=0 [ 217.579200][ T9122] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000656c) [ 217.587265][ T9118] BTRFS info (device loop3): has skinny extents [ 217.695342][ T4113] microsoft 0003:045E:07DA.0030: ignoring exceeding usage max [ 217.725926][ T4113] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0030/input/input47 [ 217.780227][ T4113] microsoft 0003:045E:07DA.0030: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 218.010627][ T3778] usb 5-1: USB disconnect, device number 18 [ 218.051667][ T9118] BTRFS error (device loop3): open_ctree failed [ 218.218949][ T9175] loop2: detected capacity change from 0 to 256 [ 218.352533][ T9181] futex_wake_op: syz.1.1839 tries to shift op by 32; fix this program [ 218.361651][ T9175] FAT-fs (loop2): Directory bread(block 64) failed [ 218.373960][ T9175] FAT-fs (loop2): Directory bread(block 65) failed [ 218.394159][ T9175] FAT-fs (loop2): Directory bread(block 66) failed [ 218.413615][ T9175] FAT-fs (loop2): Directory bread(block 67) failed [ 218.439695][ T9175] FAT-fs (loop2): Directory bread(block 68) failed [ 218.443582][ T9187] loop3: detected capacity change from 0 to 256 [ 218.477295][ T9175] FAT-fs (loop2): Directory bread(block 69) failed [ 218.515626][ T9175] FAT-fs (loop2): Directory bread(block 70) failed [ 218.537046][ T9175] FAT-fs (loop2): Directory bread(block 71) failed [ 218.551818][ T9175] FAT-fs (loop2): Directory bread(block 72) failed [ 218.559098][ T9195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1844'. [ 218.569381][ T9175] FAT-fs (loop2): Directory bread(block 73) failed [ 218.722675][ T9202] loop4: detected capacity change from 0 to 1024 [ 218.742009][ T9206] loop1: detected capacity change from 0 to 256 [ 218.858666][ T9215] CIFS: VFS: Malformed UNC in devname [ 218.989943][ T9221] loop2: detected capacity change from 0 to 256 [ 219.085834][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1861'. [ 219.191658][ T9234] loop1: detected capacity change from 0 to 128 [ 219.202825][ T3770] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 219.228119][ T3770] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 219.266052][ T9234] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 219.300500][ T9169] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 219.390791][ T9244] loop2: detected capacity change from 0 to 1024 [ 219.580329][ T9169] usb 1-1: Using ep0 maxpacket: 16 [ 219.710792][ T9224] loop3: detected capacity change from 0 to 32768 [ 219.721164][ T9169] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.742269][ T9169] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.773750][ T9169] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 219.774908][ T9224] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.1860 (9224) [ 219.815707][ T9169] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 219.845596][ T9169] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.907914][ T9224] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 219.922669][ T9169] usb 1-1: config 0 descriptor?? [ 219.942684][ T9224] BTRFS info (device loop3): force zlib compression, level 3 [ 219.973023][ T9224] BTRFS info (device loop3): max_inline at 4096 [ 219.979320][ T9224] BTRFS info (device loop3): using free space tree [ 220.040829][ T9224] BTRFS info (device loop3): has skinny extents [ 220.275264][ T9288] loop2: detected capacity change from 0 to 64 [ 220.359848][ T9224] BTRFS info (device loop3): enabling ssd optimizations [ 220.392967][ T9169] microsoft 0003:045E:07DA.0032: ignoring exceeding usage max [ 220.400676][ T26] audit: type=1800 audit(1727519553.346:81): pid=9224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1860" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 220.453196][ T9169] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0032/input/input48 [ 220.533955][ T9169] microsoft 0003:045E:07DA.0032: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 220.613692][ T9296] loop2: detected capacity change from 0 to 512 [ 220.706257][ T9256] loop4: detected capacity change from 0 to 32768 [ 220.720106][ T9169] usb 1-1: USB disconnect, device number 16 [ 220.720594][ T9296] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 220.766276][ T9301] loop3: detected capacity change from 0 to 1024 [ 220.799416][ T9256] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 scanned by syz.4.1874 (9256) [ 220.834510][ T9296] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1882: inode #1: comm syz.2.1882: iget: illegal inode # [ 220.887480][ T9301] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 220.890109][ T9296] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1882: error while reading EA inode 1 err=-117 [ 220.902823][ T9301] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 220.917227][ T9301] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 220.948808][ T9296] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1882: inode #1: comm syz.2.1882: iget: illegal inode # [ 220.984219][ T9296] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1882: error while reading EA inode 1 err=-117 [ 221.001046][ T9301] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,data_err=abort,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 221.048135][ T9296] EXT4-fs (loop2): 1 orphan inode deleted [ 221.092458][ T9296] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,nombcache,mblk_io_submit,,errors=continue. Quota mode: none. [ 221.120495][ T9171] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 221.129681][ T9256] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 221.164367][ T9256] BTRFS info (device loop4): using free space tree [ 221.175664][ T9256] BTRFS info (device loop4): has skinny extents [ 221.213051][ T9296] EXT4-fs error (device loop2): ext4_lookup:1856: inode #15: comm syz.2.1882: unexpected EA_INODE flag [ 221.334184][ T9329] loop3: detected capacity change from 0 to 164 [ 221.440518][ T9171] usb 2-1: Using ep0 maxpacket: 32 [ 221.455456][ T9329] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 221.465072][ T9256] BTRFS info (device loop4): enabling ssd optimizations [ 221.572992][ T9171] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 221.582298][ T9171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.681714][ T9171] usb 2-1: config 0 descriptor?? [ 221.940599][ T9171] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 221.961880][ T9171] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 222.025028][ T9347] loop4: detected capacity change from 0 to 8 [ 222.032334][ T9171] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 222.039491][ T9171] usb 2-1: media controller created [ 222.043408][ T9349] binder: 9348:9349 unknown command 60 [ 222.052543][ T9346] loop3: detected capacity change from 0 to 256 [ 222.069809][ T9349] binder: 9348:9349 ioctl c0306201 20000080 returned -22 [ 222.095474][ T9171] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 222.166293][ T9346] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 222.191337][ T9347] SQUASHFS error: zlib decompression failed, data probably corrupt [ 222.222601][ T9347] SQUASHFS error: Failed to read block 0x13e: -5 [ 222.228958][ T9347] SQUASHFS error: Unable to read metadata cache entry [13c] [ 222.316782][ T9347] SQUASHFS error: Unable to read directory block [13c:26] [ 222.383869][ T9358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1898'. [ 222.413535][ T9171] az6027: usb out operation failed. (-71) [ 222.419321][ T9171] stb0899_attach: Driver disabled by Kconfig [ 222.456554][ T9326] loop0: detected capacity change from 0 to 32768 [ 222.475544][ T9171] az6027: no front-end attached [ 222.475544][ T9171] [ 222.490879][ T9365] loop4: detected capacity change from 0 to 256 [ 222.512683][ T9171] az6027: usb out operation failed. (-71) [ 222.520132][ T9171] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 222.528736][ T9171] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input49 [ 222.550157][ T9171] dvb-usb: schedule remote query interval to 400 msecs. [ 222.554723][ T9326] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 222.557765][ T9365] exfat: Deprecated parameter 'namecase' [ 222.571223][ T9326] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 222.586457][ T9171] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 222.599912][ T9326] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 222.609354][ T9365] exfat: Deprecated parameter 'utf8' [ 222.628921][ T9171] usb 2-1: USB disconnect, device number 25 [ 222.682602][ T9168] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 222.727994][ T9168] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 222.748105][ T9365] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 222.875287][ T9168] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 147ms [ 222.896284][ T9379] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 222.902491][ T9375] loop2: detected capacity change from 0 to 4096 [ 222.907126][ T9168] gfs2: fsid=syz:syz.0: jid=0: Done [ 222.918264][ T9326] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 222.949236][ T9379] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=io+mem:owns=io+mem [ 222.977376][ T9375] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 223.037375][ T9171] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 223.317174][ T9402] loop4: detected capacity change from 0 to 256 [ 223.343032][ T9404] loop2: detected capacity change from 0 to 64 [ 223.543114][ T9409] loop0: detected capacity change from 0 to 1024 [ 223.548241][ T9412] loop2: detected capacity change from 0 to 1024 [ 223.598451][ T9409] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 223.613251][ T9409] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 223.686965][ T9412] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 223.726297][ T9409] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000001,barrier,nojournal_checksum,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,dioread_nolock,nodelalloc,acl,auto_da_alloc=0x0000000000000343,,errors=continue. Quota mode: none. [ 223.803443][ T9412] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a003c018, mo2=0002] [ 223.820391][ T9412] System zones: 0-1, 3-12 [ 223.844667][ T9412] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,bsddf,auto_da_alloc=0x0000000000000000,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,acl,debug,,errors=continue. Quota mode: none. [ 223.885788][ T9409] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #11: comm syz.0.1906: missing EA_INODE flag [ 223.950844][ T9168] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 223.971050][ T9409] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1906: error while reading EA inode 11 err=-117 [ 224.037357][ T9433] loop1: detected capacity change from 0 to 4096 [ 224.100590][ T9433] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 224.230496][ T9168] usb 5-1: Using ep0 maxpacket: 32 [ 224.366173][ T9168] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 224.375469][ T9441] CIFS: VFS: Malformed UNC in devname [ 224.384491][ T9443] loop2: detected capacity change from 0 to 256 [ 224.389804][ T9168] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.440744][ T9168] usb 5-1: config 0 descriptor?? [ 224.689322][ T9453] loop2: detected capacity change from 0 to 512 [ 224.710523][ T9168] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 224.736098][ T9168] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 224.781747][ T9168] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 224.799383][ T9168] usb 5-1: media controller created [ 224.799713][ T9453] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 224.825745][ T9168] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.842459][ T9431] loop3: detected capacity change from 0 to 32768 [ 224.873764][ T9431] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 224.886152][ T9431] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 224.905311][ T9453] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #15: comm syz.2.1930: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 224.936691][ T9431] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 6ms [ 224.949997][ T9459] loop0: detected capacity change from 0 to 64 [ 224.992154][ T9453] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1930: couldn't read orphan inode 15 (err -117) [ 224.997974][ T3778] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 225.022518][ T3778] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 225.029897][ T9459] hfs: request for non-existent node 16777216 in B*Tree [ 225.043187][ T9453] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 225.064325][ T9459] hfs: request for non-existent node 16777216 in B*Tree [ 225.078442][ T9453] ext2 filesystem being mounted at /418/file2 supports timestamps until 2038 (0x7fffffff) [ 225.090249][ T9447] loop1: detected capacity change from 0 to 32768 [ 225.140508][ T9168] az6027: usb out operation failed. (-71) [ 225.146311][ T9168] stb0899_attach: Driver disabled by Kconfig [ 225.160335][ T9168] az6027: no front-end attached [ 225.160335][ T9168] [ 225.163011][ T3778] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 140ms [ 225.190372][ T9168] az6027: usb out operation failed. (-71) [ 225.193229][ T3778] gfs2: fsid=syz:syz.0: jid=0: Done [ 225.197255][ T9168] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 225.204355][ T9431] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 225.237018][ T9168] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input50 [ 225.329160][ T9168] dvb-usb: schedule remote query interval to 400 msecs. [ 225.336429][ T9168] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 225.355567][ T9447] XFS (loop1): Mounting V5 Filesystem [ 225.397003][ T9168] usb 5-1: USB disconnect, device number 19 [ 225.509302][ T9473] loop2: detected capacity change from 0 to 16 [ 225.515825][ T9447] XFS (loop1): Ending clean mount [ 225.537949][ T9168] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 225.552515][ T9473] erofs: (device loop2): mounted with root inode @ nid 36. [ 225.655101][ T3572] XFS (loop1): Unmounting Filesystem [ 225.902256][ T9480] loop2: detected capacity change from 0 to 2048 [ 225.909366][ T9482] loop4: detected capacity change from 0 to 1024 [ 225.982474][ T9482] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 226.017794][ T9480] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 226.071422][ T9480] attempt to access beyond end of device [ 226.071422][ T9480] loop2: rw=524288, want=33554432, limit=2048 [ 226.083566][ T9484] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 226.085821][ T9482] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a003c018, mo2=0002] [ 226.115175][ T9482] System zones: 0-1, 3-12 [ 226.122053][ T9475] loop0: detected capacity change from 0 to 32768 [ 226.125077][ T9482] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,bsddf,auto_da_alloc=0x0000000000000000,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,acl,debug,,errors=continue. Quota mode: none. [ 226.214971][ T9475] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1938 (9475) [ 226.220855][ T9487] loop1: detected capacity change from 0 to 8192 [ 226.274686][ T9475] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 226.291539][ T9487] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 226.307886][ T9487] REISERFS (device loop1): using ordered data mode [ 226.311427][ T9475] BTRFS info (device loop0): using free space tree [ 226.336661][ T9487] reiserfs: using flush barriers [ 226.350579][ T9475] BTRFS info (device loop0): has skinny extents [ 226.386446][ T9487] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 226.476178][ T9487] REISERFS (device loop1): checking transaction log (loop1) [ 226.522366][ T9487] REISERFS (device loop1): Using r5 hash to sort names [ 226.530529][ T3778] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 226.535308][ T9487] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 226.571274][ T9487] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 226.602978][ T9475] BTRFS info (device loop0): enabling ssd optimizations [ 226.730408][ T9168] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 226.777724][ T3778] usb 3-1: Using ep0 maxpacket: 16 [ 226.900553][ T3778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.924707][ T3778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.954421][ T3778] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 226.986192][ T3778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.008712][ T9168] usb 4-1: Using ep0 maxpacket: 16 [ 227.030236][ T3778] usb 3-1: config 0 descriptor?? [ 227.214735][ T9168] usb 4-1: unable to get BOS descriptor or descriptor too short [ 227.321546][ T9168] usb 4-1: config 7 has an invalid interface number: 6 but max is 0 [ 227.346649][ T9168] usb 4-1: config 7 has no interface number 0 [ 227.361141][ T9168] usb 4-1: config 7 interface 6 has no altsetting 0 [ 227.553670][ T3778] uclogic 0003:2179:0053.0033: item fetching failed at offset 2/5 [ 227.576824][ T9168] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f7.48 [ 227.584447][ T3778] uclogic 0003:2179:0053.0033: parse failed [ 227.591899][ T9168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.606533][ T3778] uclogic: probe of 0003:2179:0053.0033 failed with error -22 [ 227.630349][ T9168] usb 4-1: Product: syz [ 227.640564][ T9168] usb 4-1: Manufacturer: syz [ 227.650352][ T9168] usb 4-1: SerialNumber: syz [ 227.654690][ T9528] loop4: detected capacity change from 0 to 32768 [ 227.677633][ T9546] loop1: detected capacity change from 0 to 2048 [ 227.758800][ T9546] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 227.777864][ T3578] usb 3-1: USB disconnect, device number 20 [ 228.029843][ T9543] loop0: detected capacity change from 0 to 32768 [ 228.062083][ T9168] RobotFuzz Open Source InterFace, OSIF 4-1:7.6: failure sending bit rate [ 228.076558][ T9168] RobotFuzz Open Source InterFace, OSIF: probe of 4-1:7.6 failed with error -71 [ 228.119016][ T9168] usb 4-1: USB disconnect, device number 19 [ 228.130683][ T9543] JBD2: Ignoring recovery information on journal [ 228.232622][ T9543] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 228.395238][ T6558] ocfs2: Unmounting device (7,0) on (node local) [ 228.479354][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1968'. [ 228.639511][ T9556] loop1: detected capacity change from 0 to 40427 [ 228.687119][ T9573] loop0: detected capacity change from 0 to 512 [ 228.745716][ T9556] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 228.754444][ T9573] EXT4-fs (loop0): Test dummy encryption mode enabled [ 228.761499][ T9556] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 228.805416][ T9556] F2FS-fs (loop1): invalid crc value [ 228.821962][ T9573] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:163: inode #12: comm syz.0.1967: inline data xattr refers to an external xattr inode [ 228.890901][ T9573] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1967: couldn't read orphan inode 12 (err -117) [ 228.918965][ T9556] F2FS-fs (loop1): Found nat_bits in checkpoint [ 228.921513][ T9595] binder: 9594:9595 unknown command 60 [ 228.942068][ T9573] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,grpjquota=,resuid=0x0000000000000000,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000000409e,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 228.984262][ T9595] binder: 9594:9595 ioctl c0306201 20000080 returned -22 [ 229.008791][ T9556] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 229.017734][ T9556] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 229.080519][ T9556] attempt to access beyond end of device [ 229.080519][ T9556] loop1: rw=0, want=45072, limit=40427 [ 229.118847][ T9573] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.1967: Directory hole found for htree leaf block 0 [ 229.200405][ T2118] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 229.279187][ T9605] loop3: detected capacity change from 0 to 2048 [ 229.296815][ T3650] attempt to access beyond end of device [ 229.296815][ T3650] loop1: rw=2049, want=40968, limit=40427 [ 229.389771][ T9609] loop0: detected capacity change from 0 to 128 [ 229.396488][ T9605] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 229.460345][ T2118] usb 5-1: Using ep0 maxpacket: 16 [ 229.461116][ T9609] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 229.476759][ T9609] ext4 filesystem being mounted at /175/mnt supports timestamps until 2038 (0x7fffffff) [ 229.478062][ T9610] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 229.498882][ T9605] attempt to access beyond end of device [ 229.498882][ T9605] loop3: rw=524288, want=33554432, limit=2048 [ 229.590877][ T2118] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 229.598222][ T2118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 229.606646][ T9613] loop1: detected capacity change from 0 to 1024 [ 229.664214][ T2118] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 229.700480][ T2118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.710516][ T2118] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 229.714725][ T9613] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 229.764168][ T9603] loop2: detected capacity change from 0 to 32768 [ 229.770926][ T9613] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038 (0x7fffffff) [ 229.794849][ T9617] futex_wake_op: syz.3.1987 tries to shift op by 32; fix this program [ 229.807309][ T9613] ------------[ cut here ]------------ [ 229.812781][ T9613] WARNING: CPU: 1 PID: 9613 at kernel/locking/lockdep.c:896 look_up_lock_class+0xa0/0x120 [ 229.822669][ T9613] Modules linked in: [ 229.826552][ T9613] CPU: 1 PID: 9613 Comm: syz.1.1985 Not tainted 5.15.167-syzkaller #0 [ 229.834681][ T9613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 229.844720][ T9613] RIP: 0010:look_up_lock_class+0xa0/0x120 [ 229.850432][ T9613] Code: 00 48 85 db 74 4c 4c 39 7b 40 74 05 48 8b 1b eb eb 48 8b 83 b0 00 00 00 49 3b 46 18 74 36 48 c7 c0 c0 1f 2d 90 49 39 06 74 2a <0f> 0b eb 26 e8 77 e1 d1 f9 48 c7 c7 00 4c 8b 8a 89 de e8 d9 d0 fe [ 229.870023][ T9613] RSP: 0018:ffffc900032976b0 EFLAGS: 00010006 [ 229.876104][ T9613] RAX: ffffffff902d1fc0 RBX: ffffffff901b8fc0 RCX: ffff888050120000 [ 229.884064][ T9613] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff888059c1a060 [ 229.892021][ T9613] RBP: ffffc900032977b0 R08: 0000000000000001 R09: 0000000000000000 [ 229.899978][ T9613] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 229.907930][ T9613] R13: 1ffff92000652ee4 R14: ffff888059c1a060 R15: ffffffff96990c81 [ 229.915885][ T9613] FS: 00007fae923a76c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 229.924795][ T9613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.931468][ T9613] CR2: 0000001b32e07ff8 CR3: 000000005ac59000 CR4: 00000000003506e0 [ 229.939433][ T9613] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 229.947394][ T9613] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 229.955354][ T9613] Call Trace: [ 229.958616][ T9613] [ 229.961534][ T9613] ? __warn+0x15b/0x300 [ 229.965680][ T9613] ? look_up_lock_class+0xa0/0x120 [ 229.970772][ T9613] ? report_bug+0x1b7/0x2e0 [ 229.975262][ T9613] ? handle_bug+0x3d/0x70 [ 229.979570][ T9613] ? exc_invalid_op+0x16/0x40 [ 229.984225][ T9613] ? asm_exc_invalid_op+0x16/0x20 [ 229.989234][ T9613] ? look_up_lock_class+0xa0/0x120 [ 229.994413][ T9613] register_lock_class+0x100/0x9a0 [ 229.999685][ T9613] ? is_dynamic_key+0x1f0/0x1f0 [ 230.004516][ T9613] ? is_dynamic_key+0x1f0/0x1f0 [ 230.009428][ T9613] ? mark_lock+0x98/0x340 [ 230.013825][ T9613] __lock_acquire+0xd7/0x1ff0 [ 230.018489][ T9613] lock_acquire+0x1db/0x4f0 [ 230.022971][ T9613] ? ext4_ioctl+0x3dec/0x5b80 [ 230.027635][ T9613] ? read_lock_is_recursive+0x10/0x10 [ 230.032985][ T9613] ? __might_sleep+0xc0/0xc0 [ 230.037552][ T9613] ? rwsem_write_trylock+0x166/0x210 [ 230.042818][ T9613] ? clear_nonspinnable+0x60/0x60 [ 230.047827][ T9613] down_write_nested+0x3b/0x60 [ 230.052569][ T9613] ? ext4_ioctl+0x3dec/0x5b80 [ 230.057226][ T9613] ext4_ioctl+0x3dec/0x5b80 [ 230.061712][ T9613] ? do_vfs_ioctl+0x1b66/0x2b70 [ 230.066545][ T9613] ? ext4_fileattr_set+0x1750/0x1750 [ 230.071809][ T9613] ? __x64_compat_sys_ioctl+0x80/0x80 [ 230.077160][ T9613] ? __lock_acquire+0x1ff0/0x1ff0 [ 230.082167][ T9613] ? slab_free_freelist_hook+0xdd/0x160 [ 230.087713][ T9613] ? tomoyo_path_number_perm+0x648/0x810 [ 230.093325][ T9613] ? kfree+0xf1/0x270 [ 230.097288][ T9613] ? tomoyo_path_number_perm+0x6ab/0x810 [ 230.102905][ T9613] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 230.108359][ T9613] ? __fget_files+0x413/0x480 [ 230.113018][ T9613] ? bpf_lsm_file_ioctl+0x5/0x10 [ 230.117934][ T9613] ? security_file_ioctl+0x7d/0xa0 [ 230.123039][ T9613] ? ext4_fileattr_set+0x1750/0x1750 [ 230.128326][ T9613] __se_sys_ioctl+0xf1/0x160 [ 230.132905][ T9613] do_syscall_64+0x3b/0xb0 [ 230.137308][ T9613] ? clear_bhb_loop+0x15/0x70 [ 230.141971][ T9613] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 230.147853][ T9613] RIP: 0033:0x7fae93f2eff9 [ 230.152255][ T9613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.171839][ T9613] RSP: 002b:00007fae923a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.180232][ T9613] RAX: ffffffffffffffda RBX: 00007fae940e6f80 RCX: 00007fae93f2eff9 [ 230.188184][ T9613] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000004 [ 230.196151][ T9613] RBP: 00007fae93fa1296 R08: 0000000000000000 R09: 0000000000000000 [ 230.204101][ T9613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.212049][ T9613] R13: 0000000000000000 R14: 00007fae940e6f80 R15: 00007ffd8ac9e178 [ 230.220007][ T9613] [ 230.223019][ T9613] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 230.230277][ T9613] CPU: 1 PID: 9613 Comm: syz.1.1985 Not tainted 5.15.167-syzkaller #0 [ 230.238416][ T9613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 230.248447][ T9613] Call Trace: [ 230.251707][ T9613] [ 230.254621][ T9613] dump_stack_lvl+0x1e3/0x2d0 [ 230.259282][ T9613] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 230.264901][ T9613] ? panic+0x860/0x860 [ 230.268963][ T9613] ? lock_is_held_type+0x140/0x180 [ 230.274056][ T9613] ? lock_is_held_type+0x140/0x180 [ 230.279155][ T9613] panic+0x318/0x860 [ 230.283041][ T9613] ? __warn+0x16a/0x300 [ 230.287184][ T9613] ? fb_is_primary_device+0xd0/0xd0 [ 230.292367][ T9613] ? look_up_lock_class+0xa0/0x120 [ 230.297459][ T9613] __warn+0x2b2/0x300 [ 230.301421][ T9613] ? look_up_lock_class+0xa0/0x120 [ 230.306511][ T9613] report_bug+0x1b7/0x2e0 [ 230.310827][ T9613] handle_bug+0x3d/0x70 [ 230.314963][ T9613] exc_invalid_op+0x16/0x40 [ 230.319531][ T9613] asm_exc_invalid_op+0x16/0x20 [ 230.324362][ T9613] RIP: 0010:look_up_lock_class+0xa0/0x120 [ 230.330061][ T9613] Code: 00 48 85 db 74 4c 4c 39 7b 40 74 05 48 8b 1b eb eb 48 8b 83 b0 00 00 00 49 3b 46 18 74 36 48 c7 c0 c0 1f 2d 90 49 39 06 74 2a <0f> 0b eb 26 e8 77 e1 d1 f9 48 c7 c7 00 4c 8b 8a 89 de e8 d9 d0 fe [ 230.349645][ T9613] RSP: 0018:ffffc900032976b0 EFLAGS: 00010006 [ 230.355691][ T9613] RAX: ffffffff902d1fc0 RBX: ffffffff901b8fc0 RCX: ffff888050120000 [ 230.363645][ T9613] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff888059c1a060 [ 230.371595][ T9613] RBP: ffffc900032977b0 R08: 0000000000000001 R09: 0000000000000000 [ 230.379544][ T9613] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 230.387495][ T9613] R13: 1ffff92000652ee4 R14: ffff888059c1a060 R15: ffffffff96990c81 [ 230.395453][ T9613] register_lock_class+0x100/0x9a0 [ 230.400549][ T9613] ? is_dynamic_key+0x1f0/0x1f0 [ 230.405379][ T9613] ? is_dynamic_key+0x1f0/0x1f0 [ 230.410206][ T9613] ? mark_lock+0x98/0x340 [ 230.414514][ T9613] __lock_acquire+0xd7/0x1ff0 [ 230.419173][ T9613] lock_acquire+0x1db/0x4f0 [ 230.423652][ T9613] ? ext4_ioctl+0x3dec/0x5b80 [ 230.428310][ T9613] ? read_lock_is_recursive+0x10/0x10 [ 230.433658][ T9613] ? __might_sleep+0xc0/0xc0 [ 230.438224][ T9613] ? rwsem_write_trylock+0x166/0x210 [ 230.443490][ T9613] ? clear_nonspinnable+0x60/0x60 [ 230.448501][ T9613] down_write_nested+0x3b/0x60 [ 230.453243][ T9613] ? ext4_ioctl+0x3dec/0x5b80 [ 230.457899][ T9613] ext4_ioctl+0x3dec/0x5b80 [ 230.462385][ T9613] ? do_vfs_ioctl+0x1b66/0x2b70 [ 230.467215][ T9613] ? ext4_fileattr_set+0x1750/0x1750 [ 230.472479][ T9613] ? __x64_compat_sys_ioctl+0x80/0x80 [ 230.477872][ T9613] ? __lock_acquire+0x1ff0/0x1ff0 [ 230.482876][ T9613] ? slab_free_freelist_hook+0xdd/0x160 [ 230.488403][ T9613] ? tomoyo_path_number_perm+0x648/0x810 [ 230.494016][ T9613] ? kfree+0xf1/0x270 [ 230.497981][ T9613] ? tomoyo_path_number_perm+0x6ab/0x810 [ 230.503683][ T9613] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 230.509227][ T9613] ? __fget_files+0x413/0x480 [ 230.513884][ T9613] ? bpf_lsm_file_ioctl+0x5/0x10 [ 230.518804][ T9613] ? security_file_ioctl+0x7d/0xa0 [ 230.524070][ T9613] ? ext4_fileattr_set+0x1750/0x1750 [ 230.529341][ T9613] __se_sys_ioctl+0xf1/0x160 [ 230.533912][ T9613] do_syscall_64+0x3b/0xb0 [ 230.538316][ T9613] ? clear_bhb_loop+0x15/0x70 [ 230.542970][ T9613] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 230.548850][ T9613] RIP: 0033:0x7fae93f2eff9 [ 230.553251][ T9613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.572834][ T9613] RSP: 002b:00007fae923a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.581229][ T9613] RAX: ffffffffffffffda RBX: 00007fae940e6f80 RCX: 00007fae93f2eff9 [ 230.589185][ T9613] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000004 [ 230.597133][ T9613] RBP: 00007fae93fa1296 R08: 0000000000000000 R09: 0000000000000000 [ 230.605171][ T9613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.613119][ T9613] R13: 0000000000000000 R14: 00007fae940e6f80 R15: 00007ffd8ac9e178 [ 230.621074][ T9613] [ 230.624356][ T9613] Kernel Offset: disabled [ 230.628691][ T9613] Rebooting in 86400 seconds..