last executing test programs: 1m53.592390594s ago: executing program 2 (id=438): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) close_range(r0, 0xffffffffffffffff, 0x0) 1m53.262851869s ago: executing program 2 (id=441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20008015}, 0x4040) 1m53.002099723s ago: executing program 2 (id=444): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x1a00040, &(0x7f00000005c0)={[{@iocharset={'iocharset', 0x3d, 'cp737'}}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@shortname_winnt}, {@utf8}, {@fat=@check_strict}, {@shortname_lower}, {@utf8no}, {@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffffb3}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}]}, 0x3, 0x350, &(0x7f00000000c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 1m51.994941672s ago: executing program 2 (id=449): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') 1m51.82570498s ago: executing program 2 (id=450): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x204a869, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000002240), 0x0, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 1m51.205382113s ago: executing program 2 (id=453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x84, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x56, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @val={0x25, 0x3, {0x1, 0xab, 0x3}}, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x84}}, 0x20000014) 1m50.738769732s ago: executing program 32 (id=453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x84, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x56, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @val={0x25, 0x3, {0x1, 0xab, 0x3}}, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x84}}, 0x20000014) 7.109232523s ago: executing program 1 (id=1128): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000180)="aa581ff83dac4a636cb9b825c4009d215634b12c4ce8a4e1d32e2e4b6e56cfa1ba584ba7d17f3a6a991d96384d307c768c81c980e56f316d71e106acf3d5b8711479f234fa73a5a6d7b4b4f6ad2b48b5117919f03f0438c805edae16d30a2dc7351754cdae8ef35f9d152a4f51d93eacbc94ab1fa31fbc0df22f29a25a0754255ff1b369504b8158fd41eb58c9b789edb7e9e8cac5c0cbe83f7a9afdc2895fe3ca0aba8976bc0c43a8ed884c94a007175fe93b3d40756207ca9e75809c1513cbabae29255d2f36bd756c163cceacd0aae369a4952c098f2d453da1d8ab", 0xdd}], 0x2}, 0x0) close(r0) socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local}) 6.866465143s ago: executing program 1 (id=1130): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'virt_wifi0\x00', @random="060000000010"}) syz_emit_ethernet(0x1c1, 0x0, 0x0) 6.508550893s ago: executing program 1 (id=1131): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) clock_gettime(0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)=""/242, 0xf2}], 0x1, &(0x7f0000000380)=""/104, 0x68}, 0x8}], 0x1, 0x40010000, 0x0) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) 5.431285303s ago: executing program 1 (id=1139): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f00000001c0)={[{@errors_remount}, {@nouser_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@i_version}, {@user_xattr}, {@quota}]}, 0x3, 0x463, &(0x7f00000006c0)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 5.045908628s ago: executing program 3 (id=1143): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x42) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee01, 0x1000) 4.963131412s ago: executing program 1 (id=1144): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000000)={[{@space_cache_v1}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x138) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./mnt\x00') copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xf000, 0x863, 0x0) 4.821156005s ago: executing program 3 (id=1145): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x840, &(0x7f0000000480)={[{@nolazytime}, {@uqnoenforce}, {@quota}, {@filestreams}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@largeio}]}, 0x4, 0x968d, &(0x7f000001c300)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pwrite64(r0, &(0x7f0000000280)='+', 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) io_setup(0x251, 0x0) 4.717453393s ago: executing program 4 (id=1146): r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f0000000440)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861720300000069736f383835392d312c6769643d00000000000000", @ANYRESHEX=r2, @ANYRESHEX, @ANYBLOB="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", @ANYRES64], 0x91, 0x1505, &(0x7f0000004200)="$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") mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) 4.393471117s ago: executing program 4 (id=1147): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="0500030001"], 0x28}}, 0x80) 4.25210756s ago: executing program 4 (id=1148): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000180)=""/126) 3.323919246s ago: executing program 5 (id=1149): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) clock_gettime(0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)=""/242, 0xf2}], 0x1, &(0x7f0000000380)=""/104, 0x68}, 0x8}], 0x1, 0x40010000, 0x0) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) 2.650575448s ago: executing program 3 (id=1151): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xd) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x30000011}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x1a) 2.181805236s ago: executing program 1 (id=1152): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmsg$can_bcm(r0, &(0x7f00000006c0)={&(0x7f00000002c0)=@alg, 0x80, 0x0, 0x0, &(0x7f0000000580)=""/245, 0xf5}, 0x2040) 2.076813184s ago: executing program 4 (id=1153): syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x128, 0x148, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x7f, 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x4b, 0x1ff, 0x6, 0xb0e2, 0x80ffff, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0x0, 0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x80}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x7, 0x0, 0x41, 0x0, 0xb10f, 0x1000, 0x6, 0x3, 0x20}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x7f, 0x4, 0x1, '\x00', 'syz0\x00', {0xa6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) 1.664517442s ago: executing program 0 (id=1154): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t', 0x5) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x1, 0x3, 0x200, 0x835, 0x7ff, 0x92, 0xd25, 0x7fffffff, r2}, &(0x7f00000005c0)=0x20) 1.625002369s ago: executing program 4 (id=1155): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000078850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 1.377173711s ago: executing program 4 (id=1156): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@err_ro}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) llistxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 1.31815206s ago: executing program 5 (id=1157): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 1.087176799s ago: executing program 3 (id=1158): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) capset(&(0x7f00000003c0)={0x19980330}, &(0x7f0000000400)={0x0, 0x2, 0x2, 0x7, 0x3, 0x7fff}) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) 1.047486975s ago: executing program 5 (id=1159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x54, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4064}, 0x4800) 917.415487ms ago: executing program 0 (id=1160): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000300)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'rr\x00', 0x7, 0x660f537c, 0x72}, 0x2c) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 869.647285ms ago: executing program 5 (id=1161): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x2}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 848.050579ms ago: executing program 3 (id=1162): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="8ce2ad4d4f95e087a7846d3f81304bd1958570440101080a0c6614c63c282429", 0x20, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 701.391123ms ago: executing program 0 (id=1163): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x29, &(0x7f00000000c0)={0x1, 0x80000000, 0xd}) 700.995174ms ago: executing program 3 (id=1164): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 558.483657ms ago: executing program 0 (id=1165): write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x31) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0'], 0x6a) 500.062417ms ago: executing program 5 (id=1166): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@inlinecrypt}]}, 0x1, 0x5a2, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x42041, 0x12c) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) truncate(&(0x7f0000000080)='./file1\x00', 0xf000) 321.409867ms ago: executing program 0 (id=1167): r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000001c0)='.\x00', 0x4000423) r1 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x3, 0x1, 0x5, 0xa, 0x3, 0x1, {0x0, 0x17d, 0x8, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0x2, 0xc000, 0x20000000, 0x0, 0x0, 0x3ff, 0xb101}}, {0x0, 0x1e}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080)=0x2, 0x7f03) 558.67µs ago: executing program 0 (id=1168): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x391, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random}) 0s ago: executing program 5 (id=1169): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x78, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x203}, 0x1c) kernel console output (not intermixed with test programs): miscuous mode [ 144.510110][ T5624] device veth1_macvtap entered promiscuous mode [ 144.577881][ T5624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.615743][ T5624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.650396][ T5624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.662740][ T5624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.673778][ T5624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.685087][ T5624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.698789][ T5624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.727055][ T5624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.757246][ T5857] loop0: detected capacity change from 0 to 40427 [ 144.761222][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.812584][ T5857] F2FS-fs (loop0): Found nat_bits in checkpoint [ 144.831293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.846933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.885129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.915253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.949732][ T5624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.972680][ T5857] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 144.999148][ T5624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.069055][ T5624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.102347][ T26] audit: type=1800 audit(1776131894.650:209): pid=5857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.501" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 145.153023][ T5624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.167046][ T5857] syz.0.501: attempt to access beyond end of device [ 145.167046][ T5857] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 145.189084][ T5624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.198665][ T5890] loop3: detected capacity change from 0 to 256 [ 145.216106][ T5624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.250561][ T5624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.293782][ T5624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.361507][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.373837][ T4266] syz-executor: attempt to access beyond end of device [ 145.373837][ T4266] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 145.400908][ T5890] FAT-fs (loop3): Directory bread(block 64) failed [ 145.419497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.428773][ T5890] FAT-fs (loop3): Directory bread(block 65) failed [ 145.453442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.478381][ T5890] FAT-fs (loop3): Directory bread(block 66) failed [ 145.491464][ T5624] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.510832][ T5890] FAT-fs (loop3): Directory bread(block 67) failed [ 145.517626][ T5890] FAT-fs (loop3): Directory bread(block 68) failed [ 145.541955][ T5624] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.561530][ T5624] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.579177][ T5890] FAT-fs (loop3): Directory bread(block 69) failed [ 145.585993][ T5890] FAT-fs (loop3): Directory bread(block 70) failed [ 145.609385][ T5624] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.633040][ T5899] loop9: detected capacity change from 0 to 6 [ 145.673771][ T5890] FAT-fs (loop3): Directory bread(block 71) failed [ 145.674557][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 145.720205][ T5890] FAT-fs (loop3): Directory bread(block 72) failed [ 145.720680][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.727094][ T5890] FAT-fs (loop3): Directory bread(block 73) failed [ 145.743630][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 145.754361][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.763665][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 145.777054][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.786380][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 145.843618][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.852971][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 145.871047][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.880341][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 146.052802][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.105796][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.143240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 146.223776][ T5680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.250564][ T5680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.287205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 146.758504][ T5923] loop1: detected capacity change from 0 to 512 [ 146.817781][ T5923] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.521: Invalid inode bitmap blk 4 in block_group 0 [ 146.849229][ T4311] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 146.849310][ T4361] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 146.897830][ T5923] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 147.029090][ T4311] usb 4-1: Using ep0 maxpacket: 32 [ 147.035991][ T4311] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 147.054282][ T5928] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 147.057789][ T4311] usb 4-1: config 0 has no interface number 0 [ 147.129613][ T4311] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 147.143918][ T4311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.158714][ T4311] usb 4-1: Product: syz [ 147.166759][ T4311] usb 4-1: Manufacturer: syz [ 147.171897][ T4361] usb 6-1: Using ep0 maxpacket: 32 [ 147.174983][ T4311] usb 4-1: SerialNumber: syz [ 147.182769][ T4361] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 147.199977][ T4311] usb 4-1: config 0 descriptor?? [ 147.218513][ T4361] usb 6-1: config 0 has no interface number 0 [ 147.220263][ T4311] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 147.242656][ T4361] usb 6-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 147.279103][ T4361] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 147.300066][ T4361] usb 6-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 147.324884][ T4361] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 147.359077][ T4361] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.367177][ T4361] usb 6-1: Product: syz [ 147.389775][ T4361] usb 6-1: Manufacturer: syz [ 147.394681][ T4361] usb 6-1: SerialNumber: syz [ 147.410990][ T4361] usb 6-1: config 0 descriptor?? [ 147.419592][ T5915] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 147.429660][ T4311] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 147.482124][ T4311] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 147.666292][ T4361] usb-storage 6-1:0.20: USB Mass Storage device detected [ 147.717150][ T4361] usb-storage 6-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 147.740385][ T4361] scsi host1: usb-storage 6-1:0.20 [ 147.746606][ T5921] loop4: detected capacity change from 0 to 40427 [ 147.788178][ T5921] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 147.824632][ T5921] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 147.833741][ T4361] usb 6-1: USB disconnect, device number 2 [ 147.878739][ T5921] F2FS-fs (loop4): invalid crc value [ 147.945735][ T5921] F2FS-fs (loop4): Found nat_bits in checkpoint [ 147.981107][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 147.981400][ T5503] usb 4-1: USB disconnect, device number 5 [ 148.038606][ T5503] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 148.095876][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 148.103578][ T5503] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 148.122066][ T5503] quatech2 4-1:0.51: device disconnected [ 148.155103][ T5921] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 148.212547][ T5921] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 148.604547][ T4279] syz-executor: attempt to access beyond end of device [ 148.604547][ T4279] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 148.799549][ T5962] loop5: detected capacity change from 0 to 64 [ 149.745236][ T5954] loop0: detected capacity change from 0 to 32768 [ 149.883826][ T5954] XFS (loop0): Mounting V5 Filesystem [ 150.079073][ T5954] XFS (loop0): Ending clean mount [ 150.116464][ T5954] XFS (loop0): Quotacheck needed: Please wait. [ 150.247438][ T5954] XFS (loop0): Quotacheck: Done. [ 150.369101][ T4361] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 150.497424][ T5971] loop5: detected capacity change from 0 to 32768 [ 150.569036][ T4361] usb 4-1: Using ep0 maxpacket: 16 [ 150.574547][ T5971] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.531 (5971) [ 150.594894][ T4361] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.649150][ T4361] usb 4-1: config 0 has no interfaces? [ 150.680398][ T4361] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 150.689933][ T5971] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 150.725736][ T4361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.735146][ T5971] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 150.755139][ T4361] usb 4-1: Product: syz [ 150.760926][ T5971] BTRFS info (device loop5): enabling auto defrag [ 150.773231][ T4361] usb 4-1: Manufacturer: syz [ 150.786679][ T5971] BTRFS info (device loop5): use no compression [ 150.794723][ T4361] usb 4-1: SerialNumber: syz [ 150.810641][ T4361] usb 4-1: config 0 descriptor?? [ 150.816137][ T5971] BTRFS info (device loop5): max_inline at 4096 [ 150.827270][ T4266] XFS (loop0): Unmounting Filesystem [ 150.830040][ T5971] BTRFS info (device loop5): using free space tree [ 150.860327][ T6011] loop7: detected capacity change from 0 to 7 [ 150.968992][ T1083] loop: Write error at byte offset 10, length 3584. [ 150.994764][ C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2 [ 151.069533][ T4361] usb 4-1: USB disconnect, device number 6 [ 151.139593][ T5971] BTRFS info (device loop5): enabling ssd optimizations [ 151.405527][ T5624] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 151.791256][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'. [ 151.844179][ T4943] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop5 scanned by udevd (4943) [ 151.916272][ T6058] device gtp0 entered promiscuous mode [ 152.230135][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.552'. [ 152.246005][ T6077] loop4: detected capacity change from 0 to 512 [ 152.272939][ T6077] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 152.373895][ T6077] EXT4-fs (loop4): 1 truncate cleaned up [ 152.396862][ T6077] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 152.488836][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 152.508858][ T6073] device hsr_slave_1 left promiscuous mode [ 152.632659][ T6084] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 152.676193][ T6079] loop3: detected capacity change from 0 to 8192 [ 152.727944][ T6079] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 152.741715][ T6079] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 152.752511][ T6079] REISERFS (device loop3): using ordered data mode [ 152.759162][ T6079] reiserfs: using flush barriers [ 152.765722][ T6079] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 152.783574][ T6079] REISERFS (device loop3): checking transaction log (loop3) [ 152.792295][ T6079] REISERFS (device loop3): Using rupasov hash to sort names [ 152.809144][ T6079] REISERFS (device loop3): using 3.5.x disk format [ 152.820977][ T6079] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 152.834345][ T6079] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 152.845786][ T6079] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 152.857269][ T6079] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 153.146273][ T6093] netlink: 27 bytes leftover after parsing attributes in process `syz.1.557'. [ 153.573292][ T6094] loop4: detected capacity change from 0 to 4096 [ 153.708856][ T6094] ntfs3: Unknown parameter 'nocase' [ 154.177058][ T6115] loop1: detected capacity change from 0 to 1024 [ 154.337294][ T6115] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 154.375315][ T6109] loop3: detected capacity change from 0 to 131072 [ 154.387705][ T6109] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 154.396759][ T6109] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 154.405984][ T6109] F2FS-fs (loop3): invalid crc value [ 154.474516][ T6109] F2FS-fs (loop3): Found nat_bits in checkpoint [ 154.586463][ T6109] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 154.593782][ T6109] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 154.807744][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 154.916411][ T6130] loop0: detected capacity change from 0 to 1024 [ 155.002931][ T6130] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 155.401850][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 155.929054][ T4361] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 156.039416][ T6161] netlink: 'syz.1.576': attribute type 12 has an invalid length. [ 156.063460][ T6161] netlink: 'syz.1.576': attribute type 29 has an invalid length. [ 156.079269][ T6161] netlink: 148 bytes leftover after parsing attributes in process `syz.1.576'. [ 156.119124][ T6161] netlink: 'syz.1.576': attribute type 2 has an invalid length. [ 156.138060][ T4361] usb 4-1: Using ep0 maxpacket: 8 [ 156.161304][ T4361] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 156.179102][ T6161] netlink: 'syz.1.576': attribute type 3 has an invalid length. [ 156.187190][ T4361] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.227718][ T4361] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.258735][ T4361] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.285797][ T4361] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.289663][ T6150] loop5: detected capacity change from 0 to 32768 [ 156.319496][ T4361] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 156.389610][ T4361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.445432][ T6150] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 156.485528][ T6169] block nbd4: shutting down sockets [ 156.500536][ T6150] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 156.505419][ T6165] loop0: detected capacity change from 0 to 8192 [ 156.549140][ T6150] BTRFS info (device loop5): setting nodatacow, compression disabled [ 156.557467][ T6150] BTRFS info (device loop5): setting datasum, datacow enabled [ 156.581073][ T6165] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 156.609212][ T6165] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 156.618586][ T6165] REISERFS (device loop0): using ordered data mode [ 156.650453][ T4361] usb 4-1: GET_CAPABILITIES returned 0 [ 156.655992][ T4361] usbtmc 4-1:16.0: can't read capabilities [ 156.662162][ T6165] reiserfs: using flush barriers [ 156.687073][ T6150] BTRFS info (device loop5): force clearing of disk cache [ 156.691498][ T6165] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 156.717808][ T6165] REISERFS (device loop0): checking transaction log (loop0) [ 156.769233][ T6165] REISERFS (device loop0): Using r5 hash to sort names [ 156.770087][ T6150] BTRFS info (device loop5): enabling disk space caching [ 156.777966][ T6165] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 156.849108][ T6150] BTRFS info (device loop5): turning on sync discard [ 156.876691][ T6150] BTRFS info (device loop5): turning off barriers [ 156.891480][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 156.900728][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 156.907280][ T6150] BTRFS info (device loop5): enabling auto defrag [ 156.909910][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 156.995705][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.004919][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.012022][ T6150] BTRFS info (device loop5): enabling ssd optimizations [ 157.014125][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.030494][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.039795][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.065681][ T6150] BTRFS info (device loop5): using spread ssd allocation scheme [ 157.118868][ T6150] BTRFS info (device loop5): not using ssd optimizations [ 157.147204][ T6150] BTRFS info (device loop5): not using spread ssd allocation scheme [ 157.161618][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.170859][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.179981][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.189330][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.198534][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.207658][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.216966][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.223567][ T6150] BTRFS info (device loop5): enabling ssd optimizations [ 157.226250][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 157.251305][ T7] usb 4-1: USB disconnect, device number 7 [ 157.260146][ T6150] BTRFS info (device loop5): using spread ssd allocation scheme [ 157.268095][ T6150] BTRFS info (device loop5): disk space caching is enabled [ 157.531022][ T6194] loop0: detected capacity change from 0 to 512 [ 157.586369][ T6194] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 157.625445][ T6150] BTRFS info (device loop5): rebuilding free space tree [ 157.653749][ T6150] BTRFS info (device loop5): disabling free space tree [ 157.656834][ T6194] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 157.660730][ T6150] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 157.660796][ T6150] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 157.703060][ T6194] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 157.714421][ T6194] System zones: 0-2, 18-18, 34-35 [ 157.756883][ T6194] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 157.844940][ T6194] fscrypt (loop0, inode 12): Error -61 getting encryption context [ 157.959941][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 158.019120][ T6054] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 158.213117][ T5624] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 158.223892][ T6054] usb 5-1: Using ep0 maxpacket: 16 [ 158.233169][ T6054] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 158.249334][ T6054] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.273203][ T6054] usb 5-1: config 0 has no interface number 0 [ 158.314122][ T6054] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 158.342099][ T6054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.351211][ T6054] usb 5-1: Product: syz [ 158.355411][ T6054] usb 5-1: Manufacturer: syz [ 158.360440][ T6054] usb 5-1: SerialNumber: syz [ 158.367447][ T6054] usb 5-1: config 0 descriptor?? [ 158.400693][ T6054] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 158.407528][ T6054] usb 5-1: No valid video chain found. [ 158.727916][ T5502] usb 5-1: USB disconnect, device number 8 [ 158.844498][ T6220] loop3: detected capacity change from 0 to 764 [ 158.882362][ T6220] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 159.132780][ T6226] loop5: detected capacity change from 0 to 512 [ 159.199958][ T6208] loop0: detected capacity change from 0 to 40427 [ 159.234759][ T6226] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 159.244723][ T6208] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 159.259505][ T6224] loop1: detected capacity change from 0 to 8192 [ 159.356634][ T6226] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.384275][ T6208] F2FS-fs (loop0): invalid crc value [ 159.439439][ T6208] F2FS-fs (loop0): Found nat_bits in checkpoint [ 159.552911][ T6241] loop3: detected capacity change from 0 to 512 [ 159.634864][ T5624] EXT4-fs (loop5): unmounting filesystem. [ 159.646973][ T6208] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 159.894433][ T5502] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 159.965418][ T5502] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 160.068117][ T4266] syz-executor: attempt to access beyond end of device [ 160.068117][ T4266] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 160.129143][ T3598] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 160.330639][ T3598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.344199][ T6254] fido_id[6254]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 160.365725][ T3598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.396122][ T3598] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.449058][ T3598] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.499046][ T3598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.528288][ T3598] usb 5-1: config 0 descriptor?? [ 160.851206][ T5502] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.875419][ T5502] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 160.968553][ T3598] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x4 [ 160.994001][ T3598] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 161.033053][ T3598] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 161.140371][ T6250] loop5: detected capacity change from 0 to 40427 [ 161.202392][ T6250] F2FS-fs (loop5): invalid crc value [ 161.249881][ T6250] F2FS-fs (loop5): Found nat_bits in checkpoint [ 161.444936][ T6250] F2FS-fs (loop5): Start checkpoint disabled! [ 161.506873][ T6250] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 161.798536][ T6292] loop3: detected capacity change from 0 to 512 [ 161.826512][ T6292] EXT4-fs: Ignoring removed oldalloc option [ 161.847611][ T6292] EXT4-fs: Ignoring removed nobh option [ 161.905844][ T6292] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 161.929265][ T6292] ext4 filesystem being mounted at /126/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.984751][ T4293] kworker/u4:5: attempt to access beyond end of device [ 161.984751][ T4293] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 162.025898][ T6292] EXT4-fs (loop3): shut down requested (1) [ 162.105407][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 162.319374][ T5502] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 162.349435][ T26] audit: type=1326 audit(1776131911.900:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0b79c819 code=0x7ffc0000 [ 162.434444][ T26] audit: type=1326 audit(1776131911.900:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0b79c819 code=0x7ffc0000 [ 162.486041][ T26] audit: type=1326 audit(1776131911.900:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f4b0b79c819 code=0x7ffc0000 [ 162.539219][ T5502] usb 2-1: Using ep0 maxpacket: 8 [ 162.541001][ T26] audit: type=1326 audit(1776131911.900:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0b79c819 code=0x7ffc0000 [ 162.556601][ T5502] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.578746][ T26] audit: type=1326 audit(1776131911.900:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0b79c819 code=0x7ffc0000 [ 162.621302][ T26] audit: type=1326 audit(1776131911.900:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b0b79c819 code=0x7ffc0000 [ 162.636048][ T5502] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 162.663417][ T5502] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.664202][ T26] audit: type=1326 audit(1776131911.900:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0b79c819 code=0x7ffc0000 [ 162.685595][ T5502] usb 2-1: config 0 descriptor?? [ 162.721428][ T26] audit: type=1326 audit(1776131911.900:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0b79c819 code=0x7ffc0000 [ 162.745601][ T26] audit: type=1326 audit(1776131911.900:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4b0b79c819 code=0x7ffc0000 [ 162.765679][ T6315] loop5: detected capacity change from 0 to 2048 [ 162.773649][ T26] audit: type=1326 audit(1776131911.920:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0b79c819 code=0x7ffc0000 [ 162.813886][ T6315] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 162.869156][ T6218] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 162.919080][ T3598] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 162.928458][ T5502] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 162.984769][ T5624] EXT4-fs (loop5): unmounting filesystem. [ 163.059149][ T6218] usb 1-1: Using ep0 maxpacket: 16 [ 163.066430][ T6218] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.079461][ T6218] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.089961][ T6218] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 163.128487][ T6218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.130998][ T3598] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 163.165821][ T6053] usb 5-1: USB disconnect, device number 9 [ 163.177377][ T3598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.223888][ T3598] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 163.243871][ T3598] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 163.262962][ T3598] usb 4-1: Manufacturer: syz [ 163.279350][ T3598] usb 4-1: config 0 descriptor?? [ 163.449095][ T3598] rc_core: IR keymap rc-hauppauge not found [ 163.458189][ T6053] usb 2-1: USB disconnect, device number 6 [ 163.460620][ T3598] Registered IR keymap rc-empty [ 163.480843][ T3598] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 163.510388][ T3598] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 163.588723][ T6218] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 163.796116][ T6309] i2c i2c-1: unsupported multi-msg i2c transaction [ 163.814100][ T6218] usb 1-1: USB disconnect, device number 7 [ 163.997987][ T6334] loop4: detected capacity change from 0 to 1024 [ 164.022838][ T6334] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 164.126816][ T6334] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 164.141380][ T6334] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.221177][ T6340] netlink: 3 bytes leftover after parsing attributes in process `syz.1.634'. [ 164.290283][ T6334] EXT4-fs (loop4): shut down requested (2) [ 164.354575][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 164.384360][ T3598] usb 4-1: USB disconnect, device number 8 [ 164.498748][ T6342] netlink: 'syz.1.636': attribute type 34 has an invalid length. [ 164.776695][ T6349] device team_slave_0 entered promiscuous mode [ 164.783755][ T6349] device team_slave_1 entered promiscuous mode [ 164.797241][ T6351] loop0: detected capacity change from 0 to 512 [ 164.805963][ T6353] loop1: detected capacity change from 0 to 1024 [ 164.814587][ T6351] EXT4-fs: Ignoring removed i_version option [ 164.845662][ T6351] EXT4-fs: Ignoring removed bh option [ 164.852438][ T6349] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 164.883628][ T6355] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 164.921306][ T6351] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 164.941056][ T6353] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 165.037476][ T6365] loop4: detected capacity change from 0 to 64 [ 165.087145][ T6351] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.232817][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 165.330337][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 165.525877][ T6370] netlink: 428 bytes leftover after parsing attributes in process `syz.1.643'. [ 165.608230][ T6372] netlink: 'syz.0.644': attribute type 11 has an invalid length. [ 166.130540][ T5502] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 166.361054][ T5502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.382861][ T5502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.409045][ T5502] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.438723][ T5502] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.465031][ T5502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.493340][ T6218] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 166.503879][ T5502] usb 4-1: config 0 descriptor?? [ 166.636520][ T6385] loop1: detected capacity change from 0 to 32768 [ 166.700709][ T6218] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 166.759515][ T6218] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.790369][ T6218] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 166.833653][ T6218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.945987][ T5502] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 166.980895][ T5502] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 167.098190][ T6409] loop5: detected capacity change from 0 to 64 [ 167.301215][ T6218] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 167.394364][ T6397] loop0: detected capacity change from 0 to 32768 [ 167.516665][ T6218] usb 5-1: USB disconnect, device number 10 [ 167.635420][ T6397] XFS (loop0): Mounting V5 Filesystem [ 167.745226][ T6397] XFS (loop0): Starting recovery (logdev: internal) [ 167.838424][ T6397] XFS (loop0): Ending recovery (logdev: internal) [ 167.876430][ T6430] loop1: detected capacity change from 0 to 512 [ 167.956392][ T6430] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 167.991825][ T6430] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.127683][ T4266] XFS (loop0): Unmounting Filesystem [ 168.393917][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 168.592723][ T6446] loop1: detected capacity change from 0 to 2048 [ 168.625799][ T6448] loop4: detected capacity change from 0 to 2048 [ 168.664301][ T6446] loop1: p1 p2 p3 [ 168.688505][ T6448] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 168.738895][ T6448] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 168.789380][ T6448] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 168.819424][ T6448] UDF-fs: Scanning with blocksize 512 failed [ 168.884653][ T6448] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.024431][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 169.024446][ T26] audit: type=1800 audit(1776131918.570:221): pid=6448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.666" name="file1" dev="loop4" ino=838 res=0 errno=0 [ 169.099493][ T4311] usb 4-1: USB disconnect, device number 9 [ 169.645680][ T4360] udevd[4360]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 169.661639][ T4401] udevd[4401]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 169.669988][ T4943] udevd[4943]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 169.757955][ T6478] loop4: detected capacity change from 0 to 512 [ 169.811394][ T6481] input: syz0 as /devices/virtual/input/input12 [ 169.835917][ T6478] EXT4-fs (loop4): Test dummy encryption mode enabled [ 169.871965][ T6474] loop1: detected capacity change from 0 to 8192 [ 169.890884][ T6478] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 169.915411][ T6478] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 169.940798][ T6474] FAT-fs (loop1): Unrecognized mount option "check=strect" or missing value [ 170.039046][ T6478] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 170.066177][ T6486] loop3: detected capacity change from 0 to 256 [ 170.120545][ T6486] exfat: Deprecated parameter 'utf8' [ 170.192649][ T6486] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 170.260913][ T6492] loop5: detected capacity change from 0 to 8 [ 170.307478][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 170.890829][ T6509] loop0: detected capacity change from 0 to 24 [ 170.920175][ T6509] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 170.933107][ T6504] loop3: detected capacity change from 0 to 4096 [ 170.949351][ T6509] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 170.985440][ T6504] EXT4-fs (loop3): Test dummy encryption mode enabled [ 171.038554][ T6504] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 171.252908][ T6504] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 171.478146][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 171.536709][ T6524] loop4: detected capacity change from 0 to 256 [ 171.689352][ T6524] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 171.929481][ T5502] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 172.022453][ T6541] netlink: 72 bytes leftover after parsing attributes in process `syz.1.694'. [ 172.139362][ T5502] usb 4-1: Using ep0 maxpacket: 32 [ 172.153813][ T5502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.178531][ T5502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.192409][ T5502] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 172.205178][ T5502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.218584][ T5502] usb 4-1: config 0 descriptor?? [ 172.591204][ T6551] loop4: detected capacity change from 0 to 8192 [ 172.610676][ T6551] FAT-fs (loop4): Unrecognized mount option "check=strect" or missing value [ 172.689414][ T5502] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 172.731829][ T6563] loop0: detected capacity change from 0 to 512 [ 172.956043][ T6563] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 172.970833][ T5502] usb 4-1: USB disconnect, device number 10 [ 172.985841][ T6563] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.037654][ T6567] fido_id[6567]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 173.101103][ T6573] netlink: 'syz.1.702': attribute type 11 has an invalid length. [ 173.330356][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 173.443819][ T6579] loop1: detected capacity change from 0 to 24 [ 173.514284][ T6579] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 173.580711][ T6579] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 173.812446][ T6555] loop5: detected capacity change from 0 to 32768 [ 173.927997][ T6588] netlink: 48 bytes leftover after parsing attributes in process `syz.1.706'. [ 174.000039][ T6588] netlink: 48 bytes leftover after parsing attributes in process `syz.1.706'. [ 174.270740][ T6571] XFS (loop4): Mounting V5 Filesystem [ 174.382064][ T6602] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 174.491637][ T6602] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 174.555507][ T6571] XFS (loop4): Starting recovery (logdev: internal) [ 174.622307][ T6602] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 174.622362][ T6602] UDF-fs: Scanning with blocksize 512 failed [ 174.640474][ T6602] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.650137][ T6611] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.657729][ T6571] XFS (loop4): Ending recovery (logdev: internal) [ 174.708027][ T26] audit: type=1800 audit(1776131924.250:222): pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.710" name="file1" dev="loop1" ino=838 res=0 errno=0 [ 174.893902][ T4279] XFS (loop4): Unmounting Filesystem [ 175.438149][ T6630] set_capacity_and_notify: 3 callbacks suppressed [ 175.438170][ T6630] loop3: detected capacity change from 0 to 512 [ 175.726755][ T6627] loop5: detected capacity change from 0 to 8192 [ 175.730417][ T6630] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 175.746632][ T6638] loop1: detected capacity change from 0 to 128 [ 175.756758][ T6627] FAT-fs (loop5): Unrecognized mount option "check=strect" or missing value [ 175.781511][ T6638] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 175.809369][ T6630] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.844350][ T6638] ext4 filesystem being mounted at /183/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 176.051473][ T6643] netlink: 'syz.4.714': attribute type 34 has an invalid length. [ 176.169894][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 176.366456][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 176.684100][ T6660] loop5: detected capacity change from 0 to 512 [ 176.738140][ T6660] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 176.810740][ T6660] EXT4-fs (loop5): 1 orphan inode deleted [ 176.889192][ T6660] EXT4-fs (loop5): 1 truncate cleaned up [ 176.911543][ T6660] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 177.045973][ T6660] EXT4-fs (loop5): shut down requested (1) [ 177.073235][ T6647] loop0: detected capacity change from 0 to 32768 [ 177.081192][ T6660] EXT4-fs warning (device loop5): empty_inline_dir:1902: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 177.234296][ T5624] EXT4-fs (loop5): unmounting filesystem. [ 177.240828][ T6677] loop1: detected capacity change from 0 to 1024 [ 177.304139][ T6647] XFS (loop0): Mounting V5 Filesystem [ 177.335552][ T6677] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 177.400160][ T6663] loop3: detected capacity change from 0 to 32768 [ 177.415154][ T6684] loop4: detected capacity change from 0 to 4096 [ 177.473675][ T6647] XFS (loop0): Starting recovery (logdev: internal) [ 177.526570][ T6663] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.722 (6663) [ 177.544642][ T6691] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.603009][ T6647] XFS (loop0): Ending recovery (logdev: internal) [ 177.663596][ T6663] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 177.663686][ T6663] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 177.663761][ T6663] BTRFS info (device loop3): setting nodatacow, compression disabled [ 177.663781][ T6663] BTRFS info (device loop3): setting datasum, datacow enabled [ 177.663802][ T6663] BTRFS info (device loop3): force clearing of disk cache [ 177.663820][ T6663] BTRFS info (device loop3): enabling disk space caching [ 177.663839][ T6663] BTRFS info (device loop3): turning on sync discard [ 177.663856][ T6663] BTRFS info (device loop3): turning off barriers [ 177.663900][ T6663] BTRFS info (device loop3): enabling auto defrag [ 177.663918][ T6663] BTRFS info (device loop3): enabling ssd optimizations [ 177.663933][ T6663] BTRFS info (device loop3): using spread ssd allocation scheme [ 177.663955][ T6663] BTRFS info (device loop3): not using ssd optimizations [ 177.663970][ T6663] BTRFS info (device loop3): not using spread ssd allocation scheme [ 177.663989][ T6663] BTRFS info (device loop3): enabling ssd optimizations [ 177.664004][ T6663] BTRFS info (device loop3): using spread ssd allocation scheme [ 177.664021][ T6663] BTRFS info (device loop3): disk space caching is enabled [ 177.721295][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 178.014156][ T4266] XFS (loop0): Unmounting Filesystem [ 178.113830][ T6702] loop4: detected capacity change from 0 to 4096 [ 178.178536][ T6702] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 178.264288][ T6663] BTRFS info (device loop3): rebuilding free space tree [ 178.340864][ T6702] ntfs3: loop4: Failed to load $Extend. [ 178.369834][ T6663] BTRFS info (device loop3): disabling free space tree [ 178.377683][ T6722] device syzkaller1 entered promiscuous mode [ 178.399678][ T6663] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 178.457977][ T6663] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 178.864953][ T4274] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 179.097927][ T4360] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop3 scanned by udevd (4360) [ 179.647159][ T6736] loop0: detected capacity change from 0 to 8192 [ 179.715815][ T6736] FAT-fs (loop0): Unrecognized mount option "check=strect" or missing value [ 179.929101][ T7] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 180.119058][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 180.126174][ T7] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 180.150115][ T7] usb 4-1: config 0 has no interface number 0 [ 180.152604][ T7] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 180.152642][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.152663][ T7] usb 4-1: Product: syz [ 180.152679][ T7] usb 4-1: Manufacturer: syz [ 180.152695][ T7] usb 4-1: SerialNumber: syz [ 180.191714][ T7] usb 4-1: config 0 descriptor?? [ 180.193646][ T7] smsc95xx v2.0.0 [ 180.296556][ T6763] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 180.322794][ T6763] EXT4-fs (loop5): 1 truncate cleaned up [ 180.322826][ T6763] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 180.439577][ T5624] EXT4-fs (loop5): unmounting filesystem. [ 180.604889][ T7] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 180.633712][ T7] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 181.075447][ T7] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 181.106997][ T7] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 181.158443][ T7] usb 4-1: USB disconnect, device number 11 [ 181.231999][ T6782] set_capacity_and_notify: 1 callbacks suppressed [ 181.232018][ T6782] loop1: detected capacity change from 0 to 4096 [ 181.415642][ T6782] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 181.454637][ T6782] ntfs3: loop1: Failed to load $Extend. [ 181.714360][ T6777] loop4: detected capacity change from 0 to 32768 [ 181.854312][ T6777] XFS (loop4): Mounting V5 Filesystem [ 182.093488][ T6777] XFS (loop4): Starting recovery (logdev: internal) [ 182.167001][ T6777] XFS (loop4): Ending recovery (logdev: internal) [ 182.411372][ T4279] XFS (loop4): Unmounting Filesystem [ 182.525301][ T6823] loop5: detected capacity change from 0 to 64 [ 182.768624][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.758'. [ 183.092212][ T6823] Trying to free block not in datazone [ 183.177179][ T6827] device hsr_slave_1 left promiscuous mode [ 183.309188][ T5502] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 183.419163][ T5500] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 183.436070][ T6838] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 183.509181][ T5502] usb 2-1: Using ep0 maxpacket: 32 [ 183.516558][ T5502] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 183.535639][ T5502] usb 2-1: config 0 has no interface number 0 [ 183.561292][ T5502] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 183.589700][ T5502] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.599412][ T5502] usb 2-1: Product: syz [ 183.609105][ T5502] usb 2-1: Manufacturer: syz [ 183.619126][ T5500] usb 5-1: Using ep0 maxpacket: 8 [ 183.624408][ T5502] usb 2-1: SerialNumber: syz [ 183.631689][ T5500] usb 5-1: unable to get BOS descriptor or descriptor too short [ 183.651900][ T5502] usb 2-1: config 0 descriptor?? [ 183.659095][ T5500] usb 5-1: config 4 interface 0 has no altsetting 0 [ 183.671770][ T5502] smsc95xx v2.0.0 [ 183.692195][ T5500] usb 5-1: string descriptor 0 read error: -22 [ 183.699378][ T5500] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 183.709623][ T5500] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 183.741506][ T5500] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 183.755255][ T5500] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 183.776175][ T5500] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 183.787137][ T5500] usb 5-1: media controller created [ 183.845284][ T5500] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.068045][ T5502] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 184.071181][ T6840] loop3: detected capacity change from 0 to 32768 [ 184.099524][ T5502] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 184.160327][ T6843] loop5: detected capacity change from 0 to 32768 [ 184.222198][ T6840] XFS (loop3): Mounting V5 Filesystem [ 184.227186][ T6843] XFS (loop5): Mounting V5 Filesystem [ 184.289942][ T6840] XFS (loop3): Ending clean mount [ 184.298410][ T6840] XFS (loop3): Quotacheck needed: Please wait. [ 184.338942][ T6843] XFS (loop5): Ending clean mount [ 184.408716][ T6840] XFS (loop3): Quotacheck: Done. [ 184.455851][ T26] audit: type=1800 audit(1776131934.000:223): pid=6861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.766" name="file1" dev="loop5" ino=4420 res=0 errno=0 [ 184.535245][ T4274] XFS (loop3): Unmounting Filesystem [ 184.552313][ T5502] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 184.570731][ T5502] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 184.594792][ T5502] usb 2-1: USB disconnect, device number 7 [ 184.748385][ T5624] XFS (loop5): Unmounting Filesystem [ 185.022943][ T4314] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 185.149394][ T5500] usb 5-1: USB disconnect, device number 11 [ 185.219040][ T4314] usb 1-1: Using ep0 maxpacket: 32 [ 185.226350][ T4314] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 185.245436][ T4314] usb 1-1: config 0 has no interface number 0 [ 185.262118][ T4314] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 185.296241][ T4314] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 185.306135][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.320760][ T4314] usb 1-1: Product: syz [ 185.325195][ T4314] usb 1-1: Manufacturer: syz [ 185.332731][ T4314] usb 1-1: SerialNumber: syz [ 185.340033][ T4314] usb 1-1: config 0 descriptor?? [ 185.347664][ T6863] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 185.565060][ T6863] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 186.184096][ T4314] asix 1-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 186.386441][ T4314] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 186.398019][ T4314] asix 1-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 186.408650][ T4314] asix: probe of 1-1:0.188 failed with error -71 [ 186.417593][ T4314] usb 1-1: USB disconnect, device number 8 [ 187.040953][ T6872] loop3: detected capacity change from 0 to 2048 [ 187.097097][ T6872] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.149617][ T26] audit: type=1800 audit(1776131936.700:224): pid=6872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.771" name="file1" dev="loop3" ino=1367 res=0 errno=0 [ 187.269090][ T5502] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 187.452531][ T6880] loop0: detected capacity change from 0 to 64 [ 187.470987][ T5502] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.508784][ T5502] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.550878][ T5502] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 187.572770][ T6880] Trying to free block not in datazone [ 187.578595][ T5502] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 187.588749][ T5502] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.631170][ T5502] usb 5-1: config 0 descriptor?? [ 187.706259][ T6868] loop5: detected capacity change from 0 to 32768 [ 187.825594][ T6868] XFS (loop5): Mounting V5 Filesystem [ 188.036787][ T6868] XFS (loop5): Starting recovery (logdev: internal) [ 188.050065][ T5502] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x4 [ 188.074195][ T5502] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 188.100509][ T6868] XFS (loop5): Ending recovery (logdev: internal) [ 188.119808][ T5502] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 188.344010][ T5624] XFS (loop5): Unmounting Filesystem [ 188.382345][ T5502] usb 5-1: USB disconnect, device number 12 [ 188.399928][ T6891] loop0: detected capacity change from 0 to 32768 [ 188.412841][ T6895] fido_id[6895]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 188.448037][ T6891] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 188.522392][ T6899] syz.1.788 sent an empty control message without MSG_MORE. [ 188.704238][ T4360] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 189.003420][ T6906] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 189.127472][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.776'. [ 189.297026][ T26] audit: type=1326 audit(1776131938.840:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.0.783" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b0b79c819 code=0x0 [ 189.379500][ T6908] device hsr_slave_1 left promiscuous mode [ 189.421550][ T6897] loop3: detected capacity change from 0 to 40427 [ 189.465003][ T6897] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x3ffff [ 189.486428][ T6897] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xe4 [ 189.512807][ T6897] F2FS-fs (loop3): invalid crc value [ 189.538302][ T6897] F2FS-fs (loop3): Found nat_bits in checkpoint [ 189.608249][ T6897] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x432/0xa20 [ 189.704255][ T6897] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 189.860422][ T6897] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_convert_inline_inode+0x637/0x810 [ 190.022714][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.793'. [ 190.039231][ T6928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.262584][ T6928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.369260][ T5502] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 190.469871][ T6938] loop3: detected capacity change from 0 to 1024 [ 190.507619][ T6938] EXT4-fs: Ignoring removed orlov option [ 190.589907][ T5502] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.605973][ T5502] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.609927][ T6938] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 190.650887][ T6938] EXT4-fs error (device loop3): __ext4_new_inode:1291: comm syz.3.794: failed to insert inode 12: doubly allocated? [ 190.665735][ T5502] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.726897][ T6947] loop4: detected capacity change from 0 to 128 [ 190.732224][ T5502] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.779112][ T5502] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.810715][ T5502] usb 2-1: config 0 descriptor?? [ 190.865559][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 190.884215][ T6932] loop5: detected capacity change from 0 to 32768 [ 190.951677][ T6932] XFS (loop5): Mounting V5 Filesystem [ 191.069324][ T6932] XFS (loop5): Ending clean mount [ 191.143383][ T6932] XFS (loop5): Quotacheck needed: Please wait. [ 191.226181][ T5502] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x4 [ 191.253348][ T6932] XFS (loop5): Quotacheck: Done. [ 191.257574][ T5502] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 191.279290][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 191.286161][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 191.293694][ T4275] Bluetooth: hci4: command 0x0406 tx timeout [ 191.293717][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 191.319355][ T5502] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 191.567074][ T5502] usb 2-1: USB disconnect, device number 8 [ 191.617875][ T5624] XFS (loop5): Unmounting Filesystem [ 191.644054][ T6968] fido_id[6968]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 191.912552][ T6973] loop3: detected capacity change from 0 to 32768 [ 191.943505][ T6973] XFS (loop3): Mounting V5 Filesystem [ 191.978477][ T6973] XFS (loop3): Ending clean mount [ 192.001046][ T26] audit: type=1800 audit(1776131941.550:226): pid=6973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.805" name="file1" dev="loop3" ino=4420 res=0 errno=0 [ 192.425955][ T26] audit: type=1326 audit(1776131941.970:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.4.808" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde3199c819 code=0x0 [ 192.637104][ T6986] loop1: detected capacity change from 0 to 40427 [ 192.660020][ T4314] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 192.673057][ T6986] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x3ffff [ 192.683562][ T6986] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4 [ 192.743769][ T4274] XFS (loop3): Unmounting Filesystem [ 192.769896][ T6986] F2FS-fs (loop1): invalid crc value [ 192.833407][ T6986] F2FS-fs (loop1): Found nat_bits in checkpoint [ 192.859794][ T4314] usb 1-1: Using ep0 maxpacket: 8 [ 192.882356][ T4314] usb 1-1: unable to get BOS descriptor or descriptor too short [ 192.925828][ T4314] usb 1-1: config 4 interface 0 has no altsetting 0 [ 192.941902][ T4314] usb 1-1: string descriptor 0 read error: -22 [ 192.942015][ T6986] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x432/0xa20 [ 192.950841][ T4314] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 192.978103][ T4314] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 192.996644][ T4314] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 193.018057][ T6986] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 193.061599][ T4314] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 193.106676][ T4314] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 193.139821][ T4314] usb 1-1: media controller created [ 193.162141][ T6986] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_convert_inline_inode+0x637/0x810 [ 193.191343][ T4314] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.467616][ T4314] zl10353_read_register: readreg error (reg=127, ret==0) [ 193.513502][ T4314] usb 1-1: USB disconnect, device number 9 [ 193.734360][ T7001] loop5: detected capacity change from 0 to 8192 [ 194.324544][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.335993][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.439069][ T4314] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 194.596775][ T7012] team0 (unregistering): Port device team_slave_0 removed [ 194.628811][ T7012] team0 (unregistering): Port device team_slave_1 removed [ 194.629085][ T4314] usb 4-1: Using ep0 maxpacket: 32 [ 194.656704][ T4314] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 194.670478][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.813'. [ 194.676600][ T4314] usb 4-1: config 0 has no interface number 0 [ 194.692387][ T4314] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 194.707568][ T7022] loop4: detected capacity change from 0 to 512 [ 194.737070][ T4314] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 194.755683][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.764331][ T4314] usb 4-1: Product: syz [ 194.794024][ T4314] usb 4-1: Manufacturer: syz [ 194.832951][ T7022] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.820: invalid indirect mapped block 256 (level 2) [ 194.852514][ T4314] usb 4-1: SerialNumber: syz [ 194.882681][ T4314] usb 4-1: config 0 descriptor?? [ 194.883916][ T7022] EXT4-fs (loop4): 2 truncates cleaned up [ 194.894290][ T7022] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 194.943629][ T7022] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.820: bg 0: block 5: invalid block bitmap [ 194.944054][ T4314] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 194.973546][ T7022] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 194.997775][ T7022] EXT4-fs (loop4): This should not happen!! Data will be lost [ 194.997775][ T7022] [ 195.007874][ T7022] EXT4-fs (loop4): Total free blocks count 0 [ 195.025136][ T7022] EXT4-fs (loop4): Free/Dirty block details [ 195.031378][ T4314] em28xx 4-1:0.132: Video interface 132 found: [ 195.042937][ T7022] EXT4-fs (loop4): free_blocks=0 [ 195.048290][ T7022] EXT4-fs (loop4): dirty_blocks=2 [ 195.053869][ T7022] EXT4-fs (loop4): Block reservation details [ 195.060195][ T7022] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 195.143587][ T1083] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 195.302621][ T4314] em28xx 4-1:0.132: chip ID is em2765 [ 195.569040][ T6218] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 195.704335][ T4314] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 195.724590][ T4314] em28xx 4-1:0.132: board has no eeprom [ 195.751936][ T7044] loop0: detected capacity change from 0 to 8192 [ 195.759770][ T6218] usb 5-1: Using ep0 maxpacket: 8 [ 195.767685][ T6218] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 195.781910][ T7044] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 195.795495][ T7044] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 195.802515][ T6218] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 195.805632][ T7044] REISERFS (device loop0): using ordered data mode [ 195.822116][ T7044] reiserfs: using flush barriers [ 195.831790][ T7044] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 195.839143][ T4314] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 195.851968][ T6218] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 195.866279][ T4314] em28xx 4-1:0.132: analog set to bulk mode. [ 195.878935][ T3598] em28xx 4-1:0.132: Registering V4L2 extension [ 195.898362][ T4314] usb 4-1: USB disconnect, device number 12 [ 195.915919][ T4314] em28xx 4-1:0.132: Disconnecting em28xx [ 195.947486][ T6218] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.980813][ T7044] REISERFS (device loop0): checking transaction log (loop0) [ 196.001741][ T6218] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 196.009266][ T7044] REISERFS (device loop0): Using r5 hash to sort names [ 196.025839][ T6218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.072389][ T7044] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 196.174460][ T3598] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 196.188284][ T3598] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 196.199770][ T3598] em28xx 4-1:0.132: No AC97 audio processor [ 196.255847][ T3598] usb 4-1: Decoder not found [ 196.262170][ T3598] em28xx 4-1:0.132: failed to create media graph [ 196.267551][ T6218] usb 5-1: GET_CAPABILITIES returned 0 [ 196.268825][ T3598] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 196.279121][ T6218] usbtmc 5-1:16.0: can't read capabilities [ 196.346106][ T3598] em28xx 4-1:0.132: Remote control support is not available for this card. [ 196.385759][ T4314] em28xx 4-1:0.132: Closing input extension [ 196.447891][ T7062] loop3: detected capacity change from 0 to 1024 [ 196.463251][ T4314] em28xx 4-1:0.132: Freeing device [ 196.574994][ T6218] usb 5-1: USB disconnect, device number 13 [ 196.872435][ T7067] loop0: detected capacity change from 0 to 8192 [ 196.880895][ T7067] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 196.902131][ T7067] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 196.911626][ T7067] REISERFS (device loop0): using ordered data mode [ 196.918168][ T7067] reiserfs: using flush barriers [ 196.925476][ T7067] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 196.944678][ T7067] REISERFS (device loop0): checking transaction log (loop0) [ 197.022583][ T7067] REISERFS (device loop0): Using tea hash to sort names [ 197.030162][ T7067] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 197.391565][ T7082] loop5: detected capacity change from 0 to 4096 [ 197.414109][ T7082] NILFS (loop5): invalid segment: Checksum error in segment payload [ 197.423478][ T7082] NILFS (loop5): trying rollback from an earlier position [ 197.454374][ T7082] NILFS (loop5): recovery complete [ 197.462805][ T7084] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.521357][ T6218] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 197.721840][ T6218] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.737113][ T7090] loop5: detected capacity change from 0 to 16 [ 197.743898][ T6218] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.776839][ T6218] usb 5-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 197.782895][ T7090] erofs: (device loop5): mounted with root inode @ nid 36. [ 197.794127][ T6218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.828546][ T6218] usb 5-1: config 0 descriptor?? [ 197.875919][ T7090] erofs: (device loop5): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 197.894903][ T7090] syz.5.845: attempt to access beyond end of device [ 197.894903][ T7090] loop5: rw=0, sector=296, nr_sectors = 8 limit=16 [ 197.914002][ T7090] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 197.922773][ T7090] erofs: (device loop5): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 197.942406][ T7090] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 197.957197][ T7090] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 198.263045][ T6218] hid (null): report_id 7532 is invalid [ 198.287488][ T6218] sigmamicro 0003:1C4F:0059.0011: unknown main item tag 0x0 [ 198.304515][ T6218] sigmamicro 0003:1C4F:0059.0011: unknown main item tag 0x0 [ 198.312588][ T6218] sigmamicro 0003:1C4F:0059.0011: unknown main item tag 0x0 [ 198.323265][ T6218] sigmamicro 0003:1C4F:0059.0011: unknown main item tag 0x0 [ 198.339757][ T6218] sigmamicro 0003:1C4F:0059.0011: unknown main item tag 0x0 [ 198.347394][ T6218] sigmamicro 0003:1C4F:0059.0011: unknown main item tag 0x0 [ 198.356396][ T6218] sigmamicro 0003:1C4F:0059.0011: report_id 7532 is invalid [ 198.366282][ T6218] sigmamicro 0003:1C4F:0059.0011: item 0 4 1 8 parsing failed [ 198.382801][ T6218] sigmamicro: probe of 0003:1C4F:0059.0011 failed with error -22 [ 198.496733][ T4314] usb 5-1: USB disconnect, device number 14 [ 198.647674][ T7111] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 198.647674][ T7111] The task syz.0.853 (7111) triggered the difference, watch for misbehavior. [ 198.858563][ T7115] input: syz1 as /devices/virtual/input/input14 [ 198.867133][ T7115] input: failed to attach handler leds to device input14, error: -6 [ 199.050457][ T7118] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 199.057731][ T7118] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 199.081735][ T7118] vhci_hcd vhci_hcd.0: Device attached [ 199.115543][ T7123] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 199.122245][ T7123] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 199.175110][ T7127] loop4: detected capacity change from 0 to 64 [ 199.211953][ T7123] vhci_hcd vhci_hcd.0: Device attached [ 199.231757][ T7118] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(5) [ 199.238373][ T7118] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 199.250958][ T7118] vhci_hcd vhci_hcd.0: Device attached [ 199.283935][ T7118] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(8) [ 199.290617][ T7118] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 199.320253][ T7118] vhci_hcd vhci_hcd.0: Device attached [ 199.344616][ T7123] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12) [ 199.351323][ T7123] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 199.369090][ T7] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 199.405137][ T7123] vhci_hcd vhci_hcd.0: Device attached [ 199.472442][ T7132] vhci_hcd: connection closed [ 199.475934][ T7129] vhci_hcd: connection closed [ 199.479913][ T7120] vhci_hcd: connection reset by peer [ 199.480839][ T7124] vhci_hcd: connection closed [ 199.490069][ T4336] vhci_hcd: stop threads [ 199.555189][ T7137] vhci_hcd: connection closed [ 199.557871][ T4336] vhci_hcd: release socket [ 199.618221][ T4336] vhci_hcd: disconnect device [ 199.636217][ T4336] vhci_hcd: stop threads [ 199.655279][ T4336] vhci_hcd: release socket [ 199.665570][ T4336] vhci_hcd: disconnect device [ 199.676973][ T4336] vhci_hcd: stop threads [ 199.686858][ T4336] vhci_hcd: release socket [ 199.716085][ T4336] vhci_hcd: disconnect device [ 199.724523][ T4314] hid-generic 0005:9C3F:0006.0012: hidraw0: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 199.747199][ T4336] vhci_hcd: stop threads [ 199.763887][ T4336] vhci_hcd: release socket [ 199.776022][ T4336] vhci_hcd: disconnect device [ 199.786105][ T4336] vhci_hcd: stop threads [ 199.804293][ T4336] vhci_hcd: release socket [ 199.814738][ T4336] vhci_hcd: disconnect device [ 199.916349][ T7155] fido_id[7155]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci1/hci1:200/report_descriptor': No such file or directory [ 200.949228][ T6218] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 200.985705][ T7188] tipc: Started in network mode [ 201.001635][ T7188] tipc: Node identity bridge_s., cluster identity 4711 [ 201.176875][ T6218] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.215928][ T6218] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.226431][ T6218] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 201.273349][ T6218] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.299752][ T6218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.313696][ T6218] usb 5-1: config 0 descriptor?? [ 201.550591][ T7202] loop1: detected capacity change from 0 to 256 [ 201.655642][ T7202] exFAT-fs (loop1): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 201.708751][ T7182] loop0: detected capacity change from 0 to 32768 [ 201.764672][ T6218] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 201.832968][ T6218] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 201.882628][ T7182] XFS (loop0): Mounting V5 Filesystem [ 202.058383][ T7182] XFS (loop0): Ending clean mount [ 202.063849][ T5502] usb 5-1: USB disconnect, device number 15 [ 202.075201][ T7182] XFS (loop0): Quotacheck needed: Please wait. [ 202.199817][ T7182] XFS (loop0): Quotacheck: Done. [ 202.317560][ T7222] fido_id[7222]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 202.335092][ T4266] XFS (loop0): Unmounting Filesystem [ 202.446009][ T7227] loop3: detected capacity change from 0 to 1024 [ 202.473254][ T7227] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 202.570427][ T7227] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 202.874494][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 203.027706][ T7236] loop3: detected capacity change from 0 to 512 [ 203.168370][ T7225] loop1: detected capacity change from 0 to 32768 [ 203.567613][ T7248] loop1: detected capacity change from 0 to 2048 [ 203.659218][ T7248] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 203.692563][ T7248] UDF-fs: Scanning with blocksize 512 failed [ 203.743493][ T7248] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.842616][ T7256] loop0: detected capacity change from 0 to 128 [ 204.109128][ T7261] netlink: 340 bytes leftover after parsing attributes in process `syz.4.909'. [ 204.122023][ T7260] loop5: detected capacity change from 0 to 1024 [ 204.160183][ T7261] netlink: 104 bytes leftover after parsing attributes in process `syz.4.909'. [ 204.175604][ T7260] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.324992][ T7264] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 204.415954][ T7264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.569083][ T7] vhci_hcd: vhci_device speed not set [ 204.584173][ T7265] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 204.636234][ T7265] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.773105][ T7278] loop4: detected capacity change from 0 to 1024 [ 204.898036][ T7278] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 205.095847][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 205.448466][ T7290] loop1: detected capacity change from 0 to 512 [ 205.463996][ T7268] loop0: detected capacity change from 0 to 32768 [ 205.514597][ T7290] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 205.538359][ T7288] loop3: detected capacity change from 0 to 4096 [ 205.546628][ T7288] ntfs3: Unknown parameter 'nocase' [ 205.572307][ T7268] XFS (loop0): Mounting V5 Filesystem [ 205.740194][ T7268] XFS (loop0): Ending clean mount [ 205.782301][ T7268] XFS (loop0): Quotacheck needed: Please wait. [ 205.869475][ T7268] XFS (loop0): Quotacheck: Done. [ 206.013205][ T4943] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 206.035894][ T4401] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 206.121305][ T4266] XFS (loop0): Unmounting Filesystem [ 206.791099][ T7302] loop5: detected capacity change from 0 to 32768 [ 206.888209][ T7302] XFS (loop5): Mounting V5 Filesystem [ 206.926534][ T7288] XFS (loop3): Mounting V5 Filesystem [ 207.005447][ T7302] XFS (loop5): Ending clean mount [ 207.020012][ T7288] XFS (loop3): Ending clean mount [ 207.039512][ T6053] XFS (loop5): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x10 [ 207.051657][ T6053] XFS (loop5): Unmount and run xfs_repair [ 207.058346][ T6053] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 207.075126][ T6053] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 207.099015][ T6053] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 207.109281][ T6053] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 207.126796][ T6053] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 207.137724][ T6053] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 207.147364][ T6053] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 207.157663][ T6053] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 207.167726][ T6053] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 207.199626][ T7302] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x10 len 4 error 74 [ 207.209223][ T4274] XFS (loop3): Unmounting Filesystem [ 207.269647][ T7302] XFS (loop5): Failed to initialize disk quotas. [ 207.302957][ T26] audit: type=1800 audit(1776131956.850:228): pid=7302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.920" name="file1" dev="loop5" ino=6150 res=0 errno=0 [ 207.601077][ T5624] XFS (loop5): Unmounting Filesystem [ 208.073467][ T7333] set_capacity_and_notify: 1 callbacks suppressed [ 208.073483][ T7333] loop4: detected capacity change from 0 to 40427 [ 208.094873][ T7333] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 208.114715][ T7333] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 208.172310][ T7333] F2FS-fs (loop4): Found nat_bits in checkpoint [ 208.249077][ T7] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 208.301512][ T7333] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 208.315897][ T7333] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 208.449372][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 208.459982][ T7] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 208.468549][ T7] usb 4-1: config 0 has no interface number 0 [ 208.480707][ T4282] Bluetooth: hci5: command 0x1003 tx timeout [ 208.489718][ T4281] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 208.594656][ T7] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 208.609420][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.618159][ T7] usb 4-1: Product: syz [ 208.623151][ T7] usb 4-1: Manufacturer: syz [ 208.627789][ T7] usb 4-1: SerialNumber: syz [ 208.634386][ T7] usb 4-1: config 0 descriptor?? [ 208.642439][ T7352] blktrace: Concurrent blktraces are not allowed on nullb0 [ 208.677931][ T7] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 208.866831][ T7] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 208.892669][ T7347] loop5: detected capacity change from 0 to 32768 [ 208.908473][ T7] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 209.029712][ T7347] XFS (loop5): Mounting V5 Filesystem [ 209.184456][ T7347] XFS (loop5): Ending clean mount [ 209.199513][ T7347] XFS (loop5): Quotacheck needed: Please wait. [ 209.293904][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 209.305219][ T4709] usb 4-1: USB disconnect, device number 13 [ 209.332834][ T4709] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 209.347961][ T7347] XFS (loop5): Quotacheck: Done. [ 209.369719][ T4709] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 209.392601][ T4709] quatech2 4-1:0.51: device disconnected [ 209.474762][ T7350] loop0: detected capacity change from 0 to 40427 [ 209.509616][ T7350] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 209.528318][ T5624] XFS (loop5): Unmounting Filesystem [ 209.543942][ T7350] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 209.574176][ T7350] F2FS-fs (loop0): invalid crc value [ 209.627226][ T7350] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 209.887370][ T7350] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 209.899348][ T7350] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 210.146301][ T7383] loop3: detected capacity change from 0 to 512 [ 210.192724][ T7383] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 210.214942][ T4266] syz-executor: attempt to access beyond end of device [ 210.214942][ T4266] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 210.264831][ T7383] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.941: invalid indirect mapped block 9 (level 0) [ 210.309415][ T7383] EXT4-fs (loop3): 1 truncate cleaned up [ 210.315483][ T7383] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 210.646291][ T7394] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-61) [ 210.660100][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 210.914682][ T7399] loop1: detected capacity change from 0 to 764 [ 210.950496][ T7402] loop5: detected capacity change from 0 to 164 [ 210.970863][ T7399] isofs_fill_super: get root inode failed [ 211.045344][ T4360] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 211.179157][ T6218] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 211.269099][ T5500] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 211.379025][ T6218] usb 5-1: Using ep0 maxpacket: 32 [ 211.388046][ T6218] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.431372][ T6218] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.459262][ T5500] usb 1-1: Using ep0 maxpacket: 16 [ 211.466926][ T5500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 150, changing to 11 [ 211.503110][ T6218] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 211.519097][ T5500] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 211.542806][ T6218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.564827][ T5500] usb 1-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.00 [ 211.576301][ T6218] usb 5-1: config 0 descriptor?? [ 211.583735][ T5500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.601032][ T6218] hub 5-1:0.0: USB hub found [ 211.607793][ T7422] netlink: 32 bytes leftover after parsing attributes in process `syz.5.959'. [ 211.614261][ T5500] usb 1-1: config 0 descriptor?? [ 211.649241][ T7422] netlink: 'syz.5.959': attribute type 32 has an invalid length. [ 211.659361][ T7422] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 211.815065][ T6218] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 211.872767][ T7428] loop5: detected capacity change from 0 to 2048 [ 211.941191][ T7428] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 212.035684][ T5500] apple 0003:05AC:021C.0014: unknown main item tag 0x0 [ 212.038852][ T26] audit: type=1800 audit(1776131961.580:229): pid=7428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.962" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 212.053053][ T5500] apple 0003:05AC:021C.0014: unknown main item tag 0x0 [ 212.071608][ T5500] apple 0003:05AC:021C.0014: unknown main item tag 0x0 [ 212.078671][ T5500] apple 0003:05AC:021C.0014: unknown main item tag 0x0 [ 212.085838][ T5500] apple 0003:05AC:021C.0014: unknown main item tag 0x0 [ 212.092836][ T5500] apple 0003:05AC:021C.0014: unknown main item tag 0x0 [ 212.100768][ T5500] apple 0003:05AC:021C.0014: unknown main item tag 0x0 [ 212.107716][ T5500] apple 0003:05AC:021C.0014: unexpected long global item [ 212.120934][ T5500] apple 0003:05AC:021C.0014: parse failed [ 212.126858][ T5500] apple: probe of 0003:05AC:021C.0014 failed with error -22 [ 212.190105][ T5624] EXT4-fs (loop5): unmounting filesystem. [ 212.227780][ T6218] hid-generic 0003:046D:C31C.0015: unknown main item tag 0x0 [ 212.253480][ T6218] hid-generic 0003:046D:C31C.0015: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 212.313823][ T4314] usb 1-1: USB disconnect, device number 10 [ 212.332430][ T7436] loop8: detected capacity change from 0 to 5 [ 212.399129][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 212.592832][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.624021][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.644083][ T7] usb 2-1: Product: syz [ 212.648294][ T7] usb 2-1: Manufacturer: syz [ 212.654854][ T7] usb 2-1: SerialNumber: syz [ 212.660376][ T5502] usb 5-1: USB disconnect, device number 16 [ 213.039553][ T6218] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 213.226008][ T7447] loop3: detected capacity change from 0 to 40427 [ 213.234112][ T6218] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 213.248233][ T7451] loop4: detected capacity change from 0 to 128 [ 213.249836][ T6218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.309497][ T7447] F2FS-fs (loop3): invalid crc value [ 213.316119][ T6218] usb 6-1: config 0 descriptor?? [ 213.352161][ T6218] cp210x 6-1:0.0: cp210x converter detected [ 213.364305][ T7447] F2FS-fs (loop3): Found nat_bits in checkpoint [ 213.482945][ T7] cdc_ncm 2-1:1.0: failed to get mac address [ 213.534404][ T7447] F2FS-fs (loop3): Start checkpoint disabled! [ 213.559422][ T7447] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 213.690697][ T7] cdc_ncm 2-1:1.0: bind() failure [ 213.711655][ T7] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 213.718628][ T7447] syz.3.969: attempt to access beyond end of device [ 213.718628][ T7447] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 213.743951][ T7] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 213.754323][ T6218] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 213.763040][ T7] usbtest: probe of 2-1:1.1 failed with error -71 [ 213.790677][ T6218] usb 6-1: cp210x converter now attached to ttyUSB0 [ 213.796587][ T7] usb 2-1: USB disconnect, device number 9 [ 213.945695][ T9] kworker/u4:0: attempt to access beyond end of device [ 213.945695][ T9] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 213.965684][ T9] kworker/u4:0: attempt to access beyond end of device [ 213.965684][ T9] loop3: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 214.015297][ T4314] usb 6-1: USB disconnect, device number 3 [ 214.039814][ T4314] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 214.057449][ T4314] cp210x 6-1:0.0: device disconnected [ 214.229348][ T7] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 214.429087][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 214.436524][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 214.455899][ T7] usb 5-1: config 117 has an invalid interface number: 163 but max is 0 [ 214.475280][ T7] usb 5-1: config 117 has no interface number 0 [ 214.495566][ T7] usb 5-1: config 117 interface 163 altsetting 162 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 214.512013][ T7] usb 5-1: config 117 interface 163 has no altsetting 0 [ 214.541241][ T7] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 214.579136][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.612421][ T7] usb 5-1: Product: syz [ 214.616729][ T7] usb 5-1: Manufacturer: syz [ 214.658482][ T7] usb 5-1: SerialNumber: syz [ 214.723617][ T7475] Invalid argument reading file caps for ./file0 [ 214.737744][ T7465] loop0: detected capacity change from 0 to 32768 [ 214.869892][ T7465] XFS (loop0): Mounting V5 Filesystem [ 214.964981][ T7465] XFS (loop0): Ending clean mount [ 215.169927][ T7471] loop1: detected capacity change from 0 to 40427 [ 215.208679][ T4266] XFS (loop0): Unmounting Filesystem [ 215.222764][ T7471] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 215.257704][ T7491] loop3: detected capacity change from 0 to 2048 [ 215.296409][ T7471] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 215.315915][ T7471] F2FS-fs (loop1): invalid crc value [ 215.321926][ T7491] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.418617][ T7471] F2FS-fs (loop1): Found nat_bits in checkpoint [ 215.627478][ T7471] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 215.637856][ T7471] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 215.738935][ T5500] usb 5-1: USB disconnect, device number 17 [ 215.746748][ T5500] f81534a_ctrl 5-1:117.163: failed to enable ports: -19 [ 215.836324][ T7471] syz.1.978: attempt to access beyond end of device [ 215.836324][ T7471] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 215.906592][ T7471] syz.1.978: attempt to access beyond end of device [ 215.906592][ T7471] loop1: rw=2051, sector=45096, nr_sectors = 16 limit=40427 [ 216.509137][ T7499] loop5: detected capacity change from 0 to 32768 [ 216.681648][ T7499] XFS (loop5): Mounting V5 Filesystem [ 216.750189][ T7499] XFS (loop5): Ending clean mount [ 216.791299][ T7499] XFS (loop5): Quotacheck needed: Please wait. [ 216.833158][ T7506] loop0: detected capacity change from 0 to 32768 [ 216.909206][ T7506] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.988 (7506) [ 216.936750][ T7499] XFS (loop5): Quotacheck: Done. [ 216.993814][ T7506] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 217.020643][ T7506] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 217.057671][ T7506] BTRFS info (device loop0): using free space tree [ 217.068621][ T26] audit: type=1804 audit(1776131966.610:230): pid=7499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.989" name="/newroot/103/file0/bus" dev="loop5" ino=9291 res=1 errno=0 [ 217.260401][ T7506] BTRFS info (device loop0): enabling ssd optimizations [ 217.312177][ T5624] XFS (loop5): Unmounting Filesystem [ 217.641652][ T26] audit: type=1800 audit(1776131967.190:231): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.988" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 217.822634][ T4266] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 218.138366][ T7555] loop3: detected capacity change from 0 to 32768 [ 218.266713][ T7555] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 218.287388][ T7555] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 218.304120][ T7555] BTRFS info (device loop3): setting nodatacow, compression disabled [ 218.316484][ T7555] BTRFS info (device loop3): force clearing of disk cache [ 218.339113][ T7555] BTRFS info (device loop3): enabling ssd optimizations [ 218.371166][ T7555] BTRFS info (device loop3): using spread ssd allocation scheme [ 218.399272][ T7555] BTRFS info (device loop3): turning off barriers [ 218.416379][ T7555] BTRFS info (device loop3): disabling free space tree [ 218.431913][ T7555] BTRFS info (device loop3): not using ssd optimizations [ 218.461586][ T7555] BTRFS info (device loop3): not using spread ssd allocation scheme [ 218.501531][ T7571] loop1: detected capacity change from 0 to 1024 [ 218.523259][ T7571] EXT4-fs: Ignoring removed bh option [ 218.615074][ T7571] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 218.646651][ T7571] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 218.703341][ T7555] BTRFS info (device loop3): rebuilding free space tree [ 218.768518][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 218.785663][ T7555] BTRFS info (device loop3): disabling free space tree [ 218.808931][ T7555] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 218.862770][ T7555] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 218.923353][ T7599] loop8: detected capacity change from 0 to 7 [ 218.943037][ T4401] Dev loop8: unable to read RDB block 7 [ 218.948703][ T4401] loop8: AHDI p1 p2 [ 218.970316][ T4401] loop8: partition table partially beyond EOD, truncated [ 218.999219][ T4401] loop8: p1 start 1702000233 is beyond EOD, truncated [ 219.021058][ T7599] Dev loop8: unable to read RDB block 7 [ 219.045804][ T7599] loop8: AHDI p1 p2 [ 219.059122][ T7599] loop8: partition table partially beyond EOD, truncated [ 219.076361][ T7599] loop8: p1 start 1702000233 is beyond EOD, truncated [ 219.458296][ T4274] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 219.564975][ T7609] loop1: detected capacity change from 0 to 8192 [ 219.640824][ T7609] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 219.679167][ T7609] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 219.688706][ T7609] REISERFS (device loop1): using ordered data mode [ 219.784363][ T7609] reiserfs: using flush barriers [ 219.818928][ T7609] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 219.924245][ T7609] REISERFS (device loop1): checking transaction log (loop1) [ 219.980518][ T7609] REISERFS (device loop1): Using r5 hash to sort names [ 220.038477][ T7609] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 220.389109][ T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 220.412189][ T7616] loop5: detected capacity change from 0 to 32768 [ 220.532685][ T7616] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 220.549362][ T7616] XFS (loop5): Mounting V5 Filesystem [ 220.618787][ T7616] XFS (loop5): Ending clean mount [ 220.620248][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.651934][ T7649] bond0: Caught tx_queue_len zero misconfig [ 220.658191][ T7649] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1029'. [ 220.678044][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.711474][ T7] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 220.714664][ T7616] XFS (loop5): Quotacheck needed: Please wait. [ 220.733976][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 220.752383][ T7] usb 1-1: SerialNumber: syz [ 220.861143][ T7653] loop4: detected capacity change from 0 to 512 [ 220.904291][ T7616] XFS (loop5): Quotacheck: Done. [ 221.012715][ T7] usb 1-1: 0:2 : does not exist [ 221.029836][ T7653] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 221.035722][ T7659] loop3: detected capacity change from 0 to 128 [ 221.065572][ T7659] FAT-fs (loop3): bogus number of reserved sectors [ 221.071726][ T7653] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.077532][ T7659] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 221.094399][ T7659] FAT-fs (loop3): Can't find a valid FAT filesystem [ 221.103235][ T7] usb 1-1: USB disconnect, device number 11 [ 221.207857][ T7653] EXT4-fs error (device loop4): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.4.1031: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 221.283771][ T5624] XFS (loop5): Unmounting Filesystem [ 221.347072][ T7662] loop1: detected capacity change from 0 to 256 [ 221.353830][ T7653] EXT4-fs (loop4): Remounting filesystem read-only [ 221.378917][ T7653] EXT4-fs error (device loop4): ext4_get_first_dir_block:3594: inode #12: comm syz.4.1031: directory missing '.' [ 221.449137][ T7653] EXT4-fs (loop4): Remounting filesystem read-only [ 221.457312][ T4360] udevd[4360]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.752931][ T7668] loop0: detected capacity change from 0 to 4096 [ 221.907911][ T4266] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 221.915106][ T4266] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 221.976737][ T7674] loop0: detected capacity change from 0 to 2048 [ 222.029123][ T6218] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 222.044733][ T7674] loop0: p2 < > p4 [ 222.050758][ T7674] loop0: p4 size 262144 extends beyond EOD, truncated [ 222.089136][ T4345] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 222.123305][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 222.168569][ T4360] udevd[4360]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 222.209849][ T6218] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 222.215893][ T4943] udevd[4943]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 222.224344][ T6218] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 222.238683][ T6218] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 222.284360][ T6218] usb 2-1: config 0 interface 0 has no altsetting 0 [ 222.291316][ T4345] usb 6-1: Using ep0 maxpacket: 32 [ 222.298590][ T4345] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 222.318716][ T4345] usb 6-1: config 2 has no interface number 0 [ 222.325997][ T6218] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 222.345489][ T6218] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 222.357349][ T4345] usb 6-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 222.376049][ T4345] usb 6-1: config 2 interface 88 has no altsetting 0 [ 222.383333][ T6218] usb 2-1: config 0 interface 0 has no altsetting 0 [ 222.400927][ T6218] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 222.414010][ T6218] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 222.425901][ T4345] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 222.435714][ T6218] usb 2-1: config 0 interface 0 has no altsetting 0 [ 222.442909][ T4345] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.451557][ T4345] usb 6-1: Product: syz [ 222.456382][ T4345] usb 6-1: Manufacturer: syz [ 222.461184][ T4345] usb 6-1: SerialNumber: syz [ 222.466330][ T6218] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 222.475830][ T6218] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 222.490084][ T6218] usb 2-1: config 0 interface 0 has no altsetting 0 [ 222.497258][ T7672] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 222.506635][ T6218] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 222.518699][ T6218] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 222.537350][ T6218] usb 2-1: config 0 interface 0 has no altsetting 0 [ 222.550552][ T6218] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 222.565608][ T6218] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 222.577893][ T6218] usb 2-1: config 0 interface 0 has no altsetting 0 [ 222.590964][ T6218] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 222.602773][ T6218] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 222.618928][ T6218] usb 2-1: config 0 interface 0 has no altsetting 0 [ 222.627543][ T6218] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 222.637375][ T6218] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 222.651426][ T6218] usb 2-1: config 0 interface 0 has no altsetting 0 [ 222.670476][ T6218] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 222.689268][ T6218] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 222.698039][ T6218] usb 2-1: Product: syz [ 222.702407][ T6218] usb 2-1: Manufacturer: syz [ 222.710529][ T6218] usb 2-1: SerialNumber: syz [ 222.718455][ T6218] usb 2-1: config 0 descriptor?? [ 222.738477][ T7672] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 222.751488][ T6218] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 222.939451][ T7690] loop3: detected capacity change from 0 to 4096 [ 222.997287][ T7690] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 223.059622][ C1] usb 2-1: yurex_control_callback - control failed: -2 [ 223.070115][ T6218] usb 2-1: USB disconnect, device number 10 [ 223.091517][ T6218] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 223.179925][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 223.363708][ T4345] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 223.401098][ T4345] asix: probe of 6-1:2.88 failed with error -71 [ 223.422351][ T4345] usb 6-1: USB disconnect, device number 4 [ 223.508174][ T7694] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1048 (7694) [ 223.534618][ T7694] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 223.546181][ T7694] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 223.555264][ T7694] BTRFS info (device loop4): enabling auto defrag [ 223.562397][ T7694] BTRFS info (device loop4): use no compression [ 223.568879][ T7694] BTRFS info (device loop4): max_inline at 4096 [ 223.589203][ T7694] BTRFS info (device loop4): using free space tree [ 223.703837][ T7694] BTRFS info (device loop4): enabling ssd optimizations [ 223.756210][ T7712] set_capacity_and_notify: 1 callbacks suppressed [ 223.756227][ T7712] loop1: detected capacity change from 0 to 4096 [ 223.780841][ T4311] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 223.788609][ T4314] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 224.009152][ T4311] usb 4-1: Using ep0 maxpacket: 8 [ 224.015440][ T4272] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 224.020090][ T4314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.033078][ T4272] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 224.041811][ T4311] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 224.083626][ T4279] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 224.099036][ T4311] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 224.108128][ T4311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.128477][ T7724] loop5: detected capacity change from 0 to 4096 [ 224.129010][ T4314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.159831][ T4314] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 224.180108][ T4311] usb 4-1: config 0 descriptor?? [ 224.210021][ T7726] loop1: detected capacity change from 0 to 128 [ 224.217178][ T4314] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.250717][ T4314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.293778][ T4314] usb 1-1: config 0 descriptor?? [ 224.318454][ T7728] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.328929][ T7726] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 224.369484][ T7726] ext4 filesystem being mounted at /247/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 224.394966][ T26] audit: type=1800 audit(1776131973.940:232): pid=7724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1054" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 224.595900][ T4311] saitek 0003:06A3:0621.0016: item fetching failed at offset 2/41 [ 224.615076][ T4311] saitek 0003:06A3:0621.0016: parse failed [ 224.652293][ T4311] saitek: probe of 0003:06A3:0621.0016 failed with error -22 [ 224.753728][ T4314] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 224.789698][ T4314] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 224.853424][ T7] usb 4-1: USB disconnect, device number 14 [ 224.878535][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 225.700212][ T7750] device syzkaller1 entered promiscuous mode [ 225.942747][ T7755] program syz.3.1066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.959670][ T7740] loop1: detected capacity change from 0 to 40427 [ 226.034174][ T7740] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(263168) [ 226.043892][ T7740] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 226.062473][ T7740] F2FS-fs (loop1): invalid crc value [ 226.075836][ T7740] F2FS-fs (loop1): Found nat_bits in checkpoint [ 226.177100][ C0] plantronics 0003:047F:FFFF.0017: usb_submit_urb(ctrl) failed: -1 [ 226.190186][ T4311] usb 1-1: USB disconnect, device number 12 [ 226.236265][ T7740] F2FS-fs (loop1): Start checkpoint disabled! [ 226.278201][ T7740] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 226.294073][ T7740] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 226.377838][ T7760] loop5: detected capacity change from 0 to 8192 [ 226.410289][ T7760] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 226.423699][ T7760] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 226.441040][ T7760] REISERFS (device loop5): using ordered data mode [ 226.447814][ T7760] reiserfs: using flush barriers [ 226.478277][ T7760] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 226.515712][ T7760] REISERFS (device loop5): checking transaction log (loop5) [ 226.536270][ T5680] kworker/u4:8: attempt to access beyond end of device [ 226.536270][ T5680] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 226.716541][ T7760] REISERFS (device loop5): Using tea hash to sort names [ 226.724452][ T7760] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 226.750563][ T7760] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 226.844268][ T26] audit: type=1800 audit(1776131976.390:233): pid=7760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1068" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 226.896210][ T26] audit: type=1800 audit(1776131976.420:234): pid=7760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1068" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 227.115845][ T7780] loop0: detected capacity change from 0 to 2048 [ 227.189680][ T7780] loop0: p1 p2 p3 [ 227.306397][ T7785] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1087'. [ 228.059067][ T5493] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 228.092413][ T7807] loop1: detected capacity change from 0 to 512 [ 228.115555][ T7807] EXT4-fs: Ignoring removed i_version option [ 228.146924][ T7807] EXT4-fs: Ignoring removed bh option [ 228.260917][ T5493] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.293054][ T5493] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.308762][ T5493] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 228.314672][ T7807] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 228.335772][ T5493] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.346583][ T5493] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.349956][ T7807] ext4 filesystem being mounted at /253/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 228.381714][ T7818] device syz_tun entered promiscuous mode [ 228.393028][ T5493] usb 5-1: config 0 descriptor?? [ 228.429726][ T7818] device batadv0 entered promiscuous mode [ 228.454484][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 228.466454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 228.519246][ T5495] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 228.709302][ T5495] usb 6-1: Using ep0 maxpacket: 16 [ 228.718341][ T5495] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.735741][ T5495] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.749736][ T5495] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 228.760310][ T5495] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.763921][ T7830] loop0: detected capacity change from 0 to 256 [ 228.789146][ T7829] loop1: detected capacity change from 0 to 4096 [ 228.797971][ T7829] EXT4-fs (loop1): Test dummy encryption mode enabled [ 228.821473][ T5493] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 228.848291][ T7830] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 228.877607][ T7829] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 228.887658][ T5493] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 229.065205][ T7829] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 229.212181][ T5495] mcp2221 0003:04D8:00DD.0019: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 229.278093][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 229.336548][ T7837] device syz_tun entered promiscuous mode [ 229.354961][ T7837] device batadv0 entered promiscuous mode [ 229.381987][ T7837] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 229.402757][ T7837] Cannot create hsr debugfs directory [ 229.437882][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 229.447780][ T7813] i2c i2c-1: unsupported multi-msg i2c transaction [ 229.474783][ T6218] usb 6-1: USB disconnect, device number 5 [ 229.649493][ T5495] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 229.802182][ T7847] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1102'. [ 229.839249][ T5495] usb 1-1: Using ep0 maxpacket: 32 [ 229.847701][ T5495] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.872614][ T5495] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.883454][ T5495] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 229.895062][ T5495] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.913809][ T5495] usb 1-1: config 0 descriptor?? [ 230.085865][ T7843] loop3: detected capacity change from 0 to 40427 [ 230.116427][ T7843] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 230.154330][ T7843] F2FS-fs (loop3): invalid crc value [ 230.291101][ T7843] F2FS-fs (loop3): Found nat_bits in checkpoint [ 230.406189][ T7851] loop5: detected capacity change from 0 to 32768 [ 230.445882][ T5495] savu 0003:1E7D:2D5A.001A: hiddev1,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 230.447072][ T7843] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 230.459749][ T7851] JBD2: Ignoring recovery information on journal [ 230.517252][ T7851] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 230.581168][ T26] audit: type=1800 audit(1776131980.130:235): pid=7851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1103" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 230.721441][ T4311] usb 1-1: USB disconnect, device number 13 [ 230.885488][ T5624] ocfs2: Unmounting device (7,5) on (node local) [ 231.019740][ T4274] syz-executor: attempt to access beyond end of device [ 231.019740][ T4274] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 231.170114][ T4314] usb 5-1: USB disconnect, device number 18 [ 232.143543][ T7871] loop4: detected capacity change from 0 to 32768 [ 232.341283][ T7893] JFS: block map error in dbBackSplit [ 232.375311][ T7893] ialloc: diAlloc returned -5! [ 232.531584][ T7895] loop3: detected capacity change from 0 to 32768 [ 232.553525][ T7895] JBD2: Ignoring recovery information on journal [ 232.659564][ T7895] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 232.746516][ T26] audit: type=1800 audit(1776131982.290:236): pid=7895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1117" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 232.954566][ T4274] ocfs2: Unmounting device (7,3) on (node local) [ 233.473782][ T7890] loop0: detected capacity change from 0 to 32768 [ 233.561805][ T7918] loop3: detected capacity change from 0 to 128 [ 233.578357][ T7899] loop5: detected capacity change from 0 to 32768 [ 233.597252][ T7890] XFS (loop0): Mounting V5 Filesystem [ 233.612299][ T7899] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.1118 (7899) [ 233.646223][ T7899] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 233.695239][ T7899] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 233.700177][ T7918] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 233.707810][ T7899] BTRFS info (device loop5): using free space tree [ 233.865322][ T7918] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.879201][ T7890] XFS (loop0): Ending clean mount [ 233.913025][ T7890] XFS (loop0): Quotacheck needed: Please wait. [ 233.986341][ T7899] BTRFS info (device loop5): enabling ssd optimizations [ 234.114581][ T7950] loop4: detected capacity change from 0 to 8 [ 234.121073][ T7890] XFS (loop0): Quotacheck: Done. [ 234.160654][ T26] audit: type=1804 audit(1776131983.700:237): pid=7890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1116" name="/newroot/205/file0/bus" dev="loop0" ino=9291 res=1 errno=0 [ 234.247323][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 234.276373][ T26] audit: type=1800 audit(1776131983.770:238): pid=7899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1118" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 234.358183][ T4266] XFS (loop0): Unmounting Filesystem [ 234.541053][ T7955] Invalid argument reading file caps for ./file0 [ 234.575123][ T5624] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 234.962903][ T4401] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop5 scanned by udevd (4401) [ 235.322020][ T7967] loop1: detected capacity change from 0 to 512 [ 235.349597][ T7967] ext2: Unknown parameter 'nouser_xattr' [ 235.435303][ T7971] device syzkaller1 entered promiscuous mode [ 235.925864][ T7984] loop4: detected capacity change from 0 to 256 [ 235.939292][ T6218] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 235.980193][ T7984] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8fd401e1, utbl_chksum : 0xe619d30d) [ 236.134019][ T6218] usb 1-1: Using ep0 maxpacket: 16 [ 236.143422][ T6218] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 236.180390][ T6218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.219914][ T6218] usb 1-1: config 0 descriptor?? [ 236.252960][ T6218] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 236.392897][ T7974] loop5: detected capacity change from 0 to 32768 [ 236.405781][ T7980] loop1: detected capacity change from 0 to 32768 [ 236.424771][ T7974] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1142 (7974) [ 236.451863][ T7980] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.1144 (7980) [ 236.473300][ T7974] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 236.485120][ T7974] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 236.500732][ T7974] BTRFS info (device loop5): setting nodatasum [ 236.519238][ T7980] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 236.523728][ T7974] BTRFS info (device loop5): force zlib compression, level 3 [ 236.551738][ T7980] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 236.556027][ T7974] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 236.569629][ T7980] BTRFS info (device loop1): enabling disk space caching [ 236.594269][ T7974] BTRFS info (device loop5): use lzo compression, level 0 [ 236.605008][ T7974] BTRFS info (device loop5): turning on flush-on-commit [ 236.629221][ T4314] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 236.647303][ T7980] BTRFS info (device loop1): force clearing of disk cache [ 236.658539][ T7974] BTRFS info (device loop5): enabling auto defrag [ 236.690319][ T7974] BTRFS info (device loop5): max_inline at 4096 [ 236.696668][ T7974] BTRFS info (device loop5): using free space tree [ 236.703585][ T7980] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 236.737591][ T7980] BTRFS info (device loop1): use zstd compression, level 3 [ 236.754390][ T7982] loop3: detected capacity change from 0 to 32768 [ 236.774949][ T7980] BTRFS info (device loop1): disk space caching is enabled [ 236.829247][ T4314] usb 5-1: Using ep0 maxpacket: 16 [ 236.836559][ T4314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.858135][ T4314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.871045][ T4314] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 236.885737][ T4314] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 236.912000][ T7982] XFS (loop3): Mounting V5 Filesystem [ 236.933469][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.967664][ T4314] usb 5-1: config 0 descriptor?? [ 236.988388][ T7974] BTRFS info (device loop5): enabling ssd optimizations [ 237.036501][ T7982] XFS (loop3): Ending clean mount [ 237.105373][ T7982] XFS (loop3): Quotacheck needed: Please wait. [ 237.183786][ T7980] BTRFS info (device loop1): enabling ssd optimizations [ 237.219505][ T7980] BTRFS info (device loop1): rebuilding free space tree [ 237.233256][ T5624] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 237.288998][ T4709] usb 1-1: USB disconnect, device number 14 [ 237.322166][ T7980] BTRFS info (device loop1): disabling free space tree [ 237.340048][ T7982] XFS (loop3): Quotacheck: Done. [ 237.342093][ T7980] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 237.382881][ T4314] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.001B/input/input15 [ 237.478137][ T7980] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 237.493278][ T4314] appleir 0003:05AC:8241.001B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 237.575750][ T26] audit: type=1804 audit(1776131987.100:239): pid=7982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1145" name="/newroot/240/file0/bus" dev="loop3" ino=9291 res=1 errno=0 [ 237.624428][ T4360] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop5 scanned by udevd (4360) [ 237.930450][ T4274] XFS (loop3): Unmounting Filesystem [ 237.930807][ T22] usb 5-1: USB disconnect, device number 19 [ 238.161921][ T8037] loop0: detected capacity change from 0 to 4096 [ 238.287439][ T8037] EXT4-fs (loop0): Test dummy encryption mode enabled [ 238.395216][ T4272] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 238.517540][ T8037] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 238.538573][ T8045] xt_hashlimit: max too large, truncated to 1048576 [ 238.713290][ T8037] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 239.242645][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 239.664255][ T8065] IPVS: sh: FWM 3 0x00000003 - no destination available [ 239.695337][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 240.023399][ T8052] loop4: detected capacity change from 0 to 32768 [ 240.076830][ T8052] (syz.4.1156,8052,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 240.115592][ T8052] (syz.4.1156,8052,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 240.142713][ T8078] loop5: detected capacity change from 0 to 1024 [ 240.162830][ T8078] EXT4-fs: inline encryption not supported [ 240.199218][ T4709] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 240.237664][ T8052] JBD2: Ignoring recovery information on journal [ 240.302380][ T8078] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 240.318613][ T8078] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.318706][ T8052] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 240.420967][ T4709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.469741][ T4709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.505834][ T4327] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 3: comm kworker/u4:6: lblock 3 mapped to illegal pblock 3 (length 3) [ 240.521079][ T4709] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 240.560211][ T8052] [ 240.562647][ T8052] ====================================================== [ 240.569713][ T8052] WARNING: possible circular locking dependency detected [ 240.576771][ T8052] syzkaller #0 Not tainted [ 240.581214][ T8052] ------------------------------------------------------ [ 240.588340][ T8052] syz.4.1156/8052 is trying to acquire lock: [ 240.594362][ T8052] ffff88802e4be650 (sb_internal#6){.+.+}-{0:0}, at: ocfs2_acquire_dquot+0x681/0xb20 [ 240.603963][ T8052] [ 240.603963][ T8052] but task is already holding lock: [ 240.611351][ T8052] ffff88805335a2e0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1fe/0x290 [ 240.622366][ T8052] [ 240.622366][ T8052] which lock already depends on the new lock. [ 240.622366][ T8052] [ 240.632802][ T8052] [ 240.632802][ T8052] the existing dependency chain (in reverse order) is: [ 240.635411][ T4327] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 240.641947][ T8052] [ 240.641947][ T8052] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 240.641980][ T8052] down_write+0x36/0x60 [ 240.642011][ T8052] ocfs2_lock_global_qf+0x1fe/0x290 [ 240.642041][ T8052] ocfs2_acquire_dquot+0x2a0/0xb20 [ 240.642060][ T8052] dqget+0x778/0xeb0 [ 240.642078][ T8052] __dquot_initialize+0x3c3/0xcd0 [ 240.642098][ T8052] ocfs2_get_init_inode+0x144/0x1b0 [ 240.642122][ T8052] ocfs2_mknod+0x8c8/0x25b0 [ 240.642140][ T8052] ocfs2_mkdir+0x1b6/0x4b0 [ 240.642157][ T8052] vfs_mkdir+0x387/0x570 [ 240.642172][ T8052] do_mkdirat+0x1d8/0x440 [ 240.642189][ T8052] __x64_sys_mkdirat+0x85/0x90 [ 240.642203][ T8052] do_syscall_64+0x4c/0xa0 [ 240.642228][ T8052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.642249][ T8052] [ 240.642249][ T8052] -> #5 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 240.642281][ T8052] down_write+0x36/0x60 [ 240.642307][ T8052] ocfs2_lock_global_qf+0x1d7/0x290 [ 240.642328][ T8052] ocfs2_acquire_dquot+0x2a0/0xb20 [ 240.642348][ T8052] dqget+0x778/0xeb0 [ 240.642365][ T8052] __dquot_initialize+0x3c3/0xcd0 [ 240.642382][ T8052] ocfs2_get_init_inode+0x144/0x1b0 [ 240.776127][ T8052] ocfs2_mknod+0x8c8/0x25b0 [ 240.781259][ T8052] ocfs2_mkdir+0x1b6/0x4b0 [ 240.786201][ T8052] vfs_mkdir+0x387/0x570 [ 240.790994][ T8052] do_mkdirat+0x1d8/0x440 [ 240.795839][ T8052] __x64_sys_mkdirat+0x85/0x90 [ 240.801124][ T8052] do_syscall_64+0x4c/0xa0 [ 240.806062][ T8052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.812500][ T8052] [ 240.812500][ T8052] -> #4 (&dquot->dq_lock){+.+.}-{3:3}: [ 240.820167][ T8052] __mutex_lock+0x12d/0xaf0 [ 240.825232][ T8052] dquot_commit+0x5a/0x410 [ 240.830203][ T8052] ext4_write_dquot+0x1f0/0x360 [ 240.835682][ T8052] mark_all_dquot_dirty+0xf9/0x400 [ 240.841328][ T8052] __dquot_alloc_space+0x5fc/0xe60 [ 240.846963][ T8052] ext4_mb_new_blocks+0xfc4/0x4610 [ 240.852598][ T8052] ext4_ext_map_blocks+0x195b/0x6810 [ 240.858448][ T8052] ext4_map_blocks+0x9de/0x1b70 [ 240.863850][ T8052] ext4_alloc_file_blocks+0x378/0xb60 [ 240.869748][ T8052] ext4_fallocate+0x9e3/0x2000 [ 240.875039][ T8052] vfs_fallocate+0x584/0x6f0 [ 240.880148][ T8052] __x64_sys_fallocate+0xbd/0x100 [ 240.886150][ T8052] do_syscall_64+0x4c/0xa0 [ 240.891107][ T8052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.897659][ T8052] [ 240.897659][ T8052] -> #3 (&ei->i_data_sem){++++}-{3:3}: [ 240.905413][ T8052] down_write+0x36/0x60 [ 240.910204][ T8052] ext4_truncate+0x999/0x1240 [ 240.915494][ T8052] ext4_setattr+0x11f8/0x1b50 [ 240.920683][ T8052] notify_change+0xc74/0xf40 [ 240.925883][ T8052] do_truncate+0x1ac/0x240 [ 240.930817][ T8052] do_sys_ftruncate+0x312/0x3c0 [ 240.936189][ T8052] do_syscall_64+0x4c/0xa0 [ 240.941126][ T8052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.947535][ T8052] [ 240.947535][ T8052] -> #2 (jbd2_handle){++++}-{0:0}: [ 240.954824][ T8052] wait_transaction_locked+0x1bf/0x270 [ 240.960798][ T8052] start_this_handle+0x7ec/0x2230 [ 240.966333][ T8052] jbd2__journal_restart+0x233/0x6c0 [ 240.972131][ T8052] ocfs2_extend_trans+0x2fc/0x800 [ 240.977672][ T8052] ocfs2_try_to_merge_extent+0xdb9/0x1cd0 [ 240.984169][ T8052] ocfs2_split_extent+0x1a82/0x21f0 [ 240.989892][ T8052] ocfs2_change_extent_flag+0xafb/0xe10 [ 240.996045][ T8052] ocfs2_mark_extent_written+0x30f/0x600 [ 241.002216][ T8052] ocfs2_dio_end_io+0xc34/0x1200 [ 241.007926][ T8052] dio_complete+0x251/0x710 [ 241.013219][ T8052] __blockdev_direct_IO+0x2f25/0x3570 [ 241.019116][ T8052] ocfs2_direct_IO+0x233/0x2a0 [ 241.024415][ T8052] generic_file_direct_write+0x10f/0x330 [ 241.030647][ T8052] __generic_file_write_iter+0x15f/0x2a0 [ 241.036852][ T8052] ocfs2_file_write_iter+0x1660/0x1f00 [ 241.042847][ T8052] do_iter_write+0x642/0xb10 [ 241.048055][ T8052] do_writev+0x27b/0x480 [ 241.052901][ T8052] do_syscall_64+0x4c/0xa0 [ 241.057930][ T8052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.064434][ T8052] [ 241.064434][ T8052] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 241.072954][ T8052] down_read+0x42/0x2d0 [ 241.077653][ T8052] ocfs2_start_trans+0x3a4/0x6f0 [ 241.083193][ T8052] ocfs2_mknod+0xf77/0x25b0 [ 241.088306][ T8052] ocfs2_create+0x1b6/0x4b0 [ 241.093415][ T8052] path_openat+0x1181/0x2ee0 [ 241.098523][ T8052] do_filp_open+0x1f1/0x430 [ 241.103554][ T8052] do_sys_openat2+0x150/0x4b0 [ 241.108848][ T8052] __x64_sys_openat+0x135/0x160 [ 241.114593][ T8052] do_syscall_64+0x4c/0xa0 [ 241.119621][ T8052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.126038][ T8052] [ 241.126038][ T8052] -> #0 (sb_internal#6){.+.+}-{0:0}: [ 241.133732][ T8052] __lock_acquire+0x2d07/0x7d10 [ 241.139126][ T8052] lock_acquire+0x1bb/0x4a0 [ 241.144148][ T8052] ocfs2_start_trans+0x2a5/0x6f0 [ 241.149710][ T8052] ocfs2_acquire_dquot+0x681/0xb20 [ 241.155433][ T8052] dqget+0x778/0xeb0 [ 241.159842][ T8052] __dquot_initialize+0x3c3/0xcd0 [ 241.165385][ T8052] ocfs2_get_init_inode+0x144/0x1b0 [ 241.171134][ T8052] ocfs2_mknod+0x8c8/0x25b0 [ 241.176165][ T8052] ocfs2_mkdir+0x1b6/0x4b0 [ 241.181099][ T8052] vfs_mkdir+0x387/0x570 [ 241.185856][ T8052] do_mkdirat+0x1d8/0x440 [ 241.190703][ T8052] __x64_sys_mkdirat+0x85/0x90 [ 241.195988][ T8052] do_syscall_64+0x4c/0xa0 [ 241.201033][ T8052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.207453][ T8052] [ 241.207453][ T8052] other info that might help us debug this: [ 241.207453][ T8052] [ 241.217763][ T8052] Chain exists of: [ 241.217763][ T8052] sb_internal#6 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ocfs2_quota_ip_alloc_sem_key [ 241.217763][ T8052] [ 241.234898][ T8052] Possible unsafe locking scenario: [ 241.234898][ T8052] [ 241.242541][ T8052] CPU0 CPU1 [ 241.247898][ T8052] ---- ---- [ 241.253265][ T8052] lock(&ocfs2_quota_ip_alloc_sem_key); [ 241.258894][ T8052] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 241.268697][ T8052] lock(&ocfs2_quota_ip_alloc_sem_key); [ 241.276850][ T8052] lock(sb_internal#6); [ 241.281183][ T8052] [ 241.281183][ T8052] *** DEADLOCK *** [ 241.281183][ T8052] [ 241.289427][ T8052] 6 locks held by syz.4.1156/8052: [ 241.294712][ T8052] #0: ffff88802e4be460 (sb_writers#29){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 241.304068][ T8052] #1: ffff888053359808 (&type->i_mutex_dir_key#21/1){+.+.}-{3:3}, at: filename_create+0x208/0x470 [ 241.314937][ T8052] #2: ffff888053356d88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16d/0x4810 [ 241.328606][ T8052] #3: ffff8880533e80a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x293/0xb20 [ 241.338627][ T8052] #4: ffff88805335a648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1d7/0x290 [ 241.351860][ T8052] #5: ffff88805335a2e0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1fe/0x290 [ 241.363196][ T8052] [ 241.363196][ T8052] stack backtrace: [ 241.369261][ T8052] CPU: 0 PID: 8052 Comm: syz.4.1156 Not tainted syzkaller #0 [ 241.376724][ T8052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 241.387071][ T8052] Call Trace: [ 241.390451][ T8052] [ 241.393392][ T8052] dump_stack_lvl+0x188/0x24e [ 241.398081][ T8052] ? load_image+0x400/0x400 [ 241.402581][ T8052] ? show_regs_print_info+0x12/0x12 [ 241.407901][ T8052] ? print_circular_bug+0x12b/0x1a0 [ 241.413119][ T8052] check_noncircular+0x296/0x330 [ 241.418109][ T8052] ? add_chain_block+0x940/0x940 [ 241.423114][ T8052] ? lockdep_lock+0xf1/0x1f0 [ 241.428174][ T8052] ? _find_first_zero_bit+0xcf/0x100 [ 241.433643][ T8052] __lock_acquire+0x2d07/0x7d10 [ 241.438622][ T8052] ? do_mkdirat+0x1d8/0x440 [ 241.443130][ T8052] ? verify_lock_unused+0x140/0x140 [ 241.448354][ T8052] ? verify_lock_unused+0x140/0x140 [ 241.453558][ T8052] ? mark_lock+0x94/0x320 [ 241.457893][ T8052] ? verify_lock_unused+0x140/0x140 [ 241.463188][ T8052] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 241.469172][ T8052] lock_acquire+0x1bb/0x4a0 [ 241.473781][ T8052] ? ocfs2_acquire_dquot+0x681/0xb20 [ 241.479203][ T8052] ? __might_sleep+0xd0/0xd0 [ 241.483841][ T8052] ? do_raw_spin_lock+0x128/0x2f0 [ 241.488909][ T8052] ? read_lock_is_recursive+0x10/0x10 [ 241.494305][ T8052] ? __rwlock_init+0x140/0x140 [ 241.499104][ T8052] ? do_raw_spin_unlock+0x11d/0x230 [ 241.504323][ T8052] ocfs2_start_trans+0x2a5/0x6f0 [ 241.509280][ T8052] ? ocfs2_acquire_dquot+0x681/0xb20 [ 241.514575][ T8052] ? ocfs2_recovery_exit+0x50/0x50 [ 241.519716][ T8052] ? do_raw_spin_unlock+0x11d/0x230 [ 241.524917][ T8052] ? _raw_spin_unlock+0x24/0x40 [ 241.529790][ T8052] ? ocfs2_qinfo_unlock+0x11a/0x140 [ 241.535000][ T8052] ocfs2_acquire_dquot+0x681/0xb20 [ 241.540123][ T8052] ? ocfs2_destroy_dquot+0x40/0x40 [ 241.545253][ T8052] ? percpu_counter_add_batch+0x13b/0x160 [ 241.551075][ T8052] dqget+0x778/0xeb0 [ 241.554990][ T8052] __dquot_initialize+0x3c3/0xcd0 [ 241.560113][ T8052] ? dquot_initialize+0x20/0x20 [ 241.565174][ T8052] ? do_raw_spin_unlock+0x11d/0x230 [ 241.570383][ T8052] ocfs2_get_init_inode+0x144/0x1b0 [ 241.575586][ T8052] ? ocfs2_create_inode_in_orphan+0x11a0/0x11a0 [ 241.582039][ T8052] ? mark_lock+0x94/0x320 [ 241.586374][ T8052] ocfs2_mknod+0x8c8/0x25b0 [ 241.591149][ T8052] ? mark_lock+0x94/0x320 [ 241.595571][ T8052] ? ocfs2_mkdir+0x4b0/0x4b0 [ 241.600190][ T8052] ? ocfs2_inode_lock_tracker+0x433/0x700 [ 241.605915][ T8052] ? __kmem_cache_free+0xb6/0x1f0 [ 241.611113][ T8052] ? __lock_acquire+0x7d10/0x7d10 [ 241.616147][ T8052] ? do_raw_spin_lock+0x128/0x2f0 [ 241.621265][ T8052] ? ocfs2_inode_unlock_tracker+0x26c/0x2e0 [ 241.627163][ T8052] ? __lock_acquire+0x7d10/0x7d10 [ 241.632200][ T8052] ? __rwlock_init+0x140/0x140 [ 241.636956][ T8052] ? ocfs2_lookup+0x4c9/0xa70 [ 241.641643][ T8052] ? do_raw_spin_unlock+0x11d/0x230 [ 241.646841][ T8052] ? put_pid+0xda/0x120 [ 241.651089][ T8052] ocfs2_mkdir+0x1b6/0x4b0 [ 241.655537][ T8052] ? make_kgid+0x660/0x660 [ 241.660156][ T8052] ? ocfs2_symlink+0x2870/0x2870 [ 241.665196][ T8052] ? HAS_UNMAPPED_ID+0x1d3/0x230 [ 241.670239][ T8052] ? ocfs2_getattr+0x360/0x360 [ 241.675033][ T8052] ? inode_permission+0xef/0x480 [ 241.680136][ T8052] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 241.685250][ T8052] ? security_inode_mkdir+0xb3/0x100 [ 241.690542][ T8052] vfs_mkdir+0x387/0x570 [ 241.694791][ T8052] do_mkdirat+0x1d8/0x440 [ 241.699135][ T8052] ? vfs_mkdir+0x570/0x570 [ 241.703548][ T8052] __x64_sys_mkdirat+0x85/0x90 [ 241.708327][ T8052] do_syscall_64+0x4c/0xa0 [ 241.712823][ T8052] ? clear_bhb_loop+0x60/0xb0 [ 241.717542][ T8052] ? clear_bhb_loop+0x60/0xb0 [ 241.722273][ T8052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.728218][ T8052] RIP: 0033:0x7fde3199c819 [ 241.732659][ T8052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.752467][ T8052] RSP: 002b:00007fde328a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 241.761258][ T8052] RAX: ffffffffffffffda RBX: 00007fde31c15fa0 RCX: 00007fde3199c819 [ 241.769517][ T8052] RDX: 0000000000000000 RSI: 0000200000002040 RDI: ffffffffffffff9c [ 241.777781][ T8052] RBP: 00007fde31a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 241.786047][ T8052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.794387][ T8052] R13: 00007fde31c16038 R14: 00007fde31c15fa0 R15: 00007ffd90cf06f8 [ 241.802458][ T8052] [ 241.812087][ T4327] EXT4-fs (loop5): This should not happen!! Data will be lost [ 241.812087][ T4327] [ 241.822908][ T4327] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 241.846970][ T4327] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 241.868371][ T4709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.883703][ T4327] EXT4-fs (loop5): This should not happen!! Data will be lost [ 241.883703][ T4327] [ 241.901766][ T8089] loop0: detected capacity change from 0 to 128 [ 241.916553][ T5624] EXT4-fs (loop5): unmounting filesystem. [ 241.929431][ T4709] usb 4-1: config 0 descriptor?? [ 241.976886][ T8089] syz.0.1170: attempt to access beyond end of device [ 241.976886][ T8089] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 242.004896][ T8089] syz.0.1170: attempt to access beyond end of device [ 242.004896][ T8089] loop0: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 242.036134][ T8089] Buffer I/O error on dev loop0, logical block 70, lost async page write [ 242.046361][ T8089] syz.0.1170: attempt to access beyond end of device [ 242.046361][ T8089] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 242.062883][ T4279] ocfs2: Unmounting device (7,4) on (node local) [ 242.063411][ T8089] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 242.078411][ T8089] syz.0.1170: attempt to access beyond end of device [ 242.078411][ T8089] loop0: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 242.127671][ T8089] Buffer I/O error on dev loop0, logical block 72, lost async page write [ 242.136918][ T8089] syz.0.1170: attempt to access beyond end of device [ 242.136918][ T8089] loop0: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 242.155799][ T8092] syz.0.1170: attempt to access beyond end of device [ 242.155799][ T8092] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 242.175264][ T8092] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 242.356947][ T4709] cm6533_jd 0003:0D8C:0022.001C: unknown main item tag 0x0 [ 242.365881][ T4709] cm6533_jd 0003:0D8C:0022.001C: unknown main item tag 0x0 [ 242.374673][ T4709] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.001C/input/input16 [ 242.388481][ T4709] cm6533_jd 0003:0D8C:0022.001C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 242.561247][ T5495] usb 4-1: USB disconnect, device number 15