last executing test programs: 2.588372332s ago: executing program 2 (id=899): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='.\x02\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) 2.429056785s ago: executing program 3 (id=902): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r0, r0, 0x0, 0x1002000ff) 1.885623738s ago: executing program 1 (id=910): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x9, {"3ac78ef8ff330d000800000000fe13fe", "3d85b043e15fad27a639f105b5e9f977", "47eb29fe90b90f105d66b3e5a7c94742"}, 0x80000004, 0x71c5dd2cae91051a}) close(0x3) 1.885548348s ago: executing program 2 (id=911): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="ad432bbd70000000000002f000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x20048810) 1.685872092s ago: executing program 1 (id=912): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x14, r1, 0x80485dc1c126afb3, 0x0, 0x0, {0x33}}, 0x14}}, 0x0) 1.473872987s ago: executing program 1 (id=913): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000d00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1014400, &(0x7f0000000040)=ANY=[], 0x2, 0x631b, &(0x7f00000082c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x1a30c1, 0x9c37611dc13d0dab) 1.461260817s ago: executing program 2 (id=914): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000001180)={0x4, 0x1, 0x4, 0x0, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000001580)={0x1, @sliced={0x4, [0x5, 0x2, 0x8, 0x2, 0xa6, 0x6273, 0x400, 0x2f44, 0xd, 0x401, 0x5, 0x5, 0x4, 0xffff, 0x491, 0xffff, 0xfff, 0x7, 0x0, 0x6, 0xc, 0x0, 0x6, 0x1, 0xfff9, 0x4, 0x3, 0x3, 0x9, 0x6, 0x7, 0x4, 0x0, 0x100, 0x8, 0x8, 0x2, 0x5, 0x2f9, 0x1000, 0x3, 0xfff, 0xfffd, 0x80, 0x4, 0x4, 0x6, 0x1], 0x2}}) 1.390300789s ago: executing program 3 (id=915): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x0, @none, 0x1004, 0x2}, 0xe) 1.368096879s ago: executing program 2 (id=916): futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc)=0x5, 0x3, 0x4000300, 0x0, &(0x7f0000000040)=0x7fffff5, 0x1000004) 1.31633951s ago: executing program 3 (id=917): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 1.234911622s ago: executing program 3 (id=918): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x563, 0x0, 0x0, 0x0, 0x81}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000002}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600ebfb}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10006c00, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) 1.234253752s ago: executing program 4 (id=928): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) 1.185804863s ago: executing program 0 (id=919): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$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") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x800, &(0x7f0000000000)={[{@delalloc}, {@barrier}, {@barrier}, {@jqfmt_vfsv1}]}, 0x1, 0x7a1, &(0x7f0000000f80)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, &(0x7f0000000000)) 1.148892864s ago: executing program 4 (id=920): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='.\x02\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) 1.130335985s ago: executing program 3 (id=921): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x58}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) 1.047301766s ago: executing program 3 (id=922): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 668.685855ms ago: executing program 1 (id=923): unshare(0xa020480) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 616.910796ms ago: executing program 4 (id=924): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0a0000000300000008000000", @ANYRES32=r0], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) 514.616738ms ago: executing program 0 (id=925): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_map={0x1000000000004}}) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) 410.3382ms ago: executing program 2 (id=926): r0 = syz_io_uring_setup(0x32ec, &(0x7f0000000000)={0x0, 0xa3a2, 0x2, 0x2, 0x1f8}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000001c0)) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x4b08, 0x7a9c, 0x3, &(0x7f0000000140)={[0x180000000000000]}, 0x8) 369.759941ms ago: executing program 0 (id=927): unshare(0x2c020400) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1580, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000500)={0x550, 0x800, 0x500, 0x280, 0x8, 0x59, 0x2, 0x1, {0x7, 0xf1a4, 0x1}, {0x4, 0x101, 0x1}, {0x4, 0xe2}, {0x8, 0xfffff3b2}, 0x4, 0x1, 0x4b, 0x9, 0x0, 0xe, 0x10, 0x9, 0x2, 0x9, 0xffffffff, 0x4, 0x20, 0x2, 0x2}) 304.667083ms ago: executing program 4 (id=929): mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) 255.416804ms ago: executing program 0 (id=930): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000180)={0x9, 'vlan1\x00', {0x6719}, 0x5}) 166.045176ms ago: executing program 1 (id=931): r0 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) capget(&(0x7f0000feaff9)={0x20071026}, &(0x7f0000000000)={0x1, 0x3fffffd, 0x0, 0x0, 0x7ff}) 143.639147ms ago: executing program 4 (id=932): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000009c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004800}, 0x80) 94.374107ms ago: executing program 1 (id=933): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f000000d680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f00000001c0)={&(0x7f0000000100)='blkio.bfq.empty_time\x00', &(0x7f0000000140)='workdir', 0x86}) 90.277968ms ago: executing program 0 (id=943): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a32000000000500010007000000140007800800134000000000080012"], 0x64}}, 0x4) 25.062159ms ago: executing program 2 (id=934): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f00000022c0)={0x20, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x24000000) 24.955549ms ago: executing program 4 (id=935): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x27, 0x366, &(0x7f0000000340)="$eJzs3T9oXHUcAPDv9SW5JFhzg1BwOt0EKU3AxSmhVChm0Mrhv8XDpqK5s5DDgzjkcpMUJ8VF0Mmtg46dxUHEzcHVCuIfXOxWaPDJ3b17979NwYuVfj5D+fL9fb/v93uvj9y7I/fLG63YvbwYV27d+jWWlwuxsHl+M24XohSnIomew5jqw6XpeQDgAXc7TeOvtOfe1R+v9iOv/QDw/9V9/X/r9CBRvI/ma4/MY0kAwJwN3v8X7vb+/4Wp2atzWxYAMEcTn/8/OTI89jH/Qv47AT0r818gAPCve+nV157f2o64VC4vR9Q/aFaalXh2ML51Jd6OWuzEuViLo4jeg0LvaaHz73MXty+cK3f8VopKp6NZiai3mpXek8JW0u0vxnqsRSnrT/P+pNO/3u0vR8Rhqzt/1AvNymKsZvP/tBo7sRFr8dhEf8TF7Qsb5ewAlXq/vxXRjuX+SXTWfzbW4oc342rU4nJ0egfrP1gvl8+n2yP9zevFbh0AAAAAAAAAAAAAAAAAAAAAAMzD2XKuFJV6a7HSH7mUFyQxGM/3x8nqsv2B2r39gdJif3eea8n4/kCj+/M0Kwtx6r86aQAAAAAAAAAAAAAAAAAAAHjANPaXolqr7ew19t/fHQ5aQ5l3v/vym5XoDy1kre8kg67IkiPH6RcOHTmJfIo0b0+TkZosSCL6xYfV6zfyFQ/XFPOzmGjvBMWJoUK2pmqtdvqJXz6b1vV3JzjsZpKYuCyjQSGbf2io/mgnsRwRR7O6Zgcb96i5mabprPaDT8cz2VYMrftexjGCbxc71/bMM93M19lMTz299vLNT774Y7dai3bvytRqS3uNo/QYR45CRJ5J0yxIhu6fQnadC1PuhOlBe5Bp7zX2q8mPf77y+EffjxUn0++fdDjz3uy5vhrPLPWCQkSpfxHuttTFKTf/9OD1O/ndOzw085YYCc58vlm9cfDz78f9Xx76IWGjDgAAAAAAAAAAAAAAAAAAOBGDL/2ODaRp2pos73+l/8WTWBsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnJTB3/8fCtoTmSwoxWRxHtxpxeRQcWevMXPylRM9VQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmL/BAAA//+EQ3bE") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 0s ago: executing program 0 (id=936): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0702000000000000000001000000040008803400048005000300010000000e0003000100000005000300010000000500030080ff00000500030000000000050003000700000008000100030000000800020001"], 0x5c}}, 0x0) kernel console output (not intermixed with test programs): rrupt. Please run fsck. [ 74.240468][ T4407] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 74.430964][ T4452] loop3: detected capacity change from 0 to 1024 [ 74.555267][ T4452] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.593231][ T4444] loop0: detected capacity change from 0 to 32768 [ 74.613471][ T4452] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.614358][ T4444] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.75 (4444) [ 74.717544][ T4444] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 74.729924][ T4444] BTRFS info (device loop0): using free space tree [ 74.736463][ T4444] BTRFS info (device loop0): has skinny extents [ 74.830525][ T4231] lenovo 0003:17EF:60A3.0001: ignoring exceeding usage max [ 74.851356][ T4231] lenovo 0003:17EF:60A3.0001: ignoring exceeding usage max [ 74.861406][ T4231] lenovo 0003:17EF:60A3.0001: unknown main item tag 0x0 [ 74.868482][ T4231] lenovo 0003:17EF:60A3.0001: unknown main item tag 0x0 [ 74.876196][ T4231] lenovo 0003:17EF:60A3.0001: unknown main item tag 0x0 [ 74.883663][ T4231] lenovo 0003:17EF:60A3.0001: unknown main item tag 0x0 [ 74.890971][ T4231] lenovo 0003:17EF:60A3.0001: unknown main item tag 0x0 [ 74.899370][ T4231] lenovo 0003:17EF:60A3.0001: unknown main item tag 0x0 [ 74.929354][ T4231] lenovo 0003:17EF:60A3.0001: unknown main item tag 0x0 [ 74.974593][ T4231] lenovo 0003:17EF:60A3.0001: unknown main item tag 0x0 [ 74.993162][ T4231] lenovo 0003:17EF:60A3.0001: unknown main item tag 0x0 [ 75.018420][ T4231] lenovo 0003:17EF:60A3.0001: unknown main item tag 0x0 [ 75.039470][ T4231] lenovo 0003:17EF:60A3.0001: unknown main item tag 0x0 [ 75.046762][ T4231] lenovo 0003:17EF:60A3.0001: unknown main item tag 0x0 [ 75.069480][ T4231] lenovo 0003:17EF:60A3.0001: unknown main item tag 0x0 [ 75.075271][ T4444] BTRFS info (device loop0): enabling ssd optimizations [ 75.083517][ T4231] lenovo 0003:17EF:60A3.0001: unknown main item tag 0x0 [ 75.169245][ T4231] lenovo 0003:17EF:60A3.0001: unknown main item tag 0x0 [ 75.229712][ T4231] lenovo 0003:17EF:60A3.0001: hidraw0: USB HID v0.04 Device [HID 17ef:60a3] on usb-dummy_hcd.4-1/input0 [ 75.318729][ T4231] usb 5-1: USB disconnect, device number 2 [ 75.454926][ T4499] loop3: detected capacity change from 0 to 2048 [ 75.583386][ T4499] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 75.601341][ T4470] loop2: detected capacity change from 0 to 32768 [ 75.612121][ T4444] syz.0.75 (4444) used greatest stack depth: 21136 bytes left [ 75.620658][ T4497] fido_id[4497]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 75.642432][ T4470] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.87 (4470) [ 75.766641][ T4470] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 75.848741][ T4470] BTRFS info (device loop2): setting nodatasum [ 75.958609][ T4470] BTRFS info (device loop2): force zlib compression, level 3 [ 75.965649][ T4507] loop4: detected capacity change from 0 to 1024 [ 76.049403][ T4470] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 76.066039][ T4509] netlink: 'syz.3.97': attribute type 1 has an invalid length. [ 76.080359][ T4470] BTRFS info (device loop2): use lzo compression, level 0 [ 76.142721][ T4470] BTRFS info (device loop2): turning on flush-on-commit [ 76.170184][ T4470] BTRFS info (device loop2): enabling auto defrag [ 76.177252][ T4470] BTRFS info (device loop2): max_inline at 4096 [ 76.194135][ T4470] BTRFS info (device loop2): using free space tree [ 76.203077][ T4470] BTRFS info (device loop2): has skinny extents [ 76.223679][ T4507] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,barrier,barrier=0x0000000000000005,mb_optimize_scan=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 76.400114][ T4529] netlink: 28 bytes leftover after parsing attributes in process `syz.1.102'. [ 76.536374][ T4470] BTRFS info (device loop2): enabling ssd optimizations [ 76.539522][ T4529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.577432][ T4529] Zero length message leads to an empty skb [ 76.869847][ T4557] loop4: detected capacity change from 0 to 512 [ 76.884403][ T4179] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (4179) [ 77.184589][ T4577] tipc: Enabling of bearer rejected, failed to enable media [ 77.451744][ T4591] erofs: (device loop0): mounted with root inode @ nid 36. [ 77.463702][ T4595] mmap: syz.1.120 (4595) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 77.631218][ T4605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.123'. [ 77.674033][ T4605] netlink: 212 bytes leftover after parsing attributes in process `syz.3.123'. [ 77.699254][ T4605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.123'. [ 77.874861][ T4616] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 77.897238][ T4616] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.021338][ T4616] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,jqfmt=vfsv0,quota,,errors=continue. Quota mode: writeback. [ 78.061735][ T4616] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.079409][ T4563] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.499367][ T4563] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 78.514547][ T4563] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 78.525426][ T4563] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 78.536269][ T4563] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 78.548430][ T4563] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 78.649544][ T4566] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.665018][ T25] audit: type=1800 audit(1784811450.391:2): pid=4643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.138" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 78.709666][ T4563] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 78.723741][ T4563] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 78.733165][ T4563] usb 1-1: Product: syz [ 78.749132][ T4563] usb 1-1: Manufacturer: syz [ 78.816412][ T4563] cdc_wdm 1-1:1.0: skipping garbage [ 78.822616][ T4563] cdc_wdm 1-1:1.0: skipping garbage [ 78.860017][ T4563] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 78.866322][ T4563] cdc_wdm 1-1:1.0: Unknown control protocol [ 78.875162][ T4649] set_capacity_and_notify: 3 callbacks suppressed [ 78.875176][ T4649] loop1: detected capacity change from 0 to 1024 [ 78.916843][ T4651] loop2: detected capacity change from 0 to 128 [ 78.928721][ T4649] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 78.949164][ T4566] usb 4-1: Using ep0 maxpacket: 32 [ 78.987418][ T4653] loop4: detected capacity change from 0 to 64 [ 79.039187][ C0] cdc_wdm 1-1:1.0: unknown notification 158 received: index 57142 len 1194 [ 79.119468][ T4566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.140646][ T4566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.181908][ T4566] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 79.210434][ T4566] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.243425][ T4190] usb 1-1: USB disconnect, device number 2 [ 79.268074][ T4566] usb 4-1: config 0 descriptor?? [ 79.384958][ T4663] loop2: detected capacity change from 0 to 1024 [ 79.441968][ T4663] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.763155][ T4566] ft260 0003:0403:6030.0002: collection stack underflow [ 79.773569][ T4566] ft260 0003:0403:6030.0002: item 0 1 0 12 parsing failed [ 79.782287][ T4566] ft260 0003:0403:6030.0002: failed to parse HID [ 79.805190][ T4566] ft260: probe of 0003:0403:6030.0002 failed with error -22 [ 79.974577][ T4190] usb 4-1: USB disconnect, device number 2 [ 80.009262][ T4563] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 80.211260][ T4566] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.309338][ T4704] hugetlbfs: Bad value for 'size' [ 80.340839][ T4706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.167'. [ 80.350078][ T4706] netlink: 5 bytes leftover after parsing attributes in process `syz.4.167'. [ 80.419530][ T4563] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 80.433485][ T4563] usb 3-1: config 0 has no interface number 0 [ 80.440791][ T4563] usb 3-1: config 0 interface 41 has no altsetting 0 [ 80.469455][ T4566] usb 2-1: Using ep0 maxpacket: 16 [ 80.589425][ T4566] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 80.618725][ T4566] usb 2-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 80.649689][ T4563] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 80.658763][ T4563] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.690588][ T4566] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.700193][ T4563] usb 3-1: Product: syz [ 80.706361][ T4563] usb 3-1: Manufacturer: syz [ 80.720524][ T4563] usb 3-1: SerialNumber: syz [ 80.726767][ T4566] usb 2-1: config 0 descriptor?? [ 80.734520][ T4563] usb 3-1: config 0 descriptor?? [ 80.757515][ T4726] loop3: detected capacity change from 0 to 64 [ 80.845549][ T4728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.178'. [ 81.098315][ T4742] loop3: detected capacity change from 0 to 256 [ 81.211364][ T4563] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 81.223623][ T4566] betop 0003:8380:1850.0003: unknown main item tag 0x3 [ 81.241423][ T4746] loop3: detected capacity change from 0 to 736 [ 81.248535][ T4563] CoreChips: probe of 3-1:0.41 failed with error -71 [ 81.255476][ T4566] betop 0003:8380:1850.0003: unknown main item tag 0xd [ 81.262777][ T4566] betop 0003:8380:1850.0003: unknown main item tag 0x1 [ 81.273665][ T4563] usb 3-1: USB disconnect, device number 2 [ 81.281729][ T4566] betop 0003:8380:1850.0003: unknown main item tag 0x1 [ 81.288701][ T4566] betop 0003:8380:1850.0003: unknown main item tag 0x0 [ 81.323176][ T4566] betop 0003:8380:1850.0003: hidraw0: USB HID v0.09 Device [HID 8380:1850] on usb-dummy_hcd.1-1/input0 [ 81.335089][ T4566] betop 0003:8380:1850.0003: no inputs found [ 81.369045][ T4746] iso9660: Corrupted directory entry in block 1 of inode 1483 [ 81.427777][ T4566] usb 2-1: USB disconnect, device number 2 [ 81.471315][ T4565] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.911125][ T4565] usb 5-1: config 15 has an invalid interface number: 44 but max is 0 [ 81.930274][ T4565] usb 5-1: config 15 has no interface number 0 [ 81.936588][ T4565] usb 5-1: config 15 interface 44 altsetting 2 endpoint 0xB has an invalid bInterval 27, changing to 8 [ 82.011276][ T4565] usb 5-1: config 15 interface 44 has no altsetting 0 [ 82.200230][ T4565] usb 5-1: New USB device found, idVendor=049f, idProduct=ffff, bcdDevice=76.3d [ 82.210451][ T4565] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.223601][ T4565] usb 5-1: Product: syz [ 82.228118][ T4565] usb 5-1: Manufacturer: syz [ 82.234461][ T4565] usb 5-1: SerialNumber: syz [ 82.496740][ T4797] netlink: 'syz.2.212': attribute type 4 has an invalid length. [ 82.550524][ T4565] safe_serial 5-1:15.44: safe_serial converter detected [ 82.581603][ T4565] safe_serial: probe of 5-1:15.44 failed with error -22 [ 82.603471][ T4565] usb 5-1: USB disconnect, device number 3 [ 82.671909][ T4771] loop0: detected capacity change from 0 to 32768 [ 82.783813][ T4771] XFS (loop0): Mounting V5 Filesystem [ 82.812066][ T4566] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.875104][ T4771] XFS (loop0): Ending clean mount [ 82.950331][ T4801] loop2: detected capacity change from 0 to 32768 [ 82.984245][ T4801] [ 82.984245][ T4801] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.984245][ T4801] [ 83.008302][ T4187] XFS (loop0): Unmounting Filesystem [ 83.056946][ T4801] ERROR: (device loop2): diWrite: ixpxd invalid [ 83.056946][ T4801] [ 83.074280][ T4566] usb 4-1: Using ep0 maxpacket: 32 [ 83.111334][ T4801] ERROR: (device loop2): txCommit: [ 83.111334][ T4801] [ 83.120081][ T4818] netlink: 'syz.4.219': attribute type 4 has an invalid length. [ 83.134399][ T4818] netlink: 168 bytes leftover after parsing attributes in process `syz.4.219'. [ 83.153888][ T1108] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.197855][ T4188] [ 83.197855][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.197855][ T4188] [ 83.213877][ T4188] [ 83.213877][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.213877][ T4188] [ 83.214110][ T4566] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 83.249438][ T4566] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.288235][ T4566] usb 4-1: config 0 descriptor?? [ 83.372867][ T4566] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 83.435863][ T4826] loop4: detected capacity change from 0 to 1024 [ 83.511806][ T4828] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 83.529571][ T1108] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 83.540283][ T4828] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 83.559984][ T4832] EXT4-fs (loop2): Ignoring removed bh option [ 83.565576][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.590084][ T4826] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.620592][ T4828] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #17: comm syz.0.218: corrupted in-inode xattr [ 83.639682][ T4832] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 83.664835][ C0] vkms_vblank_simulate: vblank timer overrun [ 83.679742][ T1108] usb 2-1: config 0 descriptor?? [ 83.696354][ T4828] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.218: couldn't read orphan inode 17 (err -117) [ 83.700221][ T4826] EXT4-fs error (device loop4): ext4_lookup:1858: inode #16: comm syz.4.224: unexpected EA_INODE flag [ 83.714966][ T4828] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,nodelalloc,debug_want_extra_isize=0x000000000000002e,noblock_validity,jqfmt=vfsv0,quota,,errors=continue. Quota mode: writeback. [ 83.755632][ T25] audit: type=1800 audit(1784811455.481:3): pid=4828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.218" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 83.756483][ T4828] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 83.819254][ T4566] gspca_vc032x: reg_w err -71 [ 83.824878][ T4566] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.831429][ T4828] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.218: invalid indirect mapped block 32768 (level 2) [ 83.837614][ T4566] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.854543][ T4566] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.861428][ T4566] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.866849][ T4566] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.877687][ T4566] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.884354][ T4566] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.904432][ T4566] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.909831][ T4566] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.915123][ T4566] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.921011][ T4566] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.926334][ T4566] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.939621][ T4566] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.944948][ T4566] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.969475][ T1108] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 83.969564][ T4566] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.998554][ T1108] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 84.026645][ T4843] set_capacity_and_notify: 2 callbacks suppressed [ 84.026659][ T4843] loop4: detected capacity change from 0 to 2048 [ 84.044774][ T4566] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.050496][ T4566] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.055787][ T4566] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.067965][ T4566] gspca_vc032x: Unknown sensor... [ 84.073469][ T4566] vc032x: probe of 4-1:0.0 failed with error -22 [ 84.091091][ T4566] usb 4-1: USB disconnect, device number 3 [ 84.175364][ T4843] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.189318][ T1108] [drm:udl_init] *ERROR* Selecting channel failed [ 84.233282][ T1108] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 84.249835][ T1108] [drm] Initialized udl on minor 2 [ 84.279797][ T1108] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 84.295817][ T4840] loop2: detected capacity change from 0 to 32768 [ 84.300707][ T1108] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 84.352322][ T1108] usb 2-1: USB disconnect, device number 3 [ 84.366192][ T4233] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 84.406525][ T4850] loop3: detected capacity change from 0 to 1024 [ 84.423767][ T4233] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 84.439733][ T4233] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 84.454329][ T4840] XFS (loop2): Mounting V5 Filesystem [ 84.561317][ T4840] XFS (loop2): Ending clean mount [ 84.661386][ T4188] XFS (loop2): Unmounting Filesystem [ 84.669158][ T4846] loop4: detected capacity change from 0 to 32768 [ 84.749262][ T4846] [ 84.749262][ T4846] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.749262][ T4846] [ 84.786114][ T4860] vivid-002: disconnect [ 84.862864][ T4236] ERROR: (device loop4): diWrite: ixpxd invalid [ 84.862864][ T4236] [ 84.891669][ T4859] vivid-002: reconnect [ 84.926157][ T4236] ERROR: (device loop4): remounting filesystem as read-only [ 84.939718][ T4236] ERROR: (device loop4): txCommit: [ 84.939718][ T4236] [ 84.947414][ T4236] jfs_write_inode: jfs_commit_inode failed! [ 84.964708][ T4199] [ 84.964708][ T4199] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.964708][ T4199] [ 84.997506][ T4199] [ 84.997506][ T4199] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.997506][ T4199] [ 85.356037][ T4893] loop2: detected capacity change from 0 to 16 [ 85.482230][ T4893] erofs: (device loop2): mounted with root inode @ nid 36. [ 85.524573][ T4893] attempt to access beyond end of device [ 85.524573][ T4893] loop2: rw=524288, want=32, limit=16 [ 85.553543][ T4889] loop4: detected capacity change from 0 to 8192 [ 85.613078][ T4893] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -21 in[55, 4041] out[4096] [ 85.713647][ T4889] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 85.720449][ T4900] loop0: detected capacity change from 0 to 4096 [ 85.733874][ T25] audit: type=1800 audit(1784811457.461:4): pid=4893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.248" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 85.794068][ T4889] FAT-fs (loop4): Filesystem has been set read-only [ 85.860240][ T4900] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 85.915725][ T4901] loop3: detected capacity change from 0 to 8192 [ 85.975932][ T4900] ntfs3: loop0: Failed to load $Extend. [ 86.011459][ T4901] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 86.051188][ T4914] device geneve2 entered promiscuous mode [ 86.154318][ T4901] REISERFS (device loop3): using ordered data mode [ 86.208741][ T4906] loop1: detected capacity change from 0 to 32768 [ 86.233701][ T4901] reiserfs: using flush barriers [ 86.251972][ T4901] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 86.275566][ T4911] loop4: detected capacity change from 0 to 8192 [ 86.306924][ T4901] REISERFS (device loop3): checking transaction log (loop3) [ 86.317703][ T4911] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 86.336946][ T4901] REISERFS (device loop3): Using r5 hash to sort names [ 86.348763][ T4911] REISERFS (device loop4): using ordered data mode [ 86.355753][ T4911] reiserfs: using flush barriers [ 86.362339][ T4911] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 86.380111][ T4911] REISERFS (device loop4): checking transaction log (loop4) [ 86.400976][ T4901] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 86.642448][ T21] cfg80211: failed to load regulatory.db [ 86.651665][ T4911] REISERFS (device loop4): Using tea hash to sort names [ 86.659056][ T4911] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 86.669267][ T4566] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.969205][ T4566] usb 3-1: Using ep0 maxpacket: 16 [ 87.309416][ T4566] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 87.318667][ T4566] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.327114][ T4566] usb 3-1: Product: syz [ 87.331533][ T4566] usb 3-1: Manufacturer: syz [ 87.336138][ T4566] usb 3-1: SerialNumber: syz [ 87.343546][ T4566] usb 3-1: config 0 descriptor?? [ 87.579201][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 87.663742][ T4942] XFS (loop1): Mounting V5 Filesystem [ 87.731890][ T4942] XFS (loop1): Ending clean mount [ 87.743701][ T4942] XFS (loop1): Quotacheck needed: Please wait. [ 87.787392][ T4942] XFS (loop1): Quotacheck: Done. [ 87.819498][ T4566] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 87.838536][ T4566] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 87.859706][ T4566] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 87.870896][ T4566] usb 3-1: media controller created [ 87.875314][ T4189] XFS (loop1): Unmounting Filesystem [ 87.888522][ T4566] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.019417][ T21] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 88.039361][ T4566] zl10353_read_register: readreg error (reg=127, ret==0) [ 88.046542][ T4566] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 88.069203][ T21] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 88.080480][ T4566] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 88.089485][ T21] usb 4-1: config 220 has no interface number 2 [ 88.095782][ T21] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 88.131336][ T4566] usb 3-1: USB disconnect, device number 3 [ 88.168854][ T4972] rdma_op ffff8880605ef1f0 conn xmit_rdma 0000000000000000 [ 88.172072][ T21] usb 4-1: config 220 interface 0 has no altsetting 0 [ 88.211425][ T4566] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 88.220762][ T21] usb 4-1: config 220 interface 76 has no altsetting 0 [ 88.227634][ T21] usb 4-1: config 220 interface 1 has no altsetting 0 [ 88.296170][ T4976] vim2m vim2m.0: vidioc_s_fmt queue busy [ 88.360239][ T4978] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.394552][ T4978] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.440629][ T21] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 88.450343][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.458346][ T21] usb 4-1: Product: syz [ 88.467365][ T4978] EXT4-fs (loop1): Cannot change journaled quota options when quota turned on [ 88.477275][ T21] usb 4-1: Manufacturer: syz [ 88.494605][ T21] usb 4-1: SerialNumber: syz [ 88.805329][ T4502] loop0: p1 < > p4 [ 88.805329][ T4502] p4: [ 88.855615][ T4502] loop0: p4 size 722688 extends beyond EOD, truncated [ 88.910147][ T21] usb 4-1: selecting invalid altsetting 0 [ 88.927475][ T21] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 88.944593][ T21] usb 4-1: No valid video chain found. [ 88.949373][ T4998] loop0: p1 < > p4 [ 88.949373][ T4998] p4: [ 89.002015][ T4998] loop0: p4 size 722688 extends beyond EOD, truncated [ 89.061911][ T5019] tipc: Enabling of bearer rejected, failed to enable media [ 89.070308][ T21] usb 4-1: selecting invalid altsetting 0 [ 89.084299][ T21] usbtest: probe of 4-1:220.1 failed with error -22 [ 89.109451][ T21] usb 4-1: USB disconnect, device number 4 [ 89.133299][ T1108] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 89.172847][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 89.192882][ T4502] udevd[4502]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 89.280072][ T4502] udevd[4502]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 89.298134][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 89.379379][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 89.422501][ T5008] set_capacity_and_notify: 4 callbacks suppressed [ 89.422515][ T5008] loop1: detected capacity change from 0 to 32768 [ 89.505489][ T1108] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 89.537458][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.540733][ T5008] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 89.540733][ T5008] [ 89.585174][ T1108] usb 5-1: config 0 descriptor?? [ 89.607877][ T5008] read_mapping_page failed! [ 89.613997][ T5043] loop0: detected capacity change from 0 to 24 [ 89.638090][ T5008] ERROR: (device loop1): txCommit: [ 89.638090][ T5008] [ 89.646013][ T5046] capability: warning: `syz.2.312' uses deprecated v2 capabilities in a way that may be insecure [ 89.670514][ T5043] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 89.735032][ T5043] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 89.793370][ T5053] loop2: detected capacity change from 0 to 256 [ 89.858119][ T5057] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 89.938015][ T5053] FAT-fs (loop2): Directory bread(block 64) failed [ 89.962742][ T5060] netlink: 'syz.1.320': attribute type 3 has an invalid length. [ 89.965951][ T5053] FAT-fs (loop2): Directory bread(block 65) failed [ 89.992353][ T5053] FAT-fs (loop2): Directory bread(block 66) failed [ 90.005143][ T5063] loop3: detected capacity change from 0 to 1024 [ 90.014840][ T5053] FAT-fs (loop2): Directory bread(block 67) failed [ 90.032639][ T5053] FAT-fs (loop2): Directory bread(block 68) failed [ 90.059811][ T5053] FAT-fs (loop2): Directory bread(block 69) failed [ 90.121186][ T1108] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x4 [ 90.127890][ T5053] FAT-fs (loop2): Directory bread(block 70) failed [ 90.128701][ T1108] zeroplus 0003:0C12:0030.0004: unknown main item tag 0xd [ 90.159701][ T1108] zeroplus 0003:0C12:0030.0004: hidraw0: USB HID v0.81 Device [HID 0c12:0030] on usb-dummy_hcd.4-1/input0 [ 90.172617][ T1333] hfsplus: b-tree write err: -5, ino 8 [ 90.178627][ T5053] FAT-fs (loop2): Directory bread(block 71) failed [ 90.202769][ T5053] FAT-fs (loop2): Directory bread(block 72) failed [ 90.225920][ T5053] FAT-fs (loop2): Directory bread(block 73) failed [ 90.237452][ T1108] zeroplus 0003:0C12:0030.0004: no inputs found [ 90.283164][ T5071] loop1: detected capacity change from 0 to 8 [ 90.327554][ T1108] usb 5-1: USB disconnect, device number 4 [ 90.351314][ T5071] SQUASHFS error: zlib decompression failed, data probably corrupt [ 90.418393][ T5071] SQUASHFS error: Failed to read block 0x9b: -5 [ 90.439221][ T5071] SQUASHFS error: Unable to read metadata cache entry [99] [ 90.473250][ T5071] SQUASHFS error: Unable to read inode 0x127 [ 90.503792][ T5075] fido_id[5075]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 90.743288][ T5084] loop0: detected capacity change from 0 to 512 [ 90.880499][ T5084] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.944614][ T5084] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 90.965654][ T5094] loop2: detected capacity change from 0 to 64 [ 90.988692][ T5096] loop3: detected capacity change from 0 to 164 [ 91.043747][ T5096] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 91.054862][ T5084] EXT4-fs (loop0): 1 truncate cleaned up [ 91.063464][ T5084] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,nogrpid,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,stripe=0x0000000000000001,. Quota mode: none. [ 91.116424][ T5096] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 91.196477][ T5104] loop4: detected capacity change from 0 to 128 [ 91.261916][ T5109] loop0: detected capacity change from 0 to 164 [ 91.262290][ T5110] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.290734][ T5104] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 91.307527][ T5106] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 91.333960][ T5104] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 91.402252][ T9] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 91.499499][ T5119] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.530136][ T25] audit: type=1800 audit(1784811463.261:5): pid=5112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.340" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 91.642105][ T5122] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 91.693529][ T5128] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 91.693529][ T5128] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 91.693529][ T5128] [ 91.713975][ T5122] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.731843][ T5130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.352'. [ 91.768398][ T5128] EXT4-fs (loop4): Ignoring removed orlov option [ 91.779423][ T5130] netlink: 7 bytes leftover after parsing attributes in process `syz.3.352'. [ 91.838734][ T5128] EXT4-fs (loop4): mounted filesystem without journal. Opts: noacl,orlov,,errors=continue. Quota mode: writeback. [ 91.889448][ T5133] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.939810][ T5139] exfat: Deprecated parameter 'utf8' [ 91.956051][ T5139] exfat: Deprecated parameter 'namecase' [ 91.972221][ T5139] exfat: Deprecated parameter 'namecase' [ 91.986782][ T5139] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 92.160348][ T21] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 92.469198][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 92.611952][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.659048][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 92.699370][ T4566] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 92.725341][ T21] usb 4-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 92.750639][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.790339][ T21] usb 4-1: config 0 descriptor?? [ 92.917570][ T5143] ialloc: diAlloc returned -5! [ 92.949248][ T4566] usb 5-1: Using ep0 maxpacket: 16 [ 92.966521][ T278] ERROR: (device loop1): diUpdatePMap: the iag is outside the map [ 92.966521][ T278] [ 92.995406][ T278] ERROR: (device loop1): remounting filesystem as read-only [ 93.089345][ T4566] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.134523][ T4566] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.163640][ T4566] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.192019][ T5156] [ 93.192019][ T5156] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.192019][ T5156] [ 93.204415][ T4566] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 93.234903][ T5156] [ 93.234903][ T5156] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.234903][ T5156] [ 93.243331][ T4566] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 93.266201][ T4566] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.279583][ T21] hid (null): unknown global tag 0xa3 [ 93.291114][ T21] uclogic 0003:28BD:0055.0005: unknown main item tag 0x3 [ 93.299294][ T5156] [ 93.299294][ T5156] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.299294][ T5156] [ 93.313667][ T4566] usb 5-1: config 0 descriptor?? [ 93.324835][ T21] uclogic 0003:28BD:0055.0005: unexpected long global item [ 93.326541][ T5156] [ 93.326541][ T5156] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.326541][ T5156] [ 93.332781][ T21] uclogic 0003:28BD:0055.0005: parse failed [ 93.343267][ T5156] [ 93.343267][ T5156] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.343267][ T5156] [ 93.355395][ T21] uclogic: probe of 0003:28BD:0055.0005 failed with error -22 [ 93.375480][ T277] [ 93.375480][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.375480][ T277] [ 93.392140][ T5168] ialloc: diAlloc returned -5! [ 93.440933][ T4188] [ 93.440933][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.440933][ T4188] [ 93.453797][ T4188] [ 93.453797][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.453797][ T4188] [ 93.483800][ T21] usb 4-1: USB disconnect, device number 5 [ 93.721524][ T5177] overlayfs: workdir and upperdir must be separate subtrees [ 93.739459][ T5178] binder: BINDER_SET_CONTEXT_MGR already set [ 93.747650][ T5178] binder: 5174:5178 ioctl 40046207 0 returned -16 [ 93.848044][ T4566] apple 0003:05AC:0247.0006: unknown main item tag 0x0 [ 93.867330][ T4566] apple 0003:05AC:0247.0006: unknown main item tag 0x0 [ 93.884931][ T4566] apple 0003:05AC:0247.0006: unknown main item tag 0x0 [ 93.905187][ T4566] apple 0003:05AC:0247.0006: unknown main item tag 0x0 [ 93.912483][ T5180] EXT4-fs (loop0): Ignoring removed orlov option [ 93.929071][ T5180] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 93.939564][ T4566] apple 0003:05AC:0247.0006: unknown main item tag 0x0 [ 93.946468][ T4566] apple 0003:05AC:0247.0006: unknown main item tag 0x0 [ 93.973983][ T4566] apple 0003:05AC:0247.0006: unknown main item tag 0x0 [ 94.000999][ T5180] EXT4-fs (loop0): 1 truncate cleaned up [ 94.006765][ T5180] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,. Quota mode: none. [ 94.038105][ T4566] apple 0003:05AC:0247.0006: hidraw0: USB HID v0.08 Device [HID 05ac:0247] on usb-dummy_hcd.4-1/input0 [ 94.135037][ T4566] usb 5-1: USB disconnect, device number 5 [ 94.377493][ T5197] fido_id[5197]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 94.378097][ T5175] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 94.416547][ T5175] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 94.447349][ T5175] F2FS-fs (loop1): invalid crc value [ 94.488725][ T5175] F2FS-fs (loop1): Found nat_bits in checkpoint [ 94.654194][ T5175] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 94.673322][ T5175] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 94.869274][ T1108] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 95.014823][ T5210] set_capacity_and_notify: 12 callbacks suppressed [ 95.014839][ T5210] loop0: detected capacity change from 0 to 32768 [ 95.097338][ T5210] JBD2: Ignoring recovery information on journal [ 95.149320][ T1108] usb 4-1: Using ep0 maxpacket: 8 [ 95.205880][ T5210] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 95.277266][ T5218] loop4: detected capacity change from 0 to 32768 [ 95.289416][ T1108] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.312908][ T1108] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 95.399700][ T5210] syz.0.384 (5210) used greatest stack depth: 20768 bytes left [ 95.439640][ T5218] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 95.465111][ T5218] JBD2: Ignoring recovery information on journal [ 95.485083][ T4187] ocfs2: Unmounting device (7,0) on (node local) [ 95.499416][ T1108] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 95.518853][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 95.529376][ T1108] usb 4-1: Product: syz [ 95.533566][ T1108] usb 4-1: Manufacturer: syz [ 95.538256][ T1108] usb 4-1: SerialNumber: syz [ 95.553227][ T1108] usb 4-1: config 0 descriptor?? [ 95.590953][ T1108] imon_raw 4-1:0.0: IR endpoint missing [ 95.682792][ T5229] loop2: detected capacity change from 0 to 32768 [ 95.695523][ T5218] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 95.725100][ T4315] (kworker/u4:7,4315,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1 [ 95.783652][ T4199] ocfs2: Unmounting device (7,4) on (node local) [ 95.802252][ T5229] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.392 (5229) [ 95.873271][ T5229] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 95.950132][ T5229] BTRFS info (device loop2): force clearing of disk cache [ 95.979783][ T5229] BTRFS info (device loop2): enabling ssd optimizations [ 95.986771][ T5229] BTRFS info (device loop2): using spread ssd allocation scheme [ 96.029147][ T5229] BTRFS info (device loop2): turning on sync discard [ 96.035871][ T5229] BTRFS info (device loop2): turning off barriers [ 96.061925][ T1108] usb 4-1: USB disconnect, device number 6 [ 96.099521][ T5229] BTRFS info (device loop2): setting nodatacow, compression disabled [ 96.107631][ T5229] BTRFS info (device loop2): turning on flush-on-commit [ 96.147680][ T5249] netlink: 'syz.1.399': attribute type 3 has an invalid length. [ 96.172779][ T5229] BTRFS info (device loop2): not using ssd optimizations [ 96.189299][ T5229] BTRFS info (device loop2): not using spread ssd allocation scheme [ 96.247964][ T5229] BTRFS info (device loop2): using free space tree [ 96.274557][ T5255] loop1: detected capacity change from 0 to 512 [ 96.294462][ T5229] BTRFS info (device loop2): has skinny extents [ 96.447208][ T5268] loop4: detected capacity change from 0 to 1024 [ 96.514966][ T5268] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.538936][ T5255] EXT4-fs (loop1): Test dummy encryption mode enabled [ 96.556179][ T5255] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 96.615392][ T5255] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.401: bad orphan inode 131083 [ 96.667247][ T5255] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,nodioread_nolock,norecovery,,errors=continue. Quota mode: none. [ 96.695377][ T5290] loop3: detected capacity change from 0 to 256 [ 96.768362][ T5229] BTRFS info (device loop2): clearing free space tree [ 96.785144][ T5229] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 96.841066][ T5229] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 96.856127][ T5290] FAT-fs (loop3): Directory bread(block 64) failed [ 96.928355][ T5290] FAT-fs (loop3): Directory bread(block 65) failed [ 96.949353][ T5290] FAT-fs (loop3): Directory bread(block 66) failed [ 96.964293][ T5290] FAT-fs (loop3): Directory bread(block 67) failed [ 96.972288][ T5229] BTRFS info (device loop2): creating free space tree [ 96.998922][ T5290] FAT-fs (loop3): Directory bread(block 68) failed [ 97.017447][ T5290] FAT-fs (loop3): Directory bread(block 69) failed [ 97.029010][ T5229] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 97.041281][ T5290] FAT-fs (loop3): Directory bread(block 70) failed [ 97.047831][ T5290] FAT-fs (loop3): Directory bread(block 71) failed [ 97.079349][ T5229] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 97.085303][ T5290] FAT-fs (loop3): Directory bread(block 72) failed [ 97.123013][ T5290] FAT-fs (loop3): Directory bread(block 73) failed [ 97.196464][ T25] audit: type=1800 audit(1784811468.921:6): pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.392" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 97.226052][ T5229] BTRFS error (device loop2): balance: invalid convert metadata profile single [ 97.724632][ T5281] loop0: detected capacity change from 0 to 40427 [ 97.786894][ T5281] F2FS-fs (loop0): Zoned block device path is missing [ 97.828366][ T5281] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 97.863217][ T5281] F2FS-fs (loop0): invalid crc value [ 97.951239][ T5281] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 97.958035][ T5352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.429'. [ 97.999990][ T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 98.186452][ T5360] Cannot find set identified by id 0 to match [ 98.223315][ T5281] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 98.239525][ T5281] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 98.289971][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 98.365958][ T4187] attempt to access beyond end of device [ 98.365958][ T4187] loop0: rw=2049, want=45104, limit=40427 [ 98.451491][ T5370] loop3: detected capacity change from 0 to 256 [ 98.459545][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 98.567285][ T5370] FAT-fs (loop3): Directory bread(block 64) failed [ 98.574319][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.616614][ T21] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 98.617862][ T5354] loop1: detected capacity change from 0 to 32768 [ 98.629210][ T5370] FAT-fs (loop3): Directory bread(block 65) failed [ 98.652835][ T5370] FAT-fs (loop3): Directory bread(block 66) failed [ 98.694035][ T5370] FAT-fs (loop3): Directory bread(block 67) failed [ 98.715582][ T5370] FAT-fs (loop3): Directory bread(block 68) failed [ 98.743684][ T5354] UFO tlock:0xffffc900028d2120 [ 98.754962][ T5370] FAT-fs (loop3): Directory bread(block 69) failed [ 98.763911][ T5354] MetaData crosses page boundary!! [ 98.769486][ T5370] FAT-fs (loop3): Directory bread(block 70) failed [ 98.769523][ T5370] FAT-fs (loop3): Directory bread(block 71) failed [ 98.769582][ T5370] FAT-fs (loop3): Directory bread(block 72) failed [ 98.769608][ T5370] FAT-fs (loop3): Directory bread(block 73) failed [ 98.839460][ T21] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 0.40 [ 98.859137][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.868891][ T5354] lblock = 6300000010, size = -820051968 [ 98.892525][ T5354] CPU: 0 PID: 5354 Comm: syz.1.430 Not tainted syzkaller #0 [ 98.898657][ T21] usb 5-1: Product: syz [ 98.899888][ T5354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 98.899942][ T5354] Call Trace: [ 98.899949][ T5354] [ 98.899957][ T5354] dump_stack_lvl+0x188/0x250 [ 98.899983][ T5354] ? remove_wait_queue+0x120/0x120 [ 98.911881][ T21] usb 5-1: Manufacturer: syz [ 98.914352][ T5354] ? show_regs_print_info+0x20/0x20 [ 98.914382][ T5354] ? load_image+0x410/0x410 [ 98.919237][ T21] usb 5-1: SerialNumber: syz [ 98.920597][ T5354] ? unlock_page+0x17c/0x1f0 [ 98.955519][ T5354] __get_metapage+0xbf4/0x1060 [ 98.960309][ T5354] dtSearch+0x598/0x1f60 [ 98.964589][ T5354] jfs_lookup+0x1ad/0x420 [ 98.968953][ T5354] ? jfs_get_parent+0xa0/0xa0 [ 98.973668][ T5354] ? d_alloc_parallel+0x1215/0x1320 [ 98.978911][ T5354] __lookup_slow+0x29d/0x410 [ 98.983524][ T5354] ? lookup_one_len+0x2d0/0x2d0 [ 98.988413][ T5354] ? down_read+0x1aa/0x2e0 [ 98.992857][ T5354] lookup_slow+0x53/0x70 [ 98.997156][ T5354] walk_component+0x314/0x460 [ 99.001881][ T5354] path_lookupat+0x148/0x420 [ 99.006504][ T5354] filename_lookup+0x21e/0x550 [ 99.011293][ T5354] ? __lock_acquire+0x7b50/0x7b50 [ 99.016350][ T5354] ? hashlen_string+0x110/0x110 [ 99.021263][ T5354] ? strncpy_from_user+0x1f4/0x350 [ 99.026542][ T5354] ? getname_flags+0x1f9/0x4f0 [ 99.031770][ T5354] user_path_at_empty+0x40/0x190 [ 99.036823][ T5354] path_setxattr+0xb3/0x290 [ 99.041436][ T5354] ? simple_xattr_list_add+0xf0/0xf0 [ 99.046743][ T5354] ? lock_chain_count+0x20/0x20 [ 99.051631][ T5354] __x64_sys_lsetxattr+0xb4/0xd0 [ 99.056599][ T5354] do_syscall_64+0x4c/0xa0 [ 99.061127][ T5354] ? clear_bhb_loop+0x30/0x80 [ 99.065833][ T5354] ? clear_bhb_loop+0x30/0x80 [ 99.070547][ T5354] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.076571][ T5354] RIP: 0033:0x7f8207fbae99 [ 99.081003][ T5354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.100615][ T5354] RSP: 002b:00007f8206213028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 99.109041][ T5354] RAX: ffffffffffffffda RBX: 00007f8208242fa0 RCX: 00007f8207fbae99 [ 99.117024][ T5354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 99.125003][ T5354] RBP: 00007f8208050eaf R08: 0000000000000001 R09: 0000000000000000 [ 99.133002][ T5354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.141361][ T5354] R13: 00007f8208243038 R14: 00007f8208242fa0 R15: 00007fff758373b8 [ 99.149458][ T5354] [ 99.190069][ T5354] bread failed! [ 99.193591][ T5354] jfs_lookup: dtSearch returned -5 [ 99.196935][ T5387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.444'. [ 99.241735][ T5388] loop0: detected capacity change from 0 to 1024 [ 99.338160][ T5388] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 99.407287][ T5388] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000e11d, mo2=0002] [ 99.463142][ T5388] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 99.472626][ T5388] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,nodelalloc,,errors=continue. Quota mode: writeback. [ 99.507544][ T21] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 99.555438][ T21] usb 5-1: selecting invalid altsetting 1 [ 99.561317][ T21] snd-usb-caiaq 5-1:1.0: can't set alt interface. [ 99.568009][ T21] usb 5-1: unable to init card! (ret=-5) [ 99.616365][ T21] snd-usb-caiaq: probe of 5-1:1.0 failed with error -5 [ 99.659797][ T21] usb 5-1: selecting invalid altsetting 1 [ 99.665648][ T21] snd-usb-caiaq 5-1:1.1: can't set alt interface. [ 99.692822][ T21] usb 5-1: unable to init card! (ret=-5) [ 99.704856][ T21] snd-usb-caiaq: probe of 5-1:1.1 failed with error -5 [ 99.737893][ T21] usb 5-1: USB disconnect, device number 6 [ 99.921428][ T5415] netlink: 68 bytes leftover after parsing attributes in process `syz.1.453'. [ 99.979366][ T5415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.453'. [ 100.019258][ T5415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.453'. [ 100.085598][ T5422] set_capacity_and_notify: 1 callbacks suppressed [ 100.085612][ T5422] loop0: detected capacity change from 0 to 4096 [ 100.123774][ T5064] udevd[5064]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.231857][ T5429] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.281901][ T5427] loop1: detected capacity change from 0 to 4096 [ 100.328039][ T5432] netlink: 20 bytes leftover after parsing attributes in process `syz.3.463'. [ 100.357327][ T5430] loop2: detected capacity change from 0 to 4096 [ 100.418940][ T5427] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 100.464663][ T5407] loop4: detected capacity change from 0 to 32768 [ 100.530058][ T5439] team0: Port device gretap1 added [ 100.538416][ T5430] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 100.555670][ T5439] syz.0.466 (5439) used greatest stack depth: 20720 bytes left [ 100.642280][ T5407] XFS (loop4): Mounting V5 Filesystem [ 100.805139][ T9] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 100.807233][ T5455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 100.813843][ T4188] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 100.827650][ T4188] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 100.835224][ T4188] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 100.855159][ T9] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 100.868716][ T4188] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 100.903148][ T5407] XFS (loop4): Ending clean mount [ 100.941079][ T5407] XFS (loop4): Quotacheck needed: Please wait. [ 101.075137][ T5407] XFS (loop4): Quotacheck: Done. [ 101.151775][ T4199] XFS (loop4): Unmounting Filesystem [ 101.290812][ T5470] loop2: detected capacity change from 0 to 1024 [ 101.304596][ T5472] loop3: detected capacity change from 0 to 2048 [ 101.339400][ T5470] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 101.370126][ T5468] loop0: detected capacity change from 0 to 4096 [ 101.372080][ T5470] EXT4-fs error (device loop2): ext4_get_journal_inode:5187: inode #32: comm syz.2.478: iget: special inode unallocated [ 101.396036][ T5470] EXT4-fs (loop2): no journal found [ 101.418264][ T5470] EXT4-fs (loop2): can't get journal size [ 101.479952][ T5470] EXT4-fs (loop2): filesystem is read-only [ 101.485798][ T5470] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,noload,noblock_validity,noblock_validity,grpjquota=,,errors=continue. Quota mode: none. [ 101.501529][ T5472] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.504966][ T5330] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.578115][ T5468] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 101.608695][ T5468] ntfs3: loop0: Failed to load $Extend. [ 101.759321][ T5330] usb 2-1: Using ep0 maxpacket: 8 [ 101.879490][ T5330] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 101.904448][ T5330] usb 2-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 101.919502][ T5330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.935789][ T5330] usb 2-1: config 0 descriptor?? [ 101.976896][ T5482] loop2: detected capacity change from 0 to 8192 [ 102.059953][ T5482] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 102.088691][ T5482] REISERFS (device loop2): using ordered data mode [ 102.096546][ T5482] reiserfs: using flush barriers [ 102.105837][ T5482] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 102.130126][ T5482] REISERFS (device loop2): checking transaction log (loop2) [ 102.206933][ T5482] REISERFS (device loop2): Using tea hash to sort names [ 102.214505][ T5482] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 102.279207][ T21] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 102.319465][ T5329] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.431360][ T5330] gembird 0003:11FF:3331.0007: unknown main item tag 0x0 [ 102.439067][ T5330] gembird 0003:11FF:3331.0007: unknown main item tag 0x0 [ 102.466496][ T5330] gembird 0003:11FF:3331.0007: unknown main item tag 0x0 [ 102.476753][ T5330] gembird 0003:11FF:3331.0007: unknown main item tag 0x0 [ 102.501803][ T5330] gembird 0003:11FF:3331.0007: unknown main item tag 0x0 [ 102.509667][ T5330] gembird 0003:11FF:3331.0007: unknown main item tag 0x0 [ 102.517191][ T5330] gembird 0003:11FF:3331.0007: unknown main item tag 0x0 [ 102.527694][ T5330] gembird 0003:11FF:3331.0007: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.1-1/input0 [ 102.572508][ T5329] usb 1-1: Using ep0 maxpacket: 16 [ 102.669613][ T21] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 102.682602][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.692883][ T21] usb 4-1: config 0 descriptor?? [ 102.695247][ T5329] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 102.700722][ T4566] usb 2-1: USB disconnect, device number 4 [ 102.727377][ T5509] fido_id[5509]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 102.741946][ T5329] usb 1-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 102.750338][ T21] cp210x 4-1:0.0: cp210x converter detected [ 102.759303][ T5329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.777140][ T5329] usb 1-1: config 0 descriptor?? [ 102.876054][ T5516] loop4: detected capacity change from 0 to 4096 [ 102.945523][ T5516] ntfs3: loop4: failed to convert "0080" to cp852 [ 102.963184][ T5516] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 102.984101][ T5516] ntfs3: loop4: failed to convert name for inode 1e. [ 102.989403][ T4565] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.186436][ T21] usb 4-1: cp210x converter now attached to ttyUSB0 [ 103.263724][ T5329] chicony 0003:04F2:1123.0008: ignoring exceeding usage max [ 103.272307][ T5329] chicony 0003:04F2:1123.0008: unknown main item tag 0x4 [ 103.280454][ T5329] chicony 0003:04F2:1123.0008: collection stack underflow [ 103.288224][ T5329] chicony 0003:04F2:1123.0008: item 0 0 0 12 parsing failed [ 103.296329][ T5329] chicony 0003:04F2:1123.0008: Chicony hid parse failed: -22 [ 103.304379][ T5329] chicony: probe of 0003:04F2:1123.0008 failed with error -22 [ 103.385420][ T21] usb 4-1: USB disconnect, device number 7 [ 103.399612][ T4565] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.411908][ T4566] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 103.423307][ T21] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 103.431364][ T4565] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.453592][ T21] cp210x 4-1:0.0: device disconnected [ 103.459465][ T4565] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 103.473191][ T4565] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.486669][ T5329] usb 1-1: USB disconnect, device number 3 [ 103.491454][ T4565] usb 3-1: config 0 descriptor?? [ 103.517996][ T5524] loop1: detected capacity change from 0 to 32768 [ 103.571860][ T5524] XFS (loop1): Mounting V5 Filesystem [ 103.600590][ T5524] XFS (loop1): Ending clean mount [ 103.650193][ T4189] XFS (loop1): Unmounting Filesystem [ 103.700848][ T4566] usb 5-1: Using ep0 maxpacket: 32 [ 103.839528][ T4566] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 103.856289][ T4566] usb 5-1: config 0 has no interface number 0 [ 104.037073][ T5540] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 104.049388][ T4566] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 104.076447][ T4566] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.096403][ T4566] usb 5-1: Product: syz [ 104.100818][ T4566] usb 5-1: Manufacturer: syz [ 104.114692][ T4566] usb 5-1: SerialNumber: syz [ 104.128821][ T4566] usb 5-1: config 0 descriptor?? [ 104.150117][ T5341] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 104.170624][ T4566] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 104.219389][ T4565] usb 3-1: string descriptor 0 read error: -71 [ 104.219398][ T5544] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 104.253531][ T4565] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #200: -71 [ 104.263814][ T4565] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71 [ 104.272382][ T4565] uclogic 0003:256C:006D.0009: failed probing pen v2 parameters: -71 [ 104.281018][ T4565] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 104.288510][ T4565] uclogic: probe of 0003:256C:006D.0009 failed with error -71 [ 104.299438][ T4565] usb 3-1: USB disconnect, device number 4 [ 104.365139][ T5544] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 104.409306][ T5341] usb 2-1: Using ep0 maxpacket: 16 [ 104.412098][ T4566] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 104.455800][ T155] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 104.455876][ T4566] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 104.472238][ T4186] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 104.481049][ T4186] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 104.488035][ T4186] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 104.516019][ T155] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 104.525751][ T4186] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 104.533311][ T5341] usb 2-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 104.547754][ T5341] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 104.560980][ T5341] usb 2-1: config 0 interface 0 has no altsetting 0 [ 104.567872][ T5341] usb 2-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 104.577221][ T5341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.587097][ T5341] usb 2-1: config 0 descriptor?? [ 104.695745][ T5542] XFS (loop0): Mounting V5 Filesystem [ 104.834100][ T5329] usb 5-1: USB disconnect, device number 7 [ 104.849290][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 104.867800][ T5329] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 104.949240][ T5542] XFS (loop0): Ending clean mount [ 104.968132][ T5329] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 105.028518][ T5329] quatech2 5-1:0.51: device disconnected [ 105.065926][ T5542] XFS (loop0): Quotacheck needed: Please wait. [ 105.067475][ T5341] uclogic 0003:2179:0077.000A: ignoring exceeding usage max [ 105.090155][ T5341] uclogic 0003:2179:0077.000A: No inputs registered, leaving [ 105.100942][ T5341] uclogic 0003:2179:0077.000A: hidraw0: USB HID v0.05 Device [HID 2179:0077] on usb-dummy_hcd.1-1/input0 [ 105.146950][ T5542] XFS (loop0): Quotacheck: Done. [ 105.243303][ T4187] XFS (loop0): Unmounting Filesystem [ 105.368617][ T5329] usb 2-1: USB disconnect, device number 5 [ 105.389214][ T5568] fido_id[5568]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 105.499053][ T5570] set_capacity_and_notify: 4 callbacks suppressed [ 105.499068][ T5570] loop4: detected capacity change from 0 to 4096 [ 105.671899][ T5571] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.825660][ T5575] loop0: detected capacity change from 0 to 1024 [ 105.949928][ T5567] loop3: detected capacity change from 0 to 32768 [ 106.115494][ T5583] tipc: Started in network mode [ 106.136920][ T5583] tipc: Node identity ac14140d, cluster identity 4711 [ 106.165537][ T5583] vcan0: MTU too low for tipc bearer [ 106.187984][ T5583] tipc: Enabling of bearer rejected, failed to enable media [ 106.407953][ T5591] loop1: detected capacity change from 0 to 4096 [ 106.465246][ T5591] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 106.594876][ T5591] ntfs3: loop1: failed to convert "c46c" to iso8859-13 [ 107.121529][ T5597] loop4: detected capacity change from 0 to 32768 [ 107.208214][ T5600] loop0: detected capacity change from 0 to 40427 [ 107.218399][ T5622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.539'. [ 107.218422][ T5622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.539'. [ 107.218445][ T5622] netlink: 'syz.1.539': attribute type 14 has an invalid length. [ 107.218458][ T5622] netlink: 'syz.1.539': attribute type 12 has an invalid length. [ 107.253643][ T5600] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 107.253671][ T5600] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 107.269468][ T5600] F2FS-fs (loop0): invalid crc value [ 107.336873][ T5600] F2FS-fs (loop0): Found nat_bits in checkpoint [ 107.376715][ T5597] XFS (loop4): Mounting V5 Filesystem [ 107.475213][ T5600] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 107.475238][ T5600] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 107.483393][ T5341] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 107.560350][ T5597] XFS (loop4): Ending clean mount [ 107.561625][ T5643] loop1: detected capacity change from 0 to 128 [ 107.595747][ T5643] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.660617][ T5643] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.671724][ T4315] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 107.691124][ T25] audit: type=1800 audit(1784811479.421:7): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.527" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 107.693328][ T4315] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 107.739310][ T5341] usb 3-1: Using ep0 maxpacket: 8 [ 107.805207][ T4199] XFS (loop4): Unmounting Filesystem [ 107.913845][ T5653] loop3: detected capacity change from 0 to 4096 [ 108.024346][ T5341] usb 3-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 108.044645][ T5655] loop1: detected capacity change from 0 to 128 [ 108.051372][ T5341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.060934][ T5656] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.089200][ T5341] usb 3-1: Product: syz [ 108.093629][ T5341] usb 3-1: Manufacturer: syz [ 108.098288][ T5341] usb 3-1: SerialNumber: syz [ 108.172154][ T5655] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 108.213097][ T5655] hpfs: filesystem error: improperly stopped [ 108.239345][ T5655] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 108.257601][ T5655] hpfs: You really don't want any checks? You are crazy... [ 108.290528][ T5655] hpfs: hpfs_map_sector(): read error [ 108.295955][ T5655] hpfs: code page support is disabled [ 108.310277][ T5660] loop3: detected capacity change from 0 to 256 [ 108.328340][ T5655] hpfs: hpfs_map_4sectors(): unaligned read [ 108.347189][ T5655] hpfs: hpfs_map_4sectors(): unaligned read [ 108.359249][ T5655] hpfs: filesystem error: unable to find root dir [ 108.425407][ T5660] FAT-fs (loop3): Directory bread(block 64) failed [ 108.425447][ T5660] FAT-fs (loop3): Directory bread(block 65) failed [ 108.425507][ T5660] FAT-fs (loop3): Directory bread(block 66) failed [ 108.425534][ T5660] FAT-fs (loop3): Directory bread(block 67) failed [ 108.425595][ T5660] FAT-fs (loop3): Directory bread(block 68) failed [ 108.425620][ T5660] FAT-fs (loop3): Directory bread(block 69) failed [ 108.425680][ T5660] FAT-fs (loop3): Directory bread(block 70) failed [ 108.425706][ T5660] FAT-fs (loop3): Directory bread(block 71) failed [ 108.425759][ T5660] FAT-fs (loop3): Directory bread(block 72) failed [ 108.425784][ T5660] FAT-fs (loop3): Directory bread(block 73) failed [ 108.449446][ T5341] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 108.470395][ T5341] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 108.470419][ T5341] usb 3-1: 2:1 : unsupported sample bitwidth 5 in 9 bytes [ 108.513353][ T5666] process 'syz.0.553' launched '/dev/fd/3' with NULL argv: empty string added [ 108.577593][ T5341] usb 3-1: USB disconnect, device number 5 [ 108.677102][ T5669] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.677198][ T5669] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.703451][ T5669] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz.1.552: directory missing '..' [ 108.847780][ T4502] udevd[4502]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.065421][ T5685] erofs: (device loop4): mounted with root inode @ nid 36. [ 109.071317][ T5679] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 109.077462][ T5685] erofs: (device loop4): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 109.093504][ T5685] attempt to access beyond end of device [ 109.093504][ T5685] loop4: rw=0, want=296, limit=16 [ 109.104778][ T5685] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 109.305932][ T4186] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 109.326352][ T4186] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 109.354806][ T4186] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 109.529337][ T21] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 109.821249][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 110.009407][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 110.059334][ T5740] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,init_itable,quota,,errors=continue. Quota mode: writeback. [ 110.083509][ T5740] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.122259][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.142444][ T5728] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.581 (5728) [ 110.167834][ T21] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 110.185097][ T21] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.197180][ T5751] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 110.208671][ T5728] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 110.219326][ T5728] BTRFS info (device loop3): enabling auto defrag [ 110.239389][ T5728] BTRFS info (device loop3): force clearing of disk cache [ 110.247931][ T5728] BTRFS info (device loop3): disabling log replay at mount time [ 110.263521][ T5728] BTRFS info (device loop3): turning on async discard [ 110.284901][ T5728] BTRFS info (device loop3): setting nodatacow, compression disabled [ 110.297892][ T5728] BTRFS info (device loop3): turning off async discard [ 110.318826][ T5728] BTRFS info (device loop3): disabling free space tree [ 110.335041][ T5728] BTRFS info (device loop3): disabling tree log [ 110.375084][ T5728] BTRFS info (device loop3): enabling disk space caching [ 110.391133][ T21] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 110.403523][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.412464][ T5728] BTRFS info (device loop3): disk space caching is enabled [ 110.445546][ T21] usb 5-1: Product: syz [ 110.468885][ T5728] BTRFS info (device loop3): has skinny extents [ 110.480108][ T21] usb 5-1: Manufacturer: syz [ 110.499316][ T21] usb 5-1: SerialNumber: syz [ 110.621175][ T5773] set_capacity_and_notify: 11 callbacks suppressed [ 110.621189][ T5773] loop1: detected capacity change from 0 to 64 [ 110.792417][ T21] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 110.857442][ T21] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 110.951805][ T5798] loop2: detected capacity change from 0 to 128 [ 111.000566][ T21] usb 5-1: 2:1 : can't get High Capability descriptor [ 111.107360][ T5798] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 111.174794][ T5798] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.222027][ T5803] loop0: detected capacity change from 0 to 256 [ 111.381927][ T26] usb 5-1: USB disconnect, device number 8 [ 111.585960][ T5813] loop3: detected capacity change from 0 to 1024 [ 111.594472][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.626024][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.791327][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 111.837122][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 111.934715][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.974316][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.002268][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.013283][ T5830] loop1: detected capacity change from 0 to 1024 [ 112.029546][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.063303][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.070498][ T5814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.083970][ T5830] hfsplus: invalid length 1280 has been corrected to 255 [ 112.108617][ T5830] hfsplus: invalid length 1280 has been corrected to 255 [ 112.109699][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.122841][ T5814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.152788][ T5830] hfsplus: invalid length 1280 has been corrected to 255 [ 112.207721][ T5831] hfsplus: invalid length 1280 has been corrected to 255 [ 112.218001][ T5831] hfsplus: invalid length 1280 has been corrected to 255 [ 112.233194][ T5831] hfsplus: invalid length 1280 has been corrected to 255 [ 112.368557][ T4236] hfsplus: invalid length 1280 has been corrected to 255 [ 112.836589][ T5847] loop0: detected capacity change from 0 to 8192 [ 112.868459][ T5847] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 112.964863][ T5847] REISERFS (device loop0): using ordered data mode [ 113.015143][ T5847] reiserfs: using flush barriers [ 113.041397][ T5844] loop1: detected capacity change from 0 to 40427 [ 113.046467][ T5847] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 113.086954][ T5844] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 113.107068][ T5847] REISERFS (device loop0): checking transaction log (loop0) [ 113.154530][ T5844] F2FS-fs (loop1): invalid crc value [ 113.216346][ T5844] F2FS-fs (loop1): Found nat_bits in checkpoint [ 113.241509][ T5841] loop4: detected capacity change from 0 to 32768 [ 113.338081][ T5841] JBD2: Ignoring recovery information on journal [ 113.452443][ T5844] F2FS-fs (loop1): recover fsync data on readonly fs [ 113.477560][ T5844] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 113.486636][ T5844] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 113.497612][ T5841] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 113.498438][ T5844] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 113.512521][ T5847] REISERFS (device loop0): Using rupasov hash to sort names [ 113.530717][ T5847] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 113.540759][ T9] (kworker/u4:0,9,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 113.570624][ T9] (kworker/u4:0,9,1):ocfs2_read_locked_inode:521 ERROR: status = -12 [ 113.619754][ T9] (kworker/u4:0,9,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=256, inode=0, rec_len=0, name_len=0 [ 113.686519][ T5841] (syz.4.624,5841,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=1099511627848, rec_len=12, name_len=0 [ 113.757370][ T5841] (syz.4.624,5841,0):__ocfs2_delete_entry:1162 ERROR: status = -5 [ 113.777048][ T5859] loop3: detected capacity change from 0 to 128 [ 113.802887][ T5841] (syz.4.624,5841,0):ocfs2_orphan_del:2386 ERROR: status = -5 [ 113.848950][ T5861] netlink: 'syz.2.630': attribute type 1 has an invalid length. [ 113.853217][ T5841] (syz.4.624,5841,0):ocfs2_orphan_del:2401 ERROR: status = -5 [ 113.862908][ T5859] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 113.942072][ T5859] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.952330][ T5841] (syz.4.624,5841,0):ocfs2_remove_inode:676 ERROR: status = -5 [ 113.962053][ T5841] (syz.4.624,5841,0):ocfs2_wipe_inode:821 ERROR: status = -5 [ 113.974099][ T5841] (syz.4.624,5841,0):ocfs2_delete_inode:1082 ERROR: status = -5 [ 114.057806][ T4199] ocfs2: Unmounting device (7,4) on (node local) [ 114.188988][ T5865] loop1: detected capacity change from 0 to 512 [ 114.326209][ T5875] erofs: (device loop3): mounted with root inode @ nid 36. [ 114.363263][ T5872] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.442139][ T5881] netlink: 24 bytes leftover after parsing attributes in process `syz.4.641'. [ 114.454621][ T5881] netlink: 212 bytes leftover after parsing attributes in process `syz.4.641'. [ 114.466715][ T5881] netlink: 24 bytes leftover after parsing attributes in process `syz.4.641'. [ 114.835459][ T5891] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 114.892300][ T5891] REISERFS (device loop1): using ordered data mode [ 114.925516][ T5891] reiserfs: using flush barriers [ 114.961460][ T5891] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 114.989635][ T5891] REISERFS (device loop1): checking transaction log (loop1) [ 115.085603][ T5891] REISERFS (device loop1): Using rupasov hash to sort names [ 115.126599][ T5891] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 115.454278][ T5894] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.645 (5894) [ 115.576883][ T5894] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 115.595520][ T5895] JBD2: Ignoring recovery information on journal [ 115.620250][ T5894] BTRFS info (device loop4): enabling auto defrag [ 115.626871][ T5894] BTRFS info (device loop4): force clearing of disk cache [ 115.634830][ T5894] BTRFS info (device loop4): disabling log replay at mount time [ 115.643154][ T5894] BTRFS info (device loop4): turning on async discard [ 115.650546][ T5894] BTRFS info (device loop4): setting nodatacow, compression disabled [ 115.658780][ T5894] BTRFS info (device loop4): turning off async discard [ 115.666022][ T5894] BTRFS info (device loop4): disabling free space tree [ 115.675904][ T5894] BTRFS info (device loop4): disabling tree log [ 115.683425][ T5894] BTRFS info (device loop4): enabling disk space caching [ 115.690832][ T5894] BTRFS info (device loop4): disk space caching is enabled [ 115.695525][ T5895] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 115.698354][ T5894] BTRFS info (device loop4): has skinny extents [ 115.739050][ T9] (kworker/u4:0,9,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 115.759485][ T9] (kworker/u4:0,9,0):ocfs2_read_locked_inode:521 ERROR: status = -12 [ 115.767888][ T9] (kworker/u4:0,9,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=256, inode=0, rec_len=0, name_len=0 [ 115.848073][ T5895] (syz.3.646,5895,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=1099511627848, rec_len=12, name_len=0 [ 115.869482][ T5895] (syz.3.646,5895,1):__ocfs2_delete_entry:1162 ERROR: status = -5 [ 115.877392][ T5895] (syz.3.646,5895,1):ocfs2_orphan_del:2386 ERROR: status = -5 [ 115.888281][ T5914] set_capacity_and_notify: 5 callbacks suppressed [ 115.888294][ T5914] loop1: detected capacity change from 0 to 16 [ 115.913588][ T5895] (syz.3.646,5895,1):ocfs2_orphan_del:2401 ERROR: status = -5 [ 115.952356][ T5914] erofs: (device loop1): mounted with root inode @ nid 36. [ 115.969369][ T5895] (syz.3.646,5895,0):ocfs2_remove_inode:676 ERROR: status = -5 [ 115.977638][ T5895] (syz.3.646,5895,0):ocfs2_wipe_inode:821 ERROR: status = -5 [ 116.000182][ T5895] (syz.3.646,5895,0):ocfs2_delete_inode:1082 ERROR: status = -5 [ 116.172719][ T4186] ocfs2: Unmounting device (7,3) on (node local) [ 116.729830][ T5947] loop4: detected capacity change from 0 to 128 [ 116.919374][ T4538] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 116.998955][ T5939] loop1: detected capacity change from 0 to 32768 [ 117.072042][ T5939] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.656 (5939) [ 117.112264][ T5953] loop3: detected capacity change from 0 to 8192 [ 117.180840][ T5939] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 117.198726][ T5953] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 117.242059][ T5939] BTRFS info (device loop1): setting nodatasum [ 117.253492][ T5953] REISERFS (device loop3): using ordered data mode [ 117.276924][ T5939] BTRFS info (device loop1): force zlib compression, level 3 [ 117.291444][ T5953] reiserfs: using flush barriers [ 117.316467][ T5939] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 117.329500][ T5953] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 117.369490][ T4538] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 117.387756][ T5939] BTRFS info (device loop1): use lzo compression, level 0 [ 117.399514][ T5953] REISERFS (device loop3): checking transaction log (loop3) [ 117.408355][ T5939] BTRFS info (device loop1): turning on flush-on-commit [ 117.415682][ T5939] BTRFS info (device loop1): enabling auto defrag [ 117.418022][ T4538] usb 1-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 117.422387][ T5939] BTRFS info (device loop1): max_inline at 4096 [ 117.422414][ T5939] BTRFS info (device loop1): using free space tree [ 117.422429][ T5939] BTRFS info (device loop1): has skinny extents [ 117.568036][ T5939] BTRFS info (device loop1): enabling ssd optimizations [ 117.575997][ T4538] usb 1-1: config 0 interface 0 has no altsetting 0 [ 117.605677][ T5953] REISERFS (device loop3): Using rupasov hash to sort names [ 117.616563][ T4538] usb 1-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 117.622595][ T5953] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 117.697577][ T4538] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.752675][ T4538] usb 1-1: config 0 descriptor?? [ 117.769976][ T5941] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 118.029875][ T5983] loop2: detected capacity change from 0 to 64 [ 118.257500][ T4538] lenovo 0003:17EF:60A3.000B: ignoring exceeding usage max [ 118.322608][ T4538] lenovo 0003:17EF:60A3.000B: ignoring exceeding usage max [ 118.361092][ T4538] lenovo 0003:17EF:60A3.000B: unknown main item tag 0x0 [ 118.368902][ T4538] lenovo 0003:17EF:60A3.000B: unknown main item tag 0x0 [ 118.387034][ T4538] lenovo 0003:17EF:60A3.000B: unknown main item tag 0x0 [ 118.394676][ T4538] lenovo 0003:17EF:60A3.000B: unknown main item tag 0x0 [ 118.404511][ T4538] lenovo 0003:17EF:60A3.000B: unknown main item tag 0x0 [ 118.411569][ T4538] lenovo 0003:17EF:60A3.000B: unknown main item tag 0x0 [ 118.418782][ T4538] lenovo 0003:17EF:60A3.000B: unknown main item tag 0x0 [ 118.426296][ T4538] lenovo 0003:17EF:60A3.000B: unknown main item tag 0x0 [ 118.433460][ T4538] lenovo 0003:17EF:60A3.000B: unknown main item tag 0x0 [ 118.440527][ T4538] lenovo 0003:17EF:60A3.000B: unknown main item tag 0x0 [ 118.447706][ T4538] lenovo 0003:17EF:60A3.000B: unknown main item tag 0x0 [ 118.456871][ T4538] lenovo 0003:17EF:60A3.000B: unknown main item tag 0x0 [ 118.464190][ T4538] lenovo 0003:17EF:60A3.000B: unknown main item tag 0x0 [ 118.471772][ T4538] lenovo 0003:17EF:60A3.000B: unknown main item tag 0x0 [ 118.479040][ T4538] lenovo 0003:17EF:60A3.000B: unknown main item tag 0x0 [ 118.487256][ T4538] lenovo 0003:17EF:60A3.000B: hidraw0: USB HID v0.04 Device [HID 17ef:60a3] on usb-dummy_hcd.0-1/input0 [ 118.505353][ T4538] usb 1-1: USB disconnect, device number 4 [ 118.555821][ T6002] fido_id[6002]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 118.710387][ T6014] hugetlbfs: Bad value for 'size' [ 118.767566][ T6013] loop4: detected capacity change from 0 to 8192 [ 118.818703][ T6013] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 118.828787][ T6013] REISERFS (device loop4): using ordered data mode [ 118.835994][ T6013] reiserfs: using flush barriers [ 118.842718][ T6013] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 118.879817][ T6013] REISERFS (device loop4): checking transaction log (loop4) [ 118.966611][ T6013] REISERFS (device loop4): Using rupasov hash to sort names [ 118.974624][ T6013] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 119.554001][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.563646][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.685198][ T6031] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.737540][ T6031] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.838658][ T6031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.881797][ T6031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.909479][ T6031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.922134][ T6031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.936192][ T6031] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.943452][ T6031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.953993][ T6031] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.961137][ T6031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.185760][ T6039] loop3: detected capacity change from 0 to 1024 [ 120.246717][ T6039] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 120.283314][ T6048] loop4: detected capacity change from 0 to 256 [ 120.410499][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'. [ 120.421070][ T6052] netlink: 5 bytes leftover after parsing attributes in process `syz.1.695'. [ 120.520841][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 120.928998][ T6077] loop1: detected capacity change from 0 to 1024 [ 120.944819][ T6072] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.985378][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.031589][ T6077] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.139279][ T6075] loop2: detected capacity change from 0 to 8192 [ 121.164932][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 121.245328][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 121.276178][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.278650][ T6075] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 121.292721][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.304844][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.313081][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.336511][ T6078] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.343717][ T6078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.346087][ T6085] loop1: detected capacity change from 0 to 736 [ 121.357400][ T6078] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.364657][ T6078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.414869][ T6075] REISERFS (device loop2): using ordered data mode [ 121.447198][ T6075] reiserfs: using flush barriers [ 121.467948][ T6075] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 121.542532][ T6075] REISERFS (device loop2): checking transaction log (loop2) [ 121.627430][ T6085] iso9660: Corrupted directory entry in block 1 of inode 1483 [ 121.830228][ T6075] REISERFS (device loop2): Using rupasov hash to sort names [ 121.879448][ T6075] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 122.200835][ T6108] hugetlbfs: Bad value for 'size' [ 122.360836][ T6117] loop2: detected capacity change from 0 to 64 [ 122.563887][ T6125] netlink: 'syz.4.729': attribute type 4 has an invalid length. [ 122.676567][ T6100] loop0: detected capacity change from 0 to 32768 [ 122.780782][ T6100] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.714 (6100) [ 122.897993][ T6100] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 122.935775][ T6100] BTRFS info (device loop0): setting nodatasum [ 122.956104][ T6100] BTRFS info (device loop0): force zlib compression, level 3 [ 123.009334][ T6100] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 123.046057][ T6100] BTRFS info (device loop0): use lzo compression, level 0 [ 123.082741][ T6100] BTRFS info (device loop0): turning on flush-on-commit [ 123.129253][ T6100] BTRFS info (device loop0): enabling auto defrag [ 123.146582][ T6100] BTRFS info (device loop0): max_inline at 4096 [ 123.173768][ T6100] BTRFS info (device loop0): using free space tree [ 123.194478][ T6100] BTRFS info (device loop0): has skinny extents [ 123.350428][ T6133] loop2: detected capacity change from 0 to 32768 [ 123.444246][ T4538] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 123.455966][ T6100] BTRFS info (device loop0): enabling ssd optimizations [ 123.488504][ T6133] XFS (loop2): Mounting V5 Filesystem [ 123.611179][ T6133] XFS (loop2): Ending clean mount [ 123.724162][ T4538] usb 2-1: Using ep0 maxpacket: 32 [ 123.805761][ T4188] XFS (loop2): Unmounting Filesystem [ 123.883748][ T4538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.895774][ T4538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.905824][ T4538] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 123.914950][ T4538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.924794][ T4538] usb 2-1: config 0 descriptor?? [ 124.061435][ T6182] loop4: detected capacity change from 0 to 32768 [ 124.135064][ T6182] [ 124.135064][ T6182] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.135064][ T6182] [ 124.195452][ T6182] ERROR: (device loop4): diWrite: ixpxd invalid [ 124.195452][ T6182] [ 124.212683][ T6182] ERROR: (device loop4): txCommit: [ 124.212683][ T6182] [ 124.237031][ T4199] [ 124.237031][ T4199] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.237031][ T4199] [ 124.255374][ T4199] [ 124.255374][ T4199] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.255374][ T4199] [ 124.318740][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.749'. [ 124.436994][ T4538] ft260 0003:0403:6030.000C: collection stack underflow [ 124.450679][ T4538] ft260 0003:0403:6030.000C: item 0 1 0 12 parsing failed [ 124.470543][ T4538] ft260 0003:0403:6030.000C: failed to parse HID [ 124.477464][ T4538] ft260: probe of 0003:0403:6030.000C failed with error -22 [ 124.517095][ T6201] loop4: detected capacity change from 0 to 64 [ 124.537751][ T6202] loop0: detected capacity change from 0 to 736 [ 124.545432][ T4276] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 124.653294][ T5341] usb 2-1: USB disconnect, device number 6 [ 124.712363][ T6202] iso9660: Corrupted directory entry in block 1 of inode 1483 [ 124.825321][ T6214] loop4: detected capacity change from 0 to 1024 [ 124.849020][ T6214] EXT4-fs (loop4): Ignoring removed bh option [ 124.935777][ T6216] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.949485][ T4276] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 124.956479][ T6212] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.967993][ T4276] usb 4-1: config 0 has no interface number 0 [ 124.969489][ T6214] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 124.974858][ T4276] usb 4-1: config 0 interface 41 has no altsetting 0 [ 125.067689][ T6212] EXT4-fs error (device loop2): ext4_lookup:1858: inode #16: comm syz.2.758: unexpected EA_INODE flag [ 125.220758][ T4276] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 125.246076][ T4276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.258198][ T4276] usb 4-1: Product: syz [ 125.265898][ T4276] usb 4-1: Manufacturer: syz [ 125.270734][ T4276] usb 4-1: SerialNumber: syz [ 125.276997][ T4276] usb 4-1: config 0 descriptor?? [ 125.316974][ T6227] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 125.337747][ T6227] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.360454][ T6229] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 125.435275][ T6227] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: writeback. [ 125.449252][ T4538] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 125.463481][ T6229] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.709241][ T4538] usb 5-1: Using ep0 maxpacket: 16 [ 125.766438][ T6235] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 125.790420][ T6235] FAT-fs (loop2): Filesystem has been set read-only [ 125.794262][ T4276] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 125.817702][ T4276] CoreChips: probe of 4-1:0.41 failed with error -71 [ 125.838549][ T4276] usb 4-1: USB disconnect, device number 8 [ 125.869426][ T4538] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.895476][ T6233] XFS (loop0): Mounting V5 Filesystem [ 125.911302][ T4538] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 125.933996][ T4538] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 125.944710][ T4538] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.961188][ T4538] usb 5-1: config 0 descriptor?? [ 125.981035][ T6233] XFS (loop0): Ending clean mount [ 126.001101][ T4538] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 126.008103][ T4538] dvb-usb: bulk message failed: -22 (3/0) [ 126.023688][ T4538] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 126.054129][ T4538] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 126.062520][ T4538] usb 5-1: media controller created [ 126.078096][ T4538] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.105820][ T4538] dvb-usb: bulk message failed: -22 (6/0) [ 126.114299][ T4538] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 126.145634][ T4187] XFS (loop0): Unmounting Filesystem [ 126.150760][ T6250] set_capacity_and_notify: 7 callbacks suppressed [ 126.150774][ T6250] loop2: detected capacity change from 0 to 512 [ 126.170634][ T4538] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 126.194806][ T5342] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 126.200508][ T4538] dvb-usb: schedule remote query interval to 150 msecs. [ 126.208351][ T6223] dvb-usb: bulk message failed: -22 (2/0) [ 126.229455][ T6250] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 126.249742][ T4538] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 126.291463][ T4538] usb 5-1: USB disconnect, device number 9 [ 126.313705][ T6250] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #17: comm syz.2.769: corrupted in-inode xattr [ 126.328071][ T6250] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.769: couldn't read orphan inode 17 (err -117) [ 126.344995][ T6250] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,nodelalloc,debug_want_extra_isize=0x000000000000002e,noblock_validity,jqfmt=vfsv0,quota,,errors=continue. Quota mode: writeback. [ 126.408449][ T25] audit: type=1800 audit(1784811498.131:8): pid=6250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.769" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 126.423401][ T6250] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 126.435321][ T4538] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 126.449349][ T6250] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.769: invalid indirect mapped block 32768 (level 2) [ 126.559529][ T5342] usb 2-1: config 15 has an invalid interface number: 44 but max is 0 [ 126.568958][ T5342] usb 2-1: config 15 has no interface number 0 [ 126.592722][ T5342] usb 2-1: config 15 interface 44 altsetting 2 endpoint 0xB has an invalid bInterval 27, changing to 8 [ 126.606295][ T5342] usb 2-1: config 15 interface 44 has no altsetting 0 [ 126.643376][ T6255] loop0: detected capacity change from 0 to 1024 [ 126.708047][ T6259] loop2: detected capacity change from 0 to 256 [ 126.769482][ T5342] usb 2-1: New USB device found, idVendor=049f, idProduct=ffff, bcdDevice=76.3d [ 126.778558][ T5342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.823279][ T5342] usb 2-1: Product: syz [ 126.850186][ T5342] usb 2-1: Manufacturer: syz [ 126.854825][ T5342] usb 2-1: SerialNumber: syz [ 126.969316][ T4566] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 127.159230][ T5337] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 127.170212][ T5342] safe_serial 2-1:15.44: safe_serial converter detected [ 127.189554][ T5342] safe_serial: probe of 2-1:15.44 failed with error -22 [ 127.198586][ T5342] usb 2-1: USB disconnect, device number 7 [ 127.293908][ T6271] loop0: detected capacity change from 0 to 256 [ 127.310406][ T6271] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.327736][ T6271] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.359463][ T4566] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 127.370941][ T4566] usb 4-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 127.384660][ T4566] usb 4-1: config 0 interface 0 has no altsetting 0 [ 127.391801][ T4566] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 127.401013][ T4566] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.411227][ T4566] usb 4-1: config 0 descriptor?? [ 127.429502][ T6257] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 127.519391][ T5337] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 127.542801][ T5337] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 127.553238][ T5337] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 127.563034][ T5337] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 127.574069][ T5337] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 127.699475][ T5337] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 127.708861][ T5337] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 127.717054][ T5337] usb 3-1: Product: syz [ 127.721451][ T5337] usb 3-1: Manufacturer: syz [ 127.760415][ T5337] cdc_wdm 3-1:1.0: skipping garbage [ 127.765664][ T5337] cdc_wdm 3-1:1.0: skipping garbage [ 127.810718][ T6273] device geneve2 entered promiscuous mode [ 127.811243][ T5337] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 127.818792][ T6277] loop4: detected capacity change from 0 to 256 [ 127.826960][ T5337] cdc_wdm 3-1:1.0: Unknown control protocol [ 127.895183][ T4566] lenovo 0003:17EF:60A3.000D: ignoring exceeding usage max [ 127.927457][ T4566] lenovo 0003:17EF:60A3.000D: ignoring exceeding usage max [ 127.978929][ T4566] lenovo 0003:17EF:60A3.000D: unknown main item tag 0x0 [ 128.016841][ T4566] lenovo 0003:17EF:60A3.000D: unknown main item tag 0x0 [ 128.033068][ T4566] lenovo 0003:17EF:60A3.000D: unknown main item tag 0x0 [ 128.049174][ C0] cdc_wdm 3-1:1.0: unknown notification 158 received: index 57142 len 1194 [ 128.049194][ T4566] lenovo 0003:17EF:60A3.000D: unknown main item tag 0x0 [ 128.049220][ T4566] lenovo 0003:17EF:60A3.000D: unknown main item tag 0x0 [ 128.090681][ T4566] lenovo 0003:17EF:60A3.000D: unknown main item tag 0x0 [ 128.099034][ T4566] lenovo 0003:17EF:60A3.000D: unknown main item tag 0x0 [ 128.124865][ T6287] loop4: detected capacity change from 0 to 16 [ 128.131293][ T4566] lenovo 0003:17EF:60A3.000D: unknown main item tag 0x0 [ 128.138593][ T4566] lenovo 0003:17EF:60A3.000D: unknown main item tag 0x0 [ 128.150744][ T4566] lenovo 0003:17EF:60A3.000D: unknown main item tag 0x0 [ 128.159577][ T6287] erofs: (device loop4): mounted with root inode @ nid 36. [ 128.183232][ T6287] attempt to access beyond end of device [ 128.183232][ T6287] loop4: rw=524288, want=32, limit=16 [ 128.199447][ T4566] lenovo 0003:17EF:60A3.000D: unknown main item tag 0x0 [ 128.213050][ T4566] lenovo 0003:17EF:60A3.000D: unknown main item tag 0x0 [ 128.232858][ T6287] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -21 in[55, 4041] out[4096] [ 128.264432][ T4566] lenovo 0003:17EF:60A3.000D: unknown main item tag 0x0 [ 128.272441][ T25] audit: type=1800 audit(1784811500.001:9): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.785" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 128.287802][ T4566] lenovo 0003:17EF:60A3.000D: unknown main item tag 0x0 [ 128.299976][ T5337] usb 3-1: USB disconnect, device number 6 [ 128.309739][ T4566] lenovo 0003:17EF:60A3.000D: unknown main item tag 0x0 [ 128.335019][ T4566] lenovo 0003:17EF:60A3.000D: hidraw0: USB HID v0.04 Device [HID 17ef:60a3] on usb-dummy_hcd.3-1/input0 [ 128.358804][ T4566] usb 4-1: USB disconnect, device number 9 [ 128.459057][ T6297] fido_id[6297]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 128.543172][ T6305] loop1: detected capacity change from 0 to 1024 [ 128.611765][ T6305] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,barrier,barrier=0x0000000000000005,mb_optimize_scan=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 128.665913][ T6304] loop0: detected capacity change from 0 to 8192 [ 128.693628][ T6309] loop4: detected capacity change from 0 to 4096 [ 128.722023][ T6304] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 128.733645][ T6304] REISERFS (device loop0): using ordered data mode [ 128.740518][ T6304] reiserfs: using flush barriers [ 128.747232][ T6304] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 128.776650][ T6304] REISERFS (device loop0): checking transaction log (loop0) [ 128.830214][ T6309] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 128.949228][ T6304] REISERFS (device loop0): Using r5 hash to sort names [ 128.957600][ T6318] rdma_op ffff88805f6fb1f0 conn xmit_rdma 0000000000000000 [ 128.965246][ T6304] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 128.988552][ T6309] ntfs3: loop4: Failed to load $Extend. [ 129.798002][ T6339] loop3: detected capacity change from 0 to 1024 [ 129.879228][ T4231] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 129.891464][ T6339] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,barrier,barrier=0x0000000000000005,mb_optimize_scan=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 129.984158][ T6349] vim2m vim2m.0: vidioc_s_fmt queue busy [ 130.129310][ T4276] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 130.289806][ T4231] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 130.303564][ T4231] usb 5-1: config 0 has no interface number 0 [ 130.321671][ T4231] usb 5-1: config 0 interface 41 has no altsetting 0 [ 130.499437][ T4231] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 130.519314][ T4276] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 130.527945][ T4276] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 130.539216][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.549397][ T4231] usb 5-1: Product: syz [ 130.555734][ T4231] usb 5-1: Manufacturer: syz [ 130.561764][ T4276] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 130.570882][ T4231] usb 5-1: SerialNumber: syz [ 130.576888][ T4276] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 130.591084][ T4231] usb 5-1: config 0 descriptor?? [ 130.596275][ T4276] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 130.759609][ T4276] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 130.781637][ T4276] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 130.816019][ T4276] usb 2-1: Product: syz [ 130.825872][ T4276] usb 2-1: Manufacturer: syz [ 130.887169][ T4276] cdc_wdm 2-1:1.0: skipping garbage [ 130.892520][ T4276] cdc_wdm 2-1:1.0: skipping garbage [ 130.900828][ T4276] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 130.906816][ T4276] cdc_wdm 2-1:1.0: Unknown control protocol [ 131.018933][ T6377] netlink: 'syz.0.836': attribute type 4 has an invalid length. [ 131.054771][ T6377] netlink: 168 bytes leftover after parsing attributes in process `syz.0.836'. [ 131.089402][ T4231] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 131.134460][ T4231] CoreChips: probe of 5-1:0.41 failed with error -71 [ 131.169150][ C1] cdc_wdm 2-1:1.0: unknown notification 158 received: index 57142 len 1194 [ 131.193591][ T4231] usb 5-1: USB disconnect, device number 10 [ 131.370450][ T4276] usb 2-1: USB disconnect, device number 8 [ 131.735063][ T6405] set_capacity_and_notify: 2 callbacks suppressed [ 131.735077][ T6405] loop4: detected capacity change from 0 to 512 [ 131.746876][ T6404] loop3: detected capacity change from 0 to 2048 [ 131.833883][ T6404] loop3: p1 < > p4 [ 131.833883][ T6404] p4: [ 131.865871][ T6404] loop3: p4 size 722688 extends beyond EOD, truncated [ 131.907118][ T6405] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 131.920734][ T6405] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.933363][ T4566] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 132.009791][ T6405] EXT4-fs (loop4): Cannot change journaled quota options when quota turned on [ 132.081984][ T6401] loop0: detected capacity change from 0 to 32768 [ 132.177659][ T6401] [ 132.177659][ T6401] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.177659][ T6401] [ 132.238648][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 132.255608][ T6401] ERROR: (device loop0): diWrite: ixpxd invalid [ 132.255608][ T6401] [ 132.264545][ T6401] ERROR: (device loop0): txCommit: [ 132.264545][ T6401] [ 132.264951][ T4502] udevd[4502]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 132.315105][ T4187] [ 132.315105][ T4187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.315105][ T4187] [ 132.356469][ T4187] [ 132.356469][ T4187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.356469][ T4187] [ 132.359538][ T4566] usb 3-1: config 15 has an invalid interface number: 44 but max is 0 [ 132.400486][ T4566] usb 3-1: config 15 has no interface number 0 [ 132.406797][ T4566] usb 3-1: config 15 interface 44 altsetting 2 endpoint 0xB has an invalid bInterval 27, changing to 8 [ 132.432101][ T4566] usb 3-1: config 15 interface 44 has no altsetting 0 [ 132.481292][ T6426] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 132.528801][ T6428] loop3: detected capacity change from 0 to 256 [ 132.639373][ T4566] usb 3-1: New USB device found, idVendor=049f, idProduct=ffff, bcdDevice=76.3d [ 132.648433][ T4566] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.661252][ T6428] FAT-fs (loop3): Directory bread(block 64) failed [ 132.667815][ T6428] FAT-fs (loop3): Directory bread(block 65) failed [ 132.689805][ T4566] usb 3-1: Product: syz [ 132.699436][ T6428] FAT-fs (loop3): Directory bread(block 66) failed [ 132.706891][ T4566] usb 3-1: Manufacturer: syz [ 132.716357][ T4566] usb 3-1: SerialNumber: syz [ 132.722906][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.730897][ T6428] FAT-fs (loop3): Directory bread(block 67) failed [ 132.737561][ T6428] FAT-fs (loop3): Directory bread(block 68) failed [ 132.772198][ T6428] FAT-fs (loop3): Directory bread(block 69) failed [ 132.780721][ T6436] loop1: detected capacity change from 0 to 1024 [ 132.787367][ T6428] FAT-fs (loop3): Directory bread(block 70) failed [ 132.797964][ T6428] FAT-fs (loop3): Directory bread(block 71) failed [ 132.806177][ T6428] FAT-fs (loop3): Directory bread(block 72) failed [ 132.839618][ T6428] FAT-fs (loop3): Directory bread(block 73) failed [ 133.039216][ T4231] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 133.060582][ T4566] safe_serial 3-1:15.44: safe_serial converter detected [ 133.068427][ T4566] safe_serial: probe of 3-1:15.44 failed with error -22 [ 133.107710][ T4566] usb 3-1: USB disconnect, device number 7 [ 133.265020][ T6442] loop1: detected capacity change from 0 to 32768 [ 133.289360][ T4231] usb 1-1: Using ep0 maxpacket: 32 [ 133.368852][ T6442] XFS (loop1): Mounting V5 Filesystem [ 133.400635][ T6442] XFS (loop1): Ending clean mount [ 133.419356][ T4231] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 133.429041][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.454269][ T4189] XFS (loop1): Unmounting Filesystem [ 133.459816][ T4231] usb 1-1: config 0 descriptor?? [ 133.493958][ T4538] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 133.504519][ T4231] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 133.779657][ T4538] usb 5-1: Using ep0 maxpacket: 16 [ 133.930255][ T4231] gspca_vc032x: reg_w err -71 [ 133.935240][ T4538] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 133.948212][ T4231] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.957415][ T4231] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.963439][ T4538] usb 5-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 133.973316][ T4231] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.978712][ T4231] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.985532][ T4538] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.993909][ T4231] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.999753][ T5336] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 134.014624][ T4538] usb 5-1: config 0 descriptor?? [ 134.019804][ T4231] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.025935][ T4231] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.032460][ T4231] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.037917][ T4231] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.049962][ T4231] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.055270][ T4231] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.063546][ T4231] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.069347][ T4231] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.076871][ T4231] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.082364][ T4231] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.086040][ T6472] loop2: detected capacity change from 0 to 8 [ 134.087722][ T4231] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.113737][ T4231] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.114365][ T6472] SQUASHFS error: zlib decompression failed, data probably corrupt [ 134.119057][ T4231] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.119070][ T4231] gspca_vc032x: Unknown sensor... [ 134.127789][ T4231] vc032x: probe of 1-1:0.0 failed with error -22 [ 134.144549][ T6472] SQUASHFS error: Failed to read block 0x9b: -5 [ 134.151169][ T6472] SQUASHFS error: Unable to read metadata cache entry [99] [ 134.158388][ T6472] SQUASHFS error: Unable to read inode 0x127 [ 134.167099][ T4231] usb 1-1: USB disconnect, device number 5 [ 134.369448][ T5336] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 134.378652][ T5336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.388554][ T5336] usb 4-1: config 0 descriptor?? [ 134.500882][ T4538] betop 0003:8380:1850.000E: unknown main item tag 0x3 [ 134.507933][ T4538] betop 0003:8380:1850.000E: unknown main item tag 0xd [ 134.515301][ T4538] betop 0003:8380:1850.000E: unknown main item tag 0x1 [ 134.523523][ T4538] betop 0003:8380:1850.000E: unknown main item tag 0x1 [ 134.531020][ T4538] betop 0003:8380:1850.000E: unknown main item tag 0x0 [ 134.546829][ T4538] betop 0003:8380:1850.000E: hidraw0: USB HID v0.09 Device [HID 8380:1850] on usb-dummy_hcd.4-1/input0 [ 134.558294][ T4538] betop 0003:8380:1850.000E: no inputs found [ 134.639992][ T4276] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 134.650039][ T5336] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 134.661624][ T6483] loop0: detected capacity change from 0 to 164 [ 134.677013][ T5336] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 134.717869][ T6483] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 134.760654][ T6483] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 134.764490][ T5342] usb 5-1: USB disconnect, device number 11 [ 134.864138][ T5336] [drm:udl_init] *ERROR* Selecting channel failed [ 134.876463][ T5336] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 134.888055][ T5336] [drm] Initialized udl on minor 2 [ 134.910166][ T5336] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 134.919894][ T5336] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 134.929275][ T5336] usb 4-1: USB disconnect, device number 10 [ 134.935615][ T5337] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 134.944291][ T5337] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 134.953382][ T5337] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 135.069242][ T4276] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 135.077648][ T4276] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 135.090960][ T4276] usb 3-1: config 220 has no interface number 2 [ 135.097254][ T4276] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 135.113267][ T4276] usb 3-1: config 220 interface 0 has no altsetting 0 [ 135.120120][ T4276] usb 3-1: config 220 interface 76 has no altsetting 0 [ 135.126982][ T4276] usb 3-1: config 220 interface 1 has no altsetting 0 [ 135.349623][ T4276] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 135.379056][ T4276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.393473][ T6495] loop4: detected capacity change from 0 to 64 [ 135.403368][ T4276] usb 3-1: Product: syz [ 135.407569][ T4276] usb 3-1: Manufacturer: syz [ 135.419658][ T4276] usb 3-1: SerialNumber: syz [ 135.438406][ T6489] loop0: detected capacity change from 0 to 4096 [ 135.541908][ T6499] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 135.558231][ T6500] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.562717][ T6499] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 135.584246][ T6497] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 135.626953][ T25] audit: type=1800 audit(1784811507.351:10): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.885" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 135.720040][ T144] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 135.806942][ T6506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.882'. [ 135.819575][ T4276] usb 3-1: selecting invalid altsetting 0 [ 135.825839][ T4276] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 135.864081][ T4276] usb 3-1: No valid video chain found. [ 135.866366][ T6506] netlink: 7 bytes leftover after parsing attributes in process `syz.1.882'. [ 135.934403][ T6512] exfat: Deprecated parameter 'utf8' [ 135.958768][ T6512] exfat: Deprecated parameter 'namecase' [ 135.968445][ T6512] exfat: Deprecated parameter 'namecase' [ 135.990089][ T4276] usb 3-1: selecting invalid altsetting 0 [ 135.995864][ T4276] usbtest: probe of 3-1:220.1 failed with error -22 [ 136.029295][ T6512] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 136.057653][ T4276] usb 3-1: USB disconnect, device number 8 [ 136.234027][ T6522] erofs: (device loop0): mounted with root inode @ nid 36. [ 136.259292][ T4281] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 136.270477][ T6522] attempt to access beyond end of device [ 136.270477][ T6522] loop0: rw=524288, want=32, limit=16 [ 136.289279][ T6522] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -21 in[55, 4041] out[4096] [ 136.307956][ T25] audit: type=1800 audit(1784811508.031:11): pid=6522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.892" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 136.332758][ T5341] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 136.449240][ T4566] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 136.550045][ T4281] usb 4-1: Using ep0 maxpacket: 16 [ 136.579235][ T5341] usb 2-1: Using ep0 maxpacket: 32 [ 136.680311][ T4281] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 136.694722][ T4281] usb 4-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 136.699407][ T5341] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 136.704303][ T4281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.717752][ T5341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.723127][ T4281] usb 4-1: config 0 descriptor?? [ 136.737223][ T5341] usb 2-1: config 0 descriptor?? [ 136.849314][ T4566] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 136.858478][ T4566] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.867949][ T4566] usb 5-1: config 0 descriptor?? [ 137.139481][ T4566] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 137.147947][ T4566] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 137.220708][ T5341] zeroplus 0003:0C12:0030.000F: unknown main item tag 0x4 [ 137.227892][ T5341] zeroplus 0003:0C12:0030.000F: unknown main item tag 0xd [ 137.236872][ T5341] zeroplus 0003:0C12:0030.000F: hidraw0: USB HID v0.81 Device [HID 0c12:0030] on usb-dummy_hcd.1-1/input0 [ 137.240833][ T4281] betop 0003:8380:1850.0010: unknown main item tag 0x3 [ 137.248798][ T5341] zeroplus 0003:0C12:0030.000F: no inputs found [ 137.260667][ T4281] betop 0003:8380:1850.0010: unknown main item tag 0xd [ 137.268497][ T4281] betop 0003:8380:1850.0010: unknown main item tag 0x1 [ 137.275717][ T4281] betop 0003:8380:1850.0010: unknown main item tag 0x1 [ 137.282852][ T4281] betop 0003:8380:1850.0010: unknown main item tag 0x0 [ 137.291301][ T4281] betop 0003:8380:1850.0010: hidraw1: USB HID v0.09 Device [HID 8380:1850] on usb-dummy_hcd.3-1/input0 [ 137.302627][ T4281] betop 0003:8380:1850.0010: no inputs found [ 137.354262][ T4566] [drm:udl_init] *ERROR* Selecting channel failed [ 137.365358][ T4566] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 137.373213][ T4566] [drm] Initialized udl on minor 2 [ 137.389334][ T4566] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 137.398070][ T4566] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 137.406350][ T4566] usb 5-1: USB disconnect, device number 12 [ 137.413463][ T4281] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 137.432046][ T4281] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 137.440667][ T4281] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 137.484482][ T4281] usb 2-1: USB disconnect, device number 9 [ 137.494186][ T5341] usb 4-1: USB disconnect, device number 11 [ 137.897704][ T6531] rdma_op ffff88807e9331f0 conn xmit_rdma 0000000000000000 [ 137.985584][ T6537] device geneve2 entered promiscuous mode [ 138.154992][ T6539] set_capacity_and_notify: 4 callbacks suppressed [ 138.155008][ T6539] loop2: detected capacity change from 0 to 8192 [ 138.248965][ T6539] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 138.325197][ T6539] REISERFS (device loop2): using ordered data mode [ 138.389453][ T6539] reiserfs: using flush barriers [ 138.427349][ T6539] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 138.515525][ T6539] REISERFS (device loop2): checking transaction log (loop2) [ 138.529876][ T6541] loop0: detected capacity change from 0 to 32768 [ 138.567936][ T6539] REISERFS (device loop2): Using r5 hash to sort names [ 138.583312][ T6539] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 138.596666][ T6558] binder: BINDER_SET_CONTEXT_MGR already set [ 138.646543][ T6558] binder: 6557:6558 ioctl 40046207 0 returned -16 [ 138.775375][ T6541] XFS (loop0): Mounting V5 Filesystem [ 139.018318][ T6541] XFS (loop0): Ending clean mount [ 139.080314][ T6541] XFS (loop0): Quotacheck needed: Please wait. [ 139.136841][ T6579] vim2m vim2m.0: vidioc_s_fmt queue busy [ 139.223205][ T6541] XFS (loop0): Quotacheck: Done. [ 139.372272][ T4187] XFS (loop0): Unmounting Filesystem [ 139.596816][ T6593] loop4: detected capacity change from 0 to 8192 [ 139.637721][ T6578] loop1: detected capacity change from 0 to 32768 [ 139.665858][ T6593] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 139.681388][ T6593] REISERFS (device loop4): using ordered data mode [ 139.688097][ T6593] reiserfs: using flush barriers [ 139.694441][ T6593] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 139.714019][ T6593] REISERFS (device loop4): checking transaction log (loop4) [ 139.735923][ T6593] REISERFS (device loop4): Using r5 hash to sort names [ 139.752678][ T6600] loop0: detected capacity change from 0 to 512 [ 139.758978][ T6578] [ 139.758978][ T6578] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.758978][ T6578] [ 139.773824][ T6593] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 139.799673][ T6578] [ 139.799673][ T6578] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.799673][ T6578] [ 139.810870][ T6578] [ 139.810870][ T6578] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.810870][ T6578] [ 139.823770][ T6578] [ 139.823770][ T6578] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.823770][ T6578] [ 139.835115][ T6578] [ 139.835115][ T6578] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.835115][ T6578] [ 139.848073][ T4281] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 139.872056][ T6601] ialloc: diAlloc returned -5! [ 139.875715][ T277] [ 139.875715][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.875715][ T277] [ 139.898194][ T4189] [ 139.898194][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.898194][ T4189] [ 139.924546][ T6600] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 139.954642][ T6600] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.956722][ T4189] [ 139.956722][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.956722][ T4189] [ 140.023701][ T6600] EXT4-fs (loop0): Cannot change journaled quota options when quota turned on [ 140.132463][ T4281] usb 4-1: Using ep0 maxpacket: 16 [ 140.509462][ T4281] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 140.518564][ T4281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.568053][ T6632] loop4: detected capacity change from 0 to 256 [ 140.569195][ T4281] usb 4-1: Product: syz [ 140.585879][ T4281] usb 4-1: Manufacturer: syz [ 140.601740][ T4281] usb 4-1: SerialNumber: syz [ 140.638015][ T4281] usb 4-1: config 0 descriptor?? [ 140.642629][ T6632] FAT-fs (loop4): Directory bread(block 64) failed [ 140.654297][ T6635] netlink: 'syz.0.936': attribute type 3 has an invalid length. [ 140.667611][ T6632] FAT-fs (loop4): Directory bread(block 65) failed [ 140.689297][ T6632] FAT-fs (loop4): Directory bread(block 66) failed [ 140.710472][ T6632] FAT-fs (loop4): Directory bread(block 67) failed [ 140.729305][ T6632] FAT-fs (loop4): Directory bread(block 68) failed [ 140.749244][ T6632] FAT-fs (loop4): Directory bread(block 69) failed [ 140.756046][ T6632] FAT-fs (loop4): Directory bread(block 70) failed [ 140.768263][ T6632] FAT-fs (loop4): Directory bread(block 71) failed [ 140.775159][ T6632] FAT-fs (loop4): Directory bread(block 72) failed [ 140.787023][ T6632] FAT-fs (loop4): Directory bread(block 73) failed [ 140.876468][ T6629] loop1: detected capacity change from 0 to 32768 [ 140.913184][ T6629] JBD2: Ignoring recovery information on journal [ 140.973837][ T6629] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 141.017103][ T6629] [ 141.019468][ T6629] ====================================================== [ 141.026570][ T6629] WARNING: possible circular locking dependency detected [ 141.033611][ T6629] syzkaller #0 Not tainted [ 141.038005][ T6629] ------------------------------------------------------ [ 141.045014][ T6629] syz.1.933/6629 is trying to acquire lock: [ 141.050886][ T6629] ffff88807e31d488 (&osb->system_file_mutex){+.+.}-{3:3}, at: ocfs2_get_system_file_inode+0x1a4/0x7f0 [ 141.061833][ T6629] [ 141.061833][ T6629] but task is already holding lock: [ 141.069181][ T6629] ffff88805fa6cda0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_reflink+0x4cb/0x920 [ 141.079334][ T6629] [ 141.079334][ T6629] which lock already depends on the new lock. [ 141.079334][ T6629] [ 141.089726][ T6629] [ 141.089726][ T6629] the existing dependency chain (in reverse order) is: [ 141.098726][ T6629] [ 141.098726][ T6629] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 141.107567][ T6629] down_read+0x44/0x2e0 [ 141.112231][ T6629] ocfs2_read_virt_blocks+0x240/0x8e0 [ 141.118107][ T6629] ocfs2_find_entry+0x39d/0x1f90 [ 141.123688][ T6629] ocfs2_find_files_on_disk+0xdb/0x2f0 [ 141.129661][ T6629] ocfs2_lookup_ino_from_name+0x4f/0xf0 [ 141.135715][ T6629] ocfs2_get_system_file_inode+0x33f/0x7f0 [ 141.142155][ T6629] ocfs2_init_global_system_inodes+0x315/0x6e0 [ 141.148906][ T6629] ocfs2_fill_super+0x4032/0x50c0 [ 141.154440][ T6629] mount_bdev+0x28a/0x3c0 [ 141.159278][ T6629] legacy_get_tree+0xe6/0x180 [ 141.164483][ T6629] vfs_get_tree+0x88/0x270 [ 141.169402][ T6629] do_new_mount+0x247/0xa40 [ 141.174410][ T6629] __se_sys_mount+0x2e3/0x3d0 [ 141.179608][ T6629] do_syscall_64+0x4c/0xa0 [ 141.184539][ T6629] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.190934][ T6629] [ 141.190934][ T6629] -> #0 (&osb->system_file_mutex){+.+.}-{3:3}: [ 141.199254][ T6629] __lock_acquire+0x2c66/0x7b50 [ 141.204630][ T6629] lock_acquire+0x19e/0x400 [ 141.209640][ T6629] __mutex_lock_common+0x1e5/0x2400 [ 141.215346][ T6629] mutex_lock_nested+0x17/0x20 [ 141.220785][ T6629] ocfs2_get_system_file_inode+0x1a4/0x7f0 [ 141.227653][ T6629] ocfs2_reserve_suballoc_bits+0x12e/0x44b0 [ 141.234071][ T6629] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 141.240915][ T6629] ocfs2_create_refcount_tree+0x26c/0x1240 [ 141.247233][ T6629] __ocfs2_reflink+0x4b6/0x16f0 [ 141.252590][ T6629] ocfs2_reflink+0x4e4/0x920 [ 141.257682][ T6629] ocfs2_vfs_reflink+0x333/0x450 [ 141.263126][ T6629] ocfs2_reflink_ioctl+0x39c/0x440 [ 141.268740][ T6629] ocfs2_ioctl+0x586/0x7a0 [ 141.273755][ T6629] __se_sys_ioctl+0xfa/0x170 [ 141.278861][ T6629] do_syscall_64+0x4c/0xa0 [ 141.283785][ T6629] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.290272][ T6629] [ 141.290272][ T6629] other info that might help us debug this: [ 141.290272][ T6629] [ 141.300479][ T6629] Possible unsafe locking scenario: [ 141.300479][ T6629] [ 141.307911][ T6629] CPU0 CPU1 [ 141.313281][ T6629] ---- ---- [ 141.318637][ T6629] lock(&ocfs2_file_ip_alloc_sem_key); [ 141.324191][ T6629] lock(&osb->system_file_mutex); [ 141.331928][ T6629] lock(&ocfs2_file_ip_alloc_sem_key); [ 141.340072][ T6629] lock(&osb->system_file_mutex); [ 141.345303][ T6629] [ 141.345303][ T6629] *** DEADLOCK *** [ 141.345303][ T6629] [ 141.353450][ T6629] 5 locks held by syz.1.933/6629: [ 141.358568][ T6629] #0: ffff88807b6e2460 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 141.367817][ T6629] #1: ffff888074bf09c8 (&type->i_mutex_dir_key#13/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 141.378517][ T6629] #2: ffff88805fa6d108 (&sb->s_type->i_mutex_key#25){+.+.}-{3:3}, at: ocfs2_vfs_reflink+0x2f3/0x450 [ 141.389630][ T6629] #3: ffff88805fa6ce38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_reflink+0x4bc/0x920 [ 141.399261][ T6629] #4: ffff88805fa6cda0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_reflink+0x4cb/0x920 [ 141.409847][ T6629] [ 141.409847][ T6629] stack backtrace: [ 141.415898][ T6629] CPU: 1 PID: 6629 Comm: syz.1.933 Not tainted syzkaller #0 [ 141.423171][ T6629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 141.433323][ T6629] Call Trace: [ 141.436592][ T6629] [ 141.439512][ T6629] dump_stack_lvl+0x188/0x250 [ 141.444175][ T6629] ? load_image+0x410/0x410 [ 141.448659][ T6629] ? show_regs_print_info+0x20/0x20 [ 141.453839][ T6629] ? print_circular_bug+0x12b/0x1a0 [ 141.459031][ T6629] check_noncircular+0x296/0x330 [ 141.463946][ T6629] ? add_chain_block+0x9b0/0x9b0 [ 141.468870][ T6629] ? lockdep_lock+0xf1/0x1f0 [ 141.473442][ T6629] ? mark_lock+0x94/0x320 [ 141.477750][ T6629] ? _find_first_zero_bit+0xd1/0xf0 [ 141.482929][ T6629] __lock_acquire+0x2c66/0x7b50 [ 141.487770][ T6629] ? verify_lock_unused+0x140/0x140 [ 141.492949][ T6629] ? mark_lock+0x94/0x320 [ 141.497254][ T6629] ? __lock_acquire+0x13dc/0x7b50 [ 141.502276][ T6629] lock_acquire+0x19e/0x400 [ 141.506774][ T6629] ? ocfs2_get_system_file_inode+0x1a4/0x7f0 [ 141.512752][ T6629] ? __might_sleep+0xf0/0xf0 [ 141.517504][ T6629] ? ocfs2_set_buffer_uptodate+0xac/0x11a0 [ 141.523412][ T6629] ? read_lock_is_recursive+0x10/0x10 [ 141.528808][ T6629] ? mark_lock+0x94/0x320 [ 141.533127][ T6629] __mutex_lock_common+0x1e5/0x2400 [ 141.538335][ T6629] ? ocfs2_get_system_file_inode+0x1a4/0x7f0 [ 141.544333][ T6629] ? ocfs2_get_system_file_inode+0x1a4/0x7f0 [ 141.550393][ T6629] ? ocfs2_get_system_file_inode+0x14c/0x7f0 [ 141.556357][ T6629] ? mutex_lock_io_nested+0x60/0x60 [ 141.561536][ T6629] ? __rwlock_init+0x140/0x140 [ 141.566282][ T6629] ? do_raw_spin_unlock+0x11d/0x230 [ 141.571486][ T6629] mutex_lock_nested+0x17/0x20 [ 141.576243][ T6629] ocfs2_get_system_file_inode+0x1a4/0x7f0 [ 141.582065][ T6629] ? ocfs2_fast_symlink_readpage+0x3f0/0x3f0 [ 141.588027][ T6629] ? hlock_conflict+0x59/0x1f0 [ 141.592779][ T6629] ocfs2_reserve_suballoc_bits+0x12e/0x44b0 [ 141.598659][ T6629] ? __lock_acquire+0x7b50/0x7b50 [ 141.603674][ T6629] ? unwind_next_frame+0x11ec/0x1cf0 [ 141.608954][ T6629] ? 0xffffffffa002a000 [ 141.613106][ T6629] ? is_bpf_text_address+0x254/0x270 [ 141.618403][ T6629] ? __kernel_text_address+0x9a/0x100 [ 141.623774][ T6629] ? unwind_get_return_address+0x49/0x80 [ 141.629422][ T6629] ? stack_trace_save+0xf0/0xf0 [ 141.634263][ T6629] ? ocfs2_block_group_search+0x470/0x470 [ 141.639966][ T6629] ? stack_trace_save+0xa6/0xf0 [ 141.644884][ T6629] ? stack_trace_snprint+0xe0/0xe0 [ 141.649985][ T6629] ? __kasan_kmalloc+0xc6/0xe0 [ 141.654727][ T6629] ? __kasan_kmalloc+0xaf/0xe0 [ 141.659554][ T6629] ? ocfs2_reserve_new_metadata_blocks+0x109/0x9a0 [ 141.666042][ T6629] ? ocfs2_create_refcount_tree+0x26c/0x1240 [ 141.671998][ T6629] ? __ocfs2_reflink+0x4b6/0x16f0 [ 141.677012][ T6629] ? ocfs2_reflink+0x4e4/0x920 [ 141.681771][ T6629] ? ocfs2_vfs_reflink+0x333/0x450 [ 141.686974][ T6629] ? ocfs2_reflink_ioctl+0x39c/0x440 [ 141.692259][ T6629] ? ocfs2_ioctl+0x586/0x7a0 [ 141.696929][ T6629] ? __se_sys_ioctl+0xfa/0x170 [ 141.701673][ T6629] ? do_syscall_64+0x4c/0xa0 [ 141.706241][ T6629] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.712319][ T6629] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 141.718811][ T6629] ? ocfs2_init_steal_slots+0x150/0x150 [ 141.724344][ T6629] ? __lock_acquire+0x7b50/0x7b50 [ 141.729355][ T6629] ? deref_stack_reg+0xd0/0x120 [ 141.734257][ T6629] ? unwind_next_frame+0x11ec/0x1cf0 [ 141.739546][ T6629] ocfs2_create_refcount_tree+0x26c/0x1240 [ 141.746051][ T6629] ? __kernel_text_address+0x9a/0x100 [ 141.751430][ T6629] ? ocfs2_duplicate_inline_data+0x560/0x560 [ 141.757407][ T6629] ? filemap_fdatawrite_wbc+0x178/0x240 [ 141.763071][ T6629] ? filemap_fdatawrite+0xdc/0x140 [ 141.768177][ T6629] ? __filemap_fdatawrite_range+0x150/0x150 [ 141.774095][ T6629] ? lockdep_lock+0x1f0/0x1f0 [ 141.778771][ T6629] __ocfs2_reflink+0x4b6/0x16f0 [ 141.783616][ T6629] ? fsnotify_create+0x150/0x150 [ 141.788654][ T6629] ? ocfs2_inode_lock_full_nested+0xaaa/0x1b10 [ 141.794980][ T6629] ? rwsem_write_trylock+0x135/0x1c0 [ 141.800257][ T6629] ? clear_nonspinnable+0x60/0x60 [ 141.805265][ T6629] ? ocfs2_create_new_inode_locks+0x690/0x690 [ 141.811320][ T6629] ocfs2_reflink+0x4e4/0x920 [ 141.815913][ T6629] ? ocfs2_clear_ext_refcount+0x720/0x720 [ 141.821621][ T6629] ? memset+0x1e/0x40 [ 141.825585][ T6629] ? __dquot_initialize+0x21b/0xd00 [ 141.830769][ T6629] ? rwsem_write_trylock+0x135/0x1c0 [ 141.836046][ T6629] ? dquot_initialize+0x20/0x20 [ 141.840877][ T6629] ? HAS_UNMAPPED_ID+0x1c5/0x220 [ 141.845796][ T6629] ocfs2_vfs_reflink+0x333/0x450 [ 141.850720][ T6629] ocfs2_reflink_ioctl+0x39c/0x440 [ 141.855817][ T6629] ? ocfs2_add_refcount_flag+0xe10/0xe10 [ 141.861431][ T6629] ? __lock_acquire+0x7b50/0x7b50 [ 141.866434][ T6629] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 141.872071][ T6629] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 141.877541][ T6629] ? __might_fault+0xb3/0x110 [ 141.882204][ T6629] ? _copy_from_user+0x111/0x170 [ 141.887124][ T6629] ocfs2_ioctl+0x586/0x7a0 [ 141.891519][ T6629] ? ocfs2_fileattr_set+0x800/0x800 [ 141.896699][ T6629] ? bpf_lsm_file_ioctl+0x5/0x10 [ 141.901616][ T6629] ? security_file_ioctl+0x7c/0xa0 [ 141.906708][ T6629] ? ocfs2_fileattr_set+0x800/0x800 [ 141.911889][ T6629] __se_sys_ioctl+0xfa/0x170 [ 141.916473][ T6629] do_syscall_64+0x4c/0xa0 [ 141.920881][ T6629] ? clear_bhb_loop+0x30/0x80 [ 141.925540][ T6629] ? clear_bhb_loop+0x30/0x80 [ 141.930211][ T6629] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.936113][ T6629] RIP: 0033:0x7f8207fbae99 [ 141.940508][ T6629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.960115][ T6629] RSP: 002b:00007f8206213028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.968514][ T6629] RAX: ffffffffffffffda RBX: 00007f8208242fa0 RCX: 00007f8207fbae99 [ 141.976487][ T6629] RDX: 00002000000001c0 RSI: 0000000040186f04 RDI: 0000000000000004 [ 141.984449][ T6629] RBP: 00007f8208050eaf R08: 0000000000000000 R09: 0000000000000000 [ 141.992498][ T6629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.000457][ T6629] R13: 00007f8208243038 R14: 00007f8208242fa0 R15: 00007fff758373b8 [ 142.008415][ T6629] [ 142.015560][ T4281] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 142.026726][ T4281] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 142.044592][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 142.059469][ T4281] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 142.067494][ T4281] usb 4-1: media controller created [ 142.078039][ T4281] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.229250][ T4281] zl10353_read_register: readreg error (reg=127, ret==0) [ 142.236387][ T4281] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 142.244339][ T4281] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 142.256656][ T4281] usb 4-1: USB disconnect, device number 12 [ 142.274767][ T4281] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.