last executing test programs: 3.279534092s ago: executing program 3 (id=1554): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file2\x00', 0x4800, &(0x7f0000000100)=ANY=[], 0x1, 0x6bb, &(0x7f00000018c0)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84800, 0x0) unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.09657064s ago: executing program 2 (id=1555): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000406a050c0300000000000109022400010000000009040000010300000009210600000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002208000000aa8cc8a9"], 0x0}, 0x0) 2.99141462s ago: executing program 3 (id=1558): r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, &(0x7f0000000000)='source', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='sync\x00', 0x0, 0x0) 2.851498224s ago: executing program 1 (id=1559): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB='-', @ANYRESHEX, @ANYRESDEC], 0x27) 2.743484685s ago: executing program 3 (id=1568): r0 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) accept4$unix(r0, 0x0, &(0x7f0000000040), 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0) 2.684946891s ago: executing program 1 (id=1561): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0xd9, 0x2, &(0x7f0000000040)={0x8, "810556c721393f4084cc9efc7ddbe76f2fb91f7abe359f7ed2401f27a7f77d040b"}}) 1.407203629s ago: executing program 3 (id=1565): r0 = msgget$private(0x0, 0x1f3) msgrcv(r0, 0x0, 0x0, 0x3, 0x2000) msgrcv(r0, 0x0, 0x0, 0x2, 0x0) msgsnd(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02"], 0x8, 0x0) 1.279986322s ago: executing program 0 (id=1567): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0x6, 0x0) 1.19953764s ago: executing program 3 (id=1569): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ec, &(0x7f00000051c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000140)={0x10}, 0x10) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000180)={0x4, 0x5, 0x3, 0xfff, 0x2, [0x1ff, 0x0, 0x81, 0x1]}) 1.131120297s ago: executing program 2 (id=1570): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2000, 0x0, 0xffff}, 'syz1\x00', 0x1f}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000700)={{}, 0x12, 0x10, 0x40000}, 0x16) 1.124213887s ago: executing program 0 (id=1571): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0xfe, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x2, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 958.280924ms ago: executing program 1 (id=1572): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000002480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0, 0x4) 718.517918ms ago: executing program 0 (id=1573): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000004080)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x5, @private2, 0x42}, 0x1c, &(0x7f00000039c0)=[{&(0x7f00000003c0)="eb", 0x1}], 0x1}}, {{&(0x7f0000003f00)={0xa, 0x4e23, 0xe, @private2, 0xfffffffe}, 0x1c, &(0x7f0000003f80)=[{&(0x7f0000003f40)="d8", 0x1}], 0x1}}], 0x2, 0x20040140) listen(r0, 0xfff) accept(r0, 0xfffffffffffffffd, &(0x7f0000000040)) 718.315748ms ago: executing program 1 (id=1575): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000180)) 718.175968ms ago: executing program 2 (id=1576): syz_open_dev$sndpcmc(&(0x7f0000000080), 0xb, 0x2) io_setup(0x3, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) 587.669661ms ago: executing program 1 (id=1577): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x804000, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 578.450652ms ago: executing program 0 (id=1578): r0 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mbind(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x80000000000005a, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={0x0}, 0x18) 424.571967ms ago: executing program 1 (id=1579): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8005, 0x1000}], 0x1) semop(r0, &(0x7f00000001c0)=[{0x3, 0x3, 0x800}, {0x1, 0xbbdd, 0x1000}, {0x1, 0x1001, 0x1800}], 0x3) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 424.216467ms ago: executing program 2 (id=1580): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000600)=0x5bb, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 375.944722ms ago: executing program 0 (id=1581): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 236.673326ms ago: executing program 2 (id=1582): pipe(&(0x7f0000002480)={0xffffffffffffffff}) read(r0, &(0x7f0000032440)=""/102364, 0x18fdc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 100.736209ms ago: executing program 0 (id=1583): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") r0 = syz_open_dev$media(&(0x7f0000000040), 0xfffffffffffffff8, 0x2) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000008c0)={0x80000000, 0x0, &(0x7f00000007c0)=[{{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000880)={{0x80000000, 0x0, 0x3, [0xf2d8, 0x8]}, {0x80000000, r1, 0x6, [0xfffffffb, 0x2]}, 0x10000005, [0x7, 0x71]}) 17.074078ms ago: executing program 3 (id=1584): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000011000500002000000003000007000000", @ANYRES32=r2, @ANYBLOB="00040100421900000c001a800800048004000380"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 2 (id=1585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) kernel console output (not intermixed with test programs): 0] XFS (loop0): Quotacheck needed: Please wait. [ 113.875319][ T1203] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 113.915295][ T6870] XFS (loop0): Quotacheck: Done. [ 114.072258][ T5786] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 114.099227][ T1203] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 114.115630][ T1203] usb 4-1: config 0 has no interface number 0 [ 114.132087][ T1203] usb 4-1: config 0 interface 11 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 114.162475][ T1203] usb 4-1: config 0 interface 11 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 114.193769][ T1203] usb 4-1: config 0 interface 11 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 114.234796][ T1203] usb 4-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca [ 114.252331][ T1203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.273688][ T1203] usb 4-1: Product: syz [ 114.279364][ T1203] usb 4-1: Manufacturer: syz [ 114.298089][ T1203] usb 4-1: SerialNumber: syz [ 114.322010][ T1203] usb 4-1: config 0 descriptor?? [ 114.356116][ T6890] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 114.364152][ T6890] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 114.491149][ T6913] loop2: detected capacity change from 0 to 4096 [ 114.505455][ T6913] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 114.589621][ T1203] usb 4-1: Error in usbnet_get_endpoints (-71) [ 114.628293][ T1203] usb 4-1: USB disconnect, device number 6 [ 114.656606][ T6915] netlink: 256 bytes leftover after parsing attributes in process `syz.0.399'. [ 114.714639][ T6913] ntfs3: loop2: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 114.805478][ T42] ntfs3: loop2: ino=1e, failed to parse mft record [ 114.807442][ T6917] raw_sendmsg: syz.0.402 forgot to set AF_INET. Fix it! [ 114.965579][ T6922] loop2: detected capacity change from 0 to 1024 [ 115.034925][ T6922] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 115.054908][ T6922] hfsplus: xattr search failed [ 115.179608][ T11] hfsplus: b-tree write err: -5, ino 4 [ 115.459203][ T6938] team0: Device gtp0 is of different type [ 115.974932][ T6958] loop3: detected capacity change from 0 to 4096 [ 116.082544][ T6958] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 116.094797][ T6958] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 116.139009][ T6967] loop0: detected capacity change from 0 to 128 [ 116.207348][ T6967] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.253535][ T6967] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.338717][ T6967] fscrypt (loop0, inode 12): Unsupported encryption flags (0x0e) [ 116.419094][ T5786] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.618796][ T6980] sit0: entered promiscuous mode [ 116.649993][ T6982] netlink: 'syz.2.431': attribute type 11 has an invalid length. [ 116.686425][ T6980] netlink: 'syz.3.430': attribute type 1 has an invalid length. [ 116.694068][ T6983] [U]  [ 116.697076][ T6982] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.431'. [ 116.721000][ T6980] netlink: 1 bytes leftover after parsing attributes in process `syz.3.430'. [ 116.962602][ T6988] loop3: detected capacity change from 0 to 2048 [ 117.040292][ T6988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.203566][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.372042][ T6978] loop0: detected capacity change from 0 to 40427 [ 117.390964][ T6978] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0) [ 117.425496][ T6978] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 117.444964][ T6991] loop2: detected capacity change from 0 to 32768 [ 117.457529][ T6978] F2FS-fs (loop0): invalid crc value [ 117.463337][ T6991] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop2 scanned by syz.2.435 (6991) [ 117.505399][ T6978] F2FS-fs (loop0): Found nat_bits in checkpoint [ 117.526316][ T6991] BTRFS info (device loop2): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 117.560034][ T6991] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 117.587484][ T6998] batadv1: entered allmulticast mode [ 117.589951][ T6991] BTRFS info (device loop2): using free space tree [ 117.608702][ T6998] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 117.630823][ T6998] bridge0: port 3(batadv1) entered blocking state [ 117.652521][ T6998] bridge0: port 3(batadv1) entered disabled state [ 117.663997][ T6998] batadv1: entered promiscuous mode [ 117.674839][ T6998] bridge0: port 3(batadv1) entered blocking state [ 117.681868][ T6978] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 117.689072][ T6998] bridge0: port 3(batadv1) entered forwarding state [ 117.695438][ T6978] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 117.783150][ T6991] BTRFS info (device loop2): enabling ssd optimizations [ 117.798048][ T6991] BTRFS info (device loop2): auto enabling async discard [ 117.900551][ T5786] syz-executor: attempt to access beyond end of device [ 117.900551][ T5786] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 117.937084][ T5786] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 117.946023][ T5786] syz-executor: attempt to access beyond end of device [ 117.946023][ T5786] loop0: rw=2049, sector=40976, nr_sectors = 8 limit=40427 [ 117.960288][ T5786] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 118.021187][ T5792] BTRFS info (device loop2): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 118.067534][ T3424] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 118.077351][ T3424] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 118.340890][ T7022] loop3: detected capacity change from 0 to 64 [ 118.774777][ T7030] netlink: 'syz.3.444': attribute type 10 has an invalid length. [ 118.801690][ T7030] netlink: 40 bytes leftover after parsing attributes in process `syz.3.444'. [ 118.831324][ T7030] dummy0: entered promiscuous mode [ 118.839460][ T7030] bridge0: port 4(dummy0) entered blocking state [ 118.847101][ T7030] bridge0: port 4(dummy0) entered disabled state [ 118.854314][ T7030] dummy0: entered allmulticast mode [ 118.866199][ T7030] bridge0: port 4(dummy0) entered blocking state [ 118.872734][ T7030] bridge0: port 4(dummy0) entered forwarding state [ 119.190108][ T7024] loop2: detected capacity change from 0 to 40427 [ 119.225459][ T7024] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 119.244391][ T7024] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 119.275135][ T7024] F2FS-fs (loop2): invalid crc value [ 119.322536][ T7024] F2FS-fs (loop2): Found nat_bits in checkpoint [ 119.481244][ T7024] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 119.499194][ T7024] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 119.844236][ T7064] loop0: detected capacity change from 0 to 512 [ 119.930916][ T7064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.055044][ T7064] EXT4-fs (loop0): shut down requested (2) [ 120.214006][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.818376][ T7058] loop3: detected capacity change from 0 to 65536 [ 120.925546][ T7058] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 120.997137][ T7088] netlink: 830 bytes leftover after parsing attributes in process `syz.2.467'. [ 121.143676][ T7058] XFS (loop3): Ending clean mount [ 121.196338][ T7058] XFS (loop3): Quotacheck needed: Please wait. [ 121.272558][ T7058] XFS (loop3): Quotacheck: Done. [ 121.383771][ T5785] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 121.425508][ T5819] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 121.505291][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 121.532809][ T7106] netlink: 88 bytes leftover after parsing attributes in process `syz.1.475'. [ 121.541973][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.475'. [ 121.632056][ T5819] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 121.640607][ T5819] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 121.650896][ T5819] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 121.661563][ T5819] usb 1-1: config 220 has no interface number 2 [ 121.669515][ T5819] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 121.683040][ T5819] usb 1-1: config 220 interface 0 has no altsetting 0 [ 121.690945][ T5819] usb 1-1: config 220 interface 76 has no altsetting 0 [ 121.696596][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 121.698356][ T5819] usb 1-1: config 220 interface 1 has no altsetting 0 [ 121.712788][ T5819] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 121.714927][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 121.723221][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.740024][ T5819] usb 1-1: Product: syz [ 121.744218][ T5819] usb 1-1: Manufacturer: syz [ 121.749321][ T5819] usb 1-1: SerialNumber: syz [ 121.762071][ T9] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 121.771345][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.780079][ T9] usb 3-1: Product: syz [ 121.790208][ T9] usb 3-1: Manufacturer: syz [ 121.795039][ T9] usb 3-1: SerialNumber: syz [ 121.812492][ T9] usb 3-1: config 0 descriptor?? [ 121.821279][ T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 121.833157][ T9] usb 3-1: Detected FT232R [ 121.981364][ T5819] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 121.988659][ T5819] usb 1-1: No valid video chain found. [ 121.994211][ T5819] usb 1-1: selecting invalid altsetting 0 [ 122.026938][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 122.031302][ T5819] usb 1-1: selecting invalid altsetting 0 [ 122.044436][ T5819] usbtest: probe of 1-1:220.1 failed with error -22 [ 122.083371][ T5819] usb 1-1: USB disconnect, device number 5 [ 122.266158][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 122.453182][ T5819] usb 3-1: USB disconnect, device number 7 [ 122.525108][ T5819] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 122.553156][ T5819] ftdi_sio 3-1:0.0: device disconnected [ 122.711974][ T7124] tap0: tun_chr_ioctl cmd 21731 [ 123.646877][ T7162] loop2: detected capacity change from 0 to 512 [ 123.692756][ T7162] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 123.907779][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 124.608281][ T7192] loop3: detected capacity change from 0 to 4096 [ 124.624938][ T7192] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 124.678148][ T7171] loop2: detected capacity change from 0 to 32768 [ 124.689895][ T7171] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.504 (7171) [ 124.740919][ T7171] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.756865][ T7171] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 124.776422][ T7171] BTRFS info (device loop2): turning off barriers [ 124.804280][ T7171] BTRFS info (device loop2): setting nodatasum [ 124.824562][ T7171] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 124.851735][ T7171] BTRFS info (device loop2): use zstd compression, level 3 [ 124.870469][ T7171] BTRFS info (device loop2): using free space tree [ 124.995736][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.167647][ T5792] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 125.196828][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.522'. [ 125.208313][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 125.238027][ T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 125.252392][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.258308][ T7225] loop3: detected capacity change from 0 to 2048 [ 125.271395][ T9] usb 2-1: Product: syz [ 125.276433][ T9] usb 2-1: Manufacturer: syz [ 125.294971][ T9] usb 2-1: SerialNumber: syz [ 125.332848][ T9] usb 2-1: config 0 descriptor?? [ 125.356819][ T9] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 125.364819][ T9] pctv452e: pctv452e_power_ctrl: 1 [ 125.364819][ T9] [ 125.407720][ T7225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.440321][ T9] usb 2-1: selecting invalid altsetting 3 [ 125.471187][ T9] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 125.471187][ T9] [ 125.527932][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 125.545783][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.525'. [ 125.554639][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'. [ 125.558489][ T28] audit: type=1800 audit(1763390604.816:3): pid=7225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.523" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 125.580743][ T7233] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.592778][ T7233] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.601583][ T7233] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.610363][ T7233] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.634537][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.691248][ T9] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 125.705456][ T5847] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 125.712188][ T9] usb 2-1: media controller created [ 125.761754][ T9] dvb-usb: bulk message failed: -22 (8/0) [ 125.771300][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.783139][ T9] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 125.792888][ T9] dvb-usb: MAC address reading failed. [ 125.847371][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.923439][ T5847] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.955493][ T5847] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.966524][ T5847] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 125.988268][ T9] DVB: Unable to find symbol stb0899_attach() [ 125.995449][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.997038][ T9] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 126.012496][ T5847] usb 3-1: SerialNumber: syz [ 126.135584][ T7240] loop0: detected capacity change from 0 to 4096 [ 126.150417][ T7240] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 126.186334][ T9] rc_core: IR keymap rc-tt-1500 not found [ 126.216853][ T9] Registered IR keymap rc-empty [ 126.231450][ T7240] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 126.236179][ T7246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 126.246434][ T9] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 126.262730][ T5847] usb 3-1: 0:2 : does not exist [ 126.276669][ T9] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input8 [ 126.298576][ T7240] ntfs3: loop0: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 126.333600][ T5847] usb 3-1: USB disconnect, device number 8 [ 126.335953][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 126.357317][ T9] pctv452e: pctv452e_power_ctrl: 0 [ 126.357317][ T9] [ 126.364649][ T9] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 126.410314][ T9] usb 2-1: USB disconnect, device number 4 [ 126.513357][ T5777] udevd[5777]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.517078][ T11] ntfs3: loop0: ino=1e, failed to parse mft record [ 126.631548][ T9] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 126.754694][ T7255] Driver unsupported XDP return value 0 on prog (id 55) dev N/A, expect packet loss! [ 127.045275][ T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 127.259203][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 127.267300][ T7267] loop0: detected capacity change from 0 to 256 [ 127.274737][ T9] usb 2-1: no configurations [ 127.282950][ T9] usb 2-1: can't read configurations, error -22 [ 127.323515][ T7267] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 127.335500][ T7265] loop2: detected capacity change from 0 to 4096 [ 127.367226][ T7267] FAT-fs (loop0): Filesystem has been set read-only [ 127.410534][ T7265] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 128.439206][ T7281] tap0: tun_chr_ioctl cmd 2147767506 [ 128.753937][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.551'. [ 128.905678][ T7273] loop3: detected capacity change from 0 to 32768 [ 128.999427][ T7273] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 129.340817][ T7311] loop2: detected capacity change from 0 to 764 [ 129.423357][ T5785] ocfs2: Unmounting device (7,3) on (node local) [ 129.517095][ T7311] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 129.592975][ T7311] Symlink component flag not implemented [ 129.631905][ T7311] Symlink component flag not implemented (7) [ 130.536195][ T5847] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 130.740970][ T5847] usb 4-1: Using ep0 maxpacket: 32 [ 130.750329][ T5847] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 130.779438][ T5847] usb 4-1: config 0 has no interface number 0 [ 130.816214][ T5847] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 130.855222][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.882796][ T5847] usb 4-1: Product: syz [ 130.893294][ T5847] usb 4-1: Manufacturer: syz [ 130.910443][ T7340] loop0: detected capacity change from 0 to 32768 [ 130.911032][ T5847] usb 4-1: SerialNumber: syz [ 130.934337][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.580'. [ 130.952655][ T5847] usb 4-1: config 0 descriptor?? [ 130.963516][ T5847] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 131.005618][ T7340] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 131.190289][ T5847] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 131.205810][ T5847] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 131.325527][ T7340] XFS (loop0): Ending clean mount [ 131.492877][ T5786] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 131.625043][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 131.637087][ T5847] usb 4-1: USB disconnect, device number 7 [ 131.658944][ T5847] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 131.695502][ T5867] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 131.713212][ T5847] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 131.765271][ T5847] quatech2 4-1:0.51: device disconnected [ 131.886548][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 131.902819][ T5867] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 131.917036][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.939271][ T5867] usb 3-1: config 0 descriptor?? [ 132.154714][ T5867] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 132.177990][ T5867] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 132.205850][ T5867] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 132.233452][ T5867] usb 3-1: media controller created [ 132.283592][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.318086][ T7417] loop3: detected capacity change from 0 to 512 [ 132.366285][ T5867] az6027: usb out operation failed. (-71) [ 132.388906][ T5867] az6027: usb out operation failed. (-71) [ 132.403811][ T7417] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 132.413093][ T5867] stb0899_attach: Driver disabled by Kconfig [ 132.419232][ T5867] az6027: no front-end attached [ 132.419232][ T5867] [ 132.426867][ T7417] EXT4-fs (loop3): orphan cleanup on readonly fs [ 132.436195][ T5867] az6027: usb out operation failed. (-71) [ 132.452186][ T5867] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 132.461143][ T7417] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 132.461355][ T5867] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 132.490435][ T7417] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 132.497540][ T5867] dvb-usb: schedule remote query interval to 400 msecs. [ 132.504509][ T5867] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 132.518538][ T5867] usb 3-1: USB disconnect, device number 9 [ 132.529756][ T7417] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.593: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 132.557934][ T7417] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.593: couldn't read orphan inode 13 (err -117) [ 132.596656][ T7417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.676597][ T5867] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 132.689081][ T7417] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 132.720102][ T7417] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 132.781714][ T7417] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 132.829544][ T7427] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 132.852643][ T7427] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 132.883529][ T7427] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 133.048240][ T7437] loop2: detected capacity change from 0 to 512 [ 133.062188][ T7437] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 133.089895][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.096436][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.113793][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.126671][ T7437] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.601: invalid indirect mapped block 4294967295 (level 1) [ 133.169960][ T7437] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.601: invalid indirect mapped block 4294967295 (level 1) [ 133.254223][ T7426] loop0: detected capacity change from 0 to 32768 [ 133.255839][ T7437] EXT4-fs (loop2): 2 truncates cleaned up [ 133.296936][ T7437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.334213][ T7426] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 133.386497][ T7437] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.601: bg 0: block 5: invalid block bitmap [ 133.509766][ T7426] XFS (loop0): Ending clean mount [ 133.544195][ T7426] XFS (loop0): Quotacheck needed: Please wait. [ 133.616639][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.655369][ T7426] XFS (loop0): Quotacheck: Done. [ 133.722366][ T7459] loop2: detected capacity change from 0 to 512 [ 133.748279][ T7459] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 133.858951][ T7459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.919818][ T5786] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.014664][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.314126][ T7455] loop3: detected capacity change from 0 to 32768 [ 134.362144][ T7455] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.591524][ T7455] XFS (loop3): Ending clean mount [ 134.638203][ T7455] XFS (loop3): Quotacheck needed: Please wait. [ 134.655461][ T5867] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 134.761908][ T7455] XFS (loop3): Quotacheck: Done. [ 134.865317][ T5867] usb 1-1: Using ep0 maxpacket: 16 [ 134.887196][ T5867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.912294][ T5785] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.915507][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.973497][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 135.016533][ T5867] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 135.065810][ T5867] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.111739][ T5867] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 135.121167][ T5867] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 135.135662][ T5867] usb 1-1: Manufacturer: syz [ 135.164099][ T5867] usb 1-1: config 0 descriptor?? [ 135.325348][ T5847] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 135.418821][ T7509] loop2: detected capacity change from 0 to 512 [ 135.471800][ T7509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.493142][ T7509] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.505366][ T5867] rc_core: IR keymap rc-hauppauge not found [ 135.511718][ T5867] Registered IR keymap rc-empty [ 135.527320][ T5847] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 135.539320][ T5847] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 135.546204][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 135.554954][ T5847] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 135.565675][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.579982][ T7499] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 135.598782][ T5847] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 135.636144][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 135.685008][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.698800][ T5867] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 135.744449][ T5867] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 135.774806][ T7517] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 135.790232][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 135.832466][ T5847] usb 4-1: USB disconnect, device number 8 [ 135.855401][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 135.914765][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 135.956610][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 135.983314][ T7522] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 135.996872][ T7522] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 136.008662][ T7522] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 136.013340][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.055322][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.095377][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.143461][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.185365][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.211321][ T7526] loop2: detected capacity change from 0 to 8192 [ 136.219369][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.231964][ T7526] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 136.247658][ T7526] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 136.257012][ T5867] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.265565][ T7526] REISERFS (device loop2): using ordered data mode [ 136.272206][ T7526] reiserfs: using flush barriers [ 136.279056][ T7526] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 136.297066][ T7526] REISERFS (device loop2): checking transaction log (loop2) [ 136.310360][ T5867] mceusb 1-1:0.0: Registered with mce emulator interface version 90 [ 136.318893][ T5867] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 136.335623][ T5867] usb 1-1: USB disconnect, device number 6 [ 136.454348][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 136.457146][ T7526] REISERFS (device loop2): Using tea hash to sort names [ 136.463860][ T7532] netlink: 3 bytes leftover after parsing attributes in process `syz.1.633'. [ 136.487960][ T7532] batadv1: entered promiscuous mode [ 136.488847][ T7526] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 136.493397][ T7532] batadv1: entered allmulticast mode [ 137.020817][ T7547] netlink: 'syz.0.639': attribute type 28 has an invalid length. [ 138.067477][ T7553] loop0: detected capacity change from 0 to 40427 [ 138.119853][ T7553] F2FS-fs (loop0): build fault injection attr: rate: 693, type: 0x7ffff [ 138.131582][ T7553] F2FS-fs (loop0): Image doesn't support compression [ 138.163794][ T7553] F2FS-fs (loop0): invalid crc value [ 138.216013][ T7553] F2FS-fs (loop0): Found nat_bits in checkpoint [ 138.309999][ T7559] loop3: detected capacity change from 0 to 32768 [ 138.378148][ T7559] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 138.456064][ T7553] F2FS-fs (loop0): Start checkpoint disabled! [ 138.528458][ T7545] loop2: detected capacity change from 0 to 65536 [ 138.540396][ T7553] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 138.646305][ T7553] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of __vfs_getxattr+0x3e8/0x420 [ 138.674092][ T7545] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 138.740036][ T5785] ocfs2: Unmounting device (7,3) on (node local) [ 138.793831][ T7553] syz.0.643: attempt to access beyond end of device [ 138.793831][ T7553] loop0: rw=2049, sector=45096, nr_sectors = 48 limit=40427 [ 138.955992][ T7545] XFS (loop2): Ending clean mount [ 139.004842][ T7545] XFS (loop2): Quotacheck needed: Please wait. [ 139.129339][ T7545] XFS (loop2): Quotacheck: Done. [ 139.228603][ T11] kworker/u4:0: attempt to access beyond end of device [ 139.228603][ T11] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 139.287704][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 139.305112][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 139.327783][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 139.404635][ T5792] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 139.895993][ T7586] block nbd1: server does not support multiple connections per device. [ 139.921689][ T7586] block nbd1: shutting down sockets [ 140.362224][ T7604] loop7: detected capacity change from 0 to 7 [ 140.397514][ T5777] Dev loop7: unable to read RDB block 7 [ 140.403597][ T5777] loop7: unable to read partition table [ 140.411302][ T5777] loop7: partition table beyond EOD, truncated [ 140.494977][ T7604] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.555555][ T7604] Buffer I/O error on dev loop7, logical block 0, async page read [ 140.564754][ T7604] ldm_validate_partition_table(): Disk read failed. [ 140.595452][ T7604] Dev loop7: unable to read RDB block 0 [ 140.624225][ T7604] loop7: unable to read partition table [ 140.630821][ T7604] loop7: partition table beyond EOD, truncated [ 140.646761][ T7604] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 140.915624][ T7623] capability: warning: `syz.2.669' uses deprecated v2 capabilities in a way that may be insecure [ 140.938434][ T7623] Falling back ldisc for ptm0. [ 141.775705][ T7654] loop0: detected capacity change from 0 to 16 [ 141.832802][ T7654] erofs: (device loop0): mounted with root inode @ nid 36. [ 142.663208][ T7675] loop0: detected capacity change from 0 to 764 [ 142.725374][ T7675] rock: directory entry would overflow storage [ 142.749985][ T7675] rock: sig=0x5245, size=8, remaining=5 [ 142.864190][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.692'. [ 143.032883][ T7685] ptrace attach of "./syz-executor exec"[7688] was attempted by "./syz-executor exec"[7685] [ 143.062095][ T5826] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 143.285863][ T5826] usb 1-1: config 1 has an invalid descriptor of length 104, skipping remainder of the config [ 143.314802][ T5826] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.341982][ T5826] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 143.365643][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 143.373698][ T5826] usb 1-1: SerialNumber: syz [ 143.618007][ T5826] usb 1-1: 0:2 : does not exist [ 143.645507][ T5826] usb 1-1: USB disconnect, device number 7 [ 144.118733][ T7713] loop3: detected capacity change from 0 to 4096 [ 144.245804][ T7713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.615879][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.280259][ T5777] udevd[5777]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.303858][ T7719] loop0: detected capacity change from 0 to 32768 [ 145.355124][ T7719] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.709 (7719) [ 145.452129][ T7719] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 145.476631][ T7719] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 145.512546][ T7719] BTRFS info (device loop0): force zlib compression, level 3 [ 145.542925][ T7719] BTRFS info (device loop0): turning on flush-on-commit [ 145.576261][ T7719] BTRFS info (device loop0): max_inline at 4096 [ 145.583295][ T7719] BTRFS info (device loop0): using free space tree [ 145.743174][ T7719] BTRFS info (device loop0): enabling ssd optimizations [ 145.753693][ T7719] BTRFS info (device loop0): auto enabling async discard [ 145.763282][ T7754] loop2: detected capacity change from 0 to 16 [ 145.773588][ T7754] erofs: (device loop2): mounted with root inode @ nid 36. [ 145.826396][ T7756] loop3: detected capacity change from 0 to 256 [ 145.968955][ T5792] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46 [ 145.972322][ T7756] FAT-fs (loop3): Directory bread(block 64) failed [ 146.012184][ T7756] FAT-fs (loop3): Directory bread(block 65) failed [ 146.035846][ T7756] FAT-fs (loop3): Directory bread(block 66) failed [ 146.042899][ T7756] FAT-fs (loop3): Directory bread(block 67) failed [ 146.069040][ T7756] FAT-fs (loop3): Directory bread(block 68) failed [ 146.077376][ T5792] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 146.078546][ T7756] FAT-fs (loop3): Directory bread(block 69) failed [ 146.094759][ T7756] FAT-fs (loop3): Directory bread(block 70) failed [ 146.096136][ T7719] BTRFS info (device loop0): balance: start -d -m [ 146.101724][ T7756] FAT-fs (loop3): Directory bread(block 71) failed [ 146.117142][ T5792] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 146.133501][ T7756] FAT-fs (loop3): Directory bread(block 72) failed [ 146.137574][ T7719] BTRFS info (device loop0): balance: canceled [ 146.141414][ T7756] FAT-fs (loop3): Directory bread(block 73) failed [ 146.414295][ T5786] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 146.856275][ T7777] program syz.0.726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.940129][ T7803] loop2: detected capacity change from 0 to 1024 [ 147.966954][ T7803] EXT4-fs: Ignoring removed bh option [ 148.010199][ T7803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.097167][ T7803] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #11: comm syz.2.741: directory missing '.' [ 148.174166][ T7795] loop0: detected capacity change from 0 to 40427 [ 148.189840][ T7795] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 148.215288][ T7795] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 148.236305][ T7795] F2FS-fs (loop0): invalid crc value [ 148.253748][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.278246][ T7795] F2FS-fs (loop0): Found nat_bits in checkpoint [ 148.440150][ T7795] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 148.472320][ T7795] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 149.474412][ T7815] loop2: detected capacity change from 0 to 32768 [ 149.503508][ T7815] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 149.617730][ T7815] XFS (loop2): Ending clean mount [ 149.664310][ T7815] XFS (loop2): Quotacheck needed: Please wait. [ 149.704593][ T7844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.754'. [ 149.782708][ T7815] XFS (loop2): Quotacheck: Done. [ 150.013472][ T7815] XFS (loop2): User initiated shutdown received. [ 150.033794][ T7850] loop0: detected capacity change from 0 to 736 [ 150.042930][ T7815] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 150.086732][ T7815] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 150.248027][ T5792] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 150.918600][ T7870] loop2: detected capacity change from 0 to 8192 [ 150.968811][ T7870] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 150.983190][ T7870] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 150.992933][ T7870] REISERFS (device loop2): using ordered data mode [ 150.999864][ T7870] reiserfs: using flush barriers [ 151.015668][ T7870] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 151.032522][ T7870] REISERFS (device loop2): checking transaction log (loop2) [ 151.043680][ T7879] netlink: 'syz.3.770': attribute type 7 has an invalid length. [ 151.052911][ T7870] REISERFS (device loop2): Using r5 hash to sort names [ 151.060426][ T7870] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 151.149568][ T7879] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.158566][ T7879] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.167471][ T7879] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.176285][ T7879] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.657299][ T7897] misc userio: Begin command sent, but we're already running [ 151.944022][ T7910] loop2: detected capacity change from 0 to 2048 [ 151.996858][ T7910] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.149864][ T7918] loop0: detected capacity change from 0 to 64 [ 152.272309][ T7920] input: syz1 as /devices/virtual/input/input12 [ 152.836397][ T5826] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 153.067873][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.096547][ T5826] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 153.133158][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.167665][ T5826] usb 3-1: config 0 descriptor?? [ 153.619863][ T5826] razer 0003:1532:010E.0003: unknown main item tag 0x0 [ 153.655776][ T5826] razer 0003:1532:010E.0003: unknown main item tag 0x0 [ 153.693894][ T5826] razer 0003:1532:010E.0003: unknown main item tag 0x0 [ 153.725420][ T5826] razer 0003:1532:010E.0003: unknown main item tag 0x0 [ 153.752949][ T7967] netlink: 'syz.0.812': attribute type 2 has an invalid length. [ 153.763009][ T5826] razer 0003:1532:010E.0003: unknown main item tag 0x0 [ 153.764648][ T7967] netlink: 84 bytes leftover after parsing attributes in process `syz.0.812'. [ 153.813418][ T5826] razer 0003:1532:010E.0003: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.2-1/input0 [ 154.021086][ T5826] usb 3-1: USB disconnect, device number 10 [ 154.067681][ T7970] loop0: detected capacity change from 0 to 4096 [ 154.087686][ T7970] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 154.362294][ T7979] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 154.603125][ T6454] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 154.640618][ T6454] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 154.660399][ T6454] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 154.691380][ T6454] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 154.704897][ T7972] loop3: detected capacity change from 0 to 32768 [ 154.713646][ T6454] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 154.721424][ T6454] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 154.727705][ T7972] (syz.3.814,7972,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 154.754197][ T6454] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 154.764423][ T6454] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 154.766529][ T7972] (syz.3.814,7972,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 154.784967][ T6454] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 154.808717][ T6454] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 154.819390][ T6454] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 154.827248][ T6454] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 154.834859][ T6454] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 154.843108][ T6454] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 154.844864][ T7972] JBD2: Ignoring recovery information on journal [ 154.858487][ T6454] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 154.866670][ T6454] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 154.874204][ T6454] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 154.882234][ T6454] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 154.913532][ T6454] hid-generic 0003:0004:0000.0004: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 155.051202][ T7972] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 155.170799][ T7994] fido_id[7994]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 155.452185][ T5785] ocfs2: Unmounting device (7,3) on (node local) [ 155.541844][ T5826] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 155.757322][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.783148][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.803514][ T5826] usb 2-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 155.824715][ T8014] loop2: detected capacity change from 0 to 512 [ 155.835215][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.851575][ T5826] usb 2-1: config 0 descriptor?? [ 156.279546][ T8010] loop0: detected capacity change from 0 to 32768 [ 156.287913][ T8024] mkiss: ax0: crc mode is auto. [ 156.310816][ T5826] wacom 0003:056A:030C.0005: hidraw0: USB HID v0.06 Device [HID 056a:030c] on usb-dummy_hcd.1-1/input0 [ 156.336201][ T8010] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 156.367947][ T8010] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 156.377447][ T8024] Falling back ldisc for ttyS3. [ 156.398415][ T8032] loop3: detected capacity change from 0 to 1024 [ 156.406645][ T8032] EXT4-fs: Ignoring removed bh option [ 156.412092][ T8032] EXT4-fs: inline encryption not supported [ 156.455778][ T8032] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 156.535751][ T5867] usb 2-1: USB disconnect, device number 7 [ 156.595375][ T8032] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 156.693252][ T8031] fido_id[8031]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 156.720638][ T8032] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 2: comm syz.3.837: lblock 2 mapped to illegal pblock 2 (length 1) [ 156.749988][ T8010] XFS (loop0): Ending clean mount [ 156.778501][ T8032] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 156.804052][ T8032] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 48: comm syz.3.837: lblock 0 mapped to illegal pblock 48 (length 1) [ 156.819124][ T8010] XFS (loop0): Quotacheck needed: Please wait. [ 156.895596][ T8032] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 156.939224][ T8032] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.837: Failed to acquire dquot type 0 [ 156.963818][ T8010] XFS (loop0): Quotacheck: Done. [ 156.969676][ T8032] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 156.995603][ T8032] EXT4-fs error (device loop3): ext4_evict_inode:252: inode #11: comm syz.3.837: mark_inode_dirty error [ 157.027426][ T8032] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 157.045315][ T8032] EXT4-fs (loop3): 1 orphan inode deleted [ 157.057783][ T8032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.060378][ T5786] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 157.096207][ T3413] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 157.147770][ T3413] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 157.189980][ T3413] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u4:7: Failed to release dquot type 0 [ 157.222076][ T8032] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 48: comm syz.3.837: lblock 0 mapped to illegal pblock 48 (length 1) [ 157.279606][ T8032] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=-117 [ 157.459209][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.700163][ T8049] loop2: detected capacity change from 0 to 32768 [ 157.794066][ T8049] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 158.085929][ T8049] XFS (loop2): Ending clean mount [ 158.115795][ T8049] XFS (loop2): Quotacheck needed: Please wait. [ 158.211368][ T8049] XFS (loop2): Quotacheck: Done. [ 158.422755][ T5792] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 158.623784][ T5826] kernel read not supported for file /dsp (pid: 5826 comm: kworker/1:5) [ 159.095257][ T6454] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 159.295698][ T6454] usb 4-1: Using ep0 maxpacket: 32 [ 159.316996][ T6454] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 159.345314][ T6454] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.368962][ T6454] usb 4-1: config 0 descriptor?? [ 159.595602][ T6454] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 159.628774][ T6454] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 159.654082][ T6454] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 159.681621][ T6454] usb 4-1: media controller created [ 159.726366][ T6454] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.790933][ T6454] az6027: usb out operation failed. (-71) [ 159.810430][ T6454] az6027: usb out operation failed. (-71) [ 159.821870][ T6454] stb0899_attach: Driver disabled by Kconfig [ 159.828292][ T6454] az6027: no front-end attached [ 159.828292][ T6454] [ 159.842487][ T6454] az6027: usb out operation failed. (-71) [ 159.848555][ T6454] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 159.865895][ T6454] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 159.897149][ T6454] dvb-usb: schedule remote query interval to 400 msecs. [ 159.933161][ T6454] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 159.958283][ T6454] usb 4-1: USB disconnect, device number 9 [ 160.047897][ T6454] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 160.627657][ T8122] erspan0: entered promiscuous mode [ 160.794605][ T8127] loop3: detected capacity change from 0 to 1024 [ 160.913535][ T8131] loop0: detected capacity change from 0 to 1024 [ 160.969387][ T141] hfsplus: b-tree write err: -5, ino 8 [ 160.985804][ T8108] loop2: detected capacity change from 0 to 32768 [ 161.095540][ T28] audit: type=1800 audit(1763390640.366:4): pid=8108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.866" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 161.124462][ T8108] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 161.124462][ T8108] [ 162.019279][ T8135] loop3: detected capacity change from 0 to 32768 [ 162.107854][ T8135] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 162.320152][ T8135] XFS (loop3): Ending clean mount [ 162.409992][ T8164] loop2: detected capacity change from 0 to 2048 [ 162.501372][ T5785] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 162.510359][ T8164] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.946454][ T8178] loop2: detected capacity change from 0 to 32768 [ 163.976312][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 163.980762][ T28] audit: type=1800 audit(1763391411.293:5): pid=8178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.894" name="file2" dev="loop2" ino=5 res=0 errno=0 [ 164.178073][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 164.185508][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.207631][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 164.233300][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.281124][ T9] usb 4-1: config 0 descriptor?? [ 164.701176][ T9] wacom 0003:056A:00B8.0006: unknown main item tag 0x0 [ 164.716850][ T9] wacom 0003:056A:00B8.0006: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 164.721156][ T8201] loop2: detected capacity change from 0 to 32768 [ 164.742717][ T8201] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.905 (8201) [ 164.757526][ T9] wacom 0003:056A:00B8.0006: hidraw0: USB HID v5.59 Device [HID 056a:00b8] on usb-dummy_hcd.3-1/input0 [ 164.769215][ T8201] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 164.769301][ T8201] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 164.769329][ T8201] BTRFS info (device loop2): using free space tree [ 164.847046][ T9] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B8.0006/input/input17 [ 164.913835][ T8201] BTRFS info (device loop2): enabling ssd optimizations [ 164.929322][ T8201] BTRFS info (device loop2): auto enabling async discard [ 165.052618][ T9] usb 4-1: USB disconnect, device number 10 [ 165.172045][ T8231] input: syz1 as /devices/virtual/input/input20 [ 165.190486][ T8230] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 165.437522][ T5792] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 166.014358][ T8247] kvm_intel: kvm [8246]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xb9 [ 166.311275][ T8258] loop3: detected capacity change from 0 to 512 [ 166.375418][ T8258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.397742][ T8258] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.542298][ T28] audit: type=1800 audit(1763391413.981:6): pid=8258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.921" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 166.650185][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.730277][ T8245] loop2: detected capacity change from 0 to 32768 [ 166.758801][ T8245] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 166.793412][ T8245] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 166.891913][ T8245] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 167.090805][ T8245] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 167.115459][ T8254] loop0: detected capacity change from 0 to 32768 [ 167.157033][ T8254] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.919 (8254) [ 167.234861][ T8254] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 167.261323][ T8254] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 167.317030][ T8254] BTRFS info (device loop0): using free space tree [ 167.482153][ T8254] BTRFS info (device loop0): enabling ssd optimizations [ 167.500366][ T8254] BTRFS info (device loop0): auto enabling async discard [ 167.635437][ T5867] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 167.700853][ T5786] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 167.834071][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 167.863856][ T5867] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 167.883625][ T5867] usb 4-1: config 0 has no interface number 0 [ 167.900400][ T5867] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 167.943684][ T5867] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 167.999012][ T5867] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 168.020741][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 168.044803][ T5867] usb 4-1: Product: syz [ 168.049017][ T5867] usb 4-1: SerialNumber: syz [ 168.100821][ T5867] usb 4-1: config 0 descriptor?? [ 168.153216][ T5867] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 168.191488][ T5867] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input21 [ 168.461502][ T8298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.931'. [ 168.472243][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 168.482691][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 168.490792][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 168.497997][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 168.505215][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 168.508117][ T8298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.931'. [ 168.512545][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 168.525571][ T8296] loop2: detected capacity change from 0 to 8192 [ 168.537884][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 168.545238][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 168.552649][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 168.559812][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 168.585840][ T8] usb 4-1: USB disconnect, device number 11 [ 168.591868][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 168.614201][ T8] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 169.119184][ T5847] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 169.262551][ T8314] program syz.3.938 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.321276][ T5847] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 169.338463][ T5847] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 169.356202][ T5847] usb 3-1: config 220 has an invalid descriptor of length 36, skipping remainder of the config [ 169.393633][ T5847] usb 3-1: config 220 has no interface number 2 [ 169.405191][ T5847] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 169.437086][ T5847] usb 3-1: config 220 interface 0 has no altsetting 0 [ 169.461187][ T5847] usb 3-1: config 220 interface 76 has no altsetting 0 [ 169.478207][ T5847] usb 3-1: config 220 interface 1 has no altsetting 0 [ 169.500724][ T5847] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 169.519564][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.543455][ T5847] usb 3-1: Product: syz [ 169.547682][ T5847] usb 3-1: Manufacturer: syz [ 169.557264][ T5847] usb 3-1: SerialNumber: syz [ 169.713956][ T8311] loop0: detected capacity change from 0 to 40427 [ 169.722736][ T8311] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 169.730563][ T8311] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 169.760689][ T8311] F2FS-fs (loop0): invalid crc value [ 169.782782][ T5847] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 169.795702][ T5847] usb 3-1: No valid video chain found. [ 169.807351][ T5847] usb 3-1: selecting invalid altsetting 0 [ 169.813185][ T8311] F2FS-fs (loop0): Found nat_bits in checkpoint [ 169.861023][ T5847] usb 3-1: selecting invalid altsetting 0 [ 169.890072][ T5847] usbtest: probe of 3-1:220.1 failed with error -22 [ 169.919748][ T5847] usb 3-1: USB disconnect, device number 11 [ 170.006017][ T8311] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 170.013273][ T8311] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 170.219838][ T3424] kworker/u4:8: attempt to access beyond end of device [ 170.219838][ T3424] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 170.242885][ T3424] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 170.250939][ T3424] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 170.278416][ T8311] VFS:Filesystem freeze failed [ 171.595609][ T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 171.788037][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 171.816583][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 171.840734][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 171.852762][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 171.863019][ T9] usb 3-1: SerialNumber: syz [ 171.876080][ T9] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 171.886934][ T9] usb-storage 3-1:1.0: USB Mass Storage device detected [ 171.906762][ T9] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 171.922435][ T9] scsi host1: usb-storage 3-1:1.0 [ 172.102312][ T9] usb 3-1: USB disconnect, device number 12 [ 172.843687][ T8411] loop3: detected capacity change from 0 to 64 [ 172.933019][ T8411] hfs: request for non-existent node 1280 in B*Tree [ 172.961895][ T8411] hfs: request for non-existent node 1280 in B*Tree [ 173.070046][ T1004] hfs: request for non-existent node 1280 in B*Tree [ 173.093336][ T1004] hfs: request for non-existent node 1280 in B*Tree [ 173.114078][ T8415] loop2: detected capacity change from 0 to 8192 [ 173.168546][ T8415] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 173.263361][ T8415] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 173.320676][ T8415] REISERFS (device loop2): using ordered data mode [ 173.327411][ T8415] reiserfs: using flush barriers [ 173.341366][ T8415] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 173.360698][ T8415] REISERFS (device loop2): checking transaction log (loop2) [ 173.378695][ T8415] REISERFS (device loop2): Using r5 hash to sort names [ 173.379310][ T8420] loop0: detected capacity change from 0 to 128 [ 173.386209][ T8415] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 173.466732][ T8415] REISERFS warning (device loop2): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=83886081, len=3 - odd [ 173.924339][ T8431] loop2: detected capacity change from 0 to 512 [ 173.991741][ T8431] EXT4-fs error (device loop2): ext4_xattr_inode_iget:449: comm syz.2.982: error while reading EA inode 32 err=-116 [ 174.092433][ T8431] EXT4-fs error (device loop2): ext4_xattr_inode_iget:449: comm syz.2.982: error while reading EA inode 32 err=-116 [ 174.170602][ T8431] EXT4-fs (loop2): 1 orphan inode deleted [ 174.178031][ T8431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.351800][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.554555][ T8445] loop3: detected capacity change from 0 to 256 [ 174.665054][ T8445] FAT-fs (loop3): Directory bread(block 64) failed [ 174.679480][ T8445] FAT-fs (loop3): Directory bread(block 65) failed [ 174.697844][ T8445] FAT-fs (loop3): Directory bread(block 66) failed [ 174.724548][ T8445] FAT-fs (loop3): Directory bread(block 67) failed [ 174.738291][ T8448] loop0: detected capacity change from 0 to 2048 [ 174.748262][ T8445] FAT-fs (loop3): Directory bread(block 68) failed [ 174.757750][ T8445] FAT-fs (loop3): Directory bread(block 69) failed [ 174.764425][ T8445] FAT-fs (loop3): Directory bread(block 70) failed [ 174.791120][ T8448] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18881, location=18881 [ 174.815163][ T8445] FAT-fs (loop3): Directory bread(block 71) failed [ 174.821837][ T8445] FAT-fs (loop3): Directory bread(block 72) failed [ 174.832652][ T8445] FAT-fs (loop3): Directory bread(block 73) failed [ 174.908399][ T8453] loop2: detected capacity change from 0 to 512 [ 174.961384][ T28] audit: type=1800 audit(1763391422.811:7): pid=8448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.994" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 175.046865][ T8453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.334305][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.417863][ T8467] loop3: detected capacity change from 0 to 16 [ 175.425416][ T8467] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 175.557435][ T8471] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 175.821735][ T8480] loop3: detected capacity change from 0 to 256 [ 176.379662][ T8491] loop3: detected capacity change from 0 to 16 [ 176.411002][ T8491] erofs: (device loop3): mounted with root inode @ nid 36. [ 176.509746][ T8489] loop2: detected capacity change from 0 to 4096 [ 176.606987][ T8489] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 176.643904][ T8489] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 176.751030][ T8495] loop3: detected capacity change from 0 to 2048 [ 176.772752][ T28] audit: type=1800 audit(1763391424.722:8): pid=8489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1013" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 176.797218][ T8495] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 176.808492][ T8489] ntfs3: loop2: ino=1e, "file1" attr_set_size [ 176.835599][ T8495] NILFS (loop3): mounting unchecked fs [ 176.871687][ T5788] udevd[5788]: incorrect nilfs2 checksum on /dev/loop3 [ 176.942696][ T8495] NILFS (loop3): recovery complete [ 176.999682][ T8501] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.011500][ T3413] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 177.043432][ T5792] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 177.050002][ T5792] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 177.079159][ T5792] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 177.086372][ T43] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 178.091827][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 178.249471][ T8520] loop0: detected capacity change from 0 to 32768 [ 178.286548][ T8] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 178.313028][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.342499][ T8] usb 4-1: config 0 descriptor?? [ 178.363264][ T8] gspca_main: spca508-2.14.0 probing 8086:0110 [ 178.551373][ T8] gspca_spca508: reg_read err -32 [ 178.567715][ T8] gspca_spca508: reg_read err -32 [ 178.777403][ T8] gspca_spca508: reg_read err -71 [ 178.796499][ T8] gspca_spca508: reg_read err -71 [ 178.815396][ T8] gspca_spca508: reg write: error -71 [ 178.820892][ T8] spca508: probe of 4-1:0.0 failed with error -71 [ 178.843753][ T8533] program syz.2.1031 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.859325][ T8] usb 4-1: USB disconnect, device number 12 [ 179.226429][ T8529] loop0: detected capacity change from 0 to 32768 [ 179.285479][ T8529] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 179.470009][ T5786] ocfs2: Unmounting device (7,0) on (node local) [ 179.585056][ T8552] loop0: detected capacity change from 0 to 2048 [ 179.622440][ T8552] EXT4-fs: Ignoring removed i_version option [ 179.692316][ T8552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.763820][ T5105] block nbd1: Receive control failed (result -32) [ 179.813360][ T8552] EXT4-fs error (device loop0): ext4_find_extent:936: inode #2: comm syz.0.1040: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 179.849323][ T8552] EXT4-fs (loop0): Remounting filesystem read-only [ 179.949032][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.960838][ T8567] loop2: detected capacity change from 0 to 16 [ 179.987556][ T8567] erofs: (device loop2): mounted with root inode @ nid 36. [ 180.199574][ T8569] loop0: detected capacity change from 0 to 2048 [ 180.224804][ T8569] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.185256][ T8583] loop0: detected capacity change from 0 to 32768 [ 181.224912][ T8583] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 181.253104][ T11] (kworker/u4:0,11,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: directory entry overrun - offset=0, inode=72, rec_len=65296, name_len=7 [ 181.289322][ T8583] (syz.0.1051,8583,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: directory entry overrun - offset=0, inode=72, rec_len=65296, name_len=7 [ 181.312563][ T8583] (syz.0.1051,8583,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 181.326063][ T8583] (syz.0.1051,8583,0):__ocfs2_prepare_orphan_dir:2171 ERROR: status = -2 [ 181.335018][ T8583] (syz.0.1051,8583,0):ocfs2_prepare_orphan_dir:2213 ERROR: status = -2 [ 181.350010][ T8583] (syz.0.1051,8583,1):ocfs2_prepare_orphan_dir:2229 ERROR: status = -2 [ 181.361452][ T8583] (syz.0.1051,8583,1):ocfs2_rename:1466 ERROR: status = -2 [ 181.368878][ T8583] (syz.0.1051,8583,1):ocfs2_rename:1690 ERROR: status = -2 [ 181.438227][ T5786] ocfs2: Unmounting device (7,0) on (node local) [ 181.874054][ T8614] loop2: detected capacity change from 0 to 256 [ 182.426683][ T8628] loop2: detected capacity change from 0 to 8 [ 182.456328][ T8628] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 182.505804][ T5777] udevd[5777]: incorrect cramfs checksum on /dev/loop2 [ 182.584058][ T5777] udevd[5777]: incorrect cramfs checksum on /dev/loop2 [ 183.204075][ T8626] loop3: detected capacity change from 0 to 40427 [ 183.208226][ T8630] loop0: detected capacity change from 0 to 32768 [ 183.231972][ T8626] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 183.240901][ T8626] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 183.247046][ T8630] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1074 (8630) [ 183.302760][ T8626] F2FS-fs (loop3): invalid crc value [ 183.312239][ T8630] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 183.348948][ T8630] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 183.370977][ T8626] F2FS-fs (loop3): Found nat_bits in checkpoint [ 183.397940][ T8630] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 183.426686][ T8630] BTRFS info (device loop0): use zstd compression, level 3 [ 183.455052][ T8630] BTRFS info (device loop0): using free space tree [ 183.527247][ T8626] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 183.545803][ T8632] loop2: detected capacity change from 0 to 32768 [ 183.552453][ T8626] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 183.600800][ T8632] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1075 (8632) [ 183.625112][ T8630] BTRFS info (device loop0): enabling ssd optimizations [ 183.658246][ T8630] BTRFS info (device loop0): auto enabling async discard [ 183.715112][ T8632] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 183.740362][ T8632] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 183.786565][ T8632] BTRFS info (device loop2): using free space tree [ 183.995154][ T8632] BTRFS info (device loop2): enabling ssd optimizations [ 184.013433][ T8632] BTRFS info (device loop2): auto enabling async discard [ 184.205631][ T5792] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 184.235232][ T5786] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 184.571089][ T8675] tipc: Started in network mode [ 184.576038][ T8675] tipc: Node identity 74725f6c656e3a2, cluster identity 4711 [ 184.588266][ T5777] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 9 /dev/loop2 scanned by udevd (5777) [ 184.606179][ T8675] tipc: Enabling of bearer rejected, failed to enable media [ 185.369563][ T8699] loop3: detected capacity change from 0 to 8 [ 185.390270][ T8699] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 185.404474][ T6425] udevd[6425]: incorrect cramfs checksum on /dev/loop3 [ 186.704388][ T8707] loop2: detected capacity change from 0 to 40427 [ 186.722796][ T8707] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 186.745781][ T8707] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 186.773118][ T8707] F2FS-fs (loop2): invalid crc value [ 186.794175][ T8715] loop0: detected capacity change from 0 to 32768 [ 186.811949][ T8715] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 186.831339][ T8707] F2FS-fs (loop2): Found nat_bits in checkpoint [ 186.848649][ T8726] loop3: detected capacity change from 0 to 8 [ 186.866690][ T5788] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 186.882907][ T8726] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 186.928485][ T6425] udevd[6425]: incorrect cramfs checksum on /dev/loop3 [ 187.039380][ T6425] udevd[6425]: incorrect cramfs checksum on /dev/loop3 [ 187.056591][ T8707] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 187.086932][ T8707] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 187.225779][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1104'. [ 187.617558][ T8743] macvlan0: entered promiscuous mode [ 187.633264][ T8743] macvlan1: entered promiscuous mode [ 187.663895][ T8743] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 187.683280][ T8743] Cannot create hsr debugfs directory [ 187.697523][ T8743] hsr1: entered promiscuous mode [ 187.729993][ T9] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 187.913868][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 187.930346][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 187.949172][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.977770][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.016572][ T9] usb 2-1: string descriptor 0 read error: -22 [ 188.022999][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 188.054255][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.086001][ T9] usb 2-1: 0:2 : does not exist [ 188.435021][ T8767] loop3: detected capacity change from 0 to 1024 [ 188.493844][ T8767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.558792][ T8770] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 188.635785][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.869138][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 188.912763][ T9] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 188.956472][ T9] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 189.053184][ T9] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 189.085400][ T8784] loop0: detected capacity change from 0 to 4096 [ 189.103409][ T9] usb 2-1: USB disconnect, device number 8 [ 189.109667][ T8784] ntfs3: Unknown parameter 'measure' [ 189.458611][ T8797] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 189.560491][ T8801] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿ [ 189.692088][ T6454] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 189.796618][ T8808] loop0: detected capacity change from 0 to 8192 [ 189.839242][ T8810] can0: slcan on ttyS3. [ 189.847116][ T8812] loop2: detected capacity change from 0 to 256 [ 189.873094][ T6454] usb 4-1: Using ep0 maxpacket: 8 [ 189.882647][ T6454] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 189.919674][ T6454] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.929086][ T8810] can0 (unregistered): slcan off ttyS3. [ 189.941840][ T8812] FAT-fs (loop2): Directory bread(block 64) failed [ 189.969164][ T8812] FAT-fs (loop2): Directory bread(block 65) failed [ 189.974904][ T6454] pvrusb2: Hardware description: Terratec Grabster AV400 [ 189.975825][ T8812] FAT-fs (loop2): Directory bread(block 66) failed [ 190.011845][ T6454] pvrusb2: ********** [ 190.021657][ T6454] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 190.021846][ T8812] FAT-fs (loop2): Directory bread(block 67) failed [ 190.052808][ T6454] pvrusb2: Important functionality might not be entirely working. [ 190.063929][ T8812] FAT-fs (loop2): Directory bread(block 68) failed [ 190.080666][ T8812] FAT-fs (loop2): Directory bread(block 69) failed [ 190.104819][ T6454] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 190.110659][ T8812] FAT-fs (loop2): Directory bread(block 70) failed [ 190.135973][ T6454] pvrusb2: ********** [ 190.149524][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 190.158650][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 190.167872][ T8812] FAT-fs (loop2): Directory bread(block 71) failed [ 190.197553][ T8812] FAT-fs (loop2): Directory bread(block 72) failed [ 190.204313][ T8812] FAT-fs (loop2): Directory bread(block 73) failed [ 190.226083][ T2316] pvrusb2: Invalid write control endpoint [ 190.431623][ T2316] pvrusb2: Invalid write control endpoint [ 190.470271][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 190.502077][ T5847] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 190.514810][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 190.524552][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 190.547220][ T2316] pvrusb2: Device being rendered inoperable [ 190.575693][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 190.585776][ T9] usb 4-1: USB disconnect, device number 13 [ 190.595776][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 190.630552][ T2316] pvrusb2: Attached sub-driver cx25840 [ 190.637249][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 190.638652][ T8823] loop0: detected capacity change from 0 to 1024 [ 190.647804][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 190.730844][ T5847] usb 2-1: Using ep0 maxpacket: 16 [ 190.739405][ T5847] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 190.748096][ T5847] usb 2-1: config 0 has no interface number 0 [ 190.774828][ T5847] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 190.793872][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.826980][ T5847] usb 2-1: Product: syz [ 190.836041][ T5847] usb 2-1: Manufacturer: syz [ 190.840704][ T5847] usb 2-1: SerialNumber: syz [ 190.864928][ T5847] usb 2-1: config 0 descriptor?? [ 190.901858][ T5847] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 190.910540][ T1004] hfsplus: b-tree write err: -5, ino 3 [ 190.934605][ T8827] can0: slcan on ttyS3. [ 191.038094][ T8827] can0 (unregistered): slcan off ttyS3. [ 191.673488][ T5847] gspca_spca1528: reg_w err -71 [ 191.721173][ T5847] spca1528: probe of 2-1:0.1 failed with error -71 [ 191.740411][ T5847] usb 2-1: USB disconnect, device number 9 [ 192.155245][ T8864] loop2: detected capacity change from 0 to 16 [ 192.257183][ T8864] erofs: (device loop2): mounted with root inode @ nid 36. [ 192.379271][ T8869] loop0: detected capacity change from 0 to 4096 [ 192.481510][ T8875] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.824099][ T8882] sp0: Synchronizing with TNC [ 192.864890][ T8881] [U] è`` [ 193.069850][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.445182][ T5847] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 193.673448][ T5847] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 193.690469][ T5847] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 193.718980][ T5847] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 193.769036][ T5847] usb 1-1: config 220 has no interface number 2 [ 193.786850][ T5847] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 193.810737][ T5847] usb 1-1: config 220 interface 0 has no altsetting 0 [ 193.835239][ T5847] usb 1-1: config 220 interface 76 has no altsetting 0 [ 193.879945][ T5847] usb 1-1: config 220 interface 1 has no altsetting 0 [ 193.891282][ T5847] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 193.911310][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.931105][ T5847] usb 1-1: Product: syz [ 193.935339][ T5847] usb 1-1: Manufacturer: syz [ 193.960539][ T5847] usb 1-1: SerialNumber: syz [ 194.025932][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 194.203350][ T5847] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 194.214410][ T5847] usb 1-1: No valid video chain found. [ 194.221869][ T5847] usb 1-1: selecting invalid altsetting 0 [ 194.226960][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 194.249608][ T5847] usb 1-1: selecting invalid altsetting 0 [ 194.253432][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.260847][ T5847] usbtest: probe of 1-1:220.1 failed with error -22 [ 194.293499][ T5847] usb 1-1: USB disconnect, device number 8 [ 194.306774][ T9] usb 3-1: config 0 descriptor?? [ 194.336276][ T9] cp210x 3-1:0.0: cp210x converter detected [ 194.737826][ T9] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 194.769951][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 194.849817][ T8915] loop3: detected capacity change from 0 to 32768 [ 194.969459][ T8915] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 194.969459][ T8915] [ 195.008036][ T8] usb 3-1: USB disconnect, device number 13 [ 195.022537][ T8915] ERROR: (device loop3): remounting filesystem as read-only [ 195.035331][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 195.047173][ T8924] syz.3.1174: attempt to access beyond end of device [ 195.047173][ T8924] loop3: rw=2049, sector=2621792, nr_sectors = 8 limit=32768 [ 195.121665][ T8] cp210x 3-1:0.0: device disconnected [ 195.158981][ T112] blkno = 5002c, nblocks = 1 [ 195.163767][ T112] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 195.163767][ T112] [ 195.214492][ T8926] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1188'. [ 195.967468][ T8928] loop0: detected capacity change from 0 to 40427 [ 195.980968][ T8946] netlink: 'syz.2.1189': attribute type 5 has an invalid length. [ 195.993116][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1189'. [ 196.021029][ T8928] F2FS-fs (loop0): Found nat_bits in checkpoint [ 196.158284][ T8928] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 196.299521][ T28] audit: type=1800 audit(1763391445.227:9): pid=8928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1181" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 196.383858][ T5786] syz-executor: attempt to access beyond end of device [ 196.383858][ T5786] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 196.417194][ T5786] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 197.738332][ T9004] loop2: detected capacity change from 0 to 256 [ 197.762697][ T9004] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.787767][ T9023] loop3: detected capacity change from 0 to 128 [ 198.835995][ T5847] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 198.939538][ T9016] loop0: detected capacity change from 0 to 32768 [ 198.963641][ T9016] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 199.062830][ T5847] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.083730][ T5847] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.115867][ T5847] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 199.140268][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 199.146537][ T9025] loop3: detected capacity change from 0 to 1024 [ 199.159798][ T5847] usb 3-1: SerialNumber: syz [ 199.220393][ T9025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.239606][ T5777] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 199.331086][ T9030] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 199.379305][ T9024] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 199.410306][ T5847] usb 3-1: 0:2 : does not exist [ 199.425152][ T9024] EXT4-fs (loop3): This should not happen!! Data will be lost [ 199.425152][ T9024] [ 199.455579][ T5847] usb 3-1: 0:0: failed to get current value for ch 0 (-22) [ 199.455685][ T9024] EXT4-fs (loop3): Total free blocks count 0 [ 199.502396][ T9024] EXT4-fs (loop3): Free/Dirty block details [ 199.514063][ T5847] usb 3-1: USB disconnect, device number 14 [ 199.521428][ T9024] EXT4-fs (loop3): free_blocks=68451041280 [ 199.527274][ T9024] EXT4-fs (loop3): dirty_blocks=32 [ 199.561750][ T9024] EXT4-fs (loop3): Block reservation details [ 199.587178][ T9024] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 199.618663][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.658275][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.835971][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 200.026388][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 200.039997][ T8] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 200.064645][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.115278][ T8] usb 2-1: Product: syz [ 200.119501][ T8] usb 2-1: Manufacturer: syz [ 200.154062][ T8] usb 2-1: SerialNumber: syz [ 200.301782][ T9039] loop0: detected capacity change from 0 to 40427 [ 200.318607][ T9039] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 200.334223][ T9039] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 200.354500][ T9039] F2FS-fs (loop0): invalid crc value [ 200.376425][ T9039] F2FS-fs (loop0): Found nat_bits in checkpoint [ 200.473979][ T5826] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 200.508911][ T9039] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 200.531135][ T9039] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 200.580722][ T8] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 200.666548][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.687169][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.707002][ T5826] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 200.726567][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.753629][ T5826] usb 3-1: config 0 descriptor?? [ 200.809733][ T8] snd-usb-audio: probe of 2-1:222.0 failed with error -2 [ 200.898360][ T5777] udevd[5777]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.057100][ T8] usb 2-1: USB disconnect, device number 10 [ 201.163971][ T5826] aquacomputer_d5next 0003:0C70:F00D.0007: item fetching failed at offset 3/5 [ 201.195870][ T5826] aquacomputer_d5next: probe of 0003:0C70:F00D.0007 failed with error -22 [ 201.300983][ T9070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1248'. [ 201.410934][ T5826] usb 3-1: USB disconnect, device number 15 [ 201.448859][ T9074] loop0: detected capacity change from 0 to 1024 [ 201.458080][ T9074] EXT4-fs: Ignoring removed orlov option [ 201.490671][ T9074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.628088][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.414276][ T9116] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1259'. [ 202.974691][ T9138] loop2: detected capacity change from 0 to 1024 [ 203.205512][ T42] hfsplus: b-tree write err: -5, ino 4 [ 203.272853][ T9148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1275'. [ 203.294208][ T9148] netem: change failed [ 204.330020][ T9174] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1284'. [ 204.595026][ T9178] loop2: detected capacity change from 0 to 512 [ 204.709763][ T9161] loop3: detected capacity change from 0 to 131072 [ 204.720455][ T9178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.733905][ T9161] F2FS-fs (loop3): invalid crc value [ 204.748231][ T9178] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.780101][ T9161] F2FS-fs (loop3): Found nat_bits in checkpoint [ 204.837249][ T9161] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 205.076939][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.493525][ T9193] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 205.836221][ T6454] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 205.893671][ T5819] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 205.921954][ T5105] Bluetooth: hci3: command tx timeout [ 206.017453][ T6454] usb 2-1: Using ep0 maxpacket: 8 [ 206.026356][ T6454] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 206.035541][ T6454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.052401][ T6454] pvrusb2: Hardware description: Terratec Grabster AV400 [ 206.059571][ T6454] pvrusb2: ********** [ 206.063551][ T6454] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 206.073650][ T6454] pvrusb2: Important functionality might not be entirely working. [ 206.083787][ T6454] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 206.096556][ T5819] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 206.101836][ T6454] pvrusb2: ********** [ 206.107673][ T5819] usb 3-1: config 0 has no interface number 0 [ 206.118463][ T5819] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 206.127812][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.135995][ T5819] usb 3-1: Product: syz [ 206.140241][ T5819] usb 3-1: Manufacturer: syz [ 206.145264][ T5819] usb 3-1: SerialNumber: syz [ 206.161099][ T5819] usb 3-1: config 0 descriptor?? [ 206.251314][ T2316] pvrusb2: Invalid write control endpoint [ 206.302512][ T2316] pvrusb2: Invalid write control endpoint [ 206.308640][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 206.323690][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 206.331743][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 206.342160][ T2316] pvrusb2: Device being rendered inoperable [ 206.348221][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 206.355859][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 206.365870][ T2316] pvrusb2: Attached sub-driver cx25840 [ 206.371544][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 206.382365][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 206.459708][ T5847] usb 2-1: USB disconnect, device number 11 [ 206.568948][ T5819] usb 3-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (1) [ 206.577034][ T5819] usb 3-1: Firmware version (0.0) predates our first public release. [ 206.585273][ T5819] usb 3-1: Please update to version 0.2 or newer [ 206.812246][ T5819] usb 3-1: USB disconnect, device number 16 [ 207.264865][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 207.283765][ T5847] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 207.455138][ T5847] usb 1-1: Using ep0 maxpacket: 32 [ 207.455309][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 207.462200][ T5847] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 207.467766][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.474676][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.496304][ T5847] usb 1-1: config 0 descriptor?? [ 207.504548][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 207.518978][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 207.530729][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 207.541267][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.554441][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 207.563694][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.700633][ T5847] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 207.710834][ T5847] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 207.730589][ T5847] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 207.738037][ T5847] usb 1-1: media controller created [ 207.759561][ T5847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.787301][ T8] usb 2-1: GET_CAPABILITIES returned 0 [ 207.795381][ T8] usbtmc 2-1:16.0: can't read capabilities [ 207.893131][ T5847] az6027: usb out operation failed. (-71) [ 207.900269][ T5847] az6027: usb out operation failed. (-71) [ 207.906508][ T5847] stb0899_attach: Driver disabled by Kconfig [ 207.912513][ T5847] az6027: no front-end attached [ 207.912513][ T5847] [ 207.919898][ T5847] az6027: usb out operation failed. (-71) [ 207.925663][ T5847] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 207.937886][ T5847] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22 [ 207.953394][ T5847] dvb-usb: schedule remote query interval to 400 msecs. [ 207.965556][ T5847] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 207.978546][ T5847] usb 1-1: USB disconnect, device number 9 [ 208.056805][ T5847] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 208.091524][ T5819] usb 2-1: USB disconnect, device number 12 [ 209.188247][ T9213] loop0: detected capacity change from 0 to 40427 [ 209.227468][ T9213] F2FS-fs (loop0): build fault injection attr: rate: 551, type: 0x7ffff [ 209.235877][ T9213] F2FS-fs (loop0): Image doesn't support compression [ 209.255445][ T9213] F2FS-fs (loop0): Image doesn't support compression [ 209.262556][ T9213] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x2 [ 209.286486][ T9213] F2FS-fs (loop0): invalid crc value [ 209.296250][ T9213] F2FS-fs (loop0): Found nat_bits in checkpoint [ 209.393131][ T9213] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 209.805815][ T5786] syz-executor: attempt to access beyond end of device [ 209.805815][ T5786] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 209.833886][ T5786] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 210.996949][ T9244] loop0: detected capacity change from 0 to 32768 [ 211.006206][ T9244] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1305 (9244) [ 211.033460][ T9244] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 211.049300][ T9244] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 211.058557][ T9244] BTRFS info (device loop0): turning on sync discard [ 211.068867][ T9244] BTRFS info (device loop0): using free space tree [ 211.119443][ T9244] BTRFS info (device loop0): enabling ssd optimizations [ 211.180036][ T28] audit: type=1800 audit(1763391460.850:10): pid=9244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1305" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 211.279492][ T5786] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 212.236573][ T5826] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 212.450993][ T5826] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 212.484622][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.492669][ T5826] usb 2-1: Product: syz [ 212.505059][ T5826] usb 2-1: Manufacturer: syz [ 212.509702][ T5826] usb 2-1: SerialNumber: syz [ 212.750342][ T5826] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 212.767595][ T5826] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 212.836081][ T9300] loop0: detected capacity change from 0 to 4096 [ 212.954125][ T9300] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 212.961431][ T9290] loop2: detected capacity change from 0 to 32768 [ 212.974451][ T5826] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71 [ 212.990586][ T9300] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 213.015329][ T5826] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 213.048574][ T9290] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 213.070053][ T5826] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 213.112434][ T5826] lan78xx: probe of 2-1:1.0 failed with error -71 [ 213.189585][ T5826] usb 2-1: USB disconnect, device number 13 [ 213.227872][ T9290] XFS (loop2): Ending clean mount [ 213.286022][ T9290] XFS (loop2): Quotacheck needed: Please wait. [ 213.374009][ T9290] XFS (loop2): Quotacheck: Done. [ 213.526329][ T5792] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 213.782161][ T9322] loop3: detected capacity change from 0 to 1024 [ 213.943059][ T9322] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 213.949471][ T9322] hfsplus: xattr search failed [ 214.024457][ T1004] hfsplus: b-tree write err: -5, ino 4 [ 214.094106][ T5819] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 214.221568][ T9335] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1340'. [ 214.293310][ T5819] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 214.304100][ T5819] usb 2-1: config 0 has no interface number 0 [ 214.310902][ T5819] usb 2-1: config 0 interface 11 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 214.330145][ T5819] usb 2-1: config 0 interface 11 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 214.342184][ T5819] usb 2-1: config 0 interface 11 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 214.372928][ T5819] usb 2-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca [ 214.399984][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.424489][ T5819] usb 2-1: Product: syz [ 214.433523][ T5819] usb 2-1: Manufacturer: syz [ 214.454756][ T5819] usb 2-1: SerialNumber: syz [ 214.463401][ T5819] usb 2-1: config 0 descriptor?? [ 214.488918][ T9324] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 214.496859][ T9324] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 214.713134][ T5819] usb 2-1: Error in usbnet_get_endpoints (-71) [ 214.713694][ T6454] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 214.725755][ T5819] usb 2-1: USB disconnect, device number 14 [ 214.738248][ T9333] loop2: detected capacity change from 0 to 32768 [ 214.761465][ T9333] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 214.890870][ T9333] XFS (loop2): Ending clean mount [ 214.908449][ T9333] XFS (loop2): Quotacheck needed: Please wait. [ 214.932586][ T6454] usb 4-1: Using ep0 maxpacket: 32 [ 214.942577][ T6454] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 214.954402][ T6454] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.964185][ T9333] XFS (loop2): Quotacheck: Done. [ 214.986267][ T6454] usb 4-1: config 0 descriptor?? [ 215.069942][ T5792] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 215.200268][ T6454] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 215.210843][ T6454] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 215.221979][ T6454] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 215.229618][ T6454] usb 4-1: media controller created [ 215.244823][ T6454] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 215.399897][ T6454] az6027: usb out operation failed. (-71) [ 215.421302][ T6454] az6027: usb out operation failed. (-71) [ 215.427083][ T6454] stb0899_attach: Driver disabled by Kconfig [ 215.441250][ T6454] az6027: no front-end attached [ 215.441250][ T6454] [ 215.451644][ T6454] az6027: usb out operation failed. (-71) [ 215.466230][ T6454] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 215.490931][ T6454] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23 [ 215.515713][ T6454] dvb-usb: schedule remote query interval to 400 msecs. [ 215.531319][ T6454] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 215.558087][ T6454] usb 4-1: USB disconnect, device number 14 [ 215.665445][ T6454] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 215.788298][ T9371] loop0: detected capacity change from 0 to 256 [ 216.053644][ T3413] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 216.094001][ T3413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.107932][ T3413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.005934][ T9411] sit0: entered promiscuous mode [ 217.032502][ T9411] netlink: 'syz.1.1371': attribute type 1 has an invalid length. [ 217.060513][ T9411] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1371'. [ 217.353473][ T9425] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1378'. [ 217.595906][ T9435] loop0: detected capacity change from 0 to 2048 [ 217.682352][ T9435] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.776861][ T28] audit: type=1800 audit(1763391467.768:11): pid=9435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1384" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 217.873742][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.023508][ T6454] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 218.236311][ T6454] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.275584][ T6454] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.311368][ T6454] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 218.334953][ T6454] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 218.351555][ T6454] usb 4-1: SerialNumber: syz [ 218.574124][ T6454] usb 4-1: 0:2 : does not exist [ 218.612473][ T6454] usb 4-1: USB disconnect, device number 15 [ 218.654445][ T5777] udevd[5777]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.532478][ T5819] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 219.706547][ T5819] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 219.714832][ T5819] usb 4-1: config 0 has no interface number 0 [ 219.722628][ T5819] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 219.731736][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.743449][ T5819] usb 4-1: Product: syz [ 219.747627][ T5819] usb 4-1: Manufacturer: syz [ 219.754217][ T5819] usb 4-1: SerialNumber: syz [ 219.760656][ T5819] usb 4-1: config 0 descriptor?? [ 220.160547][ T5819] usb 4-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (1) [ 220.168528][ T5819] usb 4-1: Firmware version (0.0) predates our first public release. [ 220.176761][ T5819] usb 4-1: Please update to version 0.2 or newer [ 220.393309][ T5819] usb 4-1: USB disconnect, device number 16 [ 221.136816][ T9490] loop2: detected capacity change from 0 to 4096 [ 221.197844][ T9490] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 221.214032][ T9490] ntfs3: loop2: Failed to load $Extend (-22). [ 221.237622][ T9490] ntfs3: loop2: Failed to initialize $Extend. [ 221.645077][ T9486] loop3: detected capacity change from 0 to 32768 [ 221.684409][ T9486] JBD2: Ignoring recovery information on journal [ 221.794910][ T9486] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 222.017069][ T5785] ocfs2: Unmounting device (7,3) on (node local) [ 222.578080][ T9509] loop3: detected capacity change from 0 to 512 [ 222.623508][ T9509] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 222.664508][ T9514] loop0: detected capacity change from 0 to 512 [ 222.691905][ T9514] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 222.698910][ T9509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.776215][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.795411][ T9514] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1415: invalid indirect mapped block 4294967295 (level 1) [ 222.905573][ T9514] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1415: invalid indirect mapped block 4294967295 (level 1) [ 222.938268][ T9514] EXT4-fs (loop0): 2 truncates cleaned up [ 222.960470][ T9514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.062671][ T9514] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.1415: bg 0: block 5: invalid block bitmap [ 223.248935][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.532822][ T9541] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 223.695753][ T9545] netlink: 'syz.1.1432': attribute type 28 has an invalid length. [ 223.917694][ T9526] loop2: detected capacity change from 0 to 32768 [ 223.997115][ T9526] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 224.337562][ T9526] XFS (loop2): Ending clean mount [ 224.346910][ T9526] XFS (loop2): Quotacheck needed: Please wait. [ 224.468536][ T9526] XFS (loop2): Quotacheck: Done. [ 224.594351][ T5792] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 224.770985][ T9588] block nbd2: server does not support multiple connections per device. [ 224.779582][ T9588] block nbd2: shutting down sockets [ 224.865282][ T9591] Falling back ldisc for ptm0. [ 225.202030][ T9603] loop7: detected capacity change from 0 to 7 [ 225.211856][ T5777] Dev loop7: unable to read RDB block 7 [ 225.217468][ T5777] loop7: unable to read partition table [ 225.230079][ T5777] loop7: partition table beyond EOD, truncated [ 225.247134][ T9603] Dev loop7: unable to read RDB block 7 [ 225.256278][ T9603] loop7: unable to read partition table [ 225.273900][ T9603] loop7: partition table beyond EOD, truncated [ 225.283165][ T9603] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 225.331487][ T5160] Dev loop7: unable to read RDB block 7 [ 225.340161][ T5160] loop7: unable to read partition table [ 225.350953][ T5160] loop7: partition table beyond EOD, truncated [ 226.231975][ T9595] loop3: detected capacity change from 0 to 65536 [ 226.282982][ T9595] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 226.381705][ T9595] XFS (loop3): Ending clean mount [ 226.404577][ T9595] XFS (loop3): Quotacheck needed: Please wait. [ 226.576701][ T9595] XFS (loop3): Quotacheck: Done. [ 226.645709][ T9645] loop2: detected capacity change from 0 to 4096 [ 226.705354][ T9647] loop0: detected capacity change from 0 to 4096 [ 226.715441][ T9645] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 226.780163][ T9647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.815363][ T5785] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 226.911903][ T9645] ntfs3: loop2: Failed to load $Extend (-22). [ 226.941135][ T9645] ntfs3: loop2: Failed to initialize $Extend. [ 227.123765][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.481386][ T9671] loop3: detected capacity change from 0 to 40427 [ 228.513705][ T9671] F2FS-fs (loop3): build fault injection attr: rate: 693, type: 0x7ffff [ 228.559579][ T9671] F2FS-fs (loop3): Image doesn't support compression [ 228.626629][ T9671] F2FS-fs (loop3): invalid crc value [ 228.682363][ T9671] F2FS-fs (loop3): Found nat_bits in checkpoint [ 228.855460][ T9671] F2FS-fs (loop3): Start checkpoint disabled! [ 228.878609][ T9671] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 228.965998][ T9679] loop2: detected capacity change from 0 to 40427 [ 228.989708][ T9671] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of __vfs_getxattr+0x3e8/0x420 [ 229.000512][ T9679] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 229.008277][ T9679] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 229.018634][ T9671] syz.3.1470: attempt to access beyond end of device [ 229.018634][ T9671] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 229.070638][ T9679] F2FS-fs (loop2): invalid crc value [ 229.106088][ T9679] F2FS-fs (loop2): Found nat_bits in checkpoint [ 229.254841][ T9679] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 229.282492][ T43] kworker/u4:3: attempt to access beyond end of device [ 229.282492][ T43] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 229.301406][ T9679] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 229.308871][ T43] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 229.310390][ T43] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 229.344165][ T43] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 230.678115][ T9715] loop0: detected capacity change from 0 to 32768 [ 230.740800][ T9715] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 230.882665][ T5786] ocfs2: Unmounting device (7,0) on (node local) [ 230.899129][ T9742] loop2: detected capacity change from 0 to 512 [ 230.931274][ T9742] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 230.964861][ T9742] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1514: iget: bad i_size value: 38620345925642 [ 231.011135][ T9742] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1514: couldn't read orphan inode 15 (err -117) [ 231.028916][ T5826] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 231.036671][ T5819] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 231.055553][ T9742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.117893][ T9742] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.1514: bg 0: block 5: invalid block bitmap [ 231.137155][ T9742] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 231.151234][ T9742] EXT4-fs (loop2): This should not happen!! Data will be lost [ 231.151234][ T9742] [ 231.161801][ T9742] EXT4-fs (loop2): Total free blocks count 0 [ 231.167823][ T9742] EXT4-fs (loop2): Free/Dirty block details [ 231.174369][ T9742] EXT4-fs (loop2): free_blocks=0 [ 231.179396][ T9742] EXT4-fs (loop2): dirty_blocks=2 [ 231.186068][ T9742] EXT4-fs (loop2): Block reservation details [ 231.189680][ T9745] loop0: detected capacity change from 0 to 8192 [ 231.192510][ T9742] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 231.222834][ T9745] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 231.237029][ T9745] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 231.254823][ T5826] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 231.272058][ T5826] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 231.282072][ T9745] REISERFS (device loop0): using ordered data mode [ 231.282089][ T9745] reiserfs: using flush barriers [ 231.285120][ T9745] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 231.289185][ T5819] usb 4-1: Using ep0 maxpacket: 16 [ 231.308698][ T9745] REISERFS (device loop0): checking transaction log (loop0) [ 231.310805][ T5826] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 231.324576][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.332421][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.349798][ T5819] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.360012][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 231.371894][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 231.382174][ T5819] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 231.393431][ T5819] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.406990][ T9736] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 231.417997][ T5826] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 231.446058][ T5819] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 231.474247][ T5819] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 231.518320][ T5819] usb 4-1: Manufacturer: syz [ 231.542282][ T5819] usb 4-1: config 0 descriptor?? [ 231.598553][ T9745] REISERFS (device loop0): Using tea hash to sort names [ 231.614474][ T9745] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 231.731474][ T6454] usb 2-1: USB disconnect, device number 15 [ 231.881164][ T5819] rc_core: IR keymap rc-hauppauge not found [ 231.901226][ T5819] Registered IR keymap rc-empty [ 231.916985][ T5819] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 231.971700][ T5819] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 232.021125][ T5819] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 232.066104][ T5819] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input24 [ 232.107633][ T5819] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 232.190805][ T5819] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 232.203531][ T9758] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 232.214341][ T9758] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 232.225072][ T5819] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 232.233705][ T9758] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 232.276203][ T5819] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 232.319259][ T9762] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1513'. [ 232.324091][ T5819] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 232.385286][ T5819] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 232.428877][ T5819] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 232.434834][ T9766] netlink: 'syz.2.1515': attribute type 2 has an invalid length. [ 232.439936][ T9765] input: syz1 as /devices/virtual/input/input25 [ 232.445203][ T9766] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1515'. [ 232.466824][ T5819] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 232.524130][ T5819] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 232.577954][ T5819] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 232.607251][ T9768] netlink: 'syz.2.1516': attribute type 7 has an invalid length. [ 232.619608][ T5819] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 232.622106][ T9768] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.635658][ T9768] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.645303][ T9768] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.654165][ T9768] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.675377][ T5819] mceusb 4-1:0.0: Registered with mce emulator interface version 90 [ 232.683762][ T5819] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 232.729826][ T5819] usb 4-1: USB disconnect, device number 17 [ 232.950927][ T9779] misc userio: Begin command sent, but we're already running [ 234.541473][ T9832] loop2: detected capacity change from 0 to 512 [ 234.623700][ T9832] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 234.665704][ T9832] EXT4-fs (loop2): orphan cleanup on readonly fs [ 234.694598][ T9812] loop0: detected capacity change from 0 to 32768 [ 234.702393][ T9832] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 234.738996][ T9832] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 234.749162][ T9832] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.1546: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 234.753713][ T9812] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 234.780094][ T9832] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1546: couldn't read orphan inode 13 (err -117) [ 234.821331][ T9832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 234.954764][ T9832] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 234.987131][ T9832] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 235.054954][ T9832] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 235.138533][ T9848] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 235.152353][ T9812] XFS (loop0): Ending clean mount [ 235.163878][ T9848] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 235.184314][ T9812] XFS (loop0): Quotacheck needed: Please wait. [ 235.232236][ T9848] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 235.265336][ T9856] loop3: detected capacity change from 0 to 1024 [ 235.391568][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.414343][ T9812] XFS (loop0): Quotacheck: Done. [ 235.752477][ T5786] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 235.867134][ T5867] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 236.029238][ T6454] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 236.059972][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.086093][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.103755][ T5867] usb 3-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 236.114063][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.124760][ T23] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 236.140564][ T5867] usb 3-1: config 0 descriptor?? [ 236.210471][ T6454] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 236.229955][ T6454] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 236.258846][ T6454] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 236.268434][ T6454] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 236.277099][ T6454] usb 4-1: SerialNumber: syz [ 236.303485][ T6454] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 236.314746][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 236.315509][ T6454] usb-storage 4-1:1.0: USB Mass Storage device detected [ 236.327373][ T23] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 236.342246][ T6454] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 236.348733][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.376895][ T6454] scsi host1: usb-storage 4-1:1.0 [ 236.379035][ T23] usb 2-1: config 0 descriptor?? [ 236.531359][ T5819] usb 4-1: USB disconnect, device number 18 [ 236.577356][ T5867] wacom 0003:056A:030C.0008: hidraw0: USB HID v0.06 Device [HID 056a:030c] on usb-dummy_hcd.2-1/input0 [ 236.610674][ T23] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 236.635049][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 236.656904][ T23] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 236.664885][ T23] usb 2-1: media controller created [ 236.704174][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 236.784028][ T5867] usb 3-1: USB disconnect, device number 17 [ 236.798061][ T23] az6027: usb out operation failed. (-71) [ 236.804334][ T23] az6027: usb out operation failed. (-71) [ 236.811403][ T23] stb0899_attach: Driver disabled by Kconfig [ 236.817766][ T23] az6027: no front-end attached [ 236.817766][ T23] [ 236.827464][ T23] az6027: usb out operation failed. (-71) [ 236.833615][ T23] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 236.846747][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30 [ 236.863070][ T23] dvb-usb: schedule remote query interval to 400 msecs. [ 236.870535][ T23] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 236.885263][ T23] usb 2-1: USB disconnect, device number 16 [ 236.930680][ T23] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 237.420786][ T9901] input: syz1 as /devices/virtual/input/input31 [ 237.847210][ T9897] loop3: detected capacity change from 0 to 32768 [ 237.872723][ T9897] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.1569 (9897) [ 237.926796][ T9897] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 237.968155][ T9897] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 237.995674][ T9897] BTRFS info (device loop3): using free space tree [ 238.167111][ T9897] BTRFS info (device loop3): enabling ssd optimizations [ 238.189705][ T9897] BTRFS info (device loop3): auto enabling async discard [ 238.376321][ T9897] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 238.395084][ T9942] loop0: detected capacity change from 0 to 512 [ 238.481502][ T9942] [ 238.483885][ T9942] ====================================================== [ 238.484615][ T5785] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 238.490885][ T9942] WARNING: possible circular locking dependency detected [ 238.490905][ T9942] syzkaller #0 Not tainted [ 238.490913][ T9942] ------------------------------------------------------ [ 238.490919][ T9942] syz.0.1583/9942 is trying to acquire lock: [ 238.490928][ T9942] ffff88807acb8bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2f0 [ 238.535530][ T9942] [ 238.535530][ T9942] but task is already holding lock: [ 238.542907][ T9942] ffff88805e0d50c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 238.552783][ T9942] [ 238.552783][ T9942] which lock already depends on the new lock. [ 238.552783][ T9942] [ 238.563196][ T9942] [ 238.563196][ T9942] the existing dependency chain (in reverse order) is: [ 238.572221][ T9942] [ 238.572221][ T9942] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 238.579805][ T9942] down_write+0x97/0x1f0 [ 238.584609][ T9942] ext4_destroy_inline_data+0x28/0xe0 [ 238.590530][ T9942] ext4_do_writepages+0x4c2/0x38d0 [ 238.596189][ T9942] ext4_writepages+0x1a8/0x2f0 [ 238.601495][ T9942] do_writepages+0x3a2/0x600 [ 238.606638][ T9942] filemap_fdatawrite_wbc+0x122/0x180 [ 238.612555][ T9942] filemap_flush+0xc5/0x120 [ 238.617621][ T9942] ext4_release_file+0x82/0x310 [ 238.623012][ T9942] __fput+0x234/0x970 [ 238.627536][ T9942] task_work_run+0x1ce/0x250 [ 238.632648][ T9942] exit_to_user_mode_loop+0xe6/0x110 [ 238.638447][ T9942] exit_to_user_mode_prepare+0xf6/0x180 [ 238.644503][ T9942] syscall_exit_to_user_mode+0x1a/0x50 [ 238.650468][ T9942] do_syscall_64+0x61/0xb0 [ 238.655400][ T9942] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.661800][ T9942] [ 238.661800][ T9942] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 238.670228][ T9942] __lock_acquire+0x2ddb/0x7c80 [ 238.675595][ T9942] lock_acquire+0x197/0x410 [ 238.680610][ T9942] percpu_down_read+0x44/0x1a0 [ 238.685903][ T9942] ext4_writepages+0x170/0x2f0 [ 238.691200][ T9942] do_writepages+0x3a2/0x600 [ 238.696327][ T9942] __writeback_single_inode+0x153/0xee0 [ 238.702398][ T9942] writeback_single_inode+0x211/0x720 [ 238.708281][ T9942] write_inode_now+0x161/0x1e0 [ 238.713555][ T9942] iput+0x5b2/0x920 [ 238.717886][ T9942] ext4_xattr_block_set+0x273a/0x32a0 [ 238.723773][ T9942] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 238.730186][ T9942] __ext4_expand_extra_isize+0x306/0x400 [ 238.736330][ T9942] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 238.742299][ T9942] ext4_evict_inode+0x7ed/0xea0 [ 238.747659][ T9942] evict+0x486/0x870 [ 238.752076][ T9942] ext4_orphan_cleanup+0xbd4/0x1400 [ 238.757810][ T9942] ext4_fill_super+0x5de4/0x66c0 [ 238.763273][ T9942] get_tree_bdev+0x3e4/0x510 [ 238.768375][ T9942] vfs_get_tree+0x8c/0x280 [ 238.773301][ T9942] do_new_mount+0x24b/0xa40 [ 238.778313][ T9942] __se_sys_mount+0x2da/0x3c0 [ 238.783494][ T9942] do_syscall_64+0x55/0xb0 [ 238.788429][ T9942] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.794829][ T9942] [ 238.794829][ T9942] other info that might help us debug this: [ 238.794829][ T9942] [ 238.805045][ T9942] Possible unsafe locking scenario: [ 238.805045][ T9942] [ 238.812476][ T9942] CPU0 CPU1 [ 238.817822][ T9942] ---- ---- [ 238.823178][ T9942] lock(&ei->xattr_sem); [ 238.827496][ T9942] lock(&sbi->s_writepages_rwsem); [ 238.835202][ T9942] lock(&ei->xattr_sem); [ 238.842035][ T9942] rlock(&sbi->s_writepages_rwsem); [ 238.847302][ T9942] [ 238.847302][ T9942] *** DEADLOCK *** [ 238.847302][ T9942] [ 238.855428][ T9942] 3 locks held by syz.0.1583/9942: [ 238.860518][ T9942] #0: ffff8880783de0e0 (&type->s_umount_key#31){++++}-{3:3}, at: get_tree_bdev+0x344/0x510 [ 238.870606][ T9942] #1: ffff8880783de608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b9/0xea0 [ 238.880001][ T9942] #2: ffff88805e0d50c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 238.890257][ T9942] [ 238.890257][ T9942] stack backtrace: [ 238.896143][ T9942] CPU: 1 PID: 9942 Comm: syz.0.1583 Not tainted syzkaller #0 [ 238.903497][ T9942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 238.913545][ T9942] Call Trace: [ 238.916812][ T9942] [ 238.919737][ T9942] dump_stack_lvl+0x16c/0x230 [ 238.924407][ T9942] ? load_image+0x3b0/0x3b0 [ 238.928896][ T9942] ? show_regs_print_info+0x20/0x20 [ 238.934090][ T9942] ? print_circular_bug+0x12b/0x1a0 [ 238.939277][ T9942] check_noncircular+0x2bd/0x3c0 [ 238.944201][ T9942] ? look_up_lock_class+0x75/0x140 [ 238.949296][ T9942] ? print_deadlock_bug+0x5d0/0x5d0 [ 238.954484][ T9942] ? lockdep_lock+0xe0/0x220 [ 238.959063][ T9942] ? _find_first_zero_bit+0xd3/0x100 [ 238.964340][ T9942] __lock_acquire+0x2ddb/0x7c80 [ 238.969186][ T9942] ? mark_lock+0x94/0x320 [ 238.973506][ T9942] ? verify_lock_unused+0x140/0x140 [ 238.978692][ T9942] ? __lock_acquire+0x1334/0x7c80 [ 238.983711][ T9942] ? verify_lock_unused+0x140/0x140 [ 238.988914][ T9942] lock_acquire+0x197/0x410 [ 238.993411][ T9942] ? ext4_writepages+0x170/0x2f0 [ 238.998346][ T9942] ? __might_sleep+0xe0/0xe0 [ 239.002927][ T9942] ? mark_lock+0x94/0x320 [ 239.007243][ T9942] ? read_lock_is_recursive+0x20/0x20 [ 239.012604][ T9942] ? __lock_acquire+0x1334/0x7c80 [ 239.017617][ T9942] percpu_down_read+0x44/0x1a0 [ 239.022371][ T9942] ? ext4_writepages+0x170/0x2f0 [ 239.027297][ T9942] ext4_writepages+0x170/0x2f0 [ 239.032053][ T9942] ? ext4_read_folio+0x2f0/0x2f0 [ 239.036986][ T9942] ? __rwlock_init+0x150/0x150 [ 239.041736][ T9942] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 239.047615][ T9942] ? do_raw_spin_unlock+0x121/0x230 [ 239.052800][ T9942] ? ext4_read_folio+0x2f0/0x2f0 [ 239.057736][ T9942] do_writepages+0x3a2/0x600 [ 239.062323][ T9942] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 239.068035][ T9942] ? writeback_single_inode+0x206/0x720 [ 239.073578][ T9942] ? __lock_acquire+0x7c80/0x7c80 [ 239.078589][ T9942] ? do_raw_spin_lock+0x121/0x2c0 [ 239.083605][ T9942] ? get_tree_bdev+0x3e4/0x510 [ 239.088357][ T9942] __writeback_single_inode+0x153/0xee0 [ 239.093898][ T9942] writeback_single_inode+0x211/0x720 [ 239.099263][ T9942] ? write_inode_now+0x1e0/0x1e0 [ 239.104196][ T9942] write_inode_now+0x161/0x1e0 [ 239.108951][ T9942] ? bdi_split_work_to_wbs+0x890/0x890 [ 239.114403][ T9942] ? do_raw_spin_unlock+0x121/0x230 [ 239.119590][ T9942] iput+0x5b2/0x920 [ 239.123388][ T9942] ext4_xattr_block_set+0x273a/0x32a0 [ 239.128749][ T9942] ? __might_sleep+0xe0/0xe0 [ 239.133331][ T9942] ? xattr_find_entry+0x12b/0x2f0 [ 239.138345][ T9942] ? ext4_xattr_block_find+0x350/0x350 [ 239.143794][ T9942] ? ext4_xattr_block_find+0x2d4/0x350 [ 239.149247][ T9942] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 239.155149][ T9942] __ext4_expand_extra_isize+0x306/0x400 [ 239.160778][ T9942] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 239.166231][ T9942] ext4_evict_inode+0x7ed/0xea0 [ 239.171068][ T9942] ? _raw_spin_unlock+0x28/0x40 [ 239.175909][ T9942] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 239.181794][ T9942] ? do_raw_spin_unlock+0x121/0x230 [ 239.186988][ T9942] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 239.192871][ T9942] evict+0x486/0x870 [ 239.196754][ T9942] ? __lock_acquire+0x7c80/0x7c80 [ 239.201765][ T9942] ? proc_nr_inodes+0x230/0x230 [ 239.206604][ T9942] ? do_raw_spin_unlock+0x121/0x230 [ 239.211790][ T9942] ? _raw_spin_unlock+0x28/0x40 [ 239.216633][ T9942] ? iput+0x70a/0x920 [ 239.220602][ T9942] ext4_orphan_cleanup+0xbd4/0x1400 [ 239.225795][ T9942] ? ext4_orphan_del+0xba0/0xba0 [ 239.230729][ T9942] ? ext4_register_li_request+0x183/0x940 [ 239.236439][ T9942] ? errseq_check_and_advance+0x66/0x120 [ 239.242060][ T9942] ext4_fill_super+0x5de4/0x66c0 [ 239.246996][ T9942] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 239.253223][ T9942] ? __might_sleep+0xe0/0xe0 [ 239.257807][ T9942] ? read_lock_is_recursive+0x20/0x20 [ 239.263173][ T9942] ? snprintf+0xdb/0x120 [ 239.267402][ T9942] ? vscnprintf+0x80/0x80 [ 239.271724][ T9942] ? down_write+0x162/0x1f0 [ 239.276218][ T9942] ? down_read_killable+0x340/0x340 [ 239.281412][ T9942] ? setup_bdev_super+0x56b/0x660 [ 239.286422][ T9942] get_tree_bdev+0x3e4/0x510 [ 239.290999][ T9942] ? vfs_parse_fs_string+0x160/0x160 [ 239.296273][ T9942] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 239.302502][ T9942] ? setup_bdev_super+0x660/0x660 [ 239.307509][ T9942] ? apparmor_capable+0x137/0x1a0 [ 239.312519][ T9942] ? bpf_lsm_capable+0x9/0x10 [ 239.317187][ T9942] ? security_capable+0x89/0xb0 [ 239.322027][ T9942] vfs_get_tree+0x8c/0x280 [ 239.326429][ T9942] do_new_mount+0x24b/0xa40 [ 239.330921][ T9942] __se_sys_mount+0x2da/0x3c0 [ 239.335587][ T9942] ? __x64_sys_mount+0xc0/0xc0 [ 239.340335][ T9942] ? lockdep_hardirqs_on+0x98/0x150 [ 239.345516][ T9942] ? __x64_sys_mount+0x20/0xc0 [ 239.350264][ T9942] do_syscall_64+0x55/0xb0 [ 239.354668][ T9942] ? clear_bhb_loop+0x40/0x90 [ 239.359330][ T9942] ? clear_bhb_loop+0x40/0x90 [ 239.363995][ T9942] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.369874][ T9942] RIP: 0033:0x7f2375790e6a [ 239.374290][ T9942] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.393887][ T9942] RSP: 002b:00007f23766f0e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 239.402290][ T9942] RAX: ffffffffffffffda RBX: 00007f23766f0ef0 RCX: 00007f2375790e6a [ 239.410246][ T9942] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f23766f0eb0 [ 239.418201][ T9942] RBP: 0000200000000180 R08: 00007f23766f0ef0 R09: 0000000000800700 [ 239.426156][ T9942] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 239.434113][ T9942] R13: 00007f23766f0eb0 R14: 000000000000046f R15: 000000000000002c [ 239.442075][ T9942] [ 239.476984][ T9942] EXT4-fs error (device loop0): ext4_xattr_inode_iget:444: inode #11: comm syz.0.1583: iget: bad extra_isize 90 (inode size 256) [ 239.500229][ T9942] EXT4-fs (loop0): Remounting filesystem read-only [ 239.519913][ T9942] EXT4-fs warning (device loop0): ext4_evict_inode:255: couldn't mark inode dirty (err -5) [ 239.535810][ T9942] EXT4-fs (loop0): 1 orphan inode deleted [ 239.542550][ T9942] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.601069][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.