last executing test programs: 4m59.967314205s ago: executing program 5 (id=7382): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') lseek(r0, 0x9, 0x0) 4m59.612907835s ago: executing program 5 (id=7386): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/mdstat\x00', 0x0, 0x0) ppoll(&(0x7f0000001280)=[{r0, 0x400}], 0x1, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) 4m59.203803675s ago: executing program 5 (id=7390): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000b29000/0x2000)=nil, 0x2000, 0x1000004, 0x12, r0, 0xae915000) 4m58.767795321s ago: executing program 5 (id=7395): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x222, &(0x7f0000000800)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4m58.201867266s ago: executing program 5 (id=7400): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) 4m57.205214632s ago: executing program 5 (id=7408): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x0, 0xfffd}}, 0x14) 4m56.486002469s ago: executing program 32 (id=7408): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x0, 0xfffd}}, 0x14) 2m35.944160801s ago: executing program 3 (id=8844): msgget(0x1, 0x240) msgget(0x1, 0x4bc) 2m35.658150748s ago: executing program 3 (id=8848): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40004580, 0x0) 2m35.2969774s ago: executing program 3 (id=8853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)={0x14, 0x1, 0x8, 0x301}, 0x14}}, 0x0) 2m34.82858294s ago: executing program 3 (id=8858): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x3, 0x26d, &(0x7f0000000780)="$eJzs2s9rHGUYB/Bn10o3KelG/EUL4ose1MvQ5OyhRSKIAUWNUAXp1Ex0zbgbMktgVUxOevVP8CwevQlSPHnJxb/Ag7dccuxBHNnspKYxRVGTlPTzOew+zMyXeed9l5dnl9158auPV1eqbCUfRrvVivbV2IrbrZiNduzbiheeu/7TU29ef+fVa4uLnebofErp4tM/vPvZt8/cGl54+7uL35+P7dn3dnbnf91+YvvSzu9vfdirUq9K/cEwPdSEyiIt96rVLKXXyyKvitTrV8X6MOXp5mAwzG+WRVopB2tro5T3l2em19aLqkp5f5RWi1EaDtJwfZTyD/JeP2VZlmamg/9i6ZvbdR279cM3oq7rqa/jwq2Y+SW60XoktR692nr8RuvJrdal3bruHo5Onc6I+X/96/XnTGg29YU3UupElF9uLG0sTd7HZztxbSV6UUYRV2Iqfovxx6QxqV9+ZXHhStozG1+Um01+c2NpsuXfyc9FN2aPzs9N8mk/fz4ixq/TB/Pz0Y3Hjs7PH8pP7t+J5589kM+iGz+/H4MoYznG2dhspmDh87mUXnpt8VD+8t51AABnTTZpndpN/zZu2u7q37Lmgr/2d5P8gf6w+zf94aH+6lxcPne6z05ENfpkNS/LYn38BW+vuHPkQS2mDk7LPyn2fwo5voG171qz+2WiyrIYD+eYb/Hpj8d+C8URRcRHp7EhcaL+XPTmQOeel977DAAAAAAAAAAAACfuJP5OeNrPCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3N/+CAAA//+u6rr9") mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) 2m34.301208565s ago: executing program 3 (id=8863): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003fc0)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000004140)=[@flowinfo={{0x14, 0x29, 0xb, 0xd20}}, @flowinfo={{0x14}}], 0x30}}], 0x1, 0x0) 2m33.269791932s ago: executing program 3 (id=8878): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e20, @rand_addr=0x640100fd}}, 0x0, 0x0, 0xfffd, 0x0, "d3d87bc1779df0260137ffea3b267abe0be604d99164ceede9ce200eb018abebbf99a8ae25b276a23593abc5bfbcd104244b1bcd3f8dcc8bb1afb8237f33ee41a904e61d65a7bacfec9dc935544d3f64"}, 0xd8) 2m32.539983332s ago: executing program 33 (id=8878): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e20, @rand_addr=0x640100fd}}, 0x0, 0x0, 0xfffd, 0x0, "d3d87bc1779df0260137ffea3b267abe0be604d99164ceede9ce200eb018abebbf99a8ae25b276a23593abc5bfbcd104244b1bcd3f8dcc8bb1afb8237f33ee41a904e61d65a7bacfec9dc935544d3f64"}, 0xd8) 3.746589316s ago: executing program 0 (id=10214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00'], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3.129132134s ago: executing program 7 (id=10222): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000005c0)={'pcl726\x00', [0x4f27, 0x0, 0x4, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x8d, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x1000003, 0x8, 0x4086, 0x0, 0xfffffff8]}) 3.10839213s ago: executing program 1 (id=10223): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x1, 0x5ee7, &(0x7f0000006580)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000300)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000280), &(0x7f000000a440)=ANY=[], 0x90f, 0x0) 3.028105499s ago: executing program 4 (id=10225): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000640)=""/4139, &(0x7f0000000140)=0x102b) 2.853014491s ago: executing program 0 (id=10227): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280), &(0x7f0000048000)=0x1, 0x0) 2.776842461s ago: executing program 7 (id=10228): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000005c0)={0x7fffffff, 0x0, 0x4}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 2.749213397s ago: executing program 4 (id=10229): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x2, 0x0, 0x0, 0x8c}, 0x20) 2.532727374s ago: executing program 7 (id=10232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x40004000}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, 0xfffffffffffffffe, &(0x7f0000000040)=0xff13) 2.529448334s ago: executing program 4 (id=10233): io_setup(0x3ff, &(0x7f0000000500)=0x0) r1 = socket$caif_stream(0x25, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 2.327895359s ago: executing program 7 (id=10234): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000004340)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0xff}}, 0x1c) 2.148953266s ago: executing program 4 (id=10236): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 2.040018181s ago: executing program 7 (id=10237): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000008001000040000000700000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000bc0)={r0, 0x0, &(0x7f0000000b00)=""/161}, 0x20) 1.851249209s ago: executing program 2 (id=10238): signalfd(0xffffffffffffffff, &(0x7f0000000580), 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') pread64(r0, &(0x7f0000000140)=""/108, 0x6c, 0x0) 1.850939914s ago: executing program 0 (id=10239): r0 = shmget$private(0x0, 0x4000, 0x8, &(0x7f00000b6000/0x4000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0xb, 0x3) 1.850570934s ago: executing program 4 (id=10240): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x6) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) 1.677421254s ago: executing program 1 (id=10242): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x2}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000300)={0x3}) 1.583383191s ago: executing program 4 (id=10243): syz_mount_image$ocfs2(&(0x7f00000002c0), &(0x7f0000000140)='./file1\x00', 0x8c0, &(0x7f0000000500)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cc85bf8e749e04e", @ANYRES16, @ANYRESOCT, @ANYRES16], 0x11, 0x445c, &(0x7f0000004a80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) rmdir(&(0x7f0000000040)='./file0\x00') 1.582059929s ago: executing program 0 (id=10244): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000140)=0x9b) 1.496989343s ago: executing program 6 (id=10245): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2}, 0x6) write(r0, &(0x7f00000002c0)="03feba85", 0x4) 1.425831084s ago: executing program 2 (id=10246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x24048050}, 0x4008810) 1.280068546s ago: executing program 7 (id=10247): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "0e3ad5de"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) 1.209117584s ago: executing program 0 (id=10248): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xdc) 1.16724737s ago: executing program 6 (id=10249): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x5}]}}]}, 0x38}}, 0x0) 1.150725462s ago: executing program 2 (id=10250): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14, r1, 0x615, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0xc040) 1.015333827s ago: executing program 0 (id=10251): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 887.988634ms ago: executing program 1 (id=10252): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x10e, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) 887.716453ms ago: executing program 2 (id=10253): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f00000027c0)="$eJzs3V1sXGdaB/DnnWMndsqyU9qmXbpIsxSxaZoE56OtUVrkbIy1K0VtVMcLNyCP40kY1R67trNKK1gFCbgBQVCRVsAFuUHigovcIKEVQhE3iwRIEajSIpAItI1WQoBXsLBiJYzOzDv22BvXbr6cNL/fbvKfc+Y9M++Z9jlzpprnTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEV/46RNDh9NOzwIAuJ9eG39j6Kj3fwB4pJzx+R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK2lKOKtSPHe2HKabC93DJxqti5cnBgdu/VmgylSVKJojy//DBw+cvTYiy+9PNzNj97+bvtMvD5+5kTt5Nzs/EJjcbExXZtoNc/OTTe2/Qh3uv1G+9svQG32zQvT584t1o4cOrru7ovVm7sf21s9Pvzsgee7YydGx8bGe8b09d/2s3+fdPceik+QXVHEFyPFNw5+K9UjohJ3XgtbHDvutcHoK+uvvRMTo2PtHZlp1ltL5Z2pkkf1RVR7Nhrp1sh9qMU7MhJxqfznVE54f7l74/P1hfrUTKN2ur6w1FxqzrVSpTPbcn+qUYnhFDEfEcvFTk+eB01/FPFqpLj5veU0FRFFtw5eeG38jaGjm2/Ydx8nucnTV4uI6/EQ1Cw8oHZHEb8dKd6dHIqzua7aZfNBxOfLfCXirTKvpbicl1N5gBiO+Lb3E3io9UURfxMp5tJymu7Wfvu88tSXa19qnZvrGds9r3zoPx/cT85NeIANRBFT7TP+5XT7/7ELAAAAAAAAAAAAALg/ivh6pLg6uy/NR29PabN1vnamPjXT+VZw97v/tbzVysrKSjV1spZzKOdIztM5J3PO57yU83LOKzmv5ryW83rOGzmXc0YlP3/OWs6hnCM5T+eczDmf81LOyzmvdLLb0bhyLa+/nvNGzuWcoe8JAAAAAAAAAAAAAAAAAACAu2wwiviNSPHvv/+V9u9KR/t36T99fPjkqU/1/mb8M1s8Tjn2UER8Pbb3m7y78m+Np0r5v7u/X8DWBqKIr+bf//vlnZ4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQKhEEb8SKb72neUUKSJGIiajkzeKnZ4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDanYp4NVL87O+OrK7ri4jU/n/HvvKvYzFS5HyizFdi5HA7KyMnyhyIOLQD8wdu3+Lb77xZn5lpLLjhhhturN7Y6SMTAAAAAAAAAAAAAAAAADzCUhF/Hyl+8veWUzUiLlZv7n5sb/X48LMHni+iaF8EIPWOf338zInaybnZ+YXG4mJjujbRap6dm25s9+kGTjVbFy5OjI7dk53Z0uA9nv/gwMm5+bcXmud/YemW9+8ZODG1uLRQP3vru2Mw+iKGetfsb094YnSsPemZZr3V3jRVNplgX0RtuzvDI29PKuJ/I8V7B78Zj+d1+fof/Z2lter/w19cW/rhvvW5+q9j+/jx6ePDJ/c8t53babsT3d8uvLIQxsZ7VvflWf5Qz7pqnte2HxseUWX9vxApfv6PitStoVz/P9BZKlbH/s9X12rq+IZctUP1/0TPuuP5qNXfFzGwNDvf/3TEwOLb7xxsztbPN843WseOvPzS8LGXXzz2Uv+uiIFzzZnG0Nqtbb92AAAAAAAAAAAAAAAAAHCv9KcivhApfunv/nK1bzz3/32qs7TW/9fb/7tvw+P0Xjdgs9u37PXboq+vV/mcKRXxVKR49s+eac83xR4973Cb9qQivlvW0/QX0+fyulz/ubP/1vV/aUOu2qH+38d71l3Kx4n/iBSP/8Ez8bme48TG7t5y3F9Eiqkf+WweF7vKcd3H6/REdxqDy7FfiRTvn14/tts3/cTa2MPb3S3YSWX9z0aKf/itv40fzevWX//j1vW/Z0Ou2qH6f7J3nyJi8e133qzPzDQWFrf9UsAjp6z/X48Uf/0n34zn8rqPuv5P9zo/+55bn4PdQTtU/0/1rKvmef3Yx3wtAAAAAAAAAAAA4GGxJxXxT5Hiz//0QDqY123n+7/TG3LVDn3/7+meddPrvv97725s+0UGAIAHRH8q4icixR9Pf5C6vbGb9v++stb/M7rxxL19Tv+D7T7/j3Wu/zH6/8vnTKmI/8t9vUNb9PX+eKT4tZ86kMelveW4ke50238PvDbXOnhiZmbubH2pPjXTqI3P1882ym33R4p//bfP5m0r7T7fbn90pzd4rSf4dyLFz33YHdvpCe72Uj65NvZwOfZgpPju++vHdvuunlobe6Qc+5uRYuy/bz1279rYo+XYf4wU//lurTt2Tzm2+3nu6bWxh87OzXzfRzYAAAAAAAAAAAAAAAAAAAB2Xn8qIkWKaz9zZbU3fv31v7rXAVh//a+N7tXv/1fvzm4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMhRRH/FSneG1tON4pyuWPgVLN14eLE6NitNxtMkaISRXt8+Wfg8JGjx1586eXhbn709nfbZ+L18TMnaifnZucXGouLjenaRKt5dm66se1HuL3ti03v2d9+AWqzb16YPndusXbk0NF1d1+s3tz92N7q8eFnDzzfHTsxOjY23jOmr3/bs99SunsPxSfIrijiryLFNw5+K/1zEVGJ266FVVscO+61wegr66+9ExOjY+0dmWnWW0vlnamSR/VFVHs2GunWyH2oxTsyEnEpIirlhPeXuzc+X1+oT800aqfrC0vNpeZcK1U6sy33pxqVGE4R8xGxvPnRikdUfxRxLVLc/N5y+pei84bWroMXXht/Y+jo5hv23cdJbvL01SLiejwENQsPqN1RxJOR4t3JoXi/6NRVu2w+iPh8ma9EvFXmtRSX83IqDxDDEd/2fgIPtb4o4nSkmEvL6YMi1377vPLUl2tfap2b6xnbPa986D8f3E/OTXiADUQRH7bP+JfTh97PAQAAAAAAAAAAAOABV8SrkeLq7L7U7g9d7Sltts7XztSnZjpf6+9+97+Wt1pZWVmppk7Wcg7lHMl5Oudkzvmcl3Jeznkl59Wc13Jez3mjnbvbjYnlclTy8+es5RzKOZLzdM7JnPM5L+W8nPNKzqs5r+W8nvNGzuWcH9H1DwAAAAAAAAAAAAAAAAAAd6QSRfxqpPjad5bTStH5fdnJ6OSN9X2uu3ZqjsC98f8BAAD//3zgG/w=") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x20a9c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='./bus\x00') 821.61167ms ago: executing program 6 (id=10254): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 645.052003ms ago: executing program 1 (id=10255): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)={0x34, r1, 0x303, 0x0, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 585.61097ms ago: executing program 6 (id=10256): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000001c00010028bd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000260b0a0002000180c2000000ab1f0c000e80050001000d"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) 461.346992ms ago: executing program 1 (id=10257): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) 329.064842ms ago: executing program 2 (id=10258): capset(&(0x7f0000000000)={0x19980330}, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r0, 0x40045431, &(0x7f0000000000)) 302.902212ms ago: executing program 6 (id=10259): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendfile(r1, r0, 0x0, 0x1b26d318) 180.602085ms ago: executing program 1 (id=10260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 93.130968ms ago: executing program 2 (id=10261): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2800a000}, 0x10) 0s ago: executing program 6 (id=10262): r0 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x3, 0x1, 0x5, 0x6, 0x3, 0x1, {0x5, 0x17d, 0x8, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080)=0x2, 0x7f03) kernel console output (not intermixed with test programs): o create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 999.616930][T27657] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 999.724173][T19428] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 999.767456][T27665] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 999.767861][T27665] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 999.912256][T27657] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 999.955643][T27665] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 999.993541][T27676] loop2: detected capacity change from 0 to 32768 [ 1000.011171][T27665] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1000.011559][T27665] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1000.078596][T27657] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1000.125394][T27676] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.9345 (27676) [ 1000.184411][T27657] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1000.184854][T27657] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1000.217479][T22801] ocfs2: Unmounting device (7,6) on (node local) [ 1000.250338][T27657] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1000.252812][T27657] BTRFS error (device loop0): open_ctree failed: -12 [ 1000.334332][T27676] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1000.360486][T27665] BTRFS error (device loop1): open_ctree failed: -12 [ 1000.397683][T27676] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 1000.491872][T27676] BTRFS info (device loop2): using free-space-tree [ 1000.579867][T27676] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1000.580272][T27676] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1000.659598][T27676] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1000.769490][T27676] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1000.875494][T27676] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1000.893082][T27676] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1000.950242][T27676] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1001.016795][T27676] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1001.055538][T20763] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 1001.094400][T27676] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1001.094787][T27676] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1001.150447][T27676] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1001.228551][T27676] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1001.359833][T20763] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1001.487939][T20763] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1001.573623][T20763] usb 5-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 1001.655018][T20763] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.778950][T20763] usb 5-1: config 0 descriptor?? [ 1002.006628][T27767] loop1: detected capacity change from 0 to 32768 [ 1002.114830][T27767] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1002.123196][T27767] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1002.172880][T27767] gfs2: fsid=syz:syz.0: journal 0 mapped with 23 extents in 0ms [ 1002.187719][ T5949] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1002.207079][ T5949] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1002.379784][T20763] hid (null): report_id 29495 is invalid [ 1002.388046][T20763] hid (null): bogus close delimiter [ 1002.393309][T20763] hid (null): unknown global tag 0xe [ 1002.505999][T20763] hid_parser_main: 5 callbacks suppressed [ 1002.506031][T20763] asus 0003:048D:CE50.0008: unknown main item tag 0x6 [ 1002.589446][T20763] asus 0003:048D:CE50.0008: report_id 29495 is invalid [ 1002.624678][T20763] asus 0003:048D:CE50.0008: item 0 2 1 8 parsing failed [ 1002.668473][T20763] asus 0003:048D:CE50.0008: Asus hid parse failed: -22 [ 1002.682282][T27676] BTRFS error (device loop2): open_ctree failed: -12 [ 1002.686513][ T5949] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 503ms [ 1002.703139][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1002.729037][T20763] asus 0003:048D:CE50.0008: probe with driver asus failed with error -22 [ 1002.810863][ T5949] gfs2: fsid=syz:syz.0: jid=0: Done [ 1002.816153][T27767] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1002.817335][T20763] usb 5-1: USB disconnect, device number 35 [ 1003.415206][T27796] loop6: detected capacity change from 0 to 512 [ 1003.494560][T27796] EXT4-fs: Ignoring removed orlov option [ 1003.524737][T27796] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1003.623122][T27796] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 1003.669234][T27796] EXT4-fs error (device loop6): ext4_iget_extra_inode:5103: inode #15: comm syz.6.9374: corrupted in-inode xattr: e_value size too large [ 1003.766600][T27808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9380'. [ 1003.798590][T27796] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.9374: couldn't read orphan inode 15 (err -117) [ 1003.845726][T27808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9380'. [ 1003.905603][T27796] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1004.142073][T27816] program syz.7.9382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1004.194594][T27817] program syz.7.9382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1004.286007][T27817] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1004.699628][T22801] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.087092][T27837] loop4: detected capacity change from 0 to 512 [ 1005.154230][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1005.154230][T27833] loop7: detected capacity change from 0 to 4096 [ 1005.268019][T27840] loop2: detected capacity change from 0 to 512 [ 1005.296497][T27837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1005.309472][T27844] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1005.372393][T27840] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 1005.379749][T27837] ext4 filesystem being mounted at /1586/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1005.384713][T27840] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 1005.447628][T27840] EXT4-fs (loop2): 1 truncate cleaned up [ 1005.480823][ T30] audit: type=1800 audit(1754991210.878:1748): pid=27833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.9389" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 1005.494466][T27840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1005.569511][T27840] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 4: comm syz.2.9391: lblock 0 mapped to illegal pblock 4 (length 1) [ 1005.587536][T27840] EXT4-fs (loop2): Remounting filesystem read-only [ 1005.643352][T27837] EXT4-fs warning (device loop4): verify_group_input:156: Last group not full [ 1005.811806][ T5858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.916376][ T5857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.108868][T27855] loop2: detected capacity change from 0 to 128 [ 1006.121275][T27835] loop6: detected capacity change from 0 to 32768 [ 1006.132716][ T5844] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1006.207914][T27835] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.9386 (27835) [ 1006.238412][T27855] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1006.314540][T27835] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1006.344563][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.357717][T27855] ext4 filesystem being mounted at /1532/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1006.392255][T27835] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 1006.434397][T27835] BTRFS info (device loop6): using free-space-tree [ 1006.669282][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.681634][ T5844] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1006.691421][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.706933][ T5844] usb 2-1: config 0 descriptor?? [ 1006.832862][ T5858] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1007.213201][ T5844] steelseries 0003:1038:1410.0009: not enough fields in HID_OUTPUT_REPORT 0 [ 1007.347824][T22801] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1007.430233][ T5967] usb 2-1: USB disconnect, device number 37 [ 1007.579669][T27895] loop7: detected capacity change from 0 to 1024 [ 1007.727431][T27895] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1007.818288][T27895] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1007.915062][ T30] audit: type=1800 audit(1754991213.439:1749): pid=27909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.9405" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1008.314147][T26402] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1008.750993][T27924] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1008.772286][ T5967] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1009.134015][T20763] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1009.331735][T27939] loop4: detected capacity change from 0 to 128 [ 1009.637231][ T5967] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1009.808667][ T5967] usb 7-1: Using ep0 maxpacket: 32 [ 1009.834438][ T5967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.835255][T27941] loop0: detected capacity change from 0 to 32768 [ 1009.886344][ T5967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.915189][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1009.942773][ T5967] usb 7-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1009.950360][T27941] gfs2: fsid=\]+_.)!]^\: Trying to join cluster "lock_nolock", "\]+_.)!]^\" [ 1009.960588][T27941] gfs2: fsid=\]+_.)!]^\: Now mounting FS (format 0)... [ 1009.970820][T27941] gfs2: not a GFS2 filesystem [ 1009.972436][ T5967] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.975491][T27941] gfs2: fsid=\]+_.)!]^\: can't read superblock [ 1009.990836][T27941] gfs2: fsid=\]+_.)!]^\: can't read superblock: -22 [ 1009.997689][ T5844] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1010.016908][ T5967] usb 7-1: config 0 descriptor?? [ 1010.091718][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1010.169429][ T9] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 1010.208993][ T5844] usb 3-1: Using ep0 maxpacket: 32 [ 1010.232608][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.240431][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.327445][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1010.340863][ T9] usb 2-1: Product: syz [ 1010.365537][ T9] usb 2-1: Manufacturer: syz [ 1010.399281][ T9] usb 2-1: SerialNumber: syz [ 1010.412694][ T5844] usb 3-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 1010.439736][ T9] usb 2-1: config 0 descriptor?? [ 1010.450502][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.495437][ T5844] usb 3-1: config 0 descriptor?? [ 1010.578752][ T5967] betop 0003:20BC:5500.000A: unknown main item tag 0x0 [ 1010.629237][T19428] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1010.637007][ T5967] betop 0003:20BC:5500.000A: unknown main item tag 0x0 [ 1010.703913][ T5967] betop 0003:20BC:5500.000A: unknown main item tag 0x0 [ 1010.758854][ T9] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1010.768588][ T5967] betop 0003:20BC:5500.000A: unknown main item tag 0x0 [ 1010.820313][ T5967] betop 0003:20BC:5500.000A: unknown main item tag 0x0 [ 1010.827311][ T5967] betop 0003:20BC:5500.000A: unknown main item tag 0x0 [ 1010.899236][ T5967] betop 0003:20BC:5500.000A: unknown main item tag 0x0 [ 1010.922819][T27974] loop0: detected capacity change from 0 to 512 [ 1010.926174][ T5967] betop 0003:20BC:5500.000A: unknown main item tag 0x0 [ 1010.956436][ T5844] chicony 0003:04F2:1236.000B: item fetching failed at offset 1/5 [ 1010.988193][ T5967] betop 0003:20BC:5500.000A: unknown main item tag 0x0 [ 1011.008299][ T5844] chicony 0003:04F2:1236.000B: Chicony hid parse failed: -22 [ 1011.037628][ T5967] betop 0003:20BC:5500.000A: unknown main item tag 0x0 [ 1011.054573][ T5844] chicony 0003:04F2:1236.000B: probe with driver chicony failed with error -22 [ 1011.100022][ T5967] betop 0003:20BC:5500.000A: hidraw0: USB HID v0.07 Device [HID 20bc:5500] on usb-dummy_hcd.6-1/input0 [ 1011.126808][T27974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1011.144292][T27979] loop7: detected capacity change from 0 to 8 [ 1011.157060][ T9] gspca_sunplus: reg_w_riv err -71 [ 1011.180649][T27974] ext4 filesystem being mounted at /1622/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1011.202374][ T9] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1011.212879][ T5967] betop 0003:20BC:5500.000A: no inputs found [ 1011.277220][ T5844] usb 3-1: USB disconnect, device number 52 [ 1011.279042][ T9] usb 2-1: USB disconnect, device number 38 [ 1011.290523][ T5967] usb 7-1: USB disconnect, device number 11 [ 1011.304793][T27979] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1011.319332][ T48] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1011.382660][T27979] SQUASHFS error: Failed to read block 0x9b: -5 [ 1011.420608][T27979] SQUASHFS error: Unable to read metadata cache entry [99] [ 1011.451334][T27979] SQUASHFS error: Unable to read inode 0x127 [ 1011.521772][T27981] fido_id[27981]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1011.547890][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 1011.605112][ T48] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1011.644177][ T48] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1011.695812][ T48] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1011.711780][T27986] bridge0: entered promiscuous mode [ 1011.758822][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.767963][T27986] macsec1: entered promiscuous mode [ 1011.825826][ T48] usb 5-1: config 0 descriptor?? [ 1011.882522][ T5861] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.064476][T27989] loop7: detected capacity change from 0 to 1024 [ 1012.203169][T27989] hfsplus: b-tree write err: -5, ino 4 [ 1012.383010][ T48] corsair-cpro 0003:1B1C:0C10.000C: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 1012.449282][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1012.570384][ T48] corsair-cpro 0003:1B1C:0C10.000C: probe with driver corsair-cpro failed with error -38 [ 1012.583870][T28001] binder: 28000:28001 ioctl c0306201 200000000380 returned -14 [ 1012.639074][ T48] usb 5-1: USB disconnect, device number 36 [ 1012.659586][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.714921][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.781013][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1012.822868][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.874530][ T9] usb 1-1: config 0 descriptor?? [ 1012.922561][T28002] fido_id[28002]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1012.982793][ T5974] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1013.368658][ T9] kye 0003:0458:5019.000D: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1013.460945][ T9] kye 0003:0458:5019.000D: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.0-1/input0 [ 1013.533145][ T9] kye 0003:0458:5019.000D: tablet-enabling feature report not found [ 1013.609791][ T9] kye 0003:0458:5019.000D: tablet enabling failed [ 1013.686507][ T9] usb 1-1: USB disconnect, device number 34 [ 1013.716322][ T5949] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1013.746578][T28028] loop2: detected capacity change from 0 to 1024 [ 1013.788929][T28028] EXT4-fs: Ignoring removed oldalloc option [ 1013.808740][T28033] loop6: detected capacity change from 0 to 512 [ 1013.858423][T28033] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1013.858962][T28028] EXT4-fs: Ignoring removed bh option [ 1013.894369][T28026] fido_id[28026]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1013.916782][ T5949] usb 8-1: Using ep0 maxpacket: 32 [ 1013.937010][T28033] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1013.949737][ T5949] usb 8-1: config 0 has an invalid interface number: 35 but max is 0 [ 1013.981802][ T5949] usb 8-1: config 0 has no interface number 0 [ 1013.994349][T28033] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 1014.015964][T28028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1014.030659][T28033] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80) [ 1014.087730][ T30] audit: type=1326 audit(1754991219.906:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28041 comm="syz.1.9457" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2f778ebe9 code=0x0 [ 1014.099380][ T5949] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1014.121565][T28033] EXT4-fs (loop6): Skipping orphan cleanup due to unknown ROCOMPAT features [ 1014.197672][ T5949] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.210632][T28033] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1014.271195][ T5949] usb 8-1: Product: syz [ 1014.275423][ T5949] usb 8-1: Manufacturer: syz [ 1014.314562][ T5949] usb 8-1: SerialNumber: syz [ 1014.348253][ T5949] usb 8-1: config 0 descriptor?? [ 1014.530655][ T5858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.564468][T22801] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.811570][ T5949] radio-si470x 8-1:0.35: DeviceID=0xc3d2 ChipID=0xf100 [ 1015.010681][ T5949] radio-si470x 8-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 1015.073393][ T5949] radio-si470x 8-1:0.35: si470x_get_scratch: si470x_get_report returned -71 [ 1015.094270][ T5949] radio-si470x 8-1:0.35: probe with driver radio-si470x failed with error -5 [ 1015.158500][T28056] loop2: detected capacity change from 0 to 4096 [ 1015.181775][ T5949] radio-raremono 8-1:0.35: this is not Thanko's Raremono. [ 1015.254357][ T5949] usb 8-1: USB disconnect, device number 3 [ 1015.279538][T28066] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1015.295747][ T9] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 1015.402215][ T48] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1015.501868][ T9] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1015.529378][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1015.573560][ T48] usb 5-1: Using ep0 maxpacket: 8 [ 1015.584911][ T48] usb 5-1: config 0 has no interfaces? [ 1015.590452][ T48] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1015.599388][ T9] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1015.624339][ T9] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1015.655884][ T9] usb 1-1: Manufacturer: syz [ 1015.685926][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.695640][ T9] usb 1-1: config 0 descriptor?? [ 1015.830140][ T48] usb 5-1: config 0 descriptor?? [ 1015.968106][T28072] loop6: detected capacity change from 0 to 4096 [ 1016.064516][T28072] NILFS (loop6): invalid segment: Checksum error in segment payload [ 1016.106366][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1016.107055][T28081] loop7: detected capacity change from 0 to 256 [ 1016.133865][T28080] siw: device registration error -23 [ 1016.140280][T28072] NILFS (loop6): trying rollback from an earlier position [ 1016.156866][T28061] loop4: detected capacity change from 0 to 1024 [ 1016.171881][T27658] udevd[27658]: failed to send result of seq 30569 to main daemon: Connection refused [ 1016.177257][ T9] rc_core: IR keymap rc-hauppauge not found [ 1016.254766][ T9] Registered IR keymap rc-empty [ 1016.272176][T28072] NILFS (loop6): recovery complete [ 1016.279261][ T5949] usb 5-1: USB disconnect, device number 37 [ 1016.287183][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1016.288869][T28081] FAT-fs (loop7): Directory bread(block 64) failed [ 1016.352748][T28081] FAT-fs (loop7): Directory bread(block 65) failed [ 1016.366710][T28081] FAT-fs (loop7): Directory bread(block 66) failed [ 1016.372924][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input43 [ 1016.380311][T28081] FAT-fs (loop7): Directory bread(block 67) failed [ 1016.440646][T28081] FAT-fs (loop7): Directory bread(block 68) failed [ 1016.447232][T28081] FAT-fs (loop7): Directory bread(block 69) failed [ 1016.479893][ C0] igorplugusb 1-1:0.0: receive overflow invalid: 80 [ 1016.499017][T28081] FAT-fs (loop7): Directory bread(block 70) failed [ 1016.540015][T28081] FAT-fs (loop7): Directory bread(block 71) failed [ 1016.550822][T28081] FAT-fs (loop7): Directory bread(block 72) failed [ 1016.566428][T28081] FAT-fs (loop7): Directory bread(block 73) failed [ 1016.699536][ T9] usb 1-1: USB disconnect, device number 35 [ 1016.897792][ T59] hfsplus: b-tree write err: -5, ino 4 [ 1016.946579][T28100] loop1: detected capacity change from 0 to 1024 [ 1017.154861][T14104] hfsplus: b-tree write err: -5, ino 4 [ 1017.448179][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1017.632254][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 1017.669541][ T9] usb 8-1: config 2 has an invalid interface number: 31 but max is 0 [ 1017.691813][ T9] usb 8-1: config 2 has no interface number 0 [ 1017.709643][ T9] usb 8-1: config 2 interface 31 has no altsetting 0 [ 1017.726432][T28127] loop1: detected capacity change from 0 to 8 [ 1017.740459][ T9] usb 8-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1017.759005][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.770303][ T9] usb 8-1: Product: syz [ 1017.778302][ T9] usb 8-1: Manufacturer: syz [ 1017.789997][T28127] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1017.790079][ T9] usb 8-1: SerialNumber: syz [ 1017.822553][T28127] SQUASHFS error: Failed to read block 0x9b: -5 [ 1017.829811][T28127] SQUASHFS error: Unable to read metadata cache entry [99] [ 1017.847728][T28127] SQUASHFS error: Unable to read inode 0x127 [ 1017.863048][T28116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1017.897576][T28124] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9485'. [ 1017.937134][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1018.432262][ T9] ch9200 8-1:2.31: probe with driver ch9200 failed with error -22 [ 1018.462907][T28142] input input44: cannot allocate more than FF_MAX_EFFECTS effects [ 1018.502262][ T9] usb 8-1: USB disconnect, device number 4 [ 1018.578371][T28147] loop2: detected capacity change from 0 to 128 [ 1018.611561][T28147] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1018.655405][T28147] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1018.754958][T28147] ext4 filesystem being mounted at /1548/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1019.233706][ T5858] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1019.607912][T28168] loop6: detected capacity change from 0 to 4096 [ 1019.710723][T28182] ptrace attach of "./syz-executor exec"[5861] was attempted by " _g;‹LP¢ZÌÇ'®M z\x0aX›âǨªŒæQE(j%ì\x5cK`4C™ÚÛ¬<î0ăóVm,Œ¬}\x09u3ç´Â:Rû_ïÞa®#&\x0cäëò‘_ÙƒSŽÅ‹YÞ‡ªÂRéˆqœ7p*[¢‹zž­ð¼ïÐÁø]þ=+æö9Ùÿ!ǺEª}ÂxùÓ”z\x0c•ÎUFàK4)„Ú\x0bU«Ò©›²¬Víë!NéniÕ`Ή„ŽôcÊ¡Dö²j”×QTŽ)rþ8Óƒã9»ë¿ÙvÑñÀ©Ô‡Kr=û‚/K´f¾7Ù|b¢–'I®qUéK¯ì蟢Axb&*`GsƒÁ²h’éêz*œ¢ÒQoqð\x07?Ü•µZßP¯_º,ô’…Ll¡$\x0aI,ÒŽ•¡Ú ÍÑ3Þµè§Îs#À.ü®×lèý=­?73ݲ™h½HÆKDÔðŒ?‘\x0a}íÔ0ó°'“±x‘éTÓ‚|¼ÎU…[¹ÅWP…³oQåñU,K)²Â7yq`“1p–[λ^ÊÙÖT;L0&©\x1b–çÔ¸ÖÄà…ãdÒôeóÖ´„4aÖ§{¥šcõÌ\x0dÏò’ÄêÔƒ¸„cQc¹0®P9r±ÿ€’,^˜€õ9º\x0bÙ)Êýé*.èjH—»}äÍÞ¤‹>Ì¥­‡½íº³ [ 1019.796264][T28185] loop2: detected capacity change from 0 to 512 [ 1019.983911][T28185] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1020.060778][T28185] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 1020.106061][T28185] System zones: 1-12 [ 1020.158793][T28185] EXT4-fs (loop2): 1 truncate cleaned up [ 1020.205403][T28185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1020.269785][T28185] EXT4-fs warning (device loop2): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 1020.429336][T28188] loop7: detected capacity change from 0 to 8192 [ 1020.470081][ T5858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1020.491866][T28188] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1020.989167][T28210] loop6: detected capacity change from 0 to 256 [ 1021.139475][T28217] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9518'. [ 1021.174362][T28210] FAT-fs (loop6): Directory bread(block 64) failed [ 1021.194286][T28210] FAT-fs (loop6): Directory bread(block 65) failed [ 1021.241077][T28210] FAT-fs (loop6): Directory bread(block 66) failed [ 1021.268432][T28210] FAT-fs (loop6): Directory bread(block 67) failed [ 1021.282860][T28210] FAT-fs (loop6): Directory bread(block 68) failed [ 1021.331978][T28210] FAT-fs (loop6): Directory bread(block 69) failed [ 1021.384034][T28210] FAT-fs (loop6): Directory bread(block 70) failed [ 1021.400334][T28210] FAT-fs (loop6): Directory bread(block 71) failed [ 1021.436570][T28210] FAT-fs (loop6): Directory bread(block 72) failed [ 1021.447975][T28222] loop1: detected capacity change from 0 to 512 [ 1021.470767][T28222] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1021.481982][T28210] FAT-fs (loop6): Directory bread(block 73) failed [ 1021.555188][T28222] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #16: comm syz.1.9520: invalid indirect mapped block 4294967295 (level 0) [ 1021.613506][T19428] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1021.686351][T28222] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #16: comm syz.1.9520: invalid indirect mapped block 4294967295 (level 1) [ 1021.746264][T28222] EXT4-fs (loop1): 1 orphan inode deleted [ 1021.760225][T28222] EXT4-fs (loop1): 1 truncate cleaned up [ 1021.779455][T28222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1021.920976][T28222] EXT4-fs error (device loop1): htree_dirblock_to_tree:1077: inode #2: block 13: comm syz.1.9520: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 1021.945328][ T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1022.050853][T28233] loop0: detected capacity change from 0 to 2048 [ 1022.136784][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1022.172825][ T9] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1022.185273][T28233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1022.199241][ T9] usb 3-1: config 0 has no interface number 0 [ 1022.219614][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1022.240087][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.250809][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.258802][ T9] usb 3-1: Product: syz [ 1022.263917][ T9] usb 3-1: Manufacturer: syz [ 1022.280894][ T9] usb 3-1: SerialNumber: syz [ 1022.298111][ T9] usb 3-1: config 0 descriptor?? [ 1022.383564][T28233] EXT4-fs error (device loop0): ext4_ext_precache:632: inode #2: comm syz.0.9524: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 1022.517605][T28233] EXT4-fs (loop0): Remounting filesystem read-only [ 1022.703896][ T9] radio-si470x 3-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 1022.711333][ T5861] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.782926][ T9] radio-si470x 3-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1022.812432][ T5974] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1022.895937][ T9] radio-si470x 3-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 1022.912055][ T9] radio-si470x 3-1:0.35: si470x_get_scratch: si470x_get_report returned -71 [ 1022.956215][T28257] IPVS: Unknown mcast interface: bridge_slave_0 [ 1022.959409][ T9] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 1023.056520][ T9] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 1023.085881][ T9] usb 3-1: USB disconnect, device number 53 [ 1023.820916][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1023.939063][T28290] gfs2: not a GFS2 filesystem [ 1024.034397][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1024.071373][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1024.088110][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.109355][T28287] loop6: detected capacity change from 0 to 4096 [ 1024.115008][ T9] usb 2-1: Product: syz [ 1024.129975][ T9] usb 2-1: Manufacturer: syz [ 1024.134627][ T9] usb 2-1: SerialNumber: syz [ 1024.192648][T28262] loop0: detected capacity change from 0 to 32768 [ 1024.201078][T28262] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.9532 (28262) [ 1024.232478][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1024.265031][T28262] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1024.269085][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 1024.283873][T28287] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1024.312140][T28262] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 1024.323154][T28262] BTRFS info (device loop0): using free-space-tree [ 1024.509216][T28316] loop2: detected capacity change from 0 to 2048 [ 1024.545390][ T9] r8152-cfgselector 2-1: Needed 1 retries to read version [ 1024.569299][T22801] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.657192][T28316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1024.670110][ T5967] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1024.707279][T28316] ext4 filesystem being mounted at /1555/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1024.742871][ T5861] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1024.775447][ T5949] r8152-cfgselector 2-1: USB disconnect, device number 39 [ 1024.846817][T28325] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1024.850082][ T5967] usb 8-1: Using ep0 maxpacket: 16 [ 1024.909562][ T5967] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.924162][ T5967] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1024.969651][ T5967] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1025.013083][ T5967] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1025.059142][ T5967] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1025.103482][ T5858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.136856][ T5967] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1025.146586][ T5967] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1025.166064][ T5967] usb 8-1: Manufacturer: syz [ 1025.195565][ T5967] usb 8-1: config 0 descriptor?? [ 1025.316970][T28333] netlink: 'syz.2.9551': attribute type 7 has an invalid length. [ 1025.325531][T28333] netlink: 'syz.2.9551': attribute type 1 has an invalid length. [ 1025.668896][ T5967] rc_core: IR keymap rc-hauppauge not found [ 1025.674866][ T5967] Registered IR keymap rc-empty [ 1025.699905][ T5967] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1025.764843][ T5967] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1025.783222][ T5936] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1025.822886][ T5967] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1025.877559][ T5967] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input45 [ 1025.904045][T28348] ucma_write: process 3254 (syz.4.9557) changed security contexts after opening file descriptor, this is not allowed. [ 1025.954160][ T5967] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1025.979069][ T5936] usb 2-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 1026.006936][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.029216][ T5967] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1026.080877][ T5967] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1026.091484][ T5936] usb 2-1: config 0 descriptor?? [ 1026.151357][ T5936] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 1026.172324][ T5967] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1026.209432][ T5936] dvb-usb: bulk message failed: -22 (3/0) [ 1026.230942][ T5967] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1026.252558][ T5936] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1026.269725][ T5967] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1026.306163][ T5936] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 1026.345814][ T5967] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1026.354767][ T5936] usb 2-1: media controller created [ 1026.365350][ T5936] dvb-usb: bulk message failed: -22 (5/0) [ 1026.374739][ T5967] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1026.403261][ T5936] dvb-usb: MAC address reading failed. [ 1026.431189][ T5967] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1026.450599][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1026.488549][ T5967] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1026.505157][ T5936] dvb-usb: bulk message failed: -22 (6/0) [ 1026.513262][ T5936] dvb-usb: bulk message failed: -22 (6/0) [ 1026.519596][ T5936] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 1026.530405][ T5967] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 1026.566904][ T5936] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input46 [ 1026.583245][T28366] wireguard0: entered promiscuous mode [ 1026.588846][ T5967] mceusb 8-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 1026.660806][ T5967] usb 8-1: USB disconnect, device number 5 [ 1026.667503][ T5936] dvb-usb: schedule remote query interval to 100 msecs. [ 1026.705583][ T5936] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 1026.768484][ T5936] usb 2-1: USB disconnect, device number 40 [ 1026.937457][ T48] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 1027.034562][ T5936] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 1027.080505][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1027.115514][ T48] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1027.134100][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.162684][ T48] usb 5-1: config 0 descriptor?? [ 1027.230518][ T48] cp210x 5-1:0.0: cp210x converter detected [ 1027.498275][T28359] loop2: detected capacity change from 0 to 32768 [ 1027.545316][T28359] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.9559 (28359) [ 1027.618410][T28359] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1027.654809][T28359] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 1027.689258][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1027.699978][T28359] BTRFS info (device loop2): using free-space-tree [ 1027.755294][ T48] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1027.856184][T28402] loop1: detected capacity change from 0 to 256 [ 1027.884202][T28412] loop6: detected capacity change from 0 to 128 [ 1027.897194][T28402] exfat: Deprecated parameter 'utf8' [ 1027.904605][T28402] exfat: Deprecated parameter 'namecase' [ 1027.911241][T28402] exfat: Deprecated parameter 'namecase' [ 1027.917319][T28402] exfat: Deprecated parameter 'utf8' [ 1027.927941][ T5949] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1027.944172][ T48] usb 5-1: USB disconnect, device number 38 [ 1027.966154][ T48] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1028.011469][T28402] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1028.051962][ T48] cp210x 5-1:0.0: device disconnected [ 1028.106823][ T5949] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.142436][ T5949] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1028.204454][ T5858] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1028.219339][ T5949] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1028.249095][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1028.290113][ T5949] usb 1-1: SerialNumber: syz [ 1028.525176][ T5949] usb 1-1: 0:2 : does not exist [ 1028.641255][ T5949] usb 1-1: USB disconnect, device number 36 [ 1028.755346][ T6026] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1028.966554][ T6026] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1028.985900][ T6026] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1029.061589][ T6026] usb 2-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 1029.092624][ T6026] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.131855][T28437] loop4: detected capacity change from 0 to 1024 [ 1029.137153][ T6026] usb 2-1: config 0 descriptor?? [ 1029.299189][ T5967] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1029.474525][ T5967] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1029.518242][ T5967] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.553304][ T5967] usb 8-1: config 0 descriptor?? [ 1029.579105][ T6026] wacom 0003:056A:0045.000E: Unknown device_type for 'HID 056a:0045'. Assuming pen. [ 1029.598638][ T5967] cp210x 8-1:0.0: cp210x converter detected [ 1029.652293][ T6026] wacom 0003:056A:0045.000E: hidraw0: USB HID v0.00 Device [HID 056a:0045] on usb-dummy_hcd.1-1/input0 [ 1029.705864][T28454] loop2: detected capacity change from 0 to 64 [ 1029.738959][ T6026] input: Wacom Intuos2 12x18 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0045.000E/input/input47 [ 1029.800292][T28457] loop6: detected capacity change from 0 to 128 [ 1029.868974][T28457] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1029.898778][T28457] ext4 filesystem being mounted at /357/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1029.913510][ T6026] usb 2-1: USB disconnect, device number 41 [ 1030.206272][ T5967] cp210x 8-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1030.230334][ T5967] cp210x 8-1:0.0: GPIO initialisation failed: -71 [ 1030.246112][T22801] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1030.277480][ T5967] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1030.304824][ T5967] usb 8-1: USB disconnect, device number 6 [ 1030.326428][ T5967] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1030.352453][ T5967] cp210x 8-1:0.0: device disconnected [ 1030.527306][T28477] bridge0: port 3(team0) entered disabled state [ 1031.112643][T28499] loop2: detected capacity change from 0 to 64 [ 1031.295332][T28502] loop4: detected capacity change from 0 to 128 [ 1031.327152][T28502] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1031.400664][T28502] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1031.504574][T28504] loop7: detected capacity change from 0 to 512 [ 1031.539593][T28504] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz.7.9603: bg 0: block 5: invalid block bitmap [ 1031.583143][T28471] loop0: detected capacity change from 0 to 32768 [ 1031.632434][T28504] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1031.660982][T28471] JBD2: Ignoring recovery information on journal [ 1031.697972][T28504] EXT4-fs error (device loop7): ext4_free_branches:1020: inode #11: comm syz.7.9603: invalid indirect mapped block 3 (level 2) [ 1031.750495][T28504] EXT4-fs (loop7): 2 truncates cleaned up [ 1031.773096][T28504] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1031.778216][T28471] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1031.834334][T28478] loop1: detected capacity change from 0 to 32768 [ 1031.870408][T28471] (syz.0.9591,28471,1):ocfs2_check_dir_entry:321 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 1031.878319][T28478] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.9595 (28478) [ 1031.906381][T26402] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.941237][T28478] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1031.985701][ T5949] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1031.993712][T28478] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 1032.021380][T28478] BTRFS info (device loop1): using free-space-tree [ 1032.072384][ T5861] ocfs2: Unmounting device (7,0) on (node local) [ 1032.148747][ T5949] usb 5-1: Using ep0 maxpacket: 32 [ 1032.160878][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.187190][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.202768][ T5949] usb 5-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.00 [ 1032.213280][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.253984][ T5949] usb 5-1: config 0 descriptor?? [ 1032.545378][T28544] loop7: detected capacity change from 0 to 256 [ 1032.556343][ T5856] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1032.561127][T28544] exfat: Deprecated parameter 'utf8' [ 1032.575347][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1032.592796][T28544] exfat: Deprecated parameter 'namecase' [ 1032.611105][T28544] exfat: Deprecated parameter 'namecase' [ 1032.620283][T28544] exfat: Deprecated parameter 'utf8' [ 1032.682287][T28544] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1032.735556][ T5949] asus 0003:0B05:1866.000F: item fetching failed at offset 3/5 [ 1032.776034][ T5949] asus 0003:0B05:1866.000F: Asus hid parse failed: -22 [ 1032.800683][ T5949] asus 0003:0B05:1866.000F: probe with driver asus failed with error -22 [ 1032.927281][ T5936] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1032.961839][ T5967] usb 5-1: USB disconnect, device number 39 [ 1033.121696][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.146465][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.174272][ T5936] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1033.210262][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.229785][T28552] loop7: detected capacity change from 0 to 256 [ 1033.233607][ T5936] usb 3-1: config 0 descriptor?? [ 1033.338879][T28552] FAT-fs (loop7): Directory bread(block 64) failed [ 1033.345455][T28552] FAT-fs (loop7): Directory bread(block 65) failed [ 1033.355035][T28557] loop1: detected capacity change from 0 to 1024 [ 1033.389898][T28552] FAT-fs (loop7): Directory bread(block 66) failed [ 1033.398172][T28552] FAT-fs (loop7): Directory bread(block 67) failed [ 1033.410344][T28557] hfsplus: bad catalog entry type [ 1033.416268][T28552] FAT-fs (loop7): Directory bread(block 68) failed [ 1033.447787][T28552] FAT-fs (loop7): Directory bread(block 69) failed [ 1033.464289][T28552] FAT-fs (loop7): Directory bread(block 70) failed [ 1033.484111][T28552] FAT-fs (loop7): Directory bread(block 71) failed [ 1033.491819][T28552] FAT-fs (loop7): Directory bread(block 72) failed [ 1033.499880][T28552] FAT-fs (loop7): Directory bread(block 73) failed [ 1033.507045][T14104] hfsplus: b-tree write err: -5, ino 4 [ 1033.662922][ T5936] kye 0003:0458:5019.0010: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1033.718643][ T5936] kye 0003:0458:5019.0010: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1033.749496][ T5936] kye 0003:0458:5019.0010: tablet-enabling feature report not found [ 1033.775004][ T5936] kye 0003:0458:5019.0010: tablet enabling failed [ 1033.795081][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1033.871192][ T5936] usb 3-1: USB disconnect, device number 54 [ 1033.959930][T28571] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9624'. [ 1034.039626][T28576] loop7: detected capacity change from 0 to 512 [ 1034.047379][T28576] EXT4-fs: Ignoring removed i_version option [ 1034.061356][T28576] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1034.106108][T28576] EXT4-fs (loop7): 1 truncate cleaned up [ 1034.114237][T28576] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1034.313157][T26402] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1034.423114][ T5949] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1034.627320][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.660513][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1034.686435][ T5949] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 1034.720523][T28597] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9637'. [ 1034.724167][T28599] loop7: detected capacity change from 0 to 64 [ 1034.739635][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.747214][T28597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9637'. [ 1034.773435][ T5949] usb 5-1: config 0 descriptor?? [ 1034.796268][T28601] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1034.802817][T28601] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1034.859367][T28601] vhci_hcd vhci_hcd.0: Device attached [ 1035.070906][ T5936] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1035.119647][ T6026] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 1035.181550][ T5949] hid-retrode 0003:0403:97C1.0011: item fetching failed at offset 3/5 [ 1035.220527][ T5949] hid-retrode 0003:0403:97C1.0011: probe with driver hid-retrode failed with error -22 [ 1035.290739][ T5936] usb 1-1: Using ep0 maxpacket: 16 [ 1035.318457][ T5936] usb 1-1: config 0 has no interfaces? [ 1035.324046][ T5936] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1035.335454][T28615] loop2: detected capacity change from 0 to 4096 [ 1035.360560][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.373872][ T5844] usb 5-1: USB disconnect, device number 40 [ 1035.388114][T28615] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 1035.415139][ T5936] usb 1-1: config 0 descriptor?? [ 1035.620175][T28619] loop7: detected capacity change from 0 to 4096 [ 1035.641232][T28602] usbip_core: unknown command [ 1035.643227][ T5936] usb 1-1: USB disconnect, device number 37 [ 1035.649648][T28602] vhci_hcd: unknown pdu 0 [ 1035.660755][T28619] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1035.669564][T28602] usbip_core: unknown command [ 1035.700177][T19428] vhci_hcd: stop threads [ 1035.705196][T19428] vhci_hcd: release socket [ 1035.717312][T19428] vhci_hcd: disconnect device [ 1035.770329][T28619] ntfs3(loop7): Failed to initialize $Extend/$Reparse. [ 1035.896925][ T5936] IPVS: starting estimator thread 0... [ 1035.972123][T28629] loop2: detected capacity change from 0 to 512 [ 1036.014530][T28629] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1036.034313][T28627] IPVS: using max 21 ests per chain, 50400 per kthread [ 1036.421730][T28644] [U]  [ 1036.562802][ T5936] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1036.689076][T28651] loop2: detected capacity change from 0 to 4096 [ 1036.717315][T28659] loop6: detected capacity change from 0 to 8 [ 1036.749694][ T5936] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1036.773788][T28660] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1036.777326][T28659] SQUASHFS error: Failed to read block 0x2d7: -5 [ 1036.804709][ T5936] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1036.842552][T28659] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 1036.851320][ T5936] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1036.879812][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.918190][T28640] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1036.970659][ T5936] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1037.057315][T28668] loop7: detected capacity change from 0 to 512 [ 1037.130620][T28668] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1037.502921][T28677] loop2: detected capacity change from 0 to 4096 [ 1037.512165][T26402] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.516846][T28682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9673'. [ 1037.532266][T28683] loop1: detected capacity change from 0 to 1024 [ 1037.537345][ T5967] usb 1-1: USB disconnect, device number 38 [ 1037.539215][T28682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9673'. [ 1037.558514][T28682] netlink: 'syz.4.9673': attribute type 13 has an invalid length. [ 1037.568427][T28682] netlink: 'syz.4.9673': attribute type 12 has an invalid length. [ 1037.656512][ T49] hfsplus: b-tree write err: -5, ino 4 [ 1038.073209][T19428] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1038.121656][T28698] loop1: detected capacity change from 0 to 512 [ 1038.190921][T28700] loop2: detected capacity change from 0 to 2048 [ 1038.214163][T28700] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1038.228969][T28698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1038.276552][T28698] ext4 filesystem being mounted at /1625/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1038.311438][T28708] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9685'. [ 1038.318988][T28707] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1038.321181][T28708] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 1038.339709][T28708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1038.344997][T28705] loop0: detected capacity change from 0 to 512 [ 1038.421312][T28705] EXT4-fs (loop0): 1 orphan inode deleted [ 1038.434031][ T49] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1038.461848][T28705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1038.477109][ T49] EXT4-fs error (device loop0): ext4_release_dquot:6967: comm kworker/u8:3: Failed to release dquot type 1 [ 1038.513253][T28705] ext4 filesystem being mounted at /1655/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1038.607050][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.652724][T28714] loop4: detected capacity change from 0 to 2048 [ 1038.663828][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1038.694032][T28716] loop7: detected capacity change from 0 to 1764 [ 1038.706332][ T5861] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.731123][T28716] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 1038.732990][T28714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1038.796070][T28714] ext4 filesystem being mounted at /1633/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1038.955104][T28726] loop0: detected capacity change from 0 to 256 [ 1039.018027][ T5857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.061561][T28726] FAT-fs (loop0): Directory bread(block 64) failed [ 1039.081524][T28726] FAT-fs (loop0): Directory bread(block 65) failed [ 1039.084760][ T5949] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1039.088226][T28726] FAT-fs (loop0): Directory bread(block 66) failed [ 1039.133797][T28732] loop1: detected capacity change from 0 to 64 [ 1039.149513][T28726] FAT-fs (loop0): Directory bread(block 67) failed [ 1039.165634][T28726] FAT-fs (loop0): Directory bread(block 68) failed [ 1039.173089][T28726] FAT-fs (loop0): Directory bread(block 69) failed [ 1039.195422][T28726] FAT-fs (loop0): Directory bread(block 70) failed [ 1039.215834][T28726] FAT-fs (loop0): Directory bread(block 71) failed [ 1039.232575][T28726] FAT-fs (loop0): Directory bread(block 72) failed [ 1039.244727][ T5949] usb 3-1: Using ep0 maxpacket: 16 [ 1039.253413][T28726] FAT-fs (loop0): Directory bread(block 73) failed [ 1039.258808][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.300252][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1039.334775][ T5949] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1039.346139][T28736] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9697'. [ 1039.363438][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.382712][ T5949] usb 3-1: config 0 descriptor?? [ 1039.583726][T28742] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9700'. [ 1039.827443][ T5949] hid_parser_main: 6 callbacks suppressed [ 1039.827476][ T5949] apple 0003:05AC:024B.0012: unknown main item tag 0x6 [ 1039.883709][ T5949] apple 0003:05AC:024B.0012: invalid report_size 24312 [ 1039.909898][ T5949] apple 0003:05AC:024B.0012: item 0 2 1 7 parsing failed [ 1039.937821][ T5949] apple 0003:05AC:024B.0012: parse failed [ 1039.955055][ T5949] apple 0003:05AC:024B.0012: probe with driver apple failed with error -22 [ 1039.978192][T28756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9707'. [ 1040.025549][ T6026] vhci_hcd: vhci_device speed not set [ 1040.057197][ T5844] usb 3-1: USB disconnect, device number 55 [ 1040.241981][T28762] loop0: detected capacity change from 0 to 128 [ 1040.291543][T28764] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1040.343106][T28762] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1040.355488][T28764] CIFS mount error: No usable UNC path provided in device string! [ 1040.355488][T28764] [ 1040.374575][T28767] loop7: detected capacity change from 0 to 64 [ 1040.383085][T28764] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1040.410199][T28762] ext4 filesystem being mounted at /1659/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1040.449395][T28767] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1040.515228][T28767] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 1040.671800][ T5861] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1040.686833][T28755] loop1: detected capacity change from 0 to 32768 [ 1040.707885][T28771] loop4: detected capacity change from 0 to 256 [ 1040.895646][T28771] FAT-fs (loop4): Directory bread(block 64) failed [ 1040.921952][T28771] FAT-fs (loop4): Directory bread(block 65) failed [ 1040.944617][T28775] loop7: detected capacity change from 0 to 4096 [ 1040.953946][T28771] FAT-fs (loop4): Directory bread(block 66) failed [ 1040.967388][T28771] FAT-fs (loop4): Directory bread(block 67) failed [ 1040.984188][T28771] FAT-fs (loop4): Directory bread(block 68) failed [ 1040.999271][T28779] loop2: detected capacity change from 0 to 128 [ 1041.008098][T28771] FAT-fs (loop4): Directory bread(block 69) failed [ 1041.014736][T28775] ntfs3(loop7): try to read out of volume at offset 0x3fffffc0c00 [ 1041.023279][T28771] FAT-fs (loop4): Directory bread(block 70) failed [ 1041.045894][T28779] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1041.059712][T28771] FAT-fs (loop4): Directory bread(block 71) failed [ 1041.067265][T28775] ntfs3(loop7): try to read out of volume at offset 0x3fffffc0c00 [ 1041.081988][T28779] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1041.082489][T28771] FAT-fs (loop4): Directory bread(block 72) failed [ 1041.102400][T28775] ntfs3(loop7): try to read out of volume at offset 0x3fffffc0c00 [ 1041.121305][T28775] ntfs3(loop7): try to read out of volume at offset 0x3fffffc0c00 [ 1041.129639][T28771] FAT-fs (loop4): Directory bread(block 73) failed [ 1041.156410][T28775] ntfs3(loop7): try to read out of volume at offset 0x3fffffc1c00 [ 1041.199866][T28781] loop0: detected capacity change from 0 to 512 [ 1041.207930][T28775] ntfs3(loop7): try to read out of volume at offset 0x3fffffc2c00 [ 1041.221126][T28775] ntfs3(loop7): try to read out of volume at offset 0x3fffffc4c00 [ 1041.240409][T28775] ntfs3(loop7): try to read out of volume at offset 0x3fffffc8c00 [ 1041.253890][T28775] ntfs3(loop7): try to read out of volume at offset 0x3fffffd0c00 [ 1041.254566][T28781] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1041.275857][T28775] ntfs3(loop7): try to read out of volume at offset 0x3fffffe0c00 [ 1041.303958][T28781] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1041.304099][ T49] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1041.349985][T28781] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 1041.374653][T28781] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 1041.383239][T28781] System zones: 0-2, 18-18, 34-34 [ 1041.408982][T28781] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.9719: iget: bad i_size value: 360287970189639680 [ 1041.510527][T28781] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.9719: couldn't read orphan inode 15 (err -117) [ 1041.581715][T28781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1041.638141][T28792] loop2: detected capacity change from 0 to 128 [ 1041.726146][T28792] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1041.797874][T28795] loop1: detected capacity change from 0 to 4096 [ 1041.870394][ T5861] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.872549][T28792] ext4 filesystem being mounted at /1585/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1042.037329][T28798] loop7: detected capacity change from 0 to 512 [ 1042.062769][ T5858] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1042.107384][T28805] loop0: detected capacity change from 0 to 64 [ 1042.454438][T28809] wireguard1: entered promiscuous mode [ 1042.461647][T28819] loop7: detected capacity change from 0 to 256 [ 1042.523956][T28821] loop6: detected capacity change from 0 to 256 [ 1042.524939][T28819] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 1042.600371][T28821] FAT-fs (loop6): Directory bread(block 64) failed [ 1042.628774][T28821] FAT-fs (loop6): Directory bread(block 65) failed [ 1042.637001][T28813] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9730'. [ 1042.677457][T28821] FAT-fs (loop6): Directory bread(block 66) failed [ 1042.687727][T28825] loop2: detected capacity change from 0 to 256 [ 1042.696940][T28825] exfat: Deprecated parameter 'utf8' [ 1042.702920][T28825] exfat: Deprecated parameter 'namecase' [ 1042.708903][T28825] exfat: Deprecated parameter 'namecase' [ 1042.713164][T28821] FAT-fs (loop6): Directory bread(block 67) failed [ 1042.716629][T28825] exfat: Deprecated parameter 'utf8' [ 1042.752377][T28825] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1042.767970][T28821] FAT-fs (loop6): Directory bread(block 68) failed [ 1042.774529][T28821] FAT-fs (loop6): Directory bread(block 69) failed [ 1042.834732][T28821] FAT-fs (loop6): Directory bread(block 70) failed [ 1042.842049][T28821] FAT-fs (loop6): Directory bread(block 71) failed [ 1042.877294][T28821] FAT-fs (loop6): Directory bread(block 72) failed [ 1042.900973][T28821] FAT-fs (loop6): Directory bread(block 73) failed [ 1042.972644][T28828] loop0: detected capacity change from 0 to 64 [ 1043.154498][T28835] loop2: detected capacity change from 0 to 1024 [ 1043.198235][T28835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1043.270432][ T5861] Trying to free block not in datazone [ 1043.292812][ T6026] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1043.321392][ T5844] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1043.329461][ T5861] Trying to free block not in datazone [ 1043.360157][ T5861] Trying to free block not in datazone [ 1043.387778][ T5861] Trying to free block not in datazone [ 1043.405416][ T5861] Trying to free block not in datazone [ 1043.426318][ T5861] Trying to free block not in datazone [ 1043.442021][ T5861] Trying to free block not in datazone [ 1043.455168][ T5861] Trying to free block not in datazone [ 1043.462773][ T6026] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1043.475772][ T5861] Trying to free block not in datazone [ 1043.481422][ T6026] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1043.500797][ T5844] usb 5-1: Using ep0 maxpacket: 16 [ 1043.506410][ T5861] Trying to free block not in datazone [ 1043.519945][ T6026] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1043.529467][ T5861] Trying to free block not in datazone [ 1043.541084][T19428] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1043.548846][ T5861] Trying to free block not in datazone [ 1043.559533][ T5861] Trying to free block not in datazone [ 1043.576671][ T6026] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.587860][ T5844] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.600847][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1043.617390][ T5861] Trying to free block not in datazone [ 1043.623456][T28831] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1043.632847][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1043.637174][ T6026] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1043.656321][ T5844] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1043.671249][ T5844] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1043.695422][ T5844] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1043.713339][ T5858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.720125][ T5844] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1043.738441][ T5844] usb 5-1: Manufacturer: syz [ 1043.749568][ T5844] usb 5-1: config 0 descriptor?? [ 1044.043488][ T5967] usb 8-1: USB disconnect, device number 7 [ 1044.074138][T28851] loop0: detected capacity change from 0 to 4096 [ 1044.152075][T19428] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1044.169713][ T5844] rc_core: IR keymap rc-hauppauge not found [ 1044.176517][ T5844] Registered IR keymap rc-empty [ 1044.188744][ T5844] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1044.225441][ T5844] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1044.266990][ T5844] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1044.319931][ T5844] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input50 [ 1044.380598][ T5844] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1044.424834][ T5844] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1044.465264][ T5844] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1044.494690][ T5844] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1044.527094][ T5844] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1044.550155][ T5844] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1044.597483][ T5844] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1044.624757][ T5844] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1044.637708][T28868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9755'. [ 1044.675319][ T5844] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1044.692140][T28868] veth1_macvtap: left allmulticast mode [ 1044.704492][T28868] veth1_macvtap: left promiscuous mode [ 1044.734982][T28868] bridge0: port 4(macsec0) entered disabled state [ 1044.750455][ T5844] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1044.800736][ T5844] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1044.812494][T28868] macsec0 (unregistering): left allmulticast mode [ 1044.820584][ T5844] mceusb 5-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 1044.851604][ T5844] usb 5-1: USB disconnect, device number 41 [ 1044.859510][T28868] macsec0 (unregistering): left promiscuous mode [ 1044.882310][T28868] bridge0: port 4(macsec0) entered disabled state [ 1044.900687][T28875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9770'. [ 1044.932366][T28875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9770'. [ 1045.309713][T28887] loop0: detected capacity change from 0 to 1024 [ 1045.363908][T28887] EXT4-fs: Ignoring removed nobh option [ 1045.391715][T28887] EXT4-fs: Ignoring removed bh option [ 1045.437748][T28887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1045.454876][T28896] loop1: detected capacity change from 0 to 256 [ 1045.522743][T28896] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1f7c91f3, utbl_chksum : 0xe619d30d) [ 1045.569660][ T5861] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1045.628614][T28896] exFAT-fs (loop1): valid_size(100667392) is greater than size(4096) [ 1045.672150][T28898] loop7: detected capacity change from 0 to 4096 [ 1045.844784][T28904] loop0: detected capacity change from 0 to 1024 [ 1045.913144][ T30] audit: type=1804 audit(1754991253.310:1751): pid=28904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.9772" name=2F6E6577726F6F742F313637302F66696C65312FE91F7189591E9233614B dev="loop0" ino=25 res=1 errno=0 [ 1046.001756][T28904] Process accounting resumed [ 1046.013743][T28908] loop4: detected capacity change from 0 to 1024 [ 1046.050968][T28908] hfsplus: bad catalog entry type [ 1046.203247][ T59] hfsplus: b-tree write err: -5, ino 4 [ 1046.425188][ T5936] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1046.567978][ T5936] usb 3-1: Using ep0 maxpacket: 8 [ 1046.586522][ T5936] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1046.586570][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.586609][ T5936] usb 3-1: Product: syz [ 1046.586638][ T5936] usb 3-1: Manufacturer: syz [ 1046.586667][ T5936] usb 3-1: SerialNumber: syz [ 1046.593474][ T5936] usb 3-1: config 0 descriptor?? [ 1046.609622][ T5936] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1046.609682][ T5936] usb 3-1: setting power ON [ 1046.609710][ T5936] dvb-usb: bulk message failed: -22 (2/0) [ 1046.621179][ T5936] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1046.628301][ T5936] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1046.628372][ T5936] usb 3-1: media controller created [ 1046.689005][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1046.719785][ T5936] usb 3-1: selecting invalid altsetting 6 [ 1046.719870][ T5936] usb 3-1: digital interface selection failed (-22) [ 1046.719897][ T5936] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1046.739057][ T5936] usb 3-1: setting power OFF [ 1046.739203][ T5936] dvb-usb: bulk message failed: -22 (2/0) [ 1046.739673][ T5936] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1046.739703][ T5936] (NULL device *): no alternate interface [ 1046.797564][T28914] dvb-usb: bulk message failed: -22 (3/0) [ 1046.797644][T28914] dvb-usb: bulk message failed: -22 (3/0) [ 1046.846384][ T5936] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1046.853254][ T5936] usb 3-1: USB disconnect, device number 56 [ 1047.033646][T28934] loop7: detected capacity change from 0 to 4096 [ 1047.119069][T28934] ntfs3(loop7): ino=b, Correct links count -> 1. [ 1047.119946][T28934] ntfs3(loop7): ino=18, mi_enum_attr [ 1047.119986][T28934] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1047.264066][T28940] loop4: detected capacity change from 0 to 4096 [ 1047.350352][T28940] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1047.360935][T28941] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1047.428131][T28943] netlink: 'syz.7.9788': attribute type 32 has an invalid length. [ 1047.441937][T28940] Remounting filesystem read-only [ 1047.457808][T28943] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9788'. [ 1047.484641][T28943] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 1047.671847][T28943] Zero length message leads to an empty skb [ 1047.726283][T28938] loop0: detected capacity change from 0 to 32768 [ 1047.745161][T28938] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.9786 (28938) [ 1047.782672][T28938] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1047.805214][T28938] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 1047.838326][T28938] BTRFS info (device loop0): using free-space-tree [ 1048.191021][T22803] Bluetooth: hci4: command tx timeout [ 1048.422873][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1048.455362][ T5861] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1048.527741][T28989] loop1: detected capacity change from 0 to 256 [ 1048.616934][T28987] loop6: detected capacity change from 0 to 2048 [ 1048.625452][T28987] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1048.718067][T28991] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1048.925196][T28994] loop2: detected capacity change from 0 to 4096 [ 1048.939348][T28997] loop4: detected capacity change from 0 to 1024 [ 1048.996955][T28994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1049.037827][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1049.040488][T14104] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1049.086965][T28994] EXT4-fs (loop2): resizing filesystem from 512 to 0 blocks [ 1049.149827][T28994] EXT4-fs warning (device loop2): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 1049.451815][ T5858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.825404][T29007] loop1: detected capacity change from 0 to 4096 [ 1049.911307][T29007] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 1050.180498][T29021] team0: Device gtp0 is of different type [ 1050.307792][T29028] comedi comedi3: pcl812: I/O port conflict (0x4f27,16) [ 1050.309381][T29027] loop0: detected capacity change from 0 to 128 [ 1050.595576][T29035] comedi comedi3: aio_iiro_16: I/O port conflict (0x4f27,8) [ 1050.778254][T26532] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1050.948056][T26532] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1050.972999][T26532] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.000088][T26532] usb 3-1: Product: syz [ 1051.026044][T26532] usb 3-1: Manufacturer: syz [ 1051.030741][T26532] usb 3-1: SerialNumber: syz [ 1051.093060][T26532] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1051.099580][T26532] r8152-cfgselector 3-1: config 0 descriptor?? [ 1051.292004][T29053] loop1: detected capacity change from 0 to 256 [ 1051.371067][T29053] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 1051.492008][T29057] loop6: detected capacity change from 0 to 4096 [ 1051.519465][T29057] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1051.534507][T26532] r8152-cfgselector 3-1: USB disconnect, device number 57 [ 1051.554540][T29059] loop7: detected capacity change from 0 to 512 [ 1051.620851][T29059] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.708187][T29059] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1051.894319][T26402] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.932157][ T5967] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1052.107628][ T5967] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1052.132202][ T5967] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1052.145344][T29044] loop4: detected capacity change from 0 to 32768 [ 1052.182001][ T5967] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1052.210773][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.231346][T29044] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1052.258918][T29067] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1052.287124][ T5967] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1052.391873][T29087] loop7: detected capacity change from 0 to 2048 [ 1052.404948][T29087] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1052.465305][T29044] XFS (loop4): Ending clean mount [ 1052.468951][T29089] loop6: detected capacity change from 0 to 1024 [ 1052.479566][T29089] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1052.563411][T29089] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1052.654050][ T5857] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1052.688301][T29089] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #11: comm syz.6.9846: missing EA_INODE flag [ 1052.782719][T29089] EXT4-fs (loop6): Remounting filesystem read-only [ 1052.933396][T29098] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1052.968929][ T5967] usb 2-1: USB disconnect, device number 42 [ 1053.019923][T22801] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.124104][T29100] loop0: detected capacity change from 0 to 512 [ 1053.154963][T29100] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1053.242685][T29100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1053.268123][T29100] ext4 filesystem being mounted at /1685/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1053.383777][ T5861] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.467211][T23191] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1053.600298][T29094] loop2: detected capacity change from 0 to 32768 [ 1053.613869][T29110] loop6: detected capacity change from 0 to 512 [ 1053.649771][T29094] jfs_strtoUCS: char2uni returned -22. [ 1053.655728][T29094] charset = cp950, char = 0xdc [ 1053.678434][T23191] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.720154][T23191] usb 8-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1053.742306][T23191] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.780739][T23191] usb 8-1: config 0 descriptor?? [ 1053.798284][ T5967] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1053.988942][ T5967] usb 5-1: Using ep0 maxpacket: 32 [ 1054.000362][ T5967] usb 5-1: config 0 has an invalid interface number: 23 but max is 0 [ 1054.009495][ T5967] usb 5-1: config 0 has no interface number 0 [ 1054.015605][ T5967] usb 5-1: config 0 interface 23 has no altsetting 0 [ 1054.023897][T29120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9860'. [ 1054.049018][ T5967] usb 5-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=b6.ad [ 1054.065501][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.073574][ T5967] usb 5-1: Product: syz [ 1054.088624][ T5967] usb 5-1: Manufacturer: syz [ 1054.098521][ T5967] usb 5-1: SerialNumber: syz [ 1054.111629][ T5967] usb 5-1: config 0 descriptor?? [ 1054.240306][T23191] hid_mf 0003:0079:1846.0013: item fetching failed at offset 6/7 [ 1054.260841][T23191] hid_mf 0003:0079:1846.0013: HID parse failed. [ 1054.295364][T23191] hid_mf 0003:0079:1846.0013: probe with driver hid_mf failed with error -22 [ 1054.372931][ T5967] kaweth 5-1:0.23: Firmware present in device. [ 1054.433393][T23191] usb 8-1: USB disconnect, device number 8 [ 1054.522608][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1054.536523][ T5974] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1054.557138][ T5967] kaweth 5-1:0.23: Statistics collection: 0 [ 1054.575950][ T5967] kaweth 5-1:0.23: Multicast filter limit: 0 [ 1054.595508][ T5967] kaweth 5-1:0.23: MTU: 0 [ 1054.615352][ T5967] kaweth 5-1:0.23: Read MAC address 00:00:00:00:00:00 [ 1054.700567][T29131] loop2: detected capacity change from 0 to 2048 [ 1054.749459][ T5967] kaweth 5-1:0.23: probe with driver kaweth failed with error -5 [ 1054.772237][ T5967] usb 5-1: USB disconnect, device number 42 [ 1054.795965][T29136] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1054.831439][T29114] loop1: detected capacity change from 0 to 32768 [ 1054.840052][T29114] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.9856 (29114) [ 1054.860996][T29114] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1054.876883][T29131] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1054.888414][T29114] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 1054.898469][T29114] BTRFS info (device loop1): using free-space-tree [ 1054.906952][T29131] Remounting filesystem read-only [ 1054.913124][T29131] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1054.924662][T23191] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1054.964011][T29131] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1054.975805][T29131] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1054.987684][T29131] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1054.998211][T29131] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1055.010940][T29131] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1055.021098][T29131] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1055.058171][T29131] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1055.078252][T29131] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1055.089806][T23191] usb 1-1: Using ep0 maxpacket: 16 [ 1055.129574][T23191] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1055.147968][T23191] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1055.159859][ T30] audit: type=1800 audit(1754991263.021:1752): pid=29131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9865" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 1055.191467][T23191] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1055.219763][T23191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.260406][T23191] usb 1-1: config 0 descriptor?? [ 1055.325128][T29159] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9869'. [ 1055.391978][ T5856] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1055.398835][T29159] sit0: Master is either lo or non-ether device [ 1055.590665][T29165] nbd: must specify a size in bytes for the device [ 1055.674095][T23191] zydacron 0003:13EC:0006.0014: item fetching failed at offset 0/3 [ 1055.695655][T23191] zydacron 0003:13EC:0006.0014: parse failed [ 1055.701780][T23191] zydacron 0003:13EC:0006.0014: probe with driver zydacron failed with error -22 [ 1055.872478][ T5936] usb 1-1: USB disconnect, device number 39 [ 1056.295048][T29184] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9873'. [ 1056.457692][T29188] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9883'. [ 1056.591616][T29192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9884'. [ 1056.918392][T29204] loop0: detected capacity change from 0 to 512 [ 1056.936406][T29204] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1056.966620][T29204] EXT4-fs (loop0): invalid journal inode [ 1056.982977][T29204] EXT4-fs (loop0): can't get journal size [ 1057.016794][T29204] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c119, mo2=0002] [ 1057.075541][T29204] System zones: 1-12, 13-13 [ 1057.092723][T29179] loop4: detected capacity change from 0 to 32768 [ 1057.102266][T29204] EXT4-fs error (device loop0): ext4_iget_extra_inode:5103: inode #15: comm syz.0.9891: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1057.102859][T29204] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.9891: couldn't read orphan inode 15 (err -117) [ 1057.214373][T29179] JBD2: Ignoring recovery information on journal [ 1057.215471][T29204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1057.279011][T29179] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1057.315109][T29210] loop6: detected capacity change from 0 to 2048 [ 1057.369592][T29210] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1057.398123][T29179] (syz.4.9879,29179,0):ocfs2_check_dir_entry:321 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 1057.558554][ T5861] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.690521][T29222] loop7: detected capacity change from 0 to 512 [ 1057.727153][ T5857] ocfs2: Unmounting device (7,4) on (node local) [ 1057.739379][T29222] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1057.812047][T29222] EXT4-fs (loop7): 1 truncate cleaned up [ 1057.824996][T29222] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1057.901688][T29231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9902'. [ 1058.167863][T26402] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.417206][T29234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9904'. [ 1058.608724][ T5967] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 1058.689747][T29244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9907'. [ 1058.713253][T29244] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1058.792091][ T5967] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1058.802458][ T5967] usb 8-1: config 0 has no interface number 0 [ 1058.827637][ T5967] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1058.856104][ T5967] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.884357][ T5967] usb 8-1: config 0 descriptor?? [ 1058.905048][ T5967] usb 8-1: selecting invalid altsetting 1 [ 1058.916463][T29251] loop1: detected capacity change from 0 to 128 [ 1058.927735][ T5967] dvb_ttusb_budget: ttusb_init_controller: error [ 1058.936387][ T5967] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1058.939099][T29254] loop0: detected capacity change from 0 to 64 [ 1059.056190][ T5967] DVB: Unable to find symbol cx22700_attach() [ 1059.151789][ T5936] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1059.176934][ T5967] DVB: Unable to find symbol tda10046_attach() [ 1059.193705][ T5967] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1059.216772][ T5967] usb 8-1: USB disconnect, device number 9 [ 1059.220858][T29258] loop0: detected capacity change from 0 to 1764 [ 1059.240559][T29258] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1059.307389][ T5936] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1059.349247][ T5936] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1059.375186][ T5936] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1059.401710][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.423656][ T5861] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1059.423693][T29252] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1059.450522][ T5936] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1059.501885][ T5861] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1059.858835][ T6026] usb 3-1: USB disconnect, device number 58 [ 1060.001517][ T5974] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1060.171967][T29262] loop1: detected capacity change from 0 to 32768 [ 1060.245882][T29262] JBD2: Ignoring recovery information on journal [ 1060.313639][T29262] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1060.512937][T29262] (syz.1.9914,29262,1):ocfs2_check_dir_entry:321 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 1060.569402][T29286] loop4: detected capacity change from 0 to 4096 [ 1060.708036][ T5856] ocfs2: Unmounting device (7,1) on (node local) [ 1061.246711][T29306] loop7: detected capacity change from 0 to 1024 [ 1061.292594][T29308] sp0: Synchronizing with TNC [ 1061.313014][T29307] [U] è` [ 1061.534645][ T6026] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1061.680123][T29323] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9945'. [ 1061.700776][ T6026] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1061.712252][ T6026] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1061.741596][ T6026] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1061.793340][T29325] option changes via remount are deprecated (pid=29324 comm=syz.6.9946) [ 1061.809018][ T6026] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.833342][ T6026] usb 2-1: config 0 descriptor?? [ 1061.999111][ T5936] kernel write not supported for file /sg0 (pid: 5936 comm: kworker/0:3) [ 1062.058229][T29337] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1062.226532][T29341] loop7: detected capacity change from 0 to 64 [ 1062.255109][ T6026] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 1062.273055][ T6026] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 1062.289754][ T6026] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 1062.317884][ T6026] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 1062.331298][T29345] netlink: 'syz.0.9955': attribute type 23 has an invalid length. [ 1062.341960][ T6026] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 1062.362785][ T6026] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 1062.384917][ T6026] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 1062.406470][ T6026] arvo 0003:1E7D:30D4.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 1062.435788][ T6026] arvo 0003:1E7D:30D4.0015: couldn't init struct arvo_device [ 1062.456534][ T6026] arvo 0003:1E7D:30D4.0015: couldn't install keyboard [ 1062.489835][ T6026] arvo 0003:1E7D:30D4.0015: probe with driver arvo failed with error -71 [ 1062.527224][ T6026] usb 2-1: USB disconnect, device number 43 [ 1062.870702][T29358] loop0: detected capacity change from 0 to 64 [ 1062.912090][T29362] loop7: detected capacity change from 0 to 64 [ 1062.924234][T29364] netlink: 424 bytes leftover after parsing attributes in process `syz.2.9965'. [ 1062.948511][T29364] netlink: 424 bytes leftover after parsing attributes in process `syz.2.9965'. [ 1063.219346][T29369] loop1: detected capacity change from 0 to 1024 [ 1063.232453][T29369] EXT4-fs: Ignoring removed bh option [ 1063.234157][T29370] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1063.240231][T29369] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1063.282403][T29369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1063.401878][T29379] tipc: Enabled bearer , priority 10 [ 1063.463685][T29381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9972'. [ 1063.584972][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.771050][T29387] sp0: Synchronizing with TNC [ 1063.779453][T29392] loop2: detected capacity change from 0 to 512 [ 1063.843521][T29392] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 1063.864369][T29397] loop4: detected capacity change from 0 to 2048 [ 1063.872912][T29392] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 1063.906170][T29392] EXT4-fs (loop2): 1 truncate cleaned up [ 1063.922081][T29392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1063.943961][T29399] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1063.957190][T29392] EXT4-fs: group quota file already specified [ 1064.026754][ T5858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.331025][T29410] loop4: detected capacity change from 0 to 8 [ 1064.363716][T29410] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1064.390151][T29410] cramfs: Error -5 while decompressing! [ 1064.407666][T29410] cramfs: ffffffff9af25d28(26)->ffff88804e42d000(4096) [ 1064.427253][T29410] cramfs: Error -3 while decompressing! [ 1064.442514][T29410] cramfs: ffffffff9af25d42(26)->ffff888047f47000(4096) [ 1064.466799][T29410] cramfs: Error -3 while decompressing! [ 1064.475117][T29412] loop2: detected capacity change from 0 to 1024 [ 1064.484815][T29410] cramfs: ffffffff9af25d5c(16)->ffff888047a81000(4096) [ 1064.495887][T29410] cramfs: Error -5 while decompressing! [ 1064.501454][T29410] cramfs: ffffffff9af25d28(26)->ffff88804e42d000(4096) [ 1064.510859][ T30] audit: type=1800 audit(1754991272.847:1753): pid=29410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.9983" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 1064.540590][T23191] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1064.719231][T23191] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1064.720892][T29422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9989'. [ 1064.745482][T23191] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1064.752158][T23191] usb 2-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 1064.762309][T29422] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9989'. [ 1064.790846][T23191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.804552][T23191] usb 2-1: config 0 descriptor?? [ 1064.832754][T29424] loop7: detected capacity change from 0 to 128 [ 1064.857375][ T5967] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 1065.026457][ T5967] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.055413][ T5967] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1065.076543][ T5967] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1065.104805][ T5967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.147260][ T5967] usb 1-1: config 0 descriptor?? [ 1065.174496][ T5967] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1065.202463][ T5967] dvb-usb: bulk message failed: -22 (3/0) [ 1065.235403][ T5967] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1065.252806][T23191] cherry 0003:046A:0023.0016: item fetching failed at offset 1/3 [ 1065.277453][ T5967] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1065.288486][T23191] cherry 0003:046A:0023.0016: probe with driver cherry failed with error -22 [ 1065.309198][ T5967] usb 1-1: media controller created [ 1065.337276][ T5967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1065.388035][ T5967] dvb-usb: bulk message failed: -22 (6/0) [ 1065.399225][ T5967] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1065.421167][T29434] XFS (nullb0): Invalid superblock magic number [ 1065.431923][ T5967] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input52 [ 1065.485684][ T9] usb 2-1: USB disconnect, device number 44 [ 1065.496223][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1065.552233][ T5967] dvb-usb: schedule remote query interval to 150 msecs. [ 1065.590786][ T5967] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1065.627740][ T5967] usb 1-1: USB disconnect, device number 40 [ 1065.755282][ T5967] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1065.958059][T29426] loop2: detected capacity change from 0 to 32768 [ 1066.035423][T29426] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1066.316425][ T6026] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1066.371633][ T5858] ocfs2: Unmounting device (7,2) on (node local) [ 1066.496408][ T6026] usb 5-1: Using ep0 maxpacket: 32 [ 1066.538976][ T6026] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.570973][ T6026] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.618817][ T6026] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1066.631748][T29471] loop1: detected capacity change from 0 to 64 [ 1066.657377][T29472] loop0: detected capacity change from 0 to 512 [ 1066.668466][ T6026] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.697315][ T6026] usb 5-1: config 0 descriptor?? [ 1066.776594][T29472] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.10023: iget: bad i_size value: 38620345925642 [ 1066.898189][T29472] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.10023: couldn't read orphan inode 15 (err -117) [ 1066.984472][T29472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1067.045796][T29472] EXT4-fs error (device loop0): ext4_validate_block_bitmap:431: comm syz.0.10023: bg 0: block 5: invalid block bitmap [ 1067.150283][ T6026] ft260 0003:0403:6030.0017: item fetching failed at offset 0/2 [ 1067.210588][ T6026] ft260 0003:0403:6030.0017: failed to parse HID [ 1067.227184][ T6026] ft260 0003:0403:6030.0017: probe with driver ft260 failed with error -22 [ 1067.277932][ T5861] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1067.341858][ T6026] usb 5-1: USB disconnect, device number 43 [ 1067.474542][T29496] netlink: 'syz.7.10022': attribute type 2 has an invalid length. [ 1067.498833][T29498] netlink: 'syz.1.10024': attribute type 23 has an invalid length. [ 1067.546447][T29496] : entered promiscuous mode [ 1067.758464][T29508] loop6: detected capacity change from 0 to 64 [ 1068.125710][T29520] loop4: detected capacity change from 0 to 1024 [ 1068.183985][T29520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1068.234654][T29520] ext4 filesystem being mounted at /1688/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1068.347971][ T30] audit: type=1800 audit(1754991276.878:1754): pid=29520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10032" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1068.482498][T29534] mkiss: ax0: crc mode is auto. [ 1068.513464][ T5857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1068.607041][T29543] loop6: detected capacity change from 0 to 2048 [ 1068.675758][T29539] loop2: detected capacity change from 0 to 4096 [ 1068.716728][T23191] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1068.727738][T29545] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1068.808349][T29543] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1068.880729][T29543] Remounting filesystem read-only [ 1068.895333][T23191] usb 2-1: Using ep0 maxpacket: 8 [ 1068.903271][T29543] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1068.922382][T23191] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1068.935112][T29543] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1068.936092][T29543] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1068.936504][T29543] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1068.936600][T29543] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1068.936739][T29543] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1068.936935][T29543] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1068.951855][T29543] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1069.020193][T23191] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 1069.049554][T23191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.070146][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1069.086975][T29543] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1069.098416][T23191] usb 2-1: config 0 descriptor?? [ 1069.134841][ T30] audit: type=1800 audit(1754991277.708:1755): pid=29543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.10043" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 1069.229825][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 1069.241377][ T9] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.260327][ T9] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1069.282304][ T9] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1069.304698][ T9] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1069.341157][ T9] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1069.376727][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.397133][ T9] usb 8-1: Product: syz [ 1069.411322][ T9] usb 8-1: Manufacturer: syz [ 1069.420263][ T9] usb 8-1: SerialNumber: syz [ 1069.502047][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input53 [ 1069.522770][T23191] corsair 0003:1B1C:1B09.0018: unbalanced delimiter at end of report description [ 1069.575200][T23191] corsair 0003:1B1C:1B09.0018: parse failed [ 1069.581256][T23191] corsair 0003:1B1C:1B09.0018: probe with driver corsair failed with error -22 [ 1069.658217][T29550] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 1069.664786][T29550] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1069.714912][T23191] usb 2-1: USB disconnect, device number 45 [ 1069.748583][T29550] vhci_hcd vhci_hcd.0: Device attached [ 1069.769227][T29565] vhci_hcd: connection closed [ 1069.769752][ T49] vhci_hcd: stop threads [ 1069.791454][ T49] vhci_hcd: release socket [ 1069.799979][ T9] imon:send_packet: packet tx failed (-71) [ 1069.820005][ T49] vhci_hcd: disconnect device [ 1069.840793][ T9] imon 8-1:155.0: panel buttons/knobs setup failed [ 1069.861695][T29567] loop4: detected capacity change from 0 to 2048 [ 1069.877377][ T9] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1069.906959][T29567] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1069.926027][ T9] (id 0x00) [ 1070.182065][ T9] rc_core: IR keymap rc-imon-pad not found [ 1070.188032][ T9] Registered IR keymap rc-empty [ 1070.198476][T29570] loop6: detected capacity change from 0 to 4096 [ 1070.221237][ T9] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1070.246839][ T9] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1070.286986][ T9] imon:send_packet: packet tx failed (-71) [ 1070.322648][ T9] imon 8-1:155.0: remote input dev register failed [ 1070.347245][ T9] imon 8-1:155.0: imon_init_intf0: rc device setup failed [ 1070.386232][T29570] ntfs3(loop6): ino=21, "file1" fiemap is not supported for compressed file (cp -r) [ 1070.530762][ T9] imon 8-1:155.0: unable to initialize intf0, err 0 [ 1070.544201][ T9] imon:imon_probe: failed to initialize context! [ 1070.552231][ T9] imon 8-1:155.0: unable to register, err -19 [ 1070.566940][ T9] usb 8-1: USB disconnect, device number 10 [ 1070.690542][T29557] loop2: detected capacity change from 0 to 32768 [ 1070.729848][T29557] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1070.899850][T29557] XFS (loop2): Ending clean mount [ 1070.974405][ T5974] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1071.188142][ T5858] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1071.390038][T29613] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10071'. [ 1071.451578][T29614] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10071'. [ 1071.498116][ C0] vkms_vblank_simulate: vblank timer overrun [ 1071.997655][T29627] loop2: detected capacity change from 0 to 1764 [ 1072.095847][T29633] loop7: detected capacity change from 0 to 16 [ 1072.103852][T29627] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1072.135112][T29633] erofs (device loop7): mounted with root inode @ nid 36. [ 1072.247418][ T5858] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1072.289155][ T5858] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1072.503123][T29643] loop2: detected capacity change from 0 to 256 [ 1072.571763][T29643] exfat: Deprecated parameter 'namecase' [ 1072.662902][T29643] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1073.356186][T29662] loop7: detected capacity change from 0 to 4096 [ 1073.381559][T29662] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1073.458412][T29662] ntfs3(loop7): ino=3, ntfs_set_state failed, -22. [ 1073.575288][T14104] ntfs3(loop7): ino=3, ntfs3_write_inode failed, -22. [ 1073.606246][T26402] ntfs3(loop7): ino=3, ntfs_set_state failed, -22. [ 1073.630340][T26402] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1073.658948][T26402] ntfs3(loop7): ino=3, ntfs_set_state failed, -22. [ 1073.673329][T14104] ntfs3(loop7): ino=3, ntfs3_write_inode failed, -22. [ 1074.026495][ T6026] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1074.086077][T29663] loop4: detected capacity change from 0 to 32768 [ 1074.165285][T29663] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 1074.186281][ T6026] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.200160][ T6026] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1074.228469][ T6026] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1074.239198][ T6026] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1074.247618][ T6026] usb 2-1: SerialNumber: syz [ 1074.416369][ T5857] ocfs2: Unmounting device (7,4) on (node local) [ 1074.493972][ T6026] usb 2-1: 0:2 : does not exist [ 1074.557625][ T6026] usb 2-1: USB disconnect, device number 46 [ 1074.582984][T23191] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1074.583537][T29688] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10103'. [ 1074.731357][T29672] loop0: detected capacity change from 0 to 32768 [ 1074.746433][T23191] usb 3-1: Using ep0 maxpacket: 16 [ 1074.756764][T23191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.789446][T23191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1074.847238][T23191] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1074.877481][T23191] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1074.920144][T23191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.966642][T23191] usb 3-1: config 0 descriptor?? [ 1075.199195][T29695] netlink: 'syz.6.10106': attribute type 1 has an invalid length. [ 1075.229122][T29695] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10106'. [ 1075.420083][T23191] hid-multitouch 0003:0457:07DA.0019: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 1075.573132][T23191] usb 3-1: USB disconnect, device number 59 [ 1075.800489][T29712] loop0: detected capacity change from 0 to 256 [ 1075.871097][T29712] FAT-fs (loop0): Directory bread(block 64) failed [ 1075.897198][T29712] FAT-fs (loop0): Directory bread(block 65) failed [ 1075.914218][T29712] FAT-fs (loop0): Directory bread(block 66) failed [ 1075.954656][T29712] FAT-fs (loop0): Directory bread(block 67) failed [ 1075.967116][T29712] FAT-fs (loop0): Directory bread(block 68) failed [ 1075.973672][T29712] FAT-fs (loop0): Directory bread(block 69) failed [ 1076.023252][T29712] FAT-fs (loop0): Directory bread(block 70) failed [ 1076.035494][T29716] loop6: detected capacity change from 0 to 8 [ 1076.069986][T29712] FAT-fs (loop0): Directory bread(block 71) failed [ 1076.102529][T29712] FAT-fs (loop0): Directory bread(block 72) failed [ 1076.138769][T29712] FAT-fs (loop0): Directory bread(block 73) failed [ 1076.215138][T29692] loop4: detected capacity change from 0 to 32768 [ 1076.332591][T29720] tmpfs: Cannot disable swap on remount [ 1076.342698][T29718] loop1: detected capacity change from 0 to 2048 [ 1076.358992][T29718] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1076.380897][T29692] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1076.464864][ T5974] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1076.633000][T29730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1076.668206][ T5857] ocfs2: Unmounting device (7,4) on (node local) [ 1076.804279][T29738] nbd: must specify at least one socket [ 1077.050884][T29743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10129'. [ 1077.080309][T29743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10129'. [ 1077.107646][T29743] netlink: 'syz.0.10129': attribute type 12 has an invalid length. [ 1077.136038][T29743] netlink: 'syz.0.10129': attribute type 11 has an invalid length. [ 1077.667955][T29751] loop4: detected capacity change from 0 to 4096 [ 1077.729207][T29751] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 1077.812395][T29751] ntfs3(loop4): $Secure::$SII is corrupted. [ 1077.833031][T29751] ntfs3(loop4): Failed to initialize $Secure (-22). [ 1078.239654][T29737] loop2: detected capacity change from 0 to 32768 [ 1078.288935][T19428] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1078.351884][T29744] loop1: detected capacity change from 0 to 32768 [ 1078.391828][T29772] loop6: detected capacity change from 0 to 256 [ 1078.432399][T29772] exfat: Deprecated parameter 'utf8' [ 1078.451710][T29772] exfat: Deprecated parameter 'namecase' [ 1078.508205][T29772] exfat: Deprecated parameter 'utf8' [ 1078.519497][T29744] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 1078.601852][T29772] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1078.751242][T29777] loop0: detected capacity change from 0 to 512 [ 1078.814095][ T5856] (syz-executor,5856,0):ocfs2_inode_is_valid_to_delete:947 ERROR: Skipping delete of system file 76 [ 1078.817848][T29768] loop7: detected capacity change from 0 to 32768 [ 1078.837661][T29777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1078.854169][T29777] ext4 filesystem being mounted at /1746/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1078.866016][ T5856] ocfs2: Unmounting device (7,1) on (node local) [ 1078.884360][T29777] netlink: 300 bytes leftover after parsing attributes in process `syz.0.10144'. [ 1078.950189][T29768] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1079.072786][T29768] XFS (loop7): Ending clean mount [ 1079.171058][ T5861] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.305019][T29794] loop1: detected capacity change from 0 to 1024 [ 1079.345161][T26402] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1079.372820][T29800] loop6: detected capacity change from 0 to 128 [ 1079.427668][T29800] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1079.443940][T29800] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1079.584200][ T5974] hfsplus: b-tree write err: -5, ino 4 [ 1079.754176][T29806] loop2: detected capacity change from 0 to 64 [ 1080.092031][ T5949] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1080.177711][ T30] audit: type=1800 audit(1754991289.298:1756): pid=29818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10158" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1080.282853][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.313812][ T5949] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1080.348427][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.404405][ T5949] usb 2-1: config 0 descriptor?? [ 1080.774196][T29830] loop7: detected capacity change from 0 to 8 [ 1080.833361][ T5949] logitech-hidpp-device 0003:046D:C086.001A: unknown main item tag 0x0 [ 1080.861012][ T5949] logitech-hidpp-device 0003:046D:C086.001A: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.1-1/input0 [ 1080.880722][T29796] loop4: detected capacity change from 0 to 32768 [ 1080.910794][T29796] XFS: attr2 mount option is deprecated. [ 1080.966395][T29796] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 1080.989085][T29796] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1081.030876][T29842] loop2: detected capacity change from 0 to 1024 [ 1081.040297][ T9] usb 2-1: USB disconnect, device number 47 [ 1081.102196][T29842] hfsplus: bad catalog entry type [ 1081.137865][T29796] XFS (loop4): Ending clean mount [ 1081.178531][T19428] hfsplus: b-tree write err: -5, ino 4 [ 1081.217794][T29796] XFS (loop4): Quotacheck needed: Please wait. [ 1081.322926][T29796] XFS (loop4): Quotacheck: Done. [ 1081.367845][T29851] loop6: detected capacity change from 0 to 64 [ 1081.439892][ T5857] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1081.467994][T29851] hfs: hfs: Invalid key length: 94 [ 1081.949685][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1081.977269][T29862] loop7: detected capacity change from 0 to 4096 [ 1082.667254][T29885] loop4: detected capacity change from 0 to 8 [ 1082.749863][T29885] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1082.795654][T29885] SQUASHFS error: Failed to read block 0x1d2: -5 [ 1082.802036][T29885] SQUASHFS error: Unable to read metadata cache entry [1d0] [ 1082.833722][T29885] SQUASHFS error: Unable to read directory block [1d0:26] [ 1082.965554][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1083.052245][T29860] loop6: detected capacity change from 0 to 32768 [ 1083.146736][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1083.164573][T29893] : entered promiscuous mode [ 1083.188673][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1083.240585][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 1083.301447][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1083.357870][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.434524][ T9] usb 2-1: config 0 descriptor?? [ 1083.440924][T29860] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1083.477409][T29887] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1083.656710][T22801] ocfs2: Unmounting device (7,6) on (node local) [ 1083.788375][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1083.958324][ T9] ryos 0003:1E7D:31CE.001B: unknown main item tag 0x0 [ 1083.985260][ T9] ryos 0003:1E7D:31CE.001B: unknown main item tag 0x0 [ 1084.013991][ T9] ryos 0003:1E7D:31CE.001B: unknown main item tag 0x0 [ 1084.041392][ T9] ryos 0003:1E7D:31CE.001B: unknown main item tag 0x0 [ 1084.060833][ T9] ryos 0003:1E7D:31CE.001B: unknown main item tag 0x0 [ 1084.094976][ T9] ryos 0003:1E7D:31CE.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.1-1/input0 [ 1084.151421][ T9] usb 2-1: USB disconnect, device number 48 [ 1084.284448][T29911] loop0: detected capacity change from 0 to 512 [ 1084.330749][T29911] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1084.406089][T29911] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1084.446214][T29913] loop6: detected capacity change from 0 to 1024 [ 1084.497752][T29913] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1084.517274][T29911] EXT4-fs (loop0): 1 truncate cleaned up [ 1084.555169][T29911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1084.608271][T29903] loop4: detected capacity change from 0 to 32768 [ 1084.617621][T29903] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.10192 (29903) [ 1084.635542][T29903] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1084.647498][T29903] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 1084.656786][T29903] BTRFS info (device loop4): using free-space-tree [ 1084.753018][ T5861] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.889826][T29903] BTRFS info (device loop4): rebuilding free space tree [ 1084.972169][T29938] sp0: Synchronizing with TNC [ 1084.996631][T29937] [U] è [ 1085.094637][T29903] BTRFS info (device loop4): balance: start -d -m [ 1085.112920][T29903] BTRFS info (device loop4): balance: paused [ 1085.311059][ T5857] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1085.671191][T29941] loop0: detected capacity change from 0 to 32768 [ 1085.708006][T29925] loop7: detected capacity change from 0 to 32768 [ 1085.749672][T29941] loop0: p3 < p5 p6 p7 > [ 1085.767062][T29941] loop0: p6 start 117448704 is beyond EOD, truncated [ 1085.791621][T29925] [ 1085.791621][T29925] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1085.791621][T29925] [ 1085.842454][T29925] ERROR: (device loop7): diWrite: ixpxd invalid [ 1085.842454][T29925] [ 1085.908591][T29925] ERROR: (device loop7): txAbort: [ 1085.908591][T29925] [ 1086.055252][T26402] [ 1086.055252][T26402] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1086.055252][T26402] [ 1086.088693][T26402] [ 1086.088693][T26402] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1086.088693][T26402] [ 1086.885764][T29977] smc: net device bond0 applied user defined pnetid SYZ2 [ 1087.150734][T29986] comedi comedi3: pcl726: I/O port conflict (0x4f27,16) [ 1088.192405][T29989] loop1: detected capacity change from 0 to 32768 [ 1088.379901][ T30] audit: type=1800 audit(1754991297.906:1757): pid=30025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.10239" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1088.668792][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1089.234680][ T6026] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1089.372064][T30053] loop2: detected capacity change from 0 to 2048 [ 1089.409598][ T6026] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1089.431785][ T6026] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1089.454172][ T6026] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1089.475425][T30053] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1089.491947][T30053] UDF-fs: Scanning with blocksize 512 failed [ 1089.499949][ T6026] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1089.510448][ T5949] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1089.531285][ T6026] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.544230][T30053] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1089.581987][ T6026] usb 8-1: config 0 descriptor?? [ 1089.643314][T30059] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10256'. [ 1089.672275][ T5949] usb 1-1: Using ep0 maxpacket: 8 [ 1089.685720][ T5949] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1089.709748][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.717816][ T5949] usb 1-1: Product: syz [ 1089.737968][ T5949] usb 1-1: Manufacturer: syz [ 1089.742671][ T5949] usb 1-1: SerialNumber: syz [ 1089.770270][ T5949] usb 1-1: config 0 descriptor?? [ 1089.800489][ T5949] gspca_main: se401-2.14.0 probing 047d:5003 [ 1089.851755][T30031] loop4: detected capacity change from 0 to 32768 [ 1089.910998][T30031] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 1089.971671][T30031] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1090.047601][ T12] (kworker/u8:0,12,1):ocfs2_check_dir_entry:321 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 1090.089054][ T6026] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1090.138941][T30031] [ 1090.141318][T30031] ====================================================== [ 1090.148336][T30031] WARNING: possible circular locking dependency detected [ 1090.155357][T30031] 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 Not tainted [ 1090.162465][T30031] ------------------------------------------------------ [ 1090.169475][T30031] syz.4.10243/30031 is trying to acquire lock: [ 1090.175623][T30031] ffff8880728e4e38 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2fc/0x7d0 [ 1090.184991][T30031] [ 1090.184991][T30031] but task is already holding lock: [ 1090.192344][T30031] ffff888055d26950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 1090.201547][T30031] [ 1090.201547][T30031] which lock already depends on the new lock. [ 1090.201547][T30031] [ 1090.211952][T30031] [ 1090.211952][T30031] the existing dependency chain (in reverse order) is: [ 1090.220961][T30031] [ 1090.220961][T30031] -> #2 (jbd2_handle){++++}-{0:0}: [ 1090.228286][T30031] jbd2_journal_lock_updates+0xa4/0x380 [ 1090.234393][T30031] __ocfs2_flush_truncate_log+0x281/0x1160 [ 1090.240734][T30031] ocfs2_flush_truncate_log+0x4a/0x70 [ 1090.246637][T30031] ocfs2_sync_fs+0x1c6/0x3d0 [ 1090.251776][T30031] sync_filesystem+0x1d0/0x290 [ 1090.257068][T30031] ocfs2_reconfigure+0x119/0xe90 [ 1090.262540][T30031] reconfigure_super+0x450/0xb60 [ 1090.268040][T30031] path_mount+0x17d7/0x1fd0 [ 1090.273075][T30031] __x64_sys_mount+0x28d/0x310 [ 1090.278385][T30031] do_syscall_64+0xcd/0x4c0 [ 1090.283428][T30031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.289850][T30031] [ 1090.289850][T30031] -> #1 (&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]){+.+.}-{4:4}: [ 1090.300564][T30031] down_write+0x92/0x200 [ 1090.305356][T30031] ocfs2_xattr_set+0xd35/0x2a80 [ 1090.310752][T30031] __vfs_setxattr+0x175/0x1e0 [ 1090.315978][T30031] __vfs_setxattr_noperm+0x127/0x660 [ 1090.321820][T30031] __vfs_setxattr_locked+0x182/0x260 [ 1090.327661][T30031] vfs_setxattr+0x145/0x360 [ 1090.332718][T30031] do_setxattr+0x145/0x180 [ 1090.337696][T30031] filename_setxattr+0x16b/0x1d0 [ 1090.343168][T30031] path_setxattrat+0x1de/0x2a0 [ 1090.348466][T30031] __x64_sys_setxattr+0xc6/0x140 [ 1090.353934][T30031] do_syscall_64+0xcd/0x4c0 [ 1090.358984][T30031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.365414][T30031] [ 1090.365414][T30031] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}: [ 1090.373261][T30031] __lock_acquire+0x12a6/0x1ce0 [ 1090.378667][T30031] lock_acquire+0x179/0x350 [ 1090.383726][T30031] down_read+0x9b/0x480 [ 1090.388427][T30031] ocfs2_init_acl+0x2fc/0x7d0 [ 1090.393647][T30031] ocfs2_mknod+0xd5c/0x2540 [ 1090.398688][T30031] ocfs2_mkdir+0x17c/0x490 [ 1090.403640][T30031] vfs_mkdir+0x593/0x8c0 [ 1090.408424][T30031] do_mkdirat+0x304/0x3e0 [ 1090.413283][T30031] __x64_sys_mkdirat+0x83/0xb0 [ 1090.418579][T30031] do_syscall_64+0xcd/0x4c0 [ 1090.423628][T30031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.430052][T30031] [ 1090.430052][T30031] other info that might help us debug this: [ 1090.430052][T30031] [ 1090.440274][T30031] Chain exists of: [ 1090.440274][T30031] &oi->ip_xattr_sem --> &ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE] --> jbd2_handle [ 1090.440274][T30031] [ 1090.456229][T30031] Possible unsafe locking scenario: [ 1090.456229][T30031] [ 1090.463680][T30031] CPU0 CPU1 [ 1090.469038][T30031] ---- ---- [ 1090.474398][T30031] rlock(jbd2_handle); [ 1090.478565][T30031] lock(&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]); [ 1090.488561][T30031] lock(jbd2_handle); [ 1090.495165][T30031] rlock(&oi->ip_xattr_sem); [ 1090.499854][T30031] [ 1090.499854][T30031] *** DEADLOCK *** [ 1090.499854][T30031] [ 1090.507988][T30031] 8 locks held by syz.4.10243/30031: [ 1090.513273][T30031] #0: ffff88807a7fe428 (sb_writers#20){.+.+}-{0:0}, at: filename_create+0x10e/0x4a0 [ 1090.522851][T30031] #1: ffff8880728e5100 (&type->i_mutex_dir_key#16/1){+.+.}-{4:4}, at: filename_create+0x1bb/0x4a0 [ 1090.533652][T30031] #2: ffff888054f7b480 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x11c/0x4910 [ 1090.547556][T30031] #3: ffff888054f7d100 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x11c/0x4910 [ 1090.561462][T30031] #4: ffff888057af5f40 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0xee/0xc60 [ 1090.575362][T30031] #5: ffff88807a7fe618 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_mknod+0xc19/0x2540 [ 1090.584668][T30031] #6: ffff8880236f74e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3ae/0x970 [ 1090.595450][T30031] #7: ffff888055d26950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 1090.605099][T30031] [ 1090.605099][T30031] stack backtrace: [ 1090.610989][T30031] CPU: 0 UID: 0 PID: 30031 Comm: syz.4.10243 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 1090.611037][T30031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1090.611060][T30031] Call Trace: [ 1090.611074][T30031] [ 1090.611090][T30031] dump_stack_lvl+0x116/0x1f0 [ 1090.611141][T30031] print_circular_bug+0x275/0x350 [ 1090.611200][T30031] check_noncircular+0x14c/0x170 [ 1090.611263][T30031] __lock_acquire+0x12a6/0x1ce0 [ 1090.611334][T30031] lock_acquire+0x179/0x350 [ 1090.611397][T30031] ? ocfs2_init_acl+0x2fc/0x7d0 [ 1090.611446][T30031] ? __pfx___might_resched+0x10/0x10 [ 1090.611498][T30031] down_read+0x9b/0x480 [ 1090.611549][T30031] ? ocfs2_init_acl+0x2fc/0x7d0 [ 1090.611596][T30031] ? __pfx_down_read+0x10/0x10 [ 1090.611648][T30031] ? find_held_lock+0x2b/0x80 [ 1090.611692][T30031] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1090.611737][T30031] ? __jbd2_journal_file_buffer+0x5e2/0x860 [ 1090.611802][T30031] ocfs2_init_acl+0x2fc/0x7d0 [ 1090.611856][T30031] ? __pfx_ocfs2_init_acl+0x10/0x10 [ 1090.611904][T30031] ? __entry_text_end+0xfdfb5/0x1020b9 [ 1090.611947][T30031] ? ocfs2_journal_dirty+0x262/0x6a0 [ 1090.612010][T30031] ? __pfx_ocfs2_journal_dirty+0x10/0x10 [ 1090.612071][T30031] ? ocfs2_block_signals+0x88/0xc0 [ 1090.612106][T30031] ? __pfx_ocfs2_block_signals+0x10/0x10 [ 1090.612143][T30031] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1090.612188][T30031] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1090.612239][T30031] ocfs2_mknod+0xd5c/0x2540 [ 1090.612289][T30031] ? __pfx_ocfs2_mknod+0x10/0x10 [ 1090.612333][T30031] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1090.612393][T30031] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1090.612440][T30031] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1090.612485][T30031] ? do_raw_spin_lock+0x12c/0x2b0 [ 1090.612522][T30031] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1090.612566][T30031] ? find_held_lock+0x2b/0x80 [ 1090.612616][T30031] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1090.612660][T30031] ? put_pid.part.0+0xa5/0x130 [ 1090.612722][T30031] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1090.612768][T30031] ? ocfs2_permission+0x123/0x1c0 [ 1090.612802][T30031] ? __pfx_ocfs2_permission+0x10/0x10 [ 1090.612839][T30031] ? __pfx_map_id_range_up+0x10/0x10 [ 1090.612890][T30031] ocfs2_mkdir+0x17c/0x490 [ 1090.612937][T30031] ? __pfx_ocfs2_mkdir+0x10/0x10 [ 1090.612979][T30031] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1090.613024][T30031] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1090.613068][T30031] ? security_inode_permission+0xbf/0x260 [ 1090.613114][T30031] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1090.613159][T30031] ? inode_permission+0x156/0x630 [ 1090.613208][T30031] vfs_mkdir+0x593/0x8c0 [ 1090.613259][T30031] do_mkdirat+0x304/0x3e0 [ 1090.613302][T30031] ? __pfx_do_mkdirat+0x10/0x10 [ 1090.613336][T30031] ? getname_flags.part.0+0x1c5/0x550 [ 1090.613394][T30031] __x64_sys_mkdirat+0x83/0xb0 [ 1090.613433][T30031] do_syscall_64+0xcd/0x4c0 [ 1090.613486][T30031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.613523][T30031] RIP: 0033:0x7f403438ebe9 [ 1090.613551][T30031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1090.613589][T30031] RSP: 002b:00007f403522d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1090.613623][T30031] RAX: ffffffffffffffda RBX: 00007f40345b5fa0 RCX: 00007f403438ebe9 [ 1090.613648][T30031] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1090.613672][T30031] RBP: 00007f4034411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1090.613695][T30031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1090.613720][T30031] R13: 00007f40345b6038 R14: 00007f40345b5fa0 R15: 00007ffef6e5c4b8 [ 1090.613755][T30031] [ 1090.998646][ T5844] usb 8-1: USB disconnect, device number 11 [ 1091.010081][ T5949] gspca_se401: Bayer format not supported! [ 1091.023516][T30076] (syz.4.10243,30076,0):ocfs2_find_entry:1094 ERROR: status = -117 [ 1091.032043][T30076] (syz.4.10243,30076,0):ocfs2_orphan_del:2396 ERROR: status = -117 [ 1091.040025][T30076] (syz.4.10243,30076,0):ocfs2_orphan_del:2418 ERROR: status = -117 [ 1091.048333][T30076] (syz.4.10243,30076,0):ocfs2_remove_inode:752 ERROR: status = -117 [ 1091.056427][T30076] (syz.4.10243,30076,0):ocfs2_wipe_inode:897 ERROR: status = -117 [ 1091.068158][T30076] (syz.4.10243,30076,0):ocfs2_delete_inode:1158 ERROR: status = -117 [ 1091.091117][T14104] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1091.141951][ T5857] ocfs2: Unmounting device (7,4) on (node local) [ 1091.201960][ T5936] usb 1-1: USB disconnect, device number 41 [ 1092.314171][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1094.139312][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1098.941126][ T5974] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration