last executing test programs: 2m42.73964018s ago: executing program 0 (id=1853): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)={0x54, r1, 0x1, 0xffffffff, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x10001}, {0xc, 0x90, 0x1ff}}]}, 0x54}}, 0x0) 2m42.583514335s ago: executing program 0 (id=1855): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x0) pwrite64(r0, &(0x7f0000000340)='!', 0x1, 0x400b5e) 2m41.542644308s ago: executing program 0 (id=1868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'dvmrp0\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 2m41.258768267s ago: executing program 0 (id=1871): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5, 0x400, 0x2, {0x77359400}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "8d416cfa6fc2313e"}}, 0x48}}, 0x0) 2m40.818819612s ago: executing program 0 (id=1880): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) utime(&(0x7f0000000000)='.\x00', &(0x7f0000000040)={0x2, 0x6}) 2m40.675456397s ago: executing program 0 (id=1876): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x57, 0x0, 0x7ff, {0xffff, 0x1}, {0x45, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0x80cb, 0x9}, {0x81, 0x1, 0x1, 0x7, 0x6, 0x1}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 2m25.579627404s ago: executing program 32 (id=1876): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x57, 0x0, 0x7ff, {0xffff, 0x1}, {0x45, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0x80cb, 0x9}, {0x81, 0x1, 0x1, 0x7, 0x6, 0x1}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1m17.588307582s ago: executing program 4 (id=2736): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040004) 1m17.414012388s ago: executing program 4 (id=2739): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x89f0, &(0x7f00000011c0)={0x6, 0xffff, 0x0, 0xd, 0x0, "5dee000000594000"}) 1m16.969952322s ago: executing program 4 (id=2745): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x287, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x6]}, {0x0, [0x1, 0x6, 0x1], 0x0, 0x3}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x11e, 0x0, 0x6}, {0x0, 0x0, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 1m16.72345911s ago: executing program 4 (id=2749): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000000000000000005,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x153e, &(0x7f00000034c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 1m16.133732129s ago: executing program 4 (id=2762): capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000003c0)={0xffc, 0x10ffff, 0xffffff88, 0x0, 0x10, 0x81}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1m15.865857868s ago: executing program 4 (id=2757): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000400)='./file0/file0\x00', 0x8a, &(0x7f00000001c0)={[{@data_err_abort}, {@jqfmt_vfsv0}, {@stripe}, {@minixdf}, {@sb={'sb', 0x3d, 0xaf8}}, {@noinit_itable}]}, 0x7, 0x46a, &(0x7f0000000640)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 1m15.259205207s ago: executing program 33 (id=2757): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000400)='./file0/file0\x00', 0x8a, &(0x7f00000001c0)={[{@data_err_abort}, {@jqfmt_vfsv0}, {@stripe}, {@minixdf}, {@sb={'sb', 0x3d, 0xaf8}}, {@noinit_itable}]}, 0x7, 0x46a, &(0x7f0000000640)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 4.291879211s ago: executing program 2 (id=3559): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2, 0x2}, 0xe) 4.209946064s ago: executing program 2 (id=3562): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000840)={[{@delalloc}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}, {@noblock_validity}, {@nogrpid}, {@mblk_io_submit}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x65cf}}], [], 0x3d}, 0x65, 0x51c, &(0x7f0000000200)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 3.666567981s ago: executing program 2 (id=3569): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x85, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, &(0x7f00000002c0)=0x100) 3.463032888s ago: executing program 2 (id=3574): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442a, &(0x7f0000004480)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) 2.235997327s ago: executing program 2 (id=3594): syz_open_dev$evdev(&(0x7f0000000080), 0x80000003, 0x100) r0 = socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c01060301090212000100000000090400000010", @ANYRES32=r0], 0x0) 1.403752754s ago: executing program 1 (id=3609): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x8050, &(0x7f00000004c0), 0x1, 0x418, &(0x7f0000001880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 1.282521049s ago: executing program 3 (id=3611): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000220000000a000100f9642d7452d579"], 0x20}}, 0x4000000) 1.198391531s ago: executing program 3 (id=3613): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000300)=0x4, 0x4) 1.032343656s ago: executing program 3 (id=3614): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getsadinfo={0x88, 0x23, 0x100, 0x70bd2a, 0x25dfdbfd, 0x0, [@etimer_thresh={0x8, 0xc, 0x5}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd27, 0x70bd24, 0x70bd28, 0x70bd2b, 0x8, [0x80000001, 0x9, 0xbd93, 0x6bca, 0x0]}}, @policy_type={0xa}, @coaddr={0x14, 0xe, @in6=@mcast1}, @srcaddr={0x14, 0xd, @in6=@mcast1}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 935.37138ms ago: executing program 3 (id=3615): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffe9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r0}) 934.69366ms ago: executing program 1 (id=3616): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000440)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f000000a300)={{r1, 0x0, 0x0, [0x40, 0x8]}, {0x80000000, 0x0, 0x7, [0x0, 0xfffffff9]}, 0x10000000, [0x8000000, 0x7]}) 839.777593ms ago: executing program 3 (id=3617): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f00000010c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x13}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x7f, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x28) 758.645135ms ago: executing program 5 (id=3618): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000300)=0x4) 744.114886ms ago: executing program 3 (id=3619): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000140)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4451, &(0x7f0000004480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0x7d) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 701.136837ms ago: executing program 1 (id=3620): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x3f, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x80, 0x0, 0xfffffffd, 0x26, 0x0, 0x1}) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) 638.719349ms ago: executing program 5 (id=3621): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5, 0x823, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ce7ffe681c735b5719cfc914234834162f4d55e5827a4fa9d907b30dee5f9af3dc029871384dcbed5f13a5464083101fd2055f2c4271f73e269eef4e7cc3151d"}}, 0x80}}, 0x0) 590.56292ms ago: executing program 5 (id=3622): unshare(0x6020400) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_targets\x00') poll(&(0x7f0000000780)=[{r0, 0x81}], 0x1, 0x7fffffff) 467.418895ms ago: executing program 5 (id=3623): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 409.007717ms ago: executing program 1 (id=3624): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xa2, &(0x7f0000000940), &(0x7f0000000080)=0x4) 318.113809ms ago: executing program 2 (id=3625): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x11c) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x6, 0x7fffffffffffffff, 0x3, 0x610}) 274.620471ms ago: executing program 1 (id=3626): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) 242.387202ms ago: executing program 5 (id=3627): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000000)={0x200000, 0x200000, 0x401, 0x2000, 0x4728}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 132.779485ms ago: executing program 1 (id=3628): mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) 0s ago: executing program 5 (id=3629): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): lid length. [ 303.069135][ T786] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 303.153456][T11935] loop3: detected capacity change from 0 to 32768 [ 303.231457][T11935] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 303.279105][ T786] usb 2-1: Using ep0 maxpacket: 32 [ 303.307163][ T786] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 148, changing to 11 [ 303.340059][ T786] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 303.369237][T11935] XFS (loop3): Ending clean mount [ 303.387316][T11945] loop4: detected capacity change from 0 to 32768 [ 303.397373][T11935] XFS (loop3): Quotacheck needed: Please wait. [ 303.399064][ T786] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.448892][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 303.469674][ T786] usb 2-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 303.488869][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.513737][T11935] XFS (loop3): Quotacheck: Done. [ 303.523395][T11945] ERROR: (device loop4): diAllocAG: free inode not found in summary map [ 303.523395][T11945] [ 303.571864][ T786] usb 2-1: config 0 descriptor?? [ 303.590970][T11943] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 303.640280][T11945] ERROR: (device loop4): remounting filesystem as read-only [ 303.670421][T11945] ialloc: diAlloc returned -5! [ 303.740929][ T5780] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 304.074652][ T786] asus 0003:048D:CE50.0028: ignoring exceeding usage max [ 304.088737][ T786] asus 0003:048D:CE50.0028: unknown main item tag 0xe [ 304.098475][ T786] asus 0003:048D:CE50.0028: unknown main item tag 0x2 [ 304.131612][ T786] asus 0003:048D:CE50.0028: hidraw0: USB HID v0.0c Device [HID 048d:ce50] on usb-dummy_hcd.1-1/input0 [ 304.335177][ T27] usb 2-1: USB disconnect, device number 21 [ 305.064503][T11981] loop4: detected capacity change from 0 to 40427 [ 305.098737][T11981] F2FS-fs (loop4): invalid crc value [ 305.143300][T11981] F2FS-fs (loop4): Found nat_bits in checkpoint [ 305.302824][T11981] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 305.409640][T10643] syz-executor: attempt to access beyond end of device [ 305.409640][T10643] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 305.432175][T10643] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 305.539677][ T786] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 305.780877][ T786] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 305.812125][ T786] usb 4-1: config 0 interface 0 has no altsetting 0 [ 305.818823][ T786] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 305.849663][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.874635][ T786] usb 4-1: config 0 descriptor?? [ 306.323159][ T786] belkin 0003:050D:3201.0029: unknown main item tag 0x0 [ 306.341073][ T786] belkin 0003:050D:3201.0029: unknown main item tag 0x0 [ 306.350109][T12047] loop4: detected capacity change from 0 to 128 [ 306.370977][ T786] belkin 0003:050D:3201.0029: unknown main item tag 0x0 [ 306.377991][ T786] belkin 0003:050D:3201.0029: unknown main item tag 0x0 [ 306.390089][ T786] belkin 0003:050D:3201.0029: unknown main item tag 0x0 [ 306.397149][ T786] belkin 0003:050D:3201.0029: unknown main item tag 0x0 [ 306.404265][ T786] belkin 0003:050D:3201.0029: unbalanced collection at end of report description [ 306.414504][ T786] belkin 0003:050D:3201.0029: parse failed [ 306.421040][ T786] belkin: probe of 0003:050D:3201.0029 failed with error -22 [ 306.439062][T12047] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 306.465499][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2498'. [ 306.495109][T12047] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 306.557518][ T28] audit: type=1326 audit(2000000010.750:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7519ce59 code=0x7ffc0000 [ 306.593263][T12055] IPVS: Error connecting to the multicast addr [ 306.626774][ T786] usb 4-1: USB disconnect, device number 26 [ 306.631238][ T28] audit: type=1326 audit(2000000010.750:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7519ce59 code=0x7ffc0000 [ 306.687835][ T28] audit: type=1326 audit(2000000010.750:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="syz.1.2499" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7519ce59 code=0x7ffc0000 [ 306.723876][ T28] audit: type=1326 audit(2000000010.750:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="syz.1.2499" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7519ce59 code=0x7ffc0000 [ 306.750506][T10643] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 306.822055][ T28] audit: type=1326 audit(2000000010.790:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="syz.1.2499" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7519ce59 code=0x7ffc0000 [ 306.852956][ T28] audit: type=1326 audit(2000000010.800:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b7519e6c7 code=0x7ffc0000 [ 306.878074][ T28] audit: type=1326 audit(2000000010.800:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6b7515d68e code=0x7ffc0000 [ 306.936760][ T28] audit: type=1326 audit(2000000010.810:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6b7515d68e code=0x7ffc0000 [ 307.005413][ T28] audit: type=1326 audit(2000000010.810:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6b7515d68e code=0x7ffc0000 [ 307.037152][ T28] audit: type=1326 audit(2000000010.810:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6b7515d68e code=0x7ffc0000 [ 307.448932][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 307.455071][ T5787] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 307.727792][T12071] loop2: detected capacity change from 0 to 32768 [ 308.025034][T12101] loop3: detected capacity change from 0 to 512 [ 308.082184][T12104] loop2: detected capacity change from 0 to 256 [ 308.090501][T12101] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.2521: inode has both inline data and extents flags [ 308.137725][T12101] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.2521: couldn't read orphan inode 15 (err -117) [ 308.155157][T12101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.184575][T12104] FAT-fs (loop2): Directory bread(block 64) failed [ 308.202519][T12101] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 308.229328][T12104] FAT-fs (loop2): Directory bread(block 65) failed [ 308.235978][T12104] FAT-fs (loop2): Directory bread(block 66) failed [ 308.249619][T12104] FAT-fs (loop2): Directory bread(block 67) failed [ 308.256262][T12104] FAT-fs (loop2): Directory bread(block 68) failed [ 308.281920][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.299362][T12104] FAT-fs (loop2): Directory bread(block 69) failed [ 308.310600][T12104] FAT-fs (loop2): Directory bread(block 70) failed [ 308.336124][T12104] FAT-fs (loop2): Directory bread(block 71) failed [ 308.371540][T12104] FAT-fs (loop2): Directory bread(block 72) failed [ 308.385167][T12104] FAT-fs (loop2): Directory bread(block 73) failed [ 308.482085][T12108] loop3: detected capacity change from 0 to 736 [ 308.709396][ T5843] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 308.901114][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 308.918886][ T5843] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 308.938049][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 308.958186][ T5843] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 308.978371][ T5843] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 308.998067][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.020621][ T5843] usb 2-1: config 0 descriptor?? [ 309.100503][T12112] loop3: detected capacity change from 0 to 32768 [ 309.253696][ T5843] hdpvr 2-1:0.0: firmware version 0xd8 dated I#SSP+g(j@9*03r% [ 309.279041][ T5843] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 309.579945][T12136] ucma_write: process 1321 (syz.2.2537) changed security contexts after opening file descriptor, this is not allowed. [ 309.696461][ T5843] hdpvr 2-1:0.0: Could not setup controls [ 309.725377][ T5843] hdpvr 2-1:0.0: registering videodev failed [ 309.747777][ T5843] hdpvr: probe of 2-1:0.0 failed with error -71 [ 309.767132][ T5843] usb 2-1: USB disconnect, device number 22 [ 309.909049][ T27] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 309.971379][T12142] loop2: detected capacity change from 0 to 32768 [ 310.089266][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 310.103629][ T27] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 310.118455][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.127010][ T27] usb 4-1: Product: syz [ 310.135903][ T27] usb 4-1: Manufacturer: syz [ 310.140623][ T27] usb 4-1: SerialNumber: syz [ 310.147647][ T27] usb 4-1: config 0 descriptor?? [ 310.156600][ T27] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 310.165266][ T27] dvb-usb: bulk message failed: -22 (2/0) [ 310.177656][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 310.187909][ T27] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 310.196108][ T27] usb 4-1: media controller created [ 310.214280][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 310.238171][ T27] usb 4-1: selecting invalid altsetting 7 [ 310.244164][ T27] cxusb: set interface failed [ 310.255937][ T27] dvb-usb: bulk message failed: -22 (1/0) [ 310.301686][ T27] DVB: Unable to find symbol lgdt330x_attach() [ 310.307906][ T27] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 310.374588][T12138] cxusb: i2c wr: len=79 is too big! [ 310.374588][T12138] [ 310.398905][ T27] rc_core: IR keymap rc-dvico-portable not found [ 310.412791][ T27] Registered IR keymap rc-empty [ 310.423094][ T27] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 310.435274][ T27] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input22 [ 310.460729][ T27] dvb-usb: schedule remote query interval to 100 msecs. [ 310.467884][ T27] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 310.484074][ T27] usb 4-1: USB disconnect, device number 27 [ 310.607481][ T27] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 310.662118][T12149] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2541'. [ 310.671380][T12149] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2541'. [ 310.685161][T12149] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2541'. [ 310.704352][T12150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2543'. [ 310.797629][T12152] gtp0: entered allmulticast mode [ 311.350423][T12172] loop2: detected capacity change from 0 to 128 [ 311.472192][T12173] loop3: detected capacity change from 0 to 4096 [ 311.554550][T12173] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 311.615915][T12177] loop2: detected capacity change from 0 to 4096 [ 311.622922][T12173] ntfs3: loop3: Failed to load $Extend (-22). [ 311.631161][T12173] ntfs3: loop3: Failed to initialize $Extend. [ 312.140594][T12191] loop3: detected capacity change from 0 to 2048 [ 312.159056][ T8] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 312.185858][T12193] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 312.301334][T12196] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2564'. [ 312.361769][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 312.389383][ T8] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 312.405788][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.414280][ T8] usb 2-1: Product: syz [ 312.418489][ T8] usb 2-1: Manufacturer: syz [ 312.423480][ T8] usb 2-1: SerialNumber: syz [ 312.439379][ T8] usb 2-1: config 0 descriptor?? [ 312.452017][ T8] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 312.470597][ T8] dvb-usb: bulk message failed: -22 (2/0) [ 312.492180][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 312.503478][ T8] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 312.521192][ T8] usb 2-1: media controller created [ 312.582052][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 312.646537][ T8] usb 2-1: selecting invalid altsetting 7 [ 312.669454][ T8] cxusb: set interface failed [ 312.674180][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 312.687211][T12183] cxusb: i2c wr: len=79 is too big! [ 312.687211][T12183] [ 312.755820][T12205] loop2: detected capacity change from 0 to 736 [ 312.789163][ T8] DVB: Unable to find symbol lgdt330x_attach() [ 312.806623][ T8] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 312.847323][ T5768] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 312.958720][ T8] rc_core: IR keymap rc-dvico-portable not found [ 312.973168][ T8] Registered IR keymap rc-empty [ 312.984301][ T8] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 313.014555][ T8] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input23 [ 313.037122][ T8] dvb-usb: schedule remote query interval to 100 msecs. [ 313.054446][ T8] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 313.098452][ T8] usb 2-1: USB disconnect, device number 23 [ 313.223065][ T8] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 313.331044][T12207] loop3: detected capacity change from 0 to 32768 [ 313.387537][T12207] ERROR: (device loop3): diNewExt: no free extents [ 313.387537][T12207] [ 313.431227][T12207] ERROR: (device loop3): remounting filesystem as read-only [ 313.440047][T12217] ERROR: (device loop3): diAllocAG: nfreeinos = 0, but iag on freelist [ 313.440047][T12217] [ 313.452239][T12217] ialloc: diAlloc returned -5! [ 313.461968][T12207] ialloc: diAlloc returned -5! [ 313.858957][ T8] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 313.969941][T12233] netlink: 'syz.3.2581': attribute type 1 has an invalid length. [ 313.977769][T12233] netlink: 'syz.3.2581': attribute type 2 has an invalid length. [ 313.987569][T12235] loop2: detected capacity change from 0 to 512 [ 314.007766][T12235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.035236][T12235] ext4 filesystem being mounted at /657/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.079049][ T8] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 314.105277][T12235] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 25 (only 1 groups) [ 314.116562][ T8] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 314.172463][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 314.203449][ T8] usb 2-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 314.222045][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.241198][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.266215][ T8] usb 2-1: config 0 descriptor?? [ 314.282565][T12219] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 314.340620][T12243] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2584'. [ 314.474417][T12249] tunl0: entered promiscuous mode [ 314.498065][T12249] netlink: 'syz.4.2588': attribute type 4 has an invalid length. [ 314.506232][T12249] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2588'. [ 314.700892][ T5843] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 314.730471][ T8] thrustmaster 0003:044F:B304.002A: unknown global tag 0xe [ 314.737725][ T8] thrustmaster 0003:044F:B304.002A: item 0 1 1 14 parsing failed [ 314.789558][ T8] thrustmaster 0003:044F:B304.002A: parse failed [ 314.795988][ T8] thrustmaster: probe of 0003:044F:B304.002A failed with error -22 [ 314.900555][ T5843] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 314.915133][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 314.926293][ T5843] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 314.944072][ T5843] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 314.954945][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.982894][ T27] usb 2-1: USB disconnect, device number 24 [ 315.003036][ T5843] usb 3-1: config 0 descriptor?? [ 315.008716][T12247] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 315.148535][T12253] loop4: detected capacity change from 0 to 32768 [ 315.214428][T12253] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 315.275261][T12253] XFS (loop4): Ending clean mount [ 315.291715][T12253] XFS (loop4): Quotacheck needed: Please wait. [ 315.361727][T12253] XFS (loop4): Quotacheck: Done. [ 315.463867][ T5843] dragonrise 0003:0079:0011.002B: unknown main item tag 0x3 [ 315.481987][ T5843] dragonrise 0003:0079:0011.002B: unknown main item tag 0x0 [ 315.489871][ T5843] dragonrise 0003:0079:0011.002B: unknown main item tag 0x0 [ 315.498268][ T5843] dragonrise 0003:0079:0011.002B: unknown main item tag 0x0 [ 315.506549][ T5843] dragonrise 0003:0079:0011.002B: unknown main item tag 0x0 [ 315.515245][ T5843] dragonrise 0003:0079:0011.002B: unknown main item tag 0x0 [ 315.522861][ T5843] dragonrise 0003:0079:0011.002B: unknown main item tag 0x0 [ 315.532298][ T5843] dragonrise 0003:0079:0011.002B: unknown main item tag 0x0 [ 315.554021][T10643] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 315.568899][ T5843] dragonrise 0003:0079:0011.002B: unknown main item tag 0x0 [ 315.591984][ T5843] dragonrise 0003:0079:0011.002B: hidraw0: USB HID v0.01 Device [HID 0079:0011] on usb-dummy_hcd.2-1/input0 [ 315.756121][ T5843] usb 3-1: USB disconnect, device number 28 [ 315.821930][T12281] loop3: detected capacity change from 0 to 64 [ 315.854257][T12277] fido_id[12277]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 316.670263][T12285] loop3: detected capacity change from 0 to 32768 [ 316.719449][T12285] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 316.801768][T12285] XFS (loop3): Ending clean mount [ 316.959530][ T5780] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 316.986169][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.992597][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.148993][T12309] mkiss: ax0: crc mode is auto. [ 317.833201][T12333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2621'. [ 318.140830][T12349] loop2: detected capacity change from 0 to 64 [ 318.446122][T12361] loop2: detected capacity change from 0 to 256 [ 318.475419][T12361] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 318.617809][T12367] vcan0: MTU too low for tipc bearer [ 318.650552][T12367] tipc: Enabling of bearer rejected, failed to enable media [ 319.089128][T12388] netlink: 'syz.2.2647': attribute type 10 has an invalid length. [ 319.209836][T12392] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2649'. [ 319.229117][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2649'. [ 319.238774][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2649'. [ 319.283812][T12391] loop2: detected capacity change from 0 to 4096 [ 319.298427][T12380] loop3: detected capacity change from 0 to 32768 [ 319.310604][T12380] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.2644 (12380) [ 319.320419][T12391] __ntfs_error: 3 callbacks suppressed [ 319.320461][T12391] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 319.379291][T12391] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 319.412348][T12391] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 319.425987][T12380] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 319.443412][T12391] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 319.450254][T12380] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 319.479695][T12380] BTRFS info (device loop3): enabling auto defrag [ 319.486159][T12380] BTRFS info (device loop3): use no compression [ 319.493771][T12380] BTRFS info (device loop3): max_inline at 4096 [ 319.500204][T12391] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 319.511644][T12380] BTRFS info (device loop3): using free space tree [ 319.522182][T12391] ntfs: volume version 3.1. [ 319.529215][T12391] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 319.541533][T12391] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 319.555258][T12391] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 319.572632][T12391] ntfs: (device loop2): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 319.582934][T12391] ntfs: (device loop2): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 319.721530][T12380] BTRFS info (device loop3): enabling ssd optimizations [ 319.728563][T12380] BTRFS info (device loop3): auto enabling async discard [ 319.938530][ T5780] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 320.053471][ T7580] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop3 scanned by udevd (7580) [ 320.444147][T12425] [U] v3f"S/4:XTzWtlW= [ 320.450716][T12425] [U] J"e:" [ 320.523635][T12416] loop2: detected capacity change from 0 to 40427 [ 320.536108][T12416] F2FS-fs (loop2): invalid crc value [ 320.561870][T12416] F2FS-fs (loop2): Found nat_bits in checkpoint [ 320.676123][T12416] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 320.812692][ T5777] syz-executor: attempt to access beyond end of device [ 320.812692][ T5777] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 320.844241][ T5777] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 321.365578][T12445] loop3: detected capacity change from 0 to 2048 [ 321.374044][T12447] loop2: detected capacity change from 0 to 1024 [ 321.395006][T12445] NILFS (loop3): couldn't find nilfs on the device [ 321.982622][T12466] loop4: detected capacity change from 0 to 4096 [ 322.033170][T12466] NILFS (loop4): invalid segment: Checksum error in segment payload [ 322.052443][T12466] NILFS (loop4): trying rollback from an earlier position [ 322.109000][T12466] NILFS (loop4): recovery complete [ 322.134883][T12474] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 322.685603][T12488] loop4: detected capacity change from 0 to 4096 [ 323.142283][T12477] loop3: detected capacity change from 0 to 32768 [ 323.173023][T12477] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 323.226720][T12477] JBD2: Ignoring recovery information on journal [ 323.304274][T12477] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 323.384630][ T27] kernel write not supported for file /input/event0 (pid: 27 comm: kworker/1:1) [ 323.668242][T12477] syz.3.2678 (12477) used greatest stack depth: 18224 bytes left [ 323.842275][ T5780] ocfs2: Unmounting device (7,3) on (node local) [ 324.274061][T12513] loop4: detected capacity change from 0 to 32768 [ 324.394984][T12513] read_mapping_page failed! [ 324.424033][T12543] loop2: detected capacity change from 0 to 64 [ 324.426612][T12513] ERROR: (device loop4): txCommit: [ 324.426612][T12513] [ 325.509004][ T8] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 325.642712][T12591] loop2: detected capacity change from 0 to 256 [ 325.659708][T12591] exfat: Deprecated parameter 'utf8' [ 325.665043][T12591] exfat: Deprecated parameter 'utf8' [ 325.684353][T12591] exfat: Deprecated parameter 'utf8' [ 325.695731][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 325.695743][ T28] audit: type=1326 audit(2000000029.890:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12594 comm="syz.4.2723" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11a3f9ce59 code=0x0 [ 325.733688][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.762843][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.782370][T12591] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 325.815870][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 325.831452][ T8] usb 4-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 325.840936][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.854075][ T8] usb 4-1: config 0 descriptor?? [ 326.283426][ T8] playstation 0003:054C:09CC.002C: unknown main item tag 0x0 [ 326.291130][ T8] playstation 0003:054C:09CC.002C: unknown main item tag 0x0 [ 326.298613][ T8] playstation 0003:054C:09CC.002C: unknown main item tag 0x0 [ 326.306576][ T8] playstation 0003:054C:09CC.002C: unknown main item tag 0x0 [ 326.331373][ T8] playstation 0003:054C:09CC.002C: unknown main item tag 0x0 [ 326.338806][ T8] playstation 0003:054C:09CC.002C: unknown main item tag 0x0 [ 326.350014][T12615] veth0_to_bond: entered allmulticast mode [ 326.362057][ T8] playstation 0003:054C:09CC.002C: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.3-1/input0 [ 326.415277][ T59] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 326.485797][ T8] playstation 0003:054C:09CC.002C: Failed to retrieve feature with reportID 18: -71 [ 326.506300][ T8] playstation 0003:054C:09CC.002C: Failed to retrieve DualShock4 pairing info: -71 [ 326.538938][ T8] playstation 0003:054C:09CC.002C: Failed to get MAC address from DualShock4 [ 326.559662][ T8] playstation 0003:054C:09CC.002C: Failed to create dualshock4. [ 326.590151][ T8] playstation: probe of 0003:054C:09CC.002C failed with error -71 [ 326.624231][ T8] usb 4-1: USB disconnect, device number 28 [ 326.989742][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2741'. [ 327.510094][T12659] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2748'. [ 327.583002][T12661] loop4: detected capacity change from 0 to 256 [ 327.610042][T12661] exfat: Deprecated parameter 'namecase' [ 327.724219][T12661] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 328.088916][ T5843] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 328.281212][ T5843] usb 3-1: Using ep0 maxpacket: 16 [ 328.309950][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.338455][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.388871][ T5843] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 328.449973][ T5843] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 328.479989][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.495219][ T5843] usb 3-1: config 0 descriptor?? [ 328.637953][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.822982][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.917523][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.950089][ T5843] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 328.957389][ T5843] microsoft 0003:045E:07DA.002D: ignoring exceeding usage max [ 328.992008][ T5843] microsoft 0003:045E:07DA.002D: No inputs registered, leaving [ 329.024942][ T5843] microsoft 0003:045E:07DA.002D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 329.070900][ T5843] microsoft 0003:045E:07DA.002D: no inputs found [ 329.095164][ T5843] microsoft 0003:045E:07DA.002D: could not initialize ff, continuing anyway [ 329.121167][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.160758][ T5843] usb 3-1: USB disconnect, device number 29 [ 329.303125][T12699] fido_id[12699]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 329.578284][T12686] loop3: detected capacity change from 0 to 32768 [ 329.636425][T12686] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 329.791868][T12686] XFS (loop3): Ending clean mount [ 329.825962][T12686] XFS (loop3): Quotacheck needed: Please wait. [ 330.001042][T12686] XFS (loop3): Quotacheck: Done. [ 330.112450][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 330.124386][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 330.140977][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 330.157649][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 330.179793][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 330.190662][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 330.246809][ T5780] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 330.326222][T12735] netlink: 'syz.2.2770': attribute type 2 has an invalid length. [ 330.855229][T12743] loop2: detected capacity change from 0 to 4096 [ 330.994858][T12743] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 331.017400][T12743] ntfs3: loop2: Failed to load $Extend (-22). [ 331.024979][T12743] ntfs3: loop2: Failed to initialize $Extend. [ 331.159250][ T28] audit: type=1800 audit(2000000035.350:166): pid=12743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2773" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 331.247408][ T5777] ntfs3: loop2: ino=9, ntfs_sync_fs failed, -22. [ 331.327789][T12727] chnl_net:caif_netlink_parms(): no params data found [ 331.744043][T12774] loop3: detected capacity change from 0 to 2048 [ 331.778186][T12774] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 331.854796][T12774] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 331.894302][T12774] UDF-fs: Scanning with blocksize 512 failed [ 331.956001][T12774] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 331.986741][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2783'. [ 332.109519][T12727] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.116767][T12727] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.127747][T12727] bridge_slave_0: entered allmulticast mode [ 332.148379][T12727] bridge_slave_0: entered promiscuous mode [ 332.237075][T12727] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.258193][ T5787] Bluetooth: hci2: command tx timeout [ 332.288173][T12727] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.295532][T12727] bridge_slave_1: entered allmulticast mode [ 332.303872][T12727] bridge_slave_1: entered promiscuous mode [ 332.365664][T12789] loop3: detected capacity change from 0 to 4096 [ 332.459599][ T49] hsr_slave_0: left promiscuous mode [ 332.497491][T12789] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 332.508912][ T49] hsr_slave_1: left promiscuous mode [ 332.553707][T12789] ntfs3: loop3: Failed to load $Extend (-22). [ 332.564463][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.573004][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.589584][T12789] ntfs3: loop3: Failed to initialize $Extend. [ 332.634922][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.681481][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.704147][ T49] bridge_slave_1: left allmulticast mode [ 332.718170][ T49] bridge_slave_1: left promiscuous mode [ 332.732898][ T28] audit: type=1800 audit(2000000036.930:167): pid=12789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2785" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 332.740974][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.819868][ T49] bridge_slave_0: left allmulticast mode [ 332.825621][ T49] bridge_slave_0: left promiscuous mode [ 332.839076][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.885091][ T5780] ntfs3: loop3: ino=9, ntfs_sync_fs failed, -22. [ 332.956932][ T49] veth1_macvtap: left promiscuous mode [ 332.979495][ T49] veth0_macvtap: left promiscuous mode [ 332.985198][ T49] veth1_vlan: left promiscuous mode [ 333.000224][ T49] veth0_vlan: left promiscuous mode [ 333.019047][T12804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2789'. [ 333.600714][T12826] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 333.607261][T12826] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 333.661927][T12826] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 333.675352][T12826] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 333.698339][T12828] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2800'. [ 333.710061][T12826] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 333.738952][T12826] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 333.756046][T12826] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 333.777289][T12826] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 333.784443][T12826] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 333.792094][T12826] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 334.063308][T12834] loop3: detected capacity change from 0 to 256 [ 334.102859][T12834] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 334.333588][ T5787] Bluetooth: hci2: command tx timeout [ 334.391492][T12838] loop3: detected capacity change from 0 to 4096 [ 334.479374][T12841] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 334.517594][T12838] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 334.739159][ T5785] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 334.931492][ T5785] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.941900][ T5785] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 334.951295][ T5785] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 334.968141][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.995759][ T5785] usb 3-1: config 0 descriptor?? [ 335.025779][ T5785] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 335.039002][ T5785] dvb-usb: bulk message failed: -22 (3/0) [ 335.055635][ T49] team0 (unregistering): Port device team_slave_1 removed [ 335.065519][ T5785] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 335.075084][T12851] loop3: detected capacity change from 0 to 256 [ 335.086641][ T5785] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 335.115174][ T5785] usb 3-1: media controller created [ 335.138025][ T5785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 335.161986][ T28] audit: type=1800 audit(2000000039.350:168): pid=12851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2811" name="file1" dev="loop3" ino=1048742 res=0 errno=0 [ 335.185660][ T49] team0 (unregistering): Port device team_slave_0 removed [ 335.190130][ T5785] dvb-usb: bulk message failed: -22 (6/0) [ 335.225407][ T5785] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 335.232716][T12840] dvb-usb: bulk message failed: -22 (56/0) [ 335.264393][ T5785] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input26 [ 335.319980][ T5785] dvb-usb: schedule remote query interval to 150 msecs. [ 335.341034][ T5785] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 335.372117][ T5785] usb 3-1: USB disconnect, device number 30 [ 335.425119][ T5785] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 335.451826][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.585774][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.895609][T12855] loop3: detected capacity change from 0 to 32768 [ 335.912271][T12855] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 335.937943][T12855] JBD2: Ignoring recovery information on journal [ 336.071337][T12855] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 336.311842][ T5780] ocfs2: Unmounting device (7,3) on (node local) [ 336.366267][ T49] bond0 (unregistering): Released all slaves [ 336.415515][ T5787] Bluetooth: hci2: command tx timeout [ 336.625318][T12871] netlink: 'syz.3.2816': attribute type 1 has an invalid length. [ 336.647713][T12871] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2816'. [ 336.671914][T12727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.711959][T12727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.846167][T12727] team0: Port device team_slave_0 added [ 336.867797][T12727] team0: Port device team_slave_1 added [ 336.940288][T12727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.947301][T12727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.009020][T12727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.049035][T12727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.061702][T12727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.180782][T12727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.221768][T12886] netlink: 'syz.3.2824': attribute type 1 has an invalid length. [ 337.347325][T12727] hsr_slave_0: entered promiscuous mode [ 337.387892][T12727] hsr_slave_1: entered promiscuous mode [ 337.422342][T12727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.453223][T12727] Cannot create hsr debugfs directory [ 337.735712][T12908] netlink: 'syz.3.2831': attribute type 3 has an invalid length. [ 338.022213][T12912] netlink: 'syz.3.2832': attribute type 3 has an invalid length. [ 338.048975][T12912] netlink: 'syz.3.2832': attribute type 1 has an invalid length. [ 338.056763][T12912] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.2832'. [ 338.100650][T12727] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 338.122187][T12727] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 338.143074][T12727] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 338.194011][T12727] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 338.459808][T12727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.488913][ T5787] Bluetooth: hci2: command tx timeout [ 338.546173][T12906] loop2: detected capacity change from 0 to 32768 [ 338.590765][T12727] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.637790][T12906] non-latin1 character 0x466c found in JFS file name [ 338.652765][T12862] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.659957][T12862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.675592][T12906] mount with iocharset=utf8 to access [ 338.776235][T12922] loop3: detected capacity change from 0 to 512 [ 338.790904][T12862] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.798066][T12862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.827241][T12922] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 338.923220][T12922] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2835: invalid indirect mapped block 4294967295 (level 1) [ 339.051423][T12922] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2835: invalid indirect mapped block 4294967295 (level 1) [ 339.079189][T12922] EXT4-fs (loop3): 2 truncates cleaned up [ 339.086119][T12922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.123266][T12922] EXT4-fs error (device loop3): ext4_get_parent:1906: inode #11: comm syz.3.2835: bad parent inode number: 3 [ 339.366081][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.637639][T12727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.677446][ T5787] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 340.038738][T12964] loop3: detected capacity change from 0 to 256 [ 340.066692][T12964] exfat: Deprecated parameter 'utf8' [ 340.102031][T12964] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 340.199011][ T27] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 340.382530][T12727] veth0_vlan: entered promiscuous mode [ 340.401256][ T27] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 340.425857][T12727] veth1_vlan: entered promiscuous mode [ 340.439084][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.479682][ T27] usb 2-1: config 0 descriptor?? [ 340.494466][ T27] cp210x 2-1:0.0: cp210x converter detected [ 340.541489][T12727] veth0_macvtap: entered promiscuous mode [ 340.581528][T12727] veth1_macvtap: entered promiscuous mode [ 340.625844][T12727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.671419][T12727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.703168][T12727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.728543][T12727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.757513][T12727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.787565][T12727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.821476][T12727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.896597][T12727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.926043][T12727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.942503][ T27] usb 2-1: cp210x converter now attached to ttyUSB0 [ 340.956326][T12727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.975909][T12956] loop2: detected capacity change from 0 to 32768 [ 340.994733][T12727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.047144][T12956] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 341.063749][T12727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.075481][T12727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.087308][T12727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.102147][T12727] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.128620][T12956] XFS (loop2): Ending clean mount [ 341.142855][T12727] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.193543][T12727] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.204751][ T5843] usb 2-1: USB disconnect, device number 25 [ 341.228941][T12727] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.239616][ T5843] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 341.279425][ T5843] cp210x 2-1:0.0: device disconnected [ 341.344603][ T5777] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 341.460184][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.488886][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.620818][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.649091][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.832938][T12984] loop3: detected capacity change from 0 to 32768 [ 341.893827][T12984] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2848 (12984) [ 341.956377][T12984] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 341.978389][T12984] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 342.007706][T12984] BTRFS info (device loop3): setting nodatasum [ 342.029531][T12984] BTRFS info (device loop3): force zlib compression, level 3 [ 342.036970][T12984] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 342.070319][T12984] BTRFS info (device loop3): use lzo compression, level 0 [ 342.097937][T12984] BTRFS info (device loop3): turning on flush-on-commit [ 342.123829][T12984] BTRFS info (device loop3): enabling auto defrag [ 342.159445][T12984] BTRFS info (device loop3): max_inline at 4096 [ 342.165739][T12984] BTRFS info (device loop3): force zlib compression, level 3 [ 342.194598][T12984] BTRFS info (device loop3): using free space tree [ 342.285279][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2854'. [ 342.432930][T12984] BTRFS info (device loop3): enabling ssd optimizations [ 342.499034][T12984] BTRFS info (device loop3): auto enabling async discard [ 342.654872][ T28] audit: type=1800 audit(2000000046.850:169): pid=12984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2848" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 342.812125][T13048] autofs4:pid:13048:autofs_fill_super: called with bogus options [ 342.881128][T13050] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 342.922466][ T5780] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 343.237417][T13054] loop5: detected capacity change from 0 to 4096 [ 343.346467][T13054] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 343.531028][T13054] netlink: 388 bytes leftover after parsing attributes in process `syz.5.2863'. [ 343.767342][T13080] loop3: detected capacity change from 0 to 256 [ 343.813922][T13080] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 343.902149][ T28] audit: type=1800 audit(2000000048.100:170): pid=13080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2871" name="file1" dev="loop3" ino=1048746 res=0 errno=0 [ 343.965085][T13083] loop5: detected capacity change from 0 to 1024 [ 343.975467][T13080] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 344.035450][T13080] FAT-fs (loop3): Filesystem has been set read-only [ 344.138039][T13083] hfsplus: bad catalog entry type [ 344.263561][ T11] hfsplus: b-tree write err: -5, ino 25 [ 344.270607][ T11] hfsplus: b-tree write err: -5, ino 4 [ 344.276178][ T11] hfsplus: b-tree write err: -5, ino 2 [ 344.332176][T13094] loop3: detected capacity change from 0 to 512 [ 344.373960][T13094] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 344.454319][T13094] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2877: invalid indirect mapped block 9 (level 0) [ 344.528327][T13094] EXT4-fs (loop3): 1 truncate cleaned up [ 344.554266][T13094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.769457][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.834042][ T27] libceph: connect (1)[c::]:6789 error -101 [ 344.845473][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 344.859142][ T27] libceph: connect (1)[c::]:6789 error -101 [ 344.865371][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 344.908960][T10864] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 344.964388][T13124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2885'. [ 344.989313][T13124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2885'. [ 345.118905][T10864] usb 2-1: Using ep0 maxpacket: 16 [ 345.131218][ T27] libceph: connect (1)[c::]:6789 error -101 [ 345.141168][T10864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.149523][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 345.184407][T10864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.205896][T10864] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 345.244543][T10864] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 345.268928][T10864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.295562][T10864] usb 2-1: config 0 descriptor?? [ 345.639423][T13115] ceph: No mds server is up or the cluster is laggy [ 345.662137][ T27] libceph: connect (1)[c::]:6789 error -101 [ 345.682465][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 345.766406][T10864] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 345.809076][T13142] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2890'. [ 345.812594][T10864] microsoft 0003:045E:07DA.002E: ignoring exceeding usage max [ 345.865472][T10864] microsoft 0003:045E:07DA.002E: No inputs registered, leaving [ 345.875041][T13121] loop3: detected capacity change from 0 to 40427 [ 345.883201][T10864] microsoft 0003:045E:07DA.002E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 345.898161][T13121] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 345.906962][T10864] microsoft 0003:045E:07DA.002E: no inputs found [ 345.913469][T13121] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 345.921935][T10864] microsoft 0003:045E:07DA.002E: could not initialize ff, continuing anyway [ 345.969626][T13121] F2FS-fs (loop3): Found nat_bits in checkpoint [ 346.106252][ T5843] usb 2-1: USB disconnect, device number 26 [ 346.186131][T13121] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 346.212136][T13149] fido_id[13149]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 346.215651][T13121] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 346.410916][ T28] audit: type=1800 audit(2000000050.610:171): pid=13121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2884" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 346.572956][T13163] loop5: detected capacity change from 0 to 4096 [ 346.650287][T13167] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 347.314175][T13180] loop2: detected capacity change from 0 to 1764 [ 347.332628][T13183] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2903'. [ 347.659050][T13191] loop3: detected capacity change from 0 to 128 [ 349.209570][T10864] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 349.217360][ T5843] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 349.405964][T13263] loop5: detected capacity change from 0 to 512 [ 349.409179][ T5843] usb 3-1: Using ep0 maxpacket: 8 [ 349.417455][T10864] usb 2-1: Using ep0 maxpacket: 8 [ 349.429104][ T5767] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 349.440177][T10864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.452075][ T5843] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.452821][T13263] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 349.476275][T10864] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 349.489646][ T5843] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.500357][ T5843] usb 3-1: config 0 interface 0 has no altsetting 0 [ 349.506967][ T5843] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 349.516508][T10864] usb 2-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 349.526132][T10864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.545910][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.558168][T13263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.581397][T10864] usb 2-1: config 0 descriptor?? [ 349.587983][T13263] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 349.602496][ T5843] usb 3-1: config 0 descriptor?? [ 349.656560][ T5767] usb 4-1: unable to get BOS descriptor or descriptor too short [ 349.676016][ T5767] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.686500][ T5767] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 349.710106][T12727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.735171][ T5767] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 349.754259][ T5767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.778547][ T5767] usb 4-1: Product: syz [ 349.784953][ T5767] usb 4-1: Manufacturer: syz [ 349.790864][ T5767] usb 4-1: SerialNumber: syz [ 349.813660][ T5767] usb 4-1: selecting invalid altsetting 1 [ 349.824887][ T5767] usb 4-1: unit 6 not found! [ 350.024237][T10864] macally 0003:060B:0001.002F: unknown main item tag 0x0 [ 350.041122][ T5843] smartjoyplus 0003:6666:8804.0030: unknown main item tag 0x0 [ 350.048733][ T5843] smartjoyplus 0003:6666:8804.0030: unknown main item tag 0x0 [ 350.056410][T10864] macally 0003:060B:0001.002F: unknown main item tag 0x0 [ 350.064047][T10864] macally 0003:060B:0001.002F: unknown main item tag 0x0 [ 350.077049][ T5843] smartjoyplus 0003:6666:8804.0030: unknown main item tag 0x0 [ 350.084619][T10864] macally 0003:060B:0001.002F: unknown main item tag 0x0 [ 350.091978][ T5843] smartjoyplus 0003:6666:8804.0030: unknown main item tag 0x0 [ 350.099655][T10864] macally 0003:060B:0001.002F: unknown main item tag 0x0 [ 350.106721][T10864] macally 0003:060B:0001.002F: unknown main item tag 0x0 [ 350.114196][ T5842] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 350.119006][ T5843] smartjoyplus 0003:6666:8804.0030: unknown main item tag 0x0 [ 350.133993][T10864] macally 0003:060B:0001.002F: unknown main item tag 0x0 [ 350.143955][T10864] macally 0003:060B:0001.002F: item fetching failed at offset 42/43 [ 350.152670][ T5843] smartjoyplus 0003:6666:8804.0030: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.2-1/input0 [ 350.166307][T10864] macally: probe of 0003:060B:0001.002F failed with error -22 [ 350.175219][ T5843] smartjoyplus 0003:6666:8804.0030: no output reports found [ 350.244654][T10864] usb 3-1: USB disconnect, device number 31 [ 350.257667][ T27] usb 2-1: USB disconnect, device number 27 [ 350.275441][T13270] fido_id[13270]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 350.311634][ T5842] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 350.328050][ T5842] usb 6-1: config 0 has no interface number 0 [ 350.335487][ T5842] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 350.351641][ T5842] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 350.363087][ T5842] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 350.373641][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.390476][ T5842] usb 6-1: config 0 descriptor?? [ 350.396390][T13269] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 350.421432][ T5842] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 350.473006][ T5767] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 350.503094][ T5767] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 350.516663][ T5767] usb 4-1: USB disconnect, device number 29 [ 350.536075][ T5768] udevd[5768]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.632193][ T27] usb 6-1: USB disconnect, device number 2 [ 350.844761][T13273] program syz.1.2936 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 351.540036][ T5843] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 351.589063][ T5823] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 351.748682][ T5843] usb 2-1: unable to get BOS descriptor or descriptor too short [ 351.761807][ T5843] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.782399][ T5843] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 351.791554][ T5843] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 351.806897][ T5823] usb 3-1: Using ep0 maxpacket: 8 [ 351.820189][ T5823] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 351.828627][ T5843] usb 2-1: string descriptor 0 read error: -22 [ 351.845151][ T5843] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 351.857074][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.869336][ T5823] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 351.873929][T13317] loop5: detected capacity change from 0 to 512 [ 351.878399][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.878421][ T5823] usb 3-1: Product: syz [ 351.878434][ T5823] usb 3-1: Manufacturer: syz [ 351.878446][ T5823] usb 3-1: SerialNumber: syz [ 351.911376][ T5823] usb 3-1: config 0 descriptor?? [ 351.934928][ T5823] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 351.948041][ T5823] usb 3-1: setting power ON [ 351.965767][ T5823] dvb-usb: bulk message failed: -22 (2/0) [ 351.981385][ T5823] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 352.010606][ T5823] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 352.030841][T13317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.043636][ T5823] usb 3-1: media controller created [ 352.052330][T13317] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 352.090852][ T5823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 352.104399][T13317] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #2: comm syz.5.2957: corrupted inode contents [ 352.142710][T13317] EXT4-fs error (device loop5): ext4_dirty_inode:6143: inode #2: comm syz.5.2957: mark_inode_dirty error [ 352.157685][ T5823] usb 3-1: selecting invalid altsetting 6 [ 352.163552][ T5823] usb 3-1: digital interface selection failed (-22) [ 352.172644][ T5823] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 352.182501][ T5823] usb 3-1: setting power OFF [ 352.187677][ T5823] dvb-usb: bulk message failed: -22 (2/0) [ 352.207349][ T5823] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 352.207379][T13294] dvb-usb: bulk message failed: -22 (3/0) [ 352.224617][T13294] cxusb: i2c rd: len=147 is too big! [ 352.224617][T13294] [ 352.235854][T13317] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #2: comm syz.5.2957: corrupted inode contents [ 352.239037][ T5823] (NULL device *): no alternate interface [ 352.333613][ T5843] usb 2-1: Can't set UAC3 power state to 1 for id 10 [ 352.347368][ T5823] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 352.378265][ T5823] usb 3-1: USB disconnect, device number 32 [ 352.391638][ T5843] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 352.413724][ T5843] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 352.474153][ T5843] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 352.503904][ T5843] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 352.527336][ T5843] usb 2-1: USB disconnect, device number 28 [ 352.646791][T12727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.396136][T13345] UBIFS error (pid: 13345): cannot open "usrquota", error -22 [ 353.476090][ T5842] libceph: connect (1)[c::]:6789 error -101 [ 353.490076][ T5842] libceph: mon0 (1)[c::]:6789 connect error [ 353.750130][ T5842] libceph: connect (1)[c::]:6789 error -101 [ 353.757440][ T5842] libceph: mon0 (1)[c::]:6789 connect error [ 353.768277][T13357] kAFS: unable to lookup cell 'sէKyy [ 353.768277][T13357] [ 353.768277][T13357] =6%*;eܲ5;Z*d{iElZSjUF/k!btF\_vfVnDPPB1%A)X\YT"8ώdJ_.5d#ۜhGp6"5ͺ*,ImI-(WA?WZ)n[qG jnڇ%(J-%ؘccʵ{|6ZA5k@a+oST;]5 !G3{K,' [ 354.159485][T13367] netem: change failed [ 354.172642][T13342] orangefs_mount: mount request failed with -4 [ 354.269543][ T5842] libceph: connect (1)[c::]:6789 error -101 [ 354.275735][ T5842] libceph: mon0 (1)[c::]:6789 connect error [ 354.290151][T13347] ceph: No mds server is up or the cluster is laggy [ 354.313639][T13371] netlink: 'syz.1.2977': attribute type 4 has an invalid length. [ 354.432205][T13373] sp0: Synchronizing with TNC [ 354.507984][T13372] [U] [ 354.515761][T13378] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2979'. [ 356.154022][T13417] loop2: detected capacity change from 0 to 40427 [ 356.161427][T13423] loop3: detected capacity change from 0 to 32768 [ 356.191414][T13417] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 356.215252][T13417] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 356.231561][T13423] (syz.3.3001,13423,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 356.262588][T13417] F2FS-fs (loop2): Found nat_bits in checkpoint [ 356.300180][T13423] (syz.3.3001,13423,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 356.423659][T13417] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 356.450412][T13417] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 356.450621][T13423] JBD2: Ignoring recovery information on journal [ 356.542954][T13423] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 356.584088][ T28] audit: type=1800 audit(2000000060.780:172): pid=13417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2997" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 356.848696][T13433] loop5: detected capacity change from 0 to 32768 [ 356.867564][ T5780] ocfs2: Unmounting device (7,3) on (node local) [ 356.875969][T13449] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3011'. [ 357.592678][T13463] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3017'. [ 357.657233][T13464] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 358.000403][T13459] loop3: detected capacity change from 0 to 32768 [ 358.104407][T13459] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 358.122136][ T5823] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 358.320940][ T5823] usb 3-1: too many configurations: 172, using maximum allowed: 8 [ 358.353129][ T5823] usb 3-1: config index 0 descriptor too short (expected 65428, got 133) [ 358.388848][ T5823] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.396809][T13482] loop5: detected capacity change from 0 to 1024 [ 358.433544][ T5823] usb 3-1: config index 1 descriptor too short (expected 65428, got 133) [ 358.450389][ T5780] ocfs2: Unmounting device (7,3) on (node local) [ 358.477827][ T5823] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.533211][ T5823] usb 3-1: config index 2 descriptor too short (expected 65428, got 133) [ 358.583402][ T5823] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.629948][ T5823] usb 3-1: config index 3 descriptor too short (expected 65428, got 133) [ 358.638474][ T5823] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.708089][ T5823] usb 3-1: config index 4 descriptor too short (expected 65428, got 133) [ 358.728576][ T5823] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.760148][ T5823] usb 3-1: config index 5 descriptor too short (expected 65428, got 133) [ 358.789391][ T5823] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.812733][ T5823] usb 3-1: config index 6 descriptor too short (expected 65428, got 133) [ 358.838871][ T5823] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.904751][ T5823] usb 3-1: config index 7 descriptor too short (expected 65428, got 133) [ 358.922248][ T5823] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.951157][ T5823] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 358.966260][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.975403][ T5823] usb 3-1: Product: syz [ 358.984889][ T5823] usb 3-1: Manufacturer: syz [ 358.992638][ T5823] usb 3-1: SerialNumber: syz [ 359.007436][ T5823] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 359.033949][ T786] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 359.369437][T13507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3032'. [ 359.378494][T13507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3032'. [ 359.417441][T13507] netlink: 'syz.5.3032': attribute type 11 has an invalid length. [ 359.664614][T13522] loop3: detected capacity change from 0 to 128 [ 359.734065][T13522] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 359.769705][T13522] hpfs: filesystem error: improperly stopped [ 359.775828][T13522] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 359.810007][T13522] hpfs: You really don't want any checks? You are crazy... [ 359.819236][T13522] hpfs: Code page index out of array [ 359.840206][T13522] hpfs: code page support is disabled [ 359.847400][T13522] hpfs: hpfs_map_4sectors(): unaligned read [ 359.892987][T13522] hpfs: hpfs_map_4sectors(): unaligned read [ 359.919012][T13522] hpfs: filesystem error: unable to find root dir [ 359.992586][ T5823] usb 3-1: USB disconnect, device number 33 [ 360.313396][T13536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3040'. [ 360.488951][ T786] usb 3-1: Service connection timeout for: 256 [ 360.528891][ T786] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 360.537579][ T786] ath9k_htc: Failed to initialize the device [ 360.600388][ T5823] usb 3-1: ath9k_htc: USB layer deinitialized [ 360.873774][T13560] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 361.246938][T13579] loop2: detected capacity change from 0 to 512 [ 361.262804][T13579] EXT4-fs: Ignoring removed orlov option [ 361.299226][T13579] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 361.676540][T13592] loop3: detected capacity change from 0 to 8192 [ 361.716644][T13592] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 361.802815][T13592] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 361.812130][T13592] REISERFS (device loop3): using ordered data mode [ 361.818662][T13592] reiserfs: using flush barriers [ 361.825789][T13592] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 361.843142][T13592] REISERFS (device loop3): checking transaction log (loop3) [ 362.037871][T13592] REISERFS (device loop3): Using tea hash to sort names [ 362.047075][T13592] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 362.221425][T13612] netlink: 'syz.1.3066': attribute type 29 has an invalid length. [ 362.249747][T13614] loop5: detected capacity change from 0 to 512 [ 362.344858][T13618] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3069'. [ 362.368633][T13614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.474992][T13614] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.687832][T13614] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 362.737095][T13614] EXT4-fs: Cannot change journaled quota options when quota turned on [ 362.867530][T13640] loop3: detected capacity change from 0 to 512 [ 362.910108][T13640] EXT4-fs (loop3): 1 truncate cleaned up [ 362.917214][T13640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.955583][T12727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.049323][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 363.151741][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.239142][ T786] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 363.388316][T13659] loop5: detected capacity change from 0 to 128 [ 363.448861][ T786] usb 3-1: Using ep0 maxpacket: 32 [ 363.467554][ T786] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 363.486211][ T786] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 363.505731][ T786] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 363.525443][ T786] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 363.572054][ T786] usb 3-1: config 0 interface 0 has no altsetting 0 [ 363.595461][ T786] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 363.621760][ T786] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 363.647138][ T786] usb 3-1: Product: syz [ 363.665718][ T786] usb 3-1: Manufacturer: syz [ 363.678626][ T786] usb 3-1: SerialNumber: syz [ 363.701370][ T786] usb 3-1: config 0 descriptor?? [ 363.727047][ T786] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 363.755302][T13670] loop5: detected capacity change from 0 to 512 [ 363.769662][ T8] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 363.777131][T13670] EXT4-fs: Ignoring removed nobh option [ 363.794578][T13670] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 363.810340][T13670] EXT4-fs (loop5): 1 truncate cleaned up [ 363.820593][T13670] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.832867][ T786] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 363.965759][T12727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.002234][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 364.025242][ T5842] usb 3-1: USB disconnect, device number 34 [ 364.034623][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.055942][ T5842] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 364.069889][ T8] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.098894][ T8] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.146342][ T8] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 364.179285][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 364.187843][ T28] audit: type=1326 audit(2000000068.380:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13680 comm="syz.5.3086" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994779ce59 code=0x7ffc0000 [ 364.198121][ T8] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 364.211937][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.250229][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.265574][ T8] usb 4-1: config 0 descriptor?? [ 364.278587][ T28] audit: type=1326 audit(2000000068.380:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13680 comm="syz.5.3086" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994779ce59 code=0x7ffc0000 [ 364.351282][ T28] audit: type=1326 audit(2000000068.380:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13680 comm="syz.5.3086" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f994779ce59 code=0x7ffc0000 [ 364.377259][ T28] audit: type=1326 audit(2000000068.380:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13680 comm="syz.5.3086" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994779ce59 code=0x7ffc0000 [ 364.401339][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.439046][ T28] audit: type=1326 audit(2000000068.410:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13680 comm="syz.5.3086" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f994779ce59 code=0x7ffc0000 [ 364.463202][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.513476][ T28] audit: type=1326 audit(2000000068.410:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13680 comm="syz.5.3086" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f994779ce59 code=0x7ffc0000 [ 364.749983][ T8] corsair-cpro 0003:1B1C:0C10.0031: unknown main item tag 0x3 [ 364.757611][ T8] corsair-cpro 0003:1B1C:0C10.0031: item fetching failed at offset 2/5 [ 364.812561][ T8] corsair-cpro: probe of 0003:1B1C:0C10.0031 failed with error -22 [ 364.994549][ T27] usb 4-1: USB disconnect, device number 30 [ 365.269377][T13719] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3100'. [ 365.654670][T13710] loop2: detected capacity change from 0 to 32768 [ 365.694627][T13710] JBD2: Ignoring recovery information on journal [ 365.860375][T13710] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 366.101304][ T5777] ocfs2: Unmounting device (7,2) on (node local) [ 366.959684][T13789] loop2: detected capacity change from 0 to 2048 [ 367.006496][T13793] loop5: detected capacity change from 0 to 128 [ 367.032748][T13795] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 367.645326][T13820] loop3: detected capacity change from 0 to 512 [ 367.677782][T13820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 367.694593][T13816] loop2: detected capacity change from 0 to 4096 [ 367.882758][T13816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.907158][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.030957][T13816] EXT4-fs: Ignoring removed orlov option [ 368.036829][T13816] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 368.153944][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.573896][T13862] loop5: detected capacity change from 0 to 256 [ 368.589166][ T5842] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 368.590209][T13862] exfat: Deprecated parameter 'namecase' [ 368.610919][T13862] exfat: Deprecated parameter 'namecase' [ 368.640993][T13862] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 368.799187][ T5842] usb 3-1: Using ep0 maxpacket: 8 [ 368.811984][ T5842] usb 3-1: unable to get BOS descriptor or descriptor too short [ 368.821009][T13868] xt_CT: You must specify a L4 protocol and not use inversions on it [ 368.842064][ T5842] usb 3-1: config 4 interface 0 has no altsetting 0 [ 368.863787][ T5842] usb 3-1: string descriptor 0 read error: -22 [ 368.870316][ T5842] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 368.895862][ T5842] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 368.915216][ T5842] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 368.932259][ T5842] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 368.943012][ T5842] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 368.964298][ T5842] usb 3-1: media controller created [ 369.035108][ T5842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 369.141379][T13875] loop5: detected capacity change from 0 to 2048 [ 369.187861][T13877] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 369.779110][ T8] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 369.882821][T13887] loop5: detected capacity change from 0 to 32768 [ 369.908630][T13887] (syz.5.3158,13887,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 369.940628][T13887] (syz.5.3158,13887,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 369.975191][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 369.985420][T13887] (syz.5.3158,13887,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 370.009314][ T8] usb 4-1: config 0 has no interface number 0 [ 370.017451][ T8] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 370.032010][T13887] JBD2: Ignoring recovery information on journal [ 370.038853][ T8] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 370.038899][ T8] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 370.038921][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.086778][ T8] usb 4-1: config 0 descriptor?? [ 370.093675][T13889] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 370.129081][ T8] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 370.169359][ T5842] zl10353_read_register: readreg error (reg=127, ret==0) [ 370.170773][T13845] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 370.207632][T13887] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 370.318594][ T5842] usb 3-1: USB disconnect, device number 35 [ 370.393059][ T8] usb 4-1: USB disconnect, device number 31 [ 370.443814][T13887] (syz.5.3158,13887,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 370.477313][T13887] (syz.5.3158,13887,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 370.500834][T13887] (syz.5.3158,13887,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 370.511444][T13887] (syz.5.3158,13887,0):ocfs2_quota_read:201 ERROR: status = -5 [ 370.519430][T13887] Quota error (device loop5): find_tree_dqentry: Can't read quota tree block 5 [ 370.533711][T13887] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 370.544039][T13887] (syz.5.3158,13887,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 370.560318][T13887] (syz.5.3158,13887,0):ocfs2_mknod:314 ERROR: status = -5 [ 370.567609][T13887] (syz.5.3158,13887,0):ocfs2_mknod:502 ERROR: status = -5 [ 370.581155][T13887] (syz.5.3158,13887,0):ocfs2_mkdir:659 ERROR: status = -5 [ 370.706926][T12727] ocfs2: Unmounting device (7,5) on (node local) [ 370.773429][T13914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3169'. [ 371.143553][T13926] loop5: detected capacity change from 0 to 16 [ 371.168590][T13926] erofs: (device loop5): mounted with root inode @ nid 36. [ 371.410430][T13933] loop5: detected capacity change from 0 to 512 [ 371.426807][T13933] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 371.439212][T13933] EXT4-fs (loop5): Test dummy encryption mode enabled [ 371.464652][T13933] EXT4-fs (loop5): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.638041][T12727] EXT4-fs (loop5): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 372.368916][ T5823] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 372.459401][T13981] loop5: detected capacity change from 0 to 64 [ 372.602070][ T5823] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 372.628280][ T5823] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 372.644858][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.675777][T13989] wireguard: wg1: Could not create IPv4 socket [ 372.679326][ T5823] usb 3-1: Product: syz [ 372.692981][ T5823] usb 3-1: Manufacturer: syz [ 372.712756][ T5823] usb 3-1: SerialNumber: syz [ 372.823565][T13994] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3202'. [ 372.962992][ T5823] usb 3-1: selecting invalid altsetting 1 [ 372.981805][T13999] ipvlan2: entered promiscuous mode [ 373.048567][T13998] loop3: detected capacity change from 0 to 4096 [ 373.090052][T13998] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 373.176422][ T5823] LME2510(C): Firmware Status: 06 03 30 4c d3 b1 [ 373.176538][ T5823] dvb_usb_lmedm04: probe of 3-1:2.0 failed with error -22 [ 373.394448][ T5842] usb 3-1: USB disconnect, device number 36 [ 373.840000][ T27] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 374.031310][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 374.033763][ T27] usb 2-1: config 0 interface 0 altsetting 29 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.033792][ T27] usb 2-1: config 0 interface 0 altsetting 29 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 374.033816][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 374.033847][ T27] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 374.033868][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.038063][ T27] usb 2-1: config 0 descriptor?? [ 374.462777][ T27] hid (null): unknown global tag 0xe [ 374.491137][ T27] redragon 0003:0C45:760B.0032: unknown main item tag 0x2 [ 374.518709][ T27] redragon 0003:0C45:760B.0032: unknown main item tag 0x0 [ 374.527557][ T27] redragon 0003:0C45:760B.0032: unknown main item tag 0x0 [ 374.543816][ T27] redragon 0003:0C45:760B.0032: unknown main item tag 0x0 [ 374.557251][ T27] redragon 0003:0C45:760B.0032: unknown main item tag 0x0 [ 374.574908][ T27] redragon 0003:0C45:760B.0032: unknown global tag 0xe [ 374.585235][ T27] redragon 0003:0C45:760B.0032: item 0 0 1 14 parsing failed [ 374.614653][ T27] redragon: probe of 0003:0C45:760B.0032 failed with error -22 [ 374.660675][T14050] loop3: detected capacity change from 0 to 256 [ 374.684474][T14050] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 374.719937][ T5823] usb 2-1: USB disconnect, device number 29 [ 374.736171][T14050] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 375.139083][T14064] netlink: 'syz.2.3235': attribute type 1 has an invalid length. [ 375.336194][T14074] loop3: detected capacity change from 0 to 128 [ 375.369214][T14074] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 375.396852][T14074] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 375.849623][T14097] syz_tun: refused to change device tx_queue_len [ 375.857371][T14097] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 376.937810][T14108] loop2: detected capacity change from 0 to 32768 [ 377.045988][T14108] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 377.180699][T14108] XFS (loop2): Ending clean mount [ 377.197939][T14151] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 377.296291][T14108] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 377.445219][ T5777] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 378.436557][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.448879][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.508672][T14199] loop5: detected capacity change from 0 to 2048 [ 378.537139][T14199] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 378.626841][T14203] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 378.638403][T14199] syz.5.3293: attempt to access beyond end of device [ 378.638403][T14199] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 379.092782][T14220] loop5: detected capacity change from 0 to 512 [ 379.155893][T14220] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.189953][T14220] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.250835][T14228] loop3: detected capacity change from 0 to 1024 [ 379.397730][T14232] loop2: detected capacity change from 0 to 512 [ 379.428044][T14232] EXT4-fs: Ignoring removed oldalloc option [ 379.439095][T12727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.453775][T14232] EXT4-fs: Ignoring removed bh option [ 379.484716][T14232] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 379.514231][ T2994] hfsplus: b-tree write err: -5, ino 8 [ 379.541258][T14232] EXT4-fs (loop2): 1 truncate cleaned up [ 379.549580][T14232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.658251][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.696957][T14238] loop5: detected capacity change from 0 to 4096 [ 379.731406][T14239] tmpfs: Too few inodes for current use [ 379.771076][T14240] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 379.820381][T14238] NILFS (loop5): bad btree node (ino=288230376151711747, blocknr=3): level = 0, flags = 0x0, nchildren = 0 [ 379.835180][T14238] NILFS (loop5): error -5 preparing GC: cannot read source blocks [ 379.909192][ T5823] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 380.099844][ T5823] usb 4-1: Using ep0 maxpacket: 16 [ 380.117079][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.138538][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.164979][T14248] macsec1: entered promiscuous mode [ 380.171746][ T5823] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 380.186003][ T5823] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 380.196195][T14248] macsec1: entered allmulticast mode [ 380.201902][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.219400][ T5823] usb 4-1: config 0 descriptor?? [ 380.370738][T14259] loop5: detected capacity change from 0 to 2048 [ 380.396473][T14259] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.433750][T14259] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.549826][T14259] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 380.662091][ T5823] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 380.680362][T12727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.690370][ T5823] microsoft 0003:045E:07DA.0033: ignoring exceeding usage max [ 380.771383][ T5823] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0033/input/input28 [ 380.890460][ T5823] microsoft 0003:045E:07DA.0033: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 380.954537][ T5823] usb 4-1: USB disconnect, device number 32 [ 380.980225][T14280] tipc: Enabling of bearer rejected, media not registered [ 381.091519][T14281] fido_id[14281]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 381.324007][T14292] loop2: detected capacity change from 0 to 2048 [ 381.369918][T14292] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 381.642015][T14299] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 381.885062][ T5787] Bluetooth: hci2: link tx timeout [ 381.892703][ T5787] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 381.918424][T14312] hugetlbfs: Bad value for 'uid' [ 382.349204][ T27] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 382.526722][T14337] Bluetooth: MGMT ver 1.22 [ 382.560593][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.579689][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 382.603008][ T27] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 382.626242][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 382.651578][ T27] usb 2-1: SerialNumber: syz [ 382.892926][ T27] usb 2-1: 0:2 : does not exist [ 382.944237][ T27] usb 2-1: USB disconnect, device number 30 [ 382.976113][ T5768] udevd[5768]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.655266][T14360] loop3: detected capacity change from 0 to 32768 [ 383.668649][T14360] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 scanned by syz.3.3365 (14360) [ 383.710623][T14360] BTRFS info (device loop3): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 383.723835][T14360] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 383.735848][T14360] BTRFS info (device loop3): using free space tree [ 383.795095][T14358] loop5: detected capacity change from 0 to 32768 [ 383.842459][T14360] BTRFS info (device loop3): enabling ssd optimizations [ 383.864647][T14358] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 383.879094][T14360] BTRFS info (device loop3): auto enabling async discard [ 383.935320][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 384.023648][ T5780] BTRFS info (device loop3): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 384.038909][ T5842] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 384.046823][T14358] XFS (loop5): Ending clean mount [ 384.090324][T14358] XFS (loop5): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 384.174590][T12727] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 384.240672][ T5842] usb 2-1: Using ep0 maxpacket: 8 [ 384.270153][ T5842] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 384.319092][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.328751][ T5842] usb 2-1: Product: syz [ 384.349254][ T5842] usb 2-1: Manufacturer: syz [ 384.353900][ T5842] usb 2-1: SerialNumber: syz [ 384.394198][ T5842] usb 2-1: config 0 descriptor?? [ 384.413636][T14404] loop5: detected capacity change from 0 to 256 [ 384.552584][T14404] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 384.648561][ T5842] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 384.816908][ T28] audit: type=1326 audit(2000000089.010:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.5.3376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994779ce59 code=0x7ffc0000 [ 384.873625][ T28] audit: type=1326 audit(2000000089.040:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.5.3376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994779ce59 code=0x7ffc0000 [ 384.916143][ T28] audit: type=1326 audit(2000000089.040:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.5.3376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994779ce59 code=0x7ffc0000 [ 384.954740][ T28] audit: type=1326 audit(2000000089.070:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.5.3376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f994779ce59 code=0x7ffc0000 [ 385.003005][ T28] audit: type=1326 audit(2000000089.070:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.5.3376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994779ce59 code=0x7ffc0000 [ 385.061440][ T5842] usb write operation failed. (-71) [ 385.074984][ T5842] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 385.148981][ T28] audit: type=1326 audit(2000000089.070:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.5.3376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994779ce59 code=0x7ffc0000 [ 385.173777][ T5842] dvbdev: DVB: registering new adapter (Terratec H7) [ 385.180699][ T5842] usb 2-1: media controller created [ 385.186076][ T28] audit: type=1326 audit(2000000089.140:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.5.3376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994779ce59 code=0x7ffc0000 [ 385.213313][ T5842] usb read operation failed. (-71) [ 385.229036][ T5842] usb write operation failed. (-71) [ 385.240425][ T5842] dvb_usb_az6007: probe of 2-1:0.0 failed with error -5 [ 385.254473][ T5842] usb 2-1: USB disconnect, device number 31 [ 385.261239][ T28] audit: type=1326 audit(2000000089.140:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.5.3376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994779ce59 code=0x7ffc0000 [ 385.310323][ T28] audit: type=1326 audit(2000000089.140:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.5.3376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994779ce59 code=0x7ffc0000 [ 385.376014][ T28] audit: type=1326 audit(2000000089.160:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.5.3376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f994779ce59 code=0x7ffc0000 [ 385.409856][ T5823] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 385.440621][T14406] loop3: detected capacity change from 0 to 32768 [ 385.466431][T14406] JBD2: Ignoring recovery information on journal [ 385.508308][T14406] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 385.590748][ T5780] ocfs2: Unmounting device (7,3) on (node local) [ 385.609725][ T5823] usb 3-1: Using ep0 maxpacket: 8 [ 385.620480][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.634968][ T5823] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 385.655990][ T5823] usb 3-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00 [ 385.681926][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.707565][ T5823] usb 3-1: config 0 descriptor?? [ 386.139681][ T5767] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 386.152758][ T5823] wacom 0003:056A:0090.0034: unknown main item tag 0x0 [ 386.175876][ T5823] wacom 0003:056A:0090.0034: unknown main item tag 0x0 [ 386.196238][ T5823] wacom 0003:056A:0090.0034: unknown main item tag 0x0 [ 386.209095][ T5823] wacom 0003:056A:0090.0034: unknown main item tag 0x0 [ 386.219525][ T5823] wacom 0003:056A:0090.0034: unknown main item tag 0x0 [ 386.226528][ T5823] wacom 0003:056A:0090.0034: unknown main item tag 0x0 [ 386.240840][ T5823] wacom 0003:056A:0090.0034: unknown main item tag 0x0 [ 386.247757][ T5823] wacom 0003:056A:0090.0034: unknown main item tag 0x0 [ 386.268315][ T5823] wacom 0003:056A:0090.0034: unknown main item tag 0x0 [ 386.286600][ T5823] wacom 0003:056A:0090.0034: unknown main item tag 0x0 [ 386.309667][ T5823] wacom 0003:056A:0090.0034: unknown main item tag 0x0 [ 386.339066][ T5767] usb 2-1: Using ep0 maxpacket: 8 [ 386.339716][ T5823] wacom 0003:056A:0090.0034: hidraw0: USB HID v0.08 Device [HID 056a:0090] on usb-dummy_hcd.2-1/input0 [ 386.383545][ T5767] usb 2-1: unable to get BOS descriptor or descriptor too short [ 386.392061][ T5823] usb 3-1: USB disconnect, device number 37 [ 386.404414][ T5767] usb 2-1: config 4 interface 0 has no altsetting 0 [ 386.423801][ T5767] usb 2-1: string descriptor 0 read error: -22 [ 386.449006][ T5767] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 386.489173][ T5767] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 386.528380][ T5767] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 386.574556][T14442] fido_id[14442]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 386.581813][ T5767] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 386.646591][ T5767] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 386.667776][ T5767] usb 2-1: media controller created [ 386.714779][ T5767] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 387.125515][T14462] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3398'. [ 387.428722][T14470] loop2: detected capacity change from 0 to 1024 [ 387.437683][T14470] EXT4-fs: Ignoring removed orlov option [ 387.517565][T14470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.610917][T14474] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.3401: deleted inode referenced: 16 [ 387.716061][T14458] loop3: detected capacity change from 0 to 40427 [ 387.740779][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.741255][T14458] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 387.767386][T14458] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 387.784330][ T5767] zl10353_read_register: readreg error (reg=127, ret==0) [ 387.791565][T14427] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 387.883777][T14458] F2FS-fs (loop3): Found nat_bits in checkpoint [ 387.913216][ T5767] usb 2-1: USB disconnect, device number 32 [ 388.083317][T14483] loop2: detected capacity change from 0 to 64 [ 388.095764][T14458] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 388.106848][T14458] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 388.302272][T14486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3406'. [ 388.418520][T14476] loop5: detected capacity change from 0 to 32768 [ 388.470958][T14476] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 388.471576][T14489] loop2: detected capacity change from 0 to 1024 [ 388.601504][T14476] XFS (loop5): Ending clean mount [ 388.650300][T14476] XFS (loop5): Quotacheck needed: Please wait. [ 388.865902][T14500] sp0: Synchronizing with TNC [ 388.874235][T14476] XFS (loop5): Quotacheck: Done. [ 389.068100][T12727] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 389.682587][T14529] loop3: detected capacity change from 0 to 16 [ 389.700860][T14529] erofs: (device loop3): mounted with root inode @ nid 36. [ 389.724333][T14529] syz.3.3425: attempt to access beyond end of device [ 389.724333][T14529] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 389.748029][T14529] syz.3.3425: attempt to access beyond end of device [ 389.748029][T14529] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 389.768768][T14529] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 390.532038][T14555] openvswitch: netlink: Duplicate or invalid key (type 0). [ 390.567240][T14555] openvswitch: netlink: Actions may not be safe on all matching packets [ 390.588487][T14557] loop5: detected capacity change from 0 to 512 [ 390.608646][T14557] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 390.648421][T14557] EXT4-fs (loop5): 1 truncate cleaned up [ 390.666932][T14557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.762261][T14561] loop2: detected capacity change from 0 to 256 [ 390.795567][T14561] FAT-fs (loop2): Directory bread(block 64) failed [ 390.805082][T14561] FAT-fs (loop2): Directory bread(block 65) failed [ 390.815585][T14561] FAT-fs (loop2): Directory bread(block 66) failed [ 390.826458][T14561] FAT-fs (loop2): Directory bread(block 67) failed [ 390.835331][T14561] FAT-fs (loop2): Directory bread(block 68) failed [ 390.845654][T14561] FAT-fs (loop2): Directory bread(block 69) failed [ 390.856974][T14561] FAT-fs (loop2): Directory bread(block 70) failed [ 390.872099][T14561] FAT-fs (loop2): Directory bread(block 71) failed [ 390.884155][T12727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.891853][T14561] FAT-fs (loop2): Directory bread(block 72) failed [ 390.903702][T14561] FAT-fs (loop2): Directory bread(block 73) failed [ 391.371702][T14570] loop3: detected capacity change from 0 to 256 [ 391.389842][T14570] exfat: Deprecated parameter 'utf8' [ 391.395305][T14570] exfat: Deprecated parameter 'namecase' [ 391.439547][T14570] exfat: Deprecated parameter 'utf8' [ 391.495631][T14570] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 391.569935][T14573] loop2: detected capacity change from 0 to 4096 [ 391.617540][T14573] NILFS (loop2): invalid segment: Checksum error in segment payload [ 391.652026][T14573] NILFS (loop2): trying rollback from an earlier position [ 391.729536][T14573] NILFS (loop2): recovery complete [ 391.781496][T14577] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 391.892854][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 239 already freed [ 391.903893][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 391.931320][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 391.975461][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 391.992627][T14585] netlink: 'syz.5.3447': attribute type 1 has an invalid length. [ 392.015327][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 392.039009][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 392.078899][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 392.100353][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 392.146130][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 392.177086][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 392.191490][T14590] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3450'. [ 392.201148][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 392.215380][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 392.236244][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 392.254287][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 392.288352][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 392.323120][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 392.344947][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 392.365562][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 392.385407][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 392.418399][T14598] binder: 14597:14598 ioctl c018620c 200000000240 returned -22 [ 392.428595][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 392.443877][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 392.471271][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 392.489252][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 392.508004][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 392.526124][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 392.554863][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 392.575863][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 392.588478][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 392.599314][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 392.607910][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 392.620344][T14573] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 392.631729][T14573] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 392.699048][ T5842] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 392.904126][ T5842] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 392.915776][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.924720][ T5842] usb 6-1: Product: syz [ 392.929223][ T5842] usb 6-1: Manufacturer: syz [ 392.935761][ T5842] usb 6-1: SerialNumber: syz [ 392.942243][ T5842] usb 6-1: config 0 descriptor?? [ 392.954311][ T5842] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 392.966809][ T5842] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 392.977808][ T5842] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 392.987158][ T5842] usb 6-1: media controller created [ 393.007772][ T5842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 393.055872][ T5842] DVB: Unable to find symbol mt352_attach() [ 393.068936][ T5767] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 393.110569][ T5842] DVB: Unable to find symbol nxt6000_attach() [ 393.116689][ T5842] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 393.135832][ T5842] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input34 [ 393.149639][ T5842] dvb-usb: schedule remote query interval to 1000 msecs. [ 393.157130][ T5842] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 393.167723][ T5842] dvb-usb: bulk message failed: -22 (7/0) [ 393.173606][ T5842] dvb-usb: bulk message failed: -22 (7/0) [ 393.280987][ T5767] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.292492][ T5767] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 393.310713][ T5767] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 393.328962][ T5767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 393.338288][ T5767] usb 3-1: SerialNumber: syz [ 393.344060][ T5842] usb 6-1: USB disconnect, device number 3 [ 393.416747][ T5842] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 393.584594][ T5767] usb 3-1: 0:2 : does not exist [ 393.627540][ T5767] usb 3-1: USB disconnect, device number 38 [ 393.690389][ T5768] udevd[5768]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.899644][T14639] syz.1.3473 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 394.156862][T14651] loop3: detected capacity change from 0 to 256 [ 394.315812][T14651] FAT-fs (loop3): Directory bread(block 64) failed [ 394.328946][T14651] FAT-fs (loop3): Directory bread(block 65) failed [ 394.345197][T14651] FAT-fs (loop3): Directory bread(block 66) failed [ 394.368920][T14651] FAT-fs (loop3): Directory bread(block 67) failed [ 394.375700][T14651] FAT-fs (loop3): Directory bread(block 68) failed [ 394.414012][T14651] FAT-fs (loop3): Directory bread(block 69) failed [ 394.427660][T14651] FAT-fs (loop3): Directory bread(block 70) failed [ 394.453722][T14651] FAT-fs (loop3): Directory bread(block 71) failed [ 394.461609][T14651] FAT-fs (loop3): Directory bread(block 72) failed [ 394.468165][T14651] FAT-fs (loop3): Directory bread(block 73) failed [ 394.729298][T14667] tmpfs: Cannot retroactively limit inodes [ 394.774019][T14673] loop5: detected capacity change from 0 to 256 [ 394.986493][T14679] [U]  [ 395.008036][T14679] [U] K{ [ 395.018315][T14679] [U] T 1ŠFFˊ`GJǘGO/MC [ 395.046594][T14679] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 395.064116][T14679] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 395.089980][T14679] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 395.160464][T14679] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 395.230646][T14679] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 395.275161][T14679] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 395.298097][T14679] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 395.352894][T14679] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 395.359559][T14679] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 395.447439][T14687] loop5: detected capacity change from 0 to 4096 [ 395.455585][T14687] __ntfs_error: 8 callbacks suppressed [ 395.455597][T14687] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 395.502334][T14679] [U] 22Ʃ۩X?0;3U [ 395.503548][T14679] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 395.506948][T14679] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 395.551051][T14687] ntfs: volume version 3.1. [ 395.564295][T14679] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 395.588471][T14687] ntfs: (device loop5): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp1255. You might want to try to use the mount option nls=utf8. [ 395.588605][T14687] ntfs: (device loop5): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 395.682758][T14679] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 395.700250][T14679] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 395.739393][T14679] [U] EC [ 395.743059][T14679] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 395.843914][T14678] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 395.879720][T14699] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3503'. [ 396.290392][ T28] audit: type=1326 audit(2000000100.490:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14715 comm="syz.2.3510" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff1ee79ce59 code=0x0 [ 396.369909][T14719] loop3: detected capacity change from 0 to 128 [ 396.409360][ T28] audit: type=1800 audit(2000000100.600:198): pid=14719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3512" name="file1" dev="loop3" ino=1048789 res=0 errno=0 [ 396.656727][T14710] loop5: detected capacity change from 0 to 32768 [ 396.684051][T14710] JBD2: Ignoring recovery information on journal [ 396.786635][T14710] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 396.879117][ T28] audit: type=1800 audit(2000000101.070:199): pid=14710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3508" name="bus" dev="loop5" ino=17058 res=0 errno=0 [ 397.236246][T14747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3523'. [ 397.245524][T14747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3523'. [ 397.250721][T12727] ocfs2: Unmounting device (7,5) on (node local) [ 397.378357][T14750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3526'. [ 397.573103][T14756] netlink: 'syz.3.3528': attribute type 8 has an invalid length. [ 397.656355][T14758] loop2: detected capacity change from 0 to 256 [ 397.715778][T14758] FAT-fs (loop2): Directory bread(block 64) failed [ 397.734626][T14758] FAT-fs (loop2): Directory bread(block 65) failed [ 397.742197][T14758] FAT-fs (loop2): Directory bread(block 66) failed [ 397.749011][T14758] FAT-fs (loop2): Directory bread(block 67) failed [ 397.755697][T14758] FAT-fs (loop2): Directory bread(block 68) failed [ 397.766870][T14758] FAT-fs (loop2): Directory bread(block 69) failed [ 397.773982][T14758] FAT-fs (loop2): Directory bread(block 70) failed [ 397.785654][T14758] FAT-fs (loop2): Directory bread(block 71) failed [ 397.805455][T14758] FAT-fs (loop2): Directory bread(block 72) failed [ 397.829317][T14758] FAT-fs (loop2): Directory bread(block 73) failed [ 397.851289][T14762] loop5: detected capacity change from 0 to 512 [ 397.902718][T14762] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 397.972830][T14762] EXT4-fs (loop5): 1 truncate cleaned up [ 398.008003][T14762] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.237545][T12727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.469545][ T5767] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 398.478508][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3541'. [ 398.497958][T14782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3541'. [ 398.684057][ T5767] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 398.697325][ T5767] usb 4-1: config 0 has no interface number 0 [ 398.706584][ T5767] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.729561][ T5767] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.739625][ T5767] usb 4-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 398.748910][ T5767] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.773557][ T5767] usb 4-1: config 0 descriptor?? [ 399.096267][T14803] loop2: detected capacity change from 0 to 4096 [ 399.140057][T14803] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 399.169117][T14803] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 399.215261][T14803] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 399.219494][ T5767] uclogic 0003:28BD:0905.0035: Interface probing failed: -22 [ 399.253059][ T5767] uclogic 0003:28BD:0905.0035: interface is invalid, ignoring [ 399.253111][T14803] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 399.291564][T14803] ntfs: volume version 3.1. [ 399.452470][ T5767] usb 4-1: USB disconnect, device number 33 [ 400.032974][T14828] loop2: detected capacity change from 0 to 512 [ 400.053859][T14828] EXT4-fs: Ignoring removed mblk_io_submit option [ 400.109486][T14828] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 400.141029][T14828] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 400.149895][T14828] EXT4-fs (loop2): orphan cleanup on readonly fs [ 400.163563][T14828] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.3562: Invalid block bitmap block 0 in block_group 0 [ 400.195889][T14828] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.3562: Invalid block bitmap block 0 in block_group 0 [ 400.217517][T14828] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.3562: Invalid block bitmap block 0 in block_group 0 [ 400.236469][T14828] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.3562: Failed to acquire dquot type 1 [ 400.281119][T14828] EXT4-fs (loop2): 1 orphan inode deleted [ 400.289205][ T1145] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:6: Failed to release dquot type 1 [ 400.334443][T14828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 400.468246][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.669508][T14847] rdma_op ffff88807dd6a1f0 conn xmit_rdma 0000000000000000 [ 400.975025][T14859] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 401.029491][T14859] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 401.363490][T14874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3585'. [ 401.377404][T14852] loop2: detected capacity change from 0 to 32768 [ 401.442123][T14852] JBD2: Ignoring recovery information on journal [ 401.594873][T14852] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 401.755347][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 401.755360][ T28] audit: type=1800 audit(2000000105.940:200): pid=14852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3574" name="bus" dev="loop2" ino=17058 res=0 errno=0 [ 401.931523][T14893] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3592'. [ 402.024686][ T5777] ocfs2: Unmounting device (7,2) on (node local) [ 402.739149][ T5785] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 402.918932][ T5785] usb 3-1: Using ep0 maxpacket: 16 [ 402.932393][ T5785] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 402.955172][ T5785] usb 3-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 402.984950][ T5785] usb 3-1: Product: syz [ 402.999206][ T5785] usb 3-1: Manufacturer: syz [ 403.003866][ T5785] usb 3-1: SerialNumber: syz [ 403.032935][ T5785] usb 3-1: config 0 descriptor?? [ 403.055340][ T5785] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 403.274475][ T5785] usb 3-1: USB disconnect, device number 39 [ 403.866526][T14956] loop3: detected capacity change from 0 to 32768 [ 403.940664][T14956] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 403.985366][T14956] JBD2: Ignoring recovery information on journal [ 404.003606][T14973] loop2: detected capacity change from 0 to 512 [ 404.049946][T14956] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 404.093504][T14973] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 404.116791][T14973] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #15: comm syz.2.3625: corrupted in-inode xattr: e_value size too large [ 404.173666][T14955] [ 404.176028][T14955] ====================================================== [ 404.183061][T14955] WARNING: possible circular locking dependency detected [ 404.190112][T14955] syzkaller #0 Not tainted [ 404.194546][T14955] ------------------------------------------------------ [ 404.201576][T14955] syz.3.3619/14955 is trying to acquire lock: [ 404.207651][T14955] ffff88805b513498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_evict_inode+0x1d84/0x41e0 [ 404.220131][T14955] [ 404.220131][T14955] but task is already holding lock: [ 404.225313][T14973] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.3625: couldn't read orphan inode 15 (err -117) [ 404.227493][T14955] ffff88805b5142d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}, at: ocfs2_evict_inode+0x2d24/0x41e0 [ 404.251581][T14955] [ 404.251581][T14955] which lock already depends on the new lock. [ 404.251581][T14955] [ 404.261998][T14955] [ 404.261998][T14955] the existing dependency chain (in reverse order) is: [ 404.271021][T14955] [ 404.271021][T14955] -> #2 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}: [ 404.281369][T14955] down_write+0x97/0x200 [ 404.286146][T14955] ocfs2_del_inode_from_orphan+0x12f/0x7a0 [ 404.292486][T14955] ocfs2_dio_end_io+0x1040/0x13c0 [ 404.298045][T14955] dio_complete+0x254/0x710 [ 404.303083][T14955] __blockdev_direct_IO+0x2ea8/0x3500 [ 404.308991][T14955] ocfs2_direct_IO+0x235/0x2a0 [ 404.314281][T14955] generic_file_direct_write+0x1d4/0x3e0 [ 404.320442][T14955] __generic_file_write_iter+0x11b/0x230 [ 404.326607][T14955] ocfs2_file_write_iter+0x167a/0x1e80 [ 404.332600][T14955] do_iter_write+0x738/0xc30 [ 404.337723][T14955] do_pwritev+0x241/0x3a0 [ 404.342606][T14955] do_syscall_64+0x55/0xb0 [ 404.347564][T14955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.353995][T14955] [ 404.353995][T14955] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 404.364534][T14955] down_write+0x97/0x200 [ 404.369309][T14955] ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 404.375727][T14955] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 404.382577][T14955] ocfs2_mknod+0xe8f/0x2300 [ 404.387607][T14955] ocfs2_create+0x196/0x430 [ 404.392641][T14955] vfs_create+0x1f4/0x360 [ 404.397496][T14955] do_mknodat+0x3d0/0x500 [ 404.402352][T14955] __x64_sys_mknodat+0xa9/0xc0 [ 404.407648][T14955] do_syscall_64+0x55/0xb0 [ 404.412603][T14955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.419030][T14955] [ 404.419030][T14955] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}: [ 404.429557][T14955] __lock_acquire+0x2df1/0x7d40 [ 404.434940][T14955] lock_acquire+0x19e/0x420 [ 404.439980][T14955] down_write+0x97/0x200 [ 404.444762][T14955] ocfs2_evict_inode+0x1d84/0x41e0 [ 404.450427][T14955] evict+0x4ca/0x8d0 [ 404.454891][T14955] ocfs2_dentry_iput+0x24e/0x390 [ 404.460371][T14955] __dentry_kill+0x431/0x650 [ 404.465504][T14955] dentry_kill+0xb8/0x290 [ 404.470398][T14955] dput+0xfe/0x1e0 [ 404.474672][T14955] __fput+0x5e5/0x970 [ 404.479187][T14955] task_work_run+0x1d4/0x260 [ 404.484328][T14955] exit_to_user_mode_loop+0xe6/0x110 [ 404.490164][T14955] exit_to_user_mode_prepare+0xee/0x180 [ 404.496257][T14955] syscall_exit_to_user_mode+0x1a/0x50 [ 404.502262][T14955] do_syscall_64+0x61/0xb0 [ 404.507218][T14955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.513661][T14955] [ 404.513661][T14955] other info that might help us debug this: [ 404.513661][T14955] [ 404.523913][T14955] Chain exists of: [ 404.523913][T14955] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type] [ 404.523913][T14955] [ 404.545414][T14955] Possible unsafe locking scenario: [ 404.545414][T14955] [ 404.552881][T14955] CPU0 CPU1 [ 404.558259][T14955] ---- ---- [ 404.563636][T14955] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]); [ 404.570772][T14955] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 404.580599][T14955] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]); [ 404.590245][T14955] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2); [ 404.597552][T14955] [ 404.597552][T14955] *** DEADLOCK *** [ 404.597552][T14955] [ 404.605709][T14955] 2 locks held by syz.3.3619/14955: [ 404.610921][T14955] #0: ffff888077460bd0 (&osb->nfs_sync_rwlock){.+.+}-{3:3}, at: ocfs2_nfs_sync_lock+0x107/0x270 [ 404.621489][T14955] #1: ffff88805b5142d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}, at: ocfs2_evict_inode+0x2d24/0x41e0 [ 404.634225][T14955] [ 404.634225][T14955] stack backtrace: [ 404.640148][T14955] CPU: 0 PID: 14955 Comm: syz.3.3619 Not tainted syzkaller #0 [ 404.647623][T14955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 404.657714][T14955] Call Trace: [ 404.661019][T14955] [ 404.663970][T14955] dump_stack_lvl+0x18c/0x250 [ 404.668671][T14955] ? load_image+0x420/0x420 [ 404.673194][T14955] ? show_regs_print_info+0x20/0x20 [ 404.678416][T14955] ? print_circular_bug+0x12b/0x1a0 [ 404.683638][T14955] check_noncircular+0x2fc/0x400 [ 404.688606][T14955] ? print_deadlock_bug+0x5d0/0x5d0 [ 404.693834][T14955] ? lockdep_lock+0xf5/0x230 [ 404.698447][T14955] ? _find_first_zero_bit+0xd3/0x100 [ 404.703753][T14955] __lock_acquire+0x2df1/0x7d40 [ 404.708639][T14955] ? __lock_acquire+0x7d40/0x7d40 [ 404.713692][T14955] ? verify_lock_unused+0x140/0x140 [ 404.718917][T14955] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 404.724572][T14955] ? do_raw_spin_lock+0x11f/0x2c0 [ 404.729623][T14955] ? mutex_unlock+0x10/0x10 [ 404.734156][T14955] lock_acquire+0x19e/0x420 [ 404.738682][T14955] ? ocfs2_evict_inode+0x1d84/0x41e0 [ 404.743984][T14955] ? ocfs2_get_system_file_inode+0x202/0x850 [ 404.749990][T14955] ? __might_sleep+0xe0/0xe0 [ 404.754605][T14955] ? read_lock_is_recursive+0x20/0x20 [ 404.760002][T14955] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 404.766178][T14955] ? ocfs2_evict_inode+0x165e/0x41e0 [ 404.771485][T14955] down_write+0x97/0x200 [ 404.775749][T14955] ? ocfs2_evict_inode+0x1d84/0x41e0 [ 404.781054][T14955] ? down_read_killable+0x340/0x340 [ 404.786280][T14955] ocfs2_evict_inode+0x1d84/0x41e0 [ 404.791411][T14955] ? __lock_acquire+0x7d40/0x7d40 [ 404.796453][T14955] ? ocfs2_sync_blockdev+0x40/0x40 [ 404.801588][T14955] ? __lock_acquire+0x1347/0x7d40 [ 404.806665][T14955] ? verify_lock_unused+0x140/0x140 [ 404.811897][T14955] ? mark_lock+0x94/0x320 [ 404.816239][T14955] ? __lock_acquire+0x1347/0x7d40 [ 404.821281][T14955] ? mark_lock+0x94/0x320 [ 404.825653][T14955] ? __lock_acquire+0x1347/0x7d40 [ 404.830697][T14955] ? __lock_acquire+0x7d40/0x7d40 [ 404.835744][T14955] ? __lock_acquire+0x1347/0x7d40 [ 404.840775][T14955] ? verify_lock_unused+0x140/0x140 [ 404.845990][T14955] ? inode_wait_for_writeback+0x1e3/0x230 [ 404.851720][T14955] ? __lock_acquire+0x7d40/0x7d40 [ 404.856748][T14955] ? do_raw_spin_lock+0x11f/0x2c0 [ 404.861787][T14955] ? __rwlock_init+0x150/0x150 [ 404.866557][T14955] ? do_raw_spin_unlock+0x121/0x230 [ 404.871764][T14955] ? _raw_spin_unlock+0x28/0x40 [ 404.876624][T14955] ? inode_wait_for_writeback+0x1e3/0x230 [ 404.882360][T14955] ? evict+0x495/0x8d0 [ 404.886440][T14955] ? sb_clear_inode_writeback+0x360/0x360 [ 404.892171][T14955] ? do_raw_spin_lock+0x11f/0x2c0 [ 404.897219][T14955] ? bit_waitqueue+0x30/0x30 [ 404.901823][T14955] ? do_raw_spin_unlock+0x121/0x230 [ 404.907032][T14955] ? ocfs2_sync_blockdev+0x40/0x40 [ 404.912156][T14955] evict+0x4ca/0x8d0 [ 404.916076][T14955] ? proc_nr_inodes+0x230/0x230 [ 404.920947][T14955] ? do_raw_spin_unlock+0x121/0x230 [ 404.926170][T14955] ? _raw_spin_unlock+0x28/0x40 [ 404.931049][T14955] ? iput+0x706/0x920 [ 404.935052][T14955] ocfs2_dentry_iput+0x24e/0x390 [ 404.940007][T14955] ? fsnotify_grab_connector+0x3f/0x230 [ 404.945571][T14955] ? ocfs2_dentry_revalidate+0xbb0/0xbb0 [ 404.951225][T14955] ? fsnotify_destroy_marks+0x82/0x310 [ 404.956705][T14955] ? dentry_unlink_inode+0x2e4/0x3c0 [ 404.962009][T14955] __dentry_kill+0x431/0x650 [ 404.966644][T14955] dentry_kill+0xb8/0x290 [ 404.971003][T14955] ? dput+0x3b/0x1e0 [ 404.974914][T14955] dput+0xfe/0x1e0 [ 404.978652][T14955] __fput+0x5e5/0x970 [ 404.982647][T14955] task_work_run+0x1d4/0x260 [ 404.987265][T14955] ? task_work_cancel+0x220/0x220 [ 404.992307][T14955] ? exit_to_user_mode_loop+0x3b/0x110 [ 404.997782][T14955] exit_to_user_mode_loop+0xe6/0x110 [ 405.003088][T14955] exit_to_user_mode_prepare+0xee/0x180 [ 405.008652][T14955] syscall_exit_to_user_mode+0x1a/0x50 [ 405.014127][T14955] do_syscall_64+0x61/0xb0 [ 405.018554][T14955] ? clear_bhb_loop+0x40/0x90 [ 405.023238][T14955] ? clear_bhb_loop+0x40/0x90 [ 405.027921][T14955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.033836][T14955] RIP: 0033:0x7f6eac59ce59 [ 405.038264][T14955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.057877][T14955] RSP: 002b:00007ffdd62c7c18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 405.066308][T14955] RAX: 0000000000000000 RBX: 00007ffdd62c7d00 RCX: 00007f6eac59ce59 [ 405.074286][T14955] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 405.082266][T14955] RBP: 00000000000627f3 R08: 0000000000000001 R09: 0000000000000000 [ 405.090247][T14955] R10: 0000001b2d020000 R11: 0000000000000246 R12: 00007ffdd62c7d40 [ 405.098244][T14955] R13: 00007f6eac815fac R14: 0000000000062acc R15: 00007f6eac815fa0 [ 405.106240][T14955] [ 405.163619][T14973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.229806][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.284151][ T5780] ocfs2: Unmounting device (7,3) on (node local)