last executing test programs: 11m30.080107474s ago: executing program 4 (id=6657): r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r0, r0}, &(0x7f00000006c0)=""/22, 0x16, &(0x7f00000001c0)={&(0x7f0000000140)={'crct10dif\x00'}}) 11m29.769705208s ago: executing program 4 (id=6661): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x24) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 11m29.54176506s ago: executing program 4 (id=6664): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x891e, 0x0) 11m29.204626135s ago: executing program 4 (id=6670): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$eJzs281vG8Ufx/HPbGJnk/b3w31yC6qEJSSKiiix05I+gRRa0iL1gbYJAqEWhcYJVhMnitOqraCtxKFHoEggJA7l0AtCVZHgAgcOcOM/4MKtBy6YEycQms2sd+26JK0fEjfvl5R4vPv17uzM7OysdywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACC9/MpQf9Ysdy4AAEA7HTt1sj/H9R8AgFVlhPt/AACA1cTI0ycy+uHTsjkavF/gHykUz18cPThc/2O9JvhkVxBv//xsbmDnrhcGd4ev//35Zntcx0+NDGUOzEzPzuVLpfx4ZrRYODsznl/yFhr9fK3tQQFkps+dH5+YKGVyOwaqVl9M3e1Zk07tG0zvfzqMHT04PHwqFtOdeOi93+N+I/ykPF2XUfnj2+aYJE+Nl8UibafVeoOD2B4cxOjB4eBApgpjxXm70oQF4VWXSTIsozbURUM2SjZfJtmce7aEPJVktCldNscldYXl8GzwxfDiG/Cako0HZvN5WlJGHVBnK1iPPO2S0Y09Kb1myyys/27p/eXOHFquW55uy2jbS2VzIugP7Plku80jr2deLU7MxGKNcWdUp18f2mmF902+PB0LzviyObncmUHb2cHSaRntHLkQjCsUjEsf2zd46PBIfISxeZHt2NgdLr2Ua3IiNnQwyzSGAAAAAAAAAB51vvGC7+I+/8YP3mfcMyCsEsbT8zL683A5eDQen5fQFZvfUdHpz35am/9e/8DM7KW5wuS783XX9/lD75Tm58bO1l+tXnvyVX0dvtg8hgYljKfdMrr6z51ovylj064biHZ0a3+UN9/UrA3azf8X5rOEzxD2Dm+Op+tm+QGej6XcfumfgOYwxtOQjCa+3+LmfvTpnj7IxX0roz9ubnVxXtIGhadpKvjvTxSm8v029icZffl3GBtMM9MaF7shis3aWE9GHx2tjl3rYjdGsTkbe0hGP5+pH7spih2wsR/IaPb3TBjbZ2OfdLHpKHbH2Zmp8ZYV8Apn+/8rMlr/YsaEdenKy3WzXZXYW+9F/f212g3dp89vtP9PxZZdc+3wrm2vZ7YEbS9or1799npdRl9/t9XFLbSVpFu/Lvgftdc3ZDT5S3Vsn4tdH8Vml1ywHcLW/9syyhXvVMrG1b+rgdj1P1b/T9S2jhbV/7rYspTbb09zDh2SSpcunxubmsrPkSBBYgmJHq2IbCySCPvlh9/OMndMaAt7/f9MRm+e+LUy3nHXfzesjsZ/f12Jrv97azfUouv/+tiyvW40kuiW/Pnp2URa8kuXLj9XmB6bzE/miwO57J7+PTsHs4lkOLaLUg0X1SMp4e7VLnz4VeX+rHr8V3/831e7oRbV/waXzXCfUSfVlMNf9Wz9/yajt368U7mPtvV/sxJRPf4P77OeeWrhtXJ+tqj+N8aWpdx+/9eE4wYAAAAAAAAAAAAAAACATpcwnm7IyD/dbcLfRi1l/t89P5hq0fyvdGzZeJt+r9BwoQJAB/Dk6QsZbVPZXLUL1kpH4694pP0bAAD//3VdHM0=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 11m28.588621632s ago: executing program 4 (id=6676): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11m28.185071977s ago: executing program 4 (id=6680): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000002000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 11m27.660459384s ago: executing program 32 (id=6680): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000002000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 5.211275836s ago: executing program 2 (id=16046): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x0) 4.95422678s ago: executing program 2 (id=16048): r0 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7fffffff, 0x34}, 0x1c) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) 4.383869407s ago: executing program 2 (id=16053): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x8000, &(0x7f0000000140)=ANY=[@ANYBLOB='discard,keep_last_dots,iocharset=cp1251,utf8,errors=remount-ro,dmask=00000000000000000000010,iocharset=cp1250,sys_tz,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB='6\x00'], 0x2, 0x1548, &(0x7f0000000380)="$eJzs3AuYTdX7OPD3XWvtMSSdJrkMa613c5LLMkmSS5JckiRJktwSkib5SkJiyC1pSEJyGZLLEJLLxKRxv98vCU2SJklCckvW/1H8fftVv++lvl/P85v38zz7sd6z9rv22vOeM2fvdZz5psvQmo1rVWtIRPCn4C//JAFALAAMBIBrACAAgHJx5eIu9OeUmPTnDsL+Wg+lXukZsCuJ65+9cf2zN65/9sb1z964/tkb1z974/pnb1x/xrKzzdMLXstb9t14/T874/f//0OySo/9Ym3p67sCxPyzKVz/7I3r/39W8M/sxPXP3rj+2VXslZ4A+yvN/vfS+PWfHeT4wx6uf/bG9WcsO/t5HTgnXPF16Cu1QSR7fwZypZ9/jDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcayh9P+MgUAl9pXel6MMcYYY4wxxhj76/gcV3oGjDHGGGOMMcYY+89DECBBQQAxkANiISfkAgEAV0MeuAYicC3EwXWQF66HfJAfCkBBiIdCUBg0GLBAEEIRKApRuAGKwY1QHEpASSgFDkpDAtwEZeBmKAu3QDm4FcrDbVABKkIlqAy3QxW4A6rCnVAN7oLqUANqQi24G2rDPVAH7oW6cB/Ug/uhPjwADeBBaAgPQSN4GBrDI9AEHoWm0AyaQwto+W/lvwA94EXoCb0gCXpDH3gJ+kI/6A8DYCC8DIPgFRgMr0IyDIGh8BoMg9dhOLwBI2AkjII3YTS8BWNgLIyD8ZACE2AivA2T4B2YDFNgKkyDVJgOM+BdmAmzYDa8B3PgfZgL82A+LIA0+AAWwiJIhw9hMXwEGbAElsIyWA4rYCWsgtWwBtbCuh/7wgbYCJtgM2yBrbANtsMO2Akfwy74BHbDntfnAUAmfPZH+bD+d/NPXcqHvfApZEJXBAQUKFChwhiMwViMxVyYC3NjbsyDeTCCEYzDOMyLeTEf5sMCWADjMR4LY2E0aJCQsAgWwShGsRgWw+JYHEtiSXToMAETsAzejGWxLJbDclgey2MFrIgVsTJWxipYBatiVayG1bA6VseaWBPvxruxN9bBOlgX62I9rHdpeQobYkNshI2wMTbGJtgEm2JTbI7NsSW2xFbYCltja2yLbbEdtsP22B4TMRE7YAfsiB2xE3bCztgZu2AX7IrdsFvWCzkAX8QXsRdWF72xD/bBvpicoz8OwAH4Mg7CV/AVfBWTcQgOxdfwNXwdh+NJHIEjcRSOwiriLRyDY5HEeEzBFJyIE3ESTsLJOAWn4DRMxek4A2fgTJyFs/A9nIPv4/s4D+fhAkzDNFyIizAd03ExnsIMXIJLcRkuxxW4HFfhalyFa3EdrsUNuAE34SbcgltwG27DHbgDP0YFgJ/gHtyDyZiJmbgP9+F+3I8H8ABmYRYexIN4CA/hYTyMR/AIHsVjeByP4Qk8gSfxFJ7G03gWz+I5fC7+q0Yfl1iTDOICJZSIETEiVsSKXCKXyC1yizwij4iIiIgTcSKvyCvyiXyigCgg4kW8KCwKCyOMIBHGAICIiqgoJoqJ4qK4KClKCiecSBAJoowoI8qKsqKcuFWUF7eJCqKiaOMqi8qiimjrqoo7RTVRTVQXNURNUUvUErVFbVFH1BF1RV1RT9QT9cUDooHojf3xIXGhMo3FEGwihmJT0UzIi7/BWonh2Fq0EW3FE2IkjsD2opVLFE+LDmIMdhR/E2PxWdFZjMcu4nnRVXQT3cULoodo7XqKXmIy9hZ9xDTsK/qJ/mKAmIk1xHs4J2dN8apIFkPEUPGaWICvi+HiDTFCjBSjxJtitHhLjBFjxTgxXqSICWKieFtMEu+IyWKKmCqmiVQxXcwQ74qZYpaYLd4Tc8T7Yq6YJ+aLBSJNfCAWikUiXXwoFouPRIZYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdoqPxS7xidgt9oi94lORKT4T+8TnYr/4QhwQX4os8ZU4KL4Wh8Q34rD4VhwR34mj4pg4Lr4XJ8QP4qQ4JU6LM+Ks+FGcEz+J88ILkCiFlFLJQMbIHDJW5pS55FUytwwu/nSvlXHyOplXXi/zyfyygCwo42UhWVhqaaSVJENZRBaVUXmDLCZvlMVlCVlSlpJOlpYJ8iZZRt4sy8pbZDl5qywvb5MVZEVZSVaWt8sq8g4JkV+OUV3WkDVlLXm3TIJ7ZB15r6wr75P15P2yvnxANpAPyobyIdlIPiwby0dkE/mobCqbyeayhWwpH5Ot5OOytWwj28onZDv5pGwvn5KJ8mnZQfqLT5FnZWf5nOwin5ddZTfZXf4kz0sve8peEnqD7CNfkn1lP9lfDpAD5ctykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZTpFT5TSZKqfL/hdHmi3lP8x/+3fyB/989E1ys9wit8ptcrvcIXfKj+UuuUvulrvlXrlXZspMuU/uk/vlfnlAHpBZMkselAflIXlIHpaH5RF5RB6Vx+QZ+b08IX+QJ+UpeUqekWflWXnu4s8AFCqhpFIqUDEqh4pVOVUudZXKra5WedQ1KqKuVXHqOpVXXa/yqfyqgCqo4lUhVVhpZZRVpEJVRBVVUXUDXnzCqJKqlHKqtEpQN/0r+aqYulEVVyV+lX9pfkl/ML+WqqVqpVqp1qq1aqvaqnaqnWqv2qtElag6qA6qo+qoOqlOqrPqrLqoLqqr6qq6q+6qh+qheqqeKkklqT7qJdVX9VP91QA1UL2sBqlBarAarJJVshqqhqphapgaroarEWqEGqVGqdFqtBqjxqhxapxKUSlqopqoJqlJarKarKaqqSpVpaoZaoaaqWaq2Wq2mqPmqLlqrpqv5qs0laYWqoUqXaWrxWqxylBL1BK1TC1TK9QKtUqtUmvUGrVOrVMb1AaVoTarzWqr2qq2q+1qp9qpdqldarfarfaqvSpTZap9ap/ar/arA+qAylJZ6qA6qA6pQ+qwOqyOqCPqqDqqjqvj6oQ6oU6qk+q0Oq3OqrPqnDqnzqvzFy77AhGIQAUqiAligtggNsgV5ApyB7mDPEGeIBJEgrggLsgbXB/kC/IHBYKCQXxQKCgc6MAENhAXix4NbgiKBTcGxYMSQcmgVOCC0kFCzMXO4JagXHBrUD64LagQVAwqBZWD24MqwR1B1eDOoFpwV1A9qBHUDGoFdwe1g3uCOsG9Qd3gvqBecH9QP3ggaBA8GDQMHgoaBQ8HjYNHgibBo0HToFnQPGgRtAxuDsr+ZeN7fzL/466n7qWTdG/dR7+k++p+ur8eoAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erKeoqfqaTpVT9cz9Lt6pp6lZ+v39Bz9vp6r5+n5eoFO0x/ohXqRTtcf6sX6I52hl+ileplerlfolXqVXq3X6LV6nV6vN+iNepPerLforXqb3q536J36Y71Lf6J36z16r/5UZ+rP9D79ud6vv9AH9Jc6S3+lD+qv9SH9jT6sv9VH9Hf6qD6mj+vv9Qn9gz6pT+nT+ow+q3/U5/RP+rz2Fy7uL7y9G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emr8lr8pl8poApYOJNvClsCpsLyJApYoqYqImaYqaYKW6Km5KmpHHGmQSTYMqYMqasKWvKmXKmvClvKpgKppKpZG43t5s7zB3mTnOnucvcZWqYGqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpolpYpqapqa5aW5ampamlWllWpvWpq1pa9qZdqa9aW8STaLpYDqYjqaj6WQ6mc6ms+liupiupqvpbrqbHqaH6Wl6miSTZPqYPqav6Wv6m/5moBloBplBZrAZbJJNshlqhpphZpgZboabEWakGXXhQtW8ZcaYsWacGW9STIqZaCaaSWaSmWwmm6lmqkk1qWaGmWFmmplmtplt5pg5Zq6Za+ab+SbNpJmFZqFJN+lmsVlsMkyGWWqWmuVmuVlpVprVZrVZa9aa9bDebDQbzWaz2Ww1W812s93sNDvNLrPL7Da7zV6z12SaTLPP7DP7zX5zwBwwWSbLHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81Zk//i+6U3sTanzWWvsrnt1TaPvcb+z7iALWjjbSFb2Gqbz+b/VWystcVtCVvSlrLOlrYJ9qbfxBVsRVvJVra32yr2Dlv1N3Fte4+tY++1de19tpa9+1dxPXu/rW8fsQ0QAWwz28i2sI3tI7aJfdQ2tc1sc9vCtrNP2vb2KZton7Yd7DO/iRfaRXa1XWPX2nV2t91jT9sz9pD9xp61P9qetpcdaF+2g+wrdrB91SbbIb+JR9k37Wj7lh1jx9pxdvxv4ql2mk210+0M+66daWf9Jk6zH9g5Nt3OtfPsfLvg5/jCnNLth3ax/chm2ACW2mV2uV1hV9pV/3+uy+wGu9FusrvsJ3ar3Wa32x1256ULYbvH7rWf2kz7mT1ov7b77Rf2gD1ss+xXP8cXzu+w/dYesd/Zo/aYPW6/tyfsD+pS9oVz/97+ZM9bb4GQgCQpCiiGclAs5aRcdBXlpqspD11DEbqW4ug6ykvXUz7KTwWoIMVTISpMmgxZIgqpCBWlKN1Al6ZXkkqRo9KUQDdRGbqZytItVI5upfJ0G1WgilSJKtPtVIXuoKp0J1Wju6g61aCaVIvuptp0D9Whe6ku3Uf16H6qTw9QA3qQGtJD1Igepsb0CDWhR6kpNaPm1IJa0mPUih6n1tSG2tIT1I6epPb0FCXS09SBnqGO9DfqRM9SZ3qOutDz1JW6UXd6gXrQi9STelES9aY+9BL1pX7UnwbQQHqZBtErNJhepWQaQkPpNRpGr9NweoNG0EgaRW/SaHqLxtBYGkfjKYUm0ER6mybROzSZptBUmkapNJ1m0Ls0k2bRbHqP5tD7NJfm0XxaQGn0AS2kRZROH9Ji+ogyaAktpWW0nFbQSlpFq2kNraV1tJ420EbaRJtpC22lbbSddtBO+ph20Se0m/bQXvqUMukz2kef0376gg7Ql5RFX9FB+poO0Td0mL71veg7OkrH6Dh9TyfoBzpJp+g0naGz9COdo5/oPHmCEEMRylCFQRgT5ghjw5xhrvCqMHd4dZgnvCaMhNeGceF1Yd7w+jBfmD8sEBYM48NCYeFQhya0IYVhWCQsGkbDG8Ji4Y1h8bBEWDIsFbqwdJgQ3hSWCW8Oy4a3hOXCW8Py4W1hhbBi+Mh9lcPbwyrhHWHV8M6wWnhXWD2sEdYMa4V3h7XDe8I64b1h3fC+sGx4f1g/fCBsED4YNgwfChuFD4eNw0fCJuGjYdOwWdg8bBG2DB8LW4WPh63DNmHb8ImwXfhk2D58KkwMnw47hM/83H//oj/uTwp7h33Cl8KXQu/vlfOjC6Jp0Q+iC6OLounRD6OLox9FM6JLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Le18oBDp1w0ikXuBiXw8W6nC6Xu8rldle7PO4aF3HXujh3ncvrrnf5XH5XwBV08a6QK+y0M846cqEr4oq6qLvBFXM3uuKuhCvpSjnnSrsE18K1dC1dK/e4a+3auLbuCfeEe9I96Z5yT7mnXQf3jOvo/uY6uWddZ/ece84977q6bq67e8H1cBPy/PKaTHJ9XB/X1/V1/V1/N9ANdIPcIDfYDXbJLtkNdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOpbgUN9FNdJPcJDfZTXZT3VSX6lLdDDfDzXQzXZVZvxxlrpvr5rv5Ls2luYXuwjVjulvsFrsMl+GWuqVuuVvuVrqVbrVb7da6tW69W+82uo1us9vstrqtbrvb7na6nW6X2+V2+2t+GdRlun1un9vv9rsD7kuX5b5yB93X7pD7xh1237oj7jt31B1zx9337oT7wZ10p9xpd8addT+6c+4nd955lxKZEJkYeTsyKfJOZHJkSmRqZFokNTI9MiPybmRmZFZkduS9yJzI+5G5kXmR+ZEFkbTIB5GFkUWR9MiHkcWRjyIZkSWRpZFlkeWRFRHvC20NfRFf1Ef9Db6Yv9EX9yV8SV/KO1/aJ/ibfBl/sy/rb/Hl/K2+vL/NV/AVfSX/qG/qm/nmvoVv6R/zrfzjvrVv49v6J3w7/6Rv75/yif5p38E/4zv6v/lO/lnf2T/nu/jnfVffzXf3L/ge/kXf0/fySb637+Nf8n19P9/fD/AD/ct+kH/FD/av+mQ/xA/1r/lh/nU/3L/hR/iRflTMm370pVtkGO9T/AQ/0b/tJ/l3/GQ/xU/103yqn+5n+Hf9TD/Lz/bv+Tn+fT/Xz/Pz/QKf5j/wC/0in+4/9Iv9Rz7DL7m0qOxX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+m1+u9/hd/qP/S7/id/t9/i9/lOf6T/z+/znfr//wh/wX/os/5U/6L/2h/w3/rD/1h/x3/mj/pg/7r/3J/wP/qQ/5U/7M/6s/9Gf8z/58/ydNcYYY4yxf8qEy03x655flvN7/06O+Lud+wDA1dsKZv19/4UryvX5fmn3E/HtIgDwdK8uD13aqldPSkq6uG+GhKDoPIBLnwRd8POy8cV4CbSFJyER2kCZ351/P9HtLP2D8aO3AuT6u5xYuBxfHv9zAEz6nfEfe2LUwvLh6bj/Zfx5AMWLXs7JCZfjJdD25/WVNlD2D+afv9U/mH/OL1IAWv9dTm64HF+efwI8Ds9A4q/2ZIwxxhhjjDHGftFPVOp06f7z0v/4/L3783h1OScHXI7/0f05Y4wxxhhjjDHGrrxnu3V/6rFL39x7LDGxTaefH/lnGlX/lZ3/9UYT+E+NzI3fbXgPcOkRBQB/ckCACw353zyLLf+VYyVffLX8z67lZ3wA3Ytd/NLjX3fQ2D9fi3+ncaV+IzHGGGOMMcb+Uy5f9P/6cXWlJsQYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjGVD/40/J3alz5ExxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhi70v5fAAAA//8XnvpB") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x22) 3.960365051s ago: executing program 2 (id=16058): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000480)) 3.753727714s ago: executing program 2 (id=16060): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000000000)=ANY=[], 0x3, 0x5f74, &(0x7f0000002040)="$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") creat(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88) symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.132550402s ago: executing program 3 (id=16068): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2c, 0xffffffff, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}]}]}, 0x28}}, 0x80) 2.733965667s ago: executing program 3 (id=16071): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0xffffffff, 0x10000, 0xffffffff, 0x1, 0x0, 0x27}, 0x1c) 2.651409617s ago: executing program 5 (id=16073): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x665, 0x1ff, 0x10, 0x0, 0x5, 0x8}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x3, 0x6}}, @TCA_NETEM_CORR={0x10, 0x1, {0x400, 0x400, 0x1}}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 2.42910366s ago: executing program 3 (id=16076): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000004c9002000022000003000100000000000000000000000000000000000000000000000000000000000000000035"]) 1.983596176s ago: executing program 3 (id=16077): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x48, 0x37, 0x0, 0x1}, {0x28, 0x2, 0xf7, 0xfffff038}, {0x6, 0x6, 0x0, 0x57c}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x9ffc) 1.683646429s ago: executing program 2 (id=16078): r0 = socket$packet(0x11, 0x3, 0x300) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x2d) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 1.63185459s ago: executing program 0 (id=16079): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, 0xffffffffffffffff) 1.590648191s ago: executing program 5 (id=16080): syz_mount_image$nilfs2(&(0x7f000000a000), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f000000a380)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xdac, &(0x7f0000000440)="$eJzs3UtvXNUdAPBzxx47LxqHmMZN0yQlpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AQqrUTYqQaBtVAle2zxmP/57RnXFsj8fz+0l3ztz7P/eec+Zx5859nQSMrMbq48LCTJXS27ffunT/zPh/V6acaeU4u/o4nscWU0rN1nwpTYXlLU6upZ99cv1ye/p5Tqt0MVWpak1Pz95rzXs4pXQjnU130lR67uMTt1764Jml947fPH7pjdm7O9N6AAAYLfd/8O7P//L4968f+99vTy+mydb0sn2+mMeP5O3+xWptPCet/wFVW1q1jRcTId94Hhoh31iHfO3lNEO+8S7lT4TlNrvkm6wpf6xtWqd2wzBb/x9fNeY2jDcac3Nr/8lXfDg2Uc29cnXphWsDqiiw7T49k3fxGQyGkRuWjw56DQSwJh433ORG3LPwYFpLG++t/HtPNzrPD9tgtz//yh+u8t+9aY3D9tmvn6bSrvI9OpLH43GE8TBfv9//srx4PKLZYz27HUcYluML3eo5tsv12Kpu9Y+fi/3qKzktr8PpEG///sT3dFjeY6Cz+/b/GwwjOywPegUE7FnxvLnlrMTjeX0xPlkTP1ATP1gTP1QTP1wTh1H2u1d/nW5V6//z43/6fveHlf1sD+X0C33WJ+6P7Lf8eN5vvx60/Hg+Mexps/859ekv7/w1nv//eTj//1z+LZ3KK4iyvzDuV2+d+x8uDG50yfdwqM5DHfKvPp/emK+aXl9OalvPbKrHzMb5jnbLd2pjvqmQ71DeFjkQ6hu3Tw6F+cr2R1mvltdrPLS3GdoxEepR3pljOT0Q2nOsW7vCjuyJkK+Zh+OhXdOhXY+E+b4Y2lXNbGxX3H9e6nMiTI/HSUq+8LZt+l2K70W8LuPRnL6Z03dy+n5OP+pQ7igqn8du5/+Xz+dMalYvXF268kQeL5/Tu2PNyZXpF3a53sCD6/X6n5m08fqfI63pzUb7euHo+vSqfb0wFaZf7DL9yTxefs9+PHZwdfrc5Z8u/Wi7Gw8j7tprr//k+aWlK7/wxBNPengyKl+ZQa+ZgJ02/+rLP5u/9trr56++/PyLV1688sqFJ777nSefemphfnWrfr592x7YX9Z/9AddEwAAAAAAAAAAAKBn1cHOk3Nad3/bcj15uT49Xh/PcCjvW/k0lPsYlOs/u93XpVy/eWwX6sj2243LiQbdRqCzf7n/7/4e0h6og2HPDsvL7uIP7A2D7v+v3PewpEfO//3YylCy3Xt64/oy3r8QHsRe739O+fur/79W/1c9r/9Cj1lTWyv39/cP/q2t2HSy1/Jj+8t9YKf7K/8PufzSmsdSb+Uv/yaUH29U2qM/hvIPbSr/HxOdyt/U/lNbK/9Pufzyss2ei+V3e/3Xalw1NtYj7jcu9wGM+42LP4f2l3v79f3+b7Gjttu5fBhlw9LPZL+Gpf/Pbspyy3owr55bx+nK/bdjfwf91r/c97v8DjwSll/V/L7p/3O41fX/WT5/8/r/hH3nQ8f/DIaRHZaXlwfa9cmo9ruyVwz69R/0NuSgyx/0619n7X/s5KbzgYvY/2eMx/4/Yzz2/xnjsX+tGI/9f8bXM/b/GeMnwnJj/6AzNfEv1cRP1sS/XBM/VROP/99i/GxN/HRN/ExN/OGa+KM18XM18a/VxB+riT9eE5+tie93X83pqLYfRlnsN9L3H0ZHOf7T7fs/XRMHhlfs1zl+v79eEweGVznPw/cbRlDV+Y4dcX972Y/7Zk7fyen7Of1oxyrIbvhGTr+Z02/l9Ns5PZ/TuZzO51TfkMPtV/88efpWtX6e39EQ7/V80ng9QLxPzIUe6xOPz/V7PuuJHsvZqfK3eDkIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNBorD4uLMxUKb19+61L/57+3g9Xppxp5Ti7+jiexxZTSs2UUpXHx8PybkyupZ99cv1yp7RKF1cfy3h69l5r3sMr86ez6U6aSs99fOLWSx88s/Te8ZvHL70xe3dnWg8AAACj4f8BAAD///ZR5UI=") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.562338491s ago: executing program 1 (id=16081): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x101600, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000680)={0x4000000c}) 1.463488112s ago: executing program 3 (id=16082): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@acl}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5b9, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x1, 0x8, 0x4, 0xffffffffffffffff, 0x10403, 0x2}) 1.294571214s ago: executing program 1 (id=16083): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000100003052bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1564010041800400240012800b0001006d616373656300001400028005000a000000000005000c"], 0x60}, 0x1, 0x0, 0x0, 0x81}, 0x0) 1.183724475s ago: executing program 0 (id=16084): ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x21}) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r0, 0x8b32, &(0x7f0000000040)) 989.275448ms ago: executing program 3 (id=16085): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000001d00)=[{&(0x7f0000000100)="fb", 0x1}], 0x1) 915.562399ms ago: executing program 1 (id=16086): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x551581, 0xaa) 910.302079ms ago: executing program 0 (id=16087): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x42, &(0x7f0000000000), 0xff7b) 811.11383ms ago: executing program 5 (id=16088): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000040), 0xfd, 0x269, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000c80)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x8fe, 0x7f, 0x2000000000000000, 0x8}, {0xfffffffe, 0x4, 0x10000, 0x3, 0x0, 0x4}]}) 767.4589ms ago: executing program 1 (id=16089): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x34000}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 653.102402ms ago: executing program 0 (id=16090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 562.894193ms ago: executing program 5 (id=16091): r0 = io_uring_setup(0x2d69, &(0x7f0000000240)={0x0, 0x9581, 0x2, 0x3, 0x208}) rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 543.212683ms ago: executing program 1 (id=16092): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080), 0x4) 415.564725ms ago: executing program 0 (id=16093): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$binderfs(0x0, 0x0, 0x0, 0x80086, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) 318.587556ms ago: executing program 1 (id=16094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x41, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x1, 0x6, 0x90, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x2, [], [{{0x9, 0x5, 0x89, 0xe, 0x200, 0x8, 0x9, 0xab, {0x14, 0x25, 0x1, 0x10, "e1338a9cd009bb9da73397e32eeb4325"}}}]}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 144.113558ms ago: executing program 0 (id=16095): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xee01, 0x0, 0x1000) 83.579029ms ago: executing program 5 (id=16096): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x2}, 0xe) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) 0s ago: executing program 5 (id=16097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000240008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) kernel console output (not intermixed with test programs): 8b305e5 [ 1148.157472][ T8759] loop5: detected capacity change from 0 to 512 [ 1148.190656][ T8672] fscrypt (loop0, inode 3): Error -61 getting encryption context [ 1148.695617][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1148.703165][ C0] bridge0: topology change detected, propagating [ 1148.940646][ T8797] libceph: resolve '96' (ret=-3): failed [ 1149.229967][ T8809] netlink: 'syz.2.14739': attribute type 49 has an invalid length. [ 1149.831785][ T8841] bond0: (slave netdevsim0): Error: Device is in use and cannot be enslaved [ 1149.873988][ T8776] loop3: detected capacity change from 0 to 32768 [ 1149.949428][ T8776] XFS (loop3): Mounting V5 Filesystem [ 1149.972838][ T5786] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 1150.009976][ T8776] XFS (loop3): changing quota state required on read-only device. [ 1150.035485][ T8858] loop2: detected capacity change from 0 to 2048 [ 1150.043960][ T8776] XFS (loop3): write access unavailable, cannot proceed. [ 1150.062169][ T8858] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1150.093936][ T8776] XFS (loop3): please mount without quota. [ 1150.108407][ T8866] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1150.203146][ T8862] loop5: detected capacity change from 0 to 4096 [ 1150.224697][ T5786] usb 1-1: config 8 has an invalid interface number: 80 but max is 0 [ 1150.225751][ T8862] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1150.251817][ T5786] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.296631][ T5786] usb 1-1: config 8 has no interface number 0 [ 1150.312603][ T5786] usb 1-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 1150.324538][ T8862] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1150.344960][ T5786] usb 1-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1150.363215][ T8862] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1150.363648][ T8874] netlink: 'syz.1.14754': attribute type 10 has an invalid length. [ 1150.395198][ T5786] usb 1-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1150.422725][ T5786] usb 1-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 1150.452808][ T8862] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1150.457138][ T5786] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1150.532676][ T5786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.570952][ T8862] ntfs: volume version 3.1. [ 1150.593026][ T5786] usb 1-1: NFC: intf ffff888077c1b000 id ffffffff8d406400 [ 1150.726218][ T8862] ntfs: (device loop5): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 1150.766524][ T8862] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 1151.685498][ T8919] loop1: detected capacity change from 0 to 64 [ 1151.941755][ T8928] loop5: detected capacity change from 0 to 8 [ 1151.977076][ T4322] usb 1-1: USB disconnect, device number 53 [ 1152.427550][ T8962] loop3: detected capacity change from 0 to 1024 [ 1152.464012][ T8962] /dev/loop3: Can't open blockdev [ 1152.800395][ T8984] loop2: detected capacity change from 0 to 512 [ 1152.837743][ T8984] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1152.913589][ T8984] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1152.922015][ T8984] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 1152.934561][ T8984] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 1153.001272][ T8984] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 1153.016229][ T8994] loop5: detected capacity change from 0 to 2048 [ 1153.023849][ T8994] EXT4-fs: inline encryption not supported [ 1153.082885][ T8984] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1153.092443][ T8994] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1153.094688][ T8991] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1153.194478][ T8984] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.14786: dx entry: limit 65535 != root limit 120 [ 1153.209633][ T8991] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1153.249296][ T8991] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1153.269548][ T8991] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1153.279013][ T8984] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.14786: Corrupt directory, running e2fsck is recommended [ 1153.315941][ T9006] (unnamed net_device) (uninitialized): option ad_select: invalid value (253) [ 1153.344466][T19195] EXT4-fs (loop5): unmounting filesystem. [ 1153.490739][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 1153.597758][ T9016] loop1: detected capacity change from 0 to 256 [ 1153.674759][ T8977] loop3: detected capacity change from 0 to 32768 [ 1153.725796][ T9016] FAT-fs (loop1): Directory bread(block 64) failed [ 1153.744437][ T9016] FAT-fs (loop1): Directory bread(block 65) failed [ 1153.751661][ T9016] FAT-fs (loop1): Directory bread(block 66) failed [ 1153.758837][ T4354] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1153.813180][ T9016] FAT-fs (loop1): Directory bread(block 67) failed [ 1153.820315][ T9016] FAT-fs (loop1): Directory bread(block 68) failed [ 1153.892898][ T9016] FAT-fs (loop1): Directory bread(block 69) failed [ 1153.902737][ T9016] FAT-fs (loop1): Directory bread(block 70) failed [ 1153.909429][ T9016] FAT-fs (loop1): Directory bread(block 71) failed [ 1153.946930][ T9016] FAT-fs (loop1): Directory bread(block 72) failed [ 1154.002653][ T9016] FAT-fs (loop1): Directory bread(block 73) failed [ 1154.061834][ T9036] netlink: 'syz.5.14798': attribute type 4 has an invalid length. [ 1154.113094][ T9036] netlink: 224 bytes leftover after parsing attributes in process `syz.5.14798'. [ 1154.482295][ T9056] xt_TCPMSS: Only works on TCP SYN packets [ 1155.036146][ T9086] netlink: 'syz.2.14814': attribute type 7 has an invalid length. [ 1155.073429][ T9087] netlink: 80 bytes leftover after parsing attributes in process `syz.0.14813'. [ 1155.328047][ T9100] netlink: 184 bytes leftover after parsing attributes in process `syz.0.14818'. [ 1155.597691][ T9118] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14823'. [ 1155.914243][ T9136] loop3: detected capacity change from 0 to 512 [ 1155.940692][ T9136] EXT4-fs: Ignoring removed oldalloc option [ 1155.959054][ T9136] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1156.021804][ T9133] loop2: detected capacity change from 0 to 4096 [ 1156.039963][ T9136] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1156.104463][ T9136] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 1156.114714][ T9133] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 1156.137445][ T9136] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 1156.156184][ T9136] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1156.176257][ T9136] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.14830: bad symlink. [ 1156.383932][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 1156.521667][ T9162] device  entered promiscuous mode [ 1157.004396][ T9194] netlink: 'syz.1.14846': attribute type 1 has an invalid length. [ 1157.007232][ T9195] loop2: detected capacity change from 0 to 512 [ 1157.042876][ T9194] netlink: 220 bytes leftover after parsing attributes in process `syz.1.14846'. [ 1157.053127][ T9194] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14846'. [ 1157.224029][ T9205] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14850'. [ 1157.283726][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14851'. [ 1157.301137][ T9195] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1157.349976][ T9195] ext4 filesystem being mounted at /3024/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1157.411146][ T9219] loop0: detected capacity change from 0 to 512 [ 1157.419162][ T9219] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1157.443949][ T9219] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1157.493023][ T9219] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 1157.552193][ T9219] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 1157.562450][ T9219] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 1157.572149][ T9219] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1157.589403][ T9219] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.14855: dx entry: limit 65535 != root limit 120 [ 1157.602154][ T9219] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.14855: Corrupt directory, running e2fsck is recommended [ 1157.612898][ T9227] loop5: detected capacity change from 0 to 128 [ 1157.639279][ T9195] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz.2.14847: directory missing '..' [ 1157.703544][ T9227] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1157.773740][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 1157.790828][ T9227] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1157.955884][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 1157.972113][ T9232] loop1: detected capacity change from 0 to 8192 [ 1158.007165][ T9232] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1158.065167][ T9232] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 1158.094136][ T9232] FAT-fs (loop1): Filesystem has been set read-only [ 1158.283150][T26692] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 1158.761118][ T9286] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14872'. [ 1158.770881][ T129] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1158.812412][ T9286] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14872'. [ 1158.972805][ T129] usb 2-1: Using ep0 maxpacket: 32 [ 1158.985463][ T129] usb 2-1: string descriptor 0 read error: -22 [ 1158.992475][ T129] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1159.002019][ T129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.044477][ T129] usb 2-1: MIDIStreaming interface descriptor not found [ 1159.334406][T32431] usb 2-1: USB disconnect, device number 50 [ 1159.442455][ T9335] netlink: 'syz.2.14879': attribute type 3 has an invalid length. [ 1159.789496][ T9354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14885'. [ 1160.567258][ T9400] loop1: detected capacity change from 0 to 256 [ 1160.615842][ T9400] FAT-fs (loop1): Directory bread(block 1285) failed [ 1160.630048][ T9400] FAT-fs (loop1): Directory bread(block 1286) failed [ 1160.669516][ T9400] FAT-fs (loop1): Directory bread(block 1287) failed [ 1160.714183][ T9400] FAT-fs (loop1): Directory bread(block 1288) failed [ 1160.741552][ T9400] FAT-fs (loop1): Directory bread(block 1285) failed [ 1160.782784][ T9400] FAT-fs (loop1): Directory bread(block 1286) failed [ 1160.789878][ T9400] FAT-fs (loop1): Directory bread(block 1287) failed [ 1160.826840][ T9400] FAT-fs (loop1): Directory bread(block 1288) failed [ 1160.841205][ T9414] loop3: detected capacity change from 0 to 512 [ 1160.858016][ T9400] FAT-fs (loop1): FAT read failed (blocknr 1281) [ 1160.895771][ T9414] /dev/loop3: Can't open blockdev [ 1161.376405][ T9445] loop1: detected capacity change from 0 to 64 [ 1161.641210][ T9456] loop5: detected capacity change from 0 to 256 [ 1161.656282][ T9453] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 1162.014277][ T9456] loop5: detected capacity change from 0 to 4096 [ 1162.028180][ T9456] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1162.123080][ T9456] ntfs: (device loop5): parse_options(): Option iocharset is deprecated. Please use option nls= in the future. [ 1162.176048][ T9456] ntfs: (device loop5): parse_options(): Unrecognized mount option uni_xlate. [ 1162.202637][ T9456] ntfs: (device loop5): parse_options(): Unrecognized mount option uni_xlate. [ 1162.237774][ T9456] ntfs: (device loop5): parse_options(): Unrecognized mount option shortname. [ 1162.247307][T32431] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1162.282815][ T9456] ntfs: (device loop5): parse_options(): Unrecognized mount option shortname. [ 1162.291920][ T9456] ntfs: (device loop5): parse_options(): Unrecognized mount option uni_xlate. [ 1162.371456][ T9456] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1162.418785][ T9490] loop1: detected capacity change from 0 to 764 [ 1162.425834][ T9456] ntfs: (device loop5): parse_options(): Unrecognized mount option tz. [ 1162.442751][T32431] usb 3-1: Using ep0 maxpacket: 32 [ 1162.448889][ T9456] ntfs: (device loop5): parse_options(): Unrecognized mount option shortname. [ 1162.463653][T32431] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1162.480058][T32431] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.494847][T32431] usb 3-1: config 0 has no interface number 0 [ 1162.501889][T32431] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1162.551909][ T9490] rock: directory entry would overflow storage [ 1162.564044][T32431] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1162.584601][ T9490] rock: sig=0x4654, size=5, remaining=4 [ 1162.612757][T32431] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.621004][T32431] usb 3-1: Product: syz [ 1162.648476][ T9498] loop0: detected capacity change from 0 to 256 [ 1162.666521][T32431] usb 3-1: Manufacturer: syz [ 1162.671379][T32431] usb 3-1: SerialNumber: syz [ 1162.691848][ T9498] exfat: Deprecated parameter 'utf8' [ 1162.708583][T32431] usb 3-1: config 0 descriptor?? [ 1162.736664][T32431] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 1162.783286][T32431] radio-si470x: probe of 3-1:0.35 failed with error -5 [ 1162.783470][ T9498] exfat: Deprecated parameter 'utf8' [ 1162.847550][ T9498] exfat: Deprecated parameter 'utf8' [ 1162.914480][ T9498] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 1162.950820][T32431] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1163.057017][ T9469] loop3: detected capacity change from 0 to 32768 [ 1163.163833][T32431] radio-raremono 3-1:0.35: raremono_cmd_main failed (-71) [ 1163.194911][T32431] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 1163.253047][T32431] usb 3-1: USB disconnect, device number 52 [ 1163.268866][T32431] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 1163.558987][T16418] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 1164.416267][ T9591] loop3: detected capacity change from 0 to 164 [ 1164.423893][ T9589] loop5: detected capacity change from 0 to 512 [ 1164.454497][ T9589] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1164.510375][ T9591] rock: directory entry would overflow storage [ 1164.535586][ T9591] rock: sig=0x4543, size=28, remaining=18 [ 1164.575657][ T9602] netlink: 'syz.1.14949': attribute type 1 has an invalid length. [ 1164.638355][ T9605] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1164.652460][ T9602] netlink: 908 bytes leftover after parsing attributes in process `syz.1.14949'. [ 1164.704954][ T9602] nbd: must specify at least one socket [ 1165.227997][ T9638] netlink: 'syz.3.14960': attribute type 2 has an invalid length. [ 1165.228022][ T9638] netlink: 723 bytes leftover after parsing attributes in process `syz.3.14960'. [ 1165.803039][ T93] block nbd5: Attempted send on invalid socket [ 1165.809361][ T93] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1165.819347][ T9696] ADFS-fs (nbd5): error: unable to read block 3, try 0 [ 1165.843047][ T9705] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.14969'. [ 1165.860013][ T9705] netlink: zone id is out of range [ 1165.870498][ T9705] netlink: del zone limit has 4 unknown bytes [ 1165.927442][ T9709] nft_compat: unsupported protocol 1 [ 1166.616212][ T9747] loop2: detected capacity change from 0 to 256 [ 1166.678512][ T9747] exfat: Deprecated parameter 'utf8' [ 1166.702832][ T9747] exfat: Deprecated parameter 'utf8' [ 1166.722321][ T9747] exfat: Deprecated parameter 'utf8' [ 1166.763528][ T9747] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 1167.471642][ T9804] loop1: detected capacity change from 0 to 64 [ 1167.702725][ T5299] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1167.894714][ T5299] usb 1-1: Using ep0 maxpacket: 16 [ 1167.923008][ T5299] usb 1-1: config 0 has no interfaces? [ 1167.942353][ T5299] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1167.966388][ T5299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.991816][ T5299] usb 1-1: Product: syz [ 1168.002761][ T5299] usb 1-1: Manufacturer: syz [ 1168.007483][ T5299] usb 1-1: SerialNumber: syz [ 1168.016601][ T9826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15001'. [ 1168.052757][ T9826] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15001'. [ 1168.070454][ T5299] r8152-cfgselector 1-1: config 0 descriptor?? [ 1168.304193][ T5299] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 1168.413767][ T9846] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 1168.518832][T32431] usb 1-1: USB disconnect, device number 54 [ 1168.612056][ T9860] loop1: detected capacity change from 0 to 16 [ 1168.648552][ T9860] erofs: Unknown parameter '5‚ser_xattr' [ 1168.703758][ T9860] cifs: Unknown parameter '5‚ser_xattr' [ 1169.252868][T32431] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1169.462760][T32431] usb 3-1: Using ep0 maxpacket: 32 [ 1169.481515][T32431] usb 3-1: string descriptor 0 read error: -22 [ 1169.508392][T32431] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1169.517039][ T4322] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1169.532714][T32431] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.592285][T32431] usb 3-1: MIDIStreaming interface descriptor not found [ 1169.648131][ T9929] vivid-003: disconnect [ 1169.714050][ T9927] vivid-003: reconnect [ 1169.725276][ T4322] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1169.748271][ T4322] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1169.790767][ T4322] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice=fd.00 [ 1169.831253][ T4322] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=2 [ 1169.863150][ T4322] usb 1-1: Product: syz [ 1169.864758][T32431] usb 3-1: USB disconnect, device number 53 [ 1169.867467][ T4322] usb 1-1: Manufacturer: syz [ 1169.921392][ T4322] usb 1-1: SerialNumber: syz [ 1170.194566][ T4322] usb 1-1: 0:2 : does not exist [ 1170.223291][ T4322] usb 1-1: unit 5 not found! [ 1170.242422][ T9977] loop1: detected capacity change from 0 to 256 [ 1170.277286][ T4322] usb 1-1: USB disconnect, device number 55 [ 1170.342017][ T9977] FAT-fs (loop1): Directory bread(block 64) failed [ 1170.373515][ T9977] FAT-fs (loop1): Directory bread(block 65) failed [ 1170.390350][ T9977] FAT-fs (loop1): Directory bread(block 66) failed [ 1170.432689][ T9977] FAT-fs (loop1): Directory bread(block 67) failed [ 1170.439484][ T9977] FAT-fs (loop1): Directory bread(block 68) failed [ 1170.482965][ T9977] FAT-fs (loop1): Directory bread(block 69) failed [ 1170.489895][ T9977] FAT-fs (loop1): Directory bread(block 70) failed [ 1170.512966][ T9977] FAT-fs (loop1): Directory bread(block 71) failed [ 1170.532767][ T9977] FAT-fs (loop1): Directory bread(block 72) failed [ 1170.540031][ T9977] FAT-fs (loop1): Directory bread(block 73) failed [ 1170.563680][T16418] udevd[16418]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1170.759583][ T9977] syz.1.15031: attempt to access beyond end of device [ 1170.759583][ T9977] loop1: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 1170.851324][ T9977] syz.1.15031: attempt to access beyond end of device [ 1170.851324][ T9977] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 1170.901477][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 1170.901496][ T26] audit: type=1800 audit(1778202513.568:704): pid=9977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.15031" name="file0" dev="loop1" ino=1048755 res=0 errno=0 [ 1171.442776][T32429] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1171.471624][T10079] loop3: detected capacity change from 0 to 64 [ 1171.548835][T16418] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1171.642698][T32429] usb 1-1: Using ep0 maxpacket: 32 [ 1171.651139][T32429] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1171.681668][T32429] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.727900][T32429] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1171.790445][T10094] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1171.816587][T32429] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1171.835970][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15051'. [ 1171.846978][T32429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.877388][T32429] usb 1-1: Product: syz [ 1171.881816][T32429] usb 1-1: Manufacturer: syz [ 1171.900530][T32429] usb 1-1: SerialNumber: syz [ 1172.122213][T10111] loop1: detected capacity change from 0 to 8 [ 1172.155162][T32429] usb 1-1: MIDIStreaming interface descriptor not found [ 1172.185535][T10111] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1172.203956][T32429] usb 1-1: USB disconnect, device number 56 [ 1172.281560][T10111] cramfs: Error -3 while decompressing! [ 1172.333038][T10111] cramfs: ffffffff96d8d248(26)->ffff88804ff12000(4096) [ 1172.403547][T10111] cramfs: Error 2 while decompressing! [ 1172.415497][T16418] udevd[16418]: incorrect cramfs checksum on /dev/loop1 [ 1172.430899][T10111] cramfs: ffffffff96d8d262(26)->ffff88804bcfd000(4096) [ 1172.452965][T10111] cramfs: Error -3 while decompressing! [ 1172.493081][T10111] cramfs: ffffffff96d8d27c(16)->ffff88804c4a4000(4096) [ 1172.500155][T10111] cramfs: Error -3 while decompressing! [ 1172.518895][T16418] udevd[16418]: incorrect cramfs checksum on /dev/loop1 [ 1172.532980][T10111] cramfs: ffffffff96d8d248(26)->ffff88804ff12000(4096) [ 1172.626892][T16418] udevd[16418]: incorrect cramfs checksum on /dev/loop1 [ 1172.647165][T10157] loop5: detected capacity change from 0 to 64 [ 1172.744484][ T4354] udevd[4354]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1172.872052][T19195] hfs: node 4:3 still has 1 user(s)! [ 1172.913578][T10170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15064'. [ 1172.993200][T10170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15064'. [ 1173.282889][T32429] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 1173.495143][T32429] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1173.508535][T32429] usb 1-1: config 0 has no interface number 0 [ 1173.532661][T32429] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1173.563403][T32429] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1173.591774][T32429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.600242][T10209] blktrace: Concurrent blktraces are not allowed on loop7 [ 1173.631024][T32429] usb 1-1: Product: syz [ 1173.639647][T32429] usb 1-1: Manufacturer: syz [ 1173.662903][T32429] usb 1-1: SerialNumber: syz [ 1173.670829][T32429] usb 1-1: config 0 descriptor?? [ 1173.904412][T32429] CoreChips: probe of 1-1:0.41 failed with error -71 [ 1173.934432][T32429] usb 1-1: USB disconnect, device number 57 [ 1174.845642][T10283] loop3: detected capacity change from 0 to 1024 [ 1175.113140][T10301] autofs4:pid:10301:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2), cmd(0xc0189374) [ 1175.170507][T10301] autofs4:pid:10301:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 1175.305198][T10312] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15105'. [ 1175.342128][T10312] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15105'. [ 1175.491896][T10323] netlink: 172 bytes leftover after parsing attributes in process `syz.0.15108'. [ 1175.552944][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15108'. [ 1175.562322][T10323] netlink: 172 bytes leftover after parsing attributes in process `syz.0.15108'. [ 1175.650243][T10323] netlink: 100 bytes leftover after parsing attributes in process `syz.0.15108'. [ 1175.712784][T10323] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15108'. [ 1175.982683][T32429] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1176.172799][T32429] usb 2-1: Using ep0 maxpacket: 8 [ 1176.180260][T32429] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1176.220821][T32429] usb 2-1: config 179 has no interface number 0 [ 1176.250667][T32429] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1176.263372][T32429] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1176.285683][T32429] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1176.314859][T32429] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1176.358233][T32429] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1176.434805][T32429] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1176.459468][T32429] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1176.469197][T10369] xt_CT: No such helper "netbios-ns" [ 1176.505380][T32429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.624264][T32429] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input57 [ 1176.758115][T10396] loop0: detected capacity change from 0 to 512 [ 1176.837202][T10390] loop2: detected capacity change from 0 to 1024 [ 1176.856947][T10396] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1176.874918][T32429] usb 2-1: USB disconnect, device number 51 [ 1176.881147][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1176.898718][T10396] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1176.920617][T32429] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1176.944325][T10396] System zones: 0-1, 15-15, 18-18, 34-34 [ 1176.953233][T10396] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1176.960969][T10396] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 1177.013482][T10396] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1177.109016][T10396] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1177.138199][T10396] EXT4-fs (loop0): 1 truncate cleaned up [ 1177.165350][T10396] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1177.287814][T10396] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 1177.345251][T10432] __nla_validate_parse: 1 callbacks suppressed [ 1177.345271][T10432] netlink: 193 bytes leftover after parsing attributes in process `syz.2.15134'. [ 1177.484011][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 1177.497021][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.503581][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.315610][T10418] loop3: detected capacity change from 0 to 32768 [ 1178.615492][T16418] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1178.679373][T10486] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1178.780039][T10489] tmpfs: Bad value for 'mpol' [ 1179.187355][T10492] loop2: detected capacity change from 0 to 4096 [ 1179.258309][T10492] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 1179.342760][T10470] loop0: detected capacity change from 0 to 40427 [ 1179.390868][T10470] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1179.441572][T10470] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1179.502778][T10470] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 1179.569761][T10470] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1179.740524][T10470] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1179.762829][T10470] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1180.760061][T10564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1181.378714][ T4290] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 1181.586473][T10551] loop2: detected capacity change from 0 to 32768 [ 1181.818468][T10551] XFS (loop2): Mounting V5 Filesystem [ 1182.016356][T10551] XFS (loop2): Ending clean mount [ 1182.276943][ T4273] XFS (loop2): Unmounting Filesystem [ 1182.630066][T10665] device geneve5 entered promiscuous mode [ 1182.802763][ T4322] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1183.011111][ T4322] usb 1-1: Using ep0 maxpacket: 8 [ 1183.019040][ T4322] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1183.072675][ T4322] usb 1-1: config 0 has no interface number 0 [ 1183.098797][ T4322] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1183.169819][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.191336][ T4322] usb 1-1: Product: syz [ 1183.209966][ T4322] usb 1-1: Manufacturer: syz [ 1183.242804][ T4322] usb 1-1: SerialNumber: syz [ 1183.263483][ T4322] usb 1-1: config 0 descriptor?? [ 1183.473512][ T4322] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 1183.482790][ T4322] usb 1-1: No valid video chain found. [ 1183.507020][ T4322] usb 1-1: USB disconnect, device number 58 [ 1183.622825][ T129] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 1183.645883][T10726] netlink: 'syz.5.15212': attribute type 3 has an invalid length. [ 1183.664906][T10726] netlink: 'syz.5.15212': attribute type 3 has an invalid length. [ 1183.804942][ T129] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1183.852277][ T129] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1183.872618][ T129] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1183.900452][ T129] usb 4-1: config 1 has no interface number 0 [ 1183.907247][ T129] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1183.937771][ T129] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1183.972937][ T129] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1183.982245][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.055472][ T129] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1184.096442][T10737] loop5: detected capacity change from 0 to 4096 [ 1184.251601][ T129] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 1184.284588][ T129] snd_usb_pod 4-1:1.1: invalid control EP [ 1184.303043][ T129] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 1184.309838][ T129] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1184.347934][ T129] snd_usb_pod: probe of 4-1:1.1 failed with error -22 [ 1184.469212][ T129] usb 4-1: USB disconnect, device number 57 [ 1184.593997][T10775] netlink: 164 bytes leftover after parsing attributes in process `syz.1.15225'. [ 1185.019671][T10788] loop1: detected capacity change from 0 to 4096 [ 1185.064387][T10788] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1185.120449][T10788] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1185.135311][T10802] loop5: detected capacity change from 0 to 64 [ 1185.186101][T10788] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1185.217379][T10802] syz.5.15233: attempt to access beyond end of device [ 1185.217379][T10802] loop5: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 1185.238587][T10808] loop0: detected capacity change from 0 to 512 [ 1185.272144][T10802] Buffer I/O error on dev loop5, logical block 1295, async page read [ 1185.275456][T10788] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1185.330231][T10802] syz.5.15233: attempt to access beyond end of device [ 1185.330231][T10802] loop5: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 1185.362899][T10788] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1185.402913][T10802] Buffer I/O error on dev loop5, logical block 1295, async page read [ 1185.412726][ T4290] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1185.420174][T10788] ntfs: volume version 3.1. [ 1185.422261][ T4290] Bluetooth: hci3: Injecting HCI hardware error event [ 1185.436333][T10788] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1185.437991][ T4290] Bluetooth: hci3: hardware error 0x00 [ 1185.454689][ T26] audit: type=1800 audit(1778202528.118:705): pid=10802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.15233" name="file2" dev="loop5" ino=6 res=0 errno=0 [ 1185.483322][T10788] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1185.500346][T10808] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1185.509507][T10788] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1185.520981][T10808] ext4 filesystem being mounted at /3070/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1185.583369][T10808] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1185.588542][T10821] loop3: detected capacity change from 0 to 4096 [ 1185.607511][T10821] /dev/loop3: Can't open blockdev [ 1185.683886][T10808] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.15235: Failed to acquire dquot type 0 [ 1185.969553][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 1187.492660][ T4290] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1188.042107][T10896] loop3: detected capacity change from 0 to 32768 [ 1188.094357][T10896] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 scanned by syz.3.15261 (10896) [ 1188.098615][T10949] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15277'. [ 1188.186670][T10896] BTRFS info (device loop3): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 1188.220198][T10896] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1188.254598][T10949] bond0: (slave bond_slave_0): Releasing backup interface [ 1188.256252][T10896] BTRFS info (device loop3): turning on async discard [ 1188.302791][T10896] BTRFS info (device loop3): using free space tree [ 1188.474626][T10949] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1188.494031][T10896] BTRFS info (device loop3): enabling ssd optimizations [ 1188.922893][ T4281] BTRFS info (device loop3): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 1190.131757][T10991] loop2: detected capacity change from 0 to 32768 [ 1190.206234][T11040] loop5: detected capacity change from 0 to 512 [ 1190.223930][T10991] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1190.364597][T11040] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1190.384310][T11040] ext4 filesystem being mounted at /1715/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1190.436429][T11040] __quota_error: 9 callbacks suppressed [ 1190.436451][T11040] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1190.494835][ T4273] ocfs2: Unmounting device (7,2) on (node local) [ 1190.534110][T11040] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1190.582734][T11040] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.15299: Failed to acquire dquot type 0 [ 1190.800675][T19195] EXT4-fs (loop5): unmounting filesystem. [ 1190.912238][T11063] loop2: detected capacity change from 0 to 4096 [ 1191.193047][T11029] loop1: detected capacity change from 0 to 32768 [ 1191.364481][T11029] XFS (loop1): Mounting V5 Filesystem [ 1191.448305][T11029] XFS (loop1): Ending clean mount [ 1191.491127][T11029] XFS (loop1): Quotacheck needed: Please wait. [ 1191.672156][T11029] XFS (loop1): Quotacheck: Done. [ 1191.924641][T26692] XFS (loop1): Unmounting Filesystem [ 1192.120269][T11124] loop2: detected capacity change from 0 to 8 [ 1192.223439][T15891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.240714][T15891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.264006][T11130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1192.293993][T15893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1192.307934][T11136] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15322'. [ 1192.321815][T11124] SQUASHFS error: Unable to read directory block [247:71] [ 1192.366456][T11136] netlink: 56 bytes leftover after parsing attributes in process `syz.3.15322'. [ 1193.432661][ T5299] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1193.622952][ T5299] usb 1-1: Using ep0 maxpacket: 16 [ 1193.639446][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1193.650826][ T129] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1193.694030][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1193.732670][ T5299] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1193.756090][ T5299] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1193.782626][ T5299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.804136][ T5299] usb 1-1: config 0 descriptor?? [ 1193.852641][ T129] usb 3-1: Using ep0 maxpacket: 16 [ 1193.861255][ T129] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1193.886991][ T129] usb 3-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 1193.932953][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.941650][ T129] usb 3-1: Product: syz [ 1193.968917][ T129] usb 3-1: Manufacturer: syz [ 1193.974218][ T129] usb 3-1: SerialNumber: syz [ 1194.004085][T11225] netlink: 64 bytes leftover after parsing attributes in process `syz.5.15345'. [ 1194.203465][ T129] usb 3-1: MIDIStreaming interface descriptor not found [ 1194.224302][ T5299] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 1194.250549][T11241] binder: 11233:11241 ioctl c0306201 200000000640 returned -14 [ 1194.295569][ T129] usb 3-1: USB disconnect, device number 54 [ 1194.367755][ T5299] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input59 [ 1194.537512][ T5299] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1194.561577][ T5299] usb 1-1: USB disconnect, device number 59 [ 1194.616100][ T4449] udevd[4449]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1194.641623][T11283] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1194.660264][T11285] loop5: detected capacity change from 0 to 256 [ 1194.939320][T11289] fido_id[11289]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1195.004141][T11307] loop1: detected capacity change from 0 to 64 [ 1195.080102][ T26] audit: type=1800 audit(1778202537.748:706): pid=11307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.15354" name="file2" dev="loop1" ino=21 res=0 errno=0 [ 1195.250072][T11309] loop5: detected capacity change from 0 to 4096 [ 1195.401074][T11309] ntfs: volume version 3.1. [ 1195.411814][T11309] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1195.475687][T11309] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1195.542641][T11309] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 1195.602146][T11309] ntfs: (device loop5): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 1195.689782][T11309] ntfs: (device loop5): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 1195.760258][T11309] ntfs: (device loop5): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 1195.874374][T11309] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Found already allocated name in phase 2. Please run chkdsk and if that doesn't find any errors please report you saw this message to linux-ntfs-dev@lists.sourceforge.net. [ 1195.939841][T11309] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 1195.990716][T11309] ntfs: (device loop5): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 1196.089935][T11346] loop1: detected capacity change from 0 to 4096 [ 1196.477348][T11362] loop3: detected capacity change from 0 to 1024 [ 1196.713008][T11372] netlink: 'syz.5.15374': attribute type 2 has an invalid length. [ 1196.743558][T11372] netlink: 'syz.5.15374': attribute type 2 has an invalid length. [ 1197.001078][T11390] loop5: detected capacity change from 0 to 1024 [ 1197.245686][T11395] loop2: detected capacity change from 0 to 4096 [ 1197.300892][T11395] ntfs: volume version 3.1. [ 1197.335514][T11395] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1197.387442][T11395] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1197.439903][T11411] mkiss: ax0: crc mode is auto. [ 1198.440704][T11457] loop3: detected capacity change from 0 to 8192 [ 1198.494558][T16418] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1199.566775][T11471] loop2: detected capacity change from 0 to 32768 [ 1199.648852][T11516] loop1: detected capacity change from 0 to 512 [ 1199.709634][T11471] XFS (loop2): Mounting V5 Filesystem [ 1199.716962][T11516] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1199.795068][T11516] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 1199.803747][T11516] System zones: 1-12 [ 1199.809795][T11516] EXT4-fs (loop1): 1 truncate cleaned up [ 1199.822845][T11516] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1199.900688][T11471] XFS (loop2): Ending clean mount [ 1199.929129][T11471] XFS (loop2): Quotacheck needed: Please wait. [ 1200.033790][T26692] EXT4-fs (loop1): unmounting filesystem. [ 1200.089420][T11471] XFS (loop2): Quotacheck: Done. [ 1200.129579][T11552] loop0: detected capacity change from 0 to 512 [ 1200.219937][T11552] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1200.268424][ T4273] XFS (loop2): Unmounting Filesystem [ 1200.442904][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 1200.512905][T11574] loop3: detected capacity change from 0 to 128 [ 1200.595648][T11574] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 1200.639467][T11574] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1200.717268][T11574] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:511: comm syz.3.15423: Block bitmap for bg 0 marked uninitialized [ 1200.886626][T11592] loop5: detected capacity change from 0 to 1024 [ 1200.895723][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 1201.364702][T11618] loop0: detected capacity change from 0 to 512 [ 1201.532877][T11618] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1201.600077][T11618] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 1201.610750][T11618] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.15434: Corrupt directory, running e2fsck is recommended [ 1201.632831][T11618] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 1201.645314][T11627] loop5: detected capacity change from 0 to 512 [ 1201.660159][T11618] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.15434: corrupted in-inode xattr [ 1201.680930][T11618] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.15434: couldn't read orphan inode 15 (err -117) [ 1201.717097][T11618] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1201.776470][T11635] Bluetooth: MGMT ver 1.22 [ 1201.873557][T11627] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 49, start 000000c8) [ 1201.931324][T11627] FAT-fs (loop5): Filesystem has been set read-only [ 1202.034321][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 1202.126213][T11643] netlink: 'syz.1.15439': attribute type 5 has an invalid length. [ 1202.212246][T11649] loop3: detected capacity change from 0 to 1764 [ 1203.546882][T11734] xt_policy: too many policy elements [ 1203.602339][T11738] vivid-000: disconnect [ 1203.609461][T11740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15460'. [ 1203.624321][T11736] vivid-000: reconnect [ 1203.752821][T32429] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1203.944731][T32429] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1203.983148][T32429] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.024103][T32429] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1204.049062][T11752] loop5: detected capacity change from 0 to 4096 [ 1204.066167][T32429] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1204.100943][T32429] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1204.110769][T11752] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1204.124907][T11751] loop1: detected capacity change from 0 to 4096 [ 1204.142001][T32429] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1204.172254][T32429] usb 4-1: Product: syz [ 1204.182985][T32429] usb 4-1: Manufacturer: syz [ 1204.226460][T32429] cdc_wdm 4-1:1.0: skipping garbage [ 1204.231840][T32429] cdc_wdm 4-1:1.0: skipping garbage [ 1204.290148][T11751] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1204.343826][T32429] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1204.377511][T32429] cdc_wdm 4-1:1.0: Unknown control protocol [ 1204.439158][T32429] usb 4-1: USB disconnect, device number 58 [ 1204.698549][T11791] loop0: detected capacity change from 0 to 128 [ 1204.777010][T11791] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 1204.896187][T11791] hpfs: filesystem error: improperly stopped [ 1204.955597][T11791] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1204.988852][T11791] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 1205.042133][T11791] hpfs: You really don't want any checks? You are crazy... [ 1205.072982][T11791] hpfs: hpfs_map_sector(): read error [ 1205.091859][T11791] hpfs: code page support is disabled [ 1205.112113][T11791] hpfs: hpfs_map_4sectors(): unaligned read [ 1205.139640][T11791] hpfs: hpfs_map_4sectors(): unaligned read [ 1205.166982][T11791] hpfs: filesystem error: unable to find root dir [ 1205.276697][T11819] loop1: detected capacity change from 0 to 16 [ 1205.335001][T11819] erofs: (device loop1): mounted with root inode @ nid 36. [ 1205.636317][T11838] loop0: detected capacity change from 0 to 128 [ 1205.742587][T32429] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 1205.945617][T32429] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 1205.968227][T32429] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.019170][T32429] usb 3-1: config 0 has no interface number 0 [ 1206.044322][T32429] usb 3-1: config 0 interface 52 has no altsetting 0 [ 1206.060581][T11866] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 1206.070761][T11864] IPVS: stopping backup sync thread 11866 ... [ 1206.083413][T32429] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1206.105977][T32429] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1206.127883][T32429] usb 3-1: Manufacturer: syz [ 1206.144511][T32429] usb 3-1: config 0 descriptor?? [ 1206.175213][T32429] hub 3-1:0.52: bad descriptor, ignoring hub [ 1206.181481][T32429] hub: probe of 3-1:0.52 failed with error -5 [ 1206.657544][T11897] loop0: detected capacity change from 0 to 16 [ 1206.708104][T11897] erofs: (device loop0): mounted with root inode @ nid 36. [ 1206.743080][T32429] usb 3-1: USB disconnect, device number 55 [ 1206.857885][T11906] loop1: detected capacity change from 0 to 256 [ 1207.175666][ T4321] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1207.372671][ T4321] usb 1-1: Using ep0 maxpacket: 8 [ 1207.379876][ T4321] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.427460][ T4321] usb 1-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 1207.459661][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.491205][ T4321] usb 1-1: config 0 descriptor?? [ 1207.521235][ T4321] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1207.615175][T11943] loop5: detected capacity change from 0 to 512 [ 1207.660932][T11943] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1207.695961][T11946] loop2: detected capacity change from 0 to 4096 [ 1207.706342][T11943] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1207.724994][T11910] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15496'. [ 1207.734159][T11946] EXT4-fs: Ignoring removed orlov option [ 1207.748579][T11956] loop1: detected capacity change from 0 to 1024 [ 1207.765673][T11943] EXT4-fs error (device loop5): ext4_quota_enable:7045: comm syz.5.15502: Bad quota inum: 2, type: 2 [ 1207.780650][T32431] usb 1-1: USB disconnect, device number 60 [ 1207.781897][T11943] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 1207.814507][T11943] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 1207.820299][T11946] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1207.821890][T11943] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1207.909821][T11946] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1207.952750][ T4321] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 1208.023691][T11946] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 1208.098056][T19195] EXT4-fs (loop5): unmounting filesystem. [ 1208.144459][ T4321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1208.180539][ T4321] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1208.211787][ T4321] usb 4-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 1208.228917][T11977] loop5: detected capacity change from 0 to 16 [ 1208.235171][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.259239][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 1208.273421][ T4321] usb 4-1: config 0 descriptor?? [ 1208.363163][T11977] erofs: (device loop5): mounted with root inode @ nid 36. [ 1208.423534][T11984] loop1: detected capacity change from 0 to 1024 [ 1208.653262][ T2907] hfsplus: b-tree write err: -5, ino 25 [ 1208.660858][ T2907] hfsplus: b-tree write err: -5, ino 4 [ 1208.700864][ T4321] wacom 0003:056A:00F4.0002: ignoring exceeding usage max [ 1208.709862][ T2907] hfsplus: b-tree write err: -5, ino 2 [ 1208.746494][ T4321] wacom 0003:056A:00F4.0002: unknown main item tag 0x0 [ 1208.774512][ T4321] wacom 0003:056A:00F4.0002: unknown main item tag 0x0 [ 1208.784634][ T4321] wacom 0003:056A:00F4.0002: unknown main item tag 0x0 [ 1208.815012][ T4321] wacom 0003:056A:00F4.0002: unknown main item tag 0x0 [ 1208.821992][ T4321] wacom 0003:056A:00F4.0002: unknown main item tag 0x0 [ 1208.860049][ T4321] wacom 0003:056A:00F4.0002: unknown main item tag 0x0 [ 1208.889643][ T4321] wacom 0003:056A:00F4.0002: unknown main item tag 0x0 [ 1208.916775][ T4321] wacom 0003:056A:00F4.0002: unknown main item tag 0x0 [ 1208.952167][ T4321] wacom 0003:056A:00F4.0002: hidraw0: USB HID v0.08 Device [HID 056a:00f4] on usb-dummy_hcd.3-1/input0 [ 1208.969733][ T4321] usb 4-1: USB disconnect, device number 59 [ 1209.161923][T12028] loop0: detected capacity change from 0 to 2048 [ 1209.274395][T12028] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1209.298092][T12028] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1209.362780][T32429] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1209.371438][T12040] fido_id[12040]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1209.475089][T12048] loop2: detected capacity change from 0 to 1024 [ 1209.562944][T32429] usb 6-1: Using ep0 maxpacket: 16 [ 1209.580502][T32429] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.632894][T32429] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1209.694035][T32429] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1209.752679][T32429] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1209.795351][T32429] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.808746][T12052] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1209.825305][T32429] usb 6-1: config 0 descriptor?? [ 1209.840637][T12052] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 1209.944229][T12070] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1210.261871][T12083] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1210.280815][T32429] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 1210.319249][T12083] hpfs: filesystem error: improperly stopped [ 1210.340050][T12083] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1210.355071][T32429] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0003/input/input63 [ 1210.373804][T12083] hpfs: You really don't want any checks? You are crazy... [ 1210.384857][T12083] hpfs: hpfs_map_sector(): read error [ 1210.390685][T12083] hpfs: code page support is disabled [ 1210.435276][T12083] hpfs: hpfs_map_4sectors(): unaligned read [ 1210.443146][T12083] hpfs: hpfs_map_4sectors(): unaligned read [ 1210.449289][T12083] hpfs: filesystem error: unable to find root dir [ 1210.464914][T32429] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1210.535590][T32429] usb 6-1: USB disconnect, device number 21 [ 1210.775474][T12117] set_capacity_and_notify: 2 callbacks suppressed [ 1210.775492][T12117] loop2: detected capacity change from 0 to 256 [ 1210.924497][T12117] FAT-fs (loop2): Directory bread(block 64) failed [ 1210.931492][T12117] FAT-fs (loop2): Directory bread(block 65) failed [ 1210.965504][T12103] fido_id[12103]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1211.010979][T12117] FAT-fs (loop2): Directory bread(block 66) failed [ 1211.045777][T12117] FAT-fs (loop2): Directory bread(block 67) failed [ 1211.058287][T12117] FAT-fs (loop2): Directory bread(block 68) failed [ 1211.065464][T12117] FAT-fs (loop2): Directory bread(block 69) failed [ 1211.065759][T12122] loop1: detected capacity change from 0 to 4096 [ 1211.073124][T12117] FAT-fs (loop2): Directory bread(block 70) failed [ 1211.111760][T12122] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1211.142766][T12117] FAT-fs (loop2): Directory bread(block 71) failed [ 1211.159781][T12117] FAT-fs (loop2): Directory bread(block 72) failed [ 1211.210398][T12117] FAT-fs (loop2): Directory bread(block 73) failed [ 1211.474136][T26692] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 1211.504978][T26692] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 1211.511760][T26692] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1212.222399][T12169] loop2: detected capacity change from 0 to 128 [ 1212.249576][T12169] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 1212.310563][T12169] hpfs: filesystem error: improperly stopped [ 1212.327209][T12169] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1212.377842][T12169] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 1212.449584][T12169] hpfs: You really don't want any checks? You are crazy... [ 1212.487033][T12169] hpfs: hpfs_map_sector(): read error [ 1212.511787][T12169] hpfs: code page support is disabled [ 1212.522356][T12169] hpfs: hpfs_map_4sectors(): unaligned read [ 1212.556408][T12169] hpfs: hpfs_map_4sectors(): unaligned read [ 1212.581282][T12169] hpfs: filesystem error: unable to find root dir [ 1212.812423][T12195] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15554'. [ 1213.154409][T12164] loop1: detected capacity change from 0 to 32768 [ 1213.283128][T15891] JFS: metapage_get_blocks failed [ 1213.293045][ T107] blkno = 50030, nblocks = 1 [ 1213.297702][ T107] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 1213.297702][ T107] [ 1213.310310][T12164] JFS: metapage_get_blocks failed [ 1213.320842][T15891] JFS: metapage_get_blocks failed [ 1213.348976][ T107] ERROR: (device loop1): remounting filesystem as read-only [ 1213.366758][ T107] blkno = 5002c, nblocks = 4 [ 1213.381998][ T107] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 1213.381998][ T107] [ 1213.462816][T32429] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 1213.672117][T32429] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1213.686390][T32429] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1213.712961][T26692] JFS: metapage_get_blocks failed [ 1213.721462][T32429] usb 3-1: config 0 has no interface number 0 [ 1213.722833][T26692] JFS: metapage_get_blocks failed [ 1213.747376][T32429] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1213.783797][T32429] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1213.806575][T32429] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1213.826105][T32429] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.854209][T32429] usb 3-1: config 0 descriptor?? [ 1214.490306][T32429] usb 3-1: USB disconnect, device number 56 [ 1214.533310][ T4290] Bluetooth: hci4: command 0x0405 tx timeout [ 1214.731876][T12283] loop0: detected capacity change from 0 to 512 [ 1214.858271][T12283] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2750: inode #11: comm syz.0.15577: corrupted xattr block 95 [ 1214.879736][T12290] loop3: detected capacity change from 0 to 4096 [ 1214.992665][T12283] EXT4-fs (loop0): Remounting filesystem read-only [ 1215.019968][T12283] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.15577: bg 0: block 7: invalid block bitmap [ 1215.133074][T12283] EXT4-fs (loop0): Remounting filesystem read-only [ 1215.136624][T12255] loop1: detected capacity change from 0 to 32768 [ 1215.146703][T12283] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1215.199595][T12283] EXT4-fs (loop0): Remounting filesystem read-only [ 1215.236765][T12283] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2916: inode #11: comm syz.0.15577: corrupted xattr block 95 [ 1215.294831][T12283] EXT4-fs (loop0): Remounting filesystem read-only [ 1215.301506][T12283] EXT4-fs warning (device loop0): ext4_evict_inode:301: xattr delete (err -117) [ 1215.364338][T12283] EXT4-fs (loop0): 1 orphan inode deleted [ 1215.370338][T12283] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1215.528897][T12311] loop3: detected capacity change from 0 to 512 [ 1215.584367][T12311] /dev/loop3: Can't open blockdev [ 1215.651459][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 1215.792985][T32429] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1215.992690][T32429] usb 3-1: Using ep0 maxpacket: 16 [ 1216.001145][T32429] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.053864][T32429] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1216.069279][T32429] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1216.098309][T32429] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1216.109325][T32429] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.137813][T32429] usb 3-1: config 0 descriptor?? [ 1216.155754][T12350] vivid-002: disconnect [ 1216.161217][T12349] vivid-002: reconnect [ 1216.358718][T12347] loop5: detected capacity change from 0 to 4096 [ 1216.433477][T12347] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1216.523248][T12361] loop0: detected capacity change from 0 to 512 [ 1216.541230][T12361] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1216.565416][T32429] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 1216.603969][T12361] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8817e02c, mo2=0002] [ 1216.625221][T32429] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0004/input/input65 [ 1216.642271][T12361] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.15597: invalid indirect mapped block 2683928664 (level 1) [ 1216.664887][T12361] EXT4-fs (loop0): Remounting filesystem read-only [ 1216.678462][T12361] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.15597: bg 0: block 361: padding at end of block bitmap is not set [ 1216.710133][T12361] EXT4-fs (loop0): Remounting filesystem read-only [ 1216.711732][T32429] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1216.749232][T12361] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1216.811115][T12361] EXT4-fs (loop0): Remounting filesystem read-only [ 1216.843507][T12361] EXT4-fs (loop0): 1 truncate cleaned up [ 1216.849250][T12361] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1216.969392][T12361] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #2: block 5: comm syz.0.15597: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1216.980826][T32431] usb 3-1: USB disconnect, device number 57 [ 1217.011811][T12347] ntfs3: Cannot use different iocharset when remounting! [ 1217.053590][T12361] EXT4-fs (loop0): Remounting filesystem read-only [ 1217.060276][T12361] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #2: comm syz.0.15597: directory missing '.' [ 1217.121565][T12373] fido_id[12373]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1217.282064][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 1217.342346][T12397] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15599'. [ 1217.507610][T12405] loop0: detected capacity change from 0 to 512 [ 1217.690035][T12405] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1217.739019][T12405] ext4 filesystem being mounted at /3147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1217.881545][T12405] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1217.981476][T12423] loop2: detected capacity change from 0 to 4096 [ 1218.100418][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 1218.355217][T12436] loop3: detected capacity change from 0 to 4096 [ 1218.395758][T12436] /dev/loop3: Can't open blockdev [ 1218.760530][T12451] loop0: detected capacity change from 0 to 4096 [ 1218.813808][T12451] __ntfs_warning: 7 callbacks suppressed [ 1218.813827][T12451] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1219.034992][T12466] team0: Device vlan2 is already an upper device of the team interface [ 1219.054669][T12451] ntfs: volume version 3.1. [ 1219.056725][T12429] loop1: detected capacity change from 0 to 32768 [ 1219.159226][T12429] JBD2: Ignoring recovery information on journal [ 1219.301109][T12429] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1219.321068][T15889] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 1219.371325][T12429] (syz.1.15609,12429,0):ocfs2_reflink_ioctl:4433 ERROR: status = -14 [ 1219.591270][T26692] ocfs2: Unmounting device (7,1) on (node local) [ 1219.759850][T12483] loop3: detected capacity change from 0 to 8192 [ 1220.402831][ T5299] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1220.623062][ T5299] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.654782][ T5299] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1220.692927][ T5299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.724640][ T5299] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1220.759593][T12534] mkiss: ax0: crc mode is auto. [ 1221.053006][T32431] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 1221.081475][T12566] loop5: detected capacity change from 0 to 512 [ 1221.121124][T12566] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1221.133286][T12566] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 1221.143809][T12566] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.15641: Corrupt directory, running e2fsck is recommended [ 1221.162081][T12566] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 1221.181008][T12566] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.15641: corrupted in-inode xattr [ 1221.204237][T12566] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.15641: couldn't read orphan inode 15 (err -117) [ 1221.237506][T12566] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1221.259393][T32431] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1221.295110][T19195] EXT4-fs (loop5): unmounting filesystem. [ 1221.313880][T32431] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1221.327346][T32428] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1221.351225][T32431] usb 1-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 1221.361749][T32431] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.380408][T32431] usb 1-1: config 0 descriptor?? [ 1221.460215][T12585] loop1: detected capacity change from 0 to 1024 [ 1221.514757][T32428] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1221.541491][T32428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.558544][T32428] usb 3-1: config 0 descriptor?? [ 1221.571540][T32428] cp210x 3-1:0.0: cp210x converter detected [ 1221.640258][T15891] hfsplus: b-tree write err: -5, ino 25 [ 1221.646870][T15891] hfsplus: b-tree write err: -5, ino 4 [ 1221.653289][T15891] hfsplus: b-tree write err: -5, ino 2 [ 1221.665594][T15891] hfsplus: b-tree write err: -5, ino 17 [ 1221.813969][ T5299] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1221.821414][T32431] wacom 0003:056A:00F4.0005: ignoring exceeding usage max [ 1221.836030][ T5299] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 1221.847856][T32431] wacom 0003:056A:00F4.0005: unknown main item tag 0x0 [ 1221.856007][ T5299] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 1221.862894][T32431] wacom 0003:056A:00F4.0005: unknown main item tag 0x0 [ 1221.884236][T32431] wacom 0003:056A:00F4.0005: unknown main item tag 0x0 [ 1221.899366][T32431] wacom 0003:056A:00F4.0005: unknown main item tag 0x0 [ 1221.907295][T32431] wacom 0003:056A:00F4.0005: unknown main item tag 0x0 [ 1221.923844][T32431] wacom 0003:056A:00F4.0005: unknown main item tag 0x0 [ 1221.945515][T32431] wacom 0003:056A:00F4.0005: unknown main item tag 0x0 [ 1221.953633][T32431] wacom 0003:056A:00F4.0005: unknown main item tag 0x0 [ 1221.970383][T32431] wacom 0003:056A:00F4.0005: hidraw0: USB HID v0.08 Device [HID 056a:00f4] on usb-dummy_hcd.0-1/input0 [ 1221.980988][T12607] loop5: detected capacity change from 0 to 1024 [ 1221.985939][T32428] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1222.000861][T12607] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1222.019288][T32431] usb 1-1: USB disconnect, device number 61 [ 1222.078341][T32428] usb 4-1: USB disconnect, device number 60 [ 1222.204250][T32430] usb 3-1: USB disconnect, device number 58 [ 1222.220871][T32430] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1222.356990][T32430] cp210x 3-1:0.0: device disconnected [ 1222.435689][T12658] bridge0: Device is already in use. [ 1222.460094][T12640] fido_id[12640]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1222.804080][T12672] loop1: detected capacity change from 0 to 256 [ 1223.082668][T32430] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1223.247351][ T26] audit: type=1326 audit(1778202565.918:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.2.15662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f32de79cdd9 code=0x0 [ 1223.281850][T32430] usb 6-1: Using ep0 maxpacket: 8 [ 1223.289512][T32430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1223.314003][T32430] usb 6-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 1223.330882][T32430] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.345383][T32430] usb 6-1: config 0 descriptor?? [ 1223.512810][T32428] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1223.720987][T32428] usb 2-1: Using ep0 maxpacket: 8 [ 1223.729632][T32428] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1223.759736][T32428] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1223.788573][T32430] wacom 0003:056A:00B0.0006: unknown main item tag 0x3 [ 1223.805976][T32428] usb 2-1: string descriptor 0 read error: -22 [ 1223.812885][T32430] wacom 0003:056A:00B0.0006: unknown main item tag 0x0 [ 1223.820251][T32430] wacom 0003:056A:00B0.0006: unknown main item tag 0x0 [ 1223.832723][T32428] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1223.841998][T32428] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1223.857892][T32430] wacom 0003:056A:00B0.0006: unknown main item tag 0x0 [ 1223.865807][T32430] wacom 0003:056A:00B0.0006: unknown main item tag 0x0 [ 1223.875338][T32430] wacom 0003:056A:00B0.0006: unknown main item tag 0x0 [ 1223.885918][T32428] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1223.895456][T32430] wacom 0003:056A:00B0.0006: unknown main item tag 0x0 [ 1223.911094][T32430] wacom 0003:056A:00B0.0006: unknown main item tag 0x0 [ 1223.919969][T32428] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1223.933671][T32430] wacom 0003:056A:00B0.0006: Unknown device_type for 'HID 056a:00b0'. Assuming pen. [ 1223.944507][T32428] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1223.954859][T32430] wacom 0003:056A:00B0.0006: hidraw0: USB HID v0.00 Device [HID 056a:00b0] on usb-dummy_hcd.5-1/input0 [ 1223.966243][T32428] usb 2-1: media controller created [ 1223.992125][T32430] input: Wacom Intuos3 4x5 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00B0.0006/input/input69 [ 1224.009960][T32428] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1224.098030][T32430] usb 6-1: USB disconnect, device number 22 [ 1224.159149][T32428] zl10353_read_register: readreg error (reg=127, ret==0) [ 1224.323025][T32428] usb 2-1: USB disconnect, device number 52 [ 1224.392434][T12752] fido_id[12752]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1224.523832][T12720] loop0: detected capacity change from 0 to 40427 [ 1224.572047][T12720] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 1224.602638][T12720] F2FS-fs (loop0): inline encryption not supported [ 1224.662681][T12720] F2FS-fs (loop0): invalid crc value [ 1224.697214][T12720] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1224.863111][T12720] F2FS-fs (loop0): Start checkpoint disabled! [ 1224.894269][T12720] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1224.903925][T12794] loop1: detected capacity change from 0 to 16 [ 1224.933194][T12794] erofs: (device loop1): mounted with root inode @ nid 36. [ 1224.998943][T12794] erofs: (device loop1): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 1225.040745][T12801] fuse: Bad value for 'fd' [ 1225.147493][T12804] loop3: detected capacity change from 0 to 128 [ 1225.532586][T32430] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1225.733105][T32430] usb 2-1: Using ep0 maxpacket: 32 [ 1225.740525][T32430] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1225.774442][T32430] usb 2-1: config 0 has no interface number 0 [ 1225.805877][T32430] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1225.862081][T32430] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.901133][T32430] usb 2-1: Product: syz [ 1225.912702][T32430] usb 2-1: Manufacturer: syz [ 1225.917521][T32430] usb 2-1: SerialNumber: syz [ 1225.972683][T32430] usb 2-1: config 0 descriptor?? [ 1225.982699][ T5299] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1225.996172][T32430] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1226.177817][ T5299] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.201840][ T5299] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1226.206230][T32430] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1226.250612][ T5299] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1226.264862][T32430] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1226.294206][ T5299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.330630][ T5299] usb 3-1: config 0 descriptor?? [ 1226.354116][ T5299] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1226.380976][ T5299] dvb-usb: bulk message failed: -22 (3/0) [ 1226.433414][ T5299] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1226.487973][ T5299] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1226.515902][ T5299] usb 3-1: media controller created [ 1226.522430][ T5299] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1226.627790][ T5299] dvb-usb: bulk message failed: -22 (6/0) [ 1226.668367][ T5299] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1226.676960][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1226.684994][T32430] usb 2-1: USB disconnect, device number 53 [ 1226.705964][T32430] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1226.706496][ T5299] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input72 [ 1226.768918][T32430] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1226.805033][T32430] quatech2 2-1:0.51: device disconnected [ 1226.805811][ T5299] dvb-usb: schedule remote query interval to 150 msecs. [ 1226.838945][ T5299] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1226.868725][ T5299] usb 3-1: USB disconnect, device number 59 [ 1227.021019][ T5299] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1227.067107][T12908] team0: Device vlan2 is already an upper device of the team interface [ 1227.984258][T12962] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4272] was attempted by ""[12962] [ 1228.239968][T12974] loop5: detected capacity change from 0 to 512 [ 1228.288227][T12974] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1228.445728][T12984] sg_write: process 6417 (syz.3.15720) changed security contexts after opening file descriptor, this is not allowed. [ 1228.468113][T12986] loop0: detected capacity change from 0 to 256 [ 1228.489247][T12974] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1228.635048][T12986] FAT-fs (loop0): Directory bread(block 64) failed [ 1228.641766][T12986] FAT-fs (loop0): Directory bread(block 65) failed [ 1228.683578][T12986] FAT-fs (loop0): Directory bread(block 66) failed [ 1228.694844][T12986] FAT-fs (loop0): Directory bread(block 67) failed [ 1228.701646][T12986] FAT-fs (loop0): Directory bread(block 68) failed [ 1228.767243][T12986] FAT-fs (loop0): Directory bread(block 69) failed [ 1228.800203][T12986] FAT-fs (loop0): Directory bread(block 70) failed [ 1228.820387][T12986] FAT-fs (loop0): Directory bread(block 71) failed [ 1228.844449][T12986] FAT-fs (loop0): Directory bread(block 72) failed [ 1228.871059][T12946] loop2: detected capacity change from 0 to 40427 [ 1228.881013][T12986] FAT-fs (loop0): Directory bread(block 73) failed [ 1228.951040][T12946] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 1228.967415][T12946] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1229.023803][T12946] F2FS-fs (loop2): invalid crc value [ 1229.103848][T12946] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1229.229993][T13010] loop3: detected capacity change from 0 to 4096 [ 1229.259954][T13023] loop0: detected capacity change from 0 to 64 [ 1229.410284][T13023] Trying to free block not in datazone [ 1229.421957][T12946] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 1229.448329][T12946] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1229.524634][T13023] Trying to free block not in datazone [ 1229.573267][T13023] minix_free_inode: bit 3 already cleared [ 1229.622582][T32430] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1229.832699][T32430] usb 6-1: Using ep0 maxpacket: 32 [ 1229.840170][T32430] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.888957][T32430] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1229.940209][T32430] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1229.980225][T32430] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1230.028705][T32430] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1230.050427][T32430] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1230.072530][T32430] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.085973][T32430] usb 6-1: config 0 descriptor?? [ 1230.254028][T13057] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15737'. [ 1230.527853][T13071] device ipvlan2 entered promiscuous mode [ 1230.529040][T32430] corsair-cpro 0003:1B1C:0C10.0007: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 1230.583346][T13071] bridge0: port 1(ipvlan2) entered blocking state [ 1230.611525][T13071] bridge0: port 1(ipvlan2) entered disabled state [ 1230.645103][T32430] corsair-cpro: probe of 0003:1B1C:0C10.0007 failed with error -38 [ 1230.711938][T13081] loop2: detected capacity change from 0 to 2048 [ 1230.766607][T32430] usb 6-1: USB disconnect, device number 23 [ 1230.821722][T13081] loop2: p2 p3 p7 [ 1230.958408][T13087] fido_id[13087]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1231.245206][T13123] loop0: detected capacity change from 0 to 256 [ 1231.313089][T13130] loop3: detected capacity change from 0 to 512 [ 1231.344827][T13123] FAT-fs (loop0): Directory bread(block 64) failed [ 1231.385369][T13123] FAT-fs (loop0): Directory bread(block 65) failed [ 1231.424928][T13123] FAT-fs (loop0): Directory bread(block 66) failed [ 1231.470025][T13123] FAT-fs (loop0): Directory bread(block 67) failed [ 1231.502725][T13123] FAT-fs (loop0): Directory bread(block 68) failed [ 1231.547148][T13144] loop2: detected capacity change from 0 to 164 [ 1231.567349][T13123] FAT-fs (loop0): Directory bread(block 69) failed [ 1231.591875][T13123] FAT-fs (loop0): Directory bread(block 70) failed [ 1231.614005][T13144] rock: directory entry would overflow storage [ 1231.620346][T13144] rock: sig=0x66, size=4, remaining=3 [ 1231.650887][T13123] FAT-fs (loop0): Directory bread(block 71) failed [ 1231.668632][T13123] FAT-fs (loop0): Directory bread(block 72) failed [ 1231.712679][T13123] FAT-fs (loop0): Directory bread(block 73) failed [ 1232.174810][T13178] netlink: 56 bytes leftover after parsing attributes in process `syz.3.15760'. [ 1232.345135][T13184] loop2: detected capacity change from 0 to 1024 [ 1232.359073][T13173] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1232.382742][T13173] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1232.392401][T13173] REISERFS (device loop1): using ordered data mode [ 1232.458381][T13173] reiserfs: using flush barriers [ 1232.488480][T13173] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1232.552916][T13173] REISERFS (device loop1): checking transaction log (loop1) [ 1232.566767][T13184] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1232.622859][T13173] REISERFS (device loop1): Using r5 hash to sort names [ 1232.630220][T13173] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1232.656998][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 1232.883558][T13214] usb usb9: usbfs: process 13214 (syz.2.15765) did not claim interface 0 before use [ 1233.144855][T13223] device ipvlan2 entered promiscuous mode [ 1233.204674][T13223] bridge0: port 1(ipvlan2) entered blocking state [ 1233.234210][T13223] bridge0: port 1(ipvlan2) entered disabled state [ 1233.407238][T13231] set_capacity_and_notify: 1 callbacks suppressed [ 1233.407256][T13231] loop2: detected capacity change from 0 to 4096 [ 1233.437450][T13238] loop5: detected capacity change from 0 to 1024 [ 1233.477709][T13238] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1233.529180][T13231] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1233.585334][T13238] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1233.613628][T13231] ntfs3: loop2: Failed to load $Extend. [ 1233.663762][T13238] EXT4-fs (loop5): Online resizing not supported with bigalloc [ 1233.807422][T13257] loop0: detected capacity change from 0 to 16 [ 1233.824979][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15777'. [ 1233.875127][T13257] erofs: (device loop0): mounted with root inode @ nid 36. [ 1233.886740][T19195] EXT4-fs (loop5): unmounting filesystem. [ 1233.974664][T13257] syz.0.15778: attempt to access beyond end of device [ 1233.974664][T13257] loop0: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 1234.070007][T13257] syz.0.15778: attempt to access beyond end of device [ 1234.070007][T13257] loop0: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 1234.324341][T13280] loop1: detected capacity change from 0 to 24 [ 1234.649268][T13298] loop0: detected capacity change from 0 to 256 [ 1234.703312][T13300] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15791'. [ 1234.704104][T13298] exfat: Deprecated parameter 'utf8' [ 1234.783054][T13298] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1234.985604][T13317] IPVS: Error connecting to the multicast addr [ 1235.239881][T13332] loop0: detected capacity change from 0 to 64 [ 1235.470143][T13344] loop3: detected capacity change from 0 to 64 [ 1235.809571][T13363] loop3: detected capacity change from 0 to 256 [ 1235.861355][T13367] tipc: Invalid UDP bearer configuration [ 1235.861400][T13367] tipc: Enabling of bearer rejected, failed to enable media [ 1235.914889][T16418] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1235.972931][ T4322] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1236.174812][ T4322] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 1236.202703][ T4322] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.237409][ T4322] usb 1-1: config 0 has no interface number 0 [ 1236.262650][ T4322] usb 1-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1236.307544][ T4322] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1236.327534][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.347686][T13390] netlink: 104 bytes leftover after parsing attributes in process `syz.3.15815'. [ 1236.357492][ T4322] usb 1-1: Product: syz [ 1236.361708][ T4322] usb 1-1: Manufacturer: syz [ 1236.390496][ T4322] usb 1-1: SerialNumber: syz [ 1236.421861][ T4322] usb 1-1: config 0 descriptor?? [ 1236.849382][T32428] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 1236.901909][T32428] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 1236.952617][T32428] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x3 [ 1237.037147][T32428] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 1237.293494][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15828'. [ 1237.303823][T13432] fido_id[13432]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1237.332766][T13445] netlink: 192 bytes leftover after parsing attributes in process `syz.2.15828'. [ 1237.521900][T13456] netlink: 'syz.1.15832': attribute type 1 has an invalid length. [ 1237.758342][T13469] loop3: detected capacity change from 0 to 256 [ 1237.784123][T13469] exfat: Deprecated parameter 'namecase' [ 1237.790011][T13469] exfat: Deprecated parameter 'utf8' [ 1237.810142][T13469] /dev/loop3: Can't open blockdev [ 1238.472151][T13503] loop1: detected capacity change from 0 to 256 [ 1238.539671][T13503] exFAT-fs (loop1): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 1238.606789][T13503] exFAT-fs (loop1): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5) [ 1238.631662][T13503] exFAT-fs (loop1): Filesystem has been set read-only [ 1238.768989][ T4322] usb 1-1: USB disconnect, device number 62 [ 1238.915656][T13522] loop3: detected capacity change from 0 to 1024 [ 1238.915810][T13530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15852'. [ 1238.938353][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.944881][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.013203][T16418] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1239.430154][T13542] loop2: detected capacity change from 0 to 8192 [ 1239.492213][T13542] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1239.544303][T13542] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1239.555001][T13542] REISERFS (device loop2): using ordered data mode [ 1239.561657][T13542] reiserfs: using flush barriers [ 1239.568239][T13542] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1239.597085][T13542] REISERFS (device loop2): checking transaction log (loop2) [ 1239.617110][T13542] REISERFS (device loop2): Using tea hash to sort names [ 1239.633061][T13542] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1239.782854][T32428] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1239.972923][T32428] usb 1-1: Using ep0 maxpacket: 32 [ 1239.986334][T32428] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 1240.022568][T32428] usb 1-1: config 0 has no interface number 0 [ 1240.039754][T32428] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1240.080981][T32428] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1240.101672][T32428] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1240.153314][T32428] usb 1-1: config 0 interface 196 has no altsetting 0 [ 1240.209950][T32428] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1240.240105][T13596] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15866'. [ 1240.263232][T32428] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.299032][T32428] usb 1-1: Product: syz [ 1240.304337][T32428] usb 1-1: Manufacturer: syz [ 1240.308973][T32428] usb 1-1: SerialNumber: syz [ 1240.433980][T32428] usb 1-1: config 0 descriptor?? [ 1240.443242][T13565] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1240.545367][T13600] loop5: detected capacity change from 0 to 4096 [ 1240.579764][T13600] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1240.685478][T13600] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1240.796169][T13620] loop3: detected capacity change from 0 to 128 [ 1240.810723][T13620] /dev/loop3: Can't open blockdev [ 1240.832692][ T5299] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 1240.908092][T32428] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 1241.038687][ T5299] usb 2-1: config 0 interface 0 altsetting 41 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1241.059146][ T5299] usb 2-1: config 0 interface 0 altsetting 41 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1241.091331][ T5299] usb 2-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1241.156474][T13635] loop3: detected capacity change from 0 to 256 [ 1241.176521][ T5299] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1241.193460][ T5299] usb 2-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 1241.226778][ T5299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.236394][T16418] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1241.271578][ T4321] usb 1-1: USB disconnect, device number 63 [ 1241.305665][ T5299] usb 2-1: config 0 descriptor?? [ 1241.411187][ T4321] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 1241.745826][ T5299] wacom 0003:056A:00B4.0009: Unknown device_type for 'HID 056a:00b4'. Assuming pen. [ 1241.774013][ T5299] wacom 0003:056A:00B4.0009: hidraw0: USB HID v0.09 Device [HID 056a:00b4] on usb-dummy_hcd.1-1/input0 [ 1241.804380][ T5299] input: Wacom Intuos3 12x19 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B4.0009/input/input74 [ 1241.920593][T13667] loop3: detected capacity change from 0 to 4096 [ 1241.956687][ T5299] usb 2-1: USB disconnect, device number 54 [ 1242.355823][T13689] fido_id[13689]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1242.679308][T13642] loop2: detected capacity change from 0 to 40427 [ 1242.684230][T13724] netlink: 'syz.3.15888': attribute type 1 has an invalid length. [ 1242.746376][T13642] F2FS-fs (loop2): invalid crc value [ 1242.761442][T13724] netlink: 120 bytes leftover after parsing attributes in process `syz.3.15888'. [ 1242.848221][T13642] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1243.052725][T13642] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1243.342272][ T4273] syz-executor: attempt to access beyond end of device [ 1243.342272][ T4273] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1243.683945][T13762] netlink: 'syz.3.15898': attribute type 4 has an invalid length. [ 1243.704609][T13765] loop0: detected capacity change from 0 to 256 [ 1243.843408][T13765] FAT-fs (loop0): Directory bread(block 64) failed [ 1243.862262][T13765] FAT-fs (loop0): Directory bread(block 65) failed [ 1243.892892][T13765] FAT-fs (loop0): Directory bread(block 66) failed [ 1243.899689][T13765] FAT-fs (loop0): Directory bread(block 67) failed [ 1243.947483][T13765] FAT-fs (loop0): Directory bread(block 68) failed [ 1243.974439][T13765] FAT-fs (loop0): Directory bread(block 69) failed [ 1244.003073][T13773] loop1: detected capacity change from 0 to 512 [ 1244.017313][T13765] FAT-fs (loop0): Directory bread(block 70) failed [ 1244.044621][T13765] FAT-fs (loop0): Directory bread(block 71) failed [ 1244.051746][T13765] FAT-fs (loop0): Directory bread(block 72) failed [ 1244.119596][T13765] FAT-fs (loop0): Directory bread(block 73) failed [ 1244.164044][T13718] loop5: detected capacity change from 0 to 40427 [ 1244.192003][T13773] Quota error (device loop1): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 1244.271259][T13718] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 1244.281087][T13718] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1244.290811][T13773] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1244.301885][T13773] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.15900: Failed to acquire dquot type 1 [ 1244.314085][T13718] F2FS-fs (loop5): invalid crc value [ 1244.329963][T13773] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.15900: corrupted inode contents [ 1244.353394][T13718] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1244.407632][T13773] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #16: comm syz.1.15900: mark_inode_dirty error [ 1244.435844][T13773] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.15900: corrupted inode contents [ 1244.531243][T13773] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.15900: mark_inode_dirty error [ 1244.632900][T13773] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.15900: corrupted inode contents [ 1244.687460][T13773] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 1244.701856][T13807] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 1244.737620][T13773] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.15900: corrupted inode contents [ 1244.740181][T13718] F2FS-fs (loop5): Start checkpoint disabled! [ 1244.802876][T13773] EXT4-fs error (device loop1): ext4_truncate:4325: inode #16: comm syz.1.15900: mark_inode_dirty error [ 1244.815504][T13718] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1244.841245][T13773] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 1244.844111][T13718] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1244.919595][T13773] EXT4-fs (loop1): 1 truncate cleaned up [ 1244.946105][T13773] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1245.005689][T13773] ext4 filesystem being mounted at /1155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1245.135633][T13823] loop3: detected capacity change from 0 to 128 [ 1245.350630][T26692] EXT4-fs (loop1): unmounting filesystem. [ 1245.502637][ T5299] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1245.566665][T13840] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.15909'. [ 1245.692705][ T5299] usb 4-1: Using ep0 maxpacket: 8 [ 1245.699667][ T5299] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.750951][ T5299] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1245.785509][ T5299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.833203][ T5299] usb 4-1: config 0 descriptor?? [ 1245.877045][ T5299] usb 4-1: bad CDC descriptors [ 1245.904897][ T5299] usb 4-1: bad CDC descriptors [ 1245.929873][ T5299] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 1245.953992][ T5299] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 1245.969021][ T5299] cdc_acm: probe of 4-1:0.0 failed with error -22 [ 1246.064659][ T4321] usb 4-1: USB disconnect, device number 61 [ 1246.212722][ T129] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1246.412531][ T129] usb 3-1: Using ep0 maxpacket: 32 [ 1246.425077][ T129] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.446658][ T129] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1246.464695][ T129] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1246.475215][ T129] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1246.490115][ T129] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1246.497385][ T129] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1246.514455][ T129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.528783][ T129] usb 3-1: config 0 descriptor?? [ 1246.973544][ T129] corsair-cpro 0003:1B1C:0C10.000A: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 1247.049799][T13884] loop5: detected capacity change from 0 to 32768 [ 1247.083165][ T129] corsair-cpro: probe of 0003:1B1C:0C10.000A failed with error -38 [ 1247.121587][T13884] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 1247.199323][T32428] usb 3-1: USB disconnect, device number 60 [ 1247.470088][T13918] fido_id[13918]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1247.642967][ T129] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1247.832776][ T129] usb 1-1: Using ep0 maxpacket: 32 [ 1247.840642][ T129] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1247.879503][ T129] usb 1-1: config 0 has no interface number 0 [ 1247.912387][ T129] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1247.948517][ T129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.988459][ T129] usb 1-1: Product: syz [ 1248.008595][ T129] usb 1-1: Manufacturer: syz [ 1248.031354][ T129] usb 1-1: SerialNumber: syz [ 1248.052131][ T129] usb 1-1: config 0 descriptor?? [ 1248.073127][ T129] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1248.232995][T13966] usb usb8: usbfs: process 13966 (syz.3.15934) did not claim interface 5 before use [ 1248.277915][ T129] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1248.309498][ T129] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1248.319604][ T4321] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1248.320584][T13968] loop1: detected capacity change from 0 to 4096 [ 1248.458437][T13983] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1248.482134][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 1248.504661][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1248.536538][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1248.562095][ T4321] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1248.589630][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.633315][ T4321] usb 3-1: config 0 descriptor?? [ 1248.683453][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1248.692221][ T129] usb 1-1: USB disconnect, device number 64 [ 1248.721715][ T129] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1248.803912][ T129] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1248.878191][ T129] quatech2 1-1:0.51: device disconnected [ 1249.022646][T32430] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1249.075433][ T4321] cm6533_jd 0003:0D8C:0022.000B: unbalanced delimiter at end of report description [ 1249.084942][T14006] loop1: detected capacity change from 0 to 8192 [ 1249.102778][ T4321] cm6533_jd 0003:0D8C:0022.000B: parse failed [ 1249.103191][T14006] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1249.109389][ T4321] cm6533_jd: probe of 0003:0D8C:0022.000B failed with error -22 [ 1249.132870][T14006] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1249.143947][T14006] REISERFS (device loop1): using ordered data mode [ 1249.150630][T14006] reiserfs: using flush barriers [ 1249.181803][T14006] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 1249.213334][T14006] REISERFS (device loop1): checking transaction log (loop1) [ 1249.242715][T32430] usb 4-1: Using ep0 maxpacket: 16 [ 1249.251200][T14027] loop5: detected capacity change from 0 to 2048 [ 1249.253675][T32430] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1249.299538][T14006] REISERFS (device loop1): Using r5 hash to sort names [ 1249.330023][T14006] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1249.331015][T14033] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1249.386596][T32430] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1249.400202][T14006] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1249.438055][T32430] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1249.481396][T32430] usb 4-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1249.502769][T32430] usb 4-1: Manufacturer: syz [ 1249.542949][T32431] usb 3-1: USB disconnect, device number 61 [ 1249.552956][T32430] usb 4-1: config 0 descriptor?? [ 1249.603562][T14033] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1249.626547][T14033] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1249.688629][T14033] Remounting filesystem read-only [ 1249.701961][T19195] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 1249.966879][T32430] hid (null): unknown global tag 0xd [ 1249.983728][T32430] creative-sb0540 0003:041E:3100.000C: unknown global tag 0xd [ 1250.006304][T32430] creative-sb0540 0003:041E:3100.000C: item 0 1 1 13 parsing failed [ 1250.043347][T32430] creative-sb0540 0003:041E:3100.000C: parse failed [ 1250.062345][T32430] creative-sb0540: probe of 0003:041E:3100.000C failed with error -22 [ 1250.192396][ T129] usb 4-1: USB disconnect, device number 62 [ 1250.642598][ T4321] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 1250.844413][ T4321] usb 1-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 1250.887029][ T4321] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1250.917891][T14099] netlink: 'syz.1.15956': attribute type 1 has an invalid length. [ 1250.932736][ T4321] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1250.960348][T14099] nbd: error processing sock list [ 1250.979419][ T4321] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1251.034072][ T4321] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1251.040865][ T4321] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1251.080898][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.162977][ T4321] usb 1-1: config 0 descriptor?? [ 1251.589378][ T4321] ryos 0003:1E7D:3138.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.0-1/input0 [ 1251.860394][T14143] loop3: detected capacity change from 0 to 2048 [ 1251.868575][ T4321] usb 1-1: USB disconnect, device number 65 [ 1251.926257][T14155] loop2: detected capacity change from 0 to 256 [ 1251.944624][T14155] exfat: Deprecated parameter 'utf8' [ 1251.970592][T14155] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d) [ 1251.990027][ T4354] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1252.071244][T14138] fido_id[14138]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1252.618102][T14120] loop1: detected capacity change from 0 to 32768 [ 1253.270275][T14210] loop0: detected capacity change from 0 to 1024 [ 1253.402616][ T26] audit: type=1800 audit(1778202596.068:708): pid=14210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.15983" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 1253.511035][T14221] loop2: detected capacity change from 0 to 4096 [ 1253.603204][T32428] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1253.623451][T14221] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1253.726369][T14227] loop0: detected capacity change from 0 to 2048 [ 1253.755686][T14227] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=3932051, location=3932051 [ 1253.769393][T14221] ntfs3: loop2: failed to convert "0080" to maccenteuro [ 1253.803451][T14221] ntfs3: loop2: failed to convert name for inode 1e. [ 1253.823832][T14227] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1253.824104][T32428] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1253.867540][T14191] loop3: detected capacity change from 0 to 32768 [ 1253.873578][T32428] usb 6-1: not running at top speed; connect to a high speed hub [ 1253.903447][T32428] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.943632][T32428] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1253.992963][T32428] usb 6-1: config 1 has no interface number 0 [ 1254.023130][T32428] usb 6-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 1254.103607][T32428] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.111776][T32428] usb 6-1: Product: syz [ 1254.142405][T32428] usb 6-1: Manufacturer: syz [ 1254.162660][T32428] usb 6-1: SerialNumber: syz [ 1254.736428][T14267] loop3: detected capacity change from 0 to 8 [ 1254.800437][T14267] /dev/loop3: Can't open blockdev [ 1254.821423][T32428] us122l: couldn't allocate write buffer [ 1254.863130][T32428] snd-usb-us122l: probe of 6-1:1.1 failed with error -22 [ 1254.882575][T32428] usb 6-1: USB disconnect, device number 24 [ 1254.942805][T14279] loop1: detected capacity change from 0 to 64 [ 1255.132925][T14292] loop0: detected capacity change from 0 to 2048 [ 1255.192217][T14292] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1255.224107][T14292] NILFS (loop0): mounting unchecked fs [ 1255.252317][T14292] NILFS (loop0): recovery complete [ 1255.301330][ T4452] udevd[4452]: incorrect nilfs2 checksum on /dev/loop0 [ 1255.302416][T14304] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1255.512706][T32431] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1255.613315][T14313] tipc: Started in network mode [ 1255.618629][T14313] tipc: Node identity 6e3477427fd5, cluster identity 4711 [ 1255.642993][T14313] tipc: Enabled bearer , priority 10 [ 1255.722732][T32431] usb 2-1: Using ep0 maxpacket: 16 [ 1255.739998][T32431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.776394][T32431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1255.831095][T32431] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1255.874640][T32431] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1255.894600][T32431] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.927079][T32431] usb 2-1: config 0 descriptor?? [ 1255.979330][T14294] loop2: detected capacity change from 0 to 32768 [ 1255.992419][T14328] loop3: detected capacity change from 0 to 512 [ 1256.095619][T14294] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1256.338032][T14350] loop0: detected capacity change from 0 to 64 [ 1256.364905][T32431] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1256.392607][T32431] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1256.410262][T14350] hfs: unable to locate alternate MDB [ 1256.420419][T14350] hfs: continuing without an alternate MDB [ 1256.430591][T32431] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1256.483963][T32431] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000E/input/input77 [ 1256.504459][ T4273] ocfs2: Unmounting device (7,2) on (node local) [ 1256.566667][T32431] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1256.658577][T32431] usb 2-1: USB disconnect, device number 55 [ 1256.768070][T32429] tipc: Node number set to 299988802 [ 1256.862274][T14373] loop3: detected capacity change from 0 to 2048 [ 1256.876934][T14388] loop0: detected capacity change from 0 to 64 [ 1256.895471][T14365] loop5: detected capacity change from 0 to 4096 [ 1256.969294][T14365] ntfs: (device loop5): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 1256.994192][T14384] fido_id[14384]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1257.042084][T14365] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1257.113142][ T4543] udevd[4543]: incorrect nilfs2 checksum on /dev/loop3 [ 1257.142671][T14365] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1257.246964][T14365] ntfs: volume version 3.1. [ 1257.390851][T14410] loop1: detected capacity change from 0 to 512 [ 1257.437114][T14410] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1257.533607][T14410] EXT4-fs (loop1): 1 truncate cleaned up [ 1257.539347][T14410] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1257.568375][T14416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16025'. [ 1257.676017][T15894] ntfs: (device loop5): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 1257.698855][T19195] ntfs: (device loop5): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1257.854921][T26692] EXT4-fs (loop1): unmounting filesystem. [ 1257.958643][T14422] sp0: Synchronizing with TNC [ 1258.657987][T14407] [ 1258.657987][T14407] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1258.657987][T14407] [ 1258.765893][T14407] ERROR: (device loop0): diWrite: ixpxd invalid [ 1258.765893][T14407] [ 1258.849757][T14407] ERROR: (device loop0): txCommit: [ 1258.849757][T14407] [ 1258.900002][T14451] jfs_unlink: dtDelete returned -2 [ 1259.019974][T14459] binder: BINDER_SET_CONTEXT_MGR already set [ 1259.052664][T14459] binder: 14458:14459 ioctl 40046207 0 returned -16 [ 1259.068196][ T4272] [ 1259.068196][ T4272] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1259.068196][ T4272] [ 1259.115825][ T4272] [ 1259.115825][ T4272] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1259.115825][ T4272] [ 1259.330085][T14466] /dev/loop3: Can't open blockdev [ 1259.479162][T14435] XFS (loop5): Mounting V5 Filesystem [ 1259.620934][T14443] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.16030 (14443) [ 1259.638446][T14435] XFS (loop5): Ending clean mount [ 1259.664102][ T4354] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1259.747205][T14489] set_capacity_and_notify: 7 callbacks suppressed [ 1259.747226][T14489] loop2: detected capacity change from 0 to 4096 [ 1259.772269][T14443] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1259.807788][T14489] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1259.836467][T14443] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1259.873628][T14443] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1259.922133][T14443] BTRFS info (device loop1): use zstd compression, level 3 [ 1259.939670][T14489] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1259.986141][T14443] BTRFS info (device loop1): using free space tree [ 1260.002883][T14489] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1260.024267][T14489] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1260.081737][T14489] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1260.161189][T19195] XFS (loop5): Unmounting Filesystem [ 1260.176831][T14511] loop0: detected capacity change from 0 to 512 [ 1260.184223][T14489] ntfs: volume version 3.1. [ 1260.201004][T14511] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 1260.289020][T14489] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-13. You might want to try to use the mount option nls=utf8. [ 1260.293763][T14511] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1260.308968][T14489] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 1260.351901][T14511] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:511: comm syz.0.16041: Block bitmap for bg 0 marked uninitialized [ 1260.482345][T14443] BTRFS info (device loop1): enabling ssd optimizations [ 1260.505254][T14511] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1260.607830][T14511] EXT4-fs (loop0): 1 orphan inode deleted [ 1260.652529][T14511] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1261.023337][T26692] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1261.055474][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 1261.219188][T14542] loop0: detected capacity change from 0 to 128 [ 1261.410566][T14542] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1261.430073][T14542] ext4 filesystem being mounted at /3227/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1261.705442][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 1261.922080][T14573] loop2: detected capacity change from 0 to 256 [ 1261.983730][T14573] exfat: Deprecated parameter 'utf8' [ 1262.051175][T14573] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1262.352711][T14593] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16057'. [ 1262.537660][T14596] loop3: detected capacity change from 0 to 1764 [ 1262.546686][T14600] hugetlbfs: Bad value 'ó' for mount option 'size' [ 1262.546686][T14600] [ 1262.617781][T14607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16062'. [ 1262.998441][T14561] loop5: detected capacity change from 0 to 40427 [ 1263.030273][T14561] F2FS-fs (loop5): invalid crc value [ 1263.061883][T14561] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1263.176923][T14629] tipc: Started in network mode [ 1263.219565][T14629] tipc: Node identity 7e42f711a06c, cluster identity 4711 [ 1263.228634][T14561] F2FS-fs (loop5): Start checkpoint disabled! [ 1263.249713][T14561] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1263.276148][T14629] tipc: Enabled bearer , priority 10 [ 1263.339969][T14635] loop0: detected capacity change from 0 to 512 [ 1263.387974][T14635] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1263.542430][T14635] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 1263.869539][T14656] loop3: detected capacity change from 0 to 512 [ 1263.885059][T14602] loop2: detected capacity change from 0 to 32768 [ 1263.891184][T14656] /dev/loop3: Can't open blockdev [ 1263.896446][T14651] loop1: detected capacity change from 0 to 2048 [ 1263.921644][T14651] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1263.985325][T14651] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1264.008645][T14602] MetaData crosses page boundary!! [ 1264.031770][T14651] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1264.054853][T14602] lblock = 6161616161, size = 370544640 [ 1264.072159][T14651] UDF-fs: Scanning with blocksize 512 failed [ 1264.097511][T14602] CPU: 0 PID: 14602 Comm: syz.2.16060 Not tainted syzkaller #0 [ 1264.105514][T14602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1264.115722][T14602] Call Trace: [ 1264.119049][T14602] [ 1264.122108][T14602] dump_stack_lvl+0x188/0x24e [ 1264.127026][T14602] ? __wake_up_bit+0x210/0x210 [ 1264.131924][T14602] ? show_regs_print_info+0x12/0x12 [ 1264.137224][T14602] ? load_image+0x400/0x400 [ 1264.141887][T14602] __get_metapage+0xaa8/0xfa0 [ 1264.146716][T14602] dtSearch+0x5d5/0x2050 [ 1264.151063][T14602] jfs_symlink+0x851/0xfb0 [ 1264.155565][T14602] ? jfs_unlink+0xa00/0xa00 [ 1264.160261][T14602] ? make_kgid+0x660/0x660 [ 1264.164731][T14602] ? apparmor_path_symlink+0x1ac/0x230 [ 1264.170251][T14602] ? lookup_one_qstr_excl+0x11c/0x240 [ 1264.175801][T14602] ? generic_permission+0x230/0x510 [ 1264.181051][T14602] ? inode_permission+0xef/0x480 [ 1264.186044][T14602] ? bpf_lsm_inode_symlink+0x5/0x10 [ 1264.191301][T14602] ? security_inode_symlink+0xb2/0x100 [ 1264.196835][T14602] vfs_symlink+0x247/0x3d0 [ 1264.201322][T14602] do_symlinkat+0x1b6/0x400 [ 1264.205883][T14602] ? vfs_symlink+0x3d0/0x3d0 [ 1264.210553][T14602] ? getname_flags+0x206/0x500 [ 1264.215471][T14602] __x64_sys_symlink+0x7a/0x90 [ 1264.220382][T14602] do_syscall_64+0x4c/0xa0 [ 1264.224989][T14602] ? clear_bhb_loop+0x60/0xb0 [ 1264.229727][T14602] ? clear_bhb_loop+0x60/0xb0 [ 1264.234473][T14602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1264.240460][T14602] RIP: 0033:0x7f32de79cdd9 [ 1264.245024][T14602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1264.264950][T14602] RSP: 002b:00007f32df5cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 1264.273704][T14602] RAX: ffffffffffffffda RBX: 00007f32dea15fa0 RCX: 00007f32de79cdd9 [ 1264.281990][T14602] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 000020000000a900 [ 1264.290203][T14602] RBP: 00007f32de832d69 R08: 0000000000000000 R09: 0000000000000000 [ 1264.298221][T14602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1264.306345][T14602] R13: 00007f32dea16038 R14: 00007f32dea15fa0 R15: 00007ffeb19e5c88 [ 1264.307123][T14651] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1264.314485][T14602] [ 1264.341039][T14602] bread failed! [ 1264.412857][T32431] tipc: Node number set to 3727619857 [ 1264.791718][T14690] loop3: detected capacity change from 0 to 512 [ 1264.822808][T14690] EXT4-fs: Ignoring removed oldalloc option [ 1264.828542][T14682] loop5: detected capacity change from 0 to 4096 [ 1264.828858][T14690] /dev/loop3: Can't open blockdev [ 1264.911006][T14682] NILFS (loop5): invalid segment: Checksum error in segment payload [ 1264.939061][T14682] NILFS (loop5): trying rollback from an earlier position [ 1265.018895][T14682] NILFS (loop5): recovery complete [ 1265.040632][T14698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16083'. [ 1265.083829][T14704] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1265.292613][T32428] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1265.388687][T14720] sock: sock_set_timeout: `syz.0.16087' (pid 14720) tries to set negative timeout [ 1265.504842][T32428] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1265.526114][T32428] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1265.557824][T32428] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1265.562744][T32026] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1265.587922][T32428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1265.632736][T32428] usb 3-1: SerialNumber: syz [ 1265.773756][T32026] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1265.803849][T32026] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1265.822983][T32026] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1265.849647][T32428] usb 3-1: 0:2 : does not exist [ 1265.910961][T32428] usb 3-1: USB disconnect, device number 62 [ 1265.913847][T32026] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1265.950242][T14751] devpts: called with bogus options [ 1265.965539][T32026] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1266.010651][T32026] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1266.060497][T32026] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1266.084854][T32026] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1266.098913][T32026] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1266.101767][T14769] loop0: detected capacity change from 0 to 512 [ 1266.116791][T32026] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1266.150581][T32026] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1266.168918][T14769] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1266.184596][T16418] udevd[16418]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1266.190233][T32026] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1266.212166][T14769] ext4 filesystem being mounted at /3241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1266.241847][T14777] [ 1266.244347][T14777] ====================================================== [ 1266.251766][T14777] WARNING: possible circular locking dependency detected [ 1266.259211][T14777] syzkaller #0 Not tainted [ 1266.263928][T14777] ------------------------------------------------------ [ 1266.271277][T14777] syz.5.16097/14777 is trying to acquire lock: [ 1266.277563][T14777] ffffffff97023038 (nfnl_subsys_ipset){+.+.}-{3:3}, at: ip_set_nfnl_get_byindex+0x63/0x230 [ 1266.287964][T14777] [ 1266.287964][T14777] but task is already holding lock: [ 1266.295699][T14777] ffff88801ef4d6b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x37/0x100 [ 1266.305994][T14777] [ 1266.305994][T14777] which lock already depends on the new lock. [ 1266.305994][T14777] [ 1266.316782][T14777] [ 1266.316782][T14777] the existing dependency chain (in reverse order) is: [ 1266.325815][T14777] [ 1266.325815][T14777] -> #2 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 1266.334430][T14777] __mutex_lock+0x12d/0xaf0 [ 1266.339581][T14777] nf_tables_dumpreset_obj+0x6e/0x90 [ 1266.345503][T14777] netlink_dump+0x6a3/0xd00 [ 1266.350545][T14777] __netlink_dump_start+0x537/0x6f0 [ 1266.356389][T14777] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 1266.362712][T14777] nf_tables_getobj_reset+0x1cb/0x610 [ 1266.368883][T14777] nfnetlink_rcv_msg+0x8a0/0x12b0 [ 1266.374464][T14777] netlink_rcv_skb+0x1fb/0x450 [ 1266.379850][T14777] nfnetlink_rcv+0x2b0/0x2480 [ 1266.385149][T14777] netlink_unicast+0x74d/0x8d0 [ 1266.390709][T14777] netlink_sendmsg+0x8ad/0xbd0 [ 1266.396274][T14777] ____sys_sendmsg+0x5be/0x970 [ 1266.401666][T14777] ___sys_sendmsg+0x2a2/0x360 [ 1266.406882][T14777] __se_sys_sendmsg+0x1bb/0x2a0 [ 1266.412306][T14777] do_syscall_64+0x4c/0xa0 [ 1266.417356][T14777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1266.423957][T14777] [ 1266.423957][T14777] -> #1 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 1266.432223][T14777] __mutex_lock+0x12d/0xaf0 [ 1266.437448][T14777] __netlink_dump_start+0x11f/0x6f0 [ 1266.443188][T14777] ip_set_dump+0x152/0x1e0 [ 1266.448140][T14777] nfnetlink_rcv_msg+0xbec/0x12b0 [ 1266.453819][T14777] netlink_rcv_skb+0x1fb/0x450 [ 1266.459563][T14777] nfnetlink_rcv+0x2b0/0x2480 [ 1266.464962][T14777] netlink_unicast+0x74d/0x8d0 [ 1266.470707][T14777] netlink_sendmsg+0x8ad/0xbd0 [ 1266.476269][T14777] ____sys_sendmsg+0x5be/0x970 [ 1266.481579][T14777] ___sys_sendmsg+0x2a2/0x360 [ 1266.486793][T14777] __se_sys_sendmsg+0x1bb/0x2a0 [ 1266.492372][T14777] do_syscall_64+0x4c/0xa0 [ 1266.497436][T14777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1266.503987][T14777] [ 1266.503987][T14777] -> #0 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 1266.511818][T14777] __lock_acquire+0x2d07/0x7d10 [ 1266.517299][T14777] lock_acquire+0x1bb/0x4a0 [ 1266.522429][T14777] __mutex_lock+0x12d/0xaf0 [ 1266.527492][T14777] ip_set_nfnl_get_byindex+0x63/0x230 [ 1266.533429][T14777] set_match_v1_checkentry+0x6d/0x220 [ 1266.539351][T14777] xt_check_match+0x4e6/0xc50 [ 1266.544569][T14777] __nft_match_init+0x663/0x890 [ 1266.550128][T14777] nf_tables_newrule+0x1731/0x2810 [ 1266.555778][T14777] nfnetlink_rcv+0x1124/0x2480 [ 1266.561167][T14777] netlink_unicast+0x74d/0x8d0 [ 1266.566560][T14777] netlink_sendmsg+0x8ad/0xbd0 [ 1266.572047][T14777] ____sys_sendmsg+0x5be/0x970 [ 1266.577351][T14777] ___sys_sendmsg+0x2a2/0x360 [ 1266.582836][T14777] __se_sys_sendmsg+0x1bb/0x2a0 [ 1266.588325][T14777] do_syscall_64+0x4c/0xa0 [ 1266.593455][T14777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1266.600162][T14777] [ 1266.600162][T14777] other info that might help us debug this: [ 1266.600162][T14777] [ 1266.611345][T14777] Chain exists of: [ 1266.611345][T14777] nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER --> &nft_net->commit_mutex [ 1266.611345][T14777] [ 1266.625993][T14777] Possible unsafe locking scenario: [ 1266.625993][T14777] [ 1266.633888][T14777] CPU0 CPU1 [ 1266.639262][T14777] ---- ---- [ 1266.644627][T14777] lock(&nft_net->commit_mutex); [ 1266.649665][T14777] lock(nlk_cb_mutex-NETFILTER); [ 1266.657225][T14777] lock(&nft_net->commit_mutex); [ 1266.664861][T14777] lock(nfnl_subsys_ipset); [ 1266.669672][T14777] [ 1266.669672][T14777] *** DEADLOCK *** [ 1266.669672][T14777] [ 1266.677845][T14777] 1 lock held by syz.5.16097/14777: [ 1266.683325][T14777] #0: ffff88801ef4d6b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x37/0x100 [ 1266.694329][T14777] [ 1266.694329][T14777] stack backtrace: [ 1266.700578][T14777] CPU: 0 PID: 14777 Comm: syz.5.16097 Not tainted syzkaller #0 [ 1266.708238][T14777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1266.718315][T14777] Call Trace: [ 1266.721644][T14777] [ 1266.724594][T14777] dump_stack_lvl+0x188/0x24e [ 1266.729482][T14777] ? load_image+0x400/0x400 [ 1266.734092][T14777] ? show_regs_print_info+0x12/0x12 [ 1266.739485][T14777] ? print_circular_bug+0x12b/0x1a0 [ 1266.744963][T14777] check_noncircular+0x296/0x330 [ 1266.750010][T14777] ? add_chain_block+0x940/0x940 [ 1266.755143][T14777] ? lockdep_lock+0xf1/0x1f0 [ 1266.759749][T14777] ? _find_first_zero_bit+0xcf/0x100 [ 1266.765048][T14777] __lock_acquire+0x2d07/0x7d10 [ 1266.769951][T14777] ? mark_lock+0x94/0x320 [ 1266.774383][T14777] ? verify_lock_unused+0x140/0x140 [ 1266.779863][T14777] ? __lock_acquire+0x12f4/0x7d10 [ 1266.785088][T14777] lock_acquire+0x1bb/0x4a0 [ 1266.789609][T14777] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 1266.795181][T14777] ? __might_sleep+0xd0/0xd0 [ 1266.799790][T14777] ? read_lock_is_recursive+0x10/0x10 [ 1266.805354][T14777] __mutex_lock+0x12d/0xaf0 [ 1266.809879][T14777] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 1266.815442][T14777] ? ip_set_pernet+0x23/0x230 [ 1266.820316][T14777] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 1266.826160][T14777] ? mutex_lock_nested+0x10/0x10 [ 1266.831114][T14777] ? __flush_work+0x10d/0xae0 [ 1266.835806][T14777] ? ip_set_pernet+0x23/0x230 [ 1266.840582][T14777] ? ip_set_pernet+0x23/0x230 [ 1266.845277][T14777] ip_set_nfnl_get_byindex+0x63/0x230 [ 1266.850686][T14777] set_match_v1_checkentry+0x6d/0x220 [ 1266.856077][T14777] xt_check_match+0x4e6/0xc50 [ 1266.860916][T14777] ? xt_check_proc_name+0x270/0x270 [ 1266.866150][T14777] ? __stack_depot_save+0x35/0x460 [ 1266.871302][T14777] __nft_match_init+0x663/0x890 [ 1266.876448][T14777] ? ___sys_sendmsg+0x2a2/0x360 [ 1266.881324][T14777] ? nft_match_large_dump+0x40/0x40 [ 1266.886796][T14777] ? __kmem_cache_alloc_node+0x140/0x260 [ 1266.892564][T14777] ? nf_tables_newrule+0x1503/0x2810 [ 1266.897906][T14777] ? rcu_is_watching+0x11/0xa0 [ 1266.902780][T14777] ? nf_tables_newrule+0x1503/0x2810 [ 1266.908185][T14777] ? __kmalloc+0xe1/0x240 [ 1266.912888][T14777] nf_tables_newrule+0x1731/0x2810 [ 1266.918041][T14777] ? nf_tables_delchain+0xf00/0xf00 [ 1266.923475][T14777] ? __lock_acquire+0x7d10/0x7d10 [ 1266.928706][T14777] ? mutex_unlock+0x10/0x10 [ 1266.933331][T14777] ? __nla_parse+0x3c/0x50 [ 1266.937930][T14777] nfnetlink_rcv+0x1124/0x2480 [ 1266.943009][T14777] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 1266.948715][T14777] ? ref_tracker_free+0x68c/0x840 [ 1266.953881][T14777] ? netlink_deliver_tap+0x2e/0x1b0 [ 1266.959283][T14777] ? netlink_deliver_tap+0x2e/0x1b0 [ 1266.964749][T14777] netlink_unicast+0x74d/0x8d0 [ 1266.969806][T14777] netlink_sendmsg+0x8ad/0xbd0 [ 1266.974594][T14777] ? netlink_getsockopt+0x550/0x550 [ 1266.980008][T14777] ? aa_sock_msg_perm+0x94/0x150 [ 1266.985132][T14777] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1266.991155][T14777] ? security_socket_sendmsg+0x7c/0xa0 [ 1266.996817][T14777] ? netlink_getsockopt+0x550/0x550 [ 1267.002205][T14777] ____sys_sendmsg+0x5be/0x970 [ 1267.007082][T14777] ? __sys_sendmsg_sock+0x30/0x30 [ 1267.012209][T14777] ? __import_iovec+0x315/0x500 [ 1267.017102][T14777] ? import_iovec+0x6f/0xa0 [ 1267.021793][T14777] ___sys_sendmsg+0x2a2/0x360 [ 1267.026680][T14777] ? try_to_wake_up+0x6ae/0x1080 [ 1267.031696][T14777] ? __sys_sendmsg+0x290/0x290 [ 1267.036608][T14777] __se_sys_sendmsg+0x1bb/0x2a0 [ 1267.041700][T14777] ? __x64_sys_sendmsg+0x80/0x80 [ 1267.046896][T14777] ? lockdep_hardirqs_on+0x94/0x140 [ 1267.052307][T14777] do_syscall_64+0x4c/0xa0 [ 1267.057007][T14777] ? clear_bhb_loop+0x60/0xb0 [ 1267.061825][T14777] ? clear_bhb_loop+0x60/0xb0 [ 1267.066672][T14777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1267.072680][T14777] RIP: 0033:0x7f596679cdd9 [ 1267.077307][T14777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1267.097450][T14777] RSP: 002b:00007f5967607028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1267.106064][T14777] RAX: ffffffffffffffda RBX: 00007f5966a15fa0 RCX: 00007f596679cdd9 [ 1267.114395][T14777] RDX: 0000000024044010 RSI: 0000200000000100 RDI: 0000000000000003 [ 1267.122385][T14777] RBP: 00007f5966832d69 R08: 0000000000000000 R09: 0000000000000000 [ 1267.130606][T14777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1267.138591][T14777] R13: 00007f5966a16038 R14: 00007f5966a15fa0 R15: 00007ffeb0549a58 [ 1267.146688][T14777] [ 1267.151737][T32431] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1267.159302][T32026] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1267.169643][T14777] set match dimension is over the limit! [ 1267.190012][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 1267.200768][T32026] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1267.234177][T32026] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1267.246223][T32026] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1267.277922][T32026] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1267.288539][T32026] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1267.301146][T32026] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1267.310176][T32026] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1267.320513][T32026] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1267.332005][T32026] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1267.340186][T32026] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1267.349606][T32026] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1267.361386][T32026] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1267.370867][T32026] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1267.374054][T32431] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1267.381980][T32026] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1267.396843][T32026] usb 4-1: Product: syz [ 1267.399876][T32431] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1267.401123][T32026] usb 4-1: Manufacturer: syz [ 1267.415067][T32026] usb 4-1: SerialNumber: syz [ 1267.415731][T32431] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.428355][T32431] usb 2-1: Product: syz [ 1267.429998][T32026] usb 4-1: config 0 descriptor?? [ 1267.437640][T32431] usb 2-1: Manufacturer: syz [ 1267.444120][T32431] usb 2-1: SerialNumber: syz [ 1267.445869][T32026] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1267.667757][T32431] usb 2-1: MIDIStreaming interface descriptor not found [ 1267.715212][T32431] usb 2-1: USB disconnect, device number 56 [ 1267.755621][T32428] usb 4-1: USB disconnect, device number 63 [ 1267.764505][T32428] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1269.253145][ C0] icmp: detected local route for 172.20.20.26 during ICMP sending, src 172.30.0.2