last executing test programs: 2.420213871s ago: executing program 4 (id=1475): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7c2) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @random="187db574dea2", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x26, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0x8, "69cb8fd05417"}, @exp_fastopen={0xfe, 0x9, 0xf989, '{\x00\x00\x00\x00'}]}}}}}}}, 0x0) 2.340046793s ago: executing program 4 (id=1478): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000540)='./file6\x00', 0x201080b, &(0x7f0000000bc0)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES8, @ANYBLOB="f9a192156bf01ca65961aa6bd8ded2e99e6d0172a290a4fb5b1c9e8d9a9f58a7c3868f3eb59150ec071f4e3228ed5671cc052363c2bc5a05b0140cd7da2c3b26425ae32d743c4d16e3c55cf800e12e64a3640a40b4f2f180a48dd8a25cf189be2fd909aa7590af8279dcc0a61037dc8c3700a8c29ca46a4843d9fefb37f83f64ea9df56d8d0de49b763efff6f4760bea6106b97d031bae46be2b0fd7048ba60a097ee8310a55b529828699f7acce", @ANYRES8, @ANYRESHEX], 0x21, 0x1cc, &(0x7f0000000280)="$eJzsVU+rUkEU/413vJqLah2Bi6RskV6vFW0iV+GXiBK9mXTtj1coRei28nu08Wu0aN8mKAja1KKCFkbbMM7MGZvSsPd88t6D+cF9vzl/Z86c55l7yeMEAH7OJ200oODjJN4LAQmgKLTuZk7zV19zheXPUvNF1r9gXjCS0fh+K46jwQ4X620ZfRDsJSP5/216M791al0eITcnfAcfOy5eLTxsES72cVEbF0h10t3XfmQWtz1TMhW/bcIfB3Ww4r/+Nzb1Xf5Hl7Ha5Tz9hg6jBWLV9Fu88TyDb6rit/NJmxZ3eEqRrqM/YftQN19ZPmek+oSHxdKHhh8JFwBUh/1H1WQ0vtTrt7pRN3oQhvWrweUguBJW7/biKNB/hbWFGVHEjes50Ew9YdmzAD7wgC3AwhcTqY/GdmHH0hxe8JAun8MfyFhlGS7g5TKWw0BXkMd5UEufpMLSllQWCVVSEwKeEnjoP+Nr0XvllVel/TDuTCHUfipsBqlzZJeuEj4sgdzq11KjmjKXmJvMM+aPzObNMm+RVBk+sVRO6UaftobDQc1/zSE1evWULvSNNTyd2hdGu37nHKa4szk4ODg4ODg4OBwz/AoAAP//pKZOzg==") r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9}) 1.914025693s ago: executing program 1 (id=1483): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$proc_mixer(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Master Capture\' 0000000\nPHONEIN \'CD Capture Switch\' 00000000000000000000\nSYNTH'], 0x90) close_range(r0, 0xffffffffffffffff, 0x0) 1.841793625s ago: executing program 4 (id=1485): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x44, r2, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x44}}, 0x88d0) 1.666927169s ago: executing program 4 (id=1487): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x26d9bdcd}}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@noacl}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@delalloc}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x44080, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000400)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x2000, 0x0, 0x0}) 1.580299811s ago: executing program 2 (id=1490): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000200)={0x80000002, 0x1801, 0x9, 0xb, 0x59, "ea7102000000f900edffff0900000000000005", 0x800, 0x3}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.580160381s ago: executing program 1 (id=1491): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000140)={[{@utf8}, {@utf8}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@gid}, {@namecase}, {@fmask={'fmask', 0x3d, 0xac9}}, {@discard}, {@errors_remount}, {@fmask={'fmask', 0x3d, 0x101}}]}, 0x1, 0x1533, &(0x7f0000006800)="$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") capset(&(0x7f0000000040)={0x20071026}, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) truncate(&(0x7f0000000080)='./file0\x00', 0x6) 1.534495322s ago: executing program 3 (id=1492): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x1, 0x800000, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x9}}]}, 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014) 1.508499223s ago: executing program 2 (id=1493): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x2000000000000000, 0xfffffffffffffffb}, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x0) 1.483325154s ago: executing program 0 (id=1494): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x3, 0x6, 0x5, 0x0, 0x0, 0x20}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="d2ffdd934517f3e145f228e086dd", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.370791646s ago: executing program 3 (id=1495): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)="ccda4541ecb8b82addd799dbb8492085", 0x10) 1.183295751s ago: executing program 1 (id=1496): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x1, 0x87, 0xffffffff, 0x2}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) 1.179554891s ago: executing program 0 (id=1497): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000003380)={0x0, 0x0, &(0x7f0000003340)={&(0x7f00000032c0)={0x20, r1, 0x107, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x40800) 1.141444882s ago: executing program 3 (id=1498): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000280)) 1.021289265s ago: executing program 0 (id=1499): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)={0x3c, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "3d2bf7eea3"}]}]}, 0x3c}}, 0x0) 1.020910985s ago: executing program 1 (id=1500): ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000080)=@attr_other={0x0, 0x4ea7, 0xfffffffffffffffb, 0x0}) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x40001, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d06, &(0x7f0000000040)={0x1ff, 0x2}) 899.672708ms ago: executing program 3 (id=1501): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000002000000000000000000000000000000000000200000000001000000000000000000000000000000000000000000000700000000000000000000000900000000000000000000000900000000000000000000000906"], 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) 812.18365ms ago: executing program 0 (id=1502): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dos1xfloppy,usefree,nodots,fmask=0000000000000010,flush,nfs=nostale_ro,dots,nodots,\x00'], 0x2, 0x15a, &(0x7f00000007c0)="$eJzs2z+r01AYB+C33l6NutxZHAIuTkX9BIpUEAOK0kEnherSSsEu0cV+FL+gIJ26HdFoS/9JK/QGkudZ8sLvHDgnkLycQN7e/jgaTqYfJi/mkXU60X0YeSw6cRFX4iwqswAAmmSRUvxIKaVrs7j+LVJKW0O+1rIwAOBkDuj/AEDD6P8A0D76PwC0z6vXb549Kor+yzzPIr7PykE5qK5V/uRp0b+X/3axmjUvy8HZMr9f5fl6fh43/uQPduZX4+6dKv+VPX5ebOQ3Y3j67QMAAEAr9PKl9fP937y3J9/+PrBxfu/Gre4lbQIAOMr085fRu/H4/aejioj/mdWI4jwidkdZtPi2KJpW1P1mAk5t9dDXvRIAAAAAAAAAAAAAAGCfg/8Hyv49eJH2T697jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDpZwAAAP//iBFNOg==") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141842, 0x8c) 812.0755ms ago: executing program 1 (id=1503): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) 649.316354ms ago: executing program 3 (id=1504): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x78, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 619.226224ms ago: executing program 1 (id=1505): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x16) ioctl$KDSIGACCEPT(r0, 0x5607, 0x15) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x3, 0x9}) 576.958636ms ago: executing program 2 (id=1506): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) 448.728429ms ago: executing program 2 (id=1507): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4a, 0x0, &(0x7f0000000180)="e3ef7f670000ec6783b4241544940000009550f50ac311e0f0544b00aab05400f16b2882a631a8af3a439e1432fa00228f11b0f472aeeb58d909c57270d30b5b85990747c7e37312f7eb", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x8001) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 448.603719ms ago: executing program 4 (id=1508): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x3008000, &(0x7f0000000040)={[{@min_batch_time}]}, 0x30, 0x527, &(0x7f0000000200)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) 380.189351ms ago: executing program 3 (id=1509): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 340.396802ms ago: executing program 0 (id=1510): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="040000000400000004000000050001"], 0x50) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c"], 0x250}}, 0x2000c000) 323.829232ms ago: executing program 2 (id=1511): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000140), 0x0, 0x246, &(0x7f00000002c0)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000000)={@id={0x2, 0x0, @c}}) 181.964806ms ago: executing program 0 (id=1512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r2, @ANYBLOB="05002d000100000008000600", @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) 44.194859ms ago: executing program 2 (id=1513): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 0s ago: executing program 4 (id=1514): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x1004810, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) kernel console output (not intermixed with test programs): e write err: -5, ino 25 [ 95.577092][ T151] hfsplus: b-tree write err: -5, ino 4 [ 95.608437][ T151] hfsplus: b-tree write err: -5, ino 2 [ 95.659490][ T5310] EXT4-fs (loop3): 1 orphan inode deleted [ 95.665270][ T5310] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 95.755111][ T5310] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.758340][ T4496] usb 5-1: Using ep0 maxpacket: 16 [ 95.814495][ T5310] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 95.928311][ T4496] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 95.940393][ T4496] usb 5-1: config 0 has no interface number 0 [ 95.946556][ T4496] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 96.004718][ T4496] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 96.074214][ T4233] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.158301][ T4966] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.170179][ T4496] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 96.191075][ T4496] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.204090][ T4496] usb 5-1: Product: syz [ 96.211236][ T4496] usb 5-1: Manufacturer: syz [ 96.215887][ T4496] usb 5-1: SerialNumber: syz [ 96.226839][ T4496] usb 5-1: config 0 descriptor?? [ 96.254654][ T5300] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 96.268876][ T5300] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 96.305640][ T5347] siw: device registration error -23 [ 96.348291][ T4762] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.418449][ T4966] usb 2-1: Using ep0 maxpacket: 16 [ 96.495586][ T5300] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 96.502897][ T5300] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 96.538278][ T4233] usb 3-1: unable to get BOS descriptor or descriptor too short [ 96.558371][ T4966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.573679][ T4966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.584472][ T4966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 96.597901][ T4966] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 96.608230][ T4762] usb 1-1: Using ep0 maxpacket: 8 [ 96.618588][ T4966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.629523][ T4233] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.639726][ T4233] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 96.650863][ T4966] usb 2-1: config 0 descriptor?? [ 96.656008][ T4233] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 96.667194][ T4233] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 96.681772][ T4233] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 96.692681][ T4233] usb 3-1: config 1 interface 1 has no altsetting 0 [ 96.726851][ T5359] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 96.739048][ T4762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.745612][ T5359] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 96.751578][ T4496] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 96.769559][ T4762] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 96.779703][ T4762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.809510][ T4762] usb 1-1: config 0 descriptor?? [ 96.979840][ T4233] usb 3-1: string descriptor 0 read error: -22 [ 96.987563][ T4233] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 96.997118][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.070513][ T4762] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 97.132306][ T4966] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 97.144133][ T4966] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 97.155216][ T4966] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 97.170422][ T4966] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 97.182015][ T4966] microsoft 0003:045E:07DA.0001: no inputs found [ 97.189505][ T4966] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 97.198425][ T4496] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 97.214677][ T4496] asix: probe of 5-1:0.34 failed with error -71 [ 97.226717][ T4496] usb 5-1: USB disconnect, device number 3 [ 97.314305][ T4762] usb 1-1: USB disconnect, device number 2 [ 97.382233][ T4966] usb 2-1: USB disconnect, device number 3 [ 97.718521][ T4233] usb 3-1: cannot get ctl value: req = 0x84, wValue = 0x201, wIndex = 0x200, type = 4 [ 97.747842][ T4233] usb 3-1: USB disconnect, device number 3 [ 97.926289][ T5381] set_capacity_and_notify: 5 callbacks suppressed [ 97.926305][ T5381] loop4: detected capacity change from 0 to 512 [ 98.008682][ T5387] loop3: detected capacity change from 0 to 512 [ 98.024189][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.036976][ T5381] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 98.062750][ T5381] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.098285][ T5387] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 98.123688][ T5387] EXT4-fs (loop3): 1 truncate cleaned up [ 98.131674][ T5387] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,quota,lazytime,errors=remount-ro,quota,quota,. Quota mode: writeback. [ 98.155704][ T5387] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 98.178996][ T5387] EXT4-fs (loop3): Remounting filesystem read-only [ 98.595749][ T5409] Zero length message leads to an empty skb [ 98.668220][ T4762] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.808385][ T5402] loop2: detected capacity change from 0 to 32768 [ 98.907672][ T5402] XFS (loop2): Mounting V5 Filesystem [ 98.916651][ T5405] loop1: detected capacity change from 0 to 40427 [ 98.938292][ T4762] usb 4-1: Using ep0 maxpacket: 32 [ 98.986934][ T5405] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 99.033244][ T5405] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 99.079443][ T4762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.098074][ T4762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.116921][ T5402] XFS (loop2): Ending clean mount [ 99.117799][ T5405] F2FS-fs (loop1): invalid crc value [ 99.132302][ T4762] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 99.144435][ T5402] XFS (loop2): Quotacheck needed: Please wait. [ 99.192148][ T4762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.223444][ T5405] F2FS-fs (loop1): Found nat_bits in checkpoint [ 99.230680][ T4762] usb 4-1: config 0 descriptor?? [ 99.244181][ T5402] XFS (loop2): Quotacheck: Done. [ 99.274825][ T5433] netlink: 'syz.0.404': attribute type 29 has an invalid length. [ 99.315930][ T5405] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 99.323654][ T5433] netlink: 'syz.0.404': attribute type 29 has an invalid length. [ 99.338816][ T5405] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 99.359970][ T5435] netlink: 'syz.0.404': attribute type 29 has an invalid length. [ 99.533790][ T5439] loop0: detected capacity change from 0 to 1024 [ 99.547311][ T5411] loop4: detected capacity change from 0 to 40427 [ 99.581193][ T5411] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 99.599544][ T5411] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 99.697948][ T5411] F2FS-fs (loop4): invalid crc value [ 99.720919][ T4273] hfsplus: b-tree write err: -5, ino 25 [ 99.730068][ T4762] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 99.737333][ T4762] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 99.760337][ T4273] hfsplus: b-tree write err: -5, ino 4 [ 99.772985][ T4762] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 99.781142][ T4273] hfsplus: b-tree write err: -5, ino 2 [ 99.788332][ T4762] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 99.799243][ T4762] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 99.800887][ T5411] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 99.825720][ T4762] koneplus 0003:1E7D:2D51.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 100.019524][ T5411] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 100.036840][ T5411] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 100.204705][ T4970] usb 4-1: USB disconnect, device number 2 [ 100.239822][ T4196] XFS (loop2): Unmounting Filesystem [ 100.446465][ T4190] attempt to access beyond end of device [ 100.446465][ T4190] loop4: rw=2049, want=45104, limit=40427 [ 100.889745][ T5466] loop2: detected capacity change from 0 to 256 [ 100.916307][ T5457] loop1: detected capacity change from 0 to 32768 [ 100.944403][ T5466] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 101.041140][ T5457] XFS (loop1): Mounting V5 Filesystem [ 101.204377][ T5483] loop2: detected capacity change from 0 to 256 [ 101.242886][ T5457] XFS (loop1): Ending clean mount [ 101.325196][ T5489] loop3: detected capacity change from 0 to 512 [ 101.325492][ T5483] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x28ba01bf, utbl_chksum : 0xe619d30d) [ 101.381038][ T5489] FAT-fs (loop3): Directory bread(block 199916) failed [ 101.381541][ T5457] XFS (loop1): User initiated shutdown received. [ 101.399762][ T5457] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:485). Shutting down filesystem. [ 101.414999][ T5457] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 101.416610][ T5489] FAT-fs (loop3): Directory bread(block 199917) failed [ 101.469771][ T5469] [ 101.469771][ T5469] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.469771][ T5469] [ 101.502671][ T5489] FAT-fs (loop3): Directory bread(block 199918) failed [ 101.518710][ T5483] attempt to access beyond end of device [ 101.518710][ T5483] loop2: rw=524288, want=408, limit=256 [ 101.530470][ T4762] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 101.559632][ T5489] FAT-fs (loop3): Directory bread(block 199919) failed [ 101.575734][ T26] audit: type=1800 audit(1785438812.857:12): pid=5469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.414" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 101.575914][ T5489] FAT-fs (loop3): Directory bread(block 199920) failed [ 101.607064][ T5483] attempt to access beyond end of device [ 101.607064][ T5483] loop2: rw=524288, want=664, limit=256 [ 101.653660][ T4188] XFS (loop1): Unmounting Filesystem [ 101.693092][ T5483] attempt to access beyond end of device [ 101.693092][ T5483] loop2: rw=0, want=288, limit=256 [ 101.710243][ T4190] [ 101.710243][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.710243][ T4190] [ 101.722641][ T5489] FAT-fs (loop3): Directory bread(block 199921) failed [ 101.730113][ T5489] FAT-fs (loop3): Directory bread(block 199922) failed [ 101.749645][ T4190] [ 101.749645][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.749645][ T4190] [ 101.762835][ T26] audit: type=1800 audit(1785438813.047:13): pid=5483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.417" name="file1" dev="loop2" ino=1048613 res=0 errno=0 [ 101.786014][ T5489] FAT-fs (loop3): Directory bread(block 199923) failed [ 101.945958][ T5489] FAT-fs (loop3): FAT read failed (blocknr 128) [ 101.998333][ T4762] usb 1-1: unable to get BOS descriptor or descriptor too short [ 102.068605][ T4762] usb 1-1: not running at top speed; connect to a high speed hub [ 102.178372][ T4762] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 102.195795][ T4762] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 102.227054][ T4762] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.418560][ T4762] usb 1-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 102.434588][ T4762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.444677][ T4762] usb 1-1: Product: syz [ 102.464441][ T4762] usb 1-1: Manufacturer: syz [ 102.470705][ T4762] usb 1-1: SerialNumber: syz [ 102.485509][ T4272] hfsplus: b-tree write err: -5, ino 25 [ 102.494680][ T4272] hfsplus: b-tree write err: -5, ino 4 [ 102.503080][ T4272] hfsplus: b-tree write err: -5, ino 2 [ 102.510717][ T5513] EXT4-fs (loop4): orphan cleanup on readonly fs [ 102.519436][ T5513] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 102.556493][ T5519] input: syz1 as /devices/virtual/input/input6 [ 102.569562][ T5513] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 102.618425][ T5513] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #13: comm syz.4.432: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 57856(57856) [ 102.771798][ T5513] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.432: couldn't read orphan inode 13 (err -117) [ 102.861272][ T5513] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.872642][ T5524] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.436 (5524) [ 102.899343][ T5513] EXT4-fs error (device loop4): ext4_lookup:1858: comm syz.4.432: inode #15: comm syz.4.432: iget: illegal inode # [ 102.991466][ T5524] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 103.001804][ T5524] BTRFS info (device loop2): use zlib compression, level 3 [ 103.013997][ T5524] BTRFS info (device loop2): using free space tree [ 103.024832][ T5524] BTRFS info (device loop2): has skinny extents [ 103.242551][ T5524] BTRFS info (device loop2): enabling ssd optimizations [ 103.288274][ T4762] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 103.324723][ T5524] BTRFS warning (device loop2): this kernel does not support the compat:0 feature bit [ 103.404470][ T4762] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 103.480249][ T4762] usb 1-1: USB disconnect, device number 3 [ 103.625361][ T4180] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (4180) [ 103.805155][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.168272][ T4965] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 104.255778][ T5601] set_capacity_and_notify: 4 callbacks suppressed [ 104.255795][ T5601] loop3: detected capacity change from 0 to 256 [ 104.323201][ T5601] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.368521][ T5601] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 104.402026][ T5601] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 104.418313][ T4965] usb 2-1: Using ep0 maxpacket: 8 [ 104.698347][ T4965] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 104.716343][ T4965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.741212][ T4965] usb 2-1: Product: syz [ 104.755162][ T4965] usb 2-1: Manufacturer: syz [ 104.772993][ T5603] loop0: detected capacity change from 0 to 40427 [ 104.782060][ T4965] usb 2-1: SerialNumber: syz [ 104.795798][ T4965] usb 2-1: config 0 descriptor?? [ 104.842368][ T4965] gspca_main: se401-2.14.0 probing 047d:5003 [ 104.876507][ T5603] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 104.889698][ T5603] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 104.932004][ T5603] F2FS-fs (loop0): invalid crc value [ 104.981324][ T5603] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 105.181973][ T5603] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 105.186235][ T5639] loop3: detected capacity change from 0 to 4096 [ 105.189518][ T5603] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 105.253030][ T5639] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 105.268266][ T4965] gspca_se401: ExtraFeatures: 255 [ 105.277766][ T4965] gspca_se401: Too many frame sizes [ 105.418088][ T4187] attempt to access beyond end of device [ 105.418088][ T4187] loop0: rw=2049, want=45104, limit=40427 [ 105.504946][ T21] usb 2-1: USB disconnect, device number 4 [ 105.633425][ T5633] loop4: detected capacity change from 0 to 32768 [ 105.679982][ T5633] (syz.4.472,5633,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 105.701880][ T5633] (syz.4.472,5633,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 105.830974][ T5633] JBD2: Ignoring recovery information on journal [ 106.017533][ T5633] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 106.124451][ T5661] loop1: detected capacity change from 0 to 256 [ 106.198994][ T4965] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.224664][ T5661] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.448631][ T4965] usb 1-1: Using ep0 maxpacket: 8 [ 106.491286][ T4190] ocfs2: Unmounting device (7,4) on (node local) [ 106.549942][ T5649] loop2: detected capacity change from 0 to 32768 [ 106.571127][ T4965] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 106.631976][ T4965] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 106.685968][ T4965] usb 1-1: config 6 has no interface number 0 [ 106.716560][ T4965] usb 1-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 106.899462][ T4965] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 106.919933][ T4965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.939165][ T4965] usb 1-1: Product: syz [ 106.944347][ T4965] usb 1-1: Manufacturer: syz [ 106.956555][ T4965] usb 1-1: SerialNumber: syz [ 107.029104][ T4965] hso 1-1:6.2: Failed to find INT IN ep [ 107.096910][ T5692] program syz.2.492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.382873][ T4484] usb 1-1: USB disconnect, device number 4 [ 107.476367][ T5712] loop4: detected capacity change from 0 to 512 [ 107.583679][ T5712] EXT4-fs (loop4): Ignoring removed nobh option [ 107.675412][ T5712] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.507: invalid indirect mapped block 256 (level 2) [ 107.701242][ T5718] rtc_cmos 00:00: Alarms can be up to one day in the future [ 107.797235][ T5708] loop1: detected capacity change from 0 to 40427 [ 107.818122][ T5712] EXT4-fs (loop4): Remounting filesystem read-only [ 107.835295][ T5712] EXT4-fs (loop4): 2 truncates cleaned up [ 107.850317][ T5712] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 107.895287][ T5708] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 107.916054][ T5708] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 107.925328][ T5712] EXT4-fs error (device loop4) in ext4_setattr:5645: Readonly filesystem [ 107.968302][ T5708] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 107.982366][ T5712] EXT4-fs (loop4): Remounting filesystem read-only [ 108.030377][ T5708] F2FS-fs (loop1): Found nat_bits in checkpoint [ 108.210208][ T5708] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 108.235249][ T5708] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 108.677411][ T2240] rtc_cmos 00:00: Alarms can be up to one day in the future [ 108.707640][ T5756] loop2: detected capacity change from 0 to 256 [ 108.752660][ T2240] rtc_cmos 00:00: Alarms can be up to one day in the future [ 108.859466][ T2240] rtc_cmos 00:00: Alarms can be up to one day in the future [ 108.895709][ T2240] rtc_cmos 00:00: Alarms can be up to one day in the future [ 108.929850][ T2240] rtc rtc0: __rtc_set_alarm: err=-22 [ 109.018345][ T5743] loop3: detected capacity change from 0 to 131072 [ 109.043195][ T5758] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 109.130852][ T5743] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 109.140509][ T5743] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 109.165747][ T5743] F2FS-fs (loop3): invalid crc value [ 109.205584][ T5743] F2FS-fs (loop3): Found nat_bits in checkpoint [ 109.265515][ T5743] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 109.273472][ T5743] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 109.311436][ T5761] loop0: detected capacity change from 0 to 32768 [ 109.373987][ T5761] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.528 (5761) [ 109.513942][ T5761] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 109.563077][ T5761] BTRFS info (device loop0): using free space tree [ 109.578301][ T5761] BTRFS info (device loop0): has skinny extents [ 109.597644][ T5773] loop2: detected capacity change from 0 to 128 [ 109.753401][ T5773] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 109.801039][ T5773] hpfs: filesystem error: improperly stopped [ 109.807131][ T5773] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 109.875367][ T5773] hpfs: You really don't want any checks? You are crazy... [ 109.942797][ T5773] hpfs: hpfs_map_sector(): read error [ 109.948496][ T5761] BTRFS info (device loop0): enabling ssd optimizations [ 109.958386][ T5773] hpfs: code page support is disabled [ 109.978210][ T5773] hpfs: hpfs_map_4sectors(): unaligned read [ 110.046295][ T5773] hpfs: hpfs_map_4sectors(): unaligned read [ 110.052575][ T5773] hpfs: filesystem error: unable to find root dir [ 110.069900][ T5786] loop4: detected capacity change from 0 to 32768 [ 110.133252][ T5773] hpfs: hpfs_map_4sectors(): unaligned read [ 110.141075][ T5773] hpfs: hpfs_map_sector(): read error [ 110.276047][ T5811] loop2: detected capacity change from 0 to 256 [ 110.402958][ T4180] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 10 /dev/loop0 scanned by udevd (4180) [ 110.656417][ T5786] XFS (loop4): Mounting V5 Filesystem [ 110.741773][ T5807] loop1: detected capacity change from 0 to 32768 [ 110.796801][ T5786] XFS (loop4): Ending clean mount [ 110.824103][ T5807] XFS (loop1): Mounting V5 Filesystem [ 110.831684][ T5786] XFS (loop4): Quotacheck needed: Please wait. [ 110.949241][ T5827] loop2: detected capacity change from 0 to 2048 [ 110.960445][ T5807] XFS (loop1): Ending clean mount [ 111.014656][ T5786] XFS (loop4): Quotacheck: Done. [ 111.030171][ T5827] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 111.136998][ T4188] XFS (loop1): Unmounting Filesystem [ 111.175871][ T5827] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 111.244014][ T5833] loop3: detected capacity change from 0 to 1024 [ 111.269955][ T5827] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 111.309886][ T5827] EXT4-fs (loop2): This should not happen!! Data will be lost [ 111.309886][ T5827] [ 111.344651][ T5827] EXT4-fs (loop2): Total free blocks count 0 [ 111.355795][ T5827] EXT4-fs (loop2): Free/Dirty block details [ 111.377864][ T5827] EXT4-fs (loop2): free_blocks=2415919504 [ 111.399551][ T5833] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 111.428190][ T5827] EXT4-fs (loop2): dirty_blocks=32 [ 111.458838][ T5827] EXT4-fs (loop2): Block reservation details [ 111.481100][ T5827] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 111.535785][ T5841] loop0: detected capacity change from 0 to 8 [ 111.596985][ T5836] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 111.683637][ T5836] EXT4-fs (loop2): This should not happen!! Data will be lost [ 111.683637][ T5836] [ 111.813764][ T26] audit: type=1800 audit(1785438823.097:14): pid=5841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.546" name="file0" dev="loop0" ino=1 res=0 errno=0 [ 111.833347][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.151538][ T5857] loop0: detected capacity change from 0 to 512 [ 112.300652][ T5857] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 112.385941][ T4190] XFS (loop4): Unmounting Filesystem [ 112.401982][ T5857] EXT4-fs (loop0): Remounting filesystem read-only [ 112.435809][ T5857] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.552: invalid indirect mapped block 4278190080 (level 0) [ 112.498194][ T2240] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 112.526715][ T5857] EXT4-fs (loop0): Remounting filesystem read-only [ 112.550832][ T5857] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.552: invalid indirect mapped block 1 (level 1) [ 112.634904][ T5857] EXT4-fs (loop0): Remounting filesystem read-only [ 112.655681][ T5857] EXT4-fs (loop0): 1 truncate cleaned up [ 112.698798][ T5857] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x000000000000. Quota mode: none. [ 112.778377][ T5852] loop1: detected capacity change from 0 to 131072 [ 112.837466][ T5852] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (0) [ 112.847197][ T5852] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 112.863860][ T5852] F2FS-fs (loop1): invalid crc value [ 112.886609][ T5852] F2FS-fs (loop1): Found nat_bits in checkpoint [ 112.928734][ T4272] wlan1: Trigger new scan to find an IBSS to join [ 112.939464][ T2240] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.963878][ T2240] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 112.986896][ T5852] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 112.994159][ T5852] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 113.045539][ T2240] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 113.093814][ T2240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.143509][ T2240] usb 3-1: config 0 descriptor?? [ 113.223518][ T2240] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 113.248620][ T2240] dvb-usb: bulk message failed: -22 (3/0) [ 113.335073][ T2240] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 113.378815][ T2240] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 113.403112][ T5860] dvb-usb: bulk message failed: -22 (4/0) [ 113.429819][ T2240] usb 3-1: media controller created [ 113.452966][ T5886] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 113.469502][ T2240] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.552030][ T2240] dvb-usb: bulk message failed: -22 (6/0) [ 113.570683][ T2240] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 113.647218][ T2240] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 113.709543][ T2240] dvb-usb: schedule remote query interval to 150 msecs. [ 113.748116][ T2240] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 113.819019][ T2240] usb 3-1: USB disconnect, device number 4 [ 113.924882][ T2240] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 113.956322][ T5877] XFS (loop3): Mounting V5 Filesystem [ 114.094735][ T5877] XFS (loop3): Ending clean mount [ 114.141885][ T26] audit: type=1800 audit(1785438825.417:15): pid=5877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.559" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 114.206216][ T26] audit: type=1800 audit(1785438825.417:16): pid=5877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.559" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 114.231563][ T4198] XFS (loop3): Unmounting Filesystem [ 114.579882][ T5947] set_capacity_and_notify: 1 callbacks suppressed [ 114.579897][ T5947] loop2: detected capacity change from 0 to 128 [ 114.636457][ T5950] loop4: detected capacity change from 0 to 2048 [ 114.778554][ T5956] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.873443][ T5959] netlink: 'syz.1.594': attribute type 12 has an invalid length. [ 115.112342][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.597'. [ 115.306271][ T5968] loop4: detected capacity change from 0 to 256 [ 115.335501][ T5968] exfat: Deprecated parameter 'utf8' [ 115.373030][ T5983] loop0: detected capacity change from 0 to 128 [ 115.416087][ T5968] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffac3354, utbl_chksum : 0xe619d30d) [ 115.549484][ T5983] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 115.720415][ T5996] loop0: detected capacity change from 0 to 64 [ 115.758187][ T4965] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.819321][ T5996] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 115.873768][ T5996] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 116.000077][ T4965] usb 4-1: Using ep0 maxpacket: 16 [ 116.122316][ T4965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.155007][ T4965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.180604][ T4965] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 116.220752][ T4965] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 116.253107][ T4965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.295227][ T6024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.621'. [ 116.296034][ T4965] usb 4-1: config 0 descriptor?? [ 116.446905][ T6029] loop4: detected capacity change from 0 to 4096 [ 116.504932][ T6038] loop2: detected capacity change from 0 to 1024 [ 116.545913][ T6029] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 116.545913][ T6029] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 116.545913][ T6029] [ 116.552064][ T6038] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 116.592009][ T6029] EXT4-fs (loop4): Ignoring removed orlov option [ 116.668496][ T6029] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,auto_da_alloc=0x000000000000d25d,lazytime,noacl,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 116.821500][ T4965] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 116.838541][ T4965] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 116.864518][ T4965] microsoft 0003:045E:07DA.0003: no inputs found [ 116.880176][ T4965] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 116.972787][ T6043] loop2: detected capacity change from 0 to 32768 [ 116.999414][ T6043] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.629 (6043) [ 117.112822][ T6043] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 117.124111][ T2240] usb 4-1: USB disconnect, device number 3 [ 117.147939][ T6043] BTRFS info (device loop2): enabling auto defrag [ 117.196475][ T6043] BTRFS info (device loop2): force clearing of disk cache [ 117.212903][ T6049] process 'syz.4.631' launched './file2' with NULL argv: empty string added [ 117.233326][ T6043] BTRFS info (device loop2): ignoring data csums [ 117.248214][ T6043] BTRFS info (device loop2): turning on async discard [ 117.278563][ T6043] BTRFS info (device loop2): setting nodatacow, compression disabled [ 117.301621][ T6043] BTRFS info (device loop2): turning off async discard [ 117.327010][ T6043] BTRFS info (device loop2): using free space tree [ 117.355014][ T6043] BTRFS info (device loop2): has skinny extents [ 117.439626][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.634'. [ 117.445403][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.635'. [ 117.493320][ T6068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.636'. [ 117.751427][ T6095] loop3: detected capacity change from 0 to 128 [ 117.817222][ T6095] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 117.843055][ T6095] hpfs: filesystem error: improperly stopped [ 117.876150][ T6095] hpfs: You really don't want any checks? You are crazy... [ 117.889879][ T1318] wlan1: Trigger new scan to find an IBSS to join [ 117.900177][ T4180] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by udevd (4180) [ 117.924759][ T6095] hpfs: hpfs_map_sector(): read error [ 117.954731][ T6095] hpfs: code page support is disabled [ 117.995120][ T6095] hpfs: hpfs_map_4sectors(): unaligned read [ 118.039708][ T6095] hpfs: hpfs_map_4sectors(): unaligned read [ 118.076482][ T6095] hpfs: filesystem error: unable to find root dir [ 118.234513][ T6106] loop1: detected capacity change from 0 to 256 [ 118.691333][ T6121] tipc: Started in network mode [ 118.704832][ T6121] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 118.810787][ T6121] tipc: Enabled bearer , priority 10 [ 118.936999][ T4273] wlan1: Creating new IBSS network, BSSID b2:d2:32:ca:7f:ce [ 119.497026][ T6158] netlink: 27 bytes leftover after parsing attributes in process `syz.4.669'. [ 119.784224][ T6170] set_capacity_and_notify: 2 callbacks suppressed [ 119.784241][ T6170] loop4: detected capacity change from 0 to 64 [ 119.826944][ T4235] tipc: Node number set to 4269801488 [ 119.865409][ T6142] loop1: detected capacity change from 0 to 32768 [ 119.911354][ T6174] program syz.0.675 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.064217][ T6146] loop3: detected capacity change from 0 to 32768 [ 120.071326][ T4232] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 120.146454][ T6178] netlink: 'syz.0.679': attribute type 3 has an invalid length. [ 120.251470][ T6146] XFS (loop3): Mounting V5 Filesystem [ 120.275503][ T6191] hsr0: VLAN not yet supported [ 120.311401][ T4232] usb 3-1: Using ep0 maxpacket: 8 [ 120.518303][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.540054][ T4232] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 120.555687][ T6186] loop0: detected capacity change from 0 to 40427 [ 120.572267][ T4232] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 120.576584][ T6186] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 120.595031][ T6186] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 120.597586][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.620906][ T6186] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 120.625258][ T6146] XFS (loop3): Ending clean mount [ 120.657627][ T4232] usb 3-1: config 0 descriptor?? [ 120.673720][ T6186] F2FS-fs (loop0): Found nat_bits in checkpoint [ 120.690896][ T6200] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.678'. [ 120.693682][ T6146] XFS (loop3): Quotacheck needed: Please wait. [ 120.818646][ T6146] XFS (loop3): Quotacheck: Done. [ 120.841453][ T6186] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 120.862361][ T6186] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 121.143679][ T4232] magicmouse 0003:05AC:0269.0004: unknown main item tag 0x0 [ 121.192597][ T4232] magicmouse 0003:05AC:0269.0004: unknown main item tag 0x0 [ 121.223414][ T4232] magicmouse 0003:05AC:0269.0004: unknown main item tag 0x0 [ 121.284890][ T4232] magicmouse 0003:05AC:0269.0004: unknown main item tag 0x0 [ 121.324740][ T4232] magicmouse 0003:05AC:0269.0004: unknown main item tag 0x0 [ 121.375089][ T4232] magicmouse 0003:05AC:0269.0004: unknown main item tag 0x0 [ 121.405086][ T4232] magicmouse 0003:05AC:0269.0004: unknown main item tag 0x0 [ 121.429411][ T4232] magicmouse 0003:05AC:0269.0004: hidraw0: USB HID v0.04 Device [HID 05ac:0269] on usb-dummy_hcd.2-1/input0 [ 121.446032][ T4232] usb 3-1: USB disconnect, device number 5 [ 121.684836][ T4198] XFS (loop3): Unmounting Filesystem [ 121.736924][ T6216] fido_id[6216]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 122.178508][ T6235] loop1: detected capacity change from 0 to 256 [ 122.187719][ T6237] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 122.257776][ T6239] loop2: detected capacity change from 0 to 64 [ 122.547237][ T6248] loop0: detected capacity change from 0 to 128 [ 122.569743][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.689'. [ 122.663446][ T6248] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 122.769470][ T6248] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 123.035519][ T6240] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 123.322265][ T6261] loop2: detected capacity change from 0 to 40427 [ 123.351736][ T6264] netlink: 48 bytes leftover after parsing attributes in process `syz.0.705'. [ 123.415743][ T6261] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 123.430700][ T6261] F2FS-fs (loop2): invalid crc value [ 123.439927][ T6261] F2FS-fs (loop2): invalid crc value [ 123.446728][ T6261] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 123.620944][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.708'. [ 123.638495][ T6270] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-tlb(5) [ 123.768846][ T6244] loop1: detected capacity change from 0 to 32768 [ 123.852947][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'. [ 123.911430][ T6242] loop4: detected capacity change from 0 to 40427 [ 123.968331][ T6244] XFS (loop1): Mounting V5 Filesystem [ 124.016762][ T6242] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 124.137214][ T6242] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 124.189401][ T6244] XFS (loop1): Ending clean mount [ 124.229571][ T6244] XFS (loop1): Quotacheck needed: Please wait. [ 124.253419][ T6242] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 124.336552][ T6242] F2FS-fs (loop4): Found nat_bits in checkpoint [ 124.348151][ T2288] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 124.447195][ T6244] XFS (loop1): Quotacheck: Done. [ 124.577715][ T6242] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 124.598178][ T6242] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 124.602688][ T2288] usb 3-1: Using ep0 maxpacket: 8 [ 124.788347][ T2288] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 124.818223][ T2288] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.874738][ T2288] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.906929][ T2288] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.958150][ T2288] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.016818][ T2288] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 125.031639][ T2288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.333926][ T2288] usb 3-1: GET_CAPABILITIES returned 0 [ 125.354976][ T2288] usbtmc 3-1:16.0: can't read capabilities [ 125.430979][ T4188] XFS (loop1): Unmounting Filesystem [ 125.529367][ T6327] loop4: detected capacity change from 0 to 128 [ 125.596560][ T4235] usb 3-1: USB disconnect, device number 6 [ 125.602115][ T6327] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 125.640996][ T6327] hpfs: filesystem error: improperly stopped [ 125.653641][ T6327] hpfs: You really don't want any checks? You are crazy... [ 125.677258][ T6327] hpfs: hpfs_map_sector(): read error [ 125.694752][ T6327] hpfs: code page support is disabled [ 125.705513][ T6327] hpfs: hpfs_map_4sectors(): unaligned read [ 125.717219][ T6327] hpfs: hpfs_map_4sectors(): unaligned read [ 125.724287][ T6327] hpfs: filesystem error: unable to find root dir [ 125.765985][ T6327] hpfs: hpfs_map_4sectors(): unaligned read [ 125.854116][ T6329] loop0: detected capacity change from 0 to 4096 [ 125.923427][ T6331] loop3: detected capacity change from 0 to 256 [ 125.981256][ T6329] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.071336][ T6340] loop1: detected capacity change from 0 to 4096 [ 126.194665][ T6338] loop4: detected capacity change from 0 to 8192 [ 126.198450][ T6340] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 126.313679][ T6345] loop0: detected capacity change from 0 to 1024 [ 126.377275][ T6340] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 126.467674][ T6340] ntfs3: loop1: Failed to load $Extend. [ 126.543158][ T6345] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,mb_optimize_scan=0x0000000000000000,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x000000000000001f,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,errors=continue. Quota mode: none. [ 126.642162][ T6353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.739'. [ 126.643604][ T6356] loop2: detected capacity change from 0 to 1024 [ 126.733946][ T26] audit: type=1800 audit(1785438838.017:17): pid=6340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.733" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 126.843293][ T6345] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.736: bg 0: block 153: padding at end of block bitmap is not set [ 127.151727][ T6371] IPv6: NLM_F_CREATE should be specified when creating new route [ 127.198223][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.745'. [ 127.374574][ T6380] loop0: detected capacity change from 0 to 256 [ 127.556448][ T6386] bridge0: port 2(bridge_slave_1) entered listening state [ 127.653188][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.005292][ T6409] loop0: detected capacity change from 0 to 2048 [ 128.220688][ T6409] loop0: detected capacity change from 0 to 2048 [ 128.302358][ T6409] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 128.421016][ T6409] NILFS (loop0): Invalid checkpoint (checkpoint number=2) [ 128.481592][ T6409] NILFS (loop0): error -22 while loading last checkpoint (checkpoint number=2) [ 128.574981][ T6409] overlayfs: unrecognized mount option "/õ÷ÚgãÕ±+/ÍÞœ›ŸZX˜šlŒÏ´¯ÍNNÝóv[«Áê4n¾vkòúõ…Æ™çÎnÚ|{à½þ'Ž\" or missing value [ 128.662107][ T6426] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 128.977217][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.777'. [ 129.057979][ T6444] vxcan0: tx address claim with dest, not broadcast [ 129.173597][ T6451] vivid-001: disconnect [ 129.185998][ T6441] vivid-001: reconnect [ 129.716773][ T6418] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 129.737595][ T6418] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 129.830432][ T6418] F2FS-fs (loop3): Found nat_bits in checkpoint [ 129.898178][ T4657] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 129.957206][ T6418] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 129.975190][ T6418] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 130.166078][ T6446] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 130.255312][ T6446] JBD2: Ignoring recovery information on journal [ 130.339171][ T4657] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 130.353140][ T4657] usb 3-1: config 0 interface 0 has no altsetting 0 [ 130.375873][ T6446] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 130.428313][ T4657] usb 3-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 130.467781][ T4657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.538868][ T4657] usb 3-1: config 0 descriptor?? [ 130.586371][ T4187] ocfs2: Unmounting device (7,0) on (node local) [ 130.861874][ T6470] set_capacity_and_notify: 3 callbacks suppressed [ 130.861892][ T6470] loop1: detected capacity change from 0 to 40427 [ 130.972161][ T6470] F2FS-fs (loop1): invalid crc value [ 131.026162][ T6470] F2FS-fs (loop1): Found nat_bits in checkpoint [ 131.059671][ T4657] ntrig 0003:1B96:000F.0005: ignoring exceeding usage max [ 131.100039][ T4657] ntrig 0003:1B96:000F.0005: unbalanced collection at end of report description [ 131.168918][ T4657] ntrig 0003:1B96:000F.0005: parse failed [ 131.176655][ T4657] ntrig: probe of 0003:1B96:000F.0005 failed with error -22 [ 131.234537][ T6510] loop3: detected capacity change from 0 to 256 [ 131.278443][ T4657] usb 3-1: USB disconnect, device number 7 [ 131.303753][ T6470] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 131.395323][ T6510] FAT-fs (loop3): Directory bread(block 64) failed [ 131.408166][ T2288] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 131.464839][ T6510] FAT-fs (loop3): Directory bread(block 65) failed [ 131.501755][ T4188] attempt to access beyond end of device [ 131.501755][ T4188] loop1: rw=2049, want=45104, limit=40427 [ 131.541353][ T6510] FAT-fs (loop3): Directory bread(block 66) failed [ 131.571249][ T6510] FAT-fs (loop3): Directory bread(block 67) failed [ 131.621556][ T6510] FAT-fs (loop3): Directory bread(block 68) failed [ 131.651072][ T6510] FAT-fs (loop3): Directory bread(block 69) failed [ 131.671960][ T6510] FAT-fs (loop3): Directory bread(block 70) failed [ 131.718324][ T2288] usb 5-1: Using ep0 maxpacket: 16 [ 131.725303][ T6510] FAT-fs (loop3): Directory bread(block 71) failed [ 131.748263][ T6510] FAT-fs (loop3): Directory bread(block 72) failed [ 131.756596][ T6510] FAT-fs (loop3): Directory bread(block 73) failed [ 131.848506][ T2288] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.886301][ T2288] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.936823][ T2288] usb 5-1: config 0 interface 0 has no altsetting 0 [ 132.001102][ T2288] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 132.080886][ T2288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.146787][ T2288] usb 5-1: config 0 descriptor?? [ 132.181897][ T26] audit: type=1800 audit(1785438843.467:18): pid=6526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.789" name="bus" dev="loop3" ino=1048627 res=0 errno=0 [ 132.612853][ T6543] loop3: detected capacity change from 0 to 128 [ 132.662778][ T2288] hid (null): unknown global tag 0xe [ 132.699136][ T2288] hid (null): unknown global tag 0xc [ 132.705150][ T2288] hid (null): global environment stack underflow [ 132.728866][ T2288] hid (null): unknown global tag 0xc [ 132.771368][ T6543] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.783269][ T2288] hid (null): unknown global tag 0xd [ 132.798763][ T6543] ext4 filesystem being mounted at /176/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.812255][ T2288] hid (null): report_id 27752 is invalid [ 132.813329][ T6551] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 132.835677][ T2288] hid (null): unknown global tag 0xd [ 132.852431][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.859314][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.896205][ T2288] hid (null): bogus close delimiter [ 132.936106][ T2288] hid (null): unknown global tag 0xd [ 132.968294][ T2288] hid (null): bogus close delimiter [ 132.985840][ T2288] hid (null): invalid report_count 159310733 [ 132.993273][ T2288] hid (null): unknown global tag 0xd [ 133.003014][ T2288] hid (null): global environment stack overflow [ 133.012647][ T6543] fscrypt (loop3, inode 12): Direct key flag not allowed with different contents and filenames modes [ 133.013775][ T2288] hid (null): unknown global tag 0xc [ 133.035673][ T2288] hid (null): unknown global tag 0xd [ 133.077469][ T2288] usb 5-1: USB disconnect, device number 4 [ 133.208259][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 133.271290][ T6556] loop3: detected capacity change from 0 to 1024 [ 133.334586][ T6556] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 133.362707][ T6556] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 133.451926][ T6556] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,nouid32,noblock_validity,quota,journal_dev=0x0000000000000007,nouid32,nomblk_io_submit,noinit_itable,dioread_nolock,,errors=continue. Quota mode: writeback. [ 133.488446][ T6556] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.550267][ T6545] netlink: 36 bytes leftover after parsing attributes in process `syz.1.807'. [ 133.648262][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 133.758329][ T21] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 133.798469][ T21] usb 2-1: can't read configurations, error -71 [ 134.403889][ T6606] loop0: detected capacity change from 0 to 1024 [ 134.789507][ T6618] trusted_key: encrypted_key: keyword 'upäate' not recognized [ 135.094638][ T6575] loop4: detected capacity change from 0 to 40427 [ 135.216780][ T6575] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 135.260888][ T6575] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 135.295462][ T6635] loop1: detected capacity change from 0 to 4096 [ 135.338332][ T6575] F2FS-fs (loop4): invalid crc value [ 135.396584][ T6575] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 135.446920][ T6635] EXT4-fs (loop1): cluster size (1024) smaller than block size (4096) [ 135.602967][ T6647] sctp: [Deprecated]: syz.3.837 (pid 6647) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.602967][ T6647] Use struct sctp_sack_info instead [ 135.753958][ T6655] loop1: detected capacity change from 0 to 512 [ 135.796993][ T6575] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 135.847607][ T6575] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 136.115796][ T6621] loop0: detected capacity change from 0 to 32768 [ 136.226168][ T6621] (syz.0.830,6621,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 136.346026][ T6621] (syz.0.830,6621,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 136.419496][ T6621] JBD2: Ignoring recovery information on journal [ 136.697427][ T6621] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 137.094756][ T4187] ocfs2: Unmounting device (7,0) on (node local) [ 137.166780][ T6663] loop2: detected capacity change from 0 to 32768 [ 137.651743][ T6706] sctp: [Deprecated]: syz.4.859 (pid 6706) Use of int in maxseg socket option. [ 137.651743][ T6706] Use struct sctp_assoc_value instead [ 137.985234][ T6724] loop3: detected capacity change from 0 to 512 [ 138.453134][ T6750] input: syz0 as /devices/virtual/input/input8 [ 138.630354][ T6756] loop3: detected capacity change from 0 to 16 [ 138.712035][ T6759] binder: 6757:6759 ioctl c0306201 2000000004c0 returned -14 [ 138.732853][ T6756] erofs: (device loop3): mounted with root inode @ nid 36. [ 139.263791][ T6794] loop2: detected capacity change from 0 to 8 [ 139.468128][ T2288] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 139.480943][ T6796] loop2: detected capacity change from 0 to 64 [ 139.510907][ T6785] loop1: detected capacity change from 0 to 32768 [ 139.663019][ T6785] XFS (loop1): Mounting V5 Filesystem [ 139.738213][ T2288] usb 1-1: Using ep0 maxpacket: 8 [ 139.776632][ T6785] XFS (loop1): Ending clean mount [ 139.860354][ T2288] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 139.885600][ T2288] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.931710][ T4188] XFS (loop1): Unmounting Filesystem [ 139.974311][ T2288] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.048165][ T2288] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.082651][ T6817] loop2: detected capacity change from 0 to 1024 [ 140.090565][ T2288] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.118740][ T2288] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 140.125648][ T6817] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 140.152505][ T2288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.185053][ T6817] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 140.220193][ T6823] loop3: detected capacity change from 0 to 512 [ 140.269008][ T6823] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 140.315238][ T6817] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,nouid32,noblock_validity,quota,journal_dev=0x0000000000000007,nouid32,nomblk_io_submit,noinit_itable,dioread_nolock,,errors=continue. Quota mode: writeback. [ 140.325233][ T6821] loop4: detected capacity change from 0 to 4096 [ 140.346192][ T6817] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.356176][ T6823] UDF-fs: error (device loop3): udf_read_inode: (ino 19) failed ident=264 [ 140.493976][ T2288] usb 1-1: GET_CAPABILITIES returned 0 [ 140.508260][ T2288] usbtmc 1-1:16.0: can't read capabilities [ 140.591575][ T6821] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 140.763007][ T21] usb 1-1: USB disconnect, device number 5 [ 140.923565][ T6834] input: syz0 as /devices/virtual/input/input9 [ 141.298257][ T4232] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 141.368426][ T1333] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 141.571707][ T4232] usb 4-1: Using ep0 maxpacket: 16 [ 141.708394][ T4232] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.748189][ T4232] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.804945][ T1333] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 141.823634][ T1333] usb 5-1: config 0 has no interface number 0 [ 141.833884][ T1333] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.849122][ T4232] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 141.858383][ T1333] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.876396][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 141.899796][ T4232] usb 4-1: SerialNumber: syz [ 141.961401][ T4232] usb 4-1: 0:2 : does not exist [ 141.963845][ T1333] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.057012][ T1333] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 142.091217][ T1333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.120007][ T1333] usb 5-1: config 0 descriptor?? [ 142.305122][ T6896] IPVS: sh: FWM 4 0x00000004 - no destination available [ 142.381120][ T6896] syz.0.940 (6896) used greatest stack depth: 19552 bytes left [ 142.424826][ T6904] usbcore.quirks: string doesn't fit in 127 chars. [ 142.599685][ T1333] hid (null): global environment stack underflow [ 142.710399][ T6915] loop0: detected capacity change from 0 to 512 [ 142.823186][ T6915] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 142.842921][ T1333] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.0007/input/input10 [ 142.863429][ T4232] usb 4-1: USB disconnect, device number 4 [ 142.899570][ T6915] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.949: invalid indirect mapped block 9 (level 0) [ 142.978360][ T6915] EXT4-fs (loop0): 1 truncate cleaned up [ 142.990035][ T6915] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none. [ 143.026592][ T1333] uclogic 0003:28BD:0042.0007: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1 [ 143.112005][ T1333] usb 5-1: USB disconnect, device number 5 [ 143.158807][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.291472][ T6932] fido_id[6932]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 143.345008][ T6938] netlink: 28 bytes leftover after parsing attributes in process `syz.3.959'. [ 143.476308][ T6946] loop3: detected capacity change from 0 to 1024 [ 143.640984][ T6946] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 143.769802][ T6946] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.822456][ T6953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.964'. [ 143.903225][ T6946] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.961: Freeing blocks not in datazone - block = 0, count = 16 [ 143.973382][ T4497] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 144.003608][ T6946] EXT4-fs (loop3): Remounting filesystem read-only [ 144.266350][ T6969] bridge0: port 1(bridge_slave_0) entered listening state [ 144.343056][ T6969] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.368360][ T4497] usb 1-1: too many configurations: 187, using maximum allowed: 8 [ 144.422619][ T6972] netlink: 'syz.2.972': attribute type 5 has an invalid length. [ 144.442258][ T6947] loop1: detected capacity change from 0 to 32768 [ 144.458408][ T4497] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 144.483021][ T4497] usb 1-1: can't read configurations, error -71 [ 144.617683][ T6978] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 144.766310][ T6984] loop4: detected capacity change from 0 to 512 [ 144.865034][ T6984] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 144.907936][ T6991] rose0: tun_chr_ioctl cmd 1074025672 [ 144.946291][ T6991] rose0: ignored: set checksum enabled [ 144.956275][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.983'. [ 144.997224][ T6984] UDF-fs: error (device loop4): udf_read_inode: (ino 19) failed ident=264 [ 145.295666][ T7002] loop4: detected capacity change from 0 to 1024 [ 145.351167][ T7000] loop2: detected capacity change from 0 to 8192 [ 145.387547][ T7004] loop1: detected capacity change from 0 to 4096 [ 145.436570][ T7000] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 145.463246][ T7002] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 145.480499][ T7000] REISERFS (device loop2): using ordered data mode [ 145.480545][ T7000] reiserfs: using flush barriers [ 145.496981][ T7000] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 145.497343][ T7000] REISERFS (device loop2): checking transaction log (loop2) [ 145.506895][ T7004] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.604828][ T7002] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 145.680869][ T7012] EXT4-fs error (device loop1): ext4_get_first_dir_block:3617: inode #12: block 80: comm syz.1.977: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 145.778278][ T6998] loop3: detected capacity change from 0 to 32768 [ 145.808157][ T7012] EXT4-fs error (device loop1): ext4_get_first_dir_block:3619: inode #12: comm syz.1.977: directory missing '..' [ 145.870502][ T7014] EXT4-fs error (device loop1): ext4_empty_dir:3154: inode #12: block 80: comm syz.1.977: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 145.941655][ T7014] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz.1.977: directory missing '..' [ 145.984697][ T7004] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.977: corrupted inode contents [ 146.001377][ T7000] REISERFS (device loop2): Using r5 hash to sort names [ 146.032807][ T6998] XFS (loop3): Mounting V5 Filesystem [ 146.057257][ T7004] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #15: comm syz.1.977: mark_inode_dirty error [ 146.084972][ T7000] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 146.091156][ T6998] XFS (loop3): Ending clean mount [ 146.120282][ T7004] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.977: corrupted inode contents [ 146.137586][ T7004] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #15: comm syz.1.977: mark_inode_dirty error [ 146.255339][ T7004] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.977: corrupted inode contents [ 146.258511][ T7000] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3385, free_space(entry_count) 2 [ 146.366546][ T7004] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #15: comm syz.1.977: mark_inode_dirty error [ 146.431791][ T4198] XFS (loop3): Unmounting Filesystem [ 146.458594][ T7004] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.977: corrupted inode contents [ 146.488250][ T7000] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 146.618088][ T7000] REISERFS (device loop2): Remounting filesystem read-only [ 146.636706][ T7039] loop4: detected capacity change from 0 to 128 [ 146.797402][ T7039] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.836123][ T7039] ext4 filesystem being mounted at /176/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.942924][ T7039] EXT4-fs warning (device loop4): ext4_group_extend:1847: will only finish group (8193 blocks, 8129 new) [ 147.012917][ T7039] EXT4-fs warning (device loop4): ext4_group_extend:1852: can't read last block, resize aborted [ 147.026029][ T7048] loop0: detected capacity change from 0 to 512 [ 147.123003][ T7048] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1001: invalid indirect mapped block 10 (level 1) [ 147.254302][ T7048] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1001: invalid indirect mapped block 8 (level 1) [ 147.327985][ T7048] EXT4-fs (loop0): 1 truncate cleaned up [ 147.355185][ T7048] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000001,,errors=continue. Quota mode: none. [ 147.558545][ T7048] EXT4-fs (loop0): shut down requested (1) [ 147.586115][ T7064] Trying to free block not in datazone [ 147.616233][ T7073] netlink: 'syz.3.1008': attribute type 1 has an invalid length. [ 147.735710][ T7076] set_capacity_and_notify: 1 callbacks suppressed [ 147.735726][ T7076] loop4: detected capacity change from 0 to 256 [ 147.830263][ T7078] loop3: detected capacity change from 0 to 1024 [ 147.953704][ T7076] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 148.000858][ T7084] loop1: detected capacity change from 0 to 256 [ 148.060877][ T26] audit: type=1800 audit(1785438859.347:19): pid=7076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1010" name="file1" dev="loop4" ino=1048630 res=0 errno=0 [ 148.062005][ T7076] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 148.189983][ T7076] exFAT-fs (loop4): Filesystem has been set read-only [ 148.211329][ T7084] FAT-fs (loop1): Directory bread(block 64) failed [ 148.241154][ T7084] FAT-fs (loop1): Directory bread(block 65) failed [ 148.266018][ T7060] loop2: detected capacity change from 0 to 32768 [ 148.275105][ T7087] exFAT-fs (loop4): hint_cluster is invalid (1) [ 148.331121][ T7084] FAT-fs (loop1): Directory bread(block 66) failed [ 148.378388][ T7084] FAT-fs (loop1): Directory bread(block 67) failed [ 148.393854][ T7087] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 148.413968][ T7060] (syz.2.1005,7060,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 148.438630][ T7084] FAT-fs (loop1): Directory bread(block 68) failed [ 148.447125][ T7087] exFAT-fs (loop4): error, failed to bmap (inode : ffff88807034a860 iblock : 9, err : -5) [ 148.472806][ T7084] FAT-fs (loop1): Directory bread(block 69) failed [ 148.488489][ T7084] FAT-fs (loop1): Directory bread(block 70) failed [ 148.503973][ T7084] FAT-fs (loop1): Directory bread(block 71) failed [ 148.512330][ T7060] (syz.2.1005,7060,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 148.519249][ T7087] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 148.543798][ T7084] FAT-fs (loop1): Directory bread(block 72) failed [ 148.578234][ T7084] FAT-fs (loop1): Directory bread(block 73) failed [ 148.604566][ T7060] (syz.2.1005,7060,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 148.673684][ T7087] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 148.708384][ T7060] JBD2: Ignoring recovery information on journal [ 148.913425][ T7060] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 148.999038][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 149.252131][ T7126] input: syz1 as /devices/virtual/input/input11 [ 149.363835][ T7128] loop3: detected capacity change from 0 to 128 [ 149.396587][ T7128] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 149.399026][ T4196] ocfs2: Unmounting device (7,2) on (node local) [ 149.428365][ T4232] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 149.467442][ T26] audit: type=1800 audit(1785438860.747:20): pid=7128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1032" name="file1" dev="loop3" ino=94 res=0 errno=0 [ 149.492585][ T4965] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 149.550973][ T26] audit: type=1800 audit(1785438860.787:21): pid=7128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1032" name="file1" dev="loop3" ino=94 res=0 errno=0 [ 149.658948][ T7130] bridge0: port 1(bridge_slave_0) entered listening state [ 149.695505][ T7130] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.716067][ T4232] usb 1-1: Using ep0 maxpacket: 16 [ 149.833750][ T7138] loop1: detected capacity change from 0 to 16 [ 149.848707][ T4232] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 149.893891][ T7138] erofs: (device loop1): mounted with root inode @ nid 36. [ 149.904697][ T4965] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 149.924178][ T4965] usb 5-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 149.961946][ T7138] attempt to access beyond end of device [ 149.961946][ T7138] loop1: rw=0, want=40, limit=16 [ 149.974912][ T4965] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 150.000096][ T7138] attempt to access beyond end of device [ 150.000096][ T7138] loop1: rw=0, want=40, limit=16 [ 150.014520][ T4965] usb 5-1: config 220 interface 0 has no altsetting 0 [ 150.024579][ T4965] usb 5-1: config 220 interface 1 has no altsetting 0 [ 150.040899][ T7138] attempt to access beyond end of device [ 150.040899][ T7138] loop1: rw=524288, want=48, limit=16 [ 150.059357][ T4232] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 150.071868][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.084466][ T7138] attempt to access beyond end of device [ 150.084466][ T7138] loop1: rw=524288, want=40, limit=16 [ 150.096177][ T4232] usb 1-1: Product: syz [ 150.101081][ T4232] usb 1-1: Manufacturer: syz [ 150.107759][ T4232] usb 1-1: SerialNumber: syz [ 150.130354][ T4232] usb 1-1: config 0 descriptor?? [ 150.199900][ T4232] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 150.228295][ T4965] usb 5-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 150.253205][ T4965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.264141][ T4232] usb 1-1: Detected FT232RL [ 150.269812][ T4965] usb 5-1: Product: syz [ 150.275242][ T4965] usb 5-1: Manufacturer: syz [ 150.295612][ T4965] usb 5-1: SerialNumber: syz [ 150.357268][ T7148] loop2: detected capacity change from 0 to 8192 [ 150.408186][ T4232] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 150.460097][ T7155] loop3: detected capacity change from 0 to 64 [ 150.534751][ T7155] attempt to access beyond end of device [ 150.534751][ T7155] loop3: rw=34817, want=69, limit=64 [ 150.592764][ T7155] attempt to access beyond end of device [ 150.592764][ T7155] loop3: rw=34817, want=74, limit=64 [ 150.680078][ T4965] usb 5-1: selecting invalid altsetting 0 [ 150.759314][ T4232] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 150.770429][ T4965] usb 5-1: selecting invalid altsetting 0 [ 150.776582][ T4965] usbtest: probe of 5-1:220.1 failed with error -22 [ 150.777916][ T7155] attempt to access beyond end of device [ 150.777916][ T7155] loop3: rw=34817, want=2117, limit=64 [ 150.802438][ T7151] loop1: detected capacity change from 0 to 32768 [ 150.820553][ T4965] usb 5-1: USB disconnect, device number 6 [ 150.881609][ T7158] loop2: detected capacity change from 0 to 4096 [ 150.935717][ T7151] XFS (loop1): Mounting V5 Filesystem [ 150.960330][ T2240] usb 1-1: USB disconnect, device number 8 [ 150.965122][ T7158] NILFS (loop2): invalid segment: Checksum error in segment payload [ 150.975758][ T7158] NILFS (loop2): trying rollback from an earlier position [ 151.021047][ T7158] NILFS (loop2): recovery complete [ 151.060943][ T7167] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.084390][ T7155] attempt to access beyond end of device [ 151.084390][ T7155] loop3: rw=34817, want=4165, limit=64 [ 151.111913][ T2240] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 151.185631][ T2240] ftdi_sio 1-1:0.0: device disconnected [ 151.197959][ T7155] attempt to access beyond end of device [ 151.197959][ T7155] loop3: rw=34817, want=4171, limit=64 [ 151.252513][ T7151] XFS (loop1): Ending clean mount [ 151.268736][ T7151] XFS (loop1): Quotacheck needed: Please wait. [ 151.289969][ T7155] attempt to access beyond end of device [ 151.289969][ T7155] loop3: rw=34817, want=4194, limit=64 [ 151.392291][ T7151] XFS (loop1): Quotacheck: Done. [ 151.400472][ T7175] bridge0: port 1(bridge_slave_0) entered listening state [ 151.430569][ T7151] XFS (loop1): User initiated shutdown received. [ 151.458726][ T7151] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 151.464891][ T7175] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.493919][ T7151] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 151.554511][ T4188] XFS (loop1): Unmounting Filesystem [ 152.207257][ T7197] device bond0 entered promiscuous mode [ 152.248694][ T7197] device bond_slave_0 entered promiscuous mode [ 152.268287][ T7197] device bond_slave_1 entered promiscuous mode [ 152.289911][ T7197] device bond0 left promiscuous mode [ 152.338291][ T7197] device bond_slave_0 left promiscuous mode [ 152.369653][ T7203] Format for deleting device is "id" (uint). [ 152.370500][ T7197] device bond_slave_1 left promiscuous mode [ 152.624127][ T7178] XFS (loop2): Mounting V5 Filesystem [ 152.730845][ T7178] XFS (loop2): Ending clean mount [ 152.756773][ T7220] set_capacity_and_notify: 2 callbacks suppressed [ 152.756799][ T7220] loop1: detected capacity change from 0 to 736 [ 152.815585][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1068'. [ 152.869481][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1068'. [ 153.156985][ T4196] XFS (loop2): Unmounting Filesystem [ 153.501867][ T7241] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 153.686806][ T7236] loop4: detected capacity change from 0 to 32768 [ 153.998419][ T7236] XFS (loop4): Mounting V5 Filesystem [ 154.036152][ T7243] loop1: detected capacity change from 0 to 32768 [ 154.079795][ T7236] XFS (loop4): Ending clean mount [ 154.119418][ T1333] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 154.141425][ T7263] loop2: detected capacity change from 0 to 64 [ 154.204880][ T4190] XFS (loop4): Unmounting Filesystem [ 154.243286][ T7243] XFS (loop1): Mounting V5 Filesystem [ 154.302072][ T7263] Trying to free block not in datazone [ 154.418145][ T1333] usb 4-1: Using ep0 maxpacket: 16 [ 154.571925][ T7250] loop0: detected capacity change from 0 to 32768 [ 154.600743][ T7243] XFS (loop1): Ending clean mount [ 154.608644][ T1333] usb 4-1: unable to get BOS descriptor or descriptor too short [ 154.757642][ T7250] XFS (loop0): Mounting V5 Filesystem [ 154.767541][ T1333] usb 4-1: config 5 has an invalid interface number: 248 but max is 0 [ 154.792733][ T1333] usb 4-1: config 5 has no interface number 0 [ 154.837252][ T1333] usb 4-1: config 5 interface 248 altsetting 4 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 154.873828][ T7282] kvm [7280]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010004 data 0x81 [ 154.912789][ T1333] usb 4-1: config 5 interface 248 has no altsetting 0 [ 154.971319][ T7250] XFS (loop0): Ending clean mount [ 155.014328][ T4188] XFS (loop1): Unmounting Filesystem [ 155.028236][ T4232] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 155.104140][ T7291] loop4: detected capacity change from 0 to 128 [ 155.131923][ T4187] XFS (loop0): Unmounting Filesystem [ 155.222671][ T1333] usb 4-1: string descriptor 0 read error: -22 [ 155.246878][ T1333] usb 4-1: New USB device found, idVendor=2304, idProduct=022e, bcdDevice=32.6b [ 155.258053][ T1333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.283645][ T4232] usb 3-1: Using ep0 maxpacket: 16 [ 155.433776][ T4232] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.461377][ T4232] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.574470][ T1333] dvb-usb: found a 'Pinnacle Expresscard 320cx' in warm state. [ 155.590270][ T1333] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 155.638463][ T1333] dvbdev: DVB: registering new adapter (Pinnacle Expresscard 320cx) [ 155.658513][ T4232] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.668233][ T1333] usb 4-1: media controller created [ 155.687291][ T7295] loop4: detected capacity change from 0 to 4096 [ 155.695979][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.704845][ T4232] usb 3-1: Product: syz [ 155.714831][ T1333] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.723863][ T4232] usb 3-1: Manufacturer: syz [ 155.732265][ T4232] usb 3-1: SerialNumber: syz [ 155.764747][ T7295] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 155.788766][ T7295] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 155.795205][ T1333] DVB: Unable to find symbol dib7000p_attach() [ 155.818575][ T1333] dvb-usb: no frontend was attached by 'Pinnacle Expresscard 320cx' [ 155.818812][ T7295] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 155.879987][ T7295] ntfs: volume version 3.1. [ 155.903756][ T1333] rc_core: IR keymap rc-dib0700-rc5 not found [ 155.910306][ T1333] Registered IR keymap rc-empty [ 155.933556][ T1333] dvb-usb: could not initialize remote control. [ 155.955426][ T1333] dvb-usb: Pinnacle Expresscard 320cx successfully initialized and connected. [ 156.028571][ T1333] dib0700: There's no endpoint for remote controller [ 156.058261][ T4232] usb 3-1: 0:2 : does not exist [ 156.091479][ T7308] loop0: detected capacity change from 0 to 1024 [ 156.111991][ T4232] usb 3-1: USB disconnect, device number 8 [ 156.128251][ T4190] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 156.262502][ T7308] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 156.318515][ T1333] usb 4-1: USB disconnect, device number 5 [ 156.327775][ T7308] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.348916][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.391095][ T1333] dvb-usb: Pinnacle Expresscard 320cx successfully deinitialized and disconnected. [ 156.634347][ T7326] loop4: detected capacity change from 0 to 128 [ 156.702233][ T7327] loop0: detected capacity change from 0 to 4096 [ 156.748629][ T7326] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 156.793752][ T7327] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 156.811527][ T26] audit: type=1800 audit(1785438868.097:22): pid=7326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1101" name="file1" dev="loop4" ino=94 res=0 errno=0 [ 156.960909][ T7336] EXT4-fs error (device loop0): ext4_get_first_dir_block:3617: inode #12: block 80: comm syz.0.1102: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 156.998084][ T26] audit: type=1800 audit(1785438868.137:23): pid=7326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1101" name="file1" dev="loop4" ino=94 res=0 errno=0 [ 157.128525][ T7337] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 157.252133][ T7336] EXT4-fs error (device loop0): ext4_get_first_dir_block:3619: inode #12: comm syz.0.1102: directory missing '..' [ 157.314473][ T7327] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.1102: corrupted inode contents [ 157.315792][ T7339] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz.0.1102: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 157.338475][ T7345] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1109'. [ 157.427485][ T7327] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #15: comm syz.0.1102: mark_inode_dirty error [ 157.567887][ T7339] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.1102: directory missing '..' [ 157.601182][ T7327] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.1102: corrupted inode contents [ 157.607187][ T7348] netlink: 'syz.1.1110': attribute type 10 has an invalid length. [ 157.688283][ T7348] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1110'. [ 157.812852][ T7327] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.1102: mark_inode_dirty error [ 157.825133][ T7327] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.1102: corrupted inode contents [ 157.964288][ T7327] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.1102: mark_inode_dirty error [ 157.972956][ T7331] XFS (loop2): Mounting V5 Filesystem [ 157.982947][ T7359] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 158.014811][ T7327] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.1102: corrupted inode contents [ 158.048805][ T7368] set_capacity_and_notify: 3 callbacks suppressed [ 158.048821][ T7368] loop5: detected capacity change from 0 to 7 [ 158.092515][ T7368] Dev loop5: unable to read RDB block 7 [ 158.108722][ T7368] loop5: unable to read partition table [ 158.116497][ T7368] loop5: partition table beyond EOD, truncated [ 158.223134][ T7376] loop4: detected capacity change from 0 to 128 [ 158.236044][ T7368] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 158.274016][ T7378] netlink: 884 bytes leftover after parsing attributes in process `syz.0.1118'. [ 158.303392][ T7331] XFS (loop2): Ending clean mount [ 158.319706][ T7376] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 158.357746][ T7376] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 158.429445][ T4196] XFS (loop2): Unmounting Filesystem [ 158.464327][ T144] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 158.576268][ T7384] loop3: detected capacity change from 0 to 4096 [ 158.705065][ T7398] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.093942][ T7407] loop0: detected capacity change from 0 to 8 [ 159.215280][ T7415] netlink: 'syz.2.1137': attribute type 1 has an invalid length. [ 159.481895][ T7429] loop1: detected capacity change from 0 to 8 [ 159.611990][ T7433] loop3: detected capacity change from 0 to 1024 [ 159.689836][ T7433] EXT4-fs (loop3): Ignoring removed bh option [ 159.711847][ T7433] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 159.815138][ T7444] loop4: detected capacity change from 0 to 256 [ 159.888767][ T7433] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,norecovery,bsddf,dioread_nolock,. Quota mode: none. [ 160.434721][ T7472] loop3: detected capacity change from 0 to 8 [ 160.443527][ T7467] loop2: detected capacity change from 0 to 8192 [ 160.542086][ T7467] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 160.597859][ T7467] REISERFS (device loop2): using ordered data mode [ 160.606287][ T7467] reiserfs: using flush barriers [ 160.617241][ T7467] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 160.636639][ T7481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1165'. [ 160.649461][ T7481] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1165'. [ 160.788469][ T7467] REISERFS (device loop2): checking transaction log (loop2) [ 160.916509][ T7487] loop1: detected capacity change from 0 to 256 [ 160.956192][ T7487] exfat: Deprecated parameter 'utf8' [ 161.008853][ T7487] exfat: Deprecated parameter 'namecase' [ 161.018407][ T7487] exfat: Deprecated parameter 'namecase' [ 161.024149][ T7487] exfat: Deprecated parameter 'namecase' [ 161.037823][ T7459] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 161.042465][ T7467] REISERFS (device loop2): Using tea hash to sort names [ 161.054576][ T7467] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 161.073671][ T7459] BTRFS info (device loop0): using free space tree [ 161.120405][ T7459] BTRFS info (device loop0): has skinny extents [ 161.131703][ T7487] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 161.511301][ T7459] BTRFS info (device loop0): enabling ssd optimizations [ 161.653640][ T7519] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 161.701724][ T7519] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.943255][ T26] audit: type=1800 audit(2000000001.920:24): pid=7523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1177" name="max_speed" dev="configfs" ino=43761 res=0 errno=0 [ 161.994698][ T4181] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 9 /dev/loop0 scanned by udevd (4181) [ 162.419977][ T7529] EXT4-fs (loop1): Ignoring removed nobh option [ 162.525412][ T7529] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 162.554118][ T7521] XFS (loop4): Mounting V5 Filesystem [ 162.560027][ T7525] XFS (loop2): Mounting V5 Filesystem [ 162.566618][ T7529] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.591780][ T7529] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.1179: corrupted inode contents [ 162.651021][ T7521] XFS (loop4): Ending clean mount [ 162.659406][ T7529] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #2: comm syz.1.1179: mark_inode_dirty error [ 162.680721][ T7529] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.1179: corrupted inode contents [ 162.692465][ T7525] XFS (loop2): Ending clean mount [ 162.692780][ T4231] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 162.736105][ T4190] XFS (loop4): Unmounting Filesystem [ 162.752590][ T7529] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.1179: mark_inode_dirty error [ 162.900174][ T7553] kvm [7552]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010002 data 0xf [ 162.916018][ T4196] XFS (loop2): Unmounting Filesystem [ 162.946422][ T4231] usb 1-1: Using ep0 maxpacket: 8 [ 163.081792][ T4231] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 163.118500][ T7558] input: syz0 as /devices/virtual/input/input13 [ 163.256160][ T4231] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 163.278852][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.286888][ T4231] usb 1-1: Product: syz [ 163.298222][ T4231] usb 1-1: Manufacturer: syz [ 163.302869][ T4231] usb 1-1: SerialNumber: syz [ 163.336117][ T4231] usb 1-1: config 0 descriptor?? [ 163.390078][ T4231] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 163.425026][ T4231] usb 1-1: setting power ON [ 163.433466][ T4231] dvb-usb: bulk message failed: -22 (2/0) [ 163.443819][ T7563] set_capacity_and_notify: 5 callbacks suppressed [ 163.443836][ T7563] loop4: detected capacity change from 0 to 64 [ 163.485964][ T4231] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 163.518394][ T4231] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 163.532053][ T4231] usb 1-1: media controller created [ 163.587355][ T7563] handle_bad_sector: 8 callbacks suppressed [ 163.587374][ T7563] attempt to access beyond end of device [ 163.587374][ T7563] loop4: rw=34817, want=69, limit=64 [ 163.593996][ T7531] dvb-usb: bulk message failed: -22 (3/0) [ 163.626235][ T4231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.672570][ T7568] loop2: detected capacity change from 0 to 2048 [ 163.675021][ T7531] dvb-usb: bulk message failed: -22 (4/0) [ 163.686210][ T7563] attempt to access beyond end of device [ 163.686210][ T7563] loop4: rw=34817, want=74, limit=64 [ 163.707486][ T4231] usb 1-1: selecting invalid altsetting 6 [ 163.728105][ T4231] usb 1-1: digital interface selection failed (-22) [ 163.735004][ T7569] dvb-usb: bulk message failed: -22 (5/0) [ 163.758066][ T4231] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 163.795792][ T7563] attempt to access beyond end of device [ 163.795792][ T7563] loop4: rw=34817, want=2117, limit=64 [ 163.814658][ T7568] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.825466][ T7556] loop3: detected capacity change from 0 to 32768 [ 163.832956][ T4231] usb 1-1: setting power OFF [ 163.838758][ T4231] dvb-usb: bulk message failed: -22 (2/0) [ 163.859215][ T4231] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 163.873280][ T4231] (NULL device *): no alternate interface [ 163.912715][ T4231] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 163.932481][ T4231] usb 1-1: USB disconnect, device number 9 [ 163.960394][ T7563] attempt to access beyond end of device [ 163.960394][ T7563] loop4: rw=34817, want=4165, limit=64 [ 164.084895][ T7563] attempt to access beyond end of device [ 164.084895][ T7563] loop4: rw=34817, want=4171, limit=64 [ 164.132775][ T7563] attempt to access beyond end of device [ 164.132775][ T7563] loop4: rw=34817, want=4194, limit=64 [ 164.146183][ T7563] attempt to access beyond end of device [ 164.146183][ T7563] loop4: rw=34817, want=4362, limit=64 [ 164.170995][ T7563] attempt to access beyond end of device [ 164.170995][ T7563] loop4: rw=34817, want=4385, limit=64 [ 164.183013][ T7563] attempt to access beyond end of device [ 164.183013][ T7563] loop4: rw=34817, want=4417, limit=64 [ 164.237819][ T7582] loop1: detected capacity change from 0 to 512 [ 164.240954][ T7563] attempt to access beyond end of device [ 164.240954][ T7563] loop4: rw=34817, want=4450, limit=64 [ 164.248049][ T6212] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 164.276178][ T6212] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 164.289190][ T6212] EXT4-fs (loop2): This should not happen!! Data will be lost [ 164.289190][ T6212] [ 164.299744][ T6212] EXT4-fs (loop2): Total free blocks count 0 [ 164.305780][ T6212] EXT4-fs (loop2): Free/Dirty block details [ 164.312241][ T6212] EXT4-fs (loop2): free_blocks=4096 [ 164.317741][ T6212] EXT4-fs (loop2): dirty_blocks=512 [ 164.323437][ T6212] EXT4-fs (loop2): Block reservation details [ 164.335100][ T7582] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 164.355622][ T6212] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 164.382565][ T7582] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0102] [ 164.393811][ T6212] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 164.414475][ T7582] EXT4-fs (loop1): orphan cleanup on readonly fs [ 164.422686][ T6212] EXT4-fs (loop2): This should not happen!! Data will be lost [ 164.422686][ T6212] [ 164.472555][ T7582] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.1189: attempt to clear invalid blocks 1024 len 1 [ 164.501178][ T7582] EXT4-fs (loop1): Remounting filesystem read-only [ 164.542525][ T7582] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1189: bg 0: block 361: padding at end of block bitmap is not set [ 164.628740][ T7582] EXT4-fs (loop1): Remounting filesystem read-only [ 164.635642][ T7582] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 164.680354][ T7582] EXT4-fs (loop1): Remounting filesystem read-only [ 164.718261][ T7582] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1189: invalid indirect mapped block 1811939328 (level 0) [ 164.782523][ T7582] EXT4-fs (loop1): Remounting filesystem read-only [ 164.797905][ T7582] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1189: invalid indirect mapped block 2185560079 (level 1) [ 164.859212][ T7582] EXT4-fs (loop1): Remounting filesystem read-only [ 164.915140][ T7582] EXT4-fs (loop1): 1 truncate cleaned up [ 164.939434][ T7582] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,abort. Quota mode: none. [ 164.987164][ T7600] loop3: detected capacity change from 0 to 4096 [ 165.106701][ T7600] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 165.363369][ T7623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1206'. [ 165.553570][ T7635] loop0: detected capacity change from 0 to 256 [ 165.596769][ T7634] loop2: detected capacity change from 0 to 1024 [ 165.662913][ T26] audit: type=1800 audit(2000000005.640:25): pid=7644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1216" name="max_speed" dev="configfs" ino=44025 res=0 errno=0 [ 165.722919][ T7634] EXT4-fs error (device loop2): ext4_fill_super:4872: comm syz.2.1212: inode #2: comm syz.2.1212: iget: illegal inode # [ 165.760048][ T7634] EXT4-fs (loop2): get root inode failed [ 165.765770][ T7634] EXT4-fs (loop2): mount failed [ 166.055045][ T7656] loop2: detected capacity change from 0 to 1024 [ 166.145547][ T7656] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,dioread_lock,data_err=ignore,,errors=continue. Quota mode: none. [ 166.191215][ T7663] loop0: detected capacity change from 0 to 128 [ 166.203628][ T7656] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.2.1220: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0 [ 166.232074][ T7656] EXT4-fs error (device loop2) in ext4_delete_inline_entry:1808: Corrupt filesystem [ 166.239994][ T7661] pimreg1: tun_chr_ioctl cmd 35108 [ 166.341765][ T7663] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 166.376237][ T7665] netem: change failed [ 166.437445][ T7663] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.682996][ T7682] loop4: detected capacity change from 0 to 1024 [ 166.693317][ T7685] scsi_dev_info_list_add_str: bad dev info string 'Ÿ¿‚¥˜_' '' '(null)' [ 166.857670][ T7690] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 167.381717][ T7705] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 167.419416][ T7705] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 167.444418][ T7709] netlink: 'syz.0.1242': attribute type 1 has an invalid length. [ 167.463212][ T7705] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 167.489923][ T7709] netlink: 'syz.0.1242': attribute type 2 has an invalid length. [ 167.514342][ T7705] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.530831][ T7710] netlink: 'syz.0.1242': attribute type 1 has an invalid length. [ 167.577364][ T7710] netlink: 'syz.0.1242': attribute type 2 has an invalid length. [ 167.882099][ T7695] XFS (loop3): Mounting V5 Filesystem [ 168.046141][ T7695] XFS (loop3): Ending clean mount [ 168.047631][ T7693] F2FS-fs (loop1): invalid crc value [ 168.058427][ T7695] XFS (loop3): Quotacheck needed: Please wait. [ 168.145328][ T7695] XFS (loop3): Quotacheck: Done. [ 168.180882][ T7693] F2FS-fs (loop1): Found nat_bits in checkpoint [ 168.293570][ T26] audit: type=1800 audit(2000000008.270:26): pid=7695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1237" name="bus" dev="loop3" ino=9291 res=0 errno=0 [ 168.314175][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.402179][ T7739] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 168.423863][ T7693] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 168.473663][ T4198] XFS (loop3): Unmounting Filesystem [ 168.502399][ T7739] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.558880][ T7693] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 168.950871][ T7756] set_capacity_and_notify: 7 callbacks suppressed [ 168.950888][ T7756] loop0: detected capacity change from 0 to 512 [ 169.040251][ T7756] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 169.083205][ T7756] EXT4-fs (loop0): inline encryption not supported [ 169.090359][ T7756] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 169.154771][ T7756] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 169.182633][ T7756] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1256: bg 0: block 248: padding at end of block bitmap is not set [ 169.202885][ T7756] Quota error (device loop0): write_blk: dquota write failed [ 169.215573][ T7756] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 169.225961][ T7756] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.1256: Failed to acquire dquot type 1 [ 169.250351][ T7756] EXT4-fs (loop0): 1 truncate cleaned up [ 169.256184][ T7756] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback. [ 169.513498][ T7763] loop1: detected capacity change from 0 to 256 [ 169.579120][ T7753] loop4: detected capacity change from 0 to 40427 [ 169.588726][ T7763] exfat: Deprecated parameter 'namecase' [ 169.594419][ T7763] exfat: Deprecated parameter 'namecase' [ 169.599937][ T7768] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1262'. [ 169.663364][ T7753] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 169.680364][ T7763] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 169.740677][ T7753] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 169.775327][ T7753] F2FS-fs (loop4): invalid crc value [ 169.863773][ T7753] F2FS-fs (loop4): invalid crc value [ 169.878577][ T7753] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 170.533740][ T7785] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 170.584109][ T7785] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 170.819675][ T7798] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000) [ 170.819893][ T7797] loop0: detected capacity change from 0 to 1024 [ 170.964606][ T7804] loop1: detected capacity change from 0 to 64 [ 171.169727][ T7804] handle_bad_sector: 27 callbacks suppressed [ 171.169747][ T7804] attempt to access beyond end of device [ 171.169747][ T7804] loop1: rw=34817, want=69, limit=64 [ 171.232319][ T7810] loop0: detected capacity change from 0 to 512 [ 171.269417][ T7813] mmap: syz.2.1267 (7813) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 171.294314][ T7804] attempt to access beyond end of device [ 171.294314][ T7804] loop1: rw=34817, want=74, limit=64 [ 171.350763][ T7816] raw_sendmsg: syz.3.1291 forgot to set AF_INET. Fix it! [ 171.362282][ T7810] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 171.402412][ T7810] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.493533][ T7804] attempt to access beyond end of device [ 171.493533][ T7804] loop1: rw=34817, want=2117, limit=64 [ 171.691869][ T7804] attempt to access beyond end of device [ 171.691869][ T7804] loop1: rw=34817, want=4165, limit=64 [ 171.728700][ T7804] attempt to access beyond end of device [ 171.728700][ T7804] loop1: rw=34817, want=4171, limit=64 [ 171.788760][ T7804] attempt to access beyond end of device [ 171.788760][ T7804] loop1: rw=34817, want=4194, limit=64 [ 171.827482][ T7824] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 171.831431][ T7804] attempt to access beyond end of device [ 171.831431][ T7804] loop1: rw=34817, want=4362, limit=64 [ 171.881027][ T7824] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 171.913730][ T7804] attempt to access beyond end of device [ 171.913730][ T7804] loop1: rw=34817, want=4385, limit=64 [ 171.978745][ T7804] attempt to access beyond end of device [ 171.978745][ T7804] loop1: rw=34817, want=4417, limit=64 [ 172.049895][ T7804] attempt to access beyond end of device [ 172.049895][ T7804] loop1: rw=34817, want=4450, limit=64 [ 172.635387][ T7849] tap0: tun_chr_ioctl cmd 1074025694 [ 172.804714][ T7854] sch_fq: defrate 512 ignored. [ 172.970536][ T7861] loop1: detected capacity change from 0 to 128 [ 173.053244][ T7861] EXT4-fs (loop1): Ignoring removed orlov option [ 173.061046][ T7861] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 173.107905][ T7840] loop2: detected capacity change from 0 to 32768 [ 173.119321][ T7861] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,nodiscard,noquota,orlov,mblk_io_submit,,errors=continue. Quota mode: none. [ 173.136131][ T7861] ext4 filesystem being mounted at /260/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 173.207080][ T7861] fscrypt (loop1, inode 12): Unsupported encryption flags (0xe5) [ 173.431066][ T7873] device macvlan0 entered promiscuous mode [ 173.464230][ T7840] XFS (loop2): Mounting V5 Filesystem [ 173.468546][ T7873] device dummy0 entered promiscuous mode [ 173.524394][ T7873] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 173.579430][ T7870] loop0: detected capacity change from 0 to 32768 [ 173.580921][ T7873] device hsr1 entered promiscuous mode [ 173.612456][ T7840] XFS (loop2): Ending clean mount [ 173.695461][ T7870] XFS (loop0): Mounting V5 Filesystem [ 173.738655][ T7858] loop4: detected capacity change from 0 to 32768 [ 173.798815][ T26] audit: type=1800 audit(2000000013.770:27): pid=7840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1292" name="file3" dev="loop2" ino=6151 res=0 errno=0 [ 173.843151][ T7858] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 173.870551][ T4196] XFS (loop2): Unmounting Filesystem [ 173.910465][ T7858] BTRFS info (device loop4): using free space tree [ 173.921556][ T7870] XFS (loop0): Ending clean mount [ 173.934591][ T7858] BTRFS info (device loop4): has skinny extents [ 174.018614][ T6240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 174.078523][ T7858] BTRFS info (device loop4): enabling ssd optimizations [ 174.297658][ T7917] input: syz1 as /devices/virtual/input/input14 [ 174.312998][ T4187] XFS (loop0): Unmounting Filesystem [ 174.680952][ T4180] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop4 scanned by udevd (4180) [ 174.744156][ T7921] loop1: detected capacity change from 0 to 4096 [ 174.955102][ T7921] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 175.021979][ T7921] ntfs3: loop1: failed to convert "0000" to iso8859-2 [ 175.085014][ T7921] ntfs3: loop1: failed to convert name for inode 1e. [ 175.512037][ T7943] loop3: detected capacity change from 0 to 1024 [ 175.553144][ T7947] loop4: detected capacity change from 0 to 128 [ 175.610739][ T7943] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 175.674483][ T7943] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 175.683296][ T7947] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.699483][ T7947] ext4 filesystem being mounted at /257/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 175.707336][ T7949] loop1: detected capacity change from 0 to 4096 [ 175.856896][ T7943] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x000000000000000c,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,dioread_nolock,jqfmt=vfsv0,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 175.966574][ T7958] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 176.024149][ T7932] loop2: detected capacity change from 0 to 32768 [ 176.284365][ T7932] XFS (loop2): Mounting V5 Filesystem [ 176.428148][ T4235] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 176.507550][ T7932] XFS (loop2): Ending clean mount [ 176.688097][ T4196] XFS (loop2): Unmounting Filesystem [ 176.890488][ T4235] usb 5-1: unable to get BOS descriptor or descriptor too short [ 177.038132][ T4235] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.062598][ T4235] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.122838][ T7969] loop1: detected capacity change from 0 to 32768 [ 177.398224][ T4235] usb 5-1: string descriptor 0 read error: -22 [ 177.404992][ T4235] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 177.439231][ T4235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.477935][ T7982] loop0: detected capacity change from 0 to 40427 [ 177.524455][ T7982] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 177.528728][ T7998] loop2: detected capacity change from 0 to 256 [ 177.536799][ T4235] usb 5-1: selecting invalid altsetting 1 [ 177.562998][ T7982] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 177.582365][ T4235] usb 5-1: unit 3 not found! [ 177.614642][ T7982] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x1ffff [ 177.639532][ T7982] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x1f8 [ 177.649973][ T4235] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 177.676846][ T5231] udevd[5231]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.695942][ T7982] F2FS-fs (loop0): invalid crc value [ 177.741222][ T7982] F2FS-fs (loop0): Found nat_bits in checkpoint [ 177.791158][ T4969] usb 5-1: USB disconnect, device number 7 [ 177.937440][ T7982] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 177.947654][ T7982] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 178.139411][ T4187] handle_bad_sector: 2 callbacks suppressed [ 178.139423][ T4187] attempt to access beyond end of device [ 178.139423][ T4187] loop0: rw=2049, want=45104, limit=40427 [ 178.174210][ T8007] loop3: detected capacity change from 0 to 8192 [ 178.239387][ T8007] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.872669][ T8032] device batadv_slave_0 entered promiscuous mode [ 178.886726][ T8032] device batadv_slave_0 left promiscuous mode [ 178.893417][ T8035] loop4: detected capacity change from 0 to 512 [ 179.215154][ T8014] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 179.246584][ T8014] JBD2: Ignoring recovery information on journal [ 179.353307][ T8014] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 179.424427][ T8014] ocfs2: Unmounting device (7,2) on (node local) [ 179.506217][ T8052] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.636291][ T8055] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 179.720414][ T8061] device macvlan0 entered promiscuous mode [ 179.744851][ T8061] device dummy0 entered promiscuous mode [ 179.759017][ T8061] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 179.792588][ T8061] Cannot create hsr debugfs directory [ 179.822196][ T8061] device hsr1 entered promiscuous mode [ 179.855222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 179.958796][ T4969] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 180.129223][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 180.208192][ T4969] usb 5-1: Using ep0 maxpacket: 16 [ 180.285165][ T8090] set_capacity_and_notify: 3 callbacks suppressed [ 180.285192][ T8090] loop3: detected capacity change from 0 to 512 [ 180.307058][ T8090] EXT4-fs (loop3): Ignoring removed orlov option [ 180.315083][ T8090] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 180.338334][ T4969] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 180.342087][ T8090] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #16: comm syz.3.1378: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 180.352240][ T4969] usb 5-1: config 0 has no interface number 0 [ 180.376271][ T8090] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1378: couldn't read orphan inode 16 (err -117) [ 180.392315][ T4969] usb 5-1: config 0 interface 246 has no altsetting 0 [ 180.398260][ T8090] EXT4-fs (loop3): 1 orphan inode deleted [ 180.405594][ T8090] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,lazytime,,errors=continue. Quota mode: none. [ 180.454119][ T8090] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 180.558390][ T4969] usb 5-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 180.577455][ T8093] loop3: detected capacity change from 0 to 512 [ 180.579171][ T4969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.593797][ T4969] usb 5-1: Product: syz [ 180.607582][ T4969] usb 5-1: Manufacturer: syz [ 180.614365][ T4969] usb 5-1: SerialNumber: syz [ 180.628574][ T4969] usb 5-1: config 0 descriptor?? [ 180.674580][ T8097] netlink: 'syz.2.1380': attribute type 5 has an invalid length. [ 180.683789][ T8093] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback. [ 180.751137][ T8093] EXT4-fs warning (device loop3): __ext4_ioctl:888: Setting inode version is not supported with metadata_csum enabled. [ 180.844968][ T8101] loop2: detected capacity change from 0 to 64 [ 180.982923][ T4969] usb 5-1: USB disconnect, device number 8 [ 181.012519][ T8105] tmpfs: Bad value for 'size' [ 181.070854][ T8105] overlayfs: unrecognized mount option "verity=on" or missing value [ 181.424737][ T8130] loop2: detected capacity change from 0 to 16 [ 181.472033][ T8130] erofs: (device loop2): mounted with root inode @ nid 36. [ 181.517628][ T8130] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 181.823548][ T8147] loop0: detected capacity change from 0 to 1024 [ 181.919225][ T8147] hfsplus: walked past end of dir [ 181.972884][ T301] hfsplus: bad catalog file entry [ 181.990475][ T8152] tap0: tun_chr_ioctl cmd 1074025677 [ 182.006201][ T8152] tap0: linktype set to 769 [ 182.036264][ T8126] loop1: detected capacity change from 0 to 32768 [ 182.172625][ T26] audit: type=1800 audit(2000000022.150:28): pid=8126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1394" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 182.498925][ T8167] loop3: detected capacity change from 0 to 1024 [ 182.515860][ T8171] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1414'. [ 182.534159][ T8170] __sock_release: fasync list not empty! [ 182.797568][ T8182] loop2: detected capacity change from 0 to 256 [ 183.062168][ T8196] loop1: detected capacity change from 0 to 8 [ 183.076551][ T8198] loop3: detected capacity change from 0 to 256 [ 183.140680][ T8196] SQUASHFS error: lzo decompression failed, data probably corrupt [ 183.175063][ T8196] SQUASHFS error: Failed to read block 0x91: -5 [ 183.184103][ T8196] SQUASHFS error: Unable to read metadata cache entry [8f] [ 183.204181][ T8196] SQUASHFS error: Unable to read inode 0x11f [ 183.206880][ T8198] FAT-fs (loop3): Directory bread(block 64) failed [ 183.237262][ T8198] FAT-fs (loop3): Directory bread(block 65) failed [ 183.249700][ T8198] FAT-fs (loop3): Directory bread(block 66) failed [ 183.256448][ T8198] FAT-fs (loop3): Directory bread(block 67) failed [ 183.265080][ T8198] FAT-fs (loop3): Directory bread(block 68) failed [ 183.272150][ T8198] FAT-fs (loop3): Directory bread(block 69) failed [ 183.279242][ T8198] FAT-fs (loop3): Directory bread(block 70) failed [ 183.286397][ T8198] FAT-fs (loop3): Directory bread(block 71) failed [ 183.328354][ T8198] FAT-fs (loop3): Directory bread(block 72) failed [ 183.342694][ T8198] FAT-fs (loop3): Directory bread(block 73) failed [ 183.512054][ T8200] XFS (loop0): Mounting V5 Filesystem [ 183.579606][ T8200] XFS (loop0): Ending clean mount [ 183.589317][ T8200] XFS (loop0): Quotacheck needed: Please wait. [ 183.640903][ T4235] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 183.689355][ T8200] XFS (loop0): Quotacheck: Done. [ 183.800251][ T4187] XFS (loop0): Unmounting Filesystem [ 183.908394][ T4235] usb 2-1: Using ep0 maxpacket: 32 [ 183.993930][ T8220] EXT4-fs (loop4): Ignoring removed orlov option [ 184.004388][ T8216] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 184.028741][ T8220] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 184.051172][ T4235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 158, changing to 11 [ 184.078233][ T4235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58832, setting to 1024 [ 184.112661][ T4235] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 184.130628][ T8220] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #16: comm syz.4.1434: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 184.153610][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.195623][ T8220] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1434: couldn't read orphan inode 16 (err -117) [ 184.233437][ T8225] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 184.248954][ T4235] usb 2-1: config 0 descriptor?? [ 184.271592][ T8220] EXT4-fs (loop4): 1 orphan inode deleted [ 184.277425][ T8220] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,lazytime,,errors=continue. Quota mode: none. [ 184.286987][ T8225] System zones: [ 184.308902][ T8196] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 184.379269][ T4235] hub 2-1:0.0: USB hub found [ 184.398208][ T8225] 1-3, 19-19, 35-36 [ 184.408971][ T8225] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,debug,,errors=continue. Quota mode: none. [ 184.436109][ T8220] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 184.458328][ T8225] ext4 filesystem being mounted at /270/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 184.490420][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.523684][ T8225] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 184.606641][ T4235] hub 2-1:0.0: 26 ports detected [ 184.650866][ T4235] hub 2-1:0.0: insufficient power available to use all downstream ports [ 184.828725][ T4235] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 184.856151][ T8236] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 184.856151][ T8236] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 184.856151][ T8236] [ 184.883769][ T4235] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 184.896882][ T8236] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 184.981903][ T8236] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000026d9bdcd,init_itable=0x0000000000000007,noacl,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,delalloc,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 185.039330][ T4235] usbhid 2-1:0.0: can't add hid device: -71 [ 185.045774][ T4235] usbhid: probe of 2-1:0.0 failed with error -71 [ 185.099004][ T4235] usb 2-1: USB disconnect, device number 8 [ 185.180992][ T8253] device ipvlan2 entered promiscuous mode [ 185.226359][ T26] audit: type=1800 audit(2000000025.200:29): pid=8236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1438" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 185.273488][ T8236] fs-verity: sha512 using implementation "sha512-avx2" [ 185.303224][ T8248] set_capacity_and_notify: 6 callbacks suppressed [ 185.303240][ T8248] loop2: detected capacity change from 0 to 32768 [ 185.315544][ T8236] fs-verity (loop3, inode 15): fs-verity keyring is empty, rejecting signed file! [ 185.413559][ T8248] JBD2: Ignoring recovery information on journal [ 185.465606][ T8248] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 185.546806][ T4196] ocfs2: Unmounting device (7,2) on (node local) [ 185.761364][ T8269] loop2: detected capacity change from 0 to 512 [ 185.801174][ T8275] program syz.4.1456 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.877216][ T8269] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 185.903085][ T8283] debugfs: Directory 'netdev:wlan0' with parent 'phy11' already present! [ 185.929394][ T8279] loop0: detected capacity change from 0 to 8 [ 185.968211][ T8269] ext4 filesystem being mounted at /276/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 185.970269][ T8285] loop4: detected capacity change from 0 to 4096 [ 186.086814][ T8269] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 186.105605][ T8288] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 186.118161][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 186.126592][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 186.163709][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 186.294605][ T8300] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1466'. [ 186.373299][ T8304] loop0: detected capacity change from 0 to 512 [ 186.426324][ T8312] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1474'. [ 186.480067][ T8304] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 186.557092][ T8304] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000007,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 186.607681][ T8318] loop1: detected capacity change from 0 to 4096 [ 186.616242][ T8324] loop4: detected capacity change from 0 to 8 [ 186.622451][ T8304] ext4 filesystem being mounted at /302/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.648284][ T8304] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3894: comm syz.0.1470: Allocating blocks 64-65 which overlap fs metadata [ 186.685099][ T8304] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3894: comm syz.0.1470: Allocating blocks 64-65 which overlap fs metadata [ 186.703118][ T8301] EXT4-fs (loop0): pa ffff8880742902a0: logic 1, phys. 44, len 84 [ 186.707337][ T8327] loop3: detected capacity change from 0 to 256 [ 186.711858][ T8301] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4904: group 0, free 63, pa_free 64 [ 186.791254][ T8318] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 186.800460][ T8327] exfat: Deprecated parameter 'utf8' [ 186.809802][ T8324] SQUASHFS error: Unable to read inode 0x11f [ 186.877257][ T8327] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 186.940803][ T8331] loop0: detected capacity change from 0 to 8 [ 187.011600][ T8335] loop2: detected capacity change from 0 to 16 [ 187.073120][ T8335] erofs: (device loop2): EXPERIMENTAL big pcluster feature in use. Use at your own risk! [ 187.136512][ T8335] erofs: (device loop2): mounted with root inode @ nid 36. [ 187.348699][ T8348] exfat: Deprecated parameter 'utf8' [ 187.355866][ T8348] exfat: Deprecated parameter 'utf8' [ 187.376341][ T8348] exfat: Deprecated parameter 'namecase' [ 187.415369][ T8344] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 187.415369][ T8344] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 187.415369][ T8344] [ 187.422365][ T8348] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 187.474092][ T8344] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 187.553445][ T8344] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000026d9bdcd,init_itable=0x0000000000000007,noacl,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,delalloc,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 187.581979][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.155134][ T26] audit: type=1800 audit(2000000028.130:30): pid=8344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1487" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 188.201596][ T8344] fs-verity (loop4, inode 15): fs-verity keyring is empty, rejecting signed file! [ 188.531014][ T8391] program syz.2.1507 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.603707][ T8386] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 188.632547][ T8395] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1510'. [ 188.645650][ T8386] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 188.652528][ T8395] netlink: 'syz.0.1510': attribute type 1 has an invalid length. [ 188.722832][ T8393] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 188.735908][ T8393] ext4 filesystem being mounted at /287/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 188.749281][ T8386] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 188.781245][ T8386] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 188.811722][ T8386] System zones: 0-2, 18-18, 34-35 [ 188.831211][ T8386] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000000,,errors=continue. Quota mode: none. [ 188.846634][ T1318] wlan1: Trigger new scan to find an IBSS to join [ 188.909368][ T151] ------------[ cut here ]------------ [ 188.915413][ T151] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40 [ 188.926353][ T151] WARNING: CPU: 0 PID: 151 at net/mac80211/rate.c:376 __rate_control_send_low+0x62c/0x880 [ 188.936519][ T151] Modules linked in: [ 188.940503][ T151] CPU: 0 PID: 151 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 188.948036][ T151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.958149][ T151] Workqueue: phy4 ieee80211_scan_work [ 188.963582][ T151] RIP: 0010:__rate_control_send_low+0x62c/0x880 [ 188.969895][ T151] Code: 42 0f b6 04 28 84 c0 0f 85 ea 01 00 00 48 8b 04 24 8b 08 48 c7 c7 c0 95 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 b4 cc 69 00 <0f> 0b e9 74 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fa ff [ 188.989648][ T151] RSP: 0018:ffffc90001ed7508 EFLAGS: 00010246 [ 188.995825][ T151] RAX: 88a0cd33f7d22700 RBX: 000000000000000c RCX: ffff88801bc49dc0 [ 189.003889][ T151] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 189.012097][ T151] RBP: 0000000000000084 R08: ffffc90001ed7027 R09: 1ffff920003dae04 [ 189.020148][ T151] R10: dffffc0000000000 R11: fffff520003dae05 R12: ffff888060ef6a28 [ 189.028162][ T151] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040 [ 189.036349][ T151] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 189.045385][ T151] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.052010][ T151] CR2: 00005555832c74e8 CR3: 0000000062886000 CR4: 00000000003506f0 [ 189.060185][ T151] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.068205][ T151] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.076199][ T151] Call Trace: [ 189.079544][ T151] [ 189.082714][ T151] rate_control_send_low+0x194/0x790 [ 189.088504][ T151] ? ieee80211_scan_work+0x41f/0x1aa0 [ 189.093906][ T151] rate_control_get_rate+0x207/0x5c0 [ 189.099272][ T151] ieee80211_tx_h_rate_ctrl+0xaeb/0x16e0 [ 189.104951][ T151] ? ieee80211_tx_h_select_key+0x1710/0x1710 [ 189.111012][ T151] ? sta_info_hash_lookup+0x53e/0x580 [ 189.116414][ T151] ? ieee80211_queue_skb+0xbd/0x20e0 [ 189.121984][ T151] invoke_tx_handlers_late+0xae/0x1720 [ 189.127559][ T151] ? ieee80211_tx_h_select_key+0x11fb/0x1710 [ 189.133626][ T151] ? sta_info_get+0x220/0x230 [ 189.138350][ T151] ? invoke_tx_handlers_early+0xa26/0x1ca0 [ 189.144472][ T151] ieee80211_tx+0x2d4/0x460 [ 189.149044][ T151] ? ieee80211_skb_resize+0x610/0x610 [ 189.154476][ T151] ? ieee80211_xmit+0x309/0x420 [ 189.159396][ T151] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 189.165342][ T151] ieee80211_scan_state_send_probe+0x556/0x8e0 [ 189.171595][ T151] ieee80211_scan_work+0x41f/0x1aa0 [ 189.177025][ T151] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 189.183114][ T151] ? _raw_spin_unlock_irq+0x1f/0x40 [ 189.188483][ T151] process_one_work+0x867/0xff0 [ 189.193380][ T151] ? worker_detach_from_pool+0x240/0x240 [ 189.199089][ T151] ? lockdep_hardirqs_off+0x70/0x100 [ 189.204546][ T151] ? _raw_spin_lock_irq+0xb7/0xf0 [ 189.209650][ T151] ? _raw_spin_lock_irqsave+0x100/0x100 [ 189.215233][ T151] ? wq_worker_running+0x97/0x170 [ 189.220419][ T151] worker_thread+0xad7/0x12a0 [ 189.225173][ T151] kthread+0x42e/0x520 [ 189.231793][ T151] ? rcu_lock_release+0x20/0x20 [ 189.231873][ T151] ? kthread_blkcg+0xd0/0xd0 [ 189.231895][ T151] ret_from_fork+0x1f/0x30 [ 189.231933][ T151] [ 189.231963][ T151] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 189.231973][ T151] CPU: 0 PID: 151 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 189.231989][ T151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.232000][ T151] Workqueue: phy4 ieee80211_scan_work [ 189.232022][ T151] Call Trace: [ 189.232028][ T151] [ 189.232035][ T151] dump_stack_lvl+0x188/0x250 [ 189.232070][ T151] ? show_regs_print_info+0x20/0x20 [ 189.232089][ T151] ? load_image+0x410/0x410 [ 189.232123][ T151] panic+0x2f8/0x850 [ 189.232149][ T151] ? bpf_jit_dump+0xd0/0xd0 [ 189.232176][ T151] ? ret_from_fork+0x1f/0x30 [ 189.232208][ T151] ? __rate_control_send_low+0x62c/0x880 [ 189.232231][ T151] __warn+0x248/0x2b0 [ 189.232251][ T151] ? __rate_control_send_low+0x62c/0x880 [ 189.232272][ T151] report_bug+0x1b9/0x2e0 [ 189.232299][ T151] handle_bug+0x3a/0x70 [ 189.232316][ T151] exc_invalid_op+0x16/0x40 [ 189.232334][ T151] asm_exc_invalid_op+0x16/0x20 [ 189.232354][ T151] RIP: 0010:__rate_control_send_low+0x62c/0x880 [ 189.232376][ T151] Code: 42 0f b6 04 28 84 c0 0f 85 ea 01 00 00 48 8b 04 24 8b 08 48 c7 c7 c0 95 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 b4 cc 69 00 <0f> 0b e9 74 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fa ff [ 189.232392][ T151] RSP: 0018:ffffc90001ed7508 EFLAGS: 00010246 [ 189.232410][ T151] RAX: 88a0cd33f7d22700 RBX: 000000000000000c RCX: ffff88801bc49dc0 [ 189.232424][ T151] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 189.232437][ T151] RBP: 0000000000000084 R08: ffffc90001ed7027 R09: 1ffff920003dae04 [ 189.232450][ T151] R10: dffffc0000000000 R11: fffff520003dae05 R12: ffff888060ef6a28 [ 189.232464][ T151] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040 [ 189.232494][ T151] ? __rate_control_send_low+0x62c/0x880 [ 189.232526][ T151] rate_control_send_low+0x194/0x790 [ 189.232547][ T151] ? ieee80211_scan_work+0x41f/0x1aa0 [ 189.232571][ T151] rate_control_get_rate+0x207/0x5c0 [ 189.232599][ T151] ieee80211_tx_h_rate_ctrl+0xaeb/0x16e0 [ 189.232636][ T151] ? ieee80211_tx_h_select_key+0x1710/0x1710 [ 189.232662][ T151] ? sta_info_hash_lookup+0x53e/0x580 [ 189.232680][ T151] ? ieee80211_queue_skb+0xbd/0x20e0 [ 189.232699][ T151] invoke_tx_handlers_late+0xae/0x1720 [ 189.232717][ T151] ? ieee80211_tx_h_select_key+0x11fb/0x1710 [ 189.232738][ T151] ? sta_info_get+0x220/0x230 [ 189.232760][ T151] ? invoke_tx_handlers_early+0xa26/0x1ca0 [ 189.232789][ T151] ieee80211_tx+0x2d4/0x460 [ 189.232809][ T151] ? ieee80211_skb_resize+0x610/0x610 [ 189.232842][ T151] ? ieee80211_xmit+0x309/0x420 [ 189.232862][ T151] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 189.232882][ T151] ieee80211_scan_state_send_probe+0x556/0x8e0 [ 189.232924][ T151] ieee80211_scan_work+0x41f/0x1aa0 [ 189.232945][ T151] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 189.232970][ T151] ? _raw_spin_unlock_irq+0x1f/0x40 [ 189.232993][ T151] process_one_work+0x867/0xff0 [ 189.233028][ T151] ? worker_detach_from_pool+0x240/0x240 [ 189.233047][ T151] ? lockdep_hardirqs_off+0x70/0x100 [ 189.233071][ T151] ? _raw_spin_lock_irq+0xb7/0xf0 [ 189.233088][ T151] ? _raw_spin_lock_irqsave+0x100/0x100 [ 189.233106][ T151] ? wq_worker_running+0x97/0x170 [ 189.233126][ T151] worker_thread+0xad7/0x12a0 [ 189.233169][ T151] kthread+0x42e/0x520 [ 189.233184][ T151] ? rcu_lock_release+0x20/0x20 [ 189.233208][ T151] ? kthread_blkcg+0xd0/0xd0 [ 189.233226][ T151] ret_from_fork+0x1f/0x30 [ 189.233255][ T151] [ 189.233723][ T151] Kernel Offset: disabled [ 189.595672][ T151] Rebooting in 86400 seconds..