last executing test programs: 6m15.575904994s ago: executing program 0 (id=235): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x1, @raw_data=[0x6, 0xffffffff, 0x100a, 0x100, 0x0, 0x0, 0x0, 0x7, 0xfffffffe, 0x0, 0x1, 0x0, 0x200000, 0x10000, 0x676d]}) 6m15.494790568s ago: executing program 0 (id=236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [{{0x254, 0x1, {{0x1, 0xe2}, 0x4, 0x1, 0xc, 0x3, 0x13, 'syz0\x00', "0746892bc6399ac287b98fe642dc7f1e27e49e1cb4270d1f9ab0c4ef6efdbf50", "7a60688495b6ca3e7c8f843785dce0a5f660ae3825cf65d9e1ffccf80b282e31", [{0x2, 0x2, {0x2, 0x6}}, {0xfffd, 0x13, {0x3, 0x1}}, {0x0, 0x0, {0x1}}, {0x9, 0xffff, {0x2, 0xf}}, {0x53, 0x8, {0x3, 0x9}}, {0x7, 0x3ff, {0x2, 0x401}}, {0x3, 0x2400, {0x1, 0x2}}, {0xb04e, 0x5, {0x2, 0x133}}, {0xa, 0xfffc, {0x1, 0x8}}, {0x1, 0xc95, {0x3, 0x7}}, {0x3, 0x5}, {0x400, 0xa, {0x3}}, {0xeff9, 0x2, {0x1, 0x7fff}}, {0x100, 0xa226, {0x0, 0x4}}, {0x9, 0x4, {0x1, 0x63a}}, {0x4, 0x9c24, {0x1, 0x3}}, {0x21, 0x5, {0x1, 0xe4}}, {0x6, 0x0, {0x1, 0x9}}, {0x0, 0x0, {0x1, 0x9}}, {0xb, 0x40, {0x1, 0x101}}, {0x7ff, 0x9, {0x2, 0x2}}, {0x90, 0x8, {0x1, 0x8}}, {0x6, 0x7f, {0x1, 0x681f}}, {0xfffd, 0x3ff, {0x1, 0xd}}, {0x5, 0x1, {0x1, 0x8}}, {0x1, 0xfffa, {0x2, 0x9}}, {0x3287, 0x6, {0x3, 0x1ff}}, {0x3, 0x800, {0x2, 0x5}}, {0x6, 0x9, {0x0, 0x8001}}, {0x2, 0x80, {0x1, 0x80000001}}, {0xffff, 0xff, {0x3, 0x3}}, {0xa940, 0x7, {0x0, 0x3}}, {0x3, 0x100, {0x3, 0x4}}, {0x2, 0xe93f, {0x3, 0xf}}, {0x401, 0x53c1, {0x2, 0x3}}, {0xe, 0x5, {0x0, 0x5}}, {0x3, 0x8, {0x3, 0xfffffcf2}}, {0x4, 0x2, {0x3, 0xc}}, {0x371, 0x5, {0x2, 0x80}}, {0xfff, 0x7, {0x0, 0x10}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 6m15.412572961s ago: executing program 0 (id=237): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x54) 6m15.221830293s ago: executing program 0 (id=240): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, &(0x7f0000000000)={[{@umask={'umask', 0x3d, 0xe}}, {@type={'type', 0x3d, "103683de"}}, {}, {}, {@nobarrier}, {@umask={'umask', 0x3d, 0x4}}, {@nls={'nls', 0x3d, 'maccenteuro'}}]}, 0x44, 0x708, &(0x7f0000000c00)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 6m14.929136832s ago: executing program 0 (id=243): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0xa, {0x2, 0x0, @empty}}, 0x24) 6m14.359623797s ago: executing program 0 (id=248): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x1000, 0x3a, '\x94l\\\xec\xd1\xcb\x9a}\xab7\x1f\xde\xb5\x83>\fG\\x00', 0x3a, '/dev\x14bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51) 6m14.049764819s ago: executing program 32 (id=248): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x1000, 0x3a, '\x94l\\\xec\xd1\xcb\x9a}\xab7\x1f\xde\xb5\x83>\fG\\x00', 0x3a, '/dev\x14bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51) 2.728964055s ago: executing program 4 (id=5116): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x4) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000000)={0x57, 0x2}) 2.447928162s ago: executing program 4 (id=5119): unshare(0x480) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000640)={r0, &(0x7f00000003c0), 0x0}, 0x20) 2.290743238s ago: executing program 4 (id=5122): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f00000000c0)='./file1\x00', 0xa08086, &(0x7f0000009780), 0x1, 0x97a8, &(0x7f00000097c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) lgetxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100)=@known='trusted.overlay.upper\x00', 0x0, 0x0) 1.897621654s ago: executing program 2 (id=5126): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="b71fe84fda50cf6fbefac5a5891d03a05027c0e6658ea94f09636160112a47b688552b72051bf0111daffbe0adef82589ee2fac726c31d20f98aa1f9761873cd604dab0d22b4b321f4c20044c5a8e018b51e52342814e4c33a7f4807781862b524b303c604203d95ef2faa04cfd7ddc4f2edca0adeae0088a8e16969e9000a6a9d85bf9d4ee333cf03763ad6506f66797f154f0923a63f106d908d1cf2a884e57ab63950b9883c40449a94847df80ca39e9394f8de077bfd7f0c81e773158bd33c339a0f92997d172adcde0c53c97cce8a0f42c862a0c88c9a25ccf6799b85dadc245f608d6cb5ded47e4a20ad821132952cc1884e1473794144bbd01594b306a04fc39f13202b4447f8bbccc51a6c4b555b46a2df7f0fe979ef6c31ef8c81a81c26e71f96ea1d8ed245277259bdf970db1f41c75d8384b6b23cf44e9b04527874daf6c34e4deda0da670addd7c8f5eab4410908517c88940d", @ANYRES16], 0xfe, 0x1518, &(0x7f00000022c0)="$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") creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) 1.477122324s ago: executing program 2 (id=5131): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cf90103", @ANYRES16=0x0, @ANYBLOB="c89045b2a6c0b186f6eb1f"], 0x1c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 1.348175515s ago: executing program 3 (id=5132): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.334573927s ago: executing program 2 (id=5133): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x204000, 0x0) close_range(r0, r0, 0x2) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, r0) 1.221044667s ago: executing program 2 (id=5135): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents64(r0, 0xffffffffffffffff, 0x43) 1.158894087s ago: executing program 3 (id=5136): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 1.040986816s ago: executing program 3 (id=5137): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r1, r0, 0x4, r0}, 0x10) 1.027822118s ago: executing program 1 (id=5138): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xbc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xfe2c, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.007707262s ago: executing program 2 (id=5139): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="eea73c3ca047349ab66dff07b1e2bdc61875c6ccebea30ba1b8977c632dd4bd75d3cfd10cce0c88ccff0ff447cd9caded4abf65767e9dbbd7b5841a8ce3eae5cb5abfd7d4fb44c7151dec2b7b8f9cf870af04f1cc951b195c7fd36ffdbd0622cdc14395f095fb0d31f384214d59a0105d577557215473973f3b70178f49f07562f4d21cad59fafb7fbaf76061c56fdd2093329e2ece7cf96435bca11a90ba7f31e69c4b73ba3d172906ffc90f5de134a696a731d20a9cf70009a31f83d4b774b0d99de69f14de9e655b84b646166d979b9cdbde38324510998bba500000000007cf791c3e2fc9c72f920a64e0000000000000000000000b5ff5bb6b1fa869800651587af", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 956.95034ms ago: executing program 3 (id=5140): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x4c}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @random="0010000200", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "aac4e0", 0x44, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x4}}}}}}}}}, 0x0) 910.695918ms ago: executing program 4 (id=5141): unshare(0x22020400) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fcntl$setflags(r0, 0x2, 0x0) 868.654265ms ago: executing program 1 (id=5142): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14020000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf250100000008000100010000000c0004800500030080ff000008000200010000000400088008000100ffffffff24000c8004000b801c000b80080009004caadf0908000a00ee65000008000a0060640000a8000c801c000b8008000900b418e57608000a00dac1000008000a00a22a000004000b8014000b8008000900eccc2e7608000900e1b4cd1824000b8008000a00feee000008000900320e1413080009001fd45c2908000a00ec6700004c000b8008000a00ddd1000008000a0040b5000008000a00e000000008000a001103000008"], 0x214}, 0x1, 0x0, 0x0, 0x1}, 0x48084) 816.950884ms ago: executing program 3 (id=5143): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0}) 674.401818ms ago: executing program 3 (id=5144): r0 = syz_usbip_server_init(0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$usbip_server(r0, &(0x7f00000000c0)=ANY=[], 0x30) 594.625011ms ago: executing program 1 (id=5145): r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x10000400}, 0xc) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) 317.107897ms ago: executing program 1 (id=5146): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020, 0x0, 0x40000000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) 226.902612ms ago: executing program 4 (id=5147): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="090000001600000008000000", @ANYRES32=0x1], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x20) 195.269098ms ago: executing program 1 (id=5148): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) 1.03633ms ago: executing program 4 (id=5149): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002140)={0xf, {"a2e3ad214fc752f91b500e0f30f70e06d038e7ff7fc6e5539b3275078b089b3b08385d090890e0878f0e1ac6e7049b3d6d959bffe8d178708c523c921b1b5b31300d3b5d0736cd3b78130baa61d8e809fc889b0709b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b906000000783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51015f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ff33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f761f13a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a99cc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000029566e78000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebbd633500", 0x1000}}, 0x1006) 424.27µs ago: executing program 1 (id=5150): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000140)=@qipcrtr={0x2a, 0xffffffff}, 0x80, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) 0s ago: executing program 2 (id=5151): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x24}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) kernel console output (not intermixed with test programs): ct (0xffffffffdffffffa,4) [ 357.333757][T15213] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 357.347545][T15213] [U] J"—E:ÀÆ" [ 357.502672][T15220] set_capacity_and_notify: 1 callbacks suppressed [ 357.502686][T15220] loop2: detected capacity change from 0 to 512 [ 357.562161][T15220] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 357.597452][T15220] UDF-fs: Scanning with blocksize 512 failed [ 357.631992][T15220] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 357.651022][T15220] UDF-fs: Scanning with blocksize 1024 failed [ 357.673842][T15220] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 357.706804][T15220] UDF-fs: Scanning with blocksize 2048 failed [ 357.727430][T15220] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 357.768407][T15220] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 358.461151][T15252] Bluetooth: MGMT ver 1.22 [ 358.752546][T15260] loop2: detected capacity change from 0 to 4096 [ 358.871475][T15265] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 358.976075][T15260] NILFS error (device loop2): nilfs_dotdot: directory #12 missing '.' [ 359.001128][T15260] Remounting filesystem read-only [ 359.096641][ T5764] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 359.115853][ T5764] NILFS (loop2): discard dirty page: offset=0, ino=18 [ 359.122662][ T5764] NILFS (loop2): discard dirty block: blocknr=0, size=4096 [ 359.140711][ T5764] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 359.154103][ T5764] NILFS (loop2): discard dirty block: blocknr=14, size=4096 [ 359.162389][ T5764] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 359.170032][ T5764] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 359.184806][ T5764] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 359.192976][ T5764] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 359.201372][ T5764] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 359.208858][ T5764] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 359.228037][ T5764] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 359.245877][ T5764] NILFS (loop2): discard dirty block: blocknr=28, size=4096 [ 359.253199][ T5764] NILFS (loop2): discard dirty page: offset=4096, ino=3 [ 359.275857][ T5764] NILFS (loop2): discard dirty block: blocknr=29, size=4096 [ 359.283187][ T5764] NILFS (loop2): discard dirty page: offset=270336, ino=3 [ 359.306940][ T5764] NILFS (loop2): discard dirty block: blocknr=0, size=4096 [ 359.865354][T15293] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 359.874443][T15293] [U] J"—E:ÀÆ" [ 359.990651][ T5805] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 360.198990][ T5805] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 360.208945][ T5805] usb 5-1: config 1 has no interface number 0 [ 360.218833][ T5805] usb 5-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 360.245926][ T5805] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.278702][ T5805] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 360.295817][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.312516][ T5805] usb 5-1: Product: syz [ 360.325858][ T5805] usb 5-1: Manufacturer: syz [ 360.340269][ T5805] usb 5-1: SerialNumber: syz [ 360.362418][T15290] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 360.380212][ T5805] usb 5-1: Expected 3 endpoints, found: 2 [ 360.561025][T15299] loop1: detected capacity change from 0 to 32768 [ 360.606109][T15299] JBD2: Ignoring recovery information on journal [ 360.806468][T15299] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 361.111430][ T5763] ocfs2: Unmounting device (7,1) on (node local) [ 361.980377][T15353] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4118'. [ 362.001498][T15353] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4118'. [ 362.154736][T15351] loop2: detected capacity change from 0 to 32768 [ 362.183374][T15351] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 362.337105][ T5764] ocfs2: Unmounting device (7,2) on (node local) [ 362.414251][T15359] loop1: detected capacity change from 0 to 4096 [ 362.472902][T15363] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 362.535269][T15359] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '.' [ 362.568386][T15359] Remounting filesystem read-only [ 362.708942][ T5763] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 362.735221][ T5763] NILFS (loop1): discard dirty page: offset=0, ino=18 [ 362.746077][ T5805] usb 5-1: USB disconnect, device number 28 [ 362.765226][ T5763] NILFS (loop1): discard dirty block: blocknr=0, size=4096 [ 362.809843][ T5763] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 362.837582][ T5763] NILFS (loop1): discard dirty block: blocknr=14, size=4096 [ 362.845444][ T5763] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 362.873831][ T5763] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 362.884794][ T5763] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 362.892096][ T5763] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 362.899714][ T5763] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 362.913231][ T5763] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 362.927532][ T5763] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 362.934325][ T5763] NILFS (loop1): discard dirty block: blocknr=28, size=4096 [ 362.958224][ T5763] NILFS (loop1): discard dirty page: offset=4096, ino=3 [ 362.965204][ T5763] NILFS (loop1): discard dirty block: blocknr=29, size=4096 [ 363.016672][ T5763] NILFS (loop1): discard dirty page: offset=270336, ino=3 [ 363.031714][ T5763] NILFS (loop1): discard dirty block: blocknr=0, size=4096 [ 363.155214][T15381] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 363.155310][T15381] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 363.155380][T15381] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 363.155478][T15381] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 363.155517][T15381] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 363.155554][T15381] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 363.155590][T15381] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 363.155655][T15381] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 363.155701][T15381] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 363.155738][T15381] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 363.160021][T15381] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 363.160068][T15381] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 363.160108][T15381] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 363.160177][T15381] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 363.160221][T15381] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 363.160265][T15381] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 363.160309][T15381] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 363.160349][T15381] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 363.160393][T15381] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 363.160462][T15381] comedi comedi3: 8255: I/O port conflict (0x1000,4) [ 363.160501][T15381] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 363.160542][T15381] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 363.160580][T15381] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 364.288180][T15393] loop2: detected capacity change from 0 to 32768 [ 364.461140][T15419] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4144'. [ 364.491228][T15419] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4144'. [ 364.671511][ T27] audit: type=1326 audit(1776341994.066:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.4.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4c59c819 code=0x7ffc0000 [ 364.734697][ T27] audit: type=1326 audit(1776341994.066:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.4.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4c59c819 code=0x7ffc0000 [ 364.796399][ T27] audit: type=1326 audit(1776341994.066:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.4.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f0a4c59c819 code=0x7ffc0000 [ 364.821265][ T27] audit: type=1326 audit(1776341994.066:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.4.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4c59c819 code=0x7ffc0000 [ 364.844207][ T27] audit: type=1326 audit(1776341994.066:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.4.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4c59c819 code=0x7ffc0000 [ 365.047749][T15435] overlayfs: missing 'lowerdir' [ 365.531540][T15448] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4156'. [ 365.565016][T15448] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4156'. [ 365.874639][T15442] loop4: detected capacity change from 0 to 32768 [ 366.538066][T15473] loop1: detected capacity change from 0 to 16 [ 366.569182][T15473] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 366.961639][ T5825] kernel write not supported for file /vcs (pid: 5825 comm: kworker/1:5) [ 367.755879][ T27] audit: type=1326 audit(1776341997.146:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15488 comm="syz.4.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4c59c819 code=0x7ffc0000 [ 367.833628][ T27] audit: type=1326 audit(1776341997.146:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15488 comm="syz.4.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4c59c819 code=0x7ffc0000 [ 367.856014][ C0] vkms_vblank_simulate: vblank timer overrun [ 367.904419][T15497] overlayfs: missing 'lowerdir' [ 367.913466][ T27] audit: type=1326 audit(1776341997.156:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15489 comm="syz.2.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719dd9c819 code=0x7ffc0000 [ 367.941477][ T27] audit: type=1326 audit(1776341997.156:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15489 comm="syz.2.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719dd9c819 code=0x7ffc0000 [ 368.012867][ T27] audit: type=1326 audit(1776341997.156:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15489 comm="syz.2.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f719dd9c819 code=0x7ffc0000 [ 368.597440][T15493] loop1: detected capacity change from 0 to 32768 [ 368.810855][T15499] loop4: detected capacity change from 0 to 32768 [ 368.909877][T15499] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 369.158108][T15533] loop2: detected capacity change from 0 to 256 [ 369.192502][ T6429] ocfs2: Unmounting device (7,4) on (node local) [ 369.422116][ T5805] kernel write not supported for file /vcs (pid: 5805 comm: kworker/1:3) [ 369.744963][T15547] loop1: detected capacity change from 0 to 512 [ 369.775041][T15547] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 369.812772][T15547] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 369.852384][T15547] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.4202: Invalid block bitmap block 0 in block_group 0 [ 369.890633][T15547] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 369.964018][T15547] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.4202: attempt to clear invalid blocks 983261 len 1 [ 370.066612][T15547] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.4202: Invalid inode table block 0 in block_group 0 [ 370.108848][T15555] netlink: 'syz.4.4204': attribute type 1 has an invalid length. [ 370.117535][T15547] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 370.152647][T15547] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 370.179357][T15547] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.4202: Invalid inode table block 0 in block_group 0 [ 370.206288][T15547] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 370.224182][T15547] EXT4-fs error (device loop1): ext4_truncate:4301: inode #11: comm syz.1.4202: mark_inode_dirty error [ 370.242784][T15547] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 370.261283][T15547] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.4202: Invalid inode table block 0 in block_group 0 [ 370.288587][T15547] EXT4-fs (loop1): 1 truncate cleaned up [ 370.297501][T15547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.395161][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.583382][T15567] loop4: detected capacity change from 0 to 512 [ 370.597706][T15567] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 370.615895][T15567] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 370.663555][T15567] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:478: comm syz.4.4218: Invalid block bitmap block 0 in block_group 0 [ 370.705897][T15567] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 370.715154][T15567] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.4218: attempt to clear invalid blocks 983261 len 1 [ 370.740434][T15567] EXT4-fs error (device loop4): __ext4_get_inode_loc:4496: comm syz.4.4218: Invalid inode table block 0 in block_group 0 [ 370.755429][T15567] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 370.768048][T15567] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 370.779408][T15567] EXT4-fs error (device loop4): __ext4_get_inode_loc:4496: comm syz.4.4218: Invalid inode table block 0 in block_group 0 [ 370.811386][T15567] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 370.832997][T15567] EXT4-fs error (device loop4): ext4_truncate:4301: inode #11: comm syz.4.4218: mark_inode_dirty error [ 370.860569][T15567] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 370.884061][T15567] EXT4-fs error (device loop4): __ext4_get_inode_loc:4496: comm syz.4.4218: Invalid inode table block 0 in block_group 0 [ 370.908076][T15567] EXT4-fs (loop4): 1 truncate cleaned up [ 370.917458][T15567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.965921][ T5825] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 371.040368][ T6429] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.152577][ T5825] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 371.171986][ T5825] usb 3-1: config 0 has no interface number 0 [ 371.202430][ T5825] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.228230][ T5825] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.247197][ T5825] usb 3-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 371.257256][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.262107][T15568] loop1: detected capacity change from 0 to 32768 [ 371.284900][ T5825] usb 3-1: config 0 descriptor?? [ 371.300102][T15568] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 371.458787][ T5763] ocfs2: Unmounting device (7,1) on (node local) [ 371.466257][ T5810] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 371.656975][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 371.656988][ T27] audit: type=1326 audit(1776342001.056:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15584 comm="syz.3.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ae39c819 code=0x7ffc0000 [ 371.724543][ T5810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 371.741050][ T5825] uclogic 0003:28BD:0905.0016: Interface probing failed: -22 [ 371.745807][ T5810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 371.778331][ T27] audit: type=1326 audit(1776342001.076:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15584 comm="syz.3.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ae39c819 code=0x7ffc0000 [ 371.786217][ T5825] uclogic 0003:28BD:0905.0016: interface is invalid, ignoring [ 371.817264][ T5810] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 371.855115][ T5810] usb 5-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 371.874547][ T27] audit: type=1326 audit(1776342001.086:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15584 comm="syz.3.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ae39c819 code=0x7ffc0000 [ 371.918201][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.950247][ T5810] usb 5-1: config 0 descriptor?? [ 371.956795][T15579] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 371.958622][ T5805] usb 3-1: USB disconnect, device number 33 [ 371.964197][ T27] audit: type=1326 audit(1776342001.086:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15584 comm="syz.3.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ae39c819 code=0x7ffc0000 [ 371.992421][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.024712][ T27] audit: type=1326 audit(1776342001.096:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15584 comm="syz.3.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f96ae39c819 code=0x7ffc0000 [ 372.100802][ T27] audit: type=1326 audit(1776342001.096:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15584 comm="syz.3.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ae39c819 code=0x7ffc0000 [ 372.123171][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.139263][ T27] audit: type=1326 audit(1776342001.096:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15584 comm="syz.3.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ae39c819 code=0x7ffc0000 [ 372.163479][ T27] audit: type=1326 audit(1776342001.096:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15584 comm="syz.3.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ae39c819 code=0x7ffc0000 [ 372.188572][ T27] audit: type=1326 audit(1776342001.096:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15584 comm="syz.3.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f96ae39c819 code=0x7ffc0000 [ 372.274336][ T27] audit: type=1326 audit(1776342001.096:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15584 comm="syz.3.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ae39c819 code=0x7ffc0000 [ 372.446805][ T5810] logitech-hidpp-device 0003:046D:C081.0017: ignoring exceeding usage max [ 372.459609][ T5810] logitech-hidpp-device 0003:046D:C081.0017: item fetching failed at offset 24/40 [ 372.471773][ T5810] logitech-hidpp-device 0003:046D:C081.0017: hidpp_probe:parse failed [ 372.480505][ T5810] logitech-hidpp-device: probe of 0003:046D:C081.0017 failed with error -22 [ 372.525970][ T28] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 372.559593][T15601] netlink: 'syz.3.4224': attribute type 1 has an invalid length. [ 372.700120][ T5810] usb 5-1: USB disconnect, device number 29 [ 372.725925][ T28] usb 2-1: Using ep0 maxpacket: 16 [ 372.734192][ T28] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 372.743719][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.752944][ T28] usb 2-1: Product: syz [ 372.757213][ T28] usb 2-1: Manufacturer: syz [ 372.761810][ T28] usb 2-1: SerialNumber: syz [ 372.768670][ T28] usb 2-1: config 0 descriptor?? [ 372.777060][ T28] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 372.994187][ T5810] usb 2-1: USB disconnect, device number 33 [ 373.817045][ T5805] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 373.952710][T15624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4232'. [ 374.017140][ T5805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 374.033006][T15614] loop1: detected capacity change from 0 to 32768 [ 374.046157][ T5805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 374.077119][ T5805] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 374.113589][T15614] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 374.120455][T15630] netlink: 'syz.2.4236': attribute type 1 has an invalid length. [ 374.181433][ T5805] usb 4-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 374.227637][ T5805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.251740][ T5805] usb 4-1: config 0 descriptor?? [ 374.266781][T15611] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 374.392391][ T5763] ocfs2: Unmounting device (7,1) on (node local) [ 374.467041][ T5810] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 374.666110][ T5810] usb 3-1: Using ep0 maxpacket: 16 [ 374.687812][ T5810] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 374.712352][ T5805] logitech-hidpp-device 0003:046D:C081.0018: ignoring exceeding usage max [ 374.712941][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.739273][ T5805] logitech-hidpp-device 0003:046D:C081.0018: item fetching failed at offset 24/40 [ 374.766150][ T5810] usb 3-1: Product: syz [ 374.770405][ T5810] usb 3-1: Manufacturer: syz [ 374.789977][ T5805] logitech-hidpp-device 0003:046D:C081.0018: hidpp_probe:parse failed [ 374.790912][ T5810] usb 3-1: SerialNumber: syz [ 374.816400][ T5805] logitech-hidpp-device: probe of 0003:046D:C081.0018 failed with error -22 [ 374.837286][ T5810] usb 3-1: config 0 descriptor?? [ 374.871369][ T5810] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 374.992758][ T5805] usb 4-1: USB disconnect, device number 28 [ 375.135629][ T5810] usb 3-1: USB disconnect, device number 34 [ 375.182136][T15660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4249'. [ 375.529122][T15667] loop4: detected capacity change from 0 to 32768 [ 375.545417][T15667] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.4253 (15667) [ 375.601013][T15667] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 375.618845][T15667] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 375.628156][T15667] BTRFS info (device loop4): setting nodatasum [ 375.634474][T15667] BTRFS info (device loop4): force zlib compression, level 3 [ 375.643631][T15667] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 375.659031][T15667] BTRFS info (device loop4): use lzo compression, level 0 [ 375.666423][T15667] BTRFS info (device loop4): turning on flush-on-commit [ 375.673522][T15667] BTRFS info (device loop4): enabling auto defrag [ 375.680353][T15667] BTRFS info (device loop4): max_inline at 4096 [ 375.686966][T15667] BTRFS info (device loop4): using free space tree [ 375.778337][T15667] BTRFS info (device loop4): enabling ssd optimizations [ 375.940357][ T6429] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 376.687272][ T28] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 376.725897][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4264'. [ 376.877745][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 376.889018][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 376.906542][ T28] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 376.925963][ T28] usb 2-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 376.945262][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.956072][ T28] usb 2-1: config 0 descriptor?? [ 376.961759][T15704] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 377.095876][ T5803] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 377.296714][ T5803] usb 5-1: Using ep0 maxpacket: 16 [ 377.314325][ T5803] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 377.328910][ T5803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.346450][ T5803] usb 5-1: Product: syz [ 377.350896][ T5803] usb 5-1: Manufacturer: syz [ 377.355544][ T5803] usb 5-1: SerialNumber: syz [ 377.374787][ T5803] usb 5-1: config 0 descriptor?? [ 377.390277][ T5803] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 377.392054][ T28] logitech-hidpp-device 0003:046D:C081.0019: ignoring exceeding usage max [ 377.433074][ T28] logitech-hidpp-device 0003:046D:C081.0019: item fetching failed at offset 24/40 [ 377.444463][ T28] logitech-hidpp-device 0003:046D:C081.0019: hidpp_probe:parse failed [ 377.453205][ T28] logitech-hidpp-device: probe of 0003:046D:C081.0019 failed with error -22 [ 377.645150][ T5803] usb 5-1: USB disconnect, device number 30 [ 377.698168][ T28] usb 2-1: USB disconnect, device number 34 [ 378.219101][T15735] loop2: detected capacity change from 0 to 32768 [ 378.231214][T15735] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.4284 (15735) [ 378.271761][T15735] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 378.286295][ T5803] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 378.310355][T15735] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 378.351465][T15735] BTRFS info (device loop2): setting nodatasum [ 378.373904][T15735] BTRFS info (device loop2): force zlib compression, level 3 [ 378.391716][T15735] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 378.411379][T15735] BTRFS info (device loop2): use lzo compression, level 0 [ 378.431943][T15735] BTRFS info (device loop2): turning on flush-on-commit [ 378.464313][T15735] BTRFS info (device loop2): enabling auto defrag [ 378.484053][T15735] BTRFS info (device loop2): max_inline at 4096 [ 378.498323][T15735] BTRFS info (device loop2): using free space tree [ 378.520802][ T5803] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 378.547634][ T5803] usb 4-1: config 0 has no interface number 0 [ 378.564113][ T5803] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.616326][ T5803] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.662594][ T5803] usb 4-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 378.680668][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.690550][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.705988][ T5803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.728662][T15735] BTRFS info (device loop2): enabling ssd optimizations [ 378.747918][ T5803] usb 4-1: config 0 descriptor?? [ 378.911770][ T5764] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 379.191803][ T5803] uclogic 0003:28BD:0905.001A: Interface probing failed: -22 [ 379.221323][ T5803] uclogic 0003:28BD:0905.001A: interface is invalid, ignoring [ 379.477107][ T5805] usb 4-1: USB disconnect, device number 29 [ 379.939106][T15769] loop2: detected capacity change from 0 to 32768 [ 380.008935][T15769] JBD2: Ignoring recovery information on journal [ 380.043606][T15784] loop4: detected capacity change from 0 to 2048 [ 380.062785][T15784] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 380.083124][T15769] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 380.085014][T15788] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 380.392636][ T5764] ocfs2: Unmounting device (7,2) on (node local) [ 381.146990][T15792] loop1: detected capacity change from 0 to 32768 [ 381.168025][T15792] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.4292 (15792) [ 381.200733][T15792] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 381.213258][T15792] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 381.240552][T15792] BTRFS info (device loop1): setting nodatasum [ 381.256611][T15792] BTRFS info (device loop1): force zlib compression, level 3 [ 381.274491][T15792] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 381.296814][T15792] BTRFS info (device loop1): use lzo compression, level 0 [ 381.303971][T15792] BTRFS info (device loop1): turning on flush-on-commit [ 381.326224][T15792] BTRFS info (device loop1): enabling auto defrag [ 381.340449][T15792] BTRFS info (device loop1): max_inline at 4096 [ 381.359119][T15792] BTRFS info (device loop1): using free space tree [ 381.519485][T15798] loop2: detected capacity change from 0 to 32768 [ 381.642043][T15792] BTRFS info (device loop1): enabling ssd optimizations [ 381.662335][T15798] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 381.806919][T15798] XFS (loop2): Ending clean mount [ 382.006504][ T5763] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 382.060228][ T5764] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 382.885313][T15835] loop4: detected capacity change from 0 to 32768 [ 382.943534][T15851] loop1: detected capacity change from 0 to 1024 [ 382.964368][T15835] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 383.261301][T15835] XFS (loop4): Ending clean mount [ 383.305229][T15835] XFS (loop4): Quotacheck needed: Please wait. [ 383.436214][T15835] XFS (loop4): Quotacheck: Done. [ 383.711437][ T6429] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 384.127195][T15863] loop1: detected capacity change from 0 to 32768 [ 384.145154][T15863] XFS: ikeep mount option is deprecated. [ 384.209042][T15877] loop2: detected capacity change from 0 to 1024 [ 384.213274][T15863] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 384.402308][T15863] XFS (loop1): Ending clean mount [ 384.575836][ T5763] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 385.434208][T15904] loop4: detected capacity change from 0 to 128 [ 385.451411][T15891] loop2: detected capacity change from 0 to 40427 [ 385.474564][T15891] F2FS-fs (loop2): Corrupted extension count (33554469 + 1 > 64) [ 385.482586][T15891] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 385.487282][T15904] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 385.531763][T15891] F2FS-fs (loop2): invalid crc value [ 385.533927][T15904] ext4 filesystem being mounted at /997/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 385.697155][ T6429] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 385.858524][T15891] F2FS-fs (loop2): Try to recover 2th superblock, ret: -30 [ 385.884578][T15891] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 385.977691][T15891] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=470000, run fsck to fix. [ 386.037739][T15920] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 386.967009][T15929] loop4: detected capacity change from 0 to 32768 [ 387.007450][T15929] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.4337 (15929) [ 387.049155][T15929] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 387.065913][T15929] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 387.074607][T15929] BTRFS info (device loop4): enabling ssd optimizations [ 387.104030][T15929] BTRFS info (device loop4): not using ssd optimizations [ 387.129897][T15929] BTRFS info (device loop4): turning off barriers [ 387.148049][T15929] BTRFS info (device loop4): using free space tree [ 387.354887][T15929] BTRFS warning (device loop4): this kernel does not support the incompat:16,incompat:23,incompat:36,incompat:43,incompat:46,incompat:48,incompat:49,incompat:54,incompat:60,incompat:62,incompat:63 feature bits [ 387.410828][ T6429] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 388.697368][T15968] loop4: detected capacity change from 0 to 32768 [ 388.719600][T15968] XFS: ikeep mount option is deprecated. [ 388.770200][T15968] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 388.887739][T15968] XFS (loop4): Ending clean mount [ 388.975951][ T5803] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 389.078947][ T6429] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 389.185884][ T5803] usb 2-1: Using ep0 maxpacket: 8 [ 389.192925][ T5803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.245831][ T5803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.275206][ T5803] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 389.295071][T15987] loop2: detected capacity change from 0 to 32768 [ 389.328907][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.390997][ T5803] usb 2-1: config 0 descriptor?? [ 389.790503][T16004] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4358'. [ 389.841737][ T5803] cherry 0003:046A:0027.001B: unknown main item tag 0x3 [ 389.868124][ T5803] cherry 0003:046A:0027.001B: unknown main item tag 0x1 [ 389.875546][ T5803] cherry 0003:046A:0027.001B: bogus close delimiter [ 389.925899][ T5803] cherry 0003:046A:0027.001B: item 0 0 2 10 parsing failed [ 389.954041][T16008] loop2: detected capacity change from 0 to 1024 [ 389.963174][ T5803] cherry: probe of 0003:046A:0027.001B failed with error -22 [ 390.027517][T16008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.046417][ T5805] usb 2-1: USB disconnect, device number 35 [ 390.110155][T16015] loop4: detected capacity change from 0 to 512 [ 390.193336][T16015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.301671][T16015] ext4 filesystem being mounted at /1005/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.420302][ T6429] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.778649][T16030] openvswitch: netlink: Key type 81 is out of range max 32 [ 390.781106][T16028] loop1: detected capacity change from 0 to 764 [ 390.963446][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.099525][T16037] loop1: detected capacity change from 0 to 256 [ 391.845407][T16040] loop2: detected capacity change from 0 to 32768 [ 391.865905][ T5805] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 391.866691][T16040] XFS: ikeep mount option is deprecated. [ 391.920740][T16057] netem: invalid attributes len -24 [ 391.928260][T16057] netem: change failed [ 391.978203][T16040] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 392.048428][ T5805] usb 4-1: too many configurations: 70, using maximum allowed: 8 [ 392.086415][ T5805] usb 4-1: config index 0 descriptor too short (expected 65016, got 133) [ 392.094891][ T5805] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.123517][T16040] XFS (loop2): Ending clean mount [ 392.164829][ T5805] usb 4-1: config index 1 descriptor too short (expected 65016, got 133) [ 392.176136][T16071] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4386'. [ 392.185898][ T5805] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.196471][T16071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4386'. [ 392.213926][ T5805] usb 4-1: config index 2 descriptor too short (expected 65016, got 133) [ 392.238358][ T5805] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.270261][ T5805] usb 4-1: config index 3 descriptor too short (expected 65016, got 133) [ 392.287234][ T5805] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.319180][ T5805] usb 4-1: config index 4 descriptor too short (expected 65016, got 133) [ 392.357912][ T5805] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.383760][ T5764] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 392.394331][ T5805] usb 4-1: config index 5 descriptor too short (expected 65016, got 133) [ 392.407674][ T5805] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.419201][ T5805] usb 4-1: config index 6 descriptor too short (expected 65016, got 133) [ 392.427802][ T5805] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.445129][ T5805] usb 4-1: config index 7 descriptor too short (expected 65016, got 133) [ 392.458244][ T5805] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.471334][ T5805] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 392.480665][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.488829][ T5805] usb 4-1: Product: syz [ 392.493268][ T5805] usb 4-1: Manufacturer: syz [ 392.500730][ T5805] usb 4-1: SerialNumber: syz [ 392.588017][ T5805] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 392.639093][ T5825] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 392.832134][T16083] tipc: Enabling of bearer rejected, failed to enable media [ 393.314887][ T28] usb 4-1: USB disconnect, device number 30 [ 393.345579][T16094] loop1: detected capacity change from 0 to 512 [ 393.376056][T16094] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 393.434318][T16094] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.4397: bg 0: block 507: padding at end of block bitmap is not set [ 393.494612][T16094] EXT4-fs (loop1): Remounting filesystem read-only [ 393.530530][T16094] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 393.577679][T16094] EXT4-fs (loop1): 1 truncate cleaned up [ 393.589782][T16089] loop2: detected capacity change from 0 to 32768 [ 393.592898][T16094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.639753][T16089] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 393.668000][T16089] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 393.754026][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.887424][T16089] XFS (loop2): Ending clean mount [ 393.907218][T16089] XFS (loop2): Quotacheck needed: Please wait. [ 393.956777][ T5825] usb 4-1: Service connection timeout for: 256 [ 393.963003][ T5825] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 394.011273][T16089] XFS (loop2): Quotacheck: Done. [ 394.046658][ T5825] ath9k_htc: Failed to initialize the device [ 394.055039][ T28] usb 4-1: ath9k_htc: USB layer deinitialized [ 394.137603][T16102] loop4: detected capacity change from 0 to 32768 [ 394.156427][T16102] XFS: ikeep mount option is deprecated. [ 394.173296][ T5764] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 394.200585][T16102] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 394.256905][ T5805] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 394.314116][T16102] XFS (loop4): Ending clean mount [ 394.483766][ T5805] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 394.504077][ T5805] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 394.529802][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.536757][ T6429] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 394.551069][ T5805] usb 2-1: Product: syz [ 394.561252][ T5805] usb 2-1: Manufacturer: syz [ 394.570384][ T5805] usb 2-1: SerialNumber: syz [ 394.791762][ T5805] usb 2-1: selecting invalid altsetting 1 [ 394.855883][ T5797] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 394.992522][ T5805] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 394.992642][ T5805] dvb_usb_lmedm04: probe of 2-1:2.0 failed with error -22 [ 395.096664][ T5797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 395.115534][ T5797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 395.130099][ T5797] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 395.144490][ T5797] usb 3-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 395.154291][ T5797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.175271][ T5797] usb 3-1: config 0 descriptor?? [ 395.183048][T16125] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 395.199285][ T5805] usb 2-1: USB disconnect, device number 36 [ 395.614753][ T5797] logitech-hidpp-device 0003:046D:C081.001C: ignoring exceeding usage max [ 395.631924][ T5797] logitech-hidpp-device 0003:046D:C081.001C: item fetching failed at offset 24/40 [ 395.643055][ T5797] logitech-hidpp-device 0003:046D:C081.001C: hidpp_probe:parse failed [ 395.670912][ T5797] logitech-hidpp-device: probe of 0003:046D:C081.001C failed with error -22 [ 395.894121][ T5803] usb 3-1: USB disconnect, device number 35 [ 396.286300][ T5797] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 396.315960][T16138] loop4: detected capacity change from 0 to 32768 [ 396.323239][T16138] XFS: ikeep mount option is deprecated. [ 396.349509][T16138] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 396.388144][T16138] XFS (loop4): Ending clean mount [ 396.500405][ T5797] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 396.517925][ T6429] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 396.523931][ T5797] usb 2-1: config 0 has no interface number 0 [ 396.545010][ T5797] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.564912][ T5797] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.599907][ T5797] usb 2-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 396.635903][ T5797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.657659][ T5797] usb 2-1: config 0 descriptor?? [ 396.775593][T16163] loop2: detected capacity change from 0 to 2048 [ 396.796000][T16163] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 396.867985][T16166] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 397.091255][ T5797] uclogic 0003:28BD:0905.001D: Interface probing failed: -22 [ 397.115905][ T5797] uclogic 0003:28BD:0905.001D: interface is invalid, ignoring [ 397.315010][ T5805] usb 2-1: USB disconnect, device number 37 [ 398.320131][T16196] loop1: detected capacity change from 0 to 2048 [ 398.388936][T16196] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 398.407256][T16200] loop2: detected capacity change from 0 to 256 [ 398.446950][T16203] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 398.518012][T16200] FAT-fs (loop2): Directory bread(block 64) failed [ 398.524583][T16200] FAT-fs (loop2): Directory bread(block 65) failed [ 398.593753][T16200] FAT-fs (loop2): Directory bread(block 66) failed [ 398.615975][T16200] FAT-fs (loop2): Directory bread(block 67) failed [ 398.622637][T16200] FAT-fs (loop2): Directory bread(block 68) failed [ 398.652560][T16200] FAT-fs (loop2): Directory bread(block 69) failed [ 398.684984][T16200] FAT-fs (loop2): Directory bread(block 70) failed [ 398.720435][T16200] FAT-fs (loop2): Directory bread(block 71) failed [ 398.754131][T16200] FAT-fs (loop2): Directory bread(block 72) failed [ 398.754166][T16200] FAT-fs (loop2): Directory bread(block 73) failed [ 398.798895][T16215] netlink: 'syz.4.4438': attribute type 29 has an invalid length. [ 398.799247][T16215] netlink: 'syz.4.4438': attribute type 29 has an invalid length. [ 398.802417][T16215] netlink: 'syz.4.4438': attribute type 29 has an invalid length. [ 399.776833][T16244] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4451'. [ 399.883204][T16249] loop2: detected capacity change from 0 to 1024 [ 399.954540][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 399.954555][ T27] audit: type=1800 audit(1776342029.346:235): pid=16249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4453" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 399.996950][T16251] loop4: detected capacity change from 0 to 128 [ 400.035376][T16251] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 400.054172][T16251] FAT-fs (loop4): Filesystem has been set read-only [ 400.349111][T16223] loop1: detected capacity change from 0 to 40427 [ 400.388853][T16223] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 400.403387][T16223] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 400.458448][T16223] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 400.491340][T16223] F2FS-fs (loop1): Found nat_bits in checkpoint [ 400.630190][T16223] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 400.648254][T16223] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 400.826146][ T5803] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 400.983422][T16281] loop1: detected capacity change from 0 to 256 [ 401.019749][T16281] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x5bae174d, utbl_chksum : 0xe619d30d) [ 401.032540][T16281] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 401.039483][ T5803] usb 4-1: Using ep0 maxpacket: 8 [ 401.081136][ T5803] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 401.094819][ T5803] usb 4-1: config 2 has no interface number 0 [ 401.116509][ T5803] usb 4-1: config 2 interface 31 has no altsetting 0 [ 401.128348][ T5803] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 401.152700][ T5803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.164646][T16285] loop2: detected capacity change from 0 to 256 [ 401.171604][ T5803] usb 4-1: Product: syz [ 401.180231][ T5803] usb 4-1: Manufacturer: syz [ 401.188562][ T5803] usb 4-1: SerialNumber: syz [ 401.249980][T16285] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 401.566058][ T5797] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 401.789063][ T5797] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.809745][ T5797] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 401.835868][ T5797] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 401.854712][ T5797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.868153][ T5803] ch9200: probe of 4-1:2.31 failed with error -22 [ 401.885169][ T5803] usb 4-1: USB disconnect, device number 31 [ 401.897642][ T5797] usb 2-1: config 0 descriptor?? [ 401.929728][ T5797] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 401.940772][T16293] loop2: detected capacity change from 0 to 32768 [ 401.947825][ T5797] dvb-usb: bulk message failed: -22 (3/0) [ 401.974930][ T5797] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 401.994428][ T5797] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 402.002775][ T5797] usb 2-1: media controller created [ 402.010623][ T5797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 402.025995][T16293] JBD2: Ignoring recovery information on journal [ 402.056304][ T5797] dvb-usb: bulk message failed: -22 (6/0) [ 402.063020][ T5797] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 402.080689][ T5797] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input20 [ 402.102542][T16293] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 402.126290][ T5797] dvb-usb: schedule remote query interval to 150 msecs. [ 402.133279][ T5797] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 402.161432][ T5797] usb 2-1: USB disconnect, device number 38 [ 402.178848][T16310] loop4: detected capacity change from 0 to 128 [ 402.207138][T16293] (syz.2.4472,16293,1):ocfs2_remount:630 ERROR: Cannot change data mode on remount [ 402.228351][ T5797] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 402.340359][ T5764] ocfs2: Unmounting device (7,2) on (node local) [ 403.099997][T16339] sp0: Synchronizing with TNC [ 403.174791][T16344] loop4: detected capacity change from 0 to 64 [ 403.428319][T16349] loop2: detected capacity change from 0 to 512 [ 403.450772][T16351] loop1: detected capacity change from 0 to 1024 [ 403.501511][T16351] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 403.571745][T16349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.619975][T16351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.621587][T16349] ext4 filesystem being mounted at /1141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 403.632750][T16351] ext4 filesystem being mounted at /1111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.718711][T16349] EXT4-fs: Ignoring removed nomblk_io_submit option [ 403.725632][T16351] EXT4-fs (loop1): re-mounted 00000000-0000-0006-0000-000000000000. [ 403.757399][T16349] EXT4-fs: Cannot change journaled quota options when quota turned on [ 403.849907][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 403.865252][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.005134][T16369] loop4: detected capacity change from 0 to 512 [ 404.014950][T16369] EXT4-fs: Ignoring removed nobh option [ 404.067443][T16369] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 404.086295][T16369] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 404.098930][T16369] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #13: comm syz.4.4504: inode has both inline data and extents flags [ 404.160639][T16376] tipc: Started in network mode [ 404.165540][T16376] tipc: Node identity 3, cluster identity 129 [ 404.178752][T16369] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.4504: couldn't read orphan inode 13 (err -117) [ 404.216427][T16376] tipc: Node number set to 3 [ 404.228158][T16369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.316764][T16369] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 404.418005][ T6429] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.539308][T16384] ipvlan2: entered allmulticast mode [ 404.544656][T16384] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 404.945048][T16398] loop2: detected capacity change from 0 to 4096 [ 404.964886][T16402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4518'. [ 405.703579][T16428] loop2: detected capacity change from 0 to 512 [ 405.742969][T16428] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.4530: inode has both inline data and extents flags [ 405.766044][T16428] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.4530: couldn't read orphan inode 15 (err -117) [ 405.780800][T16428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.858128][T16428] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #2: comm syz.2.4530: invalid size [ 405.861348][T16433] netlink: 'syz.3.4532': attribute type 1 has an invalid length. [ 405.888340][T16433] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4532'. [ 405.957753][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.198156][T16443] loop1: detected capacity change from 0 to 1024 [ 406.821167][T16459] loop1: detected capacity change from 0 to 1024 [ 406.962108][ T11] hfsplus: b-tree write err: -5, ino 25 [ 407.010002][ T11] hfsplus: b-tree write err: -5, ino 4 [ 407.015594][ T11] hfsplus: b-tree write err: -5, ino 2 [ 407.175403][T16468] loop1: detected capacity change from 0 to 512 [ 407.193755][T16469] loop2: detected capacity change from 0 to 16 [ 407.211949][T16469] erofs: (device loop2): mounted with root inode @ nid 36. [ 407.220811][T16468] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 407.263878][T16468] EXT4-fs (loop1): 1 truncate cleaned up [ 407.288021][T16468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.304996][T16469] overlayfs: failed to get metacopy (-117) [ 407.400249][T16468] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.1.4546: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 407.533573][T16468] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 407.560342][T16468] EXT4-fs warning (device loop1): ext4_rename_delete:3778: inode #2: comm syz.1.4546: Deleting old file: nlink 4, error=-117 [ 407.769375][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.117952][T16500] ubi31: attaching mtd0 [ 408.255456][T16463] loop4: detected capacity change from 0 to 32768 [ 408.270961][T16502] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4565'. [ 408.312220][T16502] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4565'. [ 408.370723][T16463] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 408.447002][T16463] XFS (loop4): Ending clean mount [ 408.477103][T16516] loop2: detected capacity change from 0 to 1024 [ 408.509893][T16516] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 408.539403][T16516] System zones: 0-1, 3-36 [ 408.549265][ T6429] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 408.601419][T16516] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.4568: bad orphan inode 134217728 [ 408.662945][T16524] loop1: detected capacity change from 0 to 1024 [ 408.689525][T16516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.730814][T16524] hfsplus: invalid btree flag [ 408.739411][T16524] hfsplus: failed to load extents file [ 408.809144][ T5757] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 408.917834][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.333765][T16538] loop1: detected capacity change from 0 to 1024 [ 409.439149][T16542] loop4: detected capacity change from 0 to 1024 [ 409.471997][T16542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.540049][T16542] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #12: block 7: comm syz.4.4580: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 409.541059][T16549] mkiss: ax0: crc mode is auto. [ 409.672206][ T6429] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.829711][T16552] loop2: detected capacity change from 0 to 512 [ 409.891434][T16552] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 409.962275][T16552] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 410.005445][T16552] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.4584: Failed to acquire dquot type 1 [ 410.034265][T16552] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 410.066006][T16552] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 410.086722][T16552] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.4584: Failed to acquire dquot type 1 [ 410.120982][T16552] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.4584: bg 0: block 248: padding at end of block bitmap is not set [ 410.152969][T16552] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 410.184934][T16552] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 410.223270][T16552] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 410.264290][T16552] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.4584: Failed to acquire dquot type 1 [ 410.337718][T16552] EXT4-fs (loop2): 1 orphan inode deleted [ 410.375245][T16552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.433169][T16552] ext4 filesystem being mounted at /1162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.737079][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.045782][ C1] sched: RT throttling activated [ 411.091747][T16573] macsec1: entered promiscuous mode [ 411.114129][T16562] loop1: detected capacity change from 0 to 131072 [ 411.117982][T16573] ip6gretap0: entered promiscuous mode [ 411.140543][T16562] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name [ 411.148245][T16562] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name [ 411.156731][T16562] F2FS-fs (loop1): QUOTA feature is enabled, so ignore jquota_fmt [ 411.164563][T16562] F2FS-fs (loop1): inline_xattr_size option should be set with inline_xattr option [ 411.195033][T16573] macsec1: entered allmulticast mode [ 411.216640][T16573] ip6gretap0: entered allmulticast mode [ 411.240825][T16573] ip6gretap0: left allmulticast mode [ 411.278052][T16573] ip6gretap0: left promiscuous mode [ 411.477866][ T5797] kernel write not supported for file /input/mice (pid: 5797 comm: kworker/0:3) [ 411.625952][ T5823] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 411.816113][ T5823] usb 3-1: Using ep0 maxpacket: 16 [ 411.832523][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.857484][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.888936][ T5823] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 411.913501][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.947106][ T5823] usb 3-1: config 0 descriptor?? [ 412.385704][ T5823] corsair 0003:1B1C:1B02.001E: report_id 1961031690 is invalid [ 412.413324][ T5823] corsair 0003:1B1C:1B02.001E: item 0 4 1 8 parsing failed [ 412.432260][ T5823] corsair 0003:1B1C:1B02.001E: parse failed [ 412.455957][ T5823] corsair: probe of 0003:1B1C:1B02.001E failed with error -22 [ 412.591851][ T5823] usb 3-1: USB disconnect, device number 36 [ 412.611371][T16619] loop4: detected capacity change from 0 to 256 [ 412.650223][T16619] FAT-fs (loop4): Directory bread(block 64) failed [ 412.678796][ T5825] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 412.695970][T16619] FAT-fs (loop4): Directory bread(block 65) failed [ 412.728404][T16619] FAT-fs (loop4): Directory bread(block 66) failed [ 412.734974][T16619] FAT-fs (loop4): Directory bread(block 67) failed [ 412.755256][T16619] FAT-fs (loop4): Directory bread(block 68) failed [ 412.773386][ T27] audit: type=1326 audit(1776342042.166:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16622 comm="syz.3.4615" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f96ae39c819 code=0x0 [ 412.773841][T16619] FAT-fs (loop4): Directory bread(block 69) failed [ 412.802467][T16619] FAT-fs (loop4): Directory bread(block 70) failed [ 412.809502][T16619] FAT-fs (loop4): Directory bread(block 71) failed [ 412.816817][T16619] FAT-fs (loop4): Directory bread(block 72) failed [ 412.823357][T16619] FAT-fs (loop4): Directory bread(block 73) failed [ 412.910605][ T5825] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 412.935863][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 412.943989][ T5825] usb 2-1: Product: syz [ 412.963571][ T5825] usb 2-1: Manufacturer: syz [ 412.970259][ T5825] usb 2-1: SerialNumber: syz [ 412.981471][ T5825] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 413.386745][ T5825] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 413.415898][ T5825] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 413.445530][T16637] loop2: detected capacity change from 0 to 4096 [ 413.473266][T16640] tipc: Started in network mode [ 413.496466][T16637] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 413.503697][T16640] tipc: Node identity ac14140f, cluster identity 4711 [ 413.520427][T16640] tipc: New replicast peer: 255.255.255.255 [ 413.531423][T16640] tipc: Enabled bearer , priority 10 [ 413.638460][ T5825] usb 2-1: USB disconnect, device number 39 [ 413.894928][T16648] loop4: detected capacity change from 0 to 8192 [ 413.951346][T16648] loop4: p1 < > p3 p4 < > [ 413.975204][T16648] loop4: p3 start 986112 is beyond EOD, truncated [ 414.298976][ T5756] udevd[5756]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 414.310133][ T5757] udevd[5757]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 414.539981][ T5803] tipc: Node number set to 2886997007 [ 414.550998][T16672] loop1: detected capacity change from 0 to 256 [ 414.590839][T16672] exfat: Deprecated parameter 'namecase' [ 414.629933][T16672] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 415.019181][T16688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4647'. [ 415.052233][T16688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4647'. [ 415.405095][T16699] loop4: detected capacity change from 0 to 16 [ 415.771643][T16686] loop1: detected capacity change from 0 to 32768 [ 415.823670][T16686] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 415.866163][ T5803] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 415.895368][T16686] XFS (loop1): Ending clean mount [ 415.915085][T16686] XFS (loop1): Quotacheck needed: Please wait. [ 416.029748][T16686] XFS (loop1): Quotacheck: Done. [ 416.072126][ T5803] usb 3-1: Using ep0 maxpacket: 16 [ 416.091325][ T5803] usb 3-1: config index 0 descriptor too short (expected 50325, got 36) [ 416.115948][ T5823] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 416.127291][ T5803] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.142273][ T5763] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 416.159900][ T5803] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.182112][ T5803] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 416.200493][ T5803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.264504][ T5803] usb 3-1: config 0 descriptor?? [ 416.369261][ T5823] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 416.378103][ T5823] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 416.388378][ T5823] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 416.399577][ T5823] usb 5-1: config 220 has no interface number 2 [ 416.406399][ T5823] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 416.420063][ T5823] usb 5-1: config 220 interface 0 has no altsetting 0 [ 416.427398][ T5823] usb 5-1: config 220 interface 76 has no altsetting 0 [ 416.434570][ T5823] usb 5-1: config 220 interface 1 has no altsetting 0 [ 416.450230][ T5823] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 416.462503][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.473752][ T5823] usb 5-1: Product: syz [ 416.481670][ T5823] usb 5-1: Manufacturer: syz [ 416.489939][ T5823] usb 5-1: SerialNumber: syz [ 416.563397][T16732] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4664'. [ 416.689869][T16736] loop1: detected capacity change from 0 to 512 [ 416.707281][T16736] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 416.735323][ T5823] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 416.735900][T16736] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 416.742597][ T5803] hid-steam 0003:28DE:1102.001F: unknown main item tag 0x2 [ 416.761058][ T5823] usb 5-1: No valid video chain found. [ 416.766759][ T5823] usb 5-1: selecting invalid altsetting 0 [ 416.772875][ T5803] hid-steam 0003:28DE:1102.001F: item fetching failed at offset 4/5 [ 416.774139][T16736] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 416.804508][ T5823] usb 5-1: selecting invalid altsetting 0 [ 416.814474][ T5803] hid-steam 0003:28DE:1102.001F: steam_probe:parse of hid interface failed [ 416.823734][T16736] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 416.826486][ T5823] usbtest: probe of 5-1:220.1 failed with error -22 [ 416.832570][T16736] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 416.846900][ T5803] hid-steam: probe of 0003:28DE:1102.001F failed with error -22 [ 416.848453][T16736] EXT4-fs (loop1): failed to initialize system zone (-117) [ 416.862263][T16736] EXT4-fs (loop1): mount failed [ 416.864365][ T5823] usb 5-1: USB disconnect, device number 31 [ 416.931041][ T5803] usb 3-1: USB disconnect, device number 37 [ 417.351847][T16751] loop4: detected capacity change from 0 to 256 [ 417.378819][T16751] FAT-fs (loop4): Directory bread(block 64) failed [ 417.385521][T16751] FAT-fs (loop4): Directory bread(block 65) failed [ 417.418403][T16751] FAT-fs (loop4): Directory bread(block 66) failed [ 417.438040][T16751] FAT-fs (loop4): Directory bread(block 67) failed [ 417.458258][T16751] FAT-fs (loop4): Directory bread(block 68) failed [ 417.464830][T16751] FAT-fs (loop4): Directory bread(block 69) failed [ 417.495731][T16751] FAT-fs (loop4): Directory bread(block 70) failed [ 417.518790][T16751] FAT-fs (loop4): Directory bread(block 71) failed [ 417.540031][T16751] FAT-fs (loop4): Directory bread(block 72) failed [ 417.548631][T16751] FAT-fs (loop4): Directory bread(block 73) failed [ 417.575955][T16753] loop1: detected capacity change from 0 to 1024 [ 417.688546][ T49] hfsplus: b-tree write err: -5, ino 25 [ 417.695628][ T49] hfsplus: b-tree write err: -5, ino 4 [ 417.709285][ T49] hfsplus: b-tree write err: -5, ino 2 [ 418.530363][T16762] loop1: detected capacity change from 0 to 32768 [ 418.536987][ T5825] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 418.588837][T16762] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 418.619293][T16762] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 418.699306][T16768] loop4: detected capacity change from 0 to 32768 [ 418.715228][T16762] XFS (loop1): Ending clean mount [ 418.737904][T16762] XFS (loop1): Quotacheck needed: Please wait. [ 418.745532][ T5825] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.787937][ T5825] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 418.798333][ T5825] usb 3-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=dc.8d [ 418.799270][T16768] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 418.807448][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.831745][T16762] XFS (loop1): Quotacheck: Done. [ 418.833532][ T5825] usb 3-1: config 0 descriptor?? [ 418.989173][T16768] XFS (loop4): Ending clean mount [ 418.995650][ T5763] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 419.055888][T16768] XFS (loop4): syz.4.4682 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 419.075535][ T5825] usb 3-1: USB disconnect, device number 38 [ 419.284456][ T6429] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 419.452164][T16804] loop1: detected capacity change from 0 to 2048 [ 419.537216][T16804] loop1: p2 p3 p7 [ 419.574773][ C1] operation not supported error, dev loop1, sector 216 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2 [ 419.864264][ T5992] udevd[5992]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 419.900254][ T5756] udevd[5756]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 419.913019][ T5758] udevd[5758]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 420.118242][T16817] loop1: detected capacity change from 0 to 4096 [ 420.258850][T16817] ntfs3: loop1: failed to convert "0000" to iso8859-9 [ 420.329926][T16817] ntfs3: loop1: failed to convert name for inode 1e. [ 420.462897][T16830] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4702'. [ 420.475486][T16830] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4702'. [ 420.479561][T16831] loop2: detected capacity change from 0 to 1024 [ 420.732879][ T11] hfsplus: b-tree write err: -5, ino 25 [ 420.753281][ T11] hfsplus: b-tree write err: -5, ino 4 [ 420.768265][ T11] hfsplus: b-tree write err: -5, ino 2 [ 421.268679][T16825] loop4: detected capacity change from 0 to 40427 [ 421.288705][T16825] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff [ 421.316774][T16825] F2FS-fs (loop4): invalid crc value [ 421.369093][T16825] F2FS-fs (loop4): Found nat_bits in checkpoint [ 421.497961][T16825] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 421.502828][T16853] vlan3: entered promiscuous mode [ 421.885511][T16839] loop2: detected capacity change from 0 to 40427 [ 421.914168][T16839] F2FS-fs (loop2): invalid crc value [ 421.953358][T16839] F2FS-fs (loop2): Found nat_bits in checkpoint [ 422.101241][T16839] F2FS-fs (loop2): Start checkpoint disabled! [ 422.140258][T16839] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 422.920380][T16888] loop2: detected capacity change from 0 to 64 [ 422.980414][T16888] Trying to free block not in datazone [ 423.014596][T16888] Trying to free block not in datazone [ 423.031154][T16888] Trying to free block not in datazone [ 423.055262][T16888] Trying to free block not in datazone [ 423.065702][T16892] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4730'. [ 423.080868][T16888] Trying to free block not in datazone [ 423.100962][T16888] minix_free_block (loop2:6): bit already cleared [ 423.111160][T16888] Trying to free block not in datazone [ 423.120928][T16888] Trying to free block not in datazone [ 423.234773][T16900] loop1: detected capacity change from 0 to 64 [ 423.490892][T16909] loop2: detected capacity change from 0 to 256 [ 423.504739][T16909] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 423.735906][ T5823] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 423.833426][T16924] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4744'. [ 423.940570][ T5823] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 423.956452][ T5823] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 423.969990][ T5823] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 424.007846][ T5823] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 424.030271][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.055876][ T5823] usb 4-1: Product: syz [ 424.060092][ T5823] usb 4-1: Manufacturer: syz [ 424.064710][ T5823] usb 4-1: SerialNumber: syz [ 424.104227][ T5823] hub 4-1:1.0: bad descriptor, ignoring hub [ 424.129463][ T5823] hub: probe of 4-1:1.0 failed with error -5 [ 424.284990][T16942] loop4: detected capacity change from 0 to 1024 [ 424.329218][ T5823] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 424.389122][T16942] hfsplus: bad catalog entry type [ 424.489006][ T12] hfsplus: b-tree write err: -5, ino 25 [ 424.512638][ T12] hfsplus: b-tree write err: -5, ino 4 [ 424.523186][ T12] hfsplus: b-tree write err: -5, ino 2 [ 424.772074][ T5803] usb 4-1: USB disconnect, device number 32 [ 424.775687][T16956] loop2: detected capacity change from 0 to 4096 [ 424.805316][ T5803] usblp0: removed [ 424.858900][T16961] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 424.887481][T16962] loop1: detected capacity change from 0 to 256 [ 424.905251][T16962] exfat: Deprecated parameter 'namecase' [ 424.942132][T16962] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 425.192367][T16971] loop1: detected capacity change from 0 to 512 [ 425.220532][T16971] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 425.240712][T16971] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 425.249247][T16971] System zones: 1-12 [ 425.253445][T16971] EXT4-fs (loop1): orphan cleanup on readonly fs [ 425.271852][T16971] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.4764: attempt to clear invalid blocks 1024 len 1 [ 425.384234][T16971] EXT4-fs (loop1): Remounting filesystem read-only [ 425.426088][T16971] EXT4-fs (loop1): 1 truncate cleaned up [ 425.465478][T16971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 425.692347][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 426.034172][T17002] macsec1: entered allmulticast mode [ 426.054525][T17002] veth1_macvtap: entered allmulticast mode [ 426.076819][T17002] veth1_macvtap: left allmulticast mode [ 426.084576][T17007] loop1: detected capacity change from 0 to 256 [ 426.118377][T17007] FAT-fs (loop1): "posix" option is obsolete, not supported now [ 426.140977][T17006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4776'. [ 426.190114][T17006] Zero length message leads to an empty skb [ 426.510802][T17023] syz.2.4782[17023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 426.511029][T17023] syz.2.4782[17023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 427.220856][T17045] loop2: detected capacity change from 0 to 2048 [ 427.307841][T17045] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 427.385418][T17045] NILFS (loop2): mounting unchecked fs [ 427.393626][T17019] loop4: detected capacity change from 0 to 40427 [ 427.450727][T17019] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 427.461465][T17045] NILFS (loop2): recovery complete [ 427.463034][T17019] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 427.497067][T17054] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 427.524446][T17019] F2FS-fs (loop4): invalid crc value [ 427.557268][T17019] F2FS-fs (loop4): Found nat_bits in checkpoint [ 427.704128][T17019] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 427.730127][T17019] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 427.745911][T17029] loop1: detected capacity change from 0 to 32768 [ 427.843881][T17029] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 427.941079][ T222] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 427.990410][ T222] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 428.070952][T17029] XFS (loop1): Ending clean mount [ 428.093685][T17029] XFS (loop1): Quotacheck needed: Please wait. [ 428.193934][T17029] XFS (loop1): Quotacheck: Done. [ 428.313639][T17071] smc: net device bond0 applied user defined pnetid SYZ0 [ 428.328692][ T5763] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 429.014635][T17080] loop4: detected capacity change from 0 to 32768 [ 429.055029][T17080] MetaData crosses page boundary!! [ 429.060864][T17080] lblock = 621600, size = 28672 [ 429.065926][T17080] CPU: 0 PID: 17080 Comm: syz.4.4793 Not tainted syzkaller #0 [ 429.073413][T17080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 429.083505][T17080] Call Trace: [ 429.086819][T17080] [ 429.089777][T17080] dump_stack_lvl+0x18c/0x250 [ 429.094495][T17080] ? show_regs_print_info+0x20/0x20 [ 429.099726][T17080] ? load_image+0x420/0x420 [ 429.104281][T17080] __get_metapage+0xaac/0xfa0 [ 429.108993][T17080] dtSearch+0x591/0x21b0 [ 429.113297][T17080] jfs_lookup+0x1b1/0x420 [ 429.116019][ T5805] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 429.117643][T17080] ? jfs_get_parent+0xb0/0xb0 [ 429.129941][T17080] ? apparmor_path_rmdir+0x300/0x300 [ 429.135260][T17080] ? make_vfsuid+0x51/0xb0 [ 429.139705][T17080] ? inode_permission+0xf3/0x480 [ 429.144641][T17080] ? bpf_lsm_inode_create+0x9/0x10 [ 429.149755][T17080] ? security_inode_create+0xb7/0x100 [ 429.155140][T17080] ? jfs_get_parent+0xb0/0xb0 [ 429.159815][T17080] path_openat+0x10e4/0x3230 [ 429.164415][T17080] ? do_filp_open+0x430/0x430 [ 429.169099][T17080] ? __virt_addr_valid+0x18c/0x540 [ 429.174229][T17080] do_filp_open+0x1f5/0x430 [ 429.178735][T17080] ? vfs_tmpfile+0x490/0x490 [ 429.183330][T17080] ? _raw_spin_unlock+0x28/0x40 [ 429.188183][T17080] ? alloc_fd+0x58f/0x630 [ 429.192549][T17080] do_sys_openat2+0x134/0x1d0 [ 429.197255][T17080] ? do_sys_open+0xe0/0xe0 [ 429.201706][T17080] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 429.207710][T17080] ? lock_chain_count+0x20/0x20 [ 429.212570][T17080] __x64_sys_openat+0x139/0x160 [ 429.217420][T17080] do_syscall_64+0x55/0xa0 [ 429.221828][T17080] ? clear_bhb_loop+0x40/0x90 [ 429.226509][T17080] ? clear_bhb_loop+0x40/0x90 [ 429.231199][T17080] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.237110][T17080] RIP: 0033:0x7f0a4c59c819 [ 429.241525][T17080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.261123][T17080] RSP: 002b:00007f0a4d460028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 429.269540][T17080] RAX: ffffffffffffffda RBX: 00007f0a4c815fa0 RCX: 00007f0a4c59c819 [ 429.277546][T17080] RDX: 000000000000275a RSI: 0000200000000200 RDI: ffffffffffffff9c [ 429.285507][T17080] RBP: 00007f0a4c632c91 R08: 0000000000000000 R09: 0000000000000000 [ 429.293475][T17080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.301437][T17080] R13: 00007f0a4c816038 R14: 00007f0a4c815fa0 R15: 00007ffe6045a6b8 [ 429.309429][T17080] [ 429.316778][T17080] bread failed! [ 429.319295][ T5805] usb 4-1: unable to get BOS descriptor or descriptor too short [ 429.320275][T17080] jfs_lookup: dtSearch returned -5 [ 429.341182][ T5805] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 429.352594][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.362672][ T5805] usb 4-1: Product: syz [ 429.369282][ T5805] usb 4-1: Manufacturer: syz [ 429.385423][ T5805] usb 4-1: SerialNumber: syz [ 429.407890][ T5805] usb 4-1: selecting invalid altsetting 1 [ 429.433004][ T5805] usb 4-1: unit 6 not found! [ 429.809861][ T5805] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 429.839451][ T5805] usb 4-1: selecting invalid altsetting 1 [ 429.866561][ T5805] usb 4-1: unit 6 not found! [ 429.902748][ T5805] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 429.938078][ T5805] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 429.957599][ T5805] usb 4-1: selecting invalid altsetting 1 [ 429.973194][ T5805] usb 4-1: unit 6 not found! [ 429.985683][ T5805] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 430.068074][ T5805] snd-usb-audio: probe of 4-1:1.2 failed with error -22 [ 430.091881][ T5805] usb 4-1: USB disconnect, device number 33 [ 430.153281][ T5757] udevd[5757]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.185350][T17106] loop1: detected capacity change from 0 to 1024 [ 430.831854][T17130] loop1: detected capacity change from 0 to 128 [ 430.863188][T17130] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 430.887248][T17130] hpfs: filesystem error: improperly stopped [ 430.905930][T17130] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 430.934247][T17130] hpfs: You really don't want any checks? You are crazy... [ 430.945241][T17130] hpfs: hpfs_map_sector(): read error [ 430.966458][T17130] hpfs: code page support is disabled [ 430.995123][T17130] hpfs: hpfs_map_4sectors(): unaligned read [ 431.016935][T17130] hpfs: hpfs_map_4sectors(): unaligned read [ 431.022883][T17130] hpfs: filesystem error: unable to find root dir [ 431.151336][T17140] loop4: detected capacity change from 0 to 64 [ 431.211519][T17140] syz.4.4824: attempt to access beyond end of device [ 431.211519][T17140] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 431.259522][T17143] loop2: detected capacity change from 0 to 8 [ 431.279750][T17140] Buffer I/O error on dev loop4, logical block 512, async page read [ 431.316427][T17140] syz.4.4824: attempt to access beyond end of device [ 431.316427][T17140] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 431.356859][T17143] SQUASHFS error: Unable to read directory block [2c0:35] [ 431.367345][T17145] vivid-002: ================= START STATUS ================= [ 431.369674][T17140] Buffer I/O error on dev loop4, logical block 56576, async page read [ 431.387033][T17145] vivid-002: Radio HW Seek Mode: Bounded [ 431.412523][T17145] vivid-002: Radio Programmable HW Seek: false [ 431.426083][T17145] vivid-002: RDS Rx I/O Mode: Block I/O [ 431.435988][T17145] vivid-002: Generate RBDS Instead of RDS: false [ 431.467102][T17145] vivid-002: RDS Reception: true [ 431.472161][T17145] vivid-002: RDS Program Type: 0 inactive [ 431.489196][T17145] vivid-002: RDS PS Name: inactive [ 431.494544][T17145] vivid-002: RDS Radio Text: inactive [ 431.502966][T17145] vivid-002: RDS Traffic Announcement: false inactive [ 431.530395][T17145] vivid-002: RDS Traffic Program: false inactive [ 431.550349][T17145] vivid-002: RDS Music: false inactive [ 431.574135][T17145] vivid-002: ================== END STATUS ================== [ 431.583024][T17150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.605837][T17150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.650744][T17150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.686506][T17150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.718341][T17150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.745825][T17150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.039292][T17169] netlink: 'syz.4.4839': attribute type 29 has an invalid length. [ 432.048933][T17169] netlink: 'syz.4.4839': attribute type 29 has an invalid length. [ 432.059127][T17171] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4838'. [ 432.094471][T17169] netlink: 'syz.4.4839': attribute type 29 has an invalid length. [ 432.404785][T17185] loop1: detected capacity change from 0 to 1024 [ 432.462786][T17185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 432.502578][T17185] ext4 filesystem being mounted at /1196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.545054][T17196] loop2: detected capacity change from 0 to 512 [ 432.563814][T17185] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm syz.1.4845: lblock 0 mapped to illegal pblock 0 (length 1) [ 432.587569][T17185] EXT4-fs (loop1): Remounting filesystem read-only [ 432.639755][T17196] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 432.652953][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 432.689197][T17196] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 432.698848][T17196] System zones: 0-1, 15-15, 18-18, 34-34 [ 432.717208][T17196] EXT4-fs (loop2): orphan cleanup on readonly fs [ 432.723694][T17196] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 432.733956][T17196] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 432.748714][T17196] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 432.758326][T17196] EXT4-fs (loop2): 1 truncate cleaned up [ 432.765176][T17196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 432.807010][T17202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4851'. [ 432.835886][T17196] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 432.873035][T17196] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 432.968329][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.486007][ T5823] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 433.505208][T17222] loop1: detected capacity change from 0 to 512 [ 433.549231][T17222] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.4860: bad orphan inode 13 [ 433.600355][T17222] ext4_test_bit(bit=12, block=4) = 1 [ 433.607214][T17222] is_bad_inode(inode)=0 [ 433.611454][T17222] NEXT_ORPHAN(inode)=0 [ 433.615530][T17222] max_ino=32 [ 433.659451][T17222] i_nlink=1 [ 433.663856][T17222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.720690][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 433.734606][T17222] EXT4-fs warning (device loop1): dx_probe:845: inode #2: comm syz.1.4860: Hash code is SIPHASH, but hash not in dirent [ 433.748282][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.761106][T17229] loop2: detected capacity change from 0 to 512 [ 433.762978][T17222] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.4860: Corrupt directory, running e2fsck is recommended [ 433.780621][ T5823] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 433.794733][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.804129][T17229] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 433.810641][ T5823] usb 5-1: config 0 descriptor?? [ 433.848583][T17222] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz.1.4860: path /1201/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 433.876261][T17229] EXT4-fs (loop2): orphan cleanup on readonly fs [ 433.882910][T17229] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:512: comm syz.2.4863: Block bitmap for bg 0 marked uninitialized [ 433.901137][T17222] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.4860: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 433.990038][T17229] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 434.011354][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.014743][T17229] EXT4-fs (loop2): 1 orphan inode deleted [ 434.028816][T17229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 434.150229][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.286193][T17240] loop2: detected capacity change from 0 to 512 [ 434.288178][ T5823] isku 0003:1E7D:319C.0020: unknown main item tag 0x0 [ 434.308583][T17240] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 434.333030][T17240] EXT4-fs (loop2): 1 truncate cleaned up [ 434.344817][T17240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.346352][ T5823] isku 0003:1E7D:319C.0020: unknown main item tag 0x0 [ 434.407147][ T5823] isku 0003:1E7D:319C.0020: unknown main item tag 0x0 [ 434.444436][ T5823] isku 0003:1E7D:319C.0020: unknown main item tag 0x0 [ 434.462323][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.487876][ T5823] isku 0003:1E7D:319C.0020: unknown main item tag 0x0 [ 434.494722][ T5823] isku 0003:1E7D:319C.0020: unknown main item tag 0x0 [ 434.519706][ T5823] isku 0003:1E7D:319C.0020: unknown main item tag 0x0 [ 434.574351][ T5823] isku 0003:1E7D:319C.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 434.613366][ T5823] isku 0003:1E7D:319C.0020: couldn't init struct isku_device [ 434.650659][ T5823] isku 0003:1E7D:319C.0020: couldn't install keyboard [ 434.685053][ T5823] isku: probe of 0003:1E7D:319C.0020 failed with error -71 [ 434.726178][ T5823] usb 5-1: USB disconnect, device number 32 [ 434.729998][T17252] loop1: detected capacity change from 0 to 64 [ 434.735049][T17248] fido_id[17248]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 435.463807][T17276] loop4: detected capacity change from 0 to 4096 [ 435.479825][T17280] netlink: 'syz.1.4887': attribute type 11 has an invalid length. [ 435.498185][T17280] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4887'. [ 435.545977][T17276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.596309][T17285] loop2: detected capacity change from 0 to 512 [ 435.643177][ T6429] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.691107][T17285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.713990][T17290] loop1: detected capacity change from 0 to 512 [ 435.746960][T17285] ext4 filesystem being mounted at /1239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 435.752707][T17290] EXT4-fs: Ignoring removed bh option [ 435.768247][T17290] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 435.854096][T17290] EXT4-fs (loop1): 1 truncate cleaned up [ 435.908876][T17290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.106702][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.114179][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.554337][T17314] loop2: detected capacity change from 0 to 256 [ 436.582378][T17316] loop4: detected capacity change from 0 to 512 [ 436.603707][T17316] EXT4-fs: Ignoring removed orlov option [ 436.611920][T17314] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 436.644443][T17316] EXT4-fs (loop4): Test dummy encryption mode enabled [ 436.655603][T17316] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 436.691926][T17316] EXT4-fs (loop4): 1 truncate cleaned up [ 436.710931][T17316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.784943][ T6429] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.017178][T17321] loop2: detected capacity change from 0 to 512 [ 437.056036][T17321] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 437.100121][T17323] loop4: detected capacity change from 0 to 2048 [ 437.118326][T17321] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.4905: bad orphan inode 131083 [ 437.146030][T17325] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 437.167095][T17321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.174520][T17312] loop1: detected capacity change from 0 to 32768 [ 437.193462][T17312] (syz.1.4901,17312,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 437.214183][T17312] (syz.1.4901,17312,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 437.280744][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.290762][T17312] JBD2: Ignoring recovery information on journal [ 437.430931][T17312] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 437.572101][T17329] loop2: detected capacity change from 0 to 1764 [ 437.711969][ T5763] ocfs2: Unmounting device (7,1) on (node local) [ 437.975886][ T28] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 438.175867][ T28] usb 5-1: Using ep0 maxpacket: 16 [ 438.187996][ T28] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.206678][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 438.218419][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 438.228285][ T28] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 438.238065][ T28] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.252728][ T28] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 438.265248][ T28] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 438.277324][ T28] usb 5-1: Manufacturer: syz [ 438.289213][ T28] usb 5-1: config 0 descriptor?? [ 438.635948][ T28] rc_core: IR keymap rc-hauppauge not found [ 438.655260][ T28] Registered IR keymap rc-empty [ 438.677195][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 438.715916][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 438.741855][T17356] loop1: detected capacity change from 0 to 8192 [ 438.748155][ T28] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 438.769341][ T28] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input22 [ 438.776589][T17356] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 438.815339][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 438.844876][T17356] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 438.856081][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 438.875960][T17356] REISERFS (device loop1): using ordered data mode [ 438.900403][T17356] reiserfs: using flush barriers [ 438.925974][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 438.942845][T17356] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 438.966307][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 439.006286][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 439.013728][T17356] REISERFS (device loop1): checking transaction log (loop1) [ 439.014889][T17356] REISERFS (device loop1): Using r5 hash to sort names [ 439.049185][T17356] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 439.067487][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 439.120041][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 439.166945][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 439.210652][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 439.254528][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 439.295942][ T28] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 439.328002][ T28] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 439.360290][ T28] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 439.397960][ T28] usb 5-1: USB disconnect, device number 33 [ 439.602146][T17370] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 439.612163][T17370] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 439.628245][T17370] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 439.652153][T17370] comedi comedi3: 8255: I/O port conflict (0xd,4) [ 439.672126][T17370] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 439.701434][T17370] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 439.725973][T17370] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 439.754576][T17370] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 439.774906][T17370] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 439.794877][T17370] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 439.813639][T17370] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 439.833895][T17370] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 439.845989][T17370] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 439.875392][T17370] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 439.904908][T17370] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 439.936306][T17370] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 439.968247][T17370] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 439.974767][T17370] comedi comedi3: 8255: I/O port conflict (0x402,4) [ 439.991955][T17378] FAT-fs (loop4): Directory bread(block 64) failed [ 440.017461][T17370] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 440.020310][T17378] FAT-fs (loop4): Directory bread(block 65) failed [ 440.030529][T17370] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 440.030574][T17370] comedi comedi3: 8255: I/O port conflict (0x40,4) [ 440.030611][T17370] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 440.030645][T17370] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 440.030685][T17370] comedi comedi3: 8255: I/O port conflict (0x8000003,4) [ 440.089413][T17378] FAT-fs (loop4): Directory bread(block 66) failed [ 440.120855][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.127344][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.129276][T17378] FAT-fs (loop4): Directory bread(block 67) failed [ 440.157544][T17378] FAT-fs (loop4): Directory bread(block 68) failed [ 440.179149][T17378] FAT-fs (loop4): Directory bread(block 69) failed [ 440.185989][T17378] FAT-fs (loop4): Directory bread(block 70) failed [ 440.192628][T17378] FAT-fs (loop4): Directory bread(block 71) failed [ 440.200925][T17378] FAT-fs (loop4): Directory bread(block 72) failed [ 440.207715][T17378] FAT-fs (loop4): Directory bread(block 73) failed [ 440.472263][T17390] vivid-004: disconnect [ 440.489740][T17388] vivid-004: reconnect [ 440.933516][T17399] set_capacity_and_notify: 2 callbacks suppressed [ 440.933530][T17399] loop2: detected capacity change from 0 to 4096 [ 441.023924][T17399] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 441.088720][T17399] ntfs3: loop2: Failed to load $Extend (-22). [ 441.112399][T17399] ntfs3: loop2: Failed to initialize $Extend. [ 441.147022][ T27] audit: type=1800 audit(1776342070.546:237): pid=17399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4940" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 441.148086][T17399] ntfs3: loop2: ino=21, "bus" fallocate(0x11) is not supported [ 441.312749][T17416] loop1: detected capacity change from 0 to 512 [ 441.331738][T17416] EXT4-fs: Ignoring removed orlov option [ 441.391705][T17418] xt_l2tp: v2 tid > 0xffff: 37482740 [ 441.448982][T17416] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 441.546145][T17416] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 441.572960][T17416] EXT4-fs (loop1): orphan cleanup on readonly fs [ 441.585900][T17416] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 441.621196][T17416] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 441.654892][T17416] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 441.681600][T17416] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.4949: bg 0: block 40: padding at end of block bitmap is not set [ 441.708839][T17416] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 441.723555][T17433] loop4: detected capacity change from 0 to 256 [ 441.738598][T17416] EXT4-fs (loop1): 1 truncate cleaned up [ 441.764964][T17416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 441.770856][T17433] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 441.944212][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.108934][T17437] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 442.133246][T17437] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 442.349734][T17441] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 442.356310][T17441] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 442.386449][T17441] vhci_hcd vhci_hcd.0: Device attached [ 442.404707][T17442] vhci_hcd: connection closed [ 442.421398][ T49] vhci_hcd: stop threads [ 442.430873][ T49] vhci_hcd: release socket [ 442.435318][ T49] vhci_hcd: disconnect device [ 442.672951][T17451] loop4: detected capacity change from 0 to 4096 [ 443.022784][T17457] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 443.049658][T17457] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 443.070589][T17457] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 443.122277][T17460] loop1: detected capacity change from 0 to 512 [ 443.162914][T17460] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 443.229446][T17460] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.4966: invalid indirect mapped block 32768 (level 2) [ 443.348382][T17460] EXT4-fs (loop1): Remounting filesystem read-only [ 443.389101][T17460] EXT4-fs (loop1): 1 orphan inode deleted [ 443.394880][T17460] EXT4-fs (loop1): 1 truncate cleaned up [ 443.415209][T17460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.443858][T17460] EXT4-fs warning (device loop1): empty_inline_dir:1882: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 443.507345][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.681472][T17480] macsec0: entered promiscuous mode [ 443.699727][T17480] macsec1: entered allmulticast mode [ 443.705061][T17480] macsec0: entered allmulticast mode [ 443.716132][T17480] veth1_macvtap: entered allmulticast mode [ 443.762774][T17481] loop1: detected capacity change from 0 to 8192 [ 443.803182][T17481] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 443.863208][T17467] loop4: detected capacity change from 0 to 32768 [ 443.874678][T17481] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 443.877992][T17467] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 443.912617][T17481] REISERFS (device loop1): using ordered data mode [ 443.926790][T17467] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 443.977733][T17481] reiserfs: using flush barriers [ 444.014791][T17481] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 444.033136][T17481] REISERFS (device loop1): checking transaction log (loop1) [ 444.083222][T17467] XFS (loop4): Ending clean mount [ 444.150204][T17467] XFS (loop4): Quotacheck needed: Please wait. [ 444.269228][T17467] XFS (loop4): Quotacheck: Done. [ 444.338199][T17481] REISERFS (device loop1): Using tea hash to sort names [ 444.345509][T17481] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 444.352733][T17502] loop2: detected capacity change from 0 to 512 [ 444.409458][T17502] EXT4-fs: Ignoring removed nobh option [ 444.459719][T17502] EXT4-fs error (device loop2): __ext4_iget:5078: inode #11: block 1: comm syz.2.4981: invalid block [ 444.494325][ T6429] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 444.533779][T17502] EXT4-fs (loop2): Remounting filesystem read-only [ 444.541764][T17502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.659497][T17508] program syz.3.4985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 444.681895][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.973805][T17548] ptrace attach of "./syz-executor exec"[5764] was attempted by ""[17548] [ 446.312805][T17561] loop4: detected capacity change from 0 to 2048 [ 446.343105][T17561] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 446.376921][T17561] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 446.406134][T17561] UDF-fs: Scanning with blocksize 512 failed [ 446.458153][T17561] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 447.129275][T17577] loop4: detected capacity change from 0 to 64 [ 447.239635][T17563] loop2: detected capacity change from 0 to 40427 [ 447.296072][T17563] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 447.303072][T17563] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 447.331565][T17563] F2FS-fs (loop2): heap/no_heap options were deprecated [ 447.356137][T17563] F2FS-fs (loop2): invalid crc value [ 447.379299][T17563] F2FS-fs (loop2): Found nat_bits in checkpoint [ 447.595230][T17563] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 447.609191][T17563] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 447.826573][ T5764] syz-executor: attempt to access beyond end of device [ 447.826573][ T5764] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 447.858607][ T5764] F2FS-fs (loop2): Remounting filesystem read-only [ 447.866023][ T5764] syz-executor: attempt to access beyond end of device [ 447.866023][ T5764] loop2: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 447.908245][ T5764] F2FS-fs (loop2): Remounting filesystem read-only [ 448.075486][T17595] loop4: detected capacity change from 0 to 1024 [ 448.132233][T17595] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 448.197195][T17595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.402909][ T6429] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.493636][T17571] loop1: detected capacity change from 0 to 40427 [ 448.520152][T17571] F2FS-fs (loop1): invalid crc value [ 448.547071][T17571] F2FS-fs (loop1): Found nat_bits in checkpoint [ 448.580476][T17609] loop4: detected capacity change from 0 to 256 [ 448.632693][T17609] FAT-fs (loop4): Directory bread(block 64) failed [ 448.649270][T17609] FAT-fs (loop4): Directory bread(block 65) failed [ 448.664890][T17609] FAT-fs (loop4): Directory bread(block 66) failed [ 448.675741][T17609] FAT-fs (loop4): Directory bread(block 67) failed [ 448.708312][T17609] FAT-fs (loop4): Directory bread(block 68) failed [ 448.729256][T17609] FAT-fs (loop4): Directory bread(block 69) failed [ 448.744472][T17571] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 448.765996][T17609] FAT-fs (loop4): Directory bread(block 70) failed [ 448.797593][T17609] FAT-fs (loop4): Directory bread(block 71) failed [ 448.816251][T17609] FAT-fs (loop4): Directory bread(block 72) failed [ 448.840471][T17609] FAT-fs (loop4): Directory bread(block 73) failed [ 449.397338][T17610] loop2: detected capacity change from 0 to 32768 [ 449.416572][T17610] (syz.2.5027,17610,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 449.440467][T17610] (syz.2.5027,17610,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 449.461635][T17621] loop4: detected capacity change from 0 to 1024 [ 449.488027][T17610] JBD2: Ignoring recovery information on journal [ 449.523362][T17610] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 449.568810][T17621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.647385][T17621] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #12: block 7: comm syz.4.5033: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 449.753410][T17621] EXT4-fs (loop4): Remounting filesystem read-only [ 449.852592][ T6429] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.917742][ T5764] ocfs2: Unmounting device (7,2) on (node local) [ 450.236748][T17633] loop2: detected capacity change from 0 to 512 [ 450.253368][T17633] EXT4-fs: Ignoring removed bh option [ 450.293493][T17633] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 450.331726][T17633] EXT4-fs (loop2): 1 truncate cleaned up [ 450.377304][T17633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.516006][T17633] EXT4-fs warning (device loop2): ext4_group_add:1742: No reserved GDT blocks, can't resize [ 450.661186][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.074250][T17648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5043'. [ 451.337047][T17652] loop2: detected capacity change from 0 to 512 [ 451.366178][T17654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5046'. [ 451.404430][T17640] loop4: detected capacity change from 0 to 32768 [ 451.423166][T17652] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 451.482312][T17640] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 451.537033][T17652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.549704][T17652] ext4 filesystem being mounted at /1278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.552104][T17640] JBD2: Ignoring recovery information on journal [ 451.730862][T17629] loop1: detected capacity change from 0 to 32768 [ 451.770229][T17640] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 451.781512][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.947707][T17629] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 452.087047][T17629] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 452.184434][ T6429] ocfs2: Unmounting device (7,4) on (node local) [ 452.205040][T17629] JBD2: Ignoring recovery information on journal [ 452.314669][T17629] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 452.577984][ T5763] ocfs2: Unmounting device (7,1) on (node local) [ 452.676232][T17675] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5051'. [ 452.735133][T17666] loop2: detected capacity change from 0 to 40427 [ 452.769991][T17666] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 452.798865][T17666] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 452.832589][T17666] F2FS-fs (loop2): invalid crc value [ 453.063932][T17666] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 453.103728][T17666] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 453.173116][T17684] loop1: detected capacity change from 0 to 4096 [ 453.235603][ T5764] syz-executor: attempt to access beyond end of device [ 453.235603][ T5764] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 453.293406][ T5764] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 453.369852][T17684] ntfs3: loop1: failed to convert "0080" to maciceland [ 453.387809][T17684] ntfs3: loop1: failed to convert name for inode 1e. [ 453.757202][ T5797] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 453.839495][T17705] loop1: detected capacity change from 0 to 4096 [ 453.865863][T17705] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 453.916948][T17705] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 453.992829][ T5797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 454.012968][ T5797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.023458][ T222] ntfs3: loop1: ino=1a, ntfs3_write_inode failed, -22. [ 454.024057][ T5797] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 454.038480][ T5763] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22. [ 454.045932][ T5797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.048611][ T5797] usb 4-1: config 0 descriptor?? [ 454.379258][T17719] loop4: detected capacity change from 0 to 1024 [ 454.434718][ T27] audit: type=1800 audit(1776342083.826:238): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5072" name="file1" dev="loop4" ino=26 res=0 errno=0 [ 454.486121][ T5797] elan 0003:04F3:0755.0021: unknown main item tag 0x0 [ 454.520866][ T5797] elan 0003:04F3:0755.0021: unknown main item tag 0x0 [ 454.549169][ T5797] elan 0003:04F3:0755.0021: unknown main item tag 0x0 [ 454.575903][ T5797] elan 0003:04F3:0755.0021: unknown main item tag 0x0 [ 454.589000][ T5797] elan 0003:04F3:0755.0021: unknown main item tag 0x0 [ 454.608004][ T5797] elan 0003:04F3:0755.0021: failed to start in urb: -90 [ 454.627627][ T5797] elan 0003:04F3:0755.0021: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 454.644738][T17725] loop4: detected capacity change from 0 to 512 [ 454.680523][ T5825] usb 4-1: USB disconnect, device number 34 [ 454.849757][T17726] fido_id[17726]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 454.961303][T17711] loop2: detected capacity change from 0 to 40427 [ 455.015104][T17711] F2FS-fs (loop2): invalid crc value [ 455.040839][T17711] F2FS-fs (loop2): Found nat_bits in checkpoint [ 455.137584][T17711] F2FS-fs (loop2): Start checkpoint disabled! [ 455.181336][T17711] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 455.431019][ T11] kworker/u4:0: attempt to access beyond end of device [ 455.431019][ T11] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 455.458618][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 455.473323][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 455.486087][ T5797] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 455.604433][T17732] loop4: detected capacity change from 0 to 32768 [ 455.675913][ T5797] usb 2-1: Using ep0 maxpacket: 8 [ 455.694608][ T5797] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 455.710896][ T5797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.756370][ T5797] usb 2-1: Product: syz [ 455.760591][ T5797] usb 2-1: Manufacturer: syz [ 455.765210][ T5797] usb 2-1: SerialNumber: syz [ 455.794836][ T5797] usb 2-1: config 0 descriptor?? [ 455.826905][ T5797] gspca_main: se401-2.14.0 probing 047d:5003 [ 456.239965][ T5797] gspca_se401: Bayer format not supported! [ 456.333174][ T27] audit: type=1326 audit(1776342085.726:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17761 comm="syz.2.5092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719dd9c819 code=0x7ffc0000 [ 456.386129][ T27] audit: type=1326 audit(1776342085.726:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17761 comm="syz.2.5092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719dd9c819 code=0x7ffc0000 [ 456.446100][ T27] audit: type=1326 audit(1776342085.726:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17761 comm="syz.2.5092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719dd9c819 code=0x7ffc0000 [ 456.456944][ T5797] usb 2-1: USB disconnect, device number 40 [ 456.508658][ T27] audit: type=1326 audit(1776342085.726:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17761 comm="syz.2.5092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719dd9c819 code=0x7ffc0000 [ 456.557980][ T27] audit: type=1326 audit(1776342085.726:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17761 comm="syz.2.5092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f719dd9c819 code=0x7ffc0000 [ 456.603333][T17766] loop4: detected capacity change from 0 to 512 [ 456.611363][ T27] audit: type=1326 audit(1776342085.726:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17761 comm="syz.2.5092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719dd9c819 code=0x7ffc0000 [ 456.641353][ T27] audit: type=1326 audit(1776342085.726:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17761 comm="syz.2.5092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719dd9c819 code=0x7ffc0000 [ 456.666871][T17766] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 456.684765][ T27] audit: type=1326 audit(1776342085.726:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17761 comm="syz.2.5092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719dd9c819 code=0x7ffc0000 [ 456.696005][T17766] EXT4-fs (loop4): 1 truncate cleaned up [ 456.707508][ T27] audit: type=1326 audit(1776342085.726:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17761 comm="syz.2.5092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719dd9c819 code=0x7ffc0000 [ 456.741514][T17766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.871679][T17766] EXT4-fs: Ignoring removed orlov option [ 456.895621][T17766] EXT4-fs: Ignoring removed orlov option [ 456.912600][T17766] EXT4-fs error (device loop4): __ext4_remount:6756: comm syz.4.5094: Abort forced by user [ 456.933336][T17766] EXT4-fs (loop4): Remounting filesystem read-only [ 456.940172][T17766] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 457.029728][ T6429] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.931687][T17782] loop1: detected capacity change from 0 to 32768 [ 458.202929][T17787] loop2: detected capacity change from 0 to 32768 [ 458.256701][T17807] loop4: detected capacity change from 0 to 1024 [ 458.265086][T17787] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 458.501951][T17787] XFS (loop2): Ending clean mount [ 458.502643][T17817] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5115'. [ 458.656494][ T5764] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 458.691540][T17821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5117'. [ 459.025391][T17829] netlink: zone id is out of range [ 459.244018][T17836] loop1: detected capacity change from 0 to 164 [ 459.295492][T17836] Unable to read rock-ridge attributes [ 459.323124][T17836] Unable to read rock-ridge attributes [ 459.424872][T17841] loop2: detected capacity change from 0 to 256 [ 459.471451][T17841] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 459.547329][T17841] exFAT-fs (loop2): error, invalid size(size(0) > aligned(9223372036854777344) [ 459.547329][T17841] [ 459.613501][T17841] exFAT-fs (loop2): Filesystem has been set read-only [ 459.881318][T17831] loop4: detected capacity change from 0 to 32768 [ 459.995594][T17831] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 460.094122][T17831] XFS (loop4): Ending clean mount [ 460.336933][ T6429] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 460.495069][T17876] loop2: detected capacity change from 0 to 8192 [ 460.525998][T17882] netlink: 268 bytes leftover after parsing attributes in process `syz.1.5142'. [ 460.559721][T17882] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5142'. [ 460.562773][T17876] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 460.651270][T17876] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 460.660623][T17876] REISERFS (device loop2): using ordered data mode [ 460.679206][T17876] reiserfs: using flush barriers [ 460.692701][T17876] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 460.716388][T17876] REISERFS (device loop2): checking transaction log (loop2) [ 460.717143][T17885] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 460.730214][T17885] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 460.743120][T17876] REISERFS (device loop2): Using r5 hash to sort names [ 460.766034][T17885] vhci_hcd vhci_hcd.0: Device attached [ 460.779003][T17876] reiserfs: enabling write barrier flush mode [ 460.795908][T17886] usbip_core: unknown command [ 460.800608][T17886] vhci_hcd: unknown pdu 0 [ 460.821023][T17876] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 460.826363][T17886] usbip_core: unknown command [ 460.858026][T17876] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 460.918890][ T49] vhci_hcd: stop threads [ 460.923207][ T49] vhci_hcd: release socket [ 460.930365][T17876] REISERFS (device loop2): Remounting filesystem read-only [ 460.946494][ T49] vhci_hcd: disconnect device [ 460.955536][T17876] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 460.971575][ T5805] vhci_hcd: vhci_device speed not set [ 460.987318][T17876] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 461.025898][T17876] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 461.053016][T17876] REISERFS error (device loop2): zam-7001 reiserfs_find_entry: io error [ 461.085082][T17876] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 461.109718][T17876] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 461.124812][T17876] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 461.139541][T17876] REISERFS warning (device loop2): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 461.225529][ T5764] ------------[ cut here ]------------ [ 461.231304][ T5764] kernel BUG at fs/reiserfs/journal.c:1916! [ 461.253392][ T5764] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 461.259501][ T5764] CPU: 1 PID: 5764 Comm: syz-executor Not tainted syzkaller #0 [ 461.267043][ T5764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 461.277083][ T5764] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 461.282895][ T5764] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 44 db b5 ff e9 f9 fc ff ff e8 ba a3 5d ff <0f> 0b e8 b3 a3 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 461.302528][ T5764] RSP: 0018:ffffc9000479fb00 EFLAGS: 00010293 [ 461.302546][ T5764] RAX: ffffffff82297e46 RBX: 1ffff920008f3f64 RCX: ffff88802b6d1e00 [ 461.302557][ T5764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 461.302567][ T5764] RBP: ffffc9000479fbf8 R08: ffffc9000479fb77 R09: 0000000000000000 [ 461.332469][ T5764] R10: ffffc9000479fb40 R11: fffff520008f3f6f R12: ffffc9000c138000 [ 461.332483][ T5764] R13: dffffc0000000000 R14: ffff8880256aa630 R15: 0000000000000000 [ 461.332493][ T5764] FS: 000055557a0cc500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 461.332505][ T5764] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 461.332514][ T5764] CR2: 00007fb9ebe16080 CR3: 0000000060260000 CR4: 00000000003506e0 [ 461.332526][ T5764] Call Trace: [ 461.332533][ T5764] [ 461.332540][ T5764] ? journal_release+0x30/0x30 [ 461.332564][ T5764] journal_release+0x1f/0x30 [ 461.332579][ T5764] reiserfs_put_super+0x26b/0x510 [ 461.332599][ T5764] ? hook_inode_free_security+0xb0/0xb0 [ 461.332618][ T5764] ? evict_inodes+0x63c/0x6a0 [ 461.332634][ T5764] ? reiserfs_dirty_inode+0x270/0x270 [ 461.332656][ T5764] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 461.332681][ T5764] ? reiserfs_dirty_inode+0x270/0x270 [ 461.332700][ T5764] generic_shutdown_super+0x134/0x2b0 [ 461.332718][ T5764] kill_block_super+0x44/0x90 [ 461.332732][ T5764] deactivate_locked_super+0x97/0x100 [ 461.332746][ T5764] cleanup_mnt+0x43b/0x4d0 [ 461.438694][ T5764] task_work_run+0x1d4/0x260 [ 461.438719][ T5764] ? task_work_cancel+0x220/0x220 [ 461.438736][ T5764] ? exit_to_user_mode_loop+0x3b/0x110 [ 461.438755][ T5764] exit_to_user_mode_loop+0xe6/0x110 [ 461.438771][ T5764] exit_to_user_mode_prepare+0xee/0x180 [ 461.438787][ T5764] syscall_exit_to_user_mode+0x1a/0x50 [ 461.438803][ T5764] do_syscall_64+0x61/0xa0 [ 461.438814][ T5764] ? clear_bhb_loop+0x40/0x90 [ 461.438829][ T5764] ? clear_bhb_loop+0x40/0x90 [ 461.438843][ T5764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 461.438858][ T5764] RIP: 0033:0x7f719dd9da57 [ 461.438883][ T5764] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 461.438894][ T5764] RSP: 002b:00007ffc608065b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 461.438908][ T5764] RAX: 0000000000000000 RBX: 00007f719de32048 RCX: 00007f719dd9da57 [ 461.438917][ T5764] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc60806670 [ 461.438924][ T5764] RBP: 00007ffc60806670 R08: 00007ffc60807670 R09: 00000000ffffffff [ 461.438933][ T5764] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc60807700 [ 461.438940][ T5764] R13: 00007f719de32048 R14: 0000000000070967 R15: 00007ffc60807740 [ 461.438953][ T5764] [ 461.438957][ T5764] Modules linked in: [ 461.439042][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.447443][ T5764] ---[ end trace 0000000000000000 ]--- [ 461.447456][ T5764] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 461.447478][ T5764] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 44 db b5 ff e9 f9 fc ff ff e8 ba a3 5d ff <0f> 0b e8 b3 a3 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 461.447492][ T5764] RSP: 0018:ffffc9000479fb00 EFLAGS: 00010293 [ 461.447507][ T5764] RAX: ffffffff82297e46 RBX: 1ffff920008f3f64 RCX: ffff88802b6d1e00 [ 461.447519][ T5764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 461.447529][ T5764] RBP: ffffc9000479fbf8 R08: ffffc9000479fb77 R09: 0000000000000000 [ 461.447539][ T5764] R10: ffffc9000479fb40 R11: fffff520008f3f6f R12: ffffc9000c138000 [ 461.447550][ T5764] R13: dffffc0000000000 R14: ffff8880256aa630 R15: 0000000000000000 [ 461.447560][ T5764] FS: 000055557a0cc500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 461.447571][ T5764] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 461.447580][ T5764] CR2: 00007fb9ebe16080 CR3: 0000000060260000 CR4: 00000000003506e0 [ 461.447596][ T5764] Kernel panic - not syncing: Fatal exception [ 461.447928][ T5764] Kernel Offset: disabled