last executing test programs: 1m47.445291833s ago: executing program 2 (id=268): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000240)={[{@grpjquota, 0x4a}, {@block_validity}, {@jqfmt_vfsold}, {@dax_never}, {@bsdgroups}, {@usrjquota, 0x22}, {@nodioread_nolock}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") r0 = open(&(0x7f0000000600)='.\x00', 0x0, 0x14b) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000500)={@id={0x2, 0x0, @c}}) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) 1m46.77409335s ago: executing program 2 (id=277): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x48, 0x3, 0x0, 0x1}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001040)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x8, 0x1c, 0x65, 0x1c, 0x3, 0x2, 0x0, @local, @empty}, {0x1e, 0x1, 0x0, @rand_addr=0x64010101}}}}}, 0x0) 1m46.382153059s ago: executing program 2 (id=280): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r1, 0x1, &(0x7f0000003080)=[&(0x7f0000000240)={0x200000000000000, 0x0, 0x0, 0x5, 0x808, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1m46.108065836s ago: executing program 2 (id=283): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000004, &(0x7f0000002000)=ANY=[], 0xfc, 0x5520, &(0x7f0000000380)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x2888004, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 1m44.82521624s ago: executing program 2 (id=304): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x1, 0x9f, 0x4, &(0x7f0000000000)={0xb, "4d0ca37b17ffffff7f0e0000000000000000000000d4f418c700"}}) 1m43.557116292s ago: executing program 2 (id=325): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) write(r0, &(0x7f0000000280)="1000000011000000000000000000000000000000000001", 0x17) 1m43.39686041s ago: executing program 32 (id=325): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) write(r0, &(0x7f0000000280)="1000000011000000000000000000000000000000000001", 0x17) 1m41.977387708s ago: executing program 3 (id=342): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0xa0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000600)={0x23e3, 0xfffffffc, 0xd, 0x2}) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000100)='./file0/file0\x00', 0x0) 1m41.311480364s ago: executing program 3 (id=349): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0xd13, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x111d1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004814}, 0x0) 1m40.672685705s ago: executing program 3 (id=353): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x270f, @empty}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xd, &(0x7f0000000200)=@raw=[@generic={0xb7}, @generic={0x7b, 0xa, 0x0, 0xfff0}, @generic={0x6a, 0xa, 0x0, 0xfffa, 0xf27}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x3, 0x0, 0x0, 0xc}, @generic={0xb7, 0x4, 0x0, 0x0, 0xffffffff}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x55}, @generic={0x15, 0x0, 0x0, 0x2}, @generic={0xbf, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0xe, 0x0, &(0x7f0000000400)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m40.59421661s ago: executing program 3 (id=354): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50b, &(0x7f0000000440)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L0mav1v63dMN+RABAADgL64Qtb/9L0w20oXC5GT9GtCh2FsoX19Y/F9EXJur3yMwGsXCpflyKb8gNxrFJL/+OdqUn27Jn86uG380MFLLT85eL89tdfCwy+2r9fmkrf+nflrjdV5gG9pB96EBa9Sr/x++t0k7Amw6v/+wezX1/25Ptqj4SxnYmfz+w+7Vqf/fjs9WvXfBdwZsf1V9GXa11ft/7+dtAtvXYLzZSNdue+54ty2wE3X//XdmADtY75vkh9Z87/9yojrU+a3h6PDEgOF1VdEzMdKhri1JpCOrDSywGBH9rTyyniryIWD3JzwU1lbgULS/NRCrbZV0fo5DRFS6bpV+Kj335/Lhfht/6UbytP6gzB4B5s9E2ehm8/lyPy32ebi7JH7rt/k53wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHaU3wMAAP//hKnQPw==") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x13) mount$bind(&(0x7f0000002cc0)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x81001, 0x0) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) 1m40.149519647s ago: executing program 3 (id=355): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) unshare(0x20000400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10) 1m38.469588701s ago: executing program 3 (id=364): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000001840)={0xa, 0x4e23, 0x3, @private0, 0x2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x9, 0x5}, &(0x7f0000000100)=0x8) 1m38.039281996s ago: executing program 33 (id=364): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000001840)={0xa, 0x4e23, 0x3, @private0, 0x2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x9, 0x5}, &(0x7f0000000100)=0x8) 3.624425028s ago: executing program 0 (id=1658): mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3.467565815s ago: executing program 0 (id=1660): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='\x00'}, @NL80211_ATTR_IE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0xf040}, 0x2400c0c0) 3.466944465s ago: executing program 4 (id=1662): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000300)={0x14, &(0x7f0000000180)={0x20, 0x10, 0x64, {0x64, 0x24, "e51fb0f317c9d0a3858e09d3fa88b9c877fa1bd474d6e53e13c11105e2b8db372aa3ff05b364b9755b9ce50c905db2d842d01d99d39b06f2c2cac9c333e29e4f820a465ff73569f75c66ac00372cbfc78d561fc91bc11d1092366916a84888a4ca4d"}}, 0x0}, 0x0) 3.409417145s ago: executing program 0 (id=1664): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$KDSIGACCEPT(r1, 0x80045440, 0xc) 3.334505658s ago: executing program 0 (id=1665): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000c2de67ae9e00000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c0006400000000000000002"], 0x70}}, 0x0) 3.018407153s ago: executing program 1 (id=1670): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x6020400) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x2e) 3.017720253s ago: executing program 0 (id=1680): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x10a, 0x0, 0x8}]}) 2.948624665s ago: executing program 6 (id=1671): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, r1, 0x605, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) 2.874710108s ago: executing program 1 (id=1673): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = epoll_create1(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2.816816338s ago: executing program 0 (id=1674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) setns(0xc9, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) 2.623486802s ago: executing program 6 (id=1677): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./trace/error_log\x00', 0x88502, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000080), 0x6) 2.509036792s ago: executing program 5 (id=1678): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="12000000810000000800000002"], 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000600)="539369950f147c2b440826d8b36e1839e0db9d307de7fc460bc914fc66d71fbe4b550d591e5d659402409d9a544e073f3def5983eff56548e2ac5e80cbf81bf6c4ac0b18882583f42fabd31356785dfa7390b5b018116a6e8e7bd8dac116147f4e4fc5176fc848b9c0bb91c0c03737c02d19e0c7a8", &(0x7f00000000c0)=@udp6}, 0x20) 2.400524931s ago: executing program 5 (id=1679): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4ad, &(0x7f0000001080)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0xa0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000600)={0x23e3, 0xfffffffc, 0xd, 0x2}) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) 2.374601826s ago: executing program 6 (id=1681): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.253672527s ago: executing program 5 (id=1682): r0 = io_uring_setup(0x2ac, &(0x7f00000001c0)={0x0, 0xcf32, 0x10, 0x3, 0x309}) close_range(r0, r0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x20000) read(r1, &(0x7f00000003c0)=""/248, 0xf8) 1.968602977s ago: executing program 6 (id=1683): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x2000, 0xffff4a9c0080ffff, &(0x7f0000000240)) 1.962762118s ago: executing program 1 (id=1684): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x400000f5}]}) 1.726641919s ago: executing program 1 (id=1685): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000d000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.43255897s ago: executing program 1 (id=1686): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) capset(&(0x7f0000000400)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000418110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090800000000007baaf0ff00000000bd8900000000000007080000f8ffffffbf9400000000000007040000f0ffffffb70200000800000018270000", @ANYRES32=r0, @ANYBLOB="000000000000000004000000080000004608f0ff76000000bf9100000000000056070000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.254950421s ago: executing program 5 (id=1687): openat(0xffffffffffffff9c, 0x0, 0xa0000, 0x90) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, 0x0) 1.020117122s ago: executing program 4 (id=1688): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) ppoll(&(0x7f00000017c0)=[{r0, 0x20}], 0x1, &(0x7f0000001840), 0x0, 0x0) 944.509505ms ago: executing program 6 (id=1689): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="91a00873e630", @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @address_reply}}}}, 0x0) 750.678749ms ago: executing program 5 (id=1690): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x7}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 722.919694ms ago: executing program 4 (id=1691): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f0302e90302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdc9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 567.026222ms ago: executing program 5 (id=1692): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000100)=[{0x3, 0xfffe}], 0x1, 0x0) semop(r0, &(0x7f0000000000)=[{0x3, 0xffff, 0x1000}], 0x1) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x9}, {0x1, 0x9a28, 0x1000}], 0x2, &(0x7f00000002c0)={0x0, 0x3938700}) 545.247266ms ago: executing program 6 (id=1693): ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000700)={{0x2}, 0x0, [0x2000000, 0x0, 0x0, 0x1, 0xe, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x100000000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0xffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0xba, 0xfffffffffffffffc, 0x4, 0x4, 0x7, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfdc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x20000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{&(0x7f0000000780)=[{0x3, 0xfffffffffffffff8, 0x400, {0x7, 0x9}, 0x7ff, 0xbd98, 0x200}, {0xa, 0x1, 0xd07, {0x4, 0x2}, 0x6, 0x7, 0x7}, {0x7, 0x9, 0x10001, {0x7fffffffffffffff, 0xe}, 0x4, 0x1, 0x9e0}], 0x15, 0x40, 0xd, 0xe2}, {&(0x7f0000000300)=[{0x1}], 0x1, 0x10, 0x20c, 0xfffffffffffffff8}, {&(0x7f0000000340)=[0x6], 0x1, 0x8, 0x1, 0x2}, {&(0x7f00000004c0)=[{0x400, 0x6, 0x1, 0x7f, 0xd}], 0x1, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x9, 0xffff}}) 460.39115ms ago: executing program 4 (id=1694): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='+cpuset'], 0x8) 244.562518ms ago: executing program 4 (id=1695): r0 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) mq_timedsend(r0, 0x0, 0x0, 0x1, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) 28.491486ms ago: executing program 1 (id=1696): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) read(r0, &(0x7f0000004000), 0x2000) 0s ago: executing program 4 (id=1697): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000005646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) kernel console output (not intermixed with test programs): 0:50:50:50 [ 106.577996][ T5159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.594884][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.622827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.651359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.660946][ T5479] loop4: detected capacity change from 0 to 1024 [ 106.687577][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.889033][ T9] tipc: Disabling bearer [ 106.904779][ T9] tipc: Left network mode [ 107.145051][ T4234] kernel write not supported for file /input/event0 (pid: 4234 comm: kworker/0:6) [ 107.261304][ T5505] loop0: detected capacity change from 0 to 4096 [ 107.349397][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.372227][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.378878][ T5505] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 107.416680][ T5252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.462655][ T5505] ntfs3: loop0: Failed to load $Extend. [ 107.589352][ T5505] ntfs3: loop0: ino=5, "/" directory corrupted [ 107.887535][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 108.159943][ T9] device hsr_slave_0 left promiscuous mode [ 108.186780][ T9] device hsr_slave_1 left promiscuous mode [ 108.196393][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.214595][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.223793][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.241215][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.256323][ T9] device bridge_slave_1 left promiscuous mode [ 108.265046][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.274326][ T9] device bridge_slave_0 left promiscuous mode [ 108.289811][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.326704][ T9] device veth1_macvtap left promiscuous mode [ 108.352906][ T9] device veth0_macvtap left promiscuous mode [ 108.363045][ T9] device veth1_vlan left promiscuous mode [ 108.378104][ T9] device veth0_vlan left promiscuous mode [ 108.801673][ T9] team0 (unregistering): Port device team_slave_1 removed [ 108.824388][ T9] team0 (unregistering): Port device team_slave_0 removed [ 108.846476][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.876700][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.928982][ T4264] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 109.014206][ T9] bond0 (unregistering): Released all slaves [ 109.151781][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.177940][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.250339][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.262605][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.273837][ T5252] device veth0_vlan entered promiscuous mode [ 109.297057][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.327948][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.346401][ T4264] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.384012][ T4264] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.395057][ T5252] device veth1_vlan entered promiscuous mode [ 109.407151][ T4264] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.440573][ T4264] usb 6-1: config 0 interface 0 has no altsetting 0 [ 109.457176][ T4264] usb 6-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 109.476727][ T4264] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.490847][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.517325][ T4264] usb 6-1: config 0 descriptor?? [ 109.523267][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.560929][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.597797][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.632154][ T5252] device veth0_macvtap entered promiscuous mode [ 109.645592][ T5252] device veth1_macvtap entered promiscuous mode [ 109.676749][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.692117][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.705052][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.715844][ T4233] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 109.724071][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.734807][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.745630][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.756070][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.768814][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.781465][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.790353][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.801328][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.821279][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.839819][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.858060][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.870437][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.881091][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.892460][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.902501][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.913909][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.937052][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.957020][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.967005][ T4233] usb 5-1: Using ep0 maxpacket: 32 [ 109.974592][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.983644][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.006553][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.031411][ T5252] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.040646][ T5252] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.049990][ T5252] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.058772][ T5252] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.077421][ T4264] hid-rmi 0003:1532:011D.0001: unbalanced collection at end of report description [ 110.087291][ T4233] usb 5-1: config index 0 descriptor too short (expected 19, got 18) [ 110.097574][ T4264] hid-rmi 0003:1532:011D.0001: parse failed [ 110.103624][ T4264] hid-rmi: probe of 0003:1532:011D.0001 failed with error -22 [ 110.247082][ T4233] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 110.261908][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.270521][ T4233] usb 5-1: Product: syz [ 110.274752][ T4233] usb 5-1: Manufacturer: syz [ 110.301910][ T4233] usb 5-1: SerialNumber: syz [ 110.313182][ T13] usb 6-1: USB disconnect, device number 2 [ 110.333656][ T4233] usb 5-1: config 0 descriptor?? [ 110.356478][ T5159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.381311][ T5159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.391168][ T4233] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 110.412655][ T4233] dvb-usb: bulk message failed: -22 (2/0) [ 110.426388][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 110.453184][ T4233] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.480898][ T5159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.492452][ T4233] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 110.509264][ T4233] usb 5-1: media controller created [ 110.516925][ T5159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.536644][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 110.601256][ T5584] cxusb: i2c wr: len=79 is too big! [ 110.601256][ T5584] [ 110.605967][ T4233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.706589][ T4233] usb 5-1: selecting invalid altsetting 7 [ 110.712854][ T4233] cxusb: set interface failed [ 110.736174][ T4233] dvb-usb: bulk message failed: -22 (1/0) [ 110.841429][ T4233] DVB: Unable to find symbol lgdt330x_attach() [ 110.857670][ T4233] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 110.972732][ T4232] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.057076][ T4233] rc_core: IR keymap rc-dvico-portable not found [ 111.066227][ T4233] Registered IR keymap rc-empty [ 111.102005][ T4233] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 111.132547][ T4233] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input9 [ 111.179311][ T4233] dvb-usb: schedule remote query interval to 100 msecs. [ 111.186324][ T4233] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 111.283564][ T4233] usb 5-1: USB disconnect, device number 5 [ 111.407161][ T4232] usb 1-1: unable to get BOS descriptor or descriptor too short [ 111.415575][ T4233] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 111.497231][ T4232] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.517547][ T4232] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 111.536906][ T4232] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 111.584241][ T5642] binder: 5638:5642 ioctl 400c620e 200000000040 returned -22 [ 111.597520][ T4232] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 111.652545][ T4232] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 111.767630][ T4232] usb 1-1: config 1 interface 1 has no altsetting 0 [ 111.972521][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 112.023877][ T4232] usb 1-1: string descriptor 0 read error: -22 [ 112.049463][ T4232] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 112.066564][ T21] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 112.117186][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.186361][ T26] audit: type=1400 audit(1790910895.363:13): apparmor="STATUS" info="failed to unpack policydb" error=-71 profile="unconfined" name="p" pid=5668 comm="syz.5.494" name="p" offset=92 [ 112.395993][ T2288] Process accounting resumed [ 112.893875][ T5696] loop5: detected capacity change from 0 to 4096 [ 113.080036][ T5707] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.096991][ T4232] usb 1-1: cannot get ctl value: req = 0x81, wValue = 0x201, wIndex = 0x200, type = 4 [ 113.149229][ T26] audit: type=1800 audit(1790910896.333:14): pid=5696 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.5.503" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 113.242538][ T5700] loop1: detected capacity change from 0 to 8192 [ 113.374686][ T5700] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 113.384315][ T4232] usb 1-1: USB disconnect, device number 2 [ 113.430796][ T5700] REISERFS (device loop1): using ordered data mode [ 113.435415][ T5715] "syz.4.508" (5715) uses obsolete ecb(arc4) skcipher [ 113.476984][ T5700] reiserfs: using flush barriers [ 113.519896][ T5700] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 113.637390][ T5700] REISERFS (device loop1): checking transaction log (loop1) [ 113.650086][ T5091] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 113.662278][ T5700] REISERFS (device loop1): Using r5 hash to sort names [ 113.683876][ T5700] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 113.803497][ T5721] loop4: detected capacity change from 0 to 512 [ 113.810231][ T5700] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 113.898882][ T5726] program syz.0.512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.978764][ T5721] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.014245][ T5732] loop5: detected capacity change from 0 to 512 [ 114.083376][ T5735] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 114.100139][ T5721] ext4 filesystem being mounted at /112/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.142902][ T5735] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 114.158345][ T5735] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 114.177165][ T5732] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 114.225268][ T5728] loop6: detected capacity change from 0 to 4096 [ 114.853999][ T5767] netlink: 71 bytes leftover after parsing attributes in process `syz.0.523'. [ 115.071088][ T5779] capability: warning: `syz.4.528' uses 32-bit capabilities (legacy support in use) [ 115.087155][ T4233] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 115.177007][ T4264] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 115.186296][ T4232] hid-generic 0005:4C4A:0058.0003: item fetching failed at offset 0/1 [ 115.215976][ T4232] hid-generic: probe of 0005:4C4A:0058.0003 failed with error -22 [ 115.346991][ T4233] usb 6-1: Using ep0 maxpacket: 16 [ 115.451251][ T5798] netlink: 'syz.0.534': attribute type 3 has an invalid length. [ 115.467141][ T4233] usb 6-1: too many endpoints for config 0 interface 0 altsetting 6: 255, using maximum allowed: 30 [ 115.486855][ T4264] usb 7-1: Using ep0 maxpacket: 32 [ 115.500687][ T5798] netlink: 3 bytes leftover after parsing attributes in process `syz.0.534'. [ 115.507138][ T4233] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.557437][ T4233] usb 6-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 115.596853][ T4233] usb 6-1: config 0 interface 0 has no altsetting 0 [ 115.617203][ T4233] usb 6-1: New USB device found, idVendor=045e, idProduct=0713, bcdDevice= 0.00 [ 115.627456][ T4264] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 115.636683][ T4233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.655184][ T4264] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.673837][ T4264] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 115.687667][ T4233] usb 6-1: config 0 descriptor?? [ 115.699260][ T4264] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 115.716032][ T4264] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.728948][ T4264] usb 7-1: config 0 descriptor?? [ 115.747794][ T5810] loop0: detected capacity change from 0 to 2048 [ 115.795336][ T5810] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 115.843445][ T4368] udevd[4368]: incorrect nilfs2 checksum on /dev/loop0 [ 115.900085][ T5822] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.926699][ T5810] NILFS error (device loop0): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 115.963201][ T5810] Remounting filesystem read-only [ 116.005847][ T5826] loop1: detected capacity change from 0 to 256 [ 116.194946][ T4233] input: HID 045e:0713 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:0713.0004/input/input11 [ 116.210016][ T4264] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x1 [ 116.248774][ T4264] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0 [ 116.286975][ T4264] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x4 [ 116.343085][ T5829] loop0: detected capacity change from 0 to 4096 [ 116.384497][ T5829] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 116.421591][ T4233] microsoft 0003:045E:0713.0004: input,hidraw0: USB HID vd.8b Joystick [HID 045e:0713] on usb-dummy_hcd.5-1/input0 [ 116.514338][ T4233] usb 6-1: USB disconnect, device number 3 [ 116.595814][ T5829] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 116.649958][ T5817] loop4: detected capacity change from 0 to 32768 [ 116.657127][ T4264] hid-led: probe of 0003:0FC5:B080.0005 failed with error -71 [ 116.708286][ T4264] usb 7-1: USB disconnect, device number 2 [ 116.715412][ T5838] fido_id[5838]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 116.935068][ T5817] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 117.053156][ T4194] ocfs2: Unmounting device (7,4) on (node local) [ 117.201703][ T5861] vivid-001: disconnect [ 117.233662][ T5860] vivid-001: reconnect [ 117.293820][ T5867] loop0: detected capacity change from 0 to 128 [ 117.372393][ T5867] attempt to access beyond end of device [ 117.372393][ T5867] loop0: rw=2051, want=217, limit=128 [ 117.668667][ T5886] hugetlbfs: syz.5.559 (5886): Using mlock ulimits for SHM_HUGETLB is deprecated [ 117.846620][ T5901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.565'. [ 118.071592][ T5911] MPI: mpi too large (16392 bits) [ 118.116303][ T5913] netlink: 16 bytes leftover after parsing attributes in process `syz.6.570'. [ 118.325339][ T5925] set_capacity_and_notify: 2 callbacks suppressed [ 118.325355][ T5925] loop1: detected capacity change from 0 to 2048 [ 118.646292][ T5944] loop4: detected capacity change from 0 to 64 [ 118.736728][ T5944] hfs: inconsistency in B*Tree (-1,0,2,3,0) [ 118.746759][ T5944] hfs: get root inode failed [ 118.851925][ T5949] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.581'. [ 119.079645][ T5957] loop4: detected capacity change from 0 to 2048 [ 119.154432][ T5961] loop1: detected capacity change from 0 to 512 [ 119.211758][ T5957] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.232549][ T4264] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 119.240453][ T5957] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.294807][ T5961] EXT4-fs (loop1): 1 truncate cleaned up [ 119.337022][ T5961] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 119.441424][ T5957] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.583: bg 0: block 345: padding at end of block bitmap is not set [ 119.521243][ T5957] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 117 [ 119.546047][ T5957] EXT4-fs (loop4): This should not happen!! Data will be lost [ 119.546047][ T5957] [ 119.657713][ T5194] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 119.697661][ T4264] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.708766][ T5194] EXT4-fs (loop4): This should not happen!! Data will be lost [ 119.708766][ T5194] [ 119.736917][ T4264] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.753752][ T5194] EXT4-fs (loop4): Total free blocks count 0 [ 119.766920][ T4264] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 119.776144][ T5194] EXT4-fs (loop4): Free/Dirty block details [ 119.796480][ T5194] EXT4-fs (loop4): free_blocks=0 [ 119.802795][ T4264] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.816959][ T5194] EXT4-fs (loop4): dirty_blocks=16 [ 119.837529][ T4264] usb 6-1: config 0 descriptor?? [ 119.842670][ T5194] EXT4-fs (loop4): Block reservation details [ 119.851662][ T5981] loop6: detected capacity change from 0 to 4096 [ 119.859301][ T5194] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 120.223850][ T5998] loop1: detected capacity change from 0 to 256 [ 120.265181][ T5998] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.319169][ T5998] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 120.350797][ T4264] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 120.369456][ T4264] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 120.385964][ T4264] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 120.395838][ T5998] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 120.440269][ T4264] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 120.471641][ T4264] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 120.518652][ T4264] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 120.543739][ T5998] exFAT-fs (loop1): error, failed to bmap (inode : ffff8880742d21e0 iblock : 16, err : -5) [ 120.572980][ T5998] exFAT-fs (loop1): Filesystem has been set read-only [ 120.688090][ T4264] playstation 0003:054C:0DF2.0006: Invalid reportID received, expected 9 got 0 [ 120.729701][ T4264] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense pairing info: -22 [ 120.772170][ T4264] playstation 0003:054C:0DF2.0006: Failed to get MAC address from DualSense [ 120.805088][ T4264] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 120.837086][ T4264] playstation: probe of 0003:054C:0DF2.0006 failed with error -22 [ 120.953424][ T13] usb 6-1: USB disconnect, device number 4 [ 121.036686][ T6010] fido_id[6010]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 121.214042][ T6025] loop1: detected capacity change from 0 to 164 [ 121.316983][ T4264] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 121.380716][ T5975] loop0: detected capacity change from 0 to 32768 [ 121.441342][ T5975] XFS: noikeep mount option is deprecated. [ 121.654103][ T5975] XFS (loop0): Mounting V5 Filesystem [ 121.727183][ T4264] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.743119][ T4264] usb 5-1: config 0 interface 0 has no altsetting 0 [ 121.814619][ T6056] netlink: 120 bytes leftover after parsing attributes in process `syz.1.612'. [ 121.836062][ T6061] netlink: 12 bytes leftover after parsing attributes in process `syz.5.615'. [ 121.914454][ T5975] XFS (loop0): Ending clean mount [ 121.927216][ T4264] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 121.948750][ T4264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.966914][ T4264] usb 5-1: Product: syz [ 121.977101][ T4264] usb 5-1: Manufacturer: syz [ 121.992383][ T4264] usb 5-1: SerialNumber: syz [ 122.005487][ T4264] usb 5-1: config 0 descriptor?? [ 122.049115][ T5975] XFS (loop0): Quotacheck needed: Please wait. [ 122.069278][ T4264] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 122.079571][ T6070] scsi_strcpy_devinfo: vendor string 'ÆMýŸê‡‹8KH,Pò}ƒ/(a»¯&¿WCa—8(½§ÉAu˜ÒÁÀâÈéÃ6cƒ1íÙƒXûºPweùÔñ$XPº×ÇK¼±î5Ôô°•ó'R ªX7R.ø]O\¯¬kþekˆÝÙÓ©o‚pêëÒ‘ 0ð[ž{„L½ô;ȧ0Gš¤“I¾q6•?U³q9Ömߣ¼7`…`Ÿ0I3²¾ÅµÊ' is too long [ 122.118834][ T4264] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 122.130584][ T6074] loop1: detected capacity change from 0 to 512 [ 122.167371][ T4264] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 122.179964][ T4264] usb 5-1: media controller created [ 122.237749][ T6074] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000aff) [ 122.275034][ T4264] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.277935][ T6074] FAT-fs (loop1): Filesystem has been set read-only [ 122.315585][ T5975] XFS (loop0): Quotacheck: Done. [ 122.353332][ T6074] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000aff) [ 122.410370][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.6.620'. [ 122.459564][ T4264] DVB: Unable to find symbol tda10046_attach() [ 122.469471][ T4264] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 122.485199][ T4264] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 122.513753][ T6086] netlink: 'syz.5.621': attribute type 1 has an invalid length. [ 122.547338][ T4187] XFS (loop0): Unmounting Filesystem [ 122.751278][ T6097] loop6: detected capacity change from 0 to 512 [ 122.812420][ T6097] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 122.830230][ T6097] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 122.843094][ T6097] System zones: 1-12 [ 122.859692][ T6097] EXT4-fs (loop6): 1 truncate cleaned up [ 122.865548][ T6097] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 123.095751][ T4264] dvb_usb_m920x: probe of 5-1:0.0 failed with error -71 [ 123.125879][ T4264] usb 5-1: USB disconnect, device number 6 [ 123.498726][ T4234] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 123.673630][ T6110] loop5: detected capacity change from 0 to 32768 [ 123.798867][ T4234] usb 7-1: Using ep0 maxpacket: 32 [ 123.948312][ T4234] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.979777][ T4234] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.008757][ T4234] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 124.036874][ T4234] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.063674][ T4234] usb 7-1: config 0 descriptor?? [ 124.108347][ T4234] hub 7-1:0.0: USB hub found [ 124.147021][ T6142] loop0: detected capacity change from 0 to 256 [ 124.234573][ T6142] FAT-fs (loop0): Directory bread(block 64) failed [ 124.251517][ T2288] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 124.286756][ T6142] FAT-fs (loop0): Directory bread(block 65) failed [ 124.299827][ T6142] FAT-fs (loop0): Directory bread(block 66) failed [ 124.311954][ T6142] FAT-fs (loop0): Directory bread(block 67) failed [ 124.327407][ T4234] hub 7-1:0.0: 12 ports detected [ 124.357185][ T4234] hub 7-1:0.0: insufficient power available to use all downstream ports [ 124.373525][ T6142] FAT-fs (loop0): Directory bread(block 68) failed [ 124.383708][ T6142] FAT-fs (loop0): Directory bread(block 69) failed [ 124.400818][ T6142] FAT-fs (loop0): Directory bread(block 70) failed [ 124.424366][ T6142] FAT-fs (loop0): Directory bread(block 71) failed [ 124.435850][ T6142] FAT-fs (loop0): Directory bread(block 72) failed [ 124.461062][ T6142] FAT-fs (loop0): Directory bread(block 73) failed [ 124.577081][ T4234] hub 7-1:0.0: hub_hub_status failed (err = 0) [ 124.594669][ T4234] hub 7-1:0.0: config failed, can't get hub status (err -5) [ 124.637158][ T2288] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 124.653514][ T2288] usb 2-1: config 0 has no interface number 0 [ 124.671274][ T2288] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 124.685708][ T2288] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 124.857308][ T2288] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice= 0.03 [ 124.866416][ T2288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.877162][ T4234] usbhid 7-1:0.0: can't add hid device: -71 [ 124.884030][ T4234] usbhid: probe of 7-1:0.0 failed with error -71 [ 124.900028][ T2288] usb 2-1: Product: syz [ 124.910146][ T2288] usb 2-1: Manufacturer: syz [ 124.920432][ T2288] usb 2-1: SerialNumber: syz [ 124.950584][ T2288] usb 2-1: config 0 descriptor?? [ 124.957840][ T4234] usb 7-1: USB disconnect, device number 3 [ 124.987320][ T6132] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 125.013598][ T2288] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 125.278747][ T2288] usb 2-1: USB disconnect, device number 4 [ 125.299042][ T2288] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 125.353559][ T6176] loop5: detected capacity change from 0 to 512 [ 125.517547][ T6176] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #2: comm syz.5.653: missing EA_INODE flag [ 125.534803][ T6176] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.653: error while reading EA inode 2 err=-117 [ 125.547575][ T6176] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.653: inode #3584: comm syz.5.653: iget: illegal inode # [ 125.563807][ T6176] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.653: error while reading EA inode 3584 err=-117 [ 125.577321][ T6176] EXT4-fs (loop5): 1 orphan inode deleted [ 125.583187][ T6176] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 125.708204][ T6195] tmpfs: Bad value for 'mpol' [ 125.749381][ T6195] cgroup: noprefix used incorrectly [ 125.825776][ T6203] loop4: detected capacity change from 0 to 512 [ 125.863724][ T6203] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 125.885098][ T6203] EXT4-fs (loop4): 1 truncate cleaned up [ 125.891648][ T6203] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 125.922562][ T6203] EXT4-fs error (device loop4): ext4_empty_dir:3179: inode #2: block 13: comm syz.4.663: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 125.948328][ T6203] EXT4-fs (loop4): Remounting filesystem read-only [ 125.998603][ T6209] comedi comedi0: comedi_test: 1000000 microvolt, 100000 microsecond waveform attached [ 126.037016][ T2288] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 126.178148][ T6220] loop4: detected capacity change from 0 to 8 [ 126.276987][ T2288] usb 6-1: Using ep0 maxpacket: 16 [ 126.397904][ T2288] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.426991][ T2288] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.449519][ T6234] loop6: detected capacity change from 0 to 512 [ 126.492643][ T6234] EXT4-fs (loop6): 1 truncate cleaned up [ 126.506968][ T6234] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 126.587296][ T2288] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.597519][ T2288] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.605574][ T2288] usb 6-1: Product: syz [ 126.609967][ T2288] usb 6-1: Manufacturer: syz [ 126.614604][ T2288] usb 6-1: SerialNumber: syz [ 126.644746][ T26] audit: type=1800 audit(1790910909.823:15): pid=6234 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.6.675" name="file1" dev="loop6" ino=13 res=0 errno=0 [ 126.832574][ T6259] kAFS: bad VL server IP address [ 126.934463][ T6265] loop4: detected capacity change from 0 to 256 [ 126.977178][ T2288] usb 6-1: unknown interface protocol 0xf4, assuming v1 [ 126.984196][ T2288] usb 6-1: 0:2 : does not exist [ 126.992488][ T6270] loop1: detected capacity change from 0 to 128 [ 127.000420][ T2288] usb 6-1: unit 1 not found! [ 127.041010][ T6272] loop6: detected capacity change from 0 to 16 [ 127.080942][ T2288] usb 6-1: USB disconnect, device number 5 [ 127.120681][ T6270] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 127.137668][ T6272] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 127.174761][ T6277] loop0: detected capacity change from 0 to 256 [ 127.223310][ T6270] hpfs: filesystem error: improperly stopped [ 127.250856][ T6270] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 127.266506][ T6270] hpfs: You really don't want any checks? You are crazy... [ 127.302307][ T6277] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1f3a413c, utbl_chksum : 0xe619d30d) [ 127.317708][ T6270] hpfs: Code page index out of array [ 127.337941][ T6270] hpfs: code page support is disabled [ 127.349515][ T4826] udevd[4826]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.379414][ T6270] hpfs: hpfs_map_4sectors(): unaligned read [ 127.386106][ T6270] hpfs: hpfs_map_4sectors(): unaligned read [ 127.426861][ T6270] hpfs: filesystem error: unable to find root dir [ 127.737725][ T6270] hpfs: hpfs_map_4sectors(): unaligned read [ 127.788956][ T6304] netlink: 'syz.5.701': attribute type 2 has an invalid length. [ 127.837707][ T6304] netlink: 100 bytes leftover after parsing attributes in process `syz.5.701'. [ 127.861190][ T6309] trusted_key: encrypted_key: keyword 'upäate' not recognized [ 127.883908][ T6305] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 127.955136][ T6305] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpjquota=,noquota,barrier,auto_da_alloc,dioread_nolock,. Quota mode: none. [ 128.007541][ T6305] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.179387][ T6329] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 128.305819][ T6334] EXT4-fs (loop5): Ignoring removed nobh option [ 128.387304][ T6334] EXT4-fs (loop5): Ignoring removed bh option [ 128.454992][ T6334] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,noquota,sysvgroups,nobh,usrquota,nojournal_checksum,noload,bh,norecovery,,errors=continue. Quota mode: writeback. [ 128.468397][ T6348] program syz.6.715 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.518230][ T6337] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 128.526299][ T6337] System zones: 1-12 [ 128.634020][ T6346] EXT4-fs (loop0): Ignoring removed orlov option [ 128.647494][ T6337] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.711: missing EA_INODE flag [ 128.681559][ T6346] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 128.716681][ T6337] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.711: error while reading EA inode 12 err=-117 [ 128.751995][ T4194] hfs: node 4:3 still has 1 user(s)! [ 128.778838][ T6337] EXT4-fs (loop1): 1 orphan inode deleted [ 128.788025][ T6346] EXT4-fs (loop0): 1 truncate cleaned up [ 128.793737][ T6346] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,. Quota mode: none. [ 128.797080][ T6337] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 128.833546][ T6361] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 129.135469][ T6378] set_capacity_and_notify: 7 callbacks suppressed [ 129.135486][ T6378] loop1: detected capacity change from 0 to 512 [ 129.223659][ T6380] loop4: detected capacity change from 0 to 1024 [ 129.255025][ T6378] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.722: invalid indirect mapped block 4294967295 (level 1) [ 129.317835][ T6378] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.722: invalid indirect mapped block 4294967295 (level 1) [ 129.340313][ T6378] EXT4-fs (loop1): 2 truncates cleaned up [ 129.346244][ T6378] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.390584][ T6380] attempt to access beyond end of device [ 129.390584][ T6380] loop4: rw=0, want=5780, limit=1024 [ 129.706604][ T6400] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 129.757019][ T1108] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 129.884172][ T6407] loop1: detected capacity change from 0 to 256 [ 129.915162][ T6409] loop4: detected capacity change from 0 to 512 [ 129.943923][ T6407] exfat: Deprecated parameter 'namecase' [ 129.964094][ T6407] exfat: Deprecated parameter 'namecase' [ 130.003883][ T6407] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 130.037228][ T6409] EXT4-fs (loop4): 1 truncate cleaned up [ 130.094515][ T6409] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,nodioread_nolock,,errors=continue. Quota mode: none. [ 130.127143][ T1108] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.145494][ T1108] usb 7-1: config 0 has no interface number 0 [ 130.185817][ T6405] loop0: detected capacity change from 0 to 32768 [ 130.218242][ T26] audit: type=1800 audit(1790910913.403:16): pid=6409 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.4.738" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 130.281212][ T6409] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.738: bg 0: block 465: padding at end of block bitmap is not set [ 130.305489][ T6405] jfs_strtoUCS: char2uni returned -22. [ 130.312930][ T1108] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 130.326876][ T1108] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.345212][ T6405] charset = cp932, char = 0xfc [ 130.351183][ T1108] usb 7-1: Product: syz [ 130.372910][ T6413] loop1: detected capacity change from 0 to 256 [ 130.377365][ T1108] usb 7-1: Manufacturer: syz [ 130.383835][ T1108] usb 7-1: SerialNumber: syz [ 130.421371][ T1108] usb 7-1: config 0 descriptor?? [ 130.438097][ T6409] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 130.477339][ T6390] loop5: detected capacity change from 0 to 40427 [ 130.484783][ T6409] EXT4-fs (loop4): This should not happen!! Data will be lost [ 130.484783][ T6409] [ 130.486779][ T6413] FAT-fs (loop1): Directory bread(block 64) failed [ 130.514093][ T6409] EXT4-fs (loop4): Total free blocks count 0 [ 130.535228][ T6390] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 130.544668][ T6413] FAT-fs (loop1): Directory bread(block 65) failed [ 130.554262][ T6390] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 130.565716][ T6409] EXT4-fs (loop4): Free/Dirty block details [ 130.574576][ T6409] EXT4-fs (loop4): free_blocks=0 [ 130.602730][ T6413] FAT-fs (loop1): Directory bread(block 66) failed [ 130.609616][ T6409] EXT4-fs (loop4): dirty_blocks=1 [ 130.614827][ T6409] EXT4-fs (loop4): Block reservation details [ 130.631209][ T6413] FAT-fs (loop1): Directory bread(block 67) failed [ 130.654275][ T6413] FAT-fs (loop1): Directory bread(block 68) failed [ 130.686102][ T6390] F2FS-fs (loop5): Found nat_bits in checkpoint [ 130.707241][ T1108] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 130.717129][ T6413] FAT-fs (loop1): Directory bread(block 69) failed [ 130.723845][ T6413] FAT-fs (loop1): Directory bread(block 70) failed [ 130.737299][ T6409] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 130.791894][ T1108] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 130.816962][ T6413] FAT-fs (loop1): Directory bread(block 71) failed [ 130.833978][ T1108] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 130.876945][ T1108] usb 7-1: media controller created [ 130.899861][ T6413] FAT-fs (loop1): Directory bread(block 72) failed [ 130.906463][ T6413] FAT-fs (loop1): Directory bread(block 73) failed [ 130.926998][ T6390] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 130.934156][ T6390] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 130.948571][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.094518][ T1108] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 131.227064][ T1108] usb 7-1: USB disconnect, device number 4 [ 131.533256][ T6450] program syz.4.751 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.575762][ T6450] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 131.655878][ T6448] loop0: detected capacity change from 0 to 4096 [ 131.712962][ T6448] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 131.750335][ T6461] loop4: detected capacity change from 0 to 8 [ 131.848884][ T6448] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 131.862798][ T6464] loop6: detected capacity change from 0 to 128 [ 131.913885][ T6461] SQUASHFS error: Failed to read block 0x2d7: -5 [ 131.923706][ T6461] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 131.941011][ T6448] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 132.000436][ T6464] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.052194][ T6464] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.215652][ T4187] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 132.247400][ T4187] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 132.434861][ T6483] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.762'. [ 132.521708][ T6484] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 132.760963][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.769074][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.224750][ T6529] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 133.941588][ T6571] netlink: 28 bytes leftover after parsing attributes in process `syz.4.792'. [ 134.320445][ T6595] set_capacity_and_notify: 3 callbacks suppressed [ 134.320461][ T6595] loop5: detected capacity change from 0 to 128 [ 134.387339][ T6595] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 134.449615][ T6595] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.822918][ T6623] netem: incorrect ge model size [ 134.847278][ T6623] netem: change failed [ 134.907206][ T6626] syz.5.812 (6626) used greatest stack depth: 20176 bytes left [ 134.987986][ T6632] loop0: detected capacity change from 0 to 512 [ 135.111138][ T6643] loop1: detected capacity change from 0 to 512 [ 135.127885][ T6632] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 135.136275][ T6632] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.814: inode #15: comm syz.0.814: iget: illegal inode # [ 135.254013][ T6632] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.814: couldn't read orphan inode 15 (err -117) [ 135.348133][ T6650] loop4: detected capacity change from 0 to 64 [ 135.387079][ T6632] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000008000,errors=continue,,errors=continue. Quota mode: writeback. [ 135.413568][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.483998][ T6658] netlink: 40 bytes leftover after parsing attributes in process `syz.1.824'. [ 135.505465][ T6657] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000) [ 135.591500][ T6632] EXT4-fs (loop0): shut down requested (2) [ 135.683211][ T6668] loop1: detected capacity change from 0 to 512 [ 135.763877][ T6668] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 135.971171][ T6676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.828'. [ 135.989587][ T6668] EXT4-fs (loop1): Remounting file system with no journal so ignoring journalled data option [ 136.221389][ T26] audit: type=1400 audit(1790910919.403:17): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=6686 comm="syz.0.835" name="unknown" offset=16 [ 136.240205][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.256027][ T6693] loop1: detected capacity change from 0 to 8 [ 136.865512][ T6730] netlink: 56 bytes leftover after parsing attributes in process `syz.5.846'. [ 136.909627][ T6730] netlink: 24 bytes leftover after parsing attributes in process `syz.5.846'. [ 136.931629][ T6729] loop4: detected capacity change from 0 to 512 [ 137.068020][ T6729] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.107116][ T2288] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 137.132851][ T6739] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 137.343251][ T6729] EXT4-fs (loop4): Remounting file system with no journal so ignoring journalled data option [ 137.353621][ T2288] usb 2-1: Using ep0 maxpacket: 8 [ 137.477277][ T2288] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.513752][ T2288] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 137.532255][ T2288] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 137.717166][ T2288] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 137.743962][ T2288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.770295][ T2288] usb 2-1: Product: syz [ 137.774704][ T2288] usb 2-1: Manufacturer: syz [ 137.792410][ T2288] usb 2-1: SerialNumber: syz [ 137.869717][ T1335] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 138.095237][ T6770] loop4: detected capacity change from 0 to 1024 [ 138.176917][ T1335] usb 6-1: Using ep0 maxpacket: 16 [ 138.305456][ T6770] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 138.327528][ T1335] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 138.363924][ T1335] usb 6-1: config 0 has no interface number 0 [ 138.379090][ T1335] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 138.397878][ T6770] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,dioread_nolock,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,init_itable,nogrpid,nodelalloc,grpjquota=,,errors=continue. Quota mode: none. [ 138.406964][ T1335] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 138.422696][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.627092][ T1335] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 138.654265][ T1335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.676894][ T1335] usb 6-1: Product: syz [ 138.681124][ T1335] usb 6-1: Manufacturer: syz [ 138.701999][ T1335] usb 6-1: SerialNumber: syz [ 138.720292][ T2288] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 138.745824][ T1335] usb 6-1: config 0 descriptor?? [ 138.756361][ T2288] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 138.807598][ T6755] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 138.814873][ T6755] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 138.894305][ T2288] usb 2-1: USB disconnect, device number 5 [ 139.063216][ T6755] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 139.077184][ T6755] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 139.125139][ T6800] loop4: detected capacity change from 0 to 128 [ 139.151789][ T6801] i2c i2c-0: Failed to register i2c client maxtcpc at 0x05 (-16) [ 139.450078][ T6818] MTRR 1 not used [ 139.777078][ T1335] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 139.807923][ T1335] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 139.851663][ T1335] asix: probe of 6-1:0.251 failed with error -71 [ 139.886891][ T4264] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 139.908838][ T1335] usb 6-1: USB disconnect, device number 6 [ 140.033716][ T4231] kernel write not supported for file /input/event0 (pid: 4231 comm: kworker/0:5) [ 140.071353][ T6850] netlink: 'syz.1.877': attribute type 2 has an invalid length. [ 140.177639][ T4264] usb 7-1: Using ep0 maxpacket: 8 [ 140.338315][ T4264] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 140.347784][ T4264] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.380387][ T6868] loop0: detected capacity change from 0 to 128 [ 140.429980][ T4264] pvrusb2: Hardware description: Terratec Grabster AV400 [ 140.454435][ T4264] pvrusb2: ********** [ 140.467862][ T4264] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 140.494580][ T4264] pvrusb2: Important functionality might not be entirely working. [ 140.526933][ T4264] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 140.570729][ T4264] pvrusb2: ********** [ 140.660897][ T2427] pvrusb2: Invalid write control endpoint [ 140.804063][ T2427] pvrusb2: Invalid write control endpoint [ 140.815222][ T6879] loop0: detected capacity change from 0 to 2048 [ 140.826948][ T2427] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 140.871211][ T4264] usb 7-1: USB disconnect, device number 5 [ 140.880052][ T2427] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 140.900384][ T6879] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 140.928127][ T2427] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 140.955645][ T2427] pvrusb2: Device being rendered inoperable [ 140.973788][ T2427] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 140.981883][ T2427] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 140.990937][ T6879] EXT4-fs error (device loop0): __ext4_iget:4919: inode #2: block 127754: comm syz.0.884: invalid block [ 141.011291][ T2427] pvrusb2: Attached sub-driver cx25840 [ 141.017688][ T2427] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 141.027310][ T6879] EXT4-fs (loop0): get root inode failed [ 141.028553][ T2427] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 141.033463][ T6879] EXT4-fs (loop0): mount failed [ 141.086618][ T6883] loop1: detected capacity change from 0 to 4096 [ 141.254237][ T6894] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.392905][ T6879] netlink: 60 bytes leftover after parsing attributes in process `syz.0.884'. [ 141.801746][ T6914] netlink: 'syz.6.891': attribute type 2 has an invalid length. [ 142.388450][ T6958] loop4: detected capacity change from 0 to 2048 [ 142.451833][ T6958] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 142.504339][ T6958] EXT4-fs error (device loop4): __ext4_iget:4919: inode #2: block 127754: comm syz.4.908: invalid block [ 142.550503][ T6964] loop6: detected capacity change from 0 to 4096 [ 142.574653][ T6958] EXT4-fs (loop4): get root inode failed [ 142.614341][ T6958] EXT4-fs (loop4): mount failed [ 142.627324][ T6970] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.832066][ T6958] netlink: 60 bytes leftover after parsing attributes in process `syz.4.908'. [ 143.581125][ T7020] loop5: detected capacity change from 0 to 512 [ 143.886426][ T7032] netlink: 28 bytes leftover after parsing attributes in process `syz.5.930'. [ 144.136402][ T7044] netlink: 40 bytes leftover after parsing attributes in process `syz.4.932'. [ 144.255995][ T7049] netem: incorrect ge model size [ 144.278417][ T7049] netem: change failed [ 144.713252][ T26] audit: type=1400 audit(1790910927.893:18): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=7078 comm="syz.6.942" name="unknown" offset=16 [ 144.905163][ T7086] binder: 7085:7086 ioctl 400c620e 200000000040 returned -22 [ 146.416359][ T26] audit: type=1400 audit(1790910929.593:19): apparmor="STATUS" info="failed to unpack policydb" error=-71 profile="unconfined" name="p" pid=7137 comm="syz.1.959" name="p" offset=92 [ 146.581794][ T7145] program syz.0.964 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.609010][ T7147] netlink: 209832 bytes leftover after parsing attributes in process `syz.6.965'. [ 146.648601][ T7145] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 146.822949][ T4264] Process accounting resumed [ 146.934662][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'. [ 147.210358][ T7167] loop6: detected capacity change from 0 to 256 [ 147.262592][ T7167] exfat: Deprecated parameter 'namecase' [ 147.293723][ T7171] loop1: detected capacity change from 0 to 256 [ 147.308476][ T7167] exfat: Deprecated parameter 'namecase' [ 147.362223][ T7167] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 147.457020][ T7173] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000) [ 147.481348][ T7176] loop5: detected capacity change from 0 to 64 [ 147.502231][ T7171] FAT-fs (loop1): Directory bread(block 64) failed [ 147.535147][ T7171] FAT-fs (loop1): Directory bread(block 65) failed [ 147.574838][ T7171] FAT-fs (loop1): Directory bread(block 66) failed [ 147.638425][ T7171] FAT-fs (loop1): Directory bread(block 67) failed [ 147.645101][ T7171] FAT-fs (loop1): Directory bread(block 68) failed [ 147.745949][ T7171] FAT-fs (loop1): Directory bread(block 69) failed [ 147.797448][ T7171] FAT-fs (loop1): Directory bread(block 70) failed [ 147.804402][ T7171] FAT-fs (loop1): Directory bread(block 71) failed [ 147.827071][ T7171] FAT-fs (loop1): Directory bread(block 72) failed [ 147.833669][ T7171] FAT-fs (loop1): Directory bread(block 73) failed [ 147.902682][ T7192] loop6: detected capacity change from 0 to 256 [ 148.355759][ T1108] hid-generic 0005:4C4A:0058.0007: item fetching failed at offset 0/1 [ 148.377801][ T1108] hid-generic: probe of 0005:4C4A:0058.0007 failed with error -22 [ 148.564702][ T7228] netlink: 'syz.5.1000': attribute type 3 has an invalid length. [ 148.617113][ T7228] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1000'. [ 148.749777][ T7234] loop6: detected capacity change from 0 to 4096 [ 148.865515][ T7243] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.910971][ T26] audit: type=1800 audit(1790910932.093:20): pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.6.1003" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 148.979416][ T7246] program syz.0.1008 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.998560][ T7242] loop1: detected capacity change from 0 to 2048 [ 149.066024][ T7242] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 149.104991][ T5252] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 149.125136][ T4263] udevd[4263]: incorrect nilfs2 checksum on /dev/loop1 [ 149.162779][ T7248] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.194120][ T7242] NILFS error (device loop1): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 149.238745][ T7242] Remounting filesystem read-only [ 149.267143][ T7251] program syz.6.1010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.282578][ T4231] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 149.336986][ T7251] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 149.513206][ T7260] loop0: detected capacity change from 0 to 256 [ 149.707370][ T4231] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 149.715425][ T4231] usb 6-1: config 0 has no interface number 0 [ 149.826149][ T7269] loop6: detected capacity change from 0 to 512 [ 149.912043][ T7273] program syz.1.1021 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.921962][ T4231] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 149.947256][ T4231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.976963][ T4231] usb 6-1: Product: syz [ 149.981349][ T4231] usb 6-1: Manufacturer: syz [ 149.996236][ T4231] usb 6-1: SerialNumber: syz [ 150.027882][ T4231] usb 6-1: config 0 descriptor?? [ 150.077828][ T7269] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.307065][ T4231] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 150.324742][ T7281] loop1: detected capacity change from 0 to 4096 [ 150.342502][ T4231] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 150.383521][ T4231] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 150.408561][ T4231] usb 6-1: media controller created [ 150.440243][ T7286] loop0: detected capacity change from 0 to 512 [ 150.456924][ T7287] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.515457][ T26] audit: type=1800 audit(1790910933.693:21): pid=7281 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.1.1023" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 150.603341][ T4231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 150.727159][ T4231] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 150.860510][ T4231] usb 6-1: USB disconnect, device number 7 [ 151.003544][ T4188] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 151.417130][ T4231] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 151.437453][ T7289] jfs_strtoUCS: char2uni returned -22. [ 151.474858][ T7289] charset = cp932, char = 0xfc [ 151.484204][ T7291] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 151.497077][ T4233] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 151.602847][ T4187] ocfs2: Unmounting device (7,0) on (node local) [ 151.613153][ T7299] FAT-fs (loop5): Directory bread(block 64) failed [ 151.634241][ T7299] FAT-fs (loop5): Directory bread(block 65) failed [ 151.641408][ T7299] FAT-fs (loop5): Directory bread(block 66) failed [ 151.650041][ T7299] FAT-fs (loop5): Directory bread(block 67) failed [ 151.656675][ T7299] FAT-fs (loop5): Directory bread(block 68) failed [ 151.664270][ T7299] FAT-fs (loop5): Directory bread(block 69) failed [ 151.671169][ T4231] usb 7-1: Using ep0 maxpacket: 16 [ 151.676628][ T7299] FAT-fs (loop5): Directory bread(block 70) failed [ 151.715934][ T7301] vivid-004: disconnect [ 151.722374][ T7299] FAT-fs (loop5): Directory bread(block 71) failed [ 151.736945][ T4233] usb 2-1: Using ep0 maxpacket: 32 [ 151.748612][ T7300] vivid-004: reconnect [ 151.753938][ T7299] FAT-fs (loop5): Directory bread(block 72) failed [ 151.782512][ T7299] FAT-fs (loop5): Directory bread(block 73) failed [ 151.817358][ T4231] usb 7-1: too many endpoints for config 0 interface 0 altsetting 6: 255, using maximum allowed: 30 [ 151.843921][ T4231] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.861480][ T4233] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 151.875351][ T4231] usb 7-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 151.890337][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.926870][ T4231] usb 7-1: config 0 interface 0 has no altsetting 0 [ 151.942113][ T4233] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 151.969732][ T4231] usb 7-1: New USB device found, idVendor=045e, idProduct=0713, bcdDevice= 0.00 [ 151.976171][ T4233] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 151.993940][ T4231] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.998599][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.012941][ T4231] usb 7-1: config 0 descriptor?? [ 152.055741][ T4233] usb 2-1: config 0 descriptor?? [ 152.165443][ T7309] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.205536][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1036'. [ 152.222938][ T7309] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpjquota=,noquota,barrier,auto_da_alloc,dioread_nolock,. Quota mode: none. [ 152.265171][ T7309] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.321052][ T7319] set_capacity_and_notify: 4 callbacks suppressed [ 152.321064][ T7319] loop5: detected capacity change from 0 to 512 [ 152.352528][ T7319] EXT4-fs (loop5): Ignoring removed orlov option [ 152.360558][ T7319] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 152.404315][ T7319] EXT4-fs (loop5): 1 truncate cleaned up [ 152.422517][ T7319] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,. Quota mode: none. [ 152.510792][ T4231] input: HID 045e:0713 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:0713.0008/input/input14 [ 152.541848][ T4233] hid-led 0003:0FC5:B080.0009: unknown main item tag 0x1 [ 152.576999][ T4233] hid-led 0003:0FC5:B080.0009: unknown main item tag 0x0 [ 152.595194][ T4233] hid-led 0003:0FC5:B080.0009: unknown main item tag 0x4 [ 152.611821][ T4231] microsoft 0003:045E:0713.0008: input,hidraw0: USB HID vd.8b Joystick [HID 045e:0713] on usb-dummy_hcd.6-1/input0 [ 152.649291][ T4231] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 152.666106][ T4231] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 152.762811][ T1108] usb 7-1: USB disconnect, device number 6 [ 152.890325][ T7324] fido_id[7324]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 152.933162][ T7329] loop5: detected capacity change from 0 to 256 [ 152.977368][ T4233] hid-led: probe of 0003:0FC5:B080.0009 failed with error -71 [ 153.016949][ T4233] usb 2-1: USB disconnect, device number 6 [ 153.054455][ T7329] FAT-fs (loop5): Directory bread(block 64) failed [ 153.076652][ T7329] FAT-fs (loop5): Directory bread(block 65) failed [ 153.096554][ T7329] FAT-fs (loop5): Directory bread(block 66) failed [ 153.120003][ T7329] FAT-fs (loop5): Directory bread(block 67) failed [ 153.137566][ T7329] FAT-fs (loop5): Directory bread(block 68) failed [ 153.157097][ T7329] FAT-fs (loop5): Directory bread(block 69) failed [ 153.169406][ T7329] FAT-fs (loop5): Directory bread(block 70) failed [ 153.186357][ T7329] FAT-fs (loop5): Directory bread(block 71) failed [ 153.215875][ T7329] FAT-fs (loop5): Directory bread(block 72) failed [ 153.232913][ T7329] FAT-fs (loop5): Directory bread(block 73) failed [ 153.433720][ T7333] loop6: detected capacity change from 0 to 512 [ 153.494655][ T7343] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1046'. [ 153.571490][ T7333] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 153.622597][ T7333] ext4 filesystem being mounted at /114/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.746257][ T7352] loop1: detected capacity change from 0 to 512 [ 153.835683][ T7352] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 153.885477][ T7352] System zones: 1-12 [ 153.927974][ T7352] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1048: missing EA_INODE flag [ 153.972720][ T7352] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1048: error while reading EA inode 12 err=-117 [ 154.024733][ T7352] EXT4-fs (loop1): 1 orphan inode deleted [ 154.052116][ T7365] loop0: detected capacity change from 0 to 64 [ 154.058466][ T7352] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 154.086360][ T7352] fscrypt (loop1, inode 15): Reserved bits set in encryption policy [ 154.122086][ T7365] hfs: inconsistency in B*Tree (-1,0,2,3,0) [ 154.143972][ T7365] hfs: get root inode failed [ 154.491377][ T4233] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 154.559993][ T4233] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 154.693461][ T4231] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 154.976915][ T4231] usb 1-1: Using ep0 maxpacket: 8 [ 155.112736][ T4231] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 155.142742][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.219443][ T4231] pvrusb2: Hardware description: Terratec Grabster AV400 [ 155.231638][ T4231] pvrusb2: ********** [ 155.247569][ T4231] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 155.269386][ T4231] pvrusb2: Important functionality might not be entirely working. [ 155.291348][ T4231] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 155.326606][ T4231] pvrusb2: ********** [ 155.334247][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1072'. [ 155.359477][ T7406] netlink: 'syz.4.1072': attribute type 1 has an invalid length. [ 155.438876][ T2427] pvrusb2: Invalid write control endpoint [ 155.555142][ T2427] pvrusb2: Invalid write control endpoint [ 155.581515][ T2427] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 155.600344][ T2427] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 155.632580][ T2427] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 155.664568][ T4234] usb 1-1: USB disconnect, device number 3 [ 155.676073][ T7424] loop1: detected capacity change from 0 to 512 [ 155.678026][ T2427] pvrusb2: Device being rendered inoperable [ 155.705260][ T2427] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 155.721839][ T2427] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 155.745634][ T7424] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 155.765402][ T7424] System zones: 1-12 [ 155.774210][ T2427] pvrusb2: Attached sub-driver cx25840 [ 155.797738][ T2427] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 155.814472][ T7424] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1089: missing EA_INODE flag [ 155.867232][ T2427] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 155.889486][ T7424] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1089: error while reading EA inode 12 err=-117 [ 155.902468][ T7424] EXT4-fs (loop1): 1 orphan inode deleted [ 155.908914][ T7424] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 156.033922][ T7438] MPI: mpi too large (16392 bits) [ 156.071764][ T1108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 156.107770][ T7442] netlink: 'syz.4.1086': attribute type 1 has an invalid length. [ 156.129200][ T1108] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 156.323254][ T7449] loop0: detected capacity change from 0 to 1024 [ 156.376919][ T7449] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.455008][ T7449] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,dioread_nolock,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,init_itable,nogrpid,nodelalloc,grpjquota=,,errors=continue. Quota mode: none. [ 156.537026][ T4233] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 156.790258][ T4233] usb 5-1: Using ep0 maxpacket: 8 [ 156.907228][ T4233] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.942007][ T4233] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 156.964036][ T4233] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 157.080202][ T7462] loop0: detected capacity change from 0 to 8192 [ 157.123134][ T7462] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 157.137274][ T4233] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 157.154204][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.166167][ T4233] usb 5-1: Product: syz [ 157.170826][ T4233] usb 5-1: Manufacturer: syz [ 157.176139][ T4233] usb 5-1: SerialNumber: syz [ 157.185687][ T7462] REISERFS (device loop0): using ordered data mode [ 157.225419][ T7462] reiserfs: using flush barriers [ 157.237327][ T7462] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 157.263823][ T7462] REISERFS (device loop0): checking transaction log (loop0) [ 157.275687][ T7462] REISERFS (device loop0): Using r5 hash to sort names [ 157.287341][ T7462] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 157.320711][ T7462] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 157.396598][ T7462] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 157.437273][ T7462] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 157.462478][ T7462] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 157.836311][ T7482] loop0: detected capacity change from 0 to 512 [ 157.979953][ T7495] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1104'. [ 157.989931][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1103'. [ 158.008984][ T7482] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.106954][ T4233] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 158.136973][ T4233] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 158.148590][ T7499] loop6: detected capacity change from 0 to 256 [ 158.183789][ T4233] usb 5-1: USB disconnect, device number 7 [ 158.248565][ T7499] devpts: called with bogus options [ 158.526274][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.569200][ T7513] loop6: detected capacity change from 0 to 512 [ 158.620388][ T7515] loop1: detected capacity change from 0 to 512 [ 158.734883][ T7515] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.1123: missing EA_INODE flag [ 158.758544][ T7513] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000aff) [ 158.766644][ T7513] FAT-fs (loop6): Filesystem has been set read-only [ 158.884868][ T7515] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1123: error while reading EA inode 2 err=-117 [ 158.956456][ T7513] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000aff) [ 158.975378][ T7515] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1123: inode #3584: comm syz.1.1123: iget: illegal inode # [ 159.016636][ T7515] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1123: error while reading EA inode 3584 err=-117 [ 159.074054][ T7515] EXT4-fs (loop1): 1 orphan inode deleted [ 159.074090][ T7524] loop4: detected capacity change from 0 to 512 [ 159.095758][ T7515] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 159.140301][ T7524] EXT4-fs (loop4): Test dummy encryption mode enabled [ 159.199936][ T7524] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.1116: missing EA_INODE flag [ 159.277259][ T7524] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1116: error while reading EA inode 2 err=-117 [ 159.326263][ T7533] loop5: detected capacity change from 0 to 512 [ 159.366573][ T7524] EXT4-fs (loop4): 1 orphan inode deleted [ 159.385709][ T7535] capability: warning: `syz.1.1120' uses deprecated v2 capabilities in a way that may be insecure [ 159.446828][ T7524] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue. Quota mode: writeback. [ 159.463837][ T7535] program syz.1.1120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.540987][ T7533] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.895039][ T7552] tmpfs: Bad value for 'mpol' [ 159.925684][ T7552] cgroup: noprefix used incorrectly [ 160.069926][ T7526] loop6: detected capacity change from 0 to 32768 [ 160.180828][ T4234] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 160.279800][ T7566] loop5: detected capacity change from 0 to 512 [ 160.313797][ T7566] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 160.404814][ T7574] loop0: detected capacity change from 0 to 8 [ 160.466938][ T4234] usb 5-1: Using ep0 maxpacket: 8 [ 160.480239][ T7566] EXT4-fs (loop5): 1 truncate cleaned up [ 160.485941][ T7566] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 160.622710][ T4234] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 160.636600][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.652032][ T7582] EXT4-fs error (device loop5): ext4_empty_dir:3179: inode #2: block 13: comm syz.5.1133: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 160.729414][ T4234] pvrusb2: Hardware description: Terratec Grabster AV400 [ 160.736501][ T4234] pvrusb2: ********** [ 160.745989][ T7582] EXT4-fs (loop5): Remounting filesystem read-only [ 160.751375][ T4234] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 160.772413][ T7586] overlayfs: upper fs does not support file handles, falling back to index=off. [ 160.782555][ T4234] pvrusb2: Important functionality might not be entirely working. [ 160.790997][ T7586] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 160.807116][ T4234] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 160.827570][ T4234] pvrusb2: ********** [ 160.852831][ T7589] loop0: detected capacity change from 0 to 512 [ 160.961609][ T7589] EXT4-fs (loop0): 1 truncate cleaned up [ 160.974188][ T2427] pvrusb2: Invalid write control endpoint [ 161.014866][ T7589] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 161.016416][ T2427] pvrusb2: Invalid write control endpoint [ 161.134109][ T2427] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 161.149454][ T26] audit: type=1800 audit(1790910944.333:22): pid=7599 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.0.1145" name="file1" dev="loop0" ino=13 res=0 errno=0 [ 161.186218][ T7589] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1145: invalid indirect mapped block 234881024 (level 0) [ 161.211923][ T2427] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 161.226515][ T2427] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 161.237877][ T13] usb 5-1: USB disconnect, device number 8 [ 161.256323][ T2427] pvrusb2: Device being rendered inoperable [ 161.275909][ T2427] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 161.294446][ T2427] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 161.299777][ T7589] EXT4-fs (loop0): Remounting filesystem read-only [ 161.338219][ T2427] pvrusb2: Attached sub-driver cx25840 [ 161.359754][ T2427] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 161.381191][ T2427] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 161.649894][ T7613] syz.6.1154 (7613) used greatest stack depth: 19984 bytes left [ 161.923723][ T7628] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 162.133760][ T7643] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 162.211897][ T7645] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 162.220880][ T7643] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 162.326274][ T7643] System zones: 1-12 [ 162.363342][ T7645] EXT4-fs (loop6): orphan cleanup on readonly fs [ 162.377194][ T7643] EXT4-fs (loop0): 1 truncate cleaned up [ 162.382950][ T7643] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 162.391778][ T7645] EXT4-fs error (device loop6): ext4_orphan_get:1436: comm syz.6.1168: bad orphan inode 15 [ 162.452507][ T7652] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 162.469100][ T7645] ext4_test_bit(bit=14, block=18) = 1 [ 162.474742][ T7645] is_bad_inode(inode)=0 [ 162.479665][ T7645] NEXT_ORPHAN(inode)=1023 [ 162.484049][ T7645] max_ino=32 [ 162.487754][ T7645] i_nlink=0 [ 162.494818][ T7645] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2928: inode #15: comm syz.6.1168: corrupted xattr block 19 [ 162.554183][ T7645] EXT4-fs warning (device loop6): ext4_evict_inode:304: xattr delete (err -117) [ 162.573091][ T7645] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 162.761690][ T7657] EXT4-fs (loop1): Ignoring removed nobh option [ 162.769182][ T7657] EXT4-fs (loop1): Ignoring removed bh option [ 162.810208][ T7657] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,noquota,sysvgroups,nobh,usrquota,nojournal_checksum,noload,bh,norecovery,,errors=continue. Quota mode: writeback. [ 162.854937][ T7661] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 162.871454][ T7657] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 162.932828][ T7661] System zones: 1-12 [ 162.961105][ T7671] set_capacity_and_notify: 7 callbacks suppressed [ 162.961121][ T7671] loop6: detected capacity change from 0 to 512 [ 163.018257][ T7661] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.1175: missing EA_INODE flag [ 163.059005][ T7661] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1175: error while reading EA inode 12 err=-117 [ 163.082227][ T7661] EXT4-fs (loop0): 1 orphan inode deleted [ 163.101999][ T7671] EXT4-fs (loop6): Test dummy encryption mode enabled [ 163.132579][ T7661] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 163.154239][ T7671] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.1188: missing EA_INODE flag [ 163.168325][ T7671] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1188: error while reading EA inode 2 err=-117 [ 163.187578][ T7671] EXT4-fs (loop6): 1 orphan inode deleted [ 163.193405][ T7671] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue. Quota mode: writeback. [ 163.253477][ T7674] sctp: [Deprecated]: syz.4.1180 (pid 7674) Use of int in max_burst socket option. [ 163.253477][ T7674] Use struct sctp_assoc_value instead [ 163.414289][ T7688] overlayfs: upper fs does not support file handles, falling back to index=off. [ 163.497029][ T7688] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 163.674511][ T7703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1195'. [ 163.698184][ T7705] loop0: detected capacity change from 0 to 1024 [ 163.734293][ T7705] EXT4-fs (loop0): Ignoring removed nobh option [ 163.756998][ T7705] EXT4-fs (loop0): Ignoring removed bh option [ 163.846491][ T7705] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,noquota,sysvgroups,nobh,usrquota,nojournal_checksum,noload,bh,norecovery,,errors=continue. Quota mode: writeback. [ 163.996343][ T7705] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 164.081101][ T7697] loop1: detected capacity change from 0 to 32768 [ 164.095716][ T7723] sctp: [Deprecated]: syz.5.1200 (pid 7723) Use of int in max_burst socket option. [ 164.095716][ T7723] Use struct sctp_assoc_value instead [ 164.114351][ T4231] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 164.353026][ T7733] loop6: detected capacity change from 0 to 8 [ 164.377605][ T4231] usb 5-1: Using ep0 maxpacket: 32 [ 164.496988][ T7733] SQUASHFS error: Failed to read block 0x6e6: -5 [ 164.513418][ T7733] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 164.520895][ T7733] SQUASHFS error: Unable to read directory block [631:26] [ 164.537259][ T4231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.565851][ T4231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.582494][ T4231] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 164.622518][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.647350][ T4231] usb 5-1: config 0 descriptor?? [ 164.723535][ T4231] hub 5-1:0.0: USB hub found [ 164.846421][ T7751] sctp: [Deprecated]: syz.0.1216 (pid 7751) Use of int in max_burst socket option. [ 164.846421][ T7751] Use struct sctp_assoc_value instead [ 164.958552][ T4231] hub 5-1:0.0: 12 ports detected [ 164.976974][ T4231] hub 5-1:0.0: insufficient power available to use all downstream ports [ 165.039877][ T7769] loop0: detected capacity change from 0 to 8 [ 165.094823][ T7769] SQUASHFS error: Failed to read block 0x2d7: -5 [ 165.105138][ T7769] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 165.227372][ T4231] hub 5-1:0.0: hub_hub_status failed (err = 0) [ 165.234985][ T4231] hub 5-1:0.0: config failed, can't get hub status (err -5) [ 165.245498][ T7779] loop0: detected capacity change from 0 to 128 [ 165.295905][ T7779] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.311701][ T7779] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.547083][ T4231] usbhid 5-1:0.0: can't add hid device: -71 [ 165.553122][ T4231] usbhid: probe of 5-1:0.0 failed with error -71 [ 165.609108][ T4231] usb 5-1: USB disconnect, device number 9 [ 165.617784][ T7785] loop0: detected capacity change from 0 to 512 [ 165.686445][ T7785] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 165.760360][ T7785] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0102] [ 165.789467][ T7785] EXT4-fs (loop0): orphan cleanup on readonly fs [ 165.814351][ T7787] loop5: detected capacity change from 0 to 4096 [ 165.824097][ T7785] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.1230: attempt to clear invalid blocks 1024 len 1 [ 165.839302][ T7785] EXT4-fs (loop0): Remounting filesystem read-only [ 165.850183][ T7785] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1230: bg 0: block 361: padding at end of block bitmap is not set [ 165.866141][ T7785] EXT4-fs (loop0): Remounting filesystem read-only [ 165.876699][ T7785] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 165.891511][ T7785] EXT4-fs (loop0): Remounting filesystem read-only [ 165.897255][ T7787] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 165.907483][ T7785] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1230: invalid indirect mapped block 1811939328 (level 0) [ 165.971280][ T7785] EXT4-fs (loop0): Remounting filesystem read-only [ 165.985121][ T7787] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 166.007181][ T7785] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1230: invalid indirect mapped block 2185560079 (level 1) [ 166.073287][ T7785] EXT4-fs (loop0): Remounting filesystem read-only [ 166.092143][ T7787] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 166.107115][ T7785] EXT4-fs (loop0): 1 truncate cleaned up [ 166.112820][ T7785] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,abort. Quota mode: none. [ 166.189818][ T5091] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 166.196506][ T5091] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22. [ 166.255691][ T7792] loop6: detected capacity change from 0 to 512 [ 166.404613][ T7792] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 166.405286][ T7796] sctp: [Deprecated]: syz.1.1233 (pid 7796) Use of int in max_burst socket option. [ 166.405286][ T7796] Use struct sctp_assoc_value instead [ 166.433143][ T7792] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.631576][ T7817] loop5: detected capacity change from 0 to 128 [ 166.674870][ T4232] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 166.711976][ T7817] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 166.768286][ T7817] hpfs: filesystem error: improperly stopped [ 166.786900][ T7817] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 166.794686][ T7817] hpfs: You really don't want any checks? You are crazy... [ 166.824411][ T7817] hpfs: Code page index out of array [ 166.829860][ T7817] hpfs: code page support is disabled [ 166.856223][ T7817] hpfs: hpfs_map_4sectors(): unaligned read [ 166.874395][ T7817] hpfs: hpfs_map_4sectors(): unaligned read [ 166.884508][ T7817] hpfs: filesystem error: unable to find root dir [ 166.936882][ T4232] usb 1-1: Using ep0 maxpacket: 32 [ 166.965755][ T7817] hpfs: hpfs_map_4sectors(): unaligned read [ 167.057270][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.081745][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.093052][ T4232] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 167.102325][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.127567][ T4232] usb 1-1: config 0 descriptor?? [ 167.180828][ T4232] hub 1-1:0.0: USB hub found [ 167.201325][ T7841] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 167.399287][ T4232] hub 1-1:0.0: 12 ports detected [ 167.417080][ T4232] hub 1-1:0.0: insufficient power available to use all downstream ports [ 167.657087][ T4232] hub 1-1:0.0: hub_hub_status failed (err = 0) [ 167.667070][ T4232] hub 1-1:0.0: config failed, can't get hub status (err -5) [ 167.698147][ T7866] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 167.736470][ T7866] hpfs: filesystem error: improperly stopped [ 167.784623][ T7866] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 167.824122][ T7866] hpfs: You really don't want any checks? You are crazy... [ 167.848023][ T7866] hpfs: Code page index out of array [ 167.853375][ T7866] hpfs: code page support is disabled [ 167.863618][ T7866] hpfs: hpfs_map_4sectors(): unaligned read [ 167.870430][ T7866] hpfs: hpfs_map_4sectors(): unaligned read [ 167.876454][ T7866] hpfs: filesystem error: unable to find root dir [ 167.890747][ T7847] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 167.942010][ T7866] hpfs: hpfs_map_4sectors(): unaligned read [ 167.947981][ T4232] usbhid 1-1:0.0: can't add hid device: -71 [ 167.954213][ T4232] usbhid: probe of 1-1:0.0 failed with error -71 [ 167.974949][ T1108] kernel write not supported for file /input/mice (pid: 1108 comm: kworker/1:2) [ 167.998170][ T4232] usb 1-1: USB disconnect, device number 4 [ 168.059960][ T7878] set_capacity_and_notify: 3 callbacks suppressed [ 168.059978][ T7878] loop5: detected capacity change from 0 to 256 [ 168.162856][ T7878] devpts: called with bogus options [ 168.219024][ T4194] ocfs2: Unmounting device (7,4) on (node local) [ 168.980221][ T7897] loop1: detected capacity change from 0 to 512 [ 169.101398][ T7897] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.171112][ T7917] loop6: detected capacity change from 0 to 512 [ 169.291706][ T7923] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 169.307272][ T7923] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 169.393415][ T7927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1291'. [ 169.432231][ T4232] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 169.686887][ T4232] usb 6-1: Using ep0 maxpacket: 8 [ 169.714284][ T7946] block2mtd: device name too long [ 169.807169][ T4232] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 169.815377][ T4232] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 169.843770][ T7953] tipc: Started in network mode [ 169.856537][ T7953] tipc: Node identity ac14140f, cluster identity 4711 [ 169.867964][ T4232] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 169.880418][ T7953] tipc: New replicast peer: 255.255.255.255 [ 169.896934][ T4232] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 169.910184][ T7953] tipc: Enabled bearer , priority 10 [ 169.916180][ T4232] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 169.950621][ T4232] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.987101][ T4232] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.996239][ T4232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.051731][ T7928] loop4: detected capacity change from 0 to 32768 [ 170.165933][ T7928] XFS (loop4): Mounting V5 Filesystem [ 170.233464][ T7983] loop0: detected capacity change from 0 to 256 [ 170.299542][ T7928] XFS (loop4): Ending clean mount [ 170.300706][ T7983] exfat: Deprecated parameter 'utf8' [ 170.307981][ T4232] usb 6-1: GET_CAPABILITIES returned 0 [ 170.317165][ T4232] usbtmc 6-1:16.0: can't read capabilities [ 170.357524][ T7983] exfat: Deprecated parameter 'utf8' [ 170.441716][ T7983] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 170.504486][ T4194] XFS (loop4): Unmounting Filesystem [ 170.521781][ T4233] usb 6-1: USB disconnect, device number 8 [ 170.600033][ T7997] loop6: detected capacity change from 0 to 64 [ 170.699209][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1319'. [ 170.914262][ T4264] tipc: Node number set to 2886997007 [ 171.097121][ T2288] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 171.222600][ T8017] loop0: detected capacity change from 0 to 1024 [ 171.460949][ T8030] loop5: detected capacity change from 0 to 512 [ 171.467485][ T2288] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 171.476566][ T2288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.516930][ T2288] usb 2-1: config 0 descriptor?? [ 171.560161][ T8035] netlink: 'syz.4.1335': attribute type 2 has an invalid length. [ 171.579492][ T2288] cp210x 2-1:0.0: cp210x converter detected [ 171.586279][ T8030] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,discard,quota,,errors=continue. Quota mode: writeback. [ 171.626963][ T8030] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.722084][ T4231] kernel write not supported for file /input/mice (pid: 4231 comm: kworker/0:5) [ 172.016961][ T2288] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 172.065980][ T2288] usb 2-1: cp210x converter now attached to ttyUSB0 [ 172.260665][ T4231] usb 2-1: USB disconnect, device number 7 [ 172.284298][ T4231] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 172.320838][ T4231] cp210x 2-1:0.0: device disconnected [ 172.505089][ T8076] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.514933][ T8076] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.523759][ T8076] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.532537][ T8076] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.565537][ T8076] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.575019][ T8076] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.584042][ T8076] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.592998][ T8076] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.815660][ T8094] ima: policy update failed [ 172.824668][ T26] audit: type=1802 audit(1790910956.003:23): pid=8094 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=policy_update cause=failed comm="syz.6.1360" res=0 errno=0 [ 172.891517][ T8100] block2mtd: illegal erase size [ 173.484112][ T8143] bridge0: port 3(syz_tun) entered blocking state [ 173.503479][ T8143] bridge0: port 3(syz_tun) entered disabled state [ 173.546410][ T8143] device syz_tun entered promiscuous mode [ 173.571608][ T8143] bridge0: port 3(syz_tun) entered blocking state [ 173.579027][ T8143] bridge0: port 3(syz_tun) entered forwarding state [ 173.625914][ T8118] loop5: detected capacity change from 0 to 32768 [ 173.758101][ T8118] XFS (loop5): Mounting V5 Filesystem [ 173.852830][ T8168] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1391'. [ 173.884352][ T8118] XFS (loop5): Ending clean mount [ 174.032728][ T5091] XFS (loop5): Unmounting Filesystem [ 174.052538][ T8158] loop6: detected capacity change from 0 to 32768 [ 174.377644][ T8183] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 174.442156][ T8187] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 174.739470][ T8196] MTRR 1 not used [ 174.988260][ T8210] loop4: detected capacity change from 0 to 1024 [ 175.003880][ T8173] loop1: detected capacity change from 0 to 32768 [ 175.103101][ T8217] loop5: detected capacity change from 0 to 64 [ 175.151140][ T8220] loop6: detected capacity change from 0 to 64 [ 175.213801][ T8217] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1411'. [ 175.272677][ T8173] XFS (loop1): Mounting V5 Filesystem [ 175.470151][ T8173] XFS (loop1): Ending clean mount [ 175.619849][ T4188] XFS (loop1): Unmounting Filesystem [ 175.724568][ T8238] loop0: detected capacity change from 0 to 512 [ 175.801927][ T8226] loop4: detected capacity change from 0 to 32768 [ 175.866079][ T8238] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 175.930127][ T8226] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 175.944732][ T8226] IPv6: NLM_F_CREATE should be set when creating new route [ 175.952044][ T8226] IPv6: NLM_F_CREATE should be set when creating new route [ 175.959345][ T8226] IPv6: NLM_F_CREATE should be set when creating new route [ 175.997572][ T4234] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 176.016500][ T8248] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 176.016500][ T8248] [ 176.094472][ T8248] ialloc: diAlloc returned -5! [ 176.410490][ T8257] netlink: 'syz.1.1425': attribute type 3 has an invalid length. [ 176.418934][ T4234] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.439433][ T4234] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 176.447205][ T8257] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1425'. [ 176.466931][ T4234] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 176.577770][ T4234] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.596962][ T4234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 176.605140][ T4234] usb 6-1: SerialNumber: syz [ 176.678060][ T4234] hub 6-1:1.0: bad descriptor, ignoring hub [ 176.686952][ T4234] hub: probe of 6-1:1.0 failed with error -5 [ 176.693530][ T4234] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 176.718148][ T8268] ima: policy update failed [ 176.724194][ T4234] cdc_acm: probe of 6-1:1.0 failed with error -12 [ 176.734282][ T26] audit: type=1802 audit(1790910959.913:24): pid=8268 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=policy_update cause=failed comm="syz.1.1429" res=0 errno=0 [ 177.017529][ T8284] loop4: detected capacity change from 0 to 512 [ 177.033268][ T4234] usb 6-1: USB disconnect, device number 9 [ 177.134610][ T8284] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,discard,quota,,errors=continue. Quota mode: writeback. [ 177.148858][ T8284] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.478828][ T8305] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 177.498451][ T8307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1444'. [ 177.544656][ T4230] FS-Cache: Duplicate cookie detected [ 177.551037][ T4230] FS-Cache: O-cookie c=00000007 [p=00000006 fl=222 nc=0 na=1] [ 177.559363][ T4230] FS-Cache: O-cookie d=ffffffff8c747d60{AFS.cell} n=ffff88802aad5800 [ 177.567920][ T4230] FS-Cache: O-key=[4] '73797a30' [ 177.572964][ T4230] FS-Cache: N-cookie c=00000008 [p=00000006 fl=2 nc=0 na=1] [ 177.580326][ T4230] FS-Cache: N-cookie d=ffffffff8c747d60{AFS.cell} n=ffff8880797ba000 [ 177.588467][ T4230] FS-Cache: N-key=[4] '73797a30' [ 177.686259][ T8316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1450'. [ 177.756944][ T8321] loop0: detected capacity change from 0 to 512 [ 177.846355][ T8321] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,discard,quota,,errors=continue. Quota mode: writeback. [ 177.983214][ T8321] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.126045][ T8336] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 178.211887][ T8336] EXT4-fs (loop4): orphan cleanup on readonly fs [ 178.230094][ T8336] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #3: comm syz.4.1461: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 178.345076][ T8336] EXT4-fs error (device loop4): ext4_quota_enable:6447: comm syz.4.1461: Bad quota inode: 3, type: 0 [ 178.377334][ T8336] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 178.444095][ T8336] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 178.465342][ T8336] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,init_itable=0x00000000000002cd,init_itable,,errors=continue. Quota mode: writeback. [ 178.586900][ T4230] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 178.704487][ T8367] set_capacity_and_notify: 1 callbacks suppressed [ 178.704505][ T8367] loop4: detected capacity change from 0 to 256 [ 178.798145][ T8367] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xa05bf55d, utbl_chksum : 0xe619d30d) [ 178.846959][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 178.969802][ T4230] usb 1-1: too many endpoints for config 0 interface 0 altsetting 6: 255, using maximum allowed: 30 [ 178.998681][ T4230] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.009910][ T4230] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 179.024043][ T4230] usb 1-1: config 0 interface 0 has no altsetting 0 [ 179.047728][ T4230] usb 1-1: New USB device found, idVendor=045e, idProduct=0713, bcdDevice= 0.00 [ 179.077095][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.107757][ T4230] usb 1-1: config 0 descriptor?? [ 179.193325][ T8392] bridge0: port 3(syz_tun) entered blocking state [ 179.206273][ T8390] loop6: detected capacity change from 0 to 512 [ 179.212881][ T8392] bridge0: port 3(syz_tun) entered disabled state [ 179.244828][ T8392] device syz_tun entered promiscuous mode [ 179.252460][ T8392] bridge0: port 3(syz_tun) entered blocking state [ 179.259072][ T8392] bridge0: port 3(syz_tun) entered forwarding state [ 179.346068][ T8390] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodiscard,errors=remount-ro,mb_optimize_scan=0x0000000000000001,delalloc,data_err=ignore,. Quota mode: writeback. [ 179.380925][ T8397] loop5: detected capacity change from 0 to 64 [ 179.404777][ T8390] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.600975][ T4230] input: HID 045e:0713 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:0713.000D/input/input15 [ 179.614372][ T8390] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #2: comm syz.6.1494: corrupted inode contents [ 179.695745][ T8390] EXT4-fs (loop6): Remounting filesystem read-only [ 179.715896][ T4230] microsoft 0003:045E:0713.000D: input,hidraw0: USB HID vd.8b Joystick [HID 045e:0713] on usb-dummy_hcd.0-1/input0 [ 179.753100][ T8390] EXT4-fs error (device loop6): ext4_dirty_inode:6087: inode #2: comm syz.6.1494: mark_inode_dirty error [ 179.839196][ T4230] usb 1-1: USB disconnect, device number 5 [ 179.874063][ T8390] EXT4-fs (loop6): Remounting filesystem read-only [ 179.907049][ T8390] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #2: comm syz.6.1494: corrupted inode contents [ 179.942842][ T8403] fido_id[8403]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 179.967534][ T8390] EXT4-fs (loop6): Remounting filesystem read-only [ 179.982388][ T8390] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.1494: mark_inode_dirty error [ 180.067772][ T8390] EXT4-fs (loop6): Remounting filesystem read-only [ 180.129499][ T8408] loop5: detected capacity change from 0 to 1024 [ 180.154524][ T8400] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #2: comm syz.6.1494: corrupted inode contents [ 180.252790][ T8400] EXT4-fs (loop6): Remounting filesystem read-only [ 180.282354][ T8400] EXT4-fs error (device loop6): ext4_dirty_inode:6087: inode #2: comm syz.6.1494: mark_inode_dirty error [ 180.304031][ T8400] EXT4-fs (loop6): Remounting filesystem read-only [ 180.322878][ T8400] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #2: comm syz.6.1494: corrupted inode contents [ 180.360939][ T26] audit: type=1800 audit(1790910963.543:25): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.5.1489" name="file1" dev="loop5" ino=1 res=0 errno=0 [ 180.411191][ T8400] EXT4-fs (loop6): Remounting filesystem read-only [ 180.470243][ T8401] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #2: comm syz.6.1494: corrupted inode contents [ 180.497622][ T8401] EXT4-fs (loop6): Remounting filesystem read-only [ 180.504207][ T8401] EXT4-fs error (device loop6): ext4_append:88: inode #2: comm syz.6.1494: mark_inode_dirty error [ 180.671274][ T8401] EXT4-fs (loop6): Remounting filesystem read-only [ 180.721437][ T8401] EXT4-fs error (device loop6) in ext4_append:100: Corrupt filesystem [ 180.790928][ T8401] EXT4-fs (loop6): Remounting filesystem read-only [ 180.839218][ T8422] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1497'. [ 180.882484][ T8418] loop0: detected capacity change from 0 to 4096 [ 180.896440][ T8424] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.905505][ T8424] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.914455][ T8424] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.923357][ T8424] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.969888][ T8418] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 181.004341][ T8424] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.013392][ T8424] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.022539][ T8424] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.031606][ T8424] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.065709][ T8418] ntfs: volume version 3.1. [ 181.116535][ T8429] loop5: detected capacity change from 0 to 512 [ 181.228069][ T8429] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 181.288991][ T8429] System zones: 1-12 [ 181.369092][ T8429] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.1501: missing EA_INODE flag [ 181.436960][ T8429] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1501: error while reading EA inode 12 err=-117 [ 181.458749][ T8429] EXT4-fs (loop5): 1 orphan inode deleted [ 181.468960][ T8429] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 181.531714][ T8430] loop4: detected capacity change from 0 to 4096 [ 181.580567][ T8429] fscrypt (loop5, inode 15): Reserved bits set in encryption policy [ 181.692162][ T8439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1514'. [ 181.729689][ T8433] loop6: detected capacity change from 0 to 4096 [ 181.739458][ T8439] netlink: 'syz.1.1514': attribute type 1 has an invalid length. [ 181.836140][ T8442] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1505'. [ 181.849122][ T8433] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 181.988063][ T8433] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 182.126563][ T8450] loop5: detected capacity change from 0 to 4096 [ 182.190081][ T8450] NILFS (loop5): invalid segment: Checksum error in segment payload [ 182.223365][ T8450] NILFS (loop5): trying rollback from an earlier position [ 182.259146][ T8454] loop1: detected capacity change from 0 to 256 [ 182.299915][ T8450] NILFS (loop5): recovery complete [ 182.373209][ T8461] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.718635][ T4231] FS-Cache: Duplicate cookie detected [ 182.724384][ T4231] FS-Cache: O-cookie c=00000007 [p=00000006 fl=222 nc=0 na=1] [ 182.732169][ T4231] FS-Cache: O-cookie d=ffffffff8c747d60{AFS.cell} n=ffff88802aad5800 [ 182.740312][ T4231] FS-Cache: O-key=[4] '73797a30' [ 182.745340][ T4231] FS-Cache: N-cookie c=00000009 [p=00000006 fl=2 nc=0 na=1] [ 182.752786][ T4231] FS-Cache: N-cookie d=ffffffff8c747d60{AFS.cell} n=ffff88807a6ff800 [ 182.760957][ T4231] FS-Cache: N-key=[4] '73797a30' [ 183.011883][ T8478] EXT4-fs (loop6): 1 truncate cleaned up [ 183.065588][ T8478] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000007,jqfmt=vfsv1,noblock_validity,noauto_da_alloc,errors=continue,discard,grpjquota=,errors=remount-ro,discard,. Quota mode: none. [ 183.538264][ T8463] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 183.545570][ T8463] IPv6: NLM_F_CREATE should be set when creating new route [ 183.552997][ T8463] IPv6: NLM_F_CREATE should be set when creating new route [ 183.560288][ T8463] IPv6: NLM_F_CREATE should be set when creating new route [ 183.588776][ T8493] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 183.588776][ T8493] [ 183.651499][ T8493] ialloc: diAlloc returned -5! [ 184.052624][ T8521] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 184.613038][ T8547] set_capacity_and_notify: 4 callbacks suppressed [ 184.613055][ T8547] loop6: detected capacity change from 0 to 512 [ 184.789691][ T8547] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.1547: missing EA_INODE flag [ 184.870840][ T8547] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1547: error while reading EA inode 2 err=-117 [ 185.006886][ T8547] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.1547: inode #3584: comm syz.6.1547: iget: illegal inode # [ 185.040872][ T8524] loop0: detected capacity change from 0 to 32768 [ 185.056496][ T8547] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1547: error while reading EA inode 3584 err=-117 [ 185.101679][ T8547] EXT4-fs (loop6): 1 orphan inode deleted [ 185.115107][ T8562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1557'. [ 185.135703][ T8547] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 185.219712][ T8524] jfs_mkdir: dtInsert returned -EIO [ 185.242259][ T8524] ERROR: (device loop0): jfs_mkdir: [ 185.242259][ T8524] [ 185.289342][ T8524] ERROR: (device loop0): remounting filesystem as read-only [ 185.333271][ T8524] ERROR: (device loop0): dbDiscardAG: -EIO [ 185.333271][ T8524] [ 185.533732][ T8566] kAFS: bad VL server IP address [ 185.551672][ T8534] loop4: detected capacity change from 0 to 32768 [ 185.610316][ T8534] XFS: noikeep mount option is deprecated. [ 185.848537][ T8582] program syz.6.1564 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.875628][ T8534] XFS (loop4): Mounting V5 Filesystem [ 186.037118][ T4232] Bluetooth: hci0: command 0x0406 tx timeout [ 186.043238][ T4232] Bluetooth: hci3: command 0x0406 tx timeout [ 186.047772][ T4234] Bluetooth: hci1: command 0x0406 tx timeout [ 186.109159][ T8534] XFS (loop4): Ending clean mount [ 186.143637][ T8534] XFS (loop4): Quotacheck needed: Please wait. [ 186.274455][ T8534] XFS (loop4): Quotacheck: Done. [ 186.521818][ T8606] loop1: detected capacity change from 0 to 8 [ 186.640419][ T4194] XFS (loop4): Unmounting Filesystem [ 186.797656][ T8588] loop5: detected capacity change from 0 to 32768 [ 186.934776][ T8588] XFS (loop5): Mounting V5 Filesystem [ 187.036671][ T8588] XFS (loop5): Ending clean mount [ 187.184253][ T5091] XFS (loop5): Unmounting Filesystem [ 187.234166][ T8622] sp0: Synchronizing with TNC [ 187.244524][ T8623] loop6: detected capacity change from 0 to 512 [ 187.290743][ T8623] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 187.329257][ T8621] [U] è [ 187.419137][ T8623] EXT4-fs (loop6): 1 truncate cleaned up [ 187.471251][ T8623] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 187.672601][ T8629] EXT4-fs error (device loop6): ext4_empty_dir:3179: inode #2: block 13: comm syz.6.1578: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 187.719142][ T8628] loop0: detected capacity change from 0 to 1024 [ 187.849256][ T26] audit: type=1800 audit(1790910971.033:26): pid=8628 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.0.1591" name="file1" dev="loop0" ino=1 res=0 errno=0 [ 187.868731][ T8629] EXT4-fs (loop6): Remounting filesystem read-only [ 187.919590][ T8633] kAFS: bad VL server IP address [ 188.064334][ T8636] loop1: detected capacity change from 0 to 512 [ 188.223184][ T8636] EXT4-fs (loop1): 1 truncate cleaned up [ 188.234211][ T8636] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 188.256889][ T26] audit: type=1800 audit(1790910971.433:27): pid=8636 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.1.1582" name="file1" dev="loop1" ino=13 res=0 errno=0 [ 188.282771][ T8636] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1582: invalid indirect mapped block 234881024 (level 0) [ 188.349061][ T8648] program syz.0.1584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.391117][ T8636] EXT4-fs (loop1): Remounting filesystem read-only [ 188.537137][ T8655] loop6: detected capacity change from 0 to 512 [ 188.643928][ T8659] netlink: 'syz.0.1592': attribute type 2 has an invalid length. [ 188.679054][ T8659] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1592'. [ 188.739857][ T8655] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 188.750375][ T8658] loop1: detected capacity change from 0 to 4096 [ 188.808117][ T8658] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 188.921927][ T8658] ntfs: volume version 3.1. [ 189.062054][ T8675] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1596'. [ 189.453719][ T8691] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 189.489520][ T8691] System zones: 1-12 [ 189.501378][ T8691] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.1602: missing EA_INODE flag [ 189.535111][ T8691] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1602: error while reading EA inode 12 err=-117 [ 189.596109][ T8699] kAFS: bad VL server IP address [ 189.650566][ T8691] EXT4-fs (loop5): 1 orphan inode deleted [ 189.656458][ T8691] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 189.740164][ T8706] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 189.870574][ T8711] set_capacity_and_notify: 1 callbacks suppressed [ 189.870602][ T8711] loop1: detected capacity change from 0 to 2048 [ 189.998963][ T8711] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 190.038276][ T8717] loop5: detected capacity change from 0 to 4096 [ 190.049645][ T8717] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 190.077544][ T8711] ext4 filesystem being mounted at /377/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.136255][ T8717] ntfs: volume version 3.1. [ 190.200981][ T8711] fs-verity: sha512 using implementation "sha512-avx2" [ 190.773555][ T8744] loop4: detected capacity change from 0 to 2048 [ 190.853773][ T8744] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 190.866883][ T13] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 190.901573][ T8749] loop7: detected capacity change from 0 to 7 [ 190.915391][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 190.927054][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.936234][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 190.947819][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.956851][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 190.968046][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.976975][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 190.987973][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 191.003279][ T8744] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 9: comm syz.4.1626: path /311/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=45, inode=4195584, rec_len=0, size=60 fake=0 [ 191.047089][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.058163][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 191.104629][ T8750] loop_set_block_size: loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) has still dirty pages (nrpages=1) [ 191.131948][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.142967][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 191.154635][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.165653][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 191.174246][ T4263] ldm_validate_partition_table(): Disk read failed. [ 191.182180][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.193189][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 191.197249][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 191.209606][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.220622][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 191.256957][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.267996][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 191.296628][ T4263] Dev loop7: unable to read RDB block 0 [ 191.309470][ T4263] loop7: unable to read partition table [ 191.318623][ T4263] loop7: partition table beyond EOD, truncated [ 191.333770][ T8749] ldm_validate_partition_table(): Disk read failed. [ 191.352574][ T8749] Dev loop7: unable to read RDB block 0 [ 191.367922][ T8749] loop7: unable to read partition table [ 191.375539][ T8752] loop4: detected capacity change from 0 to 4096 [ 191.395627][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.412451][ T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.414041][ T8749] loop7: partition table beyond EOD, [ 191.428950][ T8752] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 191.447037][ T8749] truncated [ 191.450619][ T8749] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 191.602999][ T8752] ntfs: volume version 3.1. [ 191.607740][ T13] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 191.607777][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.607803][ T13] usb 2-1: Product: syz [ 191.607822][ T13] usb 2-1: Manufacturer: syz [ 191.607840][ T13] usb 2-1: SerialNumber: syz [ 191.761544][ T8762] loop5: detected capacity change from 0 to 8 [ 192.029889][ T13] usb 2-1: unknown interface protocol 0xf4, assuming v1 [ 192.047091][ T13] usb 2-1: 0:2 : does not exist [ 192.062965][ T13] usb 2-1: unit 1 not found! [ 192.106015][ T13] usb 2-1: USB disconnect, device number 8 [ 192.315698][ T8787] loop0: detected capacity change from 0 to 512 [ 192.433321][ T8787] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.659093][ T8788] loop6: detected capacity change from 0 to 4096 [ 192.715886][ T8788] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 192.882454][ C1] sd 0:0:1:0: tag#349 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 192.892371][ C1] sd 0:0:1:0: tag#349 CDB: Read(6) 08 00 00 00 00 00 00 00 00 00 00 00 [ 192.972755][ T13] kernel write not supported for file /input/event2 (pid: 13 comm: kworker/0:1) [ 193.078630][ T8788] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 193.203156][ T8820] overlayfs: invalid origin (0000) [ 193.325816][ T8788] ntfs3: loop6: ntfs_sync_fs r=1a failed, -22. [ 193.446880][ T5252] ntfs3: loop6: ntfs_sync_fs r=1a failed, -22. [ 193.461943][ T5252] ntfs3: loop6: ntfs_evict_inode r=1a failed, -22. [ 193.484134][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1665'. [ 193.646933][ T2288] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 193.658950][ T8843] loop5: detected capacity change from 0 to 128 [ 193.703842][ T8843] FAT-fs (loop5): Unrecognized mount option "vfat" or missing value [ 193.917021][ T2288] usb 5-1: Using ep0 maxpacket: 32 [ 193.986474][ T8860] bond0 speed is unknown, defaulting to 1000 [ 194.035276][ T8860] bond0 speed is unknown, defaulting to 1000 [ 194.038616][ T2288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.067919][ T8860] bond0 speed is unknown, defaulting to 1000 [ 194.069879][ T2288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.104300][ T2288] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 194.123652][ T2288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.181762][ T2288] usb 5-1: config 0 descriptor?? [ 194.214839][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.221262][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.228727][ T2288] hub 5-1:0.0: USB hub found [ 194.366498][ T8872] loop5: detected capacity change from 0 to 512 [ 194.406079][ T8872] EXT4-fs (loop5): Ignoring removed bh option [ 194.428522][ T8872] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 194.462039][ T8872] EXT4-fs (loop5): 1 truncate cleaned up [ 194.468118][ T2288] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 194.487125][ T8872] EXT4-fs (loop5): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 194.561026][ T13] bond0 speed is unknown, defaulting to 1000 [ 194.567884][ T8860] infiniband syz0: set down [ 194.573418][ T8860] infiniband syz0: added bond0 [ 194.787369][ T8860] RDS/IB: syz0: added [ 194.845835][ T8860] smc: adding ib device syz0 with port count 1 [ 194.874529][ T8860] smc: ib device syz0 port 1 has pnetid [ 194.900386][ T4234] bond0 speed is unknown, defaulting to 1000 [ 194.936102][ T8860] bond0 speed is unknown, defaulting to 1000 [ 194.974935][ T2288] hid-generic 0003:046D:C31C.000E: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 195.083214][ T8883] loop6: detected capacity change from 0 to 512 [ 195.219885][ T8883] EXT4-fs error (device loop6): ext4_orphan_get:1410: inode #15: comm syz.6.1683: inode has both inline data and extents flags [ 195.274483][ T1108] usb 5-1: USB disconnect, device number 10 [ 195.406461][ T8883] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.1683: couldn't read orphan inode 15 (err -117) [ 195.432370][ T8860] bond0 speed is unknown, defaulting to 1000 [ 195.449365][ T8883] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 195.565967][ T8892] loop5: detected capacity change from 0 to 512 [ 195.701190][ T8892] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 195.829886][ T8892] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.929723][ T8860] bond0 speed is unknown, defaulting to 1000 [ 196.373462][ T8860] bond0 speed is unknown, defaulting to 1000 [ 196.488422][ T8906] loop6: detected capacity change from 0 to 4096 [ 196.702469][ T8913] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.793199][ T8860] bond0 speed is unknown, defaulting to 1000 [ 196.800008][ T8915] ------------[ cut here ]------------ [ 196.806017][ T8915] WARNING: CPU: 1 PID: 8915 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xac0/0xcd0 [ 196.814228][ T8906] NILFS (loop6): error -22 preparing GC: cannot read source blocks [ 196.816323][ T8915] Modules linked in: [ 196.828819][ T8915] CPU: 1 PID: 8915 Comm: syz.1.1696 Not tainted syzkaller #0 [ 196.836234][ T8915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 196.846349][ T8915] RIP: 0010:rb_get_reader_page+0xac0/0xcd0 [ 196.852208][ T8915] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 97 56 42 00 4d 8b 3c 24 49 8d 7f 08 be 04 00 00 00 e8 25 58 42 00 f0 41 ff 47 08 <0f> 0b 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 83 7c 24 18 [ 196.872179][ T8915] RSP: 0018:ffffc90003bdf7c0 EFLAGS: 00010002 [ 196.878292][ T8915] RAX: 1ffff11002d8f101 RBX: 1ffff11002d8e876 RCX: ffffffff817bf1db [ 196.886387][ T8915] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888016c70408 [ 196.894398][ T8915] RBP: ffffc90003bdf960 R08: ffff888016c7040b R09: 1ffff11002d8e081 [ 196.902421][ T8915] R10: dffffc0000000000 R11: ffffed1002d8e082 R12: ffff888016c78810 [ 196.910432][ T8915] R13: 0000000000000040 R14: 1ffff11002d8e873 R15: ffff888016c70400 [ 196.918465][ T8915] FS: 00007f6bb59c16c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 196.927544][ T8915] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.934174][ T8915] CR2: 00007f6bb59c0ff8 CR3: 000000005a59c000 CR4: 00000000003506e0 [ 196.942340][ T8915] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 196.950540][ T8915] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 196.958557][ T8915] Call Trace: [ 196.961867][ T8915] [ 196.964849][ T8915] ? ring_buffer_read_page+0x12c0/0x12c0 [ 196.970549][ T8915] ? do_raw_spin_lock+0x128/0x2f0 [ 196.975606][ T8915] ? __rwlock_init+0x140/0x140 [ 196.980539][ T8915] rb_buffer_peek+0x5c/0x780 [ 196.985280][ T8915] ring_buffer_peek+0x1de/0x400 [ 196.990165][ T8915] ? ring_buffer_iter_empty+0x340/0x340 [ 196.995742][ T8915] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 197.001773][ T8915] ? __lock_acquire+0x7b50/0x7b50 [ 197.006844][ T8915] ? lock_chain_count+0x20/0x20 [ 197.011732][ T8915] ? __rwlock_init+0x140/0x140 [ 197.016526][ T8915] __find_next_entry+0x350/0x6b0 [ 197.021626][ T8915] ? lockdep_hardirqs_on+0x94/0x140 [ 197.026876][ T8915] ? trace_find_next_entry+0x3a0/0x3a0 [ 197.032476][ T8915] tracing_read_pipe+0x3b1/0xae0 [ 197.037552][ T8915] ? s_show+0x300/0x300 [ 197.041746][ T8915] vfs_read+0x2ff/0xd50 [ 197.045928][ T8915] ? __lock_acquire+0x7b50/0x7b50 [ 197.050990][ T8915] ? kernel_read+0x1e0/0x1e0 [ 197.055615][ T8915] ? mutex_lock_nested+0x17/0x20 [ 197.060596][ T8915] ? __fdget_pos+0x2bf/0x370 [ 197.065210][ T8915] ? ksys_read+0x70/0x260 [ 197.069566][ T8915] ksys_read+0x153/0x260 [ 197.073839][ T8915] ? vfs_write+0xd70/0xd70 [ 197.078286][ T8915] ? lockdep_hardirqs_on+0x94/0x140 [ 197.083513][ T8915] do_syscall_64+0x4c/0xa0 [ 197.087974][ T8915] ? clear_bhb_loop+0x30/0x80 [ 197.092671][ T8915] ? clear_bhb_loop+0x30/0x80 [ 197.097394][ T8915] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.103311][ T8915] RIP: 0033:0x7f6bb7769159 [ 197.107749][ T8915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.127374][ T8915] RSP: 002b:00007f6bb59c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 197.135896][ T8915] RAX: ffffffffffffffda RBX: 00007f6bb79f0fa0 RCX: 00007f6bb7769159 [ 197.143891][ T8915] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003 [ 197.151980][ T8915] RBP: 00007f6bb780006b R08: 0000000000000000 R09: 0000000000000000 [ 197.159989][ T8915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.167977][ T8915] R13: 00007f6bb79f1038 R14: 00007f6bb79f0fa0 R15: 00007ffee7b197d8 [ 197.175983][ T8915] [ 197.179034][ T8915] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 197.186325][ T8915] CPU: 1 PID: 8915 Comm: syz.1.1696 Not tainted syzkaller #0 [ 197.193807][ T8915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 197.203883][ T8915] Call Trace: [ 197.207191][ T8915] [ 197.210147][ T8915] dump_stack_lvl+0x188/0x250 [ 197.214851][ T8915] ? show_regs_print_info+0x20/0x20 [ 197.220167][ T8915] ? load_image+0x410/0x410 [ 197.224717][ T8915] panic+0x2f8/0x850 [ 197.228968][ T8915] ? bpf_jit_dump+0xd0/0xd0 [ 197.233507][ T8915] ? rb_get_reader_page+0xac0/0xcd0 [ 197.238728][ T8915] __warn+0x248/0x2b0 [ 197.242739][ T8915] ? rb_get_reader_page+0xac0/0xcd0 [ 197.247958][ T8915] report_bug+0x1b9/0x2e0 [ 197.252402][ T8915] handle_bug+0x3a/0x70 [ 197.256578][ T8915] exc_invalid_op+0x16/0x40 [ 197.261194][ T8915] asm_exc_invalid_op+0x16/0x20 [ 197.266088][ T8915] RIP: 0010:rb_get_reader_page+0xac0/0xcd0 [ 197.271915][ T8915] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 97 56 42 00 4d 8b 3c 24 49 8d 7f 08 be 04 00 00 00 e8 25 58 42 00 f0 41 ff 47 08 <0f> 0b 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 83 7c 24 18 [ 197.291545][ T8915] RSP: 0018:ffffc90003bdf7c0 EFLAGS: 00010002 [ 197.297651][ T8915] RAX: 1ffff11002d8f101 RBX: 1ffff11002d8e876 RCX: ffffffff817bf1db [ 197.305767][ T8915] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888016c70408 [ 197.313756][ T8915] RBP: ffffc90003bdf960 R08: ffff888016c7040b R09: 1ffff11002d8e081 [ 197.321748][ T8915] R10: dffffc0000000000 R11: ffffed1002d8e082 R12: ffff888016c78810 [ 197.329739][ T8915] R13: 0000000000000040 R14: 1ffff11002d8e873 R15: ffff888016c70400 [ 197.337745][ T8915] ? rb_get_reader_page+0xabb/0xcd0 [ 197.343004][ T8915] ? ring_buffer_read_page+0x12c0/0x12c0 [ 197.348679][ T8915] ? do_raw_spin_lock+0x128/0x2f0 [ 197.353755][ T8915] ? __rwlock_init+0x140/0x140 [ 197.358554][ T8915] rb_buffer_peek+0x5c/0x780 [ 197.363196][ T8915] ring_buffer_peek+0x1de/0x400 [ 197.368100][ T8915] ? ring_buffer_iter_empty+0x340/0x340 [ 197.373680][ T8915] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 197.379701][ T8915] ? __lock_acquire+0x7b50/0x7b50 [ 197.384784][ T8915] ? lock_chain_count+0x20/0x20 [ 197.389674][ T8915] ? __rwlock_init+0x140/0x140 [ 197.394664][ T8915] __find_next_entry+0x350/0x6b0 [ 197.399631][ T8915] ? lockdep_hardirqs_on+0x94/0x140 [ 197.404876][ T8915] ? trace_find_next_entry+0x3a0/0x3a0 [ 197.410387][ T8915] tracing_read_pipe+0x3b1/0xae0 [ 197.415455][ T8915] ? s_show+0x300/0x300 [ 197.419641][ T8915] vfs_read+0x2ff/0xd50 [ 197.423825][ T8915] ? __lock_acquire+0x7b50/0x7b50 [ 197.428877][ T8915] ? kernel_read+0x1e0/0x1e0 [ 197.433507][ T8915] ? mutex_lock_nested+0x17/0x20 [ 197.438463][ T8915] ? __fdget_pos+0x2bf/0x370 [ 197.443069][ T8915] ? ksys_read+0x70/0x260 [ 197.447418][ T8915] ksys_read+0x153/0x260 [ 197.451700][ T8915] ? vfs_write+0xd70/0xd70 [ 197.456157][ T8915] ? lockdep_hardirqs_on+0x94/0x140 [ 197.461381][ T8915] do_syscall_64+0x4c/0xa0 [ 197.465829][ T8915] ? clear_bhb_loop+0x30/0x80 [ 197.470524][ T8915] ? clear_bhb_loop+0x30/0x80 [ 197.475222][ T8915] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.481135][ T8915] RIP: 0033:0x7f6bb7769159 [ 197.485572][ T8915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.505196][ T8915] RSP: 002b:00007f6bb59c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 197.513644][ T8915] RAX: ffffffffffffffda RBX: 00007f6bb79f0fa0 RCX: 00007f6bb7769159 [ 197.521635][ T8915] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003 [ 197.529652][ T8915] RBP: 00007f6bb780006b R08: 0000000000000000 R09: 0000000000000000 [ 197.537646][ T8915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.545645][ T8915] R13: 00007f6bb79f1038 R14: 00007f6bb79f0fa0 R15: 00007ffee7b197d8 [ 197.553660][ T8915] [ 197.556854][ T8915] Kernel Offset: disabled [ 197.561751][ T8915] Rebooting in 86400 seconds..