last executing test programs: 3.061771594s ago: executing program 1 (id=1890): syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000000600)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) truncate(&(0x7f0000000040)='./file1\x00', 0x8800000) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 2.88423468s ago: executing program 1 (id=1893): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d6173710000000014000280080002"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 2.801200023s ago: executing program 4 (id=1894): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000c0049"], 0x34}}, 0x4000080) 2.705771326s ago: executing program 4 (id=1895): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000380), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f000000bcc0)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES16, @ANYBLOB="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", @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESOCT], 0x41, 0x5eda, &(0x7f000005eb40)="$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") creat(0x0, 0x18) llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 2.705055315s ago: executing program 1 (id=1896): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r2, @ANYBLOB="28005080140001004abee33957edf8aaae14574df40000000500020007000000080003000bac0f"], 0x44}}, 0x0) 2.56422594s ago: executing program 1 (id=1899): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000700)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00'], 0x1, 0x4710, &(0x7f00000047c0)="$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") r0 = open(&(0x7f0000000340)='.\x00', 0x0, 0x0) flock(r0, 0x2) close(0x3) 1.961086069s ago: executing program 4 (id=1908): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32, @ANYBLOB="08000100000001000000000000000000000000002565914a2b12a73a4b7f2202307dfdb1b77535fd692970b7683ec81190cc120082ea365788f7bfbe39d9bf2050023397b32c78c95fcbae"], 0x38}}, 0x20000000) 1.90679581s ago: executing program 0 (id=1909): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0xfffffc53, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.763047905s ago: executing program 4 (id=1911): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) syz_emit_ethernet(0x11, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@x25={0x805, {0x2, 0x7, 0x1b}}}}, 0x0) 1.730719396s ago: executing program 0 (id=1912): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@acquire={0x16c, 0x17, 0x1, 0x70bd25, 0x0, {{@in=@empty}, @in6=@remote, {@in=@rand_addr=0x64010101, @in6=@mcast1, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, 0xfffffff9, 0x38}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x32}, 0x2, @in6=@private0, 0x3504, 0x4, 0x2, 0x6, 0x0, 0x1, 0x8}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.676449618s ago: executing program 2 (id=1913): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000940)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r2}}, 0x0, 0x0, 0x0) 1.60921079s ago: executing program 4 (id=1914): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r1, 0x5}, &(0x7f0000000080)=0x8) 1.571017221s ago: executing program 0 (id=1915): r0 = io_uring_setup(0x1ad2, &(0x7f0000000000)={0x0, 0x39d, 0x0, 0x20006, 0x3d0}) close(r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001080), 0x0) read(r1, &(0x7f0000000200)=""/95, 0x5f) 1.550392862s ago: executing program 2 (id=1916): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x3, {0x2, 0x0, 0x4}, 0xff}, 0x18) sendmsg(r0, &(0x7f0000000a00)={&(0x7f0000000380)=@l2={0x1d, 0xffb4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2, 0x2}, 0x80, 0x0}, 0x0) 1.539707692s ago: executing program 4 (id=1917): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8, 0x0, 0x1000}}}}}}, 0x0) 1.351210528s ago: executing program 2 (id=1918): ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x4e23, @multicast2}, {0x1, @multicast}, 0x28, {0x2, 0x4e23, @rand_addr=0x64010102}, 'veth0_to_bridge\x00'}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xeb}, 0x0) 1.201670992s ago: executing program 2 (id=1919): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0xec000000, 0xcd}]}) 1.108274895s ago: executing program 1 (id=1920): ftruncate(0xffffffffffffffff, 0xc17a) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() 1.041122927s ago: executing program 2 (id=1921): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) lgetxattr(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000840)=@known='trusted.overlay.upper\x00', &(0x7f0000000f40)=""/184, 0x841) 854.557163ms ago: executing program 3 (id=1922): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001a80)={0x8, 0x0, [{0xc000, 0xff, &(0x7f0000000400)=""/255}, {0x0, 0xb8, &(0x7f0000001500)=""/184}, {0x0, 0xc4, &(0x7f00000016c0)=""/196}, {0x2, 0x95, &(0x7f00000017c0)=""/149}, {0x8000000, 0x8, &(0x7f0000001880)=""/8}, {0x0, 0xfffffffffffffef7, &(0x7f0000001940)=""/87}, {0x30000, 0x46, &(0x7f0000000340)=""/83}, {0x2, 0x88, &(0x7f00000019c0)=""/136}]}) close(r0) 755.446296ms ago: executing program 3 (id=1923): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, 0x0) 600.701831ms ago: executing program 3 (id=1924): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0xfffffc01) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 525.223174ms ago: executing program 0 (id=1925): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) readv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x2) 441.413446ms ago: executing program 3 (id=1926): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004000}}], 0x1, 0x40480d2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x143480, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) ioctl$TCGETA(r0, 0x8925, &(0x7f00000029c0)) 388.945518ms ago: executing program 0 (id=1927): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000002a40)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaf6, &(0x7f0000002b80)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xbf) getdents64(r0, 0x0, 0x0) 309.19293ms ago: executing program 2 (id=1928): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x24, {{0x2, 0x4e23, @multicast2}}}, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @local}, 0x10) 165.381955ms ago: executing program 3 (id=1929): socket$pppl2tp(0x18, 0x1, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) 78.630988ms ago: executing program 1 (id=1930): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003540), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf25070000f013000200fe800200000000000000000000e8ffba08000400e000000114000300"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) 797.22µs ago: executing program 0 (id=1931): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @loopback, 0xffffcd0b}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000200)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z\t-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0xffffffff, {0x9, 0x6, "259675", 0x432d, 0xff, 0x1, @loopback, @loopback, [], "afa65f17c329ccfd"}}}}}}}, 0x0) sendmmsg$unix(r0, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="616e95da296dce1a6f7d9e51a5b11359126c2d3b7748d74a190d320a8d5d2ae0f218933c817c40fd4c", 0x29}], 0x1, 0x0, 0x0, 0x40044}}, {{&(0x7f00000006c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x2, 0x4) 0s ago: executing program 3 (id=1932): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'batadv_slave_1\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x4}}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'erspan0\x00', 0x0}) kernel console output (not intermixed with test programs): XT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 159.884200][ T9] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1648 with error 28 [ 159.970955][ T9] EXT4-fs (loop2): This should not happen!! Data will be lost [ 159.970955][ T9] [ 160.000718][ T9] EXT4-fs (loop2): Total free blocks count 0 [ 160.044971][ T9] EXT4-fs (loop2): Free/Dirty block details [ 160.050934][ T9] EXT4-fs (loop2): free_blocks=66060288 [ 160.107059][ T7069] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1028'. [ 160.121718][ T9] EXT4-fs (loop2): dirty_blocks=1648 [ 160.127103][ T9] EXT4-fs (loop2): Block reservation details [ 160.164203][ T9] EXT4-fs (loop2): i_reserved_data_blocks=103 [ 160.248724][ T4656] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 160.258990][ T4266] wacom 0003:056A:002A.0007: unknown main item tag 0x3 [ 160.278116][ T4266] wacom 0003:056A:002A.0007: unknown main item tag 0x0 [ 160.285678][ T4266] wacom 0003:056A:002A.0007: unknown main item tag 0x0 [ 160.293332][ T4266] wacom 0003:056A:002A.0007: unknown main item tag 0x0 [ 160.300231][ T4266] wacom 0003:056A:002A.0007: unknown main item tag 0x0 [ 160.308360][ T4266] wacom 0003:056A:002A.0007: unknown main item tag 0x0 [ 160.315555][ T4266] wacom 0003:056A:002A.0007: unknown main item tag 0x0 [ 160.322804][ T4266] wacom 0003:056A:002A.0007: unknown main item tag 0x0 [ 160.330681][ T4266] wacom 0003:056A:002A.0007: Unknown device_type for 'HID 056a:002a'. Assuming pen. [ 160.396060][ T4266] wacom 0003:056A:002A.0007: hidraw0: USB HID v0.05 Device [HID 056a:002a] on usb-dummy_hcd.3-1/input0 [ 160.418406][ T4266] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:002A.0007/input/input11 [ 160.532667][ T4656] usb 1-1: Using ep0 maxpacket: 16 [ 160.566410][ T4266] usb 4-1: USB disconnect, device number 11 [ 160.599830][ T7082] loop4: detected capacity change from 0 to 256 [ 160.652105][ T7082] exfat: Deprecated parameter 'namecase' [ 160.657838][ T7082] exfat: Deprecated parameter 'namecase' [ 160.664117][ T4656] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 160.677749][ T4656] usb 1-1: config 0 has no interface number 0 [ 160.684417][ T7082] exfat: Deprecated parameter 'namecase' [ 160.690134][ T4656] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 160.716255][ T7082] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 160.734339][ T4656] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 160.900568][ T7089] loop4: detected capacity change from 0 to 2048 [ 160.907463][ T4299] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 160.931669][ T4656] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 160.942980][ T4656] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.951158][ T4656] usb 1-1: Product: syz [ 160.959480][ T4656] usb 1-1: Manufacturer: syz [ 160.966439][ T4656] usb 1-1: SerialNumber: syz [ 160.976111][ T4656] usb 1-1: config 0 descriptor?? [ 160.984955][ T7088] fido_id[7088]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 161.011688][ T7066] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 161.018757][ T7066] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 161.165693][ T4299] usb 2-1: Using ep0 maxpacket: 8 [ 161.263522][ T7066] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 161.276112][ T7066] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 161.311467][ T4299] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 161.319692][ T4299] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.329839][ T4299] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.346331][ T4299] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 161.356658][ T4299] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.376814][ T4299] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 161.386173][ T4299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.521728][ T4656] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 161.671566][ T4299] usb 2-1: GET_CAPABILITIES returned 0 [ 161.677277][ T4299] usbtmc 2-1:16.0: can't read capabilities [ 161.741893][ T4656] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 36 [ 161.894192][ T4656] usb 2-1: USB disconnect, device number 6 [ 161.961771][ T5451] usb 1-1: USB disconnect, device number 15 [ 162.595164][ T7101] loop0: detected capacity change from 0 to 2048 [ 162.624918][ T7096] loop4: detected capacity change from 0 to 4096 [ 162.754067][ T7096] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 162.773953][ T7101] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 162.957853][ T7096] ntfs3: loop4: failed to convert "0080" to macgaelic [ 163.064225][ T7096] ntfs3: loop4: failed to convert name for inode 1e. [ 163.103823][ T7097] loop3: detected capacity change from 0 to 32768 [ 163.293423][ T7097] XFS (loop3): Mounting V5 Filesystem [ 163.329237][ T7134] loop1: detected capacity change from 0 to 256 [ 163.392962][ T7097] XFS (loop3): Ending clean mount [ 163.523910][ T4191] XFS (loop3): Unmounting Filesystem [ 163.605043][ T144] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 163.655605][ T144] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 163.732458][ T144] EXT4-fs (loop0): This should not happen!! Data will be lost [ 163.732458][ T144] [ 163.765768][ T7150] loop2: detected capacity change from 0 to 512 [ 163.772275][ T144] EXT4-fs (loop0): Total free blocks count 0 [ 163.788033][ T144] EXT4-fs (loop0): Free/Dirty block details [ 163.801323][ T144] EXT4-fs (loop0): free_blocks=66060288 [ 163.811901][ T144] EXT4-fs (loop0): dirty_blocks=2384 [ 163.817312][ T144] EXT4-fs (loop0): Block reservation details [ 163.871352][ T144] EXT4-fs (loop0): i_reserved_data_blocks=149 [ 163.916581][ T7150] EXT4-fs (loop2): 1 truncate cleaned up [ 163.960477][ T7150] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.975243][ T3086] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 322 with error 28 [ 164.001794][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 164.001807][ T26] audit: type=1800 audit(1781534820.513:10): pid=7150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1059" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 164.038769][ T7150] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1059: invalid indirect mapped block 234881024 (level 0) [ 164.126813][ T3086] EXT4-fs (loop0): This should not happen!! Data will be lost [ 164.126813][ T3086] [ 164.502356][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1056'. [ 164.621730][ T7174] loop2: detected capacity change from 0 to 64 [ 164.645877][ T7176] loop0: detected capacity change from 0 to 24 [ 165.081954][ T7190] loop2: detected capacity change from 0 to 512 [ 165.140762][ T7190] FAT-fs (loop2): Directory bread(block 199916) failed [ 165.148011][ T7190] FAT-fs (loop2): Directory bread(block 199917) failed [ 165.158368][ T7190] FAT-fs (loop2): Directory bread(block 199918) failed [ 165.170228][ T7190] FAT-fs (loop2): Directory bread(block 199919) failed [ 165.184038][ T7190] FAT-fs (loop2): Directory bread(block 199920) failed [ 165.188783][ T7195] loop4: detected capacity change from 0 to 1024 [ 165.199912][ T7190] FAT-fs (loop2): Directory bread(block 199921) failed [ 165.212654][ T7190] FAT-fs (loop2): Directory bread(block 199922) failed [ 165.226457][ T7193] loop0: detected capacity change from 0 to 4096 [ 165.233120][ T7190] FAT-fs (loop2): Directory bread(block 199923) failed [ 165.307203][ T7195] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.457574][ T7193] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 165.548919][ T7193] ntfs3: loop0: failed to convert "0080" to macgaelic [ 165.589064][ T7193] ntfs3: loop0: failed to convert name for inode 1e. [ 165.999620][ T7226] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.077538][ T7233] EXT4-fs (loop3): 1 truncate cleaned up [ 166.112270][ T7233] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.148241][ T26] audit: type=1800 audit(1781534822.653:11): pid=7233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1094" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 166.197796][ T7233] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1094: invalid indirect mapped block 234881024 (level 0) [ 166.311421][ T6493] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 166.339133][ T7240] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 166.442421][ T7240] ntfs3: loop1: failed to convert "0080" to macgaelic [ 166.465331][ T7250] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 166.494974][ T7240] ntfs3: loop1: failed to convert name for inode 1e. [ 166.555509][ T7250] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 166.563146][ T6493] usb 5-1: Using ep0 maxpacket: 8 [ 166.571983][ T4299] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 166.602732][ T7250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.640825][ T7250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.681664][ T6493] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 166.699327][ T6493] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.710682][ T7250] device macvlan0 left promiscuous mode [ 166.722364][ T6493] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 166.761551][ T6493] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 166.799649][ T6493] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.861493][ T6493] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 166.862890][ T4299] usb 3-1: Using ep0 maxpacket: 32 [ 166.886752][ T6493] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.031635][ T4299] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.045003][ T4299] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 167.059907][ T4299] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 167.064005][ T7264] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.071040][ T4299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.096048][ T4299] usb 3-1: config 0 descriptor?? [ 167.153771][ T4299] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 167.181606][ T6493] usb 5-1: GET_CAPABILITIES returned 0 [ 167.187290][ T6493] usbtmc 5-1:16.0: can't read capabilities [ 167.360101][ T7246] netlink: 'syz.2.1098': attribute type 287 has an invalid length. [ 167.383423][ T4234] usb 3-1: USB disconnect, device number 14 [ 167.416268][ T4299] usb 5-1: USB disconnect, device number 12 [ 167.517740][ T26] audit: type=1800 audit(1781534824.023:12): pid=7258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1106" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 167.540824][ T7258] ERROR: (device loop3): diAllocAG: ipimap->i_size is wrong [ 167.540824][ T7258] [ 167.580247][ T7258] ERROR: (device loop3): remounting filesystem as read-only [ 167.601860][ T7258] ialloc: diAlloc returned -5! [ 167.642199][ T7258] ERROR: (device loop3): diWrite: ixpxd invalid [ 167.642199][ T7258] [ 167.651186][ T7262] set_capacity_and_notify: 6 callbacks suppressed [ 167.651219][ T7262] loop1: detected capacity change from 0 to 32768 [ 167.677599][ T7258] ERROR: (device loop3): txCommit: [ 167.677599][ T7258] [ 167.786353][ T7262] XFS (loop1): Mounting V5 Filesystem [ 167.862097][ T7270] loop0: detected capacity change from 0 to 32768 [ 167.941631][ T7270] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 167.999511][ T7262] XFS (loop1): Ending clean mount [ 168.030814][ T7262] XFS (loop1): Quotacheck needed: Please wait. [ 168.159264][ T7262] XFS (loop1): Quotacheck: Done. [ 168.269463][ T7291] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1115'. [ 168.330249][ T4189] XFS (loop1): Unmounting Filesystem [ 168.346168][ T7289] loop4: detected capacity change from 0 to 4096 [ 168.373190][ T4190] ocfs2: Unmounting device (7,0) on (node local) [ 168.469386][ T7299] loop3: detected capacity change from 0 to 512 [ 168.524198][ T7289] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 168.539953][ T7289] ntfs3: loop4: Failed to load $Extend. [ 168.615291][ T7299] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 168.676036][ T7302] loop2: detected capacity change from 0 to 1024 [ 168.693966][ T26] audit: type=1800 audit(1781534825.203:13): pid=7289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1113" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 168.774208][ T7299] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 168.803289][ T7299] EXT4-fs (loop3): orphan cleanup on readonly fs [ 168.906183][ T7299] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 168.991984][ T7299] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 169.042530][ T7299] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 169.085731][ T7299] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1119: bg 0: block 64: padding at end of block bitmap is not set [ 169.108533][ T4198] ntfs3: loop4: ntfs_sync_fs r=9 failed, -22. [ 169.132228][ T4198] ntfs3: loop4: ntfs_evict_inode r=9 failed, -22. [ 169.187453][ T7299] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 169.211052][ T7299] EXT4-fs (loop3): 1 truncate cleaned up [ 169.224255][ T7299] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 169.582315][ T7330] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 169.616720][ T7333] input: syz1 as /devices/virtual/input/input14 [ 169.653279][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 169.685626][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.723827][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.774191][ T7334] device macvlan0 left promiscuous mode [ 169.901457][ T4299] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 170.009326][ T7344] input: syz1 as /devices/virtual/input/input15 [ 170.050927][ T7347] loop1: detected capacity change from 0 to 512 [ 170.133453][ T7347] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #2: block 3: comm syz.1.1117: lblock 0 mapped to illegal pblock 3 (length 1) [ 170.186089][ T4299] usb 1-1: Using ep0 maxpacket: 32 [ 170.192379][ T7347] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.1117: error -117 reading directory block [ 170.205991][ T7347] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 170.214746][ T7347] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,nolazytime,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000000ffc,grpid,,,errors=continue. Quota mode: writeback. [ 170.341680][ T4299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.385477][ T4299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.415239][ T4299] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 170.435468][ T4299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.450299][ T4299] usb 1-1: config 0 descriptor?? [ 170.604008][ T7373] syz.2.1159 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 170.787593][ T7381] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 170.810673][ T7381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.827968][ T7381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.845291][ T7381] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 170.872309][ C0] Illegal XDP return value 16128, expect packet loss! [ 170.954579][ T4299] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0 [ 170.973292][ T4299] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0 [ 170.980486][ T4299] koneplus 0003:1E7D:2D51.0008: item fetching failed at offset 2/5 [ 171.018704][ T4299] koneplus 0003:1E7D:2D51.0008: parse failed [ 171.031418][ T4299] koneplus: probe of 0003:1E7D:2D51.0008 failed with error -22 [ 171.067128][ T7374] loop3: detected capacity change from 0 to 32768 [ 171.114208][ T7387] loop2: detected capacity change from 0 to 4096 [ 171.179702][ T4299] usb 1-1: USB disconnect, device number 16 [ 171.191126][ T7374] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 171.217102][ T7390] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.360880][ T4191] ocfs2: Unmounting device (7,3) on (node local) [ 171.547115][ T7398] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 171.591471][ T4299] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 171.905778][ T6493] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 171.957742][ T7418] loop1: detected capacity change from 0 to 4096 [ 172.002052][ T4299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 172.013476][ T4299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.024012][ T4299] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 172.033805][ T4299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.044157][ T4299] usb 5-1: config 0 descriptor?? [ 172.101766][ T7424] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.292821][ T6493] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 172.323848][ T6493] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 172.358320][ T6493] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 172.389305][ T6493] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 172.416570][ T6493] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.450154][ T6493] usb 3-1: config 0 descriptor?? [ 172.471642][ T7401] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 172.557709][ T4299] hid-generic 0003:0C70:F0B6.0009: unknown main item tag 0x0 [ 172.588787][ T4299] hid-generic 0003:0C70:F0B6.0009: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.4-1/input0 [ 172.603573][ T7432] loop1: detected capacity change from 0 to 32768 [ 172.638260][ T7432] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 172.658612][ T7432] JBD2: Ignoring recovery information on journal [ 172.732357][ T7432] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 172.785165][ T4299] usb 5-1: USB disconnect, device number 13 [ 172.835860][ T4206] Bluetooth: hci4: link tx timeout [ 172.841482][ T4206] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.845561][ T7446] netlink: 'syz.3.1176': attribute type 5 has an invalid length. [ 172.907622][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 172.926426][ T4199] Bluetooth: hci4: link tx timeout [ 172.931714][ T4199] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.943400][ T6493] logitech 0003:046D:C295.000A: unknown main item tag 0x7 [ 172.950608][ T6493] logitech 0003:046D:C295.000A: unknown main item tag 0x3 [ 172.985061][ T6493] logitech 0003:046D:C295.000A: unexpected long global item [ 173.002149][ T6493] logitech 0003:046D:C295.000A: parse failed [ 173.021893][ T6493] logitech: probe of 0003:046D:C295.000A failed with error -22 [ 173.053297][ T4199] Bluetooth: hci4: link tx timeout [ 173.058541][ T4199] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 173.190593][ T4234] usb 3-1: USB disconnect, device number 15 [ 173.223616][ T4199] Bluetooth: hci4: link tx timeout [ 173.228883][ T4199] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 173.354970][ T7467] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 173.371389][ T4299] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 173.481755][ T6493] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 173.631554][ T4299] usb 4-1: Using ep0 maxpacket: 16 [ 173.732477][ T6493] usb 2-1: Using ep0 maxpacket: 32 [ 173.806738][ T4299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.813499][ T7489] loop4: detected capacity change from 0 to 128 [ 173.835642][ T4299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.851580][ T6493] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.854543][ T4299] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 173.883307][ T6493] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.895975][ T4299] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 173.916230][ T4299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.924722][ T6493] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 173.939990][ T4299] usb 4-1: config 0 descriptor?? [ 173.947871][ T7496] netlink: 'syz.0.1189': attribute type 5 has an invalid length. [ 173.955080][ T6493] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.008586][ T4199] Bluetooth: hci4: link tx timeout [ 174.013819][ T4199] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.022717][ T6493] usb 2-1: config 0 descriptor?? [ 174.064651][ T7500] loop0: detected capacity change from 0 to 1024 [ 174.146289][ T7504] loop2: detected capacity change from 0 to 128 [ 174.162260][ T4199] Bluetooth: hci4: link tx timeout [ 174.167472][ T4199] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.273121][ T4199] Bluetooth: hci4: link tx timeout [ 174.278318][ T4199] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.296714][ T7508] loop0: detected capacity change from 0 to 16 [ 174.353818][ T7508] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 174.390087][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1198'. [ 174.456153][ T5447] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 174.464899][ T4299] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max [ 174.496220][ T4299] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 174.505746][ T6493] koneplus 0003:1E7D:2D51.000C: unknown main item tag 0x0 [ 174.514943][ T4299] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 174.529869][ T4299] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 174.534018][ T6493] koneplus 0003:1E7D:2D51.000C: unknown main item tag 0x0 [ 174.538361][ T4299] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 174.564674][ T6493] koneplus 0003:1E7D:2D51.000C: item fetching failed at offset 2/5 [ 174.572079][ T4299] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 174.579876][ T4299] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 174.584918][ T6493] koneplus 0003:1E7D:2D51.000C: parse failed [ 174.596549][ T4299] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 174.611385][ T4299] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 174.629724][ T6493] koneplus: probe of 0003:1E7D:2D51.000C failed with error -22 [ 174.637533][ T4299] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 174.656606][ T4299] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 174.679315][ T4299] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 174.698316][ T4299] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 174.701929][ T5447] usb 5-1: Using ep0 maxpacket: 32 [ 174.718632][ T4299] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 174.737169][ T4299] microsoft 0003:045E:07DA.000B: implement() called with n (91) > 32! (kworker/0:8) [ 174.756001][ T4234] usb 2-1: USB disconnect, device number 7 [ 174.802225][ T4299] microsoft 0003:045E:07DA.000B: No inputs registered, leaving [ 174.813011][ T4299] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 174.822311][ T5447] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.825557][ T4299] microsoft 0003:045E:07DA.000B: no inputs found [ 174.841541][ T4299] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 174.848087][ T5447] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 174.869769][ T5447] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 174.878944][ T5447] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.891490][ T4299] Bluetooth: hci4: command 0x0406 tx timeout [ 174.908464][ T5447] usb 5-1: config 0 descriptor?? [ 174.953513][ T5447] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 175.024446][ T4234] usb 4-1: USB disconnect, device number 12 [ 175.165031][ T7506] netlink: 'syz.4.1195': attribute type 287 has an invalid length. [ 175.174855][ T4299] usb 5-1: USB disconnect, device number 14 [ 175.211521][ T4199] Bluetooth: hci4: link tx timeout [ 175.216707][ T4199] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 175.284316][ T4199] Bluetooth: hci4: link tx timeout [ 175.289552][ T4199] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 175.309411][ T7525] loop2: detected capacity change from 0 to 1024 [ 175.382056][ T7525] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 175.472263][ T7525] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,dioread_nolock,barrier,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: none. [ 175.531540][ T7525] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.633638][ T7525] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.1203: Freeing blocks not in datazone - block = 0, count = 16 [ 175.678651][ T7525] EXT4-fs (loop2): Remounting filesystem read-only [ 175.810415][ T7523] loop0: detected capacity change from 0 to 32768 [ 175.830608][ T7539] loop3: detected capacity change from 0 to 128 [ 175.848070][ T7533] loop1: detected capacity change from 0 to 32768 [ 175.888987][ T7523] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 scanned by syz.0.1213 (7523) [ 175.943478][ T7533] read_mapping_page failed! [ 175.948444][ T7533] ERROR: (device loop1): txCommit: [ 175.948444][ T7533] [ 175.996807][ T275] ERROR: (device loop1): diUpdatePMap: the inode is not allocated in the working map [ 175.996807][ T275] [ 176.076748][ T7523] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 176.094870][ T7523] BTRFS info (device loop0): using free space tree [ 176.102049][ T7523] BTRFS info (device loop0): has skinny extents [ 176.231570][ T5288] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 176.292651][ T7523] BTRFS info (device loop0): enabling ssd optimizations [ 176.337654][ T7523] syz.0.1213 (7523) used greatest stack depth: 20720 bytes left [ 176.501380][ T5288] usb 3-1: Using ep0 maxpacket: 8 [ 176.596096][ T4182] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 10 /dev/loop0 scanned by udevd (4182) [ 176.641545][ T5288] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 176.851557][ T5288] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 176.860658][ T5288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.907881][ T5288] usb 3-1: Product: syz [ 176.939453][ T5288] usb 3-1: Manufacturer: syz [ 176.951342][ T5288] usb 3-1: SerialNumber: syz [ 177.030192][ T4199] Bluetooth: hci4: link tx timeout [ 177.036007][ T4199] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.129147][ T7584] loop4: detected capacity change from 0 to 512 [ 177.239098][ T7584] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.1223: bad orphan inode 15 [ 177.307286][ T7584] ext4_test_bit(bit=14, block=5) = 0 [ 177.312852][ T7584] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 177.336717][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.361914][ T7532] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 177.426929][ T7584] EXT4-fs error (device loop4): __ext4_new_inode:1082: comm syz.4.1223: reserved inode found cleared - inode=1 [ 177.463985][ T5288] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 177.473012][ T7584] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 177.498567][ T5288] usb 3-1: USB disconnect, device number 16 [ 177.530192][ T7605] loop3: detected capacity change from 0 to 128 [ 177.948690][ T7617] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 178.041271][ T7617] exFAT-fs (loop3): hint_cluster is invalid (17) [ 178.327309][ T7613] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1235 (7613) [ 178.362741][ T7613] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 178.388372][ T7613] BTRFS info (device loop4): setting nodatasum [ 178.417642][ T7613] BTRFS info (device loop4): force zlib compression, level 3 [ 178.448650][ T7613] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 178.474622][ T7613] BTRFS info (device loop4): use lzo compression, level 0 [ 178.491498][ T5288] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 178.500568][ T7613] BTRFS info (device loop4): turning on flush-on-commit [ 178.540384][ T7613] BTRFS info (device loop4): enabling auto defrag [ 178.555249][ T7640] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1248'. [ 178.578314][ T7613] BTRFS info (device loop4): max_inline at 4096 [ 178.588957][ T7613] BTRFS info (device loop4): using free space tree [ 178.611766][ T7613] BTRFS info (device loop4): has skinny extents [ 178.620904][ T7635] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 178.849147][ T4199] Bluetooth: hci4: link tx timeout [ 178.854744][ T4199] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.951460][ T5288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 178.970486][ T7673] 9pnet: Insufficient options for proto=fd [ 178.991814][ T5288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 179.031606][ T7613] BTRFS info (device loop4): enabling ssd optimizations [ 179.091003][ T5288] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 179.139679][ T7678] set_capacity_and_notify: 3 callbacks suppressed [ 179.139696][ T7678] loop1: detected capacity change from 0 to 2048 [ 179.172604][ T5288] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 179.199578][ T5288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.216532][ T4199] Bluetooth: hci4: link tx timeout [ 179.222043][ T4199] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.229552][ T5288] usb 1-1: config 0 descriptor?? [ 179.310845][ T7624] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 179.332856][ T26] audit: type=1800 audit(1781534835.843:14): pid=7613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1235" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 179.444569][ T7678] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 179.501804][ T7678] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.633910][ T7676] loop3: detected capacity change from 0 to 32768 [ 179.803750][ T5288] logitech 0003:046D:C295.000D: unknown main item tag 0x7 [ 179.810942][ T5288] logitech 0003:046D:C295.000D: unknown main item tag 0x3 [ 179.838645][ T5288] logitech 0003:046D:C295.000D: unexpected long global item [ 179.866868][ T5288] logitech 0003:046D:C295.000D: parse failed [ 179.878937][ T5288] logitech: probe of 0003:046D:C295.000D failed with error -22 [ 180.045266][ T4644] usb 1-1: USB disconnect, device number 17 [ 180.104188][ T7699] loop4: detected capacity change from 0 to 1024 [ 180.164223][ T7699] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 180.214201][ T7705] loop1: detected capacity change from 0 to 256 [ 180.272197][ T7699] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,dioread_nolock,barrier,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: none. [ 180.314061][ T7706] loop3: detected capacity change from 0 to 4096 [ 180.347798][ T7706] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 180.360191][ T7699] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.410450][ T7699] EXT4-fs error (device loop4): ext4_free_blocks:6231: comm syz.4.1257: Freeing blocks not in datazone - block = 0, count = 16 [ 180.425845][ T7699] EXT4-fs (loop4): Remounting filesystem read-only [ 180.433096][ T4199] Bluetooth: hci4: link tx timeout [ 180.438291][ T4199] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 180.643470][ T7712] loop1: detected capacity change from 0 to 512 [ 180.735055][ T7712] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.1268: inode has both inline data and extents flags [ 180.809319][ T7712] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1268: couldn't read orphan inode 15 (err -117) [ 180.842484][ T9] ntfs3: loop3: ino=1b, Internal error [ 180.848120][ T7712] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 180.848823][ T9] ntfs3: loop3: ntfs3_write_inode r=1b failed, -22. [ 180.944390][ T7712] fscrypt (loop1, inode 18): Direct key flag not allowed with different contents and filenames modes [ 181.039667][ T7731] loop2: detected capacity change from 0 to 512 [ 181.081528][ T2287] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 181.184833][ T7731] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 181.211577][ T7731] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.443765][ T7695] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 181.459904][ T4199] Bluetooth: hci4: link tx timeout [ 181.466261][ T4199] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 181.531550][ T2287] usb 1-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 181.576295][ T2287] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 181.606228][ T2287] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 181.621451][ T23] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 181.636337][ T2287] usb 1-1: config 0 interface 0 has no altsetting 0 [ 181.651369][ T2287] usb 1-1: New USB device found, idVendor=056a, idProduct=0323, bcdDevice= 0.00 [ 181.660616][ T2287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.670980][ T2287] usb 1-1: config 0 descriptor?? [ 181.688994][ T7756] loop2: detected capacity change from 0 to 8192 [ 181.702378][ T7723] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 181.716875][ T7756] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 181.721483][ T7695] usb 2-1: Using ep0 maxpacket: 8 [ 181.735205][ T7756] REISERFS (device loop2): using ordered data mode [ 181.741965][ T7756] reiserfs: using flush barriers [ 181.748161][ T7756] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 181.765140][ T7756] REISERFS (device loop2): checking transaction log (loop2) [ 181.775985][ T7756] REISERFS (device loop2): Using r5 hash to sort names [ 181.786551][ T7756] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 181.809946][ T26] audit: type=1800 audit(1781534838.313:15): pid=7756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1285" name="file1" dev="loop2" ino=2 res=0 errno=0 [ 181.881561][ T7695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.892616][ T7695] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 181.906227][ T7695] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 181.916091][ T7695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.936689][ T7695] usb 2-1: config 0 descriptor?? [ 182.001379][ T4645] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 182.002007][ T23] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 182.029728][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 182.037242][ T23] usb 4-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice= 0.00 [ 182.047179][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.082510][ T23] usb 4-1: config 0 descriptor?? [ 182.101996][ T7745] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 182.133018][ T23] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input16 [ 182.184816][ T2287] wacom 0003:056A:0323.000E: ignoring exceeding usage max [ 182.196493][ T2287] wacom 0003:056A:0323.000E: Unknown device_type for 'HID 056a:0323'. Assuming pen. [ 182.208526][ T2287] wacom 0003:056A:0323.000E: hidraw0: USB HID v0.8c Device [HID 056a:0323] on usb-dummy_hcd.0-1/input0 [ 182.228269][ T2287] input: Wacom Intuos P M Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0323.000E/input/input17 [ 182.362538][ T3547] bcm5974 4-1:0.0: could not read from device [ 182.373918][ T23] usb 4-1: USB disconnect, device number 13 [ 182.388051][ T2287] usb 1-1: USB disconnect, device number 18 [ 182.394613][ T4645] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 182.403677][ T4645] usb 5-1: config 0 has no interface number 0 [ 182.406736][ T3547] bcm5974 4-1:0.0: could not read from device [ 182.416625][ T4645] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 182.440552][ T4645] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 182.459839][ T7695] magicmouse 0003:05AC:0269.000F: unknown main item tag 0x0 [ 182.467511][ T7695] magicmouse 0003:05AC:0269.000F: unknown main item tag 0x0 [ 182.485229][ T7695] magicmouse 0003:05AC:0269.000F: unknown main item tag 0x0 [ 182.498540][ T4645] usb 5-1: config 0 interface 255 has no altsetting 0 [ 182.508857][ T7695] magicmouse 0003:05AC:0269.000F: unknown main item tag 0x0 [ 182.511939][ T5455] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 182.522431][ T4645] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 182.539055][ T7695] magicmouse 0003:05AC:0269.000F: unknown main item tag 0x0 [ 182.546884][ T4645] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.560798][ T7695] magicmouse 0003:05AC:0269.000F: unknown main item tag 0x0 [ 182.573745][ T4645] usb 5-1: config 0 descriptor?? [ 182.578490][ T7767] fido_id[7767]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 182.579156][ T7695] magicmouse 0003:05AC:0269.000F: unknown main item tag 0x0 [ 182.608639][ T7695] magicmouse 0003:05AC:0269.000F: hidraw0: USB HID v0.04 Device [HID 05ac:0269] on usb-dummy_hcd.1-1/input0 [ 182.639708][ T4644] usb 2-1: USB disconnect, device number 8 [ 182.872563][ T4645] usb 5-1: string descriptor 0 read error: -71 [ 182.886263][ T4645] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 182.892611][ T5455] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 182.911877][ T5455] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.938964][ T5455] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 182.987111][ T4645] usb 5-1: USB disconnect, device number 15 [ 182.998944][ T5455] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.066322][ T7776] netlink: 452 bytes leftover after parsing attributes in process `syz.0.1293'. [ 183.083913][ T5455] usb 3-1: config 0 descriptor?? [ 183.163875][ T7774] fido_id[7774]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 183.211202][ T4199] Bluetooth: hci4: link tx timeout [ 183.216873][ T4199] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 183.258386][ T7781] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1296'. [ 183.337236][ T7781] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.346539][ T7781] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.462353][ T4199] Bluetooth: hci4: link tx timeout [ 183.467565][ T4199] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 183.567969][ T7791] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input20 [ 183.588954][ T5455] isku 0003:1E7D:319C.0010: unknown main item tag 0x0 [ 183.599002][ T5455] isku 0003:1E7D:319C.0010: unknown main item tag 0x0 [ 183.606348][ T5455] isku 0003:1E7D:319C.0010: unknown main item tag 0x0 [ 183.613761][ T5455] isku 0003:1E7D:319C.0010: unknown main item tag 0x0 [ 183.628396][ T5455] isku 0003:1E7D:319C.0010: unknown main item tag 0x0 [ 183.640972][ T5455] isku 0003:1E7D:319C.0010: unknown main item tag 0x0 [ 183.666206][ T5455] isku 0003:1E7D:319C.0010: unknown main item tag 0x0 [ 183.694398][ T5455] isku 0003:1E7D:319C.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 183.760544][ T7782] loop3: detected capacity change from 0 to 32768 [ 183.857245][ T5455] usb 3-1: USB disconnect, device number 17 [ 183.868652][ T7782] JBD2: Ignoring recovery information on journal [ 183.943876][ T7805] fido_id[7805]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 184.006296][ T7811] program syz.1.1305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.049778][ T7782] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 184.105834][ T26] audit: type=1326 audit(1781534840.613:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7818 comm="syz.0.1306" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3d558be59 code=0x0 [ 184.308937][ T7828] program syz.1.1308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.337437][ T7825] overlayfs: upper fs does not support tmpfile. [ 184.355060][ T7825] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 184.433155][ T7825] overlayfs: upper fs missing required features. [ 184.473101][ T7834] loop2: detected capacity change from 0 to 256 [ 184.515806][ T7836] loop1: detected capacity change from 0 to 16 [ 184.533778][ T4191] ocfs2: Unmounting device (7,3) on (node local) [ 184.542534][ T7834] exfat: Deprecated parameter 'utf8' [ 184.548342][ T7834] exfat: Deprecated parameter 'utf8' [ 184.559773][ T7834] exfat: Deprecated parameter 'utf8' [ 184.577452][ T7836] erofs: (device loop1): mounted with root inode @ nid 36. [ 184.611980][ T7834] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 184.651297][ T7836] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 184.694371][ T7836] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 184.836918][ T26] audit: type=1326 audit(1781534841.353:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.4.1314" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91e6586e59 code=0x0 [ 184.942602][ T7844] QAT: Device 6 not found [ 185.034140][ T7850] loop3: detected capacity change from 0 to 256 [ 185.053596][ T7852] input: syz0 as /devices/virtual/input/input21 [ 185.123466][ T7855] loop1: detected capacity change from 0 to 1024 [ 185.412741][ T7870] netlink: 'syz.3.1323': attribute type 8 has an invalid length. [ 185.442854][ T7855] hfsplus: b-tree write err: -5, ino 3 [ 185.530572][ T9] hfsplus: bad catalog file entry [ 185.713128][ T7883] loop2: detected capacity change from 0 to 512 [ 185.765197][ T7883] EXT4-fs (loop2): Ignoring removed orlov option [ 185.808147][ T7883] EXT4-fs (loop2): Test dummy encryption mode enabled [ 185.823746][ T7883] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 185.861687][ T4206] Bluetooth: hci4: link tx timeout [ 185.866881][ T4206] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 185.874917][ T4206] Bluetooth: hci4: link tx timeout [ 185.880062][ T4206] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 185.928469][ T5455] Bluetooth: hci1: command 0x0406 tx timeout [ 185.936579][ T5455] Bluetooth: hci3: command 0x0406 tx timeout [ 185.955071][ T5455] Bluetooth: hci2: command 0x0406 tx timeout [ 186.006031][ T7883] EXT4-fs (loop2): 1 truncate cleaned up [ 186.046362][ T7883] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,data_err=ignore,nogrpid,,errors=continue. Quota mode: writeback. [ 186.306942][ T7891] loop1: detected capacity change from 0 to 32768 [ 186.621709][ T7891] XFS (loop1): Mounting V5 Filesystem [ 186.741468][ T7909] loop0: detected capacity change from 0 to 32768 [ 186.784997][ T7909] JBD2: Ignoring recovery information on journal [ 186.813072][ T7891] XFS (loop1): Ending clean mount [ 186.885581][ T7891] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 186.959758][ T7909] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 186.969181][ T7905] loop3: detected capacity change from 0 to 32768 [ 187.021468][ T4645] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 187.041506][ T7909] (syz.0.1336,7909,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 187.168448][ T4190] ocfs2: Unmounting device (7,0) on (node local) [ 187.169509][ T7941] loop2: detected capacity change from 0 to 512 [ 187.202392][ T4189] XFS (loop1): Unmounting Filesystem [ 187.218678][ T4206] Bluetooth: hci4: link tx timeout [ 187.224408][ T4206] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.292416][ T4645] usb 5-1: Using ep0 maxpacket: 32 [ 187.353964][ T7941] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 187.413951][ T7941] ext4 filesystem being mounted at /280/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.495931][ T7941] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 187.510689][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1350'. [ 187.531772][ T7941] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 187.551547][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1350'. [ 187.575146][ T7941] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.1346: Failed to acquire dquot type 0 [ 187.604281][ T4645] usb 5-1: unable to get BOS descriptor or descriptor too short [ 187.701843][ T4645] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 187.709606][ T4645] usb 5-1: can't read configurations, error -71 [ 188.375254][ T7969] loop2: detected capacity change from 0 to 256 [ 188.746687][ T7960] F2FS-fs (loop0): invalid crc value [ 188.776473][ T7956] JBD2: Ignoring recovery information on journal [ 188.811973][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 188.842914][ T7960] F2FS-fs (loop0): Found nat_bits in checkpoint [ 188.850532][ T7969] FAT-fs (loop2): Directory bread(block 64) failed [ 188.878273][ T7969] FAT-fs (loop2): Directory bread(block 65) failed [ 188.885125][ T7969] FAT-fs (loop2): Directory bread(block 66) failed [ 188.891730][ T7969] FAT-fs (loop2): Directory bread(block 67) failed [ 188.899864][ T7956] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 188.908604][ T7969] FAT-fs (loop2): Directory bread(block 68) failed [ 188.916121][ T7969] FAT-fs (loop2): Directory bread(block 69) failed [ 188.926157][ T7969] FAT-fs (loop2): Directory bread(block 70) failed [ 188.933818][ T7969] FAT-fs (loop2): Directory bread(block 71) failed [ 188.940448][ T7969] FAT-fs (loop2): Directory bread(block 72) failed [ 188.947108][ T7960] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 188.956837][ T7969] FAT-fs (loop2): Directory bread(block 73) failed [ 189.033178][ T7956] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 189.071770][ T7956] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 189.093183][ T7956] OCFS2: File system is now read-only. [ 189.111661][ T7956] (syz.3.1354,7956,0):ocfs2_search_chain:1785 ERROR: status = -30 [ 189.141560][ T7956] (syz.3.1354,7956,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 189.164531][ T7956] (syz.3.1354,7956,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 189.181447][ T7956] (syz.3.1354,7956,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 189.182065][ T23] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 189.215442][ T7956] (syz.3.1354,7956,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 189.237742][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.244306][ T7956] (syz.3.1354,7956,0):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 189.268268][ T7956] (syz.3.1354,7956,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 189.276425][ T23] usb 2-1: config 0 descriptor?? [ 189.311378][ T7956] (syz.3.1354,7956,0):ocfs2_mknod:385 ERROR: status = -30 [ 189.319555][ T7956] (syz.3.1354,7956,0):ocfs2_mknod:502 ERROR: status = -30 [ 189.350392][ T7956] (syz.3.1354,7956,0):ocfs2_create:676 ERROR: status = -30 [ 189.409172][ T4191] ocfs2: Unmounting device (7,3) on (node local) [ 189.567431][ T7989] set_capacity_and_notify: 2 callbacks suppressed [ 189.567446][ T7989] loop4: detected capacity change from 0 to 2048 [ 189.600300][ T23] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 189.622175][ T23] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 189.748345][ T7989] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 189.780856][ T7989] EXT4-fs (loop4): shut down requested (2) [ 189.791049][ T7996] loop2: detected capacity change from 0 to 64 [ 189.811472][ T23] [drm:udl_init] *ERROR* Selecting channel failed [ 189.850050][ T23] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 189.867207][ T23] [drm] Initialized udl on minor 2 [ 189.891878][ T23] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 189.908653][ T23] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 189.948531][ T23] usb 2-1: USB disconnect, device number 9 [ 189.995909][ T6493] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 190.042370][ T6493] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 190.086810][ T6493] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 191.133196][ T8034] team0: No ports can be present during mode change [ 191.445530][ T8022] loop1: detected capacity change from 0 to 131072 [ 191.567034][ T8007] loop0: detected capacity change from 0 to 32768 [ 191.574838][ T8022] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 191.581736][ T8022] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 191.594674][ T8022] F2FS-fs (loop1): invalid crc value [ 191.625017][ T8022] F2FS-fs (loop1): Found nat_bits in checkpoint [ 191.677585][ T8022] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 191.684780][ T8022] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 191.751069][ T8007] XFS (loop0): Mounting V5 Filesystem [ 191.824362][ T8022] fscrypt (loop1, inode 8): Error -61 getting encryption context [ 192.030482][ T8007] XFS (loop0): Ending clean mount [ 192.048662][ T8007] XFS (loop0): Quotacheck needed: Please wait. [ 192.177294][ T8007] XFS (loop0): Quotacheck: Done. [ 192.356709][ T4190] XFS (loop0): Unmounting Filesystem [ 192.523659][ T8069] loop3: detected capacity change from 0 to 512 [ 192.658170][ T8072] loop4: detected capacity change from 0 to 256 [ 192.664668][ T4645] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 192.721648][ T8069] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 192.821559][ T8069] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.840798][ T8072] FAT-fs (loop4): Directory bread(block 64) failed [ 192.869712][ T8072] FAT-fs (loop4): Directory bread(block 65) failed [ 192.899632][ T8072] FAT-fs (loop4): Directory bread(block 66) failed [ 192.926920][ T8072] FAT-fs (loop4): Directory bread(block 67) failed [ 192.951761][ T8072] FAT-fs (loop4): Directory bread(block 68) failed [ 192.968660][ T8072] FAT-fs (loop4): Directory bread(block 69) failed [ 192.994994][ T8072] FAT-fs (loop4): Directory bread(block 70) failed [ 193.024245][ T8072] FAT-fs (loop4): Directory bread(block 71) failed [ 193.030885][ T8072] FAT-fs (loop4): Directory bread(block 72) failed [ 193.078493][ T8072] FAT-fs (loop4): Directory bread(block 73) failed [ 193.131279][ T8072] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.132250][ T4645] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.201345][ T4645] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.241356][ T4645] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 193.276816][ T4645] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.328364][ T4645] usb 3-1: config 0 descriptor?? [ 193.575761][ T8087] program syz.0.1403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.646621][ T8090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1404'. [ 193.661433][ T8090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1404'. [ 193.742140][ T8092] loop0: detected capacity change from 0 to 1024 [ 193.790410][ T8092] EXT4-fs (loop0): Ignoring removed bh option [ 193.851860][ T8092] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 193.860837][ T8076] loop3: detected capacity change from 0 to 32768 [ 193.883026][ T4645] hkems 0003:2006:0118.0011: item fetching failed at offset 5/7 [ 193.891159][ T4645] hkems 0003:2006:0118.0011: parse failed [ 193.944879][ T4645] hkems: probe of 0003:2006:0118.0011 failed with error -22 [ 193.962674][ T8092] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.000516][ T8076] XFS (loop3): Mounting V5 Filesystem [ 194.044670][ T8092] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: block 3: comm syz.0.1405: lblock 3 mapped to illegal pblock 3 (length 3) [ 194.070910][ T8092] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 194.089984][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.096342][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.108303][ T8092] EXT4-fs (loop0): This should not happen!! Data will be lost [ 194.108303][ T8092] [ 194.130358][ T6493] usb 3-1: USB disconnect, device number 18 [ 194.135546][ T8076] XFS (loop3): Ending clean mount [ 194.201554][ T5455] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 194.243305][ T4191] XFS (loop3): Unmounting Filesystem [ 194.262971][ T4271] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 194.309202][ T4271] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 194.325153][ T4271] EXT4-fs (loop0): This should not happen!! Data will be lost [ 194.325153][ T4271] [ 194.342918][ T8088] loop4: detected capacity change from 0 to 32768 [ 194.428410][ T8088] XFS (loop4): Mounting V5 Filesystem [ 194.571467][ T5455] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.592339][ T5455] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 194.611792][ T5455] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.639155][ T5455] usb 2-1: config 0 descriptor?? [ 194.712534][ T8088] XFS (loop4): Starting recovery (logdev: internal) [ 194.786009][ T8088] XFS (loop4): Ending recovery (logdev: internal) [ 194.792500][ T8125] loop2: detected capacity change from 0 to 1024 [ 194.832626][ T8125] EXT4-fs (loop2): Ignoring removed bh option [ 194.898154][ T8125] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,nolazytime,quota,stripe=0x0000000000000010,abort,lazytime,errors=remount-ro,init_itable,bh,dioread_lock,. Quota mode: writeback. [ 194.927315][ T4198] XFS (loop4): Unmounting Filesystem [ 194.972049][ T8125] EXT4-fs (loop2): shut down requested (2) [ 195.155686][ T8139] loop3: detected capacity change from 0 to 8 [ 195.172654][ T5455] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 195.195112][ T5455] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0012/input/input22 [ 195.283775][ T8139] SQUASHFS error: xz decompression failed, data probably corrupt [ 195.311390][ T8139] SQUASHFS error: Failed to read block 0x108: -5 [ 195.331995][ T8139] SQUASHFS error: Unable to read metadata cache entry [106] [ 195.354532][ T8139] SQUASHFS error: Unable to read inode 0x11f [ 195.384746][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1421'. [ 195.407089][ T5455] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 195.414343][ T8145] netlink: 'syz.0.1421': attribute type 6 has an invalid length. [ 195.816360][ T23] usb 2-1: USB disconnect, device number 10 [ 196.081411][ T4266] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 196.124555][ T8161] loop0: detected capacity change from 0 to 32768 [ 196.165104][ T8161] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 196.174155][ T8161] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 196.214944][ T8161] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 196.229811][ T2287] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 196.238914][ T2287] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 196.289679][ T2287] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 50ms [ 196.299503][ T2287] gfs2: fsid=syz:syz.0: jid=0: Done [ 196.306263][ T8161] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 196.386743][ T23] kernel read not supported for file /dsp (pid: 23 comm: kworker/1:1) [ 196.441729][ T4266] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 196.479298][ T4266] usb 4-1: config 0 interface 0 has no altsetting 0 [ 196.490742][ T4266] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 196.500396][ T4266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.531583][ T4266] usb 4-1: config 0 descriptor?? [ 196.552596][ T8159] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 196.604916][ T8161] gfs2: fsid=syz:syz.0: found 1 quota changes [ 196.791483][ T2287] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 196.847606][ T4190] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 196.865596][ T4190] CPU: 0 PID: 4190 Comm: syz-executor Not tainted syzkaller #0 [ 196.873183][ T4190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 196.883293][ T4190] Call Trace: [ 196.886592][ T4190] [ 196.889560][ T4190] dump_stack_lvl+0x188/0x250 [ 196.894273][ T4190] ? show_regs_print_info+0x20/0x20 [ 196.899491][ T4190] ? load_image+0x400/0x400 [ 196.904021][ T4190] ? do_raw_spin_unlock+0x11d/0x230 [ 196.909244][ T4190] gfs2_assert_warn_i+0x18f/0x2c0 [ 196.914303][ T4190] gfs2_quota_cleanup+0x4b4/0x6a0 [ 196.919366][ T4190] gfs2_make_fs_ro+0x523/0x620 [ 196.924162][ T4190] ? gfs2_dinode_out+0xb00/0xb00 [ 196.929120][ T4190] ? gfs2_put_super+0x189/0x7d0 [ 196.934007][ T4190] ? __lock_acquire+0x7d10/0x7d10 [ 196.939085][ T4190] ? __rwlock_init+0x140/0x140 [ 196.943888][ T4190] ? hook_inode_free_security+0xa0/0xa0 [ 196.949477][ T4190] ? do_raw_spin_unlock+0x11d/0x230 [ 196.954700][ T4190] gfs2_put_super+0x1d2/0x7d0 [ 196.959406][ T4190] ? gfs2_evict_inode+0x1240/0x1240 [ 196.964630][ T4190] generic_shutdown_super+0x130/0x300 [ 196.970028][ T4190] kill_block_super+0x7c/0xe0 [ 196.974743][ T4190] deactivate_locked_super+0x93/0xf0 [ 196.980064][ T4190] cleanup_mnt+0x42d/0x4e0 [ 196.984522][ T4190] ? lockdep_hardirqs_on+0x94/0x140 [ 196.989754][ T4190] task_work_run+0x125/0x1a0 [ 196.994376][ T4190] exit_to_user_mode_loop+0x10f/0x130 [ 196.999774][ T4190] exit_to_user_mode_prepare+0xee/0x180 [ 197.005349][ T4190] syscall_exit_to_user_mode+0x16/0x40 [ 197.010859][ T4190] do_syscall_64+0x58/0xa0 [ 197.015300][ T4190] ? clear_bhb_loop+0x30/0x80 [ 197.016499][ T4266] prodikeys 0003:041E:2801.0013: unknown main item tag 0x2 [ 197.019997][ T4190] ? clear_bhb_loop+0x30/0x80 [ 197.031888][ T4190] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.037818][ T4190] RIP: 0033:0x7fc3d558d097 [ 197.042249][ T4190] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 197.061794][ T4266] prodikeys 0003:041E:2801.0013: unknown main item tag 0x6 [ 197.061875][ T4190] RSP: 002b:00007fffe6127b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 197.070419][ T4266] prodikeys 0003:041E:2801.0013: ignoring exceeding usage max [ 197.077503][ T4190] RAX: 0000000000000000 RBX: 00007fc3d56211ca RCX: 00007fc3d558d097 [ 197.077521][ T4190] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffe6127bc0 [ 197.077533][ T4190] RBP: 00007fffe6127bc0 R08: 00007fffe6128bc0 R09: 00000000ffffffff [ 197.077547][ T4190] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffe6128c50 [ 197.077560][ T4190] R13: 00007fc3d56211ca R14: 000000000003001c R15: 00007fffe6128c90 [ 197.077587][ T4190] [ 197.176445][ T4266] prodikeys 0003:041E:2801.0013: hidraw0: USB HID v0.c1 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input0 [ 197.224075][ T2287] usb 2-1: Using ep0 maxpacket: 8 [ 197.249439][ T4266] usb 4-1: USB disconnect, device number 14 [ 197.334114][ T8188] fido_id[8188]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 197.351618][ T2287] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.369425][ T2287] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 197.394462][ T2287] usb 2-1: config 0 interface 0 has no altsetting 0 [ 197.411777][ T2287] usb 2-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00 [ 197.421098][ T2287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.432960][ T2287] usb 2-1: config 0 descriptor?? [ 197.441389][ T4644] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 197.800735][ T8204] loop3: detected capacity change from 0 to 128 [ 197.872624][ T4644] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 197.881184][ T4644] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 197.892238][ T4644] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 197.902782][ T8204] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 197.902863][ T4644] usb 5-1: config 220 has no interface number 2 [ 197.902926][ T4644] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 197.938136][ T2287] wacom 0003:056A:005D.0014: unknown main item tag 0x0 [ 197.946184][ T2287] wacom 0003:056A:005D.0014: unknown main item tag 0x0 [ 197.953197][ T2287] wacom 0003:056A:005D.0014: unknown main item tag 0x0 [ 197.960295][ T2287] wacom 0003:056A:005D.0014: unknown main item tag 0x0 [ 197.962602][ T8204] hpfs: filesystem error: improperly stopped [ 197.967286][ T4644] usb 5-1: config 220 interface 0 has no altsetting 0 [ 197.980371][ T2287] wacom 0003:056A:005D.0014: unknown main item tag 0x0 [ 197.985559][ T8204] [ 197.987667][ T4644] usb 5-1: config 220 interface 76 has no altsetting 0 [ 197.997349][ T2287] wacom 0003:056A:005D.0014: unknown main item tag 0x0 [ 198.004448][ T4644] usb 5-1: config 220 interface 1 has no altsetting 0 [ 198.004900][ T8204] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 198.011483][ T2287] wacom 0003:056A:005D.0014: unknown main item tag 0x0 [ 198.011510][ T2287] wacom 0003:056A:005D.0014: unknown main item tag 0x0 [ 198.030835][ T2287] wacom 0003:056A:005D.0014: hidraw0: USB HID v0.03 Device [HID 056a:005d] on usb-dummy_hcd.1-1/input0 [ 198.069442][ T8204] [ 198.075682][ T8204] hpfs: You really don't want any checks? You are crazy... [ 198.098728][ T8204] hpfs: hpfs_map_sector(): read error [ 198.107287][ T8204] hpfs: code page support is disabled [ 198.117873][ T8204] hpfs: hpfs_map_4sectors(): unaligned read [ 198.126929][ T8204] hpfs: hpfs_map_4sectors(): unaligned read [ 198.136812][ T8204] hpfs: filesystem error: unable to find root dir [ 198.188631][ T2287] usb 2-1: USB disconnect, device number 11 [ 198.211568][ T4644] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 198.228591][ T4644] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.248663][ T4644] usb 5-1: Product: syz [ 198.261326][ T4644] usb 5-1: Manufacturer: syz [ 198.270606][ T4644] usb 5-1: SerialNumber: syz [ 198.359009][ T8211] loop2: detected capacity change from 0 to 512 [ 198.405221][ T8211] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 198.469474][ T8211] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 1024: comm syz.2.1450: invalid block [ 198.482598][ T8211] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1450: invalid indirect mapped block 1024 (level 0) [ 198.503540][ T8211] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1450: bg 0: block 35: padding at end of block bitmap is not set [ 198.541587][ T8218] netlink: 'syz.0.1451': attribute type 1 has an invalid length. [ 198.549519][ T8218] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1451'. [ 198.592675][ T8211] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 198.618230][ T8211] EXT4-fs (loop2): 1 truncate cleaned up [ 198.631395][ T8211] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,nombcache,bsddf,,errors=continue. Quota mode: none. [ 198.706205][ T4644] uvcvideo 5-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 198.728329][ T4644] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 198.751689][ T6493] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 198.763246][ T4644] usb 5-1: No valid video chain found. [ 198.768803][ T4644] usb 5-1: selecting invalid altsetting 0 [ 198.862357][ T8228] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1457'. [ 198.882804][ T8226] loop1: detected capacity change from 0 to 256 [ 198.889016][ T4644] usb 5-1: selecting invalid altsetting 0 [ 198.889115][ T4644] usbtest: probe of 5-1:220.1 failed with error -22 [ 198.914342][ T4644] usb 5-1: USB disconnect, device number 18 [ 199.021411][ T6493] usb 4-1: Using ep0 maxpacket: 32 [ 199.218220][ T6493] usb 4-1: unable to get BOS descriptor or descriptor too short [ 199.291406][ T6493] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 199.306784][ T6493] usb 4-1: can't read configurations, error -71 [ 199.547727][ T8266] loop4: detected capacity change from 0 to 512 [ 199.629597][ T8266] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 199.644078][ T8270] loop2: detected capacity change from 0 to 128 [ 199.732724][ T8270] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 199.743754][ T8270] ext4 filesystem being mounted at /317/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 199.781587][ T8266] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1473'. [ 200.087260][ T8272] loop0: detected capacity change from 0 to 32768 [ 200.148237][ T8292] loop4: detected capacity change from 0 to 2048 [ 200.230679][ T8272] ERROR: (device loop0): dbAllocBits: leaf page corrupt [ 200.230679][ T8272] [ 200.249861][ T8292] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 200.264029][ T8272] ERROR: (device loop0): remounting filesystem as read-only [ 200.285259][ T8272] ERROR: (device loop0): dbAllocBits: leaf page corrupt [ 200.285259][ T8272] [ 200.335115][ T8272] ERROR: (device loop0): dbAllocBits: leaf page corrupt [ 200.335115][ T8272] [ 200.382518][ T8272] attempt to access beyond end of device [ 200.382518][ T8272] loop0: rw=2051, want=4696064, limit=32768 [ 200.451650][ T23] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 200.466496][ T8272] JFS: sb_issue_discard(ffff888054b0e000, 585984, 1024, GFP_NOFS, 0) = -5 => failed! [ 200.483185][ T8272] blkno = 8f100, nblocks = 400 [ 200.488344][ T8272] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 200.488344][ T8272] [ 200.505384][ T8272] attempt to access beyond end of device [ 200.505384][ T8272] loop0: rw=2051, want=4696064, limit=32768 [ 200.537076][ T8272] JFS: sb_issue_discard(ffff888054b0e000, 585984, 1024, GFP_NOFS, 0) = -5 => failed! [ 200.560249][ T8272] blkno = 8f100, nblocks = 400 [ 200.565505][ T8272] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 200.565505][ T8272] [ 200.578625][ T8272] attempt to access beyond end of device [ 200.578625][ T8272] loop0: rw=2051, want=4696064, limit=32768 [ 200.590715][ T8272] JFS: sb_issue_discard(ffff888054b0e000, 585984, 1024, GFP_NOFS, 0) = -5 => failed! [ 200.600616][ T8272] blkno = 8f100, nblocks = 400 [ 200.605881][ T8272] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 200.605881][ T8272] [ 200.831410][ T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 200.866867][ T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 201.001430][ T4645] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 201.041661][ T23] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 201.071088][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.091431][ T23] usb 3-1: Product: syz [ 201.095637][ T23] usb 3-1: Manufacturer: syz [ 201.100280][ T23] usb 3-1: SerialNumber: syz [ 201.131540][ T7695] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 201.133450][ T23] usb 3-1: config 0 descriptor?? [ 201.172085][ T8298] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 201.179431][ T8298] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 201.271574][ T4645] usb 5-1: Using ep0 maxpacket: 16 [ 201.401584][ T4645] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 201.409629][ T4645] usb 5-1: config 0 has no interface number 0 [ 201.415845][ T7695] usb 1-1: Using ep0 maxpacket: 32 [ 201.431513][ T4645] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.455361][ T8298] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 201.461422][ T4645] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.491447][ T8298] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 201.501719][ T4645] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 201.510889][ T4645] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.547700][ T4645] usb 5-1: config 0 descriptor?? [ 201.576799][ T8313] loop3: detected capacity change from 0 to 40427 [ 201.614151][ T7695] usb 1-1: unable to get BOS descriptor or descriptor too short [ 201.631460][ T8313] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 201.644582][ T8313] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 201.662720][ T8313] F2FS-fs (loop3): invalid crc value [ 201.682116][ T8313] F2FS-fs (loop3): invalid crc value [ 201.697745][ T8313] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 201.703005][ T7695] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 201.712600][ T4206] Bluetooth: hci4: link tx timeout [ 201.717759][ T4206] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.751412][ T7695] usb 1-1: can't read configurations, error -71 [ 201.975578][ T23] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 202.066605][ T8325] loop1: detected capacity change from 0 to 32768 [ 202.191818][ T23] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 202.239390][ T23] usb 3-1: USB disconnect, device number 19 [ 202.281567][ T4645] uclogic 0003:28BD:0071.0015: pen parameters not found [ 202.292532][ T4645] uclogic 0003:28BD:0071.0015: interface is invalid, ignoring [ 202.506823][ T5455] usb 5-1: USB disconnect, device number 19 [ 202.788195][ T8350] device erspan0 entered promiscuous mode [ 202.991550][ T8358] loop1: detected capacity change from 0 to 8 [ 203.510443][ T8368] loop4: detected capacity change from 0 to 1024 [ 203.800231][ T8382] comedi comedi0: comedi_parport: I/O port conflict (0x10000,3) [ 203.904998][ T8384] loop4: detected capacity change from 0 to 2048 [ 203.948991][ T8384] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 204.185810][ T8352] loop3: detected capacity change from 0 to 40427 [ 204.288217][ T8398] loop2: detected capacity change from 0 to 64 [ 204.319192][ T8352] F2FS-fs (loop3): Invalid Fs Meta Ino: node(2305) meta(2) root(3) [ 204.351439][ T8352] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 204.418581][ T8352] F2FS-fs (loop3): invalid crc value [ 204.467750][ T8400] loop1: detected capacity change from 0 to 2048 [ 204.521932][ T8352] F2FS-fs (loop3): Found nat_bits in checkpoint [ 204.694520][ T8352] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 204.704156][ T8352] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 204.821418][ T2287] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 204.908747][ T8352] attempt to access beyond end of device [ 204.908747][ T8352] loop3: rw=10241, want=45104, limit=40427 [ 205.054126][ T4191] attempt to access beyond end of device [ 205.054126][ T4191] loop3: rw=2049, want=45112, limit=40427 [ 205.234121][ T2287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.265150][ T2287] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 205.305735][ T2287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.332462][ T2287] usb 5-1: config 0 descriptor?? [ 205.388058][ T8433] set_capacity_and_notify: 1 callbacks suppressed [ 205.407643][ T8431] loop2: detected capacity change from 0 to 2048 [ 205.418731][ T8433] loop0: detected capacity change from 0 to 128 [ 205.493196][ T8431] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 205.514975][ T8433] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 205.566866][ T8433] ext4 filesystem being mounted at /291/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.637171][ T8436] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.675825][ T8431] NILFS error (device loop2): nilfs_readdir: zero-length directory entry [ 205.741409][ T8431] Remounting filesystem read-only [ 205.843535][ T2287] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 205.875380][ T2287] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0016/input/input26 [ 206.013375][ T2287] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 206.184902][ T8446] loop1: detected capacity change from 0 to 1024 [ 206.532131][ T4642] usb 5-1: USB disconnect, device number 20 [ 206.768056][ T8438] loop0: detected capacity change from 0 to 32768 [ 206.878082][ T8438] XFS (loop0): Mounting V5 Filesystem [ 206.927876][ T8470] loop2: detected capacity change from 0 to 2048 [ 206.973042][ T8438] XFS (loop0): Ending clean mount [ 207.013594][ T8438] XFS (loop0): Quotacheck needed: Please wait. [ 207.153477][ T8480] sctp: [Deprecated]: syz.4.1555 (pid 8480) Use of struct sctp_assoc_value in delayed_ack socket option. [ 207.153477][ T8480] Use struct sctp_sack_info instead [ 207.178378][ T8470] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 207.209781][ T8470] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.254546][ T8438] XFS (loop0): Quotacheck: Done. [ 207.325372][ T8486] loop3: detected capacity change from 0 to 2048 [ 207.361857][ T4190] XFS (loop0): Unmounting Filesystem [ 207.467804][ T8486] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 207.545302][ T8486] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.061083][ T8511] loop4: detected capacity change from 0 to 256 [ 208.263052][ T8516] loop1: detected capacity change from 0 to 512 [ 208.321017][ T8516] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 208.380248][ T8516] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 208.420013][ T8516] EXT4-fs (loop1): 1 truncate cleaned up [ 208.431474][ T8516] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,nobarrier,grpid,,errors=continue. Quota mode: none. [ 208.488504][ T8523] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1574'. [ 208.602513][ T8523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1574'. [ 208.633451][ T8523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1574'. [ 208.772841][ T8537] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1580'. [ 208.832231][ T8537] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.840383][ T8537] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.952185][ T8541] loop2: detected capacity change from 0 to 1024 [ 209.073413][ T8547] netlink: 'syz.1.1585': attribute type 62 has an invalid length. [ 209.132918][ T26] audit: type=1800 audit(1781535121.649:18): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1583" name="file1" dev="loop2" ino=1 res=0 errno=0 [ 209.138602][ T8547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1585'. [ 209.441141][ T8555] loop2: detected capacity change from 0 to 128 [ 209.563004][ T8555] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 209.583375][ T8557] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1590: inode #1: comm syz.1.1590: iget: illegal inode # [ 209.610938][ T8555] ext4 filesystem being mounted at /336/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 209.729184][ T8557] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1590: error while reading EA inode 1 err=-117 [ 209.779771][ T8557] EXT4-fs (loop1): 1 orphan inode deleted [ 209.809614][ T8557] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 209.863868][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1597'. [ 210.063286][ T26] audit: type=1800 audit(1781535122.579:19): pid=8574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1596" name="file1" dev="loop2" ino=2 res=0 errno=0 [ 210.110864][ T8577] program syz.1.1598 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.128445][ T8574] hfsplus: catalog searching failed [ 210.260405][ T4549] hfsplus: bad catalog file entry [ 210.267171][ T4549] hfsplus: b-tree write err: -5, ino 3 [ 210.587765][ T8589] syz.1.1605 uses obsolete (PF_INET,SOCK_PACKET) [ 210.656550][ T8591] set_capacity_and_notify: 2 callbacks suppressed [ 210.656567][ T8591] loop2: detected capacity change from 0 to 512 [ 210.715504][ T8591] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 210.818418][ T8591] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.1604: bad orphan inode 15 [ 210.838415][ T8568] loop3: detected capacity change from 0 to 32768 [ 210.882700][ T8596] loop0: detected capacity change from 0 to 1024 [ 210.902720][ T8591] ext4_test_bit(bit=14, block=18) = 1 [ 210.908141][ T8591] is_bad_inode(inode)=0 [ 210.990296][ T8568] XFS (loop3): Mounting V5 Filesystem [ 211.040229][ T8586] loop4: detected capacity change from 0 to 32768 [ 211.057290][ T8591] NEXT_ORPHAN(inode)=1023 [ 211.062859][ T8591] max_ino=32 [ 211.066094][ T8591] i_nlink=0 [ 211.087249][ T8586] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1603 (8586) [ 211.118113][ T8591] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2925: inode #15: comm syz.2.1604: corrupted xattr block 19 [ 211.146953][ T8568] XFS (loop3): Ending clean mount [ 211.162025][ T8591] EXT4-fs warning (device loop2): ext4_evict_inode:304: xattr delete (err -117) [ 211.171217][ T8591] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 211.207549][ T8568] XFS (loop3): Quotacheck needed: Please wait. [ 211.257370][ T8591] EXT4-fs (loop2): shut down requested (2) [ 211.292205][ T8586] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 211.301731][ T8586] BTRFS info (device loop4): setting nodatasum [ 211.328775][ T8586] BTRFS info (device loop4): force zlib compression, level 3 [ 211.360800][ T8586] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 211.421507][ T8568] XFS (loop3): Quotacheck: Done. [ 211.431465][ T8586] BTRFS info (device loop4): use lzo compression, level 0 [ 211.483314][ T8586] BTRFS info (device loop4): turning on flush-on-commit [ 211.531545][ T4642] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 211.539630][ T8586] BTRFS info (device loop4): enabling auto defrag [ 211.557045][ T8586] BTRFS info (device loop4): max_inline at 4096 [ 211.610417][ T8586] BTRFS info (device loop4): using free space tree [ 211.628934][ T4191] XFS (loop3): Unmounting Filesystem [ 211.638485][ T8586] BTRFS info (device loop4): has skinny extents [ 211.692631][ T8622] device batadv0 entered promiscuous mode [ 211.708800][ T8622] device bond0 entered promiscuous mode [ 211.735929][ T8622] device bond_slave_0 entered promiscuous mode [ 211.742924][ T8622] device bond_slave_1 entered promiscuous mode [ 211.749222][ T8622] device macvlan0 entered promiscuous mode [ 211.781247][ T8622] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 211.802673][ T4642] usb 2-1: Using ep0 maxpacket: 32 [ 211.809469][ T8622] device batadv0 left promiscuous mode [ 211.831940][ T8622] device bond0 left promiscuous mode [ 211.847187][ T8622] device bond_slave_0 left promiscuous mode [ 211.854017][ T8622] device bond_slave_1 left promiscuous mode [ 211.860303][ T8622] device macvlan0 left promiscuous mode [ 211.906787][ T8586] BTRFS info (device loop4): enabling ssd optimizations [ 211.928597][ T26] audit: type=1800 audit(1781535124.439:20): pid=8586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1603" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 211.949054][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.981523][ T4642] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 212.031335][ T4642] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.073154][ T4642] usb 2-1: config 0 descriptor?? [ 212.269077][ T8647] IPVS: sh: FWM 4 0x00000004 - no destination available [ 212.341528][ T4642] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 212.375832][ T4642] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 212.390641][ T8651] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1620'. [ 212.406337][ T8651] netem: invalid attributes len -24 [ 212.412001][ T8651] netem: change failed [ 212.422931][ T4642] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 212.431243][ T4642] usb 2-1: media controller created [ 212.454417][ T4642] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 212.510591][ T8655] loop2: detected capacity change from 0 to 1024 [ 212.555812][ T4642] az6027: usb out operation failed. (-71) [ 212.584864][ T4642] az6027: usb out operation failed. (-71) [ 212.591199][ T4642] stb0899_attach: Driver disabled by Kconfig [ 212.597856][ T4642] az6027: no front-end attached [ 212.597856][ T4642] [ 212.633017][ T8655] attempt to access beyond end of device [ 212.633017][ T8655] loop2: rw=0, want=5780, limit=1024 [ 212.645779][ T4642] az6027: usb out operation failed. (-71) [ 212.656328][ T4642] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 212.675513][ T8655] Buffer I/O error on dev loop2, logical block 2889, async page read [ 212.694140][ T4642] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input27 [ 212.707932][ T8655] attempt to access beyond end of device [ 212.707932][ T8655] loop2: rw=0, want=5780, limit=1024 [ 212.721336][ T4642] dvb-usb: schedule remote query interval to 400 msecs. [ 212.728404][ T4642] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 212.735680][ T8658] loop0: detected capacity change from 0 to 16 [ 212.761464][ T4642] usb 2-1: USB disconnect, device number 12 [ 212.768243][ T8655] Buffer I/O error on dev loop2, logical block 2889, async page read [ 212.804322][ T8657] hfsplus: can't free extent [ 212.818919][ T26] audit: type=1800 audit(1781535125.329:21): pid=8655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1622" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 212.894402][ T8658] erofs: (device loop0): mounted with root inode @ nid 36. [ 212.960982][ T4642] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 213.172510][ T8668] block nbd0: NBD_DISCONNECT [ 213.333904][ T8680] loop3: detected capacity change from 0 to 256 [ 213.490370][ T8680] FAT-fs (loop3): Directory bread(block 64) failed [ 213.511029][ T8693] loop2: detected capacity change from 0 to 64 [ 213.531636][ T8680] FAT-fs (loop3): Directory bread(block 65) failed [ 213.547222][ T8680] FAT-fs (loop3): Directory bread(block 66) failed [ 213.576827][ T8680] FAT-fs (loop3): Directory bread(block 67) failed [ 213.606061][ T8693] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 213.620458][ T8680] FAT-fs (loop3): Directory bread(block 68) failed [ 213.628292][ T8690] loop1: detected capacity change from 0 to 4096 [ 213.642152][ T8680] FAT-fs (loop3): Directory bread(block 69) failed [ 213.649400][ T8680] FAT-fs (loop3): Directory bread(block 70) failed [ 213.663312][ T8680] FAT-fs (loop3): Directory bread(block 71) failed [ 213.670041][ T8680] FAT-fs (loop3): Directory bread(block 72) failed [ 213.683963][ T8680] FAT-fs (loop3): Directory bread(block 73) failed [ 213.687492][ T8693] BFS-fs: bfs_readdir(): Bad f_pos=00000002 for loop2:00000002 [ 213.725389][ T8690] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 213.993010][ T8702] ntfs3: loop1: ino=21, "cgroup.controllers" failed to extend initialized size to 208e24b. [ 214.401849][ T6493] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 214.507728][ T8727] loop1: detected capacity change from 0 to 2048 [ 214.535599][ T8727] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 214.573861][ T8728] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 214.616510][ T8727] NILFS error (device loop1): nilfs_readdir: zero-length directory entry [ 214.642769][ T8727] Remounting filesystem read-only [ 214.651386][ T6493] usb 4-1: Using ep0 maxpacket: 32 [ 214.694695][ T8730] input: syz0 as /devices/virtual/input/input28 [ 214.711815][ T4642] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 214.774638][ T6493] usb 4-1: config 0 has an invalid interface number: 115 but max is 0 [ 214.786916][ T6493] usb 4-1: config 0 has no interface number 0 [ 214.806117][ T6493] usb 4-1: config 0 interface 115 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 214.819283][ T6493] usb 4-1: config 0 interface 115 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 214.831832][ T8734] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.841331][ T8734] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.842013][ T6493] usb 4-1: config 0 interface 115 has no altsetting 0 [ 214.850104][ T8734] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.865787][ T8734] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.875458][ T8734] device vxlan0 entered promiscuous mode [ 214.961335][ T4642] usb 1-1: Using ep0 maxpacket: 16 [ 215.041646][ T6493] usb 4-1: New USB device found, idVendor=19d2, idProduct=ff55, bcdDevice=72.3e [ 215.051553][ T6493] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.073762][ T6493] usb 4-1: Product: syz [ 215.077991][ T6493] usb 4-1: Manufacturer: syz [ 215.091689][ T4642] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.108479][ T4642] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 215.126764][ T6493] usb 4-1: SerialNumber: syz [ 215.158083][ T6493] usb 4-1: config 0 descriptor?? [ 215.161445][ T4642] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 215.182721][ T4642] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.203342][ T8747] program syz.1.1662 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.206674][ T4642] usb 1-1: config 0 descriptor?? [ 215.227257][ T4192] hfs: node 4:3 still has 1 user(s)! [ 215.234149][ T6493] option 4-1:0.115: GSM modem (1-port) converter detected [ 215.447570][ T1111] usb 4-1: USB disconnect, device number 17 [ 215.459915][ T1111] option 4-1:0.115: device disconnected [ 215.631562][ T4644] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 215.689321][ T8761] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.698678][ T6493] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 215.835058][ T8764] input: syz0 as /devices/virtual/input/input29 [ 215.881421][ T4644] usb 3-1: Using ep0 maxpacket: 8 [ 215.903721][ T8766] input: syz0 as /devices/virtual/input/input30 [ 215.932109][ T4642] usbhid 1-1:0.0: can't add hid device: -71 [ 215.938144][ T4642] usbhid: probe of 1-1:0.0 failed with error -71 [ 215.953383][ T4642] usb 1-1: USB disconnect, device number 21 [ 216.026505][ T4644] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 216.041525][ T4644] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.061791][ T6493] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 216.071684][ T4644] usb 3-1: config 0 has no interface number 0 [ 216.080655][ T6493] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.080975][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1674'. [ 216.107039][ T6493] usb 2-1: config 0 descriptor?? [ 216.157128][ T6493] cp210x 2-1:0.0: cp210x converter detected [ 216.268355][ T8774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1675'. [ 216.277689][ T8774] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1675'. [ 216.287191][ T4644] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 216.307293][ T4644] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.315856][ T4644] usb 3-1: Product: syz [ 216.322329][ T4644] usb 3-1: Manufacturer: syz [ 216.327958][ T4644] usb 3-1: SerialNumber: syz [ 216.340219][ T4644] usb 3-1: config 0 descriptor?? [ 216.362797][ T8776] set_capacity_and_notify: 3 callbacks suppressed [ 216.362811][ T8776] loop4: detected capacity change from 0 to 256 [ 216.376072][ T5455] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 216.397602][ T4644] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 216.406255][ T4644] usb 3-1: No streaming interface found for terminal 6. [ 216.445586][ T8776] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 216.600366][ T4644] usb 3-1: USB disconnect, device number 20 [ 216.631517][ T5455] usb 4-1: Using ep0 maxpacket: 16 [ 216.640986][ T8785] loop4: detected capacity change from 0 to 512 [ 216.675181][ T8785] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0003] [ 216.683816][ T8787] loop0: detected capacity change from 0 to 64 [ 216.690413][ T8785] System zones: 1-2, 4-12, 8-8 [ 216.700826][ T8785] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.1679: iget: bad i_size value: 38620345925642 [ 216.715163][ T8785] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1679: couldn't read orphan inode 15 (err -117) [ 216.751705][ T5455] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.756963][ T8785] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=continue,delalloc,bsddf,journal_ioprio=0x0000000000000001,debug,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 216.783882][ T5455] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.811896][ T5455] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 216.846931][ T5455] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 216.880230][ T5455] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.918752][ T841] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:3: bg 0: block 5: invalid block bitmap [ 216.949165][ T5455] usb 4-1: config 0 descriptor?? [ 217.004099][ T841] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 217.016833][ T6493] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 217.031626][ T6493] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 217.049016][ T6493] usb 2-1: cp210x converter now attached to ttyUSB0 [ 217.056372][ T841] EXT4-fs (loop4): This should not happen!! Data will be lost [ 217.056372][ T841] [ 217.068047][ T6493] usb 2-1: USB disconnect, device number 13 [ 217.074279][ T841] EXT4-fs (loop4): Total free blocks count 0 [ 217.083092][ T841] EXT4-fs (loop4): Free/Dirty block details [ 217.089482][ T6493] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 217.102914][ T841] EXT4-fs (loop4): free_blocks=0 [ 217.108006][ T841] EXT4-fs (loop4): dirty_blocks=1 [ 217.117158][ T6493] cp210x 2-1:0.0: device disconnected [ 217.125055][ T841] EXT4-fs (loop4): Block reservation details [ 217.131182][ T841] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 217.409953][ T8791] loop0: detected capacity change from 0 to 32768 [ 217.435219][ T8791] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop0 scanned by syz.0.1691 (8791) [ 217.453283][ T5455] microsoft 0003:045E:07DA.0017: ignoring exceeding usage max [ 217.478929][ T5455] microsoft 0003:045E:07DA.0017: unsupported Resolution Multiplier 0 [ 217.499316][ T5455] microsoft 0003:045E:07DA.0017: implement() called with n (152) > 32! (kworker/1:13) [ 217.553600][ T8791] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 217.565281][ T8791] BTRFS info (device loop0): using free space tree [ 217.573963][ T8791] BTRFS info (device loop0): has skinny extents [ 217.671990][ T5455] microsoft 0003:045E:07DA.0017: unsupported Resolution Multiplier 0 [ 217.681162][ T5455] microsoft 0003:045E:07DA.0017: No inputs registered, leaving [ 217.712302][ T5455] microsoft 0003:045E:07DA.0017: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 217.724267][ T5455] microsoft 0003:045E:07DA.0017: no inputs found [ 217.730660][ T5455] microsoft 0003:045E:07DA.0017: could not initialize ff, continuing anyway [ 217.801211][ T8791] BTRFS info (device loop0): enabling ssd optimizations [ 217.878563][ T26] audit: type=1800 audit(1781535130.389:22): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1691" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 217.899039][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.955163][ T5455] usb 4-1: USB disconnect, device number 18 [ 218.063525][ T8835] loop4: detected capacity change from 0 to 256 [ 218.076314][ T8835] exfat: Deprecated parameter 'utf8' [ 218.102052][ T8827] loop1: detected capacity change from 0 to 4096 [ 218.170517][ T8827] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 218.202372][ T4182] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 9 /dev/loop0 scanned by udevd (4182) [ 218.240250][ T8835] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 218.696399][ T4271] ntfs3: loop1: ino=1b, Internal error [ 218.708638][ T4271] ntfs3: loop1: ntfs3_write_inode r=1b failed, -22. [ 218.760278][ T8849] loop0: detected capacity change from 0 to 1024 [ 218.874227][ T8849] EXT4-fs (loop0): Ignoring removed orlov option [ 218.881035][ T8847] loop4: detected capacity change from 0 to 8192 [ 218.934015][ T8847] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 218.958464][ T8849] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,noblock_validity,noquota,nodioread_nolock,orlov,nodioread_nolock,,errors=continue. Quota mode: none. [ 218.984037][ T8847] REISERFS (device loop4): using ordered data mode [ 218.990603][ T8847] reiserfs: using flush barriers [ 219.016303][ T8851] loop1: detected capacity change from 0 to 8192 [ 219.031734][ T8847] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 219.048239][ T8849] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.066810][ T8847] REISERFS (device loop4): checking transaction log (loop4) [ 219.076109][ T8847] REISERFS (device loop4): Using r5 hash to sort names [ 219.083895][ T8847] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 219.114638][ T8851] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 219.181677][ T8851] REISERFS (device loop1): using ordered data mode [ 219.209172][ T8843] loop3: detected capacity change from 0 to 32768 [ 219.224400][ T8851] reiserfs: using flush barriers [ 219.235702][ T8849] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1697: bg 0: block 112: padding at end of block bitmap is not set [ 219.281637][ T8851] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 219.287879][ T8789] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 219.375184][ T8851] REISERFS (device loop1): checking transaction log (loop1) [ 219.395478][ T8843] XFS (loop3): Mounting V5 Filesystem [ 219.407094][ T8849] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 7 with error 28 [ 219.426918][ T8851] REISERFS (device loop1): Using r5 hash to sort names [ 219.441690][ T8851] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 219.451658][ T8849] EXT4-fs (loop0): This should not happen!! Data will be lost [ 219.451658][ T8849] [ 219.508800][ T8849] EXT4-fs (loop0): Total free blocks count 0 [ 219.521681][ T6493] Bluetooth: hci5: command 0x1003 tx timeout [ 219.527862][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 219.549426][ T8849] EXT4-fs (loop0): Free/Dirty block details [ 219.578518][ T8843] XFS (loop3): Ending clean mount [ 219.587893][ T8843] XFS (loop3): Quotacheck needed: Please wait. [ 219.594545][ T8849] EXT4-fs (loop0): free_blocks=0 [ 219.628216][ T8849] EXT4-fs (loop0): dirty_blocks=16 [ 219.689058][ T8849] EXT4-fs (loop0): Block reservation details [ 219.760916][ T8849] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 219.770044][ T8843] XFS (loop3): Quotacheck: Done. [ 219.926218][ T4191] XFS (loop3): Unmounting Filesystem [ 220.232898][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1705'. [ 220.247157][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1705'. [ 220.822200][ T8902] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 220.828499][ T8906] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 220.835478][ T8902] EXT4-fs (loop3): orphan cleanup on readonly fs [ 220.862482][ T8902] Quota error (device loop3): v2_read_file_info: Free block number too big (0 >= 0). [ 220.902049][ T8902] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 220.953641][ T8902] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 220.985756][ T8902] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1713: bg 0: block 40: padding at end of block bitmap is not set [ 221.018178][ T8902] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 221.037753][ T8902] EXT4-fs (loop3): 1 truncate cleaned up [ 221.043640][ T8902] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 221.231720][ T6493] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 221.366172][ T8922] sp0: Synchronizing with TNC [ 221.481395][ T4299] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 221.596856][ T6493] usb 2-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 221.618184][ T6493] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 221.635842][ T6493] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 221.649615][ T5455] Bluetooth: hci5: command 0x1001 tx timeout [ 221.667698][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 221.729247][ T8939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1729'. [ 221.761993][ T6493] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 221.771221][ T6493] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 221.789285][ T6493] usb 2-1: Product: syz [ 221.793793][ T6493] usb 2-1: SerialNumber: syz [ 221.843141][ T6493] cdc_ncm 2-1:1.0: skipping garbage [ 221.848683][ T6493] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 221.872667][ T6493] cdc_ncm 2-1:1.0: bind() failure [ 221.912070][ T4299] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 221.923448][ T4299] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 222.131557][ T4299] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 222.150920][ T4299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.169800][ T4299] usb 1-1: Product: syz [ 222.174250][ T4299] usb 1-1: Manufacturer: syz [ 222.178869][ T4299] usb 1-1: SerialNumber: syz [ 222.200589][ T4299] usb 1-1: config 0 descriptor?? [ 222.232163][ T8913] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 222.239288][ T8913] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 222.418025][ T6493] usb 2-1: USB disconnect, device number 14 [ 222.469848][ T8913] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 222.479143][ T8913] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 222.951496][ T4299] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 223.154776][ T8970] program syz.1.1743 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.172419][ T4299] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 223.200383][ T4299] usb 1-1: USB disconnect, device number 22 [ 223.540227][ T8974] set_capacity_and_notify: 2 callbacks suppressed [ 223.540244][ T8974] loop3: detected capacity change from 0 to 40427 [ 223.563844][ T8980] loop1: detected capacity change from 0 to 64 [ 223.599996][ T8974] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 223.633180][ T8974] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 223.669217][ T8974] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x6 [ 223.681570][ T5455] Bluetooth: hci5: command 0x1009 tx timeout [ 223.697638][ T8974] F2FS-fs (loop3): invalid crc value [ 223.770301][ T8974] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 223.841518][ T5455] Bluetooth: hci4: command 0x0407 tx timeout [ 223.894880][ T8974] F2FS-fs (loop3): Start checkpoint disabled! [ 223.919561][ T8974] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 223.934254][ T8974] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 224.002473][ T4549] attempt to access beyond end of device [ 224.002473][ T4549] loop3: rw=2049, want=45104, limit=40427 [ 224.014721][ T4299] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 224.212282][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1756'. [ 224.362231][ T9005] loop1: detected capacity change from 0 to 1024 [ 224.447051][ T4299] usb 1-1: unable to get BOS descriptor or descriptor too short [ 224.496957][ T4299] usb 1-1: not running at top speed; connect to a high speed hub [ 224.781641][ T4299] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 224.791028][ T4299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.829695][ T4299] usb 1-1: Product: syz [ 224.834195][ T4299] usb 1-1: Manufacturer: syz [ 224.838821][ T4299] usb 1-1: SerialNumber: syz [ 224.872185][ T9024] loop4: detected capacity change from 0 to 1024 [ 224.960481][ T9024] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 224.969536][ T9024] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 225.005382][ T9024] hfsplus: b-tree write err: -5, ino 22 [ 225.092375][ T4549] hfsplus: b-tree write err: -5, ino 25 [ 225.100209][ T4549] hfsplus: b-tree write err: -5, ino 4 [ 225.107183][ T4549] hfsplus: b-tree write err: -5, ino 2 [ 225.139935][ T4549] hfsplus: b-tree write err: -5, ino 23 [ 225.161559][ T4549] hfsplus: b-tree write err: -5, ino 22 [ 225.271686][ T4299] usb 1-1: 1:1 : unsupported sample bitwidth 3 in 230 bytes [ 225.284167][ T4299] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 225.365117][ T4299] usb 1-1: unit 36 not found! [ 225.369873][ T4299] usb 1-1: unit 0 not found! [ 225.390382][ T9042] loop3: detected capacity change from 0 to 256 [ 225.422085][ T9042] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 225.492133][ T4299] usb 1-1: USB disconnect, device number 23 [ 225.717348][ T9046] rtc_cmos 00:00: Alarms can be up to one day in the future [ 225.818439][ T9049] loop0: detected capacity change from 0 to 2048 [ 225.912172][ T9054] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1781'. [ 225.932896][ T9049] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.033799][ T26] audit: type=1800 audit(1781535138.539:23): pid=9049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1778" name="file1" dev="loop0" ino=1367 res=0 errno=0 [ 226.342424][ T9070] netlink: 'syz.1.1788': attribute type 7 has an invalid length. [ 226.431796][ T5455] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 226.468825][ T9079] loop1: detected capacity change from 0 to 164 [ 226.578802][ T9084] loop4: detected capacity change from 0 to 1024 [ 226.899562][ T9100] loop5: detected capacity change from 0 to 7 [ 226.940380][ T9100] Dev loop5: unable to read RDB block 7 [ 226.948174][ T9100] loop5: AHDI p1 p2 p3 [ 226.952899][ T5455] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 226.963211][ T9100] loop5: partition table partially beyond EOD, truncated [ 226.972440][ T5455] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.983563][ T5455] usb 4-1: Product: syz [ 226.987822][ T5455] usb 4-1: Manufacturer: syz [ 226.992740][ T9100] loop5: p1 start 1601398130 is beyond EOD, truncated [ 226.999761][ T5455] usb 4-1: SerialNumber: syz [ 227.004815][ T9100] loop5: p2 start 1702059890 is beyond EOD, truncated [ 227.015864][ T5455] usb 4-1: config 0 descriptor?? [ 227.257172][ T9108] loop0: detected capacity change from 0 to 1024 [ 227.293392][ T5455] usb 4-1: USB disconnect, device number 19 [ 227.334853][ T9108] hfsplus: bad catalog entry type [ 227.454066][ T9099] JBD2: Ignoring recovery information on journal [ 227.534632][ T9099] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 227.690620][ T9099] (syz.1.1803,9099,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 227.699339][ T9099] (syz.1.1803,9099,1):ocfs2_trim_mainbm:7603 ERROR: status = -12 [ 227.734039][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 227.911538][ T5455] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 227.938328][ T9115] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 228.191654][ T5455] usb 1-1: Using ep0 maxpacket: 8 [ 228.291367][ T1111] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 228.321875][ T5455] usb 1-1: unable to get BOS descriptor or descriptor too short [ 228.349202][ T9132] attempt to access beyond end of device [ 228.349202][ T9132] loop1: rw=0, want=1026, limit=64 [ 228.381487][ T5455] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 228.389123][ T5455] usb 1-1: can't read configurations, error -71 [ 228.409637][ T9132] Buffer I/O error on dev loop1, logical block 512, async page read [ 228.430299][ T9132] attempt to access beyond end of device [ 228.430299][ T9132] loop1: rw=0, want=113154, limit=64 [ 228.449397][ T9132] Buffer I/O error on dev loop1, logical block 56576, async page read [ 228.561591][ T1111] usb 5-1: Using ep0 maxpacket: 8 [ 228.678359][ T9145] set_capacity_and_notify: 3 callbacks suppressed [ 228.678374][ T9145] loop3: detected capacity change from 0 to 512 [ 228.714963][ T1111] usb 5-1: config 0 has no interfaces? [ 228.723102][ T1111] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 228.736213][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.765847][ T1111] usb 5-1: config 0 descriptor?? [ 228.840776][ T9145] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.1824: iget: bad i_size value: 38620345925642 [ 228.854778][ T9149] loop2: detected capacity change from 0 to 4096 [ 228.880757][ T9145] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1824: couldn't read orphan inode 15 (err -117) [ 228.895775][ T9145] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,delalloc,data_err=ignore,journal_ioprio=0x0000000000000002,data_err=ignore,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 228.967423][ T9145] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1824: bg 0: block 5: invalid block bitmap [ 229.029173][ T1111] usb 5-1: USB disconnect, device number 21 [ 229.068144][ T9145] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 229.092053][ T9149] ntfs: volume version 3.1. [ 229.102359][ T9145] EXT4-fs (loop3): This should not happen!! Data will be lost [ 229.102359][ T9145] [ 229.141606][ T9145] EXT4-fs (loop3): Total free blocks count 0 [ 229.160803][ T9145] EXT4-fs (loop3): Free/Dirty block details [ 229.171093][ T9145] EXT4-fs (loop3): free_blocks=0 [ 229.179982][ T9145] EXT4-fs (loop3): dirty_blocks=1 [ 229.187807][ T9145] EXT4-fs (loop3): Block reservation details [ 229.194825][ T9145] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 229.249502][ T9147] loop1: detected capacity change from 0 to 32768 [ 229.296845][ T9147] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1822 (9147) [ 229.452343][ T9147] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 229.472029][ T9147] BTRFS info (device loop1): using free space tree [ 229.480385][ T9161] loop2: detected capacity change from 0 to 2048 [ 229.489719][ T9147] BTRFS info (device loop1): has skinny extents [ 229.523559][ T9161] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.534144][ T9163] loop3: detected capacity change from 0 to 4096 [ 229.647202][ T9163] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,,errors=continue. Quota mode: writeback. [ 229.769469][ T9147] BTRFS info (device loop1): enabling ssd optimizations [ 230.005593][ T9192] loop4: detected capacity change from 0 to 256 [ 230.056719][ T9197] loop0: detected capacity change from 0 to 512 [ 230.064715][ T9199] loop2: detected capacity change from 0 to 128 [ 230.123392][ T9199] EXT4-fs (loop2): Test dummy encryption mode enabled [ 230.130283][ T9199] EXT4-fs (loop2): inline encryption not supported [ 230.187774][ T9197] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 230.203754][ T9199] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue. Quota mode: none. [ 230.271932][ T9199] ext4 filesystem being mounted at /362/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 230.445149][ T9199] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 230.472137][ T9203] EXT4-fs (loop2): Remounting file system with no journal so ignoring journalled data option [ 230.531913][ T9203] EXT4-fs (loop2): re-mounted. Opts: noquota,noblock_validity,nogrpid,data=journal,. Quota mode: none. [ 230.701914][ T9213] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1843'. [ 230.832216][ T9211] loop0: detected capacity change from 0 to 4096 [ 230.872462][ T9218] loop1: detected capacity change from 0 to 1024 [ 230.960125][ T9221] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 231.070073][ T9211] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 231.114707][ T9211] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 231.392754][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 231.649443][ T9229] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 232.322105][ T9255] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.1860 (9255) [ 232.343843][ T9255] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 232.353164][ T9255] BTRFS info (device loop2): force zlib compression, level 3 [ 232.360580][ T9255] BTRFS info (device loop2): allowing degraded mounts [ 232.367409][ T9255] BTRFS info (device loop2): setting nodatasum [ 232.373621][ T9255] BTRFS info (device loop2): allowing degraded mounts [ 232.380414][ T9255] BTRFS info (device loop2): using free space tree [ 232.386962][ T9255] BTRFS info (device loop2): has skinny extents [ 232.695725][ T9255] BTRFS info (device loop2): balance: start -d -m -s [ 232.708408][ T9255] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata [ 232.841813][ T9278] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 232.863490][ T9255] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata [ 232.877172][ T9278] REISERFS (device loop4): using ordered data mode [ 232.921417][ T9278] reiserfs: using flush barriers [ 232.927532][ T9278] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 232.951394][ T9278] REISERFS (device loop4): checking transaction log (loop4) [ 232.960283][ T9278] REISERFS (device loop4): Using r5 hash to sort names [ 232.977380][ T9255] BTRFS info (device loop2): balance: canceled [ 233.074368][ T9294] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 233.085437][ T7] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 233.183076][ T9294] EXT4-fs (loop3): shut down requested (0) [ 233.451307][ T5455] Bluetooth: hci5: command 0xfc11 tx timeout [ 233.452358][ T4206] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 233.510609][ T7] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 233.533525][ T7] usb 2-1: config 0 has no interface number 0 [ 233.545923][ T7] usb 2-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid maxpacket 12032, setting to 64 [ 233.756557][ T4206] Bluetooth: hci4: link tx timeout [ 233.763496][ T7] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 233.772741][ T4206] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 233.780509][ T4206] Bluetooth: hci4: link tx timeout [ 233.785993][ T4206] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.794293][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.802649][ T7] usb 2-1: Product: syz [ 233.806834][ T7] usb 2-1: Manufacturer: syz [ 233.812075][ T7] usb 2-1: SerialNumber: syz [ 233.818388][ T7] usb 2-1: config 0 descriptor?? [ 233.841623][ T9291] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 233.908907][ T9318] set_capacity_and_notify: 6 callbacks suppressed [ 233.908924][ T9318] loop0: detected capacity change from 0 to 256 [ 233.928183][ T9316] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 233.937857][ T9320] binder: 9319:9320 ioctl 40046205 0 returned -22 [ 233.964323][ T9316] xt_hashlimit: max too large, truncated to 1048576 [ 233.971134][ T9316] xt_hashlimit: Unknown mode mask E0, kernel too old? [ 234.021743][ T9318] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 234.103260][ T7] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 234.112594][ T7] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 234.120488][ T7] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 234.172657][ T7] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 234.211069][ T7] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 234.275458][ T7] usb 2-1: USB disconnect, device number 15 [ 234.293651][ T7] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 234.332625][ T7] keyspan 2-1:0.133: device disconnected [ 234.452374][ T9336] loop0: detected capacity change from 0 to 4096 [ 234.510678][ T9336] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 234.610252][ T4190] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 234.624958][ T1111] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 234.758426][ T9346] loop1: detected capacity change from 0 to 64 [ 234.920732][ T9350] loop0: detected capacity change from 0 to 4096 [ 234.981663][ T1111] usb 4-1: not running at top speed; connect to a high speed hub [ 235.086442][ T1111] usb 4-1: config 6 has an invalid interface number: 44 but max is 0 [ 235.098160][ T1111] usb 4-1: config 6 has no interface number 0 [ 235.116700][ T1111] usb 4-1: config 6 interface 44 has no altsetting 0 [ 235.247384][ T9364] loop0: detected capacity change from 0 to 256 [ 235.321643][ T1111] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=be.71 [ 235.330752][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.367360][ T1111] usb 4-1: Product: syz [ 235.375151][ T1111] usb 4-1: Manufacturer: syz [ 235.379793][ T1111] usb 4-1: SerialNumber: syz [ 235.675362][ T9357] loop4: detected capacity change from 0 to 32768 [ 235.771647][ T9380] vxcan0: tx address claim with dest, not broadcast [ 235.872246][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 235.909925][ T9383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1908'. [ 235.923637][ T9383] nbd: illegal input index 65536 [ 235.931900][ T1111] usb 4-1: ignoring: probably an ADSL modem [ 235.978190][ T9365] loop1: detected capacity change from 0 to 32768 [ 236.063155][ T9365] (syz.1.1899,9365,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 236.124168][ T9365] (syz.1.1899,9365,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 236.227698][ T9365] JBD2: Ignoring recovery information on journal [ 236.273986][ T9400] ipt_CLUSTERIP: Please specify destination IP [ 236.385072][ T9365] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 236.395093][ T1111] cxacru 4-1:6.44: usbatm_usb_probe: bind failed: -19! [ 236.411931][ T1111] usb 4-1: USB disconnect, device number 20 [ 236.671224][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 236.799887][ T9413] loop2: detected capacity change from 0 to 8192 [ 236.831777][ T9413] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 236.851866][ T9413] REISERFS (device loop2): using ordered data mode [ 236.869356][ T9413] reiserfs: using flush barriers [ 236.906823][ T9413] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 236.950762][ T9413] REISERFS (device loop2): checking transaction log (loop2) [ 237.215156][ T9413] REISERFS (device loop2): Using tea hash to sort names [ 237.239087][ T9413] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 237.426427][ T9428] mkiss: ax0: crc mode is auto. [ 237.489681][ T9431] loop0: detected capacity change from 0 to 2048 [ 237.617446][ T9432] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 237.809530][ T4190] ------------[ cut here ]------------ [ 237.815787][ T4190] WARNING: CPU: 1 PID: 4190 at fs/nilfs2/dat.c:200 nilfs_dat_commit_end+0x5ac/0x6b0 [ 237.825897][ T4190] Modules linked in: [ 237.829918][ T4190] CPU: 1 PID: 4190 Comm: syz-executor Not tainted syzkaller #0 [ 237.837573][ T4190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 237.847728][ T4190] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 237.853778][ T4190] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c8 54 03 00 e8 03 45 6a fe e8 2e 79 f1 fd e9 b8 fc ff ff e8 f4 44 6a fe <0f> 0b e9 16 fc ff ff e8 e8 44 6a fe e8 13 79 f1 fd e9 74 fe ff ff [ 237.873473][ T4190] RSP: 0018:ffffc900022d7840 EFLAGS: 00010293 [ 237.879602][ T4190] RAX: ffffffff830f03fc RBX: ffff8880783691a0 RCX: ffff888079e4d940 [ 237.887641][ T4190] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000006000002 [ 237.895688][ T4190] RBP: 0000000000000003 R08: ffff8880632998d3 R09: 1ffff1100c65331a [ 237.903729][ T4190] R10: dffffc0000000000 R11: ffffed100c65331b R12: ffff888079e4f0c8 [ 237.911779][ T4190] R13: ffff888076e02820 R14: 0000000006000002 R15: ffffc900022d78f8 [ 237.919771][ T4190] FS: 000055558f12e500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 237.928781][ T4190] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.935416][ T4190] CR2: 000055558f159ab8 CR3: 000000006342e000 CR4: 00000000003506e0 [ 237.943438][ T4190] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 237.951474][ T4190] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 237.959487][ T4190] Call Trace: [ 237.962830][ T4190] [ 237.965784][ T4190] nilfs_direct_delete+0x287/0x2e0 [ 237.970930][ T4190] ? nilfs_direct_insert+0x4c0/0x4c0 [ 237.976290][ T4190] nilfs_bmap_truncate+0x2e6/0x560 [ 237.981480][ T4190] ? nilfs_bmap_delete+0x3c0/0x3c0 [ 237.986637][ T4190] ? __up_read+0x2b2/0x6b0 [ 237.991088][ T4190] ? up_read+0x20/0x20 [ 237.995276][ T4190] ? nilfs_bmap_last_key+0x10a/0x120 [ 238.000595][ T4190] nilfs_truncate_bmap+0x1ad/0x320 [ 238.005782][ T4190] ? nilfs_update_inode+0x1d0/0x1d0 [ 238.011025][ T4190] ? nilfs_transaction_begin+0x527/0x710 [ 238.016772][ T4190] nilfs_evict_inode+0x210/0x4b0 [ 238.021771][ T4190] ? nilfs_set_file_dirty+0x400/0x400 [ 238.027184][ T4190] ? do_raw_spin_unlock+0x11d/0x230 [ 238.032482][ T4190] ? nilfs_set_file_dirty+0x400/0x400 [ 238.037890][ T4190] evict+0x4c9/0x8d0 [ 238.041883][ T4190] ? proc_nr_inodes+0x320/0x320 [ 238.046805][ T4190] ? do_raw_spin_unlock+0x11d/0x230 [ 238.052080][ T4190] ? _raw_spin_unlock+0x24/0x40 [ 238.056958][ T4190] ? iput+0x706/0x8a0 [ 238.060975][ T4190] do_unlinkat+0x3e7/0x710 [ 238.065494][ T4190] ? __virt_addr_valid+0x3c6/0x470 [ 238.070642][ T4190] ? fsnotify_link_count+0xf0/0xf0 [ 238.075845][ T4190] ? strncpy_from_user+0x1fb/0x360 [ 238.081028][ T4190] ? getname_flags+0x1fe/0x500 [ 238.085891][ T4190] __x64_sys_unlink+0x45/0x50 [ 238.090597][ T4190] do_syscall_64+0x4c/0xa0 [ 238.095132][ T4190] ? clear_bhb_loop+0x30/0x80 [ 238.099857][ T4190] ? clear_bhb_loop+0x30/0x80 [ 238.104653][ T4190] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 238.110578][ T4190] RIP: 0033:0x7fc3d558af47 [ 238.115112][ T4190] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 238.134804][ T4190] RSP: 002b:00007fffe6125928 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 238.143318][ T4190] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc3d558af47 [ 238.151360][ T4190] RDX: 00007fffe6125950 RSI: 00007fffe61259e0 RDI: 00007fffe61259e0 [ 238.159376][ T4190] RBP: 00007fffe61259e0 R08: 00007fffe61269e0 R09: 00000000ffffffff [ 238.167463][ T4190] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fffe6126ad0 [ 238.175493][ T4190] R13: 00007fc3d56211ca R14: 000000000003a04d R15: 00007fffe6128c90 [ 238.183580][ T4190] [ 238.186632][ T4190] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 238.193927][ T4190] CPU: 1 PID: 4190 Comm: syz-executor Not tainted syzkaller #0 [ 238.201502][ T4190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 238.211577][ T4190] Call Trace: [ 238.214872][ T4190] [ 238.217828][ T4190] dump_stack_lvl+0x188/0x250 [ 238.222528][ T4190] ? show_regs_print_info+0x20/0x20 [ 238.227750][ T4190] ? load_image+0x400/0x400 [ 238.235853][ T4190] panic+0x2e5/0x810 [ 238.239799][ T4190] ? bpf_jit_dump+0xd0/0xd0 [ 238.244401][ T4190] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 238.249802][ T4190] __warn+0x248/0x2b0 [ 238.253799][ T4190] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 238.259209][ T4190] report_bug+0x1b7/0x2e0 [ 238.263585][ T4190] handle_bug+0x3a/0x70 [ 238.267781][ T4190] exc_invalid_op+0x16/0x40 [ 238.272306][ T4190] asm_exc_invalid_op+0x16/0x20 [ 238.277175][ T4190] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 238.283170][ T4190] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c8 54 03 00 e8 03 45 6a fe e8 2e 79 f1 fd e9 b8 fc ff ff e8 f4 44 6a fe <0f> 0b e9 16 fc ff ff e8 e8 44 6a fe e8 13 79 f1 fd e9 74 fe ff ff [ 238.302874][ T4190] RSP: 0018:ffffc900022d7840 EFLAGS: 00010293 [ 238.308963][ T4190] RAX: ffffffff830f03fc RBX: ffff8880783691a0 RCX: ffff888079e4d940 [ 238.316968][ T4190] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000006000002 [ 238.324957][ T4190] RBP: 0000000000000003 R08: ffff8880632998d3 R09: 1ffff1100c65331a [ 238.332950][ T4190] R10: dffffc0000000000 R11: ffffed100c65331b R12: ffff888079e4f0c8 [ 238.340947][ T4190] R13: ffff888076e02820 R14: 0000000006000002 R15: ffffc900022d78f8 [ 238.348955][ T4190] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 238.354392][ T4190] nilfs_direct_delete+0x287/0x2e0 [ 238.359537][ T4190] ? nilfs_direct_insert+0x4c0/0x4c0 [ 238.364857][ T4190] nilfs_bmap_truncate+0x2e6/0x560 [ 238.370013][ T4190] ? nilfs_bmap_delete+0x3c0/0x3c0 [ 238.375150][ T4190] ? __up_read+0x2b2/0x6b0 [ 238.379601][ T4190] ? up_read+0x20/0x20 [ 238.383699][ T4190] ? nilfs_bmap_last_key+0x10a/0x120 [ 238.389008][ T4190] nilfs_truncate_bmap+0x1ad/0x320 [ 238.394155][ T4190] ? nilfs_update_inode+0x1d0/0x1d0 [ 238.399383][ T4190] ? nilfs_transaction_begin+0x527/0x710 [ 238.405054][ T4190] nilfs_evict_inode+0x210/0x4b0 [ 238.410026][ T4190] ? nilfs_set_file_dirty+0x400/0x400 [ 238.415436][ T4190] ? do_raw_spin_unlock+0x11d/0x230 [ 238.420659][ T4190] ? nilfs_set_file_dirty+0x400/0x400 [ 238.426064][ T4190] evict+0x4c9/0x8d0 [ 238.430002][ T4190] ? proc_nr_inodes+0x320/0x320 [ 238.434972][ T4190] ? do_raw_spin_unlock+0x11d/0x230 [ 238.440199][ T4190] ? _raw_spin_unlock+0x24/0x40 [ 238.445101][ T4190] ? iput+0x706/0x8a0 [ 238.449106][ T4190] do_unlinkat+0x3e7/0x710 [ 238.453548][ T4190] ? __virt_addr_valid+0x3c6/0x470 [ 238.458692][ T4190] ? fsnotify_link_count+0xf0/0xf0 [ 238.463826][ T4190] ? strncpy_from_user+0x1fb/0x360 [ 238.468971][ T4190] ? getname_flags+0x1fe/0x500 [ 238.473815][ T4190] __x64_sys_unlink+0x45/0x50 [ 238.478533][ T4190] do_syscall_64+0x4c/0xa0 [ 238.483031][ T4190] ? clear_bhb_loop+0x30/0x80 [ 238.487734][ T4190] ? clear_bhb_loop+0x30/0x80 [ 238.492435][ T4190] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 238.498348][ T4190] RIP: 0033:0x7fc3d558af47 [ 238.502890][ T4190] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 238.522525][ T4190] RSP: 002b:00007fffe6125928 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 238.530978][ T4190] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc3d558af47 [ 238.538975][ T4190] RDX: 00007fffe6125950 RSI: 00007fffe61259e0 RDI: 00007fffe61259e0 [ 238.546982][ T4190] RBP: 00007fffe61259e0 R08: 00007fffe61269e0 R09: 00000000ffffffff [ 238.555001][ T4190] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fffe6126ad0 [ 238.563053][ T4190] R13: 00007fc3d56211ca R14: 000000000003a04d R15: 00007fffe6128c90 [ 238.571080][ T4190] [ 238.574468][ T4190] Kernel Offset: disabled [ 238.579217][ T4190] Rebooting in 86400 seconds..