last executing test programs: 17m14.230319838s ago: executing program 1 (id=1474): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000004c0)={0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}) 17m13.76544389s ago: executing program 1 (id=1479): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x400}) ioctl$UFFDIO_CONTINUE(r0, 0xc028aa05, &(0x7f0000000140)={{&(0x7f0000032000/0x4000)=nil, 0x4000}, 0xffffdffce000}) 17m13.338650249s ago: executing program 1 (id=1481): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)={[{@grpquota}]}) 17m12.912400461s ago: executing program 1 (id=1485): prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000380)={0x0, 0xadf3, 0x1, 0x1, 0xc3}, 0x0, 0x0, 0x0) pause() 17m11.716389922s ago: executing program 1 (id=1496): r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x10) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 17m11.475302364s ago: executing program 1 (id=1499): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r0, 0x0) 16m56.309243431s ago: executing program 32 (id=1499): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r0, 0x0) 5.929536631s ago: executing program 0 (id=11246): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x176, 0x4) sendmmsg$inet(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000100)={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0}}], 0x1, 0x24008804) 5.723421726s ago: executing program 0 (id=11248): r0 = syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./bus\x00', 0x1004010, &(0x7f0000001040)=ANY=[], 0x11, 0xadc, &(0x7f0000000340)="$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") r1 = syz_mount_image$vfat(&(0x7f0000006600), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x3b4a468, &(0x7f0000002200)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRESOCT=r0, @ANYRESHEX, @ANYRESDEC=r0, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938f8ec34f72c1e0b3e6540dc1e44beac32958b12631708d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81f2c63fe27bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a9774c2c8ac5046d59c86dbd5165e6e447586", @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="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", @ANYRES8=r1, @ANYRESHEX, @ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYRES8=r1], 0xb, 0x0, &(0x7f0000000000)) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.967884854s ago: executing program 0 (id=11255): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x3a, 0x33, @action={{{}, {0x8}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0x400}}, @tdls_chsw_resp={0xc, 0x6, {0x65, {0x65, 0x12, {@from_mac=@device_b, @device_a, @broadcast}}, {0x68, 0x4, {0x0, 0xfae9}}}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x776b6f2b6ca901b3}, 0x0) 4.490360217s ago: executing program 5 (id=11258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r1, 0x917, 0x70bd28, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x3c}, 0x1, 0x620b}, 0x0) 4.131171604s ago: executing program 0 (id=11262): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000200)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400008000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x16, 0xc49, &(0x7f0000001cc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r0, 0xa75) write$P9_RVERSION(r0, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7fffffff, 0x8, '9P2000.L'}, 0x15) 4.06140964s ago: executing program 5 (id=11265): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x8982) r1 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0x22) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)=0x2) 3.728667662s ago: executing program 4 (id=11268): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x8, 0x101002) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48e1, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000001]}}) 3.71186928s ago: executing program 5 (id=11269): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x70bd28, 0x25dfd402, {0x0, 0x0, 0x0, r2, 0x64e98, 0x12ac1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) 3.703572893s ago: executing program 2 (id=11270): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r2, @ANYBLOB="48003080140004000000000000f4ffff0a000000000000002800018008000100000000001c00038006000100feff000006000100000300000000020001000000050001"], 0xff51}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.486567706s ago: executing program 6 (id=11271): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x200000d4) 3.196616957s ago: executing program 0 (id=11272): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x4}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x100000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) 3.12340831s ago: executing program 2 (id=11273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 2.984696379s ago: executing program 4 (id=11274): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x7, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MIN_RATE64={0x4}]}}}]}, 0x8c}}, 0x20004000) 2.926925575s ago: executing program 6 (id=11275): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0}) close(0x3) close_range(r0, 0xffffffffffffffff, 0x0) 2.889453192s ago: executing program 5 (id=11276): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRES64], 0x1, 0x153b, &(0x7f0000000a00)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x10, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x20}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa}}}}}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 2.626250798s ago: executing program 2 (id=11277): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000500)='l', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7, 0x30, 0x5, 0x5}, &(0x7f00000000c0)=0x18) 2.507994474s ago: executing program 4 (id=11278): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) pwrite64(r0, &(0x7f0000000140)='2', 0xfe34, 0xe7c) 2.487873108s ago: executing program 6 (id=11279): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='nfsd ::7.0.0.1 2000000000 domain\n', 0x21) 2.315428266s ago: executing program 3 (id=11280): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000240)={0x23, 0x30, 0x0, 0x36}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000100)={0x23, 0x30}, 0x10) 2.196770301s ago: executing program 5 (id=11281): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="71756f74612c696f636861727365743d63703433372c6e6f71756f74612c6572726f72733d636f6e74696e75652c646973636172643d307830303030303030303030303030000001006572726f72733d636f6e74696e75652c71756f74612c646973636172642c67727071756f74612c00"], 0x1, 0x60ed, &(0x7f00000048c0)="$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") chdir(&(0x7f000000aac0)='./file0\x00') setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) 1.998079268s ago: executing program 6 (id=11282): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1000040, &(0x7f0000000700)={[{@jqfmt_vfsv0}, {@nouid32}, {@noblock_validity}, {@nodelalloc}, {@inlinecrypt}, {@nouid32}, {@nomblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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") r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000005b00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000080)='./file1\x00', r1, r2) 1.827197617s ago: executing program 2 (id=11283): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000280)={0x0, 0x2}, 0x8) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x4008af13, &(0x7f0000000280)) 1.764426202s ago: executing program 4 (id=11284): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='base=0x0 size=0x40000000 type=write-back\n\x00', 0x29) 1.681476652s ago: executing program 3 (id=11285): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='source\x00', &(0x7f0000000080)='127.0.rt\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.41361802s ago: executing program 3 (id=11286): link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x6e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) 1.286955131s ago: executing program 0 (id=11287): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@nombcache}]}, 0x6, 0x623, &(0x7f0000000e00)="$eJzs3c9rG1ceAPDvSJZjJ951sizLJuyyhj0ksMSxsmGz7aVJemgOgQaaQyk9xMR2aqL8IHagdgNxoIcWWiil11Jy6T/Qe8m9t1Joe+u5kJaS0pa2RGWkkSPLki1sS0o8nw/ImvfeWO99NX6aNzN+mgByayL9UYg4GPHoYhIx3lQ2FvXCiWy9hz/cvpQ+kqhWX/o+iSTLa6yfZM/7ssRIRHx+JuIvxfX1LiwtX5muVOvuRBxbvHrj2MLS8tH5q9OXZy/PXisf//+Jk1PPlE+UdyTOfdnz2XMv/uPdN1/739wXlaNJnIoLpTdmoiWOnTIRE/EoC7E5fygiTqYLbd6Xp80uCCHXitnfYyki/hbjUayl6sZj/p2BNg7oqWoxogrkVKL/Q041xgGNY/vujoMv9HhU0j8PTtcPgNbHP1Q/NxIjtWOjvQ+TpiOjodq5jf07UH9ax++3D32YPmLNeYifV7fO0A7U08nK3Yj4e7v4k1rb9tciTeMvrGlHEhFTETGcte/5bbQhaVruxXmYjWw1/kJEnMqe0/wzW6x/oiXd7/gByKf7p7Md+Uqaerz/S8cejfFPrBv/1K8Nte67tmLQ+7/O47/G/n6kdo680DIOS8cs59u/ZKk145u3z77fqf7m8V/6SOtvjAX74cHdiEMt8b+VBpuNf9L4kzbbP13l4qnu6njhy+/OdiobdPzVexGH2x7/PB6Vpkut1ydHs7LyifKxufnK7FT9Z9s6Pv3s1Y871T/o+NPtv7dD/E3bv9D6e+l7cqPLOj45f+9qp7KxTeMvfDuc1I83h7Oc16cXF2+WI4aTc9kq9QtZtfzjG7elsU7jNdL4j/y7ff9f8/d/d+3rjDY+Mrtw4+UrDzuVbWX7N11MflTtsg2dpPHPbL791/X/NO+91dSdDev46ZVb/+xUtlH8o9uMDQAAAAAAAPKmULsGmxQmV5cLhcnJ+nzZv8beQuX6wuJ/5q7fujYTcaT2/5ClQuNK93g9naTpcvb/sI308Zb0fyPiQER8UBytpScvXa/MDDp4AAAAAAAAAAAAAAAAAAAAeELsy+b/N+5T/WOxPv8fyIle3mAOeLLp/5Bftf6/7hZPQB7Y/0N+6f+QX/o/5Jf+D/ml/0N+6f+QX/o/5Jf+DwAAAAC70oF/3f86iYiVZ0drj9RwVmZGEOxupUE3ABiY4qAbAAzM6qV/g33Ina7G/79mXw7Y++YAA5C0y6wNDqobd/77bX8TAAAAAAAAAAAAAOiBwwfbz/9PzA2GXc+0P8ivbcz/99UB8JTz1f+QX47xgc1m8Y90KjD/HwAAAAAAAAAAAAD6Zqz2SAqT2VzgsSgUJicj/hQR+6OUzM1XZqci4s8R8VWxtCdNlwfdaAAAAAAAAAAAAAAAAAAAANhlFpaWr0xXKrM3mxd+W5ezuxcad0HtQ13PRdcrN2651v+3ZTSttZFTiui+zb1e2JO9J9t5naGFpeXkl2pNErEST06AbeKKkQG1Z9OPjuGefSgBAAAAAAAAAAAAAAAAAEBONc09bu/QR31uEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD03+P7//duYdAxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPpz8CAAD//6kMOeE=") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x8}}, {@init_itable}, {@block_validity}, {@debug}, {@bh}, {@nojournal_checksum}]}, 0x1, 0x479, &(0x7f0000000dc0)="$eJzs3LtvW9UfAPCvr2M36a/9pZTyaGkhUBAVgqRJH3RgKQKJASQkGIqYQhqqUpeiJgONIggMYUSV2BEjEn8BC2VBwITECjtCilAWCpPRta8fSew8jF2X+PORbJ/jc+xzvvfhe3yurwMYWGPpXS5iX0T8EhGj1ezaCmPVh9urizN/rS7O5KJcfu2PXKXen6uLM7Wqtdf9r5oplzdpd/nNiOlSafZ6lp+Yv/rexFwxy12afXfq3NzpU8eKZ6fOdCXO/Wlfj3xw7ejhl964+crMhZtv/fBV2t99WXlzHN0yVl26LT3R7cb6bH9TOjfUx46wI/mISFdXobL/j0Y+Ruplo/Hix33tHNBT5XJS3tO+eKkM7GLpQB0YRLUDffr9t3ZL8yN3ZvjRdyvnoz6PcTu7VUuGIsnqFLLvSL0wFhEXlv7+/MJwNd+LeQgAgGa3zkfE0xvHfxFJ3N9U7//ZuaEDEXFPRByMiHsj4lBE3BdRqftARDy4w/bXnyHZOP4pj3YU2Dal47/nsnNba8d/tdFfHMhnuf2V+Au5ty+XZk9my+REFPak+cnGWxbWt/HtCz9/2q79+vgvu6Xtp4+NGsnvQ+sm6C5Oz0/H+vN0HVr5KOLIUCP+4Xr8ufqYN23ncEQc6bCNy099ebRd2dbxb6ILg/LyFxFPVtf/UqxZ/42lm6ufn7yx8Mzlq9OXZivnJ8+dPjX57NmpMxPDUZo9OVHbKjb68aflV9u1/6/i74KVW+XY23L7r8d/IDccMXdj4UrlfO3czttY/vWTtt9pOt3+i7nXK+li/S4iJiOKuZej+an3p+fnr081XlvLVx4nq9v/ieOt9/+D0VgSD0VEuhEfi4iHI+KRrO+PRsRjEXF8k/i/f/7xd3Ye/yaz8l2Uxn9xq/Ufzet/y8RCRKx5Jn/lu693Hn9Nuv5PV1Insmdqn3+b2VZPO9qaAQAA4L8nqfwGPpeM19NJMj5e/Q3/odiblK4N1+vuq85/Js0zXbX50MlsbriWn1qXP5XNG3+WH6nkx2eulS72LWogsmt1Wu3/qd/y/e4d0HOu14LBZf8HgMHj+A+Dy/4Pg6vV/v9hH/oB3HlbHP8H5b8AYCAZ/8PgarP/9/TCa+Du4PgPA6nVtfH5iCglaVFaY5sX0m8rMRLdeZ/dlih27Q2/iYildLX1vM+R3BWLbhclCtGyaGjbf2bRYWJPy6J+fzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xz8BAAD//+380FY=") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x224061, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) 1.203404253s ago: executing program 2 (id=11289): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0x8}, {0x7, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x40, 0x2, [@TCA_FW_ACT={0x3c, 0x4, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 1.101178594s ago: executing program 3 (id=11290): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r1, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x5, 0xffe0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4041810}, 0x0) 1.049100261s ago: executing program 6 (id=11291): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000280)={0x400, r0, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000180)=0x6) 998.580054ms ago: executing program 4 (id=11292): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='[', 0x1) 463.34444ms ago: executing program 3 (id=11293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_b}, @delba={0x3, 0x2, {{0x0, 0x0, 0x2}, 0x3e, {0xbd, 0x6, @device_b}}}}}]}, 0x48}}, 0x0) 412.501121ms ago: executing program 4 (id=11294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01062cbd7000fddbdf258200000008000300", @ANYRES32=r2], 0x1c}}, 0x20040844) 296.315238ms ago: executing program 2 (id=11295): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) io_setup(0x2e, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 2.990528ms ago: executing program 5 (id=11296): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000100)=[0x0, 0x0], 0x18e}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.139958ms ago: executing program 6 (id=11308): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setrlimit(0x7, &(0x7f0000000280)={0x5, 0x9}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) 0s ago: executing program 3 (id=11297): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r2, &(0x7f0000000200), 0x0}, 0x20) kernel console output (not intermixed with test programs): 0000-000000000000. [ 1147.658844][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 1147.694592][ T29] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1147.780473][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1147.834864][ T29] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1147.885152][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.942922][ T29] usb 5-1: config 0 descriptor?? [ 1148.114420][T29719] IPVS: ip_vs_add_dest(): server weight less than zero [ 1148.431323][ T29] zydacron 0003:13EC:0006.006F: unbalanced collection at end of report description [ 1148.465682][ T29] zydacron 0003:13EC:0006.006F: parse failed [ 1148.500620][ T29] zydacron 0003:13EC:0006.006F: probe with driver zydacron failed with error -22 [ 1148.692152][T25619] usb 5-1: USB disconnect, device number 50 [ 1149.043305][T29746] loop6: detected capacity change from 0 to 2048 [ 1149.067472][T29746] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1149.153232][T29749] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1149.598720][ T29] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1149.775702][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.810168][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1149.866659][ T29] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1149.905186][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.943554][ T29] usb 4-1: config 0 descriptor?? [ 1150.046242][T29770] xt_hashlimit: size too large, truncated to 1048576 [ 1150.432338][ T29] hkems 0003:2006:0118.0070: item fetching failed at offset 5/7 [ 1150.470437][T29787] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10035'. [ 1150.472241][ T29] hkems 0003:2006:0118.0070: parse failed [ 1150.545402][ T29] hkems 0003:2006:0118.0070: probe with driver hkems failed with error -22 [ 1150.754427][ T29] usb 4-1: USB disconnect, device number 48 [ 1150.839633][T29796] loop6: detected capacity change from 0 to 256 [ 1150.895857][T29796] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 1151.004634][T29796] exFAT-fs (loop6): error, data valid size is invalid(-281474976706560) [ 1151.034817][T29796] exFAT-fs (loop6): error, data valid size is invalid(-281474976706560) [ 1151.071919][T29802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10042'. [ 1151.552758][T29816] loop6: detected capacity change from 0 to 256 [ 1151.589014][T29816] exfat: Deprecated parameter 'utf8' [ 1151.638369][T29821] netlink: 'syz.3.10051': attribute type 2 has an invalid length. [ 1151.683094][T29816] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 1151.900165][T29826] loop0: detected capacity change from 0 to 256 [ 1151.912717][T29827] loop4: detected capacity change from 0 to 512 [ 1151.949920][T29826] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 1152.011535][T29827] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1152.036462][T29826] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1152.049065][T29827] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1152.055652][T29826] exFAT-fs (loop0): failed to load alloc-bitmap [ 1152.062706][T29826] exFAT-fs (loop0): failed to recognize exfat type [ 1152.103140][T29830] loop3: detected capacity change from 0 to 256 [ 1152.160248][T29827] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #16: comm syz.4.10053: invalid orphan symlink nlink 2 [ 1152.214554][T29827] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1152.216735][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1152.221479][T29826] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 1152.225938][ C0] EXT4-fs (loop4): initial error at time 1785570679: ext4_orphan_get:1399: inode 16 [ 1152.253815][ C0] EXT4-fs (loop4): last error at time 1785570679: ext4_orphan_get:1399: inode 16 [ 1152.260600][T29826] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1152.272848][T29827] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.10053: couldn't read orphan inode 16 (err -117) [ 1152.272907][T29827] loop4: lost filesystem error report for type 5 error -117 [ 1152.294173][T29830] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 1152.354625][T29826] exFAT-fs (loop0): failed to load alloc-bitmap [ 1152.367318][T29826] exFAT-fs (loop0): failed to recognize exfat type [ 1152.384063][T29827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1152.536318][T29827] EXT4-fs warning (device loop4): ext4_resize_begin:81: There are errors in the filesystem, so online resizing is not allowed [ 1152.740917][T29842] loop5: detected capacity change from 0 to 1024 [ 1152.804798][ T5640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1152.833376][T29842] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1152.951079][ T29] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1153.025140][T29842] EXT4-fs error (device loop5): ext4_generic_delete_entry:2672: inode #2: block 16: comm syz.5.10060: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 1153.060725][T29842] EXT4-fs error (device loop5) in ext4_delete_entry:2744: Corrupt filesystem [ 1153.081006][T29842] EXT4-fs warning (device loop5): ext4_rename_delete:3737: inode #2: comm syz.5.10060: Deleting old file: nlink 1, error=-117 [ 1153.130134][ T29] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.154347][ T29] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1153.170544][ T29] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1153.178850][ T5634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1153.181624][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.381586][T29861] loop4: detected capacity change from 0 to 1024 [ 1153.465050][ T29] cxacru 4-1:1.0: invalid response length to cm 0x90: 1 [ 1153.489292][ T29] cxacru 4-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 1153.504936][ T29] cxacru 4-1:1.0: probe with driver cxacru failed with error -22 [ 1153.705970][ T29] usb 4-1: USB disconnect, device number 49 [ 1154.445647][T29885] loop4: detected capacity change from 0 to 8 [ 1154.541066][T29885] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1154.568393][T29885] SQUASHFS error: Failed to read block 0x13e: -5 [ 1154.585250][T29885] SQUASHFS error: Unable to read metadata cache entry [13c] [ 1154.621608][T29885] SQUASHFS error: Unable to read directory block [13c:26] [ 1154.809244][T29895] loop5: detected capacity change from 0 to 2048 [ 1154.840093][T29895] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1154.935288][ T5649] udevd[5649]: incorrect nilfs2 checksum on /dev/loop5 [ 1154.972188][T29895] NILFS error (device loop5): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 1155.084513][ T5649] udevd[5649]: incorrect nilfs2 checksum on /dev/loop5 [ 1155.286771][ T5777] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1155.460337][ T5777] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1155.476819][ T5777] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1155.497927][ T5777] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1155.534799][ T5777] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1155.555363][ T5777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.574094][ T5777] usb 3-1: Product: syz [ 1155.586950][ T5777] usb 3-1: Manufacturer: syz [ 1155.605015][ T5777] usb 3-1: SerialNumber: syz [ 1155.649247][ T5777] hub 3-1:1.0: bad descriptor, ignoring hub [ 1155.676844][ T5777] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1155.883955][ T5777] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 56 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1156.146919][ T5777] usb 3-1: reset high-speed USB device number 56 using dummy_hcd [ 1156.332870][T29930] geneve0: entered promiscuous mode [ 1156.366008][T29930] geneve0: left promiscuous mode [ 1156.827161][ T188] usb 3-1: USB disconnect, device number 56 [ 1156.858071][ T188] usblp0: removed [ 1156.954922][T29949] netlink: 'syz.3.10106': attribute type 62 has an invalid length. [ 1157.505944][T29959] loop2: detected capacity change from 0 to 1024 [ 1157.757173][T29952] loop5: detected capacity change from 0 to 32768 [ 1157.802274][T29952] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.10107 (29952) [ 1157.880697][T29952] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1157.911103][T29952] BTRFS info (device loop5): using crc32c checksum algorithm [ 1158.182250][T29952] BTRFS info (device loop5): enabling ssd optimizations [ 1158.249244][T29952] BTRFS info (device loop5): turning on flush-on-commit [ 1158.266819][T29952] BTRFS info (device loop5): enabling free space tree [ 1158.290957][T29984] loop4: detected capacity change from 0 to 1764 [ 1158.349259][T29952] BTRFS info (device loop5): enabling auto defrag [ 1158.380460][T29952] BTRFS info (device loop5): use lzo compression, level 1 [ 1158.431120][T29984] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1158.453131][T29952] BTRFS info (device loop5): max_inline set to 4096 [ 1159.013721][ T5634] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1159.027392][T30001] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10123'. [ 1159.833078][T30015] team0: Cannot enslave team device to itself [ 1160.080207][T30025] loop4: detected capacity change from 0 to 22 [ 1160.137607][T30025] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1160.250576][T30025] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1160.443808][T30033] UHID_CREATE from different security context by process 3604 (syz.5.10137), this is not allowed. [ 1161.389793][T30055] loop3: detected capacity change from 0 to 1024 [ 1161.411371][T30054] loop2: detected capacity change from 0 to 2048 [ 1161.699937][T30067] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 1162.122006][T30072] loop2: detected capacity change from 0 to 4096 [ 1162.157388][T30072] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1164.005746][T30124] loop0: detected capacity change from 0 to 128 [ 1164.052837][T30124] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1164.087062][T30124] hpfs: filesystem error: improperly stopped [ 1164.131481][T30124] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1164.151396][T30126] loop2: detected capacity change from 0 to 512 [ 1164.185734][T30124] hpfs: You really don't want any checks? You are crazy... [ 1164.211040][T30126] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1164.233186][T30124] hpfs: hpfs_map_sector(): read error [ 1164.236530][T30106] loop4: detected capacity change from 0 to 40427 [ 1164.260816][T30106] f2fs: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777017777777777777777777770xffffffffffffffff' [ 1164.264353][T30124] hpfs: code page support is disabled [ 1164.302190][T30124] hpfs: hpfs_map_4sectors(): unaligned read [ 1164.362872][T30126] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4221: comm syz.2.10181: Allocating blocks 41-42 which overlap fs metadata [ 1164.381650][T30124] hpfs: hpfs_map_4sectors(): unaligned read [ 1164.400506][T30124] hpfs: filesystem error: unable to find root dir [ 1164.421618][T30126] loop2: lost filesystem error report for type 5 error -117 [ 1164.427203][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1164.441051][ C0] EXT4-fs (loop2): initial error at time 1785570692: ext4_mb_mark_diskspace_used:4221 [ 1164.450685][ C0] EXT4-fs (loop2): last error at time 1785570692: ext4_mb_mark_diskspace_used:4221 [ 1164.461702][T30126] EXT4-fs (loop2): Remounting filesystem read-only [ 1164.469125][T30126] Quota error (device loop2): write_blk: dquota write failed [ 1164.477449][T30126] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 1164.487073][T30126] Quota error (device loop2): write_blk: dquota write failed [ 1164.494695][T30126] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1164.506159][T30126] EXT4-fs (loop2): 1 truncate cleaned up [ 1164.514935][T30124] hpfs: hpfs_map_4sectors(): unaligned read [ 1164.538807][T30126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1164.577934][T30124] hpfs: hpfs_map_sector(): read error [ 1164.983655][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.355868][T30122] loop3: detected capacity change from 0 to 32768 [ 1165.413863][T30122] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1165.546434][T30122] XFS (loop3): Ending clean mount [ 1165.609989][T30158] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10190'. [ 1165.669340][ T29] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1165.680600][T30160] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10190'. [ 1165.722583][ T31] audit: type=1800 audit(1785570693.356:290): pid=30122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10178" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 1165.859096][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 1165.879782][ T29] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1165.909664][ T29] usb 5-1: config 0 has no interface number 0 [ 1165.925634][ T29] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1165.944021][ T5631] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1165.965099][ T29] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1166.023504][ T29] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1166.092232][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.142873][ T29] usb 5-1: config 0 descriptor?? [ 1166.831931][T30180] loop2: detected capacity change from 0 to 4096 [ 1166.850451][ T29] uclogic 0003:28BD:0094.0071: pen parameters not found [ 1166.873636][ T29] uclogic 0003:28BD:0094.0071: interface is invalid, ignoring [ 1166.894405][T30180] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1167.025725][T30180] ntfs3(loop2): ino=19, mi_enum_attr [ 1167.060342][T30180] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1167.092814][T30189] loop0: detected capacity change from 0 to 1024 [ 1167.104928][T30180] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 1167.153927][ T188] usb 5-1: USB disconnect, device number 51 [ 1167.390636][ T3275] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1167.441321][T30194] loop3: detected capacity change from 0 to 764 [ 1168.576872][ T5777] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1168.681930][T30225] usbcore.quirks: string doesn't fit in 127 chars. [ 1168.762784][ T5777] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1168.795873][ T5777] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1168.825773][ T5777] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1168.855391][ T5777] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1168.874152][ T5777] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.892054][ T5777] usb 5-1: Product: syz [ 1168.900824][ T5777] usb 5-1: Manufacturer: syz [ 1168.911085][ T5777] usb 5-1: SerialNumber: syz [ 1168.936047][ T5777] hub 5-1:1.0: bad descriptor, ignoring hub [ 1168.969390][ T5777] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1169.173082][ T5777] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1169.406939][ T5777] usb 5-1: reset high-speed USB device number 52 using dummy_hcd [ 1169.504081][T30231] loop0: detected capacity change from 0 to 1024 [ 1169.535834][T30234] bond0: entered promiscuous mode [ 1169.562285][T30234] bond_slave_0: entered promiscuous mode [ 1169.579964][T30234] bond_slave_1: entered promiscuous mode [ 1169.611941][T30234] batadv0: entered promiscuous mode [ 1169.711224][T30234] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1169.802133][T30234] bond0: left promiscuous mode [ 1169.830465][T30234] bond_slave_0: left promiscuous mode [ 1169.870129][T30234] bond_slave_1: left promiscuous mode [ 1169.912091][T30234] batadv0: left promiscuous mode [ 1170.037088][ T29] usb 5-1: USB disconnect, device number 52 [ 1170.073942][ T29] usblp0: removed [ 1170.723581][T20873] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 1170.795448][T20873] hid-generic 0000:0000:0000.0072: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1171.363315][T30270] loop9: detected capacity change from 0 to 7 [ 1171.406513][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1171.416298][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1171.457680][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1171.467414][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1171.477339][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1171.487037][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1171.499327][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1171.509117][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1171.522539][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1171.532230][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1171.544962][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1171.554802][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1171.576997][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1171.586663][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1171.594588][T30270] ldm_validate_partition_table(): Disk read failed. [ 1171.623311][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1171.633079][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1171.643561][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1171.653268][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1171.663340][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1171.673019][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1171.703359][T30270] Dev loop9: unable to read RDB block 0 [ 1171.732087][T30270] loop9: unable to read partition table [ 1171.747578][T30270] loop9: partition table beyond EOD, truncated [ 1171.758554][T30270] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1172.903250][T30303] loop2: detected capacity change from 0 to 2048 [ 1172.962047][T30303] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1173.080076][T30312] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1173.256565][T30314] MTRR 2 not used [ 1173.373775][T30316] loop4: detected capacity change from 0 to 1024 [ 1173.386217][T30316] EXT4-fs: Ignoring removed bh option [ 1173.403104][T30316] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1173.465650][T30316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1173.705490][ T5640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.902039][T30328] loop2: detected capacity change from 0 to 512 [ 1173.942519][T30328] EXT4-fs: Ignoring removed bh option [ 1173.966650][T30328] EXT4-fs error (device loop2): ext4_iget_extra_inode:5179: inode #15: comm syz.2.10271: corrupted in-inode xattr: e_value size too large [ 1174.039640][T30328] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1174.040221][T30328] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.10271: couldn't read orphan inode 15 (err -117) [ 1174.049477][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1174.049513][ C1] EXT4-fs (loop2): initial error at time 1785570701: ext4_iget_extra_inode:5179: inode 15 [ 1174.049572][ C1] EXT4-fs (loop2): last error at time 1785570701: ext4_iget_extra_inode:5179: inode 15 [ 1174.155159][T30328] loop2: lost filesystem error report for type 5 error -117 [ 1174.165993][T30328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1174.363599][T30340] loop0: detected capacity change from 0 to 512 [ 1174.394634][T30340] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1174.476468][T30340] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4221: comm syz.0.10278: Allocating blocks 41-42 which overlap fs metadata [ 1174.522770][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1174.586351][T30340] loop0: lost filesystem error report for type 5 error -117 [ 1174.586737][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1174.600609][ C0] EXT4-fs (loop0): initial error at time 1785570702: ext4_mb_mark_diskspace_used:4221 [ 1174.610251][ C0] EXT4-fs (loop0): last error at time 1785570702: ext4_mb_mark_diskspace_used:4221 [ 1174.779599][T30340] EXT4-fs (loop0): Remounting filesystem read-only [ 1174.812851][T30340] Quota error (device loop0): write_blk: dquota write failed [ 1174.859351][T30340] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 1174.889277][T30340] Quota error (device loop0): write_blk: dquota write failed [ 1174.915484][T30340] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1174.968274][T30340] EXT4-fs (loop0): 1 truncate cleaned up [ 1175.025016][T30340] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1175.639042][ T5641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.745857][T20873] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1175.939352][T20873] usb 4-1: Using ep0 maxpacket: 16 [ 1175.979380][T20873] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 1176.000888][T20873] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1176.012101][T30374] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10281'. [ 1176.035480][T20873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1176.085512][T20873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1176.149832][T20873] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1176.199510][T20873] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1176.236638][T20873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.270315][T20873] usb 4-1: config 0 descriptor?? [ 1176.308061][T30365] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1176.334758][T20873] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input49 [ 1176.793609][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.994288][ T29] usb 4-1: USB disconnect, device number 50 [ 1177.955011][T30413] loop3: detected capacity change from 0 to 1024 [ 1178.002103][T30413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1178.312566][T30424] EXT4-fs warning (device loop3): ext4_rmdir:3189: inode #11: comm syz.3.10298: empty directory 'file0' has too many links (111) [ 1178.433550][T30430] loop2: detected capacity change from 0 to 512 [ 1178.520313][T30430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1178.590782][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1178.604065][T30430] ext4 filesystem being mounted at /1758/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1178.663174][T30400] loop6: detected capacity change from 0 to 32768 [ 1178.729436][T30400] JBD2: Ignoring recovery information on journal [ 1178.832061][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1178.878714][T30400] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1179.210570][T30441] gadgetfs: bound to dummy_udc driver [ 1179.425353][T30448] loop3: detected capacity change from 0 to 16 [ 1179.446386][ T9644] ocfs2: Unmounting device (7,6) on (node local) [ 1179.476854][ T188] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1179.506691][ C0] gadgetfs: connected [ 1179.513705][T30448] erofs (device loop3): mounted with root inode @ nid 36. [ 1179.523605][ T188] gadgetfs: disconnected [ 1179.562127][T30448] overlay: filesystem on ./file0 is read-only [ 1179.887100][T25619] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1180.064300][T25619] usb 3-1: Using ep0 maxpacket: 8 [ 1180.094939][T25619] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1180.123288][T25619] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1180.137912][T25619] usb 3-1: Product: syz [ 1180.154287][T25619] usb 3-1: Manufacturer: syz [ 1180.166449][T30464] loop3: detected capacity change from 0 to 1024 [ 1180.173151][T25619] usb 3-1: SerialNumber: syz [ 1180.184689][T25619] usb 3-1: config 0 descriptor?? [ 1180.213542][T25619] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1180.233113][T30464] EXT4-fs: Ignoring removed bh option [ 1180.280501][T30464] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1180.343463][T30464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1180.489463][T30474] loop6: detected capacity change from 0 to 1024 [ 1180.580322][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1180.633043][T30474] hfsplus: keylen 65060 too large [ 1180.666933][T30474] hfsplus: xattr search failed [ 1180.820726][T30477] loop3: detected capacity change from 0 to 256 [ 1180.890168][T30477] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 1180.926600][T25619] input: gspca_zc3xx as /devices/platform/dummy_hcd.2/usb3/3-1/input/input50 [ 1181.227421][T25619] usb 3-1: USB disconnect, device number 57 [ 1181.570329][T30496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10331'. [ 1181.600785][T30496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10331'. [ 1181.702581][T30496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10331'. [ 1181.715037][T30496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10331'. [ 1182.111336][T30509] loop5: detected capacity change from 0 to 1024 [ 1182.113673][T30510] loop0: detected capacity change from 0 to 1024 [ 1182.172877][T30509] EXT4-fs: Ignoring removed bh option [ 1182.215613][T30510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1182.281598][T30509] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1182.403111][T30509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1182.421007][T30510] EXT4-fs error (device loop0): ext4_generic_delete_entry:2672: inode #2: block 16: comm syz.0.10337: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 1182.458843][T30510] EXT4-fs error (device loop0) in ext4_delete_entry:2744: Corrupt filesystem [ 1182.510009][T30510] EXT4-fs warning (device loop0): ext4_rename_delete:3737: inode #2: comm syz.0.10337: Deleting old file: nlink 1, error=-117 [ 1182.632929][ T5634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.805273][ T5641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.967211][ T188] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1183.172445][ T188] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1183.208019][ T188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.248122][ T188] usb 5-1: Product: syz [ 1183.276793][ T188] usb 5-1: Manufacturer: syz [ 1183.294375][ T188] usb 5-1: SerialNumber: syz [ 1183.613794][T30540] loop2: detected capacity change from 0 to 32768 [ 1183.633639][ T188] usb 5-1: config 0 descriptor?? [ 1183.643889][ T188] hub 5-1:0.0: bad descriptor, ignoring hub [ 1183.653564][T30540] JBD2: Ignoring recovery information on journal [ 1183.713197][T30540] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1183.730558][ T188] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1183.773208][ T188] f81232 5-1:0.0: f81534a converter detected [ 1183.864153][ T188] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1183.895425][ T188] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1184.042840][ T5629] ocfs2: Unmounting device (7,2) on (node local) [ 1184.118759][ T188] usb 5-1: reset high-speed USB device number 53 using dummy_hcd [ 1184.322017][ T188] usb 5-1: device firmware changed [ 1184.369330][ T188] usb 5-1: USB disconnect, device number 53 [ 1184.380639][ T188] f81232 5-1:0.0: device disconnected [ 1184.399014][T30557] gadgetfs: bound to dummy_udc driver [ 1184.698974][T30563] loop5: detected capacity change from 0 to 1024 [ 1184.717341][ T188] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1184.812657][T30565] loop3: detected capacity change from 0 to 1024 [ 1184.884840][T30563] hfsplus: keylen 65060 too large [ 1184.915668][T30563] hfsplus: xattr search failed [ 1184.918942][ T188] usb 5-1: string descriptor 0 read error: -22 [ 1184.934798][T30565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1184.974745][ T188] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1184.996661][T30565] EXT4-fs error (device loop3): ext4_generic_delete_entry:2672: inode #2: block 16: comm syz.3.10356: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 1185.024929][T30565] EXT4-fs error (device loop3) in ext4_delete_entry:2744: Corrupt filesystem [ 1185.044748][T30565] EXT4-fs warning (device loop3): ext4_rename_delete:3737: inode #2: comm syz.3.10356: Deleting old file: nlink 1, error=-117 [ 1185.056881][ T188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.121580][ T188] usb 5-1: config 0 descriptor?? [ 1185.141985][ T188] hub 5-1:0.0: bad descriptor, ignoring hub [ 1185.151134][ T188] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1185.194440][ T188] f81232 5-1:0.0: f81534a converter detected [ 1185.306185][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.493921][ T188] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1185.536344][ T188] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1185.588576][ T188] usb 5-1: USB disconnect, device number 54 [ 1185.638353][ T188] f81232 5-1:0.0: device disconnected [ 1185.662102][T30578] bond0: entered promiscuous mode [ 1185.698017][T30578] bond_slave_0: entered promiscuous mode [ 1185.726655][T30578] bond_slave_1: entered promiscuous mode [ 1185.784655][T30578] batadv0: entered promiscuous mode [ 1185.809102][T30584] loop0: detected capacity change from 0 to 512 [ 1185.846571][T30584] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1185.853234][T30578] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1185.895353][T30584] EXT4-fs (loop0): 1 truncate cleaned up [ 1185.935745][T30578] bond0: left promiscuous mode [ 1185.947387][T30584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1185.947655][T30578] bond_slave_0: left promiscuous mode [ 1185.970476][T30578] bond_slave_1: left promiscuous mode [ 1186.005478][T30578] batadv0: left promiscuous mode [ 1186.074529][T30584] EXT4-fs error (device loop0): ext4_generic_delete_entry:2672: inode #2: block 13: comm syz.0.10365: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1186.170006][T30584] EXT4-fs (loop0): Remounting filesystem read-only [ 1186.195220][T30584] EXT4-fs warning (device loop0): ext4_rename_delete:3737: inode #2: comm syz.0.10365: Deleting old file: nlink 5, error=-117 [ 1186.446198][ T5641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1186.959422][T30608] loop4: detected capacity change from 0 to 1024 [ 1187.030236][T30608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1187.429446][ T5640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1188.456810][ T188] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1188.616985][ T5777] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1188.641194][ T188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1188.662537][ T188] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1188.694622][ T188] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1188.714583][ T188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.739854][ T188] usb 3-1: config 0 descriptor?? [ 1188.751647][T30642] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1188.812660][ T5777] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1188.829305][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.857960][ T5777] usb 4-1: Product: syz [ 1188.875807][ T5777] usb 4-1: Manufacturer: syz [ 1188.886880][T25619] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1188.908600][ T5777] usb 4-1: SerialNumber: syz [ 1188.928874][ T5777] usb 4-1: config 0 descriptor?? [ 1188.957950][ T5777] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 051 [ 1189.066800][T25619] usb 6-1: Using ep0 maxpacket: 8 [ 1189.083222][T30664] loop0: detected capacity change from 0 to 512 [ 1189.087060][T25619] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.133601][T30664] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.10402: inode has both inline data and extents flags [ 1189.139435][T25619] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1189.173987][T30664] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1189.175976][T30664] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.10402: couldn't read orphan inode 15 (err -117) [ 1189.185286][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1189.185318][ C0] EXT4-fs (loop0): initial error at time 1785570716: ext4_orphan_get:1399: inode 15 [ 1189.185370][ C0] EXT4-fs (loop0): last error at time 1785570716: ext4_orphan_get:1399: inode 15 [ 1189.254405][T25619] usb 6-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1189.265327][ T188] steelseries 0003:1038:1410.0073: item fetching failed at offset 0/44 [ 1189.268269][T30664] loop0: lost filesystem error report for type 5 error -117 [ 1189.280691][T30664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 1189.311359][ T188] steelseries 0003:1038:1410.0073: parse failed [ 1189.326895][T25619] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.345399][ T188] steelseries 0003:1038:1410.0073: probe with driver steelseries failed with error -22 [ 1189.369390][T25619] usb 6-1: config 0 descriptor?? [ 1189.377129][ T5777] (null): failure reading functionality [ 1189.389068][ T5777] i2c i2c-1: connected i2c-tiny-usb device [ 1189.446406][ T5641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 1189.483589][ T5777] usb 3-1: USB disconnect, device number 58 [ 1189.603007][ T188] usb 4-1: USB disconnect, device number 51 [ 1189.830213][T25619] hid (null): unknown global tag 0xd [ 1189.866853][T25619] megaworld 0003:07B5:0312.0074: unknown main item tag 0x0 [ 1189.881635][T25619] megaworld 0003:07B5:0312.0074: reserved main item tag 0xe [ 1189.906240][T25619] megaworld 0003:07B5:0312.0074: unknown main item tag 0x7 [ 1189.939689][T25619] megaworld 0003:07B5:0312.0074: unknown main item tag 0x0 [ 1189.957309][T25619] megaworld 0003:07B5:0312.0074: unknown global tag 0xd [ 1189.974609][T25619] megaworld 0003:07B5:0312.0074: item 0 2 1 13 parsing failed [ 1189.995603][T25619] megaworld 0003:07B5:0312.0074: parse failed [ 1190.010074][T25619] megaworld 0003:07B5:0312.0074: probe with driver megaworld failed with error -22 [ 1190.066616][T30662] loop4: detected capacity change from 0 to 32768 [ 1190.076582][T25619] usb 6-1: USB disconnect, device number 51 [ 1190.146409][T30662] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1190.502255][T30680] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10417'. [ 1190.533994][ T5640] ocfs2: Unmounting device (7,4) on (node local) [ 1190.789582][T30680] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1191.285976][T30680] bond1 (unregistering): Released all slaves [ 1191.980755][T30703] loop3: detected capacity change from 0 to 512 [ 1192.045121][T30710] size and base must be multiples of 4 kiB [ 1192.051177][T30710] CPU: 0 UID: 0 PID: 30710 Comm: syz.0.10415 Tainted: G L syzkaller #0 PREEMPT(full) [ 1192.051234][T30710] Tainted: [L]=SOFTLOCKUP [ 1192.051249][T30710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1192.051273][T30710] Call Trace: [ 1192.051285][T30710] [ 1192.051299][T30710] dump_stack_lvl+0x100/0x190 [ 1192.051356][T30710] mtrr_add.cold+0x74/0x87 [ 1192.051399][T30710] mtrr_ioctl+0x25a/0xcf0 [ 1192.051467][T30710] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1192.051523][T30710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1192.051570][T30710] ? find_held_lock+0x2b/0x80 [ 1192.051643][T30710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1192.051691][T30710] ? __fget_files+0x21f/0x3d0 [ 1192.051751][T30710] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1192.051801][T30710] proc_reg_unlocked_ioctl+0x229/0x320 [ 1192.051863][T30710] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1192.051931][T30710] __x64_sys_ioctl+0x18e/0x210 [ 1192.051985][T30710] do_syscall_64+0x115/0x870 [ 1192.052049][T30710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.052090][T30710] RIP: 0033:0x7f551e79e019 [ 1192.052120][T30710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.052159][T30710] RSP: 002b:00007f551f729028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1192.052196][T30710] RAX: ffffffffffffffda RBX: 00007f551ea25fa0 RCX: 00007f551e79e019 [ 1192.052223][T30710] RDX: 0000200000000140 RSI: 0000000040104d01 RDI: 0000000000000003 [ 1192.052249][T30710] RBP: 00007f551e83500c R08: 0000000000000000 R09: 0000000000000000 [ 1192.052274][T30710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1192.052299][T30710] R13: 00007f551ea26038 R14: 00007f551ea25fa0 R15: 00007ffc9d2b2e98 [ 1192.052356][T30710] [ 1192.425615][T30703] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.10413: bg 0: block 127: padding at end of block bitmap is not set [ 1192.499198][T30703] loop3: lost filesystem error report for type 5 error -117 [ 1192.507092][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1192.520940][ C0] EXT4-fs (loop3): initial error at time 1785570720: ext4_validate_block_bitmap:440 [ 1192.530386][ C0] EXT4-fs (loop3): last error at time 1785570720: ext4_validate_block_bitmap:440 [ 1192.559879][T30703] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.10413: iget: bad extra_isize 58 (inode size 256) [ 1192.592474][T30703] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1192.600735][T30703] EXT4-fs error (device loop3): ext4_xattr_inode_iget:444: comm syz.3.10413: error while reading EA inode 11 err=-117 [ 1192.716725][T30703] loop3: lost filesystem error report for type 5 error -117 [ 1192.717310][T30703] EXT4-fs (loop3): 1 orphan inode deleted [ 1192.729298][T30703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1192.773373][T30703] EXT4-fs error (device loop3): __ext4_iget:5533: inode #14: block 1886221359: comm syz.3.10413: invalid block [ 1192.944663][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1193.354370][T30722] loop2: detected capacity change from 0 to 4096 [ 1193.393961][T30722] ntfs3(loop2): ino=0, mi_enum_attr [ 1193.425462][T30729] loop3: detected capacity change from 0 to 1024 [ 1193.450218][T30722] ntfs3(loop2): ino=0, mi_enum_attr [ 1193.468804][T30729] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 1193.471513][T30722] ntfs3(loop2): ino=0, mi_enum_attr [ 1193.514227][T30732] loop5: detected capacity change from 0 to 128 [ 1193.651244][T30729] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1193.843285][T30722] ntfs3(loop2): failed to convert "0080" to cp864 [ 1193.888392][T30722] ntfs3(loop2): ino=1e, mi_enum_attr [ 1194.025220][T30743] loop6: detected capacity change from 0 to 524288000 [ 1194.217077][T30747] Invalid logical block size (255) [ 1194.403755][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1194.791678][T30755] loop4: detected capacity change from 0 to 4096 [ 1194.819002][T30755] EXT4-fs: inline encryption not supported [ 1194.874480][T30755] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1194.904510][T30755] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1194.979768][T30755] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 1195.040392][T30755] System zones: 0-5 [ 1195.074825][T30755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1195.199630][T30755] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 1195.221485][T30768] Set syz1 is full, maxelem 256 reached [ 1195.330074][T30772] option changes via remount are deprecated (pid=30770 comm=syz.3.10444) [ 1195.358992][T30772] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" [ 1195.386317][T30777] bond0: entered promiscuous mode [ 1195.404766][T30777] bond_slave_0: entered promiscuous mode [ 1195.427987][T30777] bond_slave_1: entered promiscuous mode [ 1195.469749][T30777] batadv0: entered promiscuous mode [ 1195.512633][T30777] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1195.525275][ T5640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1195.565289][T30777] bond0: left promiscuous mode [ 1195.596078][T30777] bond_slave_0: left promiscuous mode [ 1195.614270][T30777] bond_slave_1: left promiscuous mode [ 1195.672311][T30777] batadv0: left promiscuous mode [ 1195.759030][T30783] loop6: detected capacity change from 0 to 524288000 [ 1195.867032][T30783] Invalid logical block size (255) [ 1196.446770][T30803] loop5: detected capacity change from 0 to 1024 [ 1196.512561][T30803] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1196.551450][T30803] ext4 filesystem being mounted at /1761/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1196.759153][ T5634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1197.121413][T30822] loop3: detected capacity change from 0 to 128 [ 1197.173394][T30822] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1197.219933][T30820] loop5: detected capacity change from 0 to 16 [ 1197.248113][T30822] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1197.695070][T30829] loop6: detected capacity change from 0 to 524288000 [ 1197.839355][T30829] Invalid logical block size (255) [ 1197.849437][T20873] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1198.032216][T20873] usb 3-1: Using ep0 maxpacket: 32 [ 1198.064420][T20873] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 1198.109843][T20873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.152961][T20873] usb 3-1: config 0 has no interface number 0 [ 1198.180091][T20873] usb 3-1: config 0 interface 89 altsetting 225 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1198.234498][T20873] usb 3-1: config 0 interface 89 has no altsetting 0 [ 1198.263109][T20873] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 1198.292654][T20873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.324347][T20873] usb 3-1: Product: syz [ 1198.349964][T20873] usb 3-1: Manufacturer: syz [ 1198.365464][T20873] usb 3-1: SerialNumber: syz [ 1198.390861][T20873] usb 3-1: config 0 descriptor?? [ 1198.432748][T20873] hub 3-1:0.89: bad descriptor, ignoring hub [ 1198.472119][T20873] hub 3-1:0.89: probe with driver hub failed with error -5 [ 1198.521965][T20873] option 3-1:0.89: GSM modem (1-port) converter detected [ 1198.840626][T20873] usb 3-1: USB disconnect, device number 59 [ 1198.862041][T20873] option 3-1:0.89: device disconnected [ 1199.650658][ T3334] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1199.759247][T30786] Bluetooth: hci5: command 0x0c1a tx timeout [ 1199.926960][ T188] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1200.139180][ T188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1200.191665][ T188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1200.216631][T30889] loop6: detected capacity change from 0 to 2048 [ 1200.234835][ T188] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1200.275203][T30889] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1200.291945][ T188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.314396][ T188] usb 5-1: config 0 descriptor?? [ 1200.398570][T30885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.738497][T30900] loop3: detected capacity change from 0 to 128 [ 1200.763323][T30900] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1200.812183][T30900] hpfs: filesystem error: improperly stopped [ 1200.845199][T30900] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1200.885769][T30900] hpfs: You really don't want any checks? You are crazy... [ 1200.919834][T30900] hpfs: Code page index out of array [ 1200.945529][T30900] hpfs: code page support is disabled [ 1200.964196][ T188] usb 5-1: language id specifier not provided by device, defaulting to English [ 1200.972501][T30900] hpfs: hpfs_map_4sectors(): unaligned read [ 1200.982656][T30900] hpfs: hpfs_map_4sectors(): unaligned read [ 1200.990744][T30900] hpfs: filesystem error: unable to find root dir [ 1201.171488][ T188] uclogic 0003:256C:006D.0075: failed retrieving Huion firmware version: -71 [ 1201.205523][ T188] uclogic 0003:256C:006D.0075: failed probing parameters: -71 [ 1201.225891][ T188] uclogic 0003:256C:006D.0075: probe with driver uclogic failed with error -71 [ 1201.273912][ T188] usb 5-1: USB disconnect, device number 55 [ 1201.291959][T30910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10501'. [ 1201.309601][T30912] loop2: detected capacity change from 0 to 16 [ 1201.336436][T30912] erofs (device loop2): mounted with root inode @ nid 36. [ 1201.393591][T30910] ipvlan2: entered allmulticast mode [ 1201.414462][T30910] syz_tun: entered allmulticast mode [ 1201.827147][T20565] Bluetooth: hci5: command 0x0c1a tx timeout [ 1202.188852][T30928] input: syz0 as /devices/virtual/input/input51 [ 1202.251123][T30939] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10514'. [ 1202.507516][T30941] loop0: detected capacity change from 0 to 1024 [ 1202.620228][T30941] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 1202.794172][T30941] loop0: detected capacity change from 0 to 1024 [ 1202.834765][T30941] EXT4-fs: Ignoring removed orlov option [ 1202.893861][T30941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1202.965944][T30959] loop2: detected capacity change from 0 to 512 [ 1203.064233][T30959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1203.131342][T30966] input input52: cannot allocate more than FF_MAX_EFFECTS effects [ 1203.162849][T30959] ext4 filesystem being mounted at /1793/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1203.400131][ T5641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1203.557920][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1203.571274][T30975] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1203.881205][T30981] loop0: detected capacity change from 0 to 1024 [ 1203.894468][T30956] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1204.009703][T30956] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.025535][T30981] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 1204.069554][T30981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1204.163172][T30975] @0Ù: renamed from bond_slave_1 (while UP) [ 1204.434105][ T5641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1204.573885][T30991] loop5: detected capacity change from 0 to 512 [ 1204.592373][T30956] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1204.612802][T30991] EXT4-fs: Ignoring removed orlov option [ 1204.635938][T30991] EXT4-fs: Ignoring removed mblk_io_submit option [ 1204.645200][T30956] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.703546][T30991] EXT4-fs error (device loop5): ext4_iget_extra_inode:5179: inode #15: comm syz.5.10535: corrupted in-inode xattr: e_value size too large [ 1204.743552][T30991] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1204.746914][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1204.762689][ C1] EXT4-fs (loop5): initial error at time 1785570732: ext4_iget_extra_inode:5179: inode 15 [ 1204.772692][ C1] EXT4-fs (loop5): last error at time 1785570732: ext4_iget_extra_inode:5179: inode 15 [ 1204.776530][T30991] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.10535: couldn't read orphan inode 15 (err -117) [ 1204.808541][T30991] loop5: lost filesystem error report for type 5 error -117 [ 1204.812189][T30991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1205.161266][T30956] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1205.175867][ T5634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1205.251327][T30956] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.409143][T31009] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1205.415714][T31009] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1205.448607][T31009] vhci_hcd vhci_hcd.0: Device attached [ 1205.468253][T31012] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5) [ 1205.474834][T31012] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1205.552263][T31012] vhci_hcd vhci_hcd.0: Device attached [ 1205.571279][T31009] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(8) [ 1205.577849][T31009] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1205.631176][T31009] vhci_hcd vhci_hcd.0: Device attached [ 1205.656385][T31012] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(7) [ 1205.662946][T31012] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1205.711038][T20873] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 1205.725822][T31012] vhci_hcd vhci_hcd.0: Device attached [ 1205.773650][T31017] vhci_hcd: connection closed [ 1205.773828][ T3269] vhci_hcd vhci_hcd.6: stop threads [ 1205.795851][T31013] vhci_hcd: connection closed [ 1205.796150][T31015] vhci_hcd: connection closed [ 1205.796724][T31010] vhci_hcd: connection reset by peer [ 1205.818464][ T3269] vhci_hcd vhci_hcd.6: release socket [ 1205.857328][ T3269] vhci_hcd vhci_hcd.6: disconnect device [ 1205.874438][ T3269] vhci_hcd vhci_hcd.6: stop threads [ 1205.885384][T31020] loop2: detected capacity change from 0 to 512 [ 1205.906160][T30956] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1205.911017][ T3269] vhci_hcd vhci_hcd.6: release socket [ 1205.969846][ T3269] vhci_hcd vhci_hcd.6: disconnect device [ 1205.975669][T30956] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.989218][ T3269] vhci_hcd vhci_hcd.6: stop threads [ 1206.003447][T31020] EXT4-fs error (device loop2): ext4_iget_extra_inode:5179: inode #15: comm syz.2.10543: corrupted in-inode xattr: invalid ea_ino [ 1206.026548][ T3269] vhci_hcd vhci_hcd.6: release socket [ 1206.052409][T31020] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1206.052921][ T3269] vhci_hcd vhci_hcd.6: disconnect device [ 1206.062309][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1206.062339][ C1] EXT4-fs (loop2): initial error at time 1785570733: ext4_iget_extra_inode:5179: inode 15 [ 1206.062386][ C1] EXT4-fs (loop2): last error at time 1785570733: ext4_iget_extra_inode:5179: inode 15 [ 1206.111753][T31020] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.10543: couldn't read orphan inode 15 (err -117) [ 1206.115123][ T3269] vhci_hcd vhci_hcd.6: stop threads [ 1206.131637][ T3269] vhci_hcd vhci_hcd.6: release socket [ 1206.151850][ T3269] vhci_hcd vhci_hcd.6: disconnect device [ 1206.199400][T31020] loop2: lost filesystem error report for type 5 error -117 [ 1206.211884][T31020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1206.737004][ T37] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1206.757976][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.803875][T31034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.948687][ T37] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1206.962667][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.217052][ T3334] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1207.230732][ T3334] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.262472][ T3334] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1207.283055][ T3334] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.455069][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1207.756469][T31050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10554'. [ 1208.618911][T31048] loop2: detected capacity change from 0 to 32768 [ 1208.738249][T31076] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1208.748036][T31076] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1208.757217][T31076] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1208.766339][T31076] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1208.775531][T31076] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1208.784732][T31076] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1208.793874][T31076] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1208.803021][T31076] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1208.812173][T31076] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1208.821332][T31076] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1209.193195][T31080] loop6: detected capacity change from 0 to 128 [ 1209.245017][T31080] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1209.280441][T31080] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1209.735957][T31089] netlink: 'syz.0.10571': attribute type 10 has an invalid length. [ 1209.851721][T31089] bridge0: port 3(dummy0) entered disabled state [ 1209.877252][T31089] dummy0: left allmulticast mode [ 1209.911505][T31089] dummy0: left promiscuous mode [ 1209.948751][T31089] bridge0: port 3(dummy0) entered disabled state [ 1210.103129][T31089] team0: Port device dummy0 added [ 1210.203119][T31078] loop4: detected capacity change from 0 to 32768 [ 1210.277841][T25619] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1210.345378][T31078] JBD2: Ignoring recovery information on journal [ 1210.472394][T25619] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1210.512789][T31078] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1210.526244][T25619] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.556070][T25619] usb 6-1: Product: syz [ 1210.578228][T25619] usb 6-1: Manufacturer: syz [ 1210.586150][T25619] usb 6-1: SerialNumber: syz [ 1210.608377][T25619] usb 6-1: config 0 descriptor?? [ 1210.651054][T25619] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1210.765673][ T31] audit: type=1800 audit(1785570738.396:291): pid=31078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10567" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 1210.777290][T31109] loop3: detected capacity change from 0 to 4096 [ 1210.833149][T31109] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 1210.878428][T20873] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1211.101650][T31109] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1211.289689][ T5640] ocfs2: Unmounting device (7,4) on (node local) [ 1211.528360][T25619] usb 6-1: USB disconnect, device number 52 [ 1211.959507][ T30] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1212.149707][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 1212.162670][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.215542][ T30] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1212.248725][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.263169][ T30] usb 4-1: config 0 descriptor?? [ 1212.284617][ T30] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1212.494275][T25619] usb 4-1: USB disconnect, device number 52 [ 1212.599632][T31136] loop4: detected capacity change from 0 to 128 [ 1212.670028][T31136] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1212.685352][T31136] ext4 filesystem being mounted at /1783/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1212.922424][ T5640] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1214.526481][T20565] Bluetooth: hci5: unexpected event for opcode 0x1405 [ 1214.941289][T31192] loop3: detected capacity change from 0 to 256 [ 1215.552438][T31173] loop2: detected capacity change from 0 to 32768 [ 1216.091650][T31173] overlayfs: upper fs needs to support d_type. [ 1216.167212][T31173] overlayfs: upper fs does not support tmpfile. [ 1216.269072][T31173] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1216.305406][T31173] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 1216.305406][T31173] [ 1216.324684][T31173] ERROR: (device loop2): remounting filesystem as read-only [ 1216.334945][T31173] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null. [ 1217.340144][T31232] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.933019][T31250] input: syz0 as /devices/virtual/input/input55 [ 1218.419213][T31269] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1218.446023][T31269] @0Ù: renamed from bond_slave_1 (while UP) [ 1218.544408][T31236] loop4: detected capacity change from 0 to 32768 [ 1218.759417][T20565] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1218.791312][T31273] loop5: detected capacity change from 0 to 512 [ 1218.827247][T31277] loop0: detected capacity change from 0 to 2048 [ 1218.838049][T31275] loop6: detected capacity change from 0 to 512 [ 1218.849485][T31277] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1218.913893][T31283] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1218.941447][T31273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1218.967610][T31275] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1219.009419][T31275] ext4 filesystem being mounted at /1392/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1219.022587][T31273] ext4 filesystem being mounted at /1805/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1219.297024][T31283] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1219.345929][T31283] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1219.420431][T31283] Remounting filesystem read-only [ 1219.432721][T31275] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 1219.480060][T31275] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1219.682124][T31275] EXT4-fs (loop6): changing journal_checksum during remount not supported; ignoring [ 1219.742035][ T5641] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 1219.775047][T31275] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1219.852607][T31293] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1219.944539][ T5634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1220.161404][ T9644] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1220.318090][T25619] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1220.499795][T25619] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1220.543480][T25619] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1220.549335][T31319] netlink: 'syz.3.10665': attribute type 39 has an invalid length. [ 1220.582652][T25619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.655047][T25619] usb 5-1: config 0 descriptor?? [ 1220.696544][T31303] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1221.198619][T25619] asus 0003:0B05:1ABE.0076: unknown main item tag 0x0 [ 1221.220840][T25619] asus 0003:0B05:1ABE.0076: unknown main item tag 0x0 [ 1221.249048][T25619] asus 0003:0B05:1ABE.0076: unknown main item tag 0x0 [ 1221.272451][T25619] asus 0003:0B05:1ABE.0076: unknown main item tag 0x0 [ 1221.289604][T25619] asus 0003:0B05:1ABE.0076: unknown main item tag 0x0 [ 1221.316855][T25619] asus 0003:0B05:1ABE.0076: unknown main item tag 0x0 [ 1221.333285][T25619] asus 0003:0B05:1ABE.0076: unknown main item tag 0x0 [ 1221.367569][T25619] asus 0003:0B05:1ABE.0076: unknown main item tag 0x0 [ 1221.384727][T25619] asus 0003:0B05:1ABE.0076: unknown main item tag 0x0 [ 1221.395070][T31334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10669'. [ 1221.408209][T25619] asus 0003:0B05:1ABE.0076: unknown main item tag 0x0 [ 1221.411467][T25619] asus 0003:0B05:1ABE.0076: reserved main item tag 0xd [ 1221.490787][T25619] asus 0003:0B05:1ABE.0076: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.4-1/input0 [ 1221.530914][T25619] asus 0003:0B05:1ABE.0076: Asus handshake 5a failed to send: -71 [ 1221.551902][T25619] asus 0003:0B05:1ABE.0076: Failed to initialize 0x5a: -71. [ 1221.612687][T25619] usb 5-1: USB disconnect, device number 56 [ 1221.849089][T31337] fido_id[31337]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1221.961022][T31342] loop2: detected capacity change from 0 to 4096 [ 1221.991305][T31342] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1222.056150][T31342] ntfs3(loop2): ino=19, mi_enum_attr [ 1222.067258][T31342] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1222.094720][T31342] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 1222.616304][T31352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1222.867815][ T5777] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1222.895974][T31360] loop6: detected capacity change from 0 to 128 [ 1222.922156][T31360] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1222.952979][T31360] hpfs: filesystem error: improperly stopped [ 1222.969469][T31360] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1222.996011][T31360] hpfs: You really don't want any checks? You are crazy... [ 1223.041257][T31360] hpfs: hpfs_map_sector(): read error [ 1223.043035][ T5777] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1223.060847][T31360] hpfs: code page support is disabled [ 1223.078429][ T5777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.089200][T31360] hpfs: hpfs_map_4sectors(): unaligned read [ 1223.119321][T31360] hpfs: hpfs_map_4sectors(): unaligned read [ 1223.120101][ T5777] usb 3-1: Product: syz [ 1223.127478][T31360] hpfs: filesystem error: unable to find root dir [ 1223.158108][ T5777] usb 3-1: Manufacturer: syz [ 1223.165252][T31367] loop4: detected capacity change from 0 to 256 [ 1223.175722][ T5777] usb 3-1: SerialNumber: syz [ 1223.199450][ T5777] usb 3-1: config 0 descriptor?? [ 1223.212220][T31360] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim [ 1223.215168][ T5777] ch341 3-1:0.0: ch341-uart converter detected [ 1223.246092][ T31] audit: type=1800 audit(1785570750.876:292): pid=31367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10684" name="file2" dev="loop4" ino=1049009 res=0 errno=0 [ 1223.293413][T31367] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1223.367116][T31367] FAT-fs (loop4): Filesystem has been set read-only [ 1223.426371][T31367] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1223.460942][T31367] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1223.498937][ T31] audit: type=1800 audit(1785570751.136:293): pid=31367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10684" name="file1" dev="loop4" ino=1049010 res=0 errno=0 [ 1223.567498][T31367] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 1223.918283][T31383] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10691'. [ 1224.031097][ T5777] usb 3-1: failed to send control message: -71 [ 1224.045321][ T5777] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1224.102400][ T5777] usb 3-1: USB disconnect, device number 60 [ 1224.163337][ T5777] ch341 3-1:0.0: device disconnected [ 1224.373014][T31395] loop0: detected capacity change from 0 to 128 [ 1224.441642][T31395] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1224.472671][T31395] ext4 filesystem being mounted at /1756/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1224.919586][T31412] net_ratelimit: 54 callbacks suppressed [ 1224.919615][T31412] openvswitch: netlink: IP tunnel TTL not specified. [ 1224.939747][T31409] loop2: detected capacity change from 0 to 512 [ 1224.969269][ T5641] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1224.981159][T31412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1226.294785][T31444] loop6: detected capacity change from 0 to 2048 [ 1226.401410][T31444] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1226.499129][T31458] loop3: detected capacity change from 0 to 128 [ 1226.518934][T31458] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1226.579957][T31458] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1226.653891][T31460] WÄ [ 1226.704704][T31444] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1226.873381][T31444] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 2 with error 28 [ 1226.944395][T31444] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1226.944395][T31444] [ 1226.944527][T31468] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10724'. [ 1226.984672][T31444] EXT4-fs (loop6): Total free blocks count 0 [ 1227.035375][T31444] EXT4-fs (loop6): Free/Dirty block details [ 1227.073790][T31444] EXT4-fs (loop6): free_blocks=2415919504 [ 1227.092399][T31444] EXT4-fs (loop6): dirty_blocks=16 [ 1227.144603][T31444] EXT4-fs (loop6): Block reservation details [ 1227.162879][T31444] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 1227.210809][T31461] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 12 with error 28 [ 1227.380479][T31479] loop0: detected capacity change from 0 to 128 [ 1227.434621][T31479] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1227.464621][ T9644] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1227.480371][T31479] ext4 filesystem being mounted at /1761/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1227.614226][ T5641] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1227.866284][T31492] loop9: detected capacity change from 0 to 524287936 [ 1228.339376][T31504] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10741'. [ 1229.271522][T31520] sg_write: data in/out 19942/1 bytes for SCSI command 0x32-- guessing data in; [ 1229.271522][T31520] program syz.2.10749 not setting count and/or reply_len properly [ 1229.365814][T31533] loop4: detected capacity change from 0 to 256 [ 1229.610371][T31537] loop5: detected capacity change from 0 to 64 [ 1229.703789][ T31] audit: type=1800 audit(1785570757.336:294): pid=31537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.10757" name="file1" dev="loop5" ino=21 res=0 errno=0 [ 1229.772356][T31539] loop2: detected capacity change from 0 to 2048 [ 1229.870860][T31539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1229.925746][T31539] ext4 filesystem being mounted at /1828/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1229.933019][ T5634] hfs: node 4:3 still has 1 user(s)! [ 1230.045846][T31539] fs-verity (loop2, inode 13): Unsupported log_blocksize: 14 [ 1230.185118][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1230.653912][T31567] loop3: detected capacity change from 0 to 2048 [ 1230.713978][T31567] NILFS (loop3): invalid segment: Magic number mismatch [ 1230.734477][T31567] NILFS (loop3): trying rollback from an earlier position [ 1230.795609][T31567] NILFS (loop3): recovery complete [ 1230.836463][T31570] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1231.102049][T31574] loop5: detected capacity change from 0 to 2048 [ 1231.169017][T31574] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 1231.239871][T31574] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1231.904137][T31598] loop5: detected capacity change from 0 to 4096 [ 1231.984878][T31601] netlink: 'syz.0.10785': attribute type 4 has an invalid length. [ 1231.989741][T31598] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 1232.013055][ T55] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1232.033868][T31598] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 1232.054086][T31601] netlink: 'syz.0.10785': attribute type 1 has an invalid length. [ 1232.097056][T31601] netlink: 'syz.0.10785': attribute type 3 has an invalid length. [ 1232.161121][T31601] netlink: 184 bytes leftover after parsing attributes in process `syz.0.10785'. [ 1232.174576][ T31] audit: type=1800 audit(1785570759.796:295): pid=31598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.10783" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 1232.191414][T31598] ntfs3(loop5): ino=1e, "file1" attr_set_size_ex [ 1232.226845][T31601] NCSI netlink: No device for ifindex 830110067 [ 1232.279677][T31596] ntfs3(loop5): ino=1e, "file1" attr_set_size_ex [ 1232.431636][T28272] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22. [ 1232.461254][ T5634] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 1232.480654][ T5634] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1232.509297][ T5634] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 1232.554882][ T672] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22. [ 1233.005827][T31622] loop2: detected capacity change from 0 to 64 [ 1233.129039][T31626] loop5: detected capacity change from 0 to 512 [ 1233.189935][T31626] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.10796: inode has both inline data and extents flags [ 1233.189965][T31622] syz.2.10794: attempt to access beyond end of device [ 1233.189965][T31622] loop2: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 1233.206137][T31626] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1233.229181][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1233.232454][T31626] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.10796: couldn't read orphan inode 15 (err -117) [ 1233.238398][ C1] EXT4-fs (loop5): initial error at time 1785570760: ext4_orphan_get:1399: inode 15 [ 1233.238456][ C1] EXT4-fs (loop5): last error at time 1785570760: ext4_orphan_get:1399: inode 15 [ 1233.315270][T31626] loop5: lost filesystem error report for type 5 error -117 [ 1233.324529][T31630] minix-fs error (device loop2): minix_unlink:149: inode #9: comm syz.2.10794: inode has corrupted nlink [ 1233.324641][T31626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1233.422571][T31626] EXT4-fs warning (device loop5): ext4_empty_dir:3094: inode #2: comm syz.5.10796: directory missing '.' [ 1233.669105][ T5634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1233.940343][T31649] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1234.128917][ T5756] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1234.320084][ T5756] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1234.355926][ T5756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.375138][T31655] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.405285][ T5756] usb 5-1: Product: syz [ 1234.422435][ T5756] usb 5-1: Manufacturer: syz [ 1234.429220][ T5756] usb 5-1: SerialNumber: syz [ 1234.444114][ T5756] usb 5-1: config 0 descriptor?? [ 1234.928346][ T5756] usb 5-1: Firmware: major: 212, minor: 98, hardware type: UNKNOWN (32) [ 1235.119633][ T5756] usb 5-1: failed to fetch extended address, random address set [ 1235.134162][ T5756] usb 5-1: atusb_probe: initialization failed, error = -524 [ 1235.163337][ T5756] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 1235.216005][ T5756] usb 5-1: USB disconnect, device number 57 [ 1235.924898][T31705] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.990768][T31707] loop0: detected capacity change from 0 to 512 [ 1236.044990][T31707] EXT4-fs (loop0): 1 truncate cleaned up [ 1236.070205][T31707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1236.208560][T31714] loop4: detected capacity change from 0 to 1024 [ 1236.242758][ T31] audit: type=1800 audit(1785570763.876:296): pid=31707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.10829" name="file1" dev="loop0" ino=13 res=0 errno=0 [ 1236.274443][T31707] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz.0.10829: bg 0: block 465: padding at end of block bitmap is not set [ 1236.330501][T31714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1236.426535][T31707] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 28 [ 1236.438574][T31714] ext4 filesystem being mounted at /1814/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1236.440007][T31707] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1236.440007][T31707] [ 1236.460063][T31707] EXT4-fs (loop0): Total free blocks count 0 [ 1236.466197][T31707] EXT4-fs (loop0): Free/Dirty block details [ 1236.473170][T31707] EXT4-fs (loop0): free_blocks=0 [ 1236.478581][T31707] EXT4-fs (loop0): dirty_blocks=9 [ 1236.483854][T31707] EXT4-fs (loop0): Block reservation details [ 1236.490729][T31707] EXT4-fs (loop0): i_reserved_data_blocks=9 [ 1236.514550][T31714] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.10830: lblock 0 mapped to illegal pblock 0 (length 6) [ 1236.652679][T31720] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.10830: lblock 0 mapped to illegal pblock 0 (length 1) [ 1236.755134][ T5641] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 1236.795546][ T5641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1236.806221][T31723] loop2: detected capacity change from 0 to 8 [ 1236.873645][T31720] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1236.994810][T31720] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1236.994810][T31720] [ 1237.041478][T31726] loop3: detected capacity change from 0 to 256 [ 1237.079825][T31726] exfat: Deprecated parameter 'utf8' [ 1237.133793][T31726] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 1237.253239][ T5640] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1237.302457][ T5640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1237.759295][T31742] netlink: 'syz.0.10854': attribute type 1 has an invalid length. [ 1237.848192][T31745] loop6: detected capacity change from 0 to 2048 [ 1237.889826][T31745] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1238.078477][ T9644] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1238.232265][T31757] loop0: detected capacity change from 0 to 64 [ 1238.245098][T31755] loop3: detected capacity change from 0 to 1024 [ 1238.245834][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.321492][T31755] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1238.385402][T31757] hfs: walked past end of dir [ 1238.420754][T31755] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.10849: lblock 2 mapped to illegal pblock 2 (length 1) [ 1238.459267][T31755] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1238.469236][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1238.484912][ C1] EXT4-fs (loop3): initial error at time 1785570766: ext4_map_blocks:791: inode 3: block 2 [ 1238.495032][ C1] EXT4-fs (loop3): last error at time 1785570766: ext4_map_blocks:791: inode 3: block 2 [ 1238.534730][T31764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10853'. [ 1238.560875][T31755] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 1238.571690][T31755] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.10849: lblock 0 mapped to illegal pblock 48 (length 1) [ 1238.589261][T31755] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1238.593854][T31755] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 1238.638426][T31755] EXT4-fs error (device loop3): ext4_acquire_dquot:7039: comm syz.3.10849: Failed to acquire dquot type 0 [ 1238.679725][T31755] loop3: lost filesystem error report for type 5 error -117 [ 1238.683319][T31755] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1238.820146][T31755] loop3: lost filesystem error report for type 5 error -117 [ 1238.822104][T31755] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.10849: mark_inode_dirty error [ 1238.913301][T31755] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1238.918788][T31774] netlink: 'syz.5.10857': attribute type 12 has an invalid length. [ 1238.949450][T31755] EXT4-fs warning (device loop3): ext4_evict_inode:269: couldn't mark inode dirty (err -117) [ 1238.985805][T31755] EXT4-fs (loop3): 1 orphan inode deleted [ 1238.999659][T28272] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1239.006142][T31774] netlink: 'syz.5.10857': attribute type 29 has an invalid length. [ 1239.085017][T31774] netlink: 148 bytes leftover after parsing attributes in process `syz.5.10857'. [ 1239.090661][T28272] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1239.102571][T28272] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 1239.162179][T31774] netlink: 'syz.5.10857': attribute type 1 has an invalid length. [ 1239.168198][T31755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1239.214795][T28272] EXT4-fs error (device loop3): ext4_release_dquot:7075: comm kworker/u8:0: Failed to release dquot type 0 [ 1239.219561][T31774] netlink: 'syz.5.10857': attribute type 2 has an invalid length. [ 1239.250311][T31774] netlink: 7 bytes leftover after parsing attributes in process `syz.5.10857'. [ 1239.331687][T31755] EXT4-fs: Ignoring removed bh option [ 1239.364420][T31755] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 1239.408423][T31755] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.10849: lblock 0 mapped to illegal pblock 48 (length 1) [ 1239.475737][T31755] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=-117 [ 1239.572863][T31785] loop4: detected capacity change from 0 to 8 [ 1239.596429][T31755] EXT4-fs: Ignoring removed bh option [ 1239.623924][T31755] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 1239.732254][T31791] loop6: detected capacity change from 0 to 128 [ 1239.766500][T31791] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1239.795232][T31791] ext4 filesystem being mounted at /1427/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1239.843088][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1239.847836][T31791] fscrypt (loop6, inode 12): Can't use IV_INO_LBLK_32 policy on filesystem 'loop6' because it doesn't have stable inode numbers [ 1239.923460][ T9644] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1240.024178][T31789] loop2: detected capacity change from 0 to 4096 [ 1242.456154][T31854] loop6: detected capacity change from 0 to 4096 [ 1242.523715][T31854] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1242.563480][T31861] loop9: detected capacity change from 0 to 255852544 [ 1242.681402][T31861] loop9: detected capacity change from 255852544 to 524287871 [ 1242.701785][T31863] loop3: detected capacity change from 0 to 256 [ 1242.872221][T31863] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1243.229309][T20873] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1243.444770][T20873] usb 5-1: Using ep0 maxpacket: 8 [ 1243.489248][T20873] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1243.552334][T20873] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1243.602345][T20873] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1243.671501][T20873] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1243.733747][T20873] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1243.797285][T20873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.106314][T20873] usb 5-1: GET_CAPABILITIES returned 0 [ 1244.114537][T20873] usbtmc 5-1:16.0: can't read capabilities [ 1244.370232][T20873] usb 5-1: USB disconnect, device number 58 [ 1244.715895][T31897] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10912'. [ 1245.075190][T31907] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1245.127050][T31907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1245.464400][T31919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10922'. [ 1245.498405][T31921] loop3: detected capacity change from 0 to 512 [ 1245.541009][T31921] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1245.582964][T31921] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 1245.614942][T31921] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1245.656002][T31921] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4221: comm syz.3.10923: Allocating blocks 41-42 which overlap fs metadata [ 1245.690408][T31921] loop3: lost filesystem error report for type 5 error -117 [ 1245.695192][T31929] loop0: detected capacity change from 0 to 64 [ 1245.702759][T20873] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1245.708138][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1245.723428][ C1] EXT4-fs (loop3): initial error at time 1785570773: ext4_mb_mark_diskspace_used:4221 [ 1245.733165][ C1] EXT4-fs (loop3): last error at time 1785570773: ext4_mb_mark_diskspace_used:4221 [ 1245.748287][T31921] EXT4-fs (loop3): Remounting filesystem read-only [ 1245.776158][T31921] Quota error (device loop3): write_blk: dquota write failed [ 1245.792161][T31921] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1245.815535][T31931] binder: BINDER_SET_CONTEXT_MGR already set [ 1245.823195][T31921] EXT4-fs (loop3): 1 truncate cleaned up [ 1245.835864][T31929] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 1245.852922][T31921] EXT4-fs (loop3): pa ffff8880765c8910: logic 1, phys. 41, len 23 [ 1245.865026][T31931] binder: 31930:31931 ioctl 4018620d 200000000240 returned -16 [ 1245.884370][T31929] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 1245.909734][T31921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1245.939317][T20873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1245.962731][T20873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1246.031136][T20873] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1246.052247][T20873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.096405][T20873] usb 6-1: config 0 descriptor?? [ 1246.255136][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1246.361238][T31942] loop2: detected capacity change from 0 to 256 [ 1246.455199][T31942] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 1246.515274][T31942] FAT-fs (loop2): Filesystem has been set read-only [ 1246.545254][T20873] hid_parser_main: 453 callbacks suppressed [ 1246.545289][T20873] cp2112 0003:10C4:EA90.0077: unknown main item tag 0x0 [ 1246.605680][T20873] cp2112 0003:10C4:EA90.0077: unknown main item tag 0x0 [ 1246.615844][T20873] cp2112 0003:10C4:EA90.0077: item fetching failed at offset 5/7 [ 1246.628290][T20873] cp2112 0003:10C4:EA90.0077: parse failed [ 1246.634342][T20873] cp2112 0003:10C4:EA90.0077: probe with driver cp2112 failed with error -22 [ 1246.799826][T20873] usb 6-1: USB disconnect, device number 53 [ 1247.075164][T31958] loop0: detected capacity change from 0 to 1024 [ 1247.105037][T31958] EXT4-fs: Ignoring removed orlov option [ 1247.168886][T31958] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1247.321569][T31970] loop4: detected capacity change from 0 to 2048 [ 1247.392668][T31970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1247.585357][ T5641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1247.695437][T31978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1247.720000][ T5640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.035933][T31992] loop4: detected capacity change from 0 to 512 [ 1248.046472][T31992] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1248.056304][T31992] EXT4-fs (loop4): invalid journal inode [ 1248.056412][T31992] EXT4-fs (loop4): can't get journal size [ 1248.090668][T31992] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 1248.091333][T31992] System zones: 1-12, 13-13 [ 1248.092615][T31992] EXT4-fs (loop4): 1 truncate cleaned up [ 1248.114508][T31992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1248.371188][ T31] audit: type=1800 audit(1785570776.006:297): pid=31992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10948" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1248.442774][T32001] loop5: detected capacity change from 0 to 512 [ 1248.750878][ T5640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1249.014548][T32012] netlink: 'syz.6.10959': attribute type 3 has an invalid length. [ 1249.030200][T32013] netlink: 144 bytes leftover after parsing attributes in process `syz.3.10960'. [ 1249.053581][T32012] netlink: 'syz.6.10959': attribute type 1 has an invalid length. [ 1249.074825][T32012] netlink: 224 bytes leftover after parsing attributes in process `syz.6.10959'. [ 1249.226190][T32022] loop0: detected capacity change from 0 to 1024 [ 1249.246089][T32022] EXT4-fs: inline encryption not supported [ 1249.280434][T32022] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1249.356960][T32022] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #3: block 1: comm syz.0.10962: lblock 1 mapped to illegal pblock 1 (length 1) [ 1249.371451][T32022] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1249.372928][T32022] EXT4-fs (loop0): Remounting filesystem read-only [ 1249.382108][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1249.382146][ C0] EXT4-fs (loop0): initial error at time 1785570777: ext4_map_blocks:833: inode 3: block 1 [ 1249.382213][ C0] EXT4-fs (loop0): last error at time 1785570777: ext4_map_blocks:833: inode 3: block 1 [ 1249.420150][T32022] Quota error (device loop0): write_blk: dquota write failed [ 1249.428342][T32022] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1249.438811][T32022] EXT4-fs (loop0): 1 orphan inode deleted [ 1249.452008][T32022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1249.783406][ T5641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1250.468479][T32043] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1250.587415][T32025] loop3: detected capacity change from 0 to 32768 [ 1250.628226][T32025] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.10963 (32025) [ 1250.716067][T32025] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1250.766876][T32025] BTRFS info (device loop3): using crc32c checksum algorithm [ 1250.816584][T32063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10980'. [ 1250.996291][T32025] BTRFS info (device loop3): enabling ssd optimizations [ 1251.060581][T32025] BTRFS info (device loop3): turning on async discard [ 1251.090035][T32025] BTRFS info (device loop3): enabling free space tree [ 1251.930379][ T5631] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1252.044428][T32097] loop2: detected capacity change from 0 to 128 [ 1252.088276][T32097] EXT4-fs: Ignoring removed nobh option [ 1252.248913][T32097] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1252.394754][T32097] ext4 filesystem being mounted at /1867/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1252.908002][ T5629] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1253.224337][T32114] loop0: detected capacity change from 0 to 8 [ 1253.298957][T32114] SQUASHFS error: Unable to read inode 0x2000 [ 1253.464731][T32114] loop0: detected capacity change from 0 to 1024 [ 1253.512286][T32114] hfsplus: failed to load extents file [ 1253.948589][ T5756] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1254.120413][ T5756] usb 6-1: Using ep0 maxpacket: 16 [ 1254.139914][ T5756] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1254.185572][ T5756] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1254.223678][T20565] Bluetooth: hci5: Malformed LE Event: 0x0d [ 1254.251322][ T5756] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1254.269657][ T5756] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.289100][ T5756] usb 6-1: Product: syz [ 1254.293461][ T5756] usb 6-1: Manufacturer: syz [ 1254.300355][ T5756] usb 6-1: SerialNumber: syz [ 1254.312403][ T5756] usb 6-1: config 0 descriptor?? [ 1254.330068][ T5756] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1254.348542][ T5756] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1254.396387][T32132] loop3: detected capacity change from 0 to 128 [ 1254.433823][T32132] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1254.485159][T32132] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1254.946444][ T5756] em28xx 6-1:0.0: chip ID is em28178 [ 1255.192276][ T5756] usb 6-1: USB disconnect, device number 54 [ 1255.241290][ T5756] em28xx 6-1:0.0: Disconnecting em28xx [ 1255.475722][ T5756] em28xx 6-1:0.0: Freeing device [ 1255.664207][T32159] netlink: 'syz.3.11014': attribute type 3 has an invalid length. [ 1256.100921][T32178] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1256.111613][T32178] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1256.546094][T32186] loop6: detected capacity change from 0 to 2048 [ 1256.599508][T32189] loop4: detected capacity change from 0 to 128 [ 1256.648629][T32189] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1256.670120][T32186] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1256.772476][ T31] audit: type=1800 audit(1785570784.406:298): pid=32189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11027" name="file2" dev="loop4" ino=1049030 res=0 errno=0 [ 1256.845889][T32186] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1256.859713][T32197] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 1256.881898][T32186] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1256.919865][T32197] FAT-fs (loop4): Filesystem has been set read-only [ 1256.928988][T32186] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1256.928988][T32186] [ 1256.943523][T32186] EXT4-fs (loop6): Total free blocks count 0 [ 1256.965345][T32186] EXT4-fs (loop6): Free/Dirty block details [ 1256.974508][T32186] EXT4-fs (loop6): free_blocks=2415919104 [ 1256.995848][T32186] EXT4-fs (loop6): dirty_blocks=64 [ 1257.019229][T32186] EXT4-fs (loop6): Block reservation details [ 1257.040313][T32186] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 1257.144888][T28272] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1257.164089][ T5640] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1257.201372][ T9644] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1257.780049][ T30] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1257.943588][T32217] xt_hashlimit: size too large, truncated to 1048576 [ 1257.961164][ T30] usb 6-1: Using ep0 maxpacket: 16 [ 1257.991661][ T30] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1258.032348][ T30] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1258.063067][ T30] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1258.123730][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.200040][ T30] usb 6-1: config 0 descriptor?? [ 1258.711134][ T30] mcp2221 0003:04D8:00DD.0078: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1259.130019][ T30] usb 6-1: USB disconnect, device number 55 [ 1259.190481][T32248] loop6: detected capacity change from 0 to 128 [ 1259.234771][T32246] loop0: detected capacity change from 0 to 2048 [ 1259.250603][T32248] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1259.282588][T32246] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1259.326557][T32248] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1259.663873][T32255] loop4: detected capacity change from 0 to 128 [ 1259.708911][T32256] loop3: detected capacity change from 0 to 1024 [ 1259.755665][T32255] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1259.784785][T32259] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11050'. [ 1259.834508][T32256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1259.861126][T32255] ext4 filesystem being mounted at /1849/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1259.898548][T32256] ext4 filesystem being mounted at /1923/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1260.112090][T32256] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.11051: lblock 0 mapped to illegal pblock 0 (length 1) [ 1260.219134][T32256] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1260.265181][T32256] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1260.265181][T32256] [ 1260.478783][ T5631] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1260.499916][ T5640] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1260.550084][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1261.035284][T32252] loop2: detected capacity change from 0 to 32768 [ 1261.953553][T32296] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x04 [ 1262.239439][T32283] loop3: detected capacity change from 0 to 32768 [ 1262.295468][T32283] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1262.396013][T32313] loop0: detected capacity change from 0 to 512 [ 1262.540432][T32313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1262.548643][T32283] XFS (loop3): Ending clean mount [ 1262.744271][T32313] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1262.813798][T32313] ext4 filesystem being remounted at /1817/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1263.017187][ T5641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1263.164602][T32335] loop2: detected capacity change from 0 to 128 [ 1263.224189][T32335] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1263.256164][T32335] hpfs: filesystem error: improperly stopped [ 1263.276513][ T5631] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1263.294276][T32335] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1263.302388][T32335] hpfs: You really don't want any checks? You are crazy... [ 1263.310007][T32335] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 1263.318229][T32335] hpfs: code page support is disabled [ 1263.323815][T32335] hpfs: hpfs_map_4sectors(): unaligned read [ 1263.329962][T32335] hpfs: hpfs_map_4sectors(): unaligned read [ 1263.338592][T32335] hpfs: filesystem error: unable to find root dir [ 1263.905052][T32347] loop2: detected capacity change from 0 to 128 [ 1264.026579][T32347] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1264.089745][T32347] ext4 filesystem being mounted at /1882/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1264.366902][ T672] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1264.424881][T32359] udc dummy_udc.0: soft-connect without a gadget driver [ 1264.699153][ T5629] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1264.708408][T32365] loop9: detected capacity change from 0 to 524287936 [ 1265.495372][T32384] loop3: detected capacity change from 0 to 512 [ 1265.561840][T32384] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1265.640545][T32384] EXT4-fs (loop3): 1 truncate cleaned up [ 1265.743677][T32384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1265.856175][T32355] loop5: detected capacity change from 0 to 32768 [ 1265.892777][T32355] [ 1265.892777][T32355] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1265.892777][T32355] [ 1265.961003][T32392] i2c i2c-0: new_device: Invalid device name [ 1266.022470][T32396] loop6: detected capacity change from 0 to 128 [ 1266.048859][ T31] audit: type=1800 audit(1785570793.686:299): pid=32355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.11089" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 1266.103296][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1266.284552][T32396] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1266.361475][ T3334] [ 1266.361475][ T3334] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1266.361475][ T3334] [ 1266.403846][T32399] loop2: detected capacity change from 0 to 256 [ 1266.428610][T32396] ext4 filesystem being mounted at /1471/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1266.469364][T32399] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 1266.534323][ T3334] [ 1266.534323][ T3334] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1266.534323][ T3334] [ 1266.592564][ T5634] [ 1266.592564][ T5634] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1266.592564][ T5634] [ 1266.773442][ T117] [ 1266.773442][ T117] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1266.773442][ T117] [ 1266.782047][ T9644] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1266.840116][ T5634] [ 1266.840116][ T5634] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1266.840116][ T5634] [ 1267.006089][T32403] sg_write: data in/out 19942/1 bytes for SCSI command 0x32-- guessing data in; [ 1267.006089][T32403] program syz.3.11107 not setting count and/or reply_len properly [ 1267.074398][T32412] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1267.240804][T32417] loop0: detected capacity change from 0 to 512 [ 1267.738283][ T30] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1267.819448][T32429] loop5: detected capacity change from 0 to 256 [ 1267.953217][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1268.003263][ T30] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1268.041215][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1268.109026][ T30] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1268.153736][ T30] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1268.192163][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.234977][ T30] usb 3-1: config 0 descriptor?? [ 1268.508955][ T30] hdpvr 3-1:0.0: firmware version 0x8 dated 5 [ 1268.637536][T32446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11130'. [ 1268.711701][ T30] hdpvr 3-1:0.0: device init failed [ 1268.746395][ T30] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 1268.815795][ T30] usb 3-1: USB disconnect, device number 61 [ 1269.099521][T32454] loop5: detected capacity change from 0 to 2048 [ 1269.155373][T32454] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1269.236893][T32459] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1269.362833][T32459] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1269.413097][T32459] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1269.450532][T32459] Remounting filesystem read-only [ 1269.527425][T32466] loop0: detected capacity change from 0 to 128 [ 1269.566591][T32466] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1269.601990][ T5634] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 1270.224927][T32468] could not allocate digest TFM handle rmd128-generic [ 1270.395457][T32490] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11147'. [ 1270.759232][T32500] loop0: detected capacity change from 0 to 64 [ 1270.823611][ T31] audit: type=1800 audit(1785570798.456:300): pid=32500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11152" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 1270.889467][T32494] loop2: detected capacity change from 0 to 4096 [ 1271.049656][T32494] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 1271.073996][ T5641] hfs: node 4:3 still has 1 user(s)! [ 1271.081769][T32494] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 1271.202159][ T31] audit: type=1800 audit(1785570798.836:301): pid=32494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11150" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 1271.240176][T32494] ntfs3(loop2): ino=1e, "file1" attr_set_size_ex [ 1271.261296][T32509] netlink: 27 bytes leftover after parsing attributes in process `syz.0.11157'. [ 1271.299023][T32492] ntfs3(loop2): ino=1e, "file1" attr_set_size_ex [ 1271.343465][T32507] loop3: detected capacity change from 0 to 2048 [ 1271.433164][T32507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1271.600091][ T55] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 1271.643919][ T5629] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 1271.659789][ T5629] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1271.669799][T32507] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1271.686157][ T5629] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 1271.724249][ T55] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 1271.793428][T32507] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 2 with error 28 [ 1271.872695][T32507] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1271.872695][T32507] [ 1271.940161][T32507] EXT4-fs (loop3): Total free blocks count 0 [ 1271.978378][T32507] EXT4-fs (loop3): Free/Dirty block details [ 1272.007540][T32507] EXT4-fs (loop3): free_blocks=2415919504 [ 1272.026753][T32507] EXT4-fs (loop3): dirty_blocks=16 [ 1272.055853][T32507] EXT4-fs (loop3): Block reservation details [ 1272.090192][T32507] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 1272.125496][T32519] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 12 with error 28 [ 1272.330765][ T5631] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1272.585448][T32535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11168'. [ 1273.262573][T32554] hub 1-0:1.0: USB hub found [ 1273.292543][T32554] hub 1-0:1.0: 1 port detected [ 1273.435716][T32559] loop6: detected capacity change from 0 to 128 [ 1273.495556][T32560] loop0: detected capacity change from 0 to 64 [ 1273.498019][T32559] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1273.545197][T32559] ext4 filesystem being mounted at /1481/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1273.641944][T32559] fscrypt (loop6, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 1273.770148][ T9644] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1273.978764][T32568] loop5: detected capacity change from 0 to 512 [ 1274.080867][T32568] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1274.162956][T32568] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1274.210550][T32568] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 not in group (block 1)! [ 1274.270172][T32568] EXT4-fs (loop5): group descriptors corrupted! [ 1274.861671][T32589] loop6: detected capacity change from 0 to 512 [ 1274.926011][T32589] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.11193: inode has both inline data and extents flags [ 1274.968586][T32589] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1274.977619][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1274.993346][ C1] EXT4-fs (loop6): initial error at time 1785570802: ext4_orphan_get:1399: inode 15 [ 1275.002824][ C1] EXT4-fs (loop6): last error at time 1785570802: ext4_orphan_get:1399: inode 15 [ 1275.019711][T32589] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.11193: couldn't read orphan inode 15 (err -117) [ 1275.035660][T32589] loop6: lost filesystem error report for type 5 error -117 [ 1275.053145][T32589] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1275.143227][T32553] loop2: detected capacity change from 0 to 32768 [ 1275.180980][T32589] EXT4-fs warning (device loop6): ext4_empty_dir:3094: inode #2: comm syz.6.11193: directory missing '.' [ 1275.265681][T32553] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1275.467104][T32553] XFS (loop2): Ending clean mount [ 1275.572932][ T9644] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.742204][T32604] loop0: detected capacity change from 0 to 8192 [ 1275.919198][ T5629] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1277.809220][T32647] loop2: detected capacity change from 0 to 32768 [ 1277.894046][T32647] JBD2: Ignoring recovery information on journal [ 1277.988815][T32666] loop0: detected capacity change from 0 to 128 [ 1278.003340][T32666] EXT4-fs: Ignoring removed nobh option [ 1278.044598][T32666] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1278.099160][T32666] ext4 filesystem being mounted at /1851/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1278.135884][T32647] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1278.221780][T32666] fscrypt (loop0, inode 12): Reserved bits set in encryption policy [ 1278.389350][T32677] netlink: 'syz.5.11225': attribute type 4 has an invalid length. [ 1278.428874][ T5641] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1278.465707][ T31] audit: type=1800 audit(1785570806.096:302): pid=32647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11201" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 1278.481370][T32677] netlink: 'syz.5.11225': attribute type 1 has an invalid length. [ 1278.548412][T32677] netlink: 'syz.5.11225': attribute type 3 has an invalid length. [ 1278.577095][T32677] netlink: 184 bytes leftover after parsing attributes in process `syz.5.11225'. [ 1278.601563][T32680] loop6: detected capacity change from 0 to 64 [ 1278.632380][T32677] NCSI netlink: No device for ifindex 830110067 [ 1278.702740][T32680] hfs: walked past end of dir [ 1278.765154][T32678] loop3: detected capacity change from 0 to 4096 [ 1278.861636][ T5629] ocfs2: Unmounting device (7,2) on (node local) [ 1280.181712][T32708] loop2: detected capacity change from 0 to 2048 [ 1280.214149][T32708] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1280.250778][T32708] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1280.843190][T32728] ieee802154 phy0 wpan0: encryption failed: -22 [ 1281.064681][T32731] loop0: detected capacity change from 0 to 2048 [ 1281.110440][T32737] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1281.252179][T32737] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1281.311814][T32737] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1281.342991][T32739] netlink: 'syz.4.11251': attribute type 8 has an invalid length. [ 1281.355978][T32737] Remounting filesystem read-only [ 1281.384083][T32731] NILFS (loop0): mounting fs with errors [ 1281.576288][T32737] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1281.610058][T32737] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1281.625592][T32737] Remounting filesystem read-only [ 1281.636264][ T5641] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 1281.662432][T32744] loop5: detected capacity change from 0 to 256 [ 1281.733732][T32744] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1281.821799][T32744] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff) [ 1282.727210][ T304] loop0: detected capacity change from 0 to 2048 [ 1282.782758][ T304] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 1282.823206][ T308] loop3: detected capacity change from 0 to 512 [ 1282.881683][ T304] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1282.954479][ T308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1282.969540][ T308] ext4 filesystem being mounted at /1959/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1283.162983][ T319] loop8: detected capacity change from 0 to 7 [ 1283.331873][ T319] loop8: [POWERTEC] [ 1283.656668][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1283.859859][ T334] loop5: detected capacity change from 0 to 256 [ 1283.904483][ T334] exfat: Deprecated parameter 'utf8' [ 1283.992448][ T334] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 1284.272996][ T342] loop4: detected capacity change from 0 to 512 [ 1284.360278][ T342] EXT4-fs (loop4): 1 truncate cleaned up [ 1284.404586][ T342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1284.448645][ T31] audit: type=1800 audit(1785570812.086:303): pid=342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.11278" name="file1" dev="loop4" ino=13 res=0 errno=0 [ 1284.468982][ T342] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.11278: bg 0: block 465: padding at end of block bitmap is not set [ 1284.501035][ T342] EXT4-fs (loop4): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 117 [ 1284.518916][ T342] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1284.518916][ T342] [ 1284.820085][ T5640] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 1284.852719][ T353] loop6: detected capacity change from 0 to 1024 [ 1284.879360][ T5640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1284.890026][ T353] EXT4-fs: inline encryption not supported [ 1284.918818][ T353] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1285.075760][ T353] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1285.167111][ T353] ext4 filesystem being mounted at /1499/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1285.509562][ T368] netlink: 'syz.2.11289': attribute type 12 has an invalid length. [ 1285.548650][ T9644] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1285.549597][ T368] netlink: 'syz.2.11289': attribute type 29 has an invalid length. [ 1285.568550][ T367] loop0: detected capacity change from 0 to 1024 [ 1285.578006][ T367] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1285.649269][ T368] netlink: 148 bytes leftover after parsing attributes in process `syz.2.11289'. [ 1285.681391][ T367] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.11287: lblock 2 mapped to illegal pblock 2 (length 1) [ 1285.700323][ T367] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1285.700963][ T367] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 1285.710092][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1285.710128][ C1] EXT4-fs (loop0): initial error at time 1785570813: ext4_map_blocks:791: inode 3: block 2 [ 1285.710195][ C1] EXT4-fs (loop0): last error at time 1785570813: ext4_map_blocks:791: inode 3: block 2 [ 1285.833881][ T368] netlink: 'syz.2.11289': attribute type 1 has an invalid length. [ 1285.842046][ T367] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.11287: lblock 0 mapped to illegal pblock 48 (length 1) [ 1285.881574][ T368] netlink: 'syz.2.11289': attribute type 2 has an invalid length. [ 1285.914088][ T367] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1285.914445][ T367] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 1285.936244][ T368] netlink: 7 bytes leftover after parsing attributes in process `syz.2.11289'. [ 1286.021705][ T350] loop5: detected capacity change from 0 to 32768 [ 1286.024300][ T367] EXT4-fs error (device loop0): ext4_acquire_dquot:7039: comm syz.0.11287: Failed to acquire dquot type 0 [ 1286.140157][ T350] find_entry called with index = 0 [ 1286.158889][ T367] loop0: lost filesystem error report for type 5 error -117 [ 1286.167569][ T367] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1286.216304][ T350] read_mapping_page failed! [ 1286.247999][ T367] loop0: lost filesystem error report for type 5 error -117 [ 1286.248392][ T350] ERROR: (device loop5): txAbort: [ 1286.248392][ T350] [ 1286.263584][ T367] EXT4-fs error (device loop0): ext4_evict_inode:267: inode #11: comm syz.0.11287: mark_inode_dirty error [ 1286.354373][ T367] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1286.356293][ T367] EXT4-fs warning (device loop0): ext4_evict_inode:269: couldn't mark inode dirty (err -117) [ 1286.401260][ T350] ERROR: (device loop5): diFree: numfree > numinos [ 1286.401260][ T350] [ 1286.456951][ T367] EXT4-fs (loop0): 1 orphan inode deleted [ 1286.465036][ T367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1286.494067][ T3334] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 1286.568315][ T116] BUG at fs/jfs/jfs_txnmgr.c:933 assert(mp->nohomeok > 0) [ 1286.577106][ T3334] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 1286.594895][ T116] ------------[ cut here ]------------ [ 1286.600956][ T116] kernel BUG at fs/jfs/jfs_txnmgr.c:933! [ 1286.633746][ T3334] EXT4-fs error (device loop0): ext4_release_dquot:7075: comm kworker/u8:12: Failed to release dquot type 0 [ 1286.664142][ T116] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 1286.670620][ T116] CPU: 0 UID: 0 PID: 116 Comm: jfsCommit Tainted: G L syzkaller #0 PREEMPT(full) [ 1286.681324][ T116] Tainted: [L]=SOFTLOCKUP [ 1286.685651][ T116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1286.695711][ T116] RIP: 0010:txUnlock.cold+0xaa/0xac [ 1286.700964][ T116] Code: f6 ff 90 0f 0b e8 75 ae de 00 48 c7 c1 a0 68 18 8c ba a5 03 00 00 48 c7 c6 e0 67 18 8c 48 c7 c7 20 68 18 8c e8 36 a8 f6 ff 90 <0f> 0b e8 4e ae de 00 48 c7 c7 c0 69 18 8c e8 22 a8 f6 ff e9 99 ac [ 1286.720588][ T116] RSP: 0018:ffffc90002dcfcd0 EFLAGS: 00010282 [ 1286.726680][ T116] RAX: 0000000000000037 RBX: ffffc900029324c8 RCX: 0000000000000000 [ 1286.734745][ T116] RDX: 0000000000000037 RSI: ffffffff81e89e59 RDI: fffff520005b9f8b [ 1286.742719][ T116] RBP: ffff8880774c85d0 R08: 0000000000000005 R09: 0000000000000000 [ 1286.750698][ T116] R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000000 [ 1286.758760][ T116] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000011 [ 1286.766739][ T116] FS: 0000000000000000(0000) GS:ffff888123dda000(0000) knlGS:0000000000000000 [ 1286.775682][ T116] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1286.782270][ T116] CR2: 00007fd084255880 CR3: 00000000739ee000 CR4: 0000000000350ef0 [ 1286.790249][ T116] Call Trace: [ 1286.793532][ T116] [ 1286.796464][ T116] jfs_lazycommit+0x706/0xab0 [ 1286.801172][ T116] ? __pfx_jfs_lazycommit+0x10/0x10 [ 1286.806381][ T116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.812028][ T116] ? rcu_is_watching+0x12/0xc0 [ 1286.816830][ T116] ? __pfx_default_wake_function+0x10/0x10 [ 1286.822668][ T116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.828334][ T116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.833985][ T116] ? __kthread_parkme+0x18c/0x230 [ 1286.839033][ T116] ? kthread+0x13a/0x450 [ 1286.843300][ T116] ? __pfx_jfs_lazycommit+0x10/0x10 [ 1286.848506][ T116] kthread+0x370/0x450 [ 1286.852603][ T116] ? __pfx_kthread+0x10/0x10 [ 1286.857399][ T116] ret_from_fork+0x72b/0xd50 [ 1286.862007][ T116] ? __pfx_ret_from_fork+0x10/0x10 [ 1286.867136][ T116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.872790][ T116] ? __switch_to+0x800/0x10f0 [ 1286.877499][ T116] ? __switch_to_asm+0x39/0x70 [ 1286.882285][ T116] ? __pfx_kthread+0x10/0x10 [ 1286.886908][ T116] ret_from_fork_asm+0x1a/0x30 [ 1286.891719][ T116] [ 1286.894736][ T116] Modules linked in: [ 1286.900457][ T116] ---[ end trace 0000000000000000 ]--- [ 1286.944435][ T367] EXT4-fs: Ignoring removed bh option [ 1286.950096][ T367] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 1287.016541][ T367] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.11287: lblock 0 mapped to illegal pblock 48 (length 1) [ 1287.060097][ T116] RIP: 0010:txUnlock.cold+0xaa/0xac [ 1287.073712][ T367] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117 [ 1287.081341][ T116] Code: f6 ff 90 0f 0b e8 75 ae de 00 48 c7 c1 a0 68 18 8c ba a5 03 00 00 48 c7 c6 e0 67 18 8c 48 c7 c7 20 68 18 8c e8 36 a8 f6 ff 90 <0f> 0b e8 4e ae de 00 48 c7 c7 c0 69 18 8c e8 22 a8 f6 ff e9 99 ac [ 1287.106309][ T116] RSP: 0018:ffffc90002dcfcd0 EFLAGS: 00010282 [ 1287.113360][ T116] RAX: 0000000000000037 RBX: ffffc900029324c8 RCX: 0000000000000000 [ 1287.123477][ T116] RDX: 0000000000000037 RSI: ffffffff81e89e59 RDI: fffff520005b9f8b [ 1287.131660][ T116] RBP: ffff8880774c85d0 R08: 0000000000000005 R09: 0000000000000000 [ 1287.149564][ T367] EXT4-fs: Ignoring removed bh option [ 1287.160438][ T367] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 1287.171044][ T116] R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000000 [ 1287.181068][ T116] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000011 [ 1287.220568][ T5641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1287.230036][ T116] FS: 0000000000000000(0000) GS:ffff888123dda000(0000) knlGS:0000000000000000 [ 1287.249031][ T116] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1287.262745][ T116] CR2: 000055555fbc4a38 CR3: 00000000739ee000 CR4: 0000000000350ef0 [ 1287.274379][ T116] Kernel panic - not syncing: Fatal exception [ 1287.280776][ T116] Kernel Offset: disabled [ 1287.285091][ T116] Rebooting in 86400 seconds..