last executing test programs: 4m5.13663139s ago: executing program 3 (id=331): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x101400c, &(0x7f0000000000)={[{@nomblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x3f2}}, {@noload}]}, 0x1, 0x485, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0xfffffffffffffffe) 4m4.818869048s ago: executing program 3 (id=335): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000080)={0x0, 0x1, 0xfff, 0xe, 0x8, 0x3d, 0xe, "ff03cae90eed00000400b2400d00337400c4ba00", "39e8460062ff010000000000000000d91500"}) 4m4.433039768s ago: executing program 3 (id=338): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x4f6e, 0x4) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, &(0x7f0000000080)=0x4a) 4m4.326528271s ago: executing program 3 (id=340): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000340)={[{@gid}, {@mode={'mode', 0x3d, 0x4}}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3970461, &(0x7f0000000440)={[{}]}) 4m3.984165329s ago: executing program 3 (id=344): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x1ff}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)=""/218, 0xda}, {&(0x7f00000032c0)=""/237, 0xed}, {&(0x7f00000019c0)=""/4110, 0x100e}, {&(0x7f0000002d00)=""/221, 0xdd}, {&(0x7f00000035c0)=""/57, 0x39}, {&(0x7f0000000040)=""/137, 0x89}, {&(0x7f0000000340)=""/163, 0xa3}], 0x7}, 0x8001}, {{0x0, 0x0, 0x0}, 0x7}], 0x4, 0x2100, 0x0) 4m2.902930907s ago: executing program 3 (id=351): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m2.801921239s ago: executing program 32 (id=351): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m47.213743972s ago: executing program 2 (id=505): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x8, 0x7f, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000001400)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000001f007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 3m47.076744506s ago: executing program 2 (id=509): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000200)="76657468303a30000000000000000000020000000a") ioctl(r0, 0x8914, &(0x7f0000000080)='veth0:0\x00') 3m46.601166868s ago: executing program 2 (id=513): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000004850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000e3008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000013c0)="b9ff03316844268cb89e14f086dd", 0x0, 0x51, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m46.294132496s ago: executing program 2 (id=526): syz_mount_image$jfs(&(0x7f0000000240), &(0x7f00000004c0)='./file1\x00', 0x3010846, &(0x7f0000000500)={[{@iocharset={'iocharset', 0x3d, 'cp874'}}, {@discard_size={'discard', 0x3d, 0xa27}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@discard}, {@discard}, {@errors_remount}, {@discard_size={'discard', 0x3d, 0x2}}, {@errors_remount}, {@errors_continue}, {@nodiscard}, {@noquota}]}, 0x24, 0x6304, &(0x7f0000001f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 3m44.656510307s ago: executing program 2 (id=537): unshare(0x2040400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x140, 0x1, 0x10000}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x3, r0, 0x4}, 0x38) 3m43.270067462s ago: executing program 2 (id=550): syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', 0x90, &(0x7f0000000600)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0x13d) creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x85) 3m42.687457437s ago: executing program 33 (id=550): syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', 0x90, &(0x7f0000000600)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0x13d) creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x85) 3m30.364336888s ago: executing program 5 (id=675): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000240)="3f000000010014", 0x7) 3m30.212433022s ago: executing program 5 (id=678): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x40, 0x40, 0x41}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)="7a47aa3dcdb26a85f3a4dcf01fe80d2c1a7b37591586fa5a24ee2d29c353f33edcb5ce5fd708122dc6571eb7557c527e", &(0x7f00000008c0), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), &(0x7f0000000100)=""/31}, 0x20) 3m29.87381044s ago: executing program 5 (id=679): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x66, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x6071, 0x0, 0xe7}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3m29.645766016s ago: executing program 5 (id=682): syz_mount_image$jfs(&(0x7f0000000240), &(0x7f00000004c0)='./file1\x00', 0x3010846, &(0x7f0000000500)={[{@iocharset={'iocharset', 0x3d, 'cp874'}}, {@discard_size={'discard', 0x3d, 0xa27}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@discard}, {@discard}, {@errors_remount}, {@discard_size={'discard', 0x3d, 0x2}}, {@errors_remount}, {@errors_continue}, {@nodiscard}, {@noquota}]}, 0x24, 0x6304, &(0x7f0000001f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 3m28.226877732s ago: executing program 5 (id=687): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xff}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x1c00) 3m27.149821419s ago: executing program 5 (id=693): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000006c0)=""/72, 0x48, 0x0, 0x0, 0x0, 0x3, 0x10000000}}, 0x120) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) 3m26.576892233s ago: executing program 34 (id=693): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000006c0)=""/72, 0x48, 0x0, 0x0, 0x0, 0x3, 0x10000000}}, 0x120) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) 1m38.211867702s ago: executing program 7 (id=1937): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) munlockall() 1m37.916278629s ago: executing program 7 (id=1940): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000ab00000095"], 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m37.768131363s ago: executing program 7 (id=1943): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x61d1, 0x0) 1m37.529142678s ago: executing program 7 (id=1947): syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0x1, 0x62a, &(0x7f0000000440)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) creat(&(0x7f0000000200)='./file0/file1\x00', 0x288) 1m37.253476965s ago: executing program 7 (id=1954): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 1m36.6462984s ago: executing program 7 (id=1965): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x4, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x4081, 0xb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0xc1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b40)={0x2c, &(0x7f0000000880)={0x40, 0xb, 0x28, {0x28, 0xa, "9b28a058deaac07df37e12b4bf90f205323dc9839ea447530f0b14c0b37d369258e6bd8b6935"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m36.443765605s ago: executing program 35 (id=1965): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x4, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x4081, 0xb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0xc1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b40)={0x2c, &(0x7f0000000880)={0x40, 0xb, 0x28, {0x28, 0xa, "9b28a058deaac07df37e12b4bf90f205323dc9839ea447530f0b14c0b37d369258e6bd8b6935"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.361686648s ago: executing program 4 (id=3097): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x2, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f000001fcc0)={'syztnl1\x00', &(0x7f000001fc40)={'ip6gre0\x00', r1, 0x2f, 0x6, 0x74, 0x101, 0x40, @dev={0xfe, 0x80, '\x00', 0x42}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x8, 0x401}}) 3.197040592s ago: executing program 4 (id=3101): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0000:00:03.0', 0xc) 3.062240885s ago: executing program 4 (id=3104): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="4041000300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.383948112s ago: executing program 8 (id=3116): syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.480527994s ago: executing program 8 (id=3129): syz_mount_image$nilfs2(&(0x7f0000002680), &(0x7f00000026c0)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0023e555b9c3fa6eb33ac47b8ff4af91652bcdadba6016b4febaefbf7ab1de9f9fc4b85dd11eb3d1d8f02b8edbb8d57cae0b642b13f86ad961208d93d147b403510e2bb85973c96a68a34335934125f954a59319e300306af03272e8040cbe7d49670be69710ee3b2abd38392a1b548c10073c15bb0e88fd0885977f8a07d1334f2abd76c074e6a8e645961aefc9"], 0x1, 0x267d, &(0x7f0000002740)="$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") capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40106e80, 0x0) 1.047726105s ago: executing program 8 (id=3134): mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000680)='1', 0x1) 981.723896ms ago: executing program 1 (id=3135): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) pwritev2(r0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000240)="a62257b796c5", 0x6}], 0x2, 0x6, 0xa2, 0x0) 973.204896ms ago: executing program 4 (id=3136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a0011"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 951.269617ms ago: executing program 6 (id=3137): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x88, 0x87}, 0x20) 854.072739ms ago: executing program 8 (id=3139): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3200002, &(0x7f0000000bc0)={[{@norecovery}, {@quota}, {@nojournal_checksum}, {@resgid}, {@bsdgroups}]}, 0x3, 0x617, &(0x7f0000001b00)="$eJzs3c9rHFUcAPDv7CZp0hSTBlHrwQZEWtAmTdpKEA/tVUqoP/Cih8YmrbVpG5qIpgpNoV4E8SIieBKx/hda7LUnPXnw4kkKQaXeBFd2dybJJrv5sUl2Svfzge3OzNvJ+06T776Zt+/NBtC2Bsv/FCIORMRMEtGXLCyVdURaOFh93YO/Pz5XfiRRKr3+50Ak6bbs9Un63Jvu3B0RP/+UxEBxbb2z89cvTUxPT11L14fnLs8Mz85fP3Lx8sSFqQtTV0ZfHB07cfzE2MjRpo7rxtpN/5y+9d4HfZ+Ov/Xd1/8mI9//Np7EyXglfeHK49gpgzFY+T9J1hb1ju10ZTkppn8npVKplG1LOvKNic3Lfn+dEfFk9EUxln95ffHJq7kGB+yqUlJ97wbaUdJU/vfsfCBAi2XnAdm1/err4EIuZyVAKyyeqnYArM3/jmrfYHRX+gb2PkhiZbdOEhHN9czV2hcR9+6O3zp/d/xW7FI/HFDfws2IeKpe/ieV/O+P7uiv5H+hJv/L5wVn0ufy9tearH91V7H8h9ap5n/3uvkfDfL/bPn5RjWH32mq9u6VK+/21OR/T7OHBAAAAAAAAG3rzqmIeGHp8/+u5c/fCkvjf6LO+J/eiDi5A/UPrlpf+/l/4f4OVAPUsXgq4uW6438L2ejf/uKKKaz90Zmcvzg9dTQiHouIw9G5p7w+sk4dRz4b+KpR2WA6/i97lOu/l44FTOO437Gndp/JibmJbRwykFq8GcWn647/TZba/6RO+19+Z5jZZB0Dz90+06hs4/wHdkvpm4hDddv/5btWJOvfn2O4cj4wnJ0VrPXMR5//0Kj+ZvPfLSZg+xZvRuxdP//7k5X365ndeh3H5jtKjcqaPf/vSt6o3FWoK9324cTc3LWRiK7kdLG8tWb76NZjhkdRlg9ZvpTz//Czy/lfrNP/V+/8vyciFlb97OSv2jnFmSf+6/29UTzO/yE/5fyf3FL7v/WF0dv9Pzaqf3Pt//FKW3843aL/D6q+zNK0q7Nme5107KhX1PKAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOARUIiIfZEUhpaWC4WhoYjeiHg89hamr87OPX/+6vtXJstlle//L2Tf9NtXXU+y7//vX7E+umr9WETsj4gvij2V9aFzV6cn8z54AAAAAAAAAAAAAAAAAAAAeEj0Npj/X/ZHMe/ogF3XkXcAQG7q5P8vecQBtJ72H9rXZvL/bAviAFpP+w/tS/5D+5L/0L7Wz/+3x1oWCNBy2n9oX/IfAAAAAAAeKfsP3vk1iYiFl3oqj7KutKwz18iA3VbIOwAgN27xA+3L0B9oX67xgWSD8u6GO22053pmzm1jZwAAAAAAAAAAAABoO4cOmP8P7cr8f2hf5v9D+8rm/x/MOQ6g9VzjA7HBTP668/833GsFFxoAAAAAAAAAAAAAsG2z89cvTUxPT13LYeHbPCptvPBmE3tlo5pzD765hVKpdKMc/sMSz84vJOkI9ZZUmg2Fb/2Rdm3mALO5fpv7yWvfK/a06D0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo9X8AAAD//3CyIXA=") unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200) 852.530659ms ago: executing program 1 (id=3140): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) 837.63295ms ago: executing program 4 (id=3141): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) write$binfmt_script(r0, &(0x7f0000000040), 0x4) 652.528854ms ago: executing program 6 (id=3143): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000000280)) 651.954104ms ago: executing program 1 (id=3144): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 624.844055ms ago: executing program 0 (id=3145): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, &(0x7f0000000100), 0x2, 0x6a9, &(0x7f0000000440)="$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") ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) 583.405436ms ago: executing program 6 (id=3146): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x2, 0x2}}, 0x20) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001200a97e5f127000fcdbdf1c07"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 506.265188ms ago: executing program 6 (id=3147): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x4, r1}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@llc={0x4, {@snap={0xaa, 0xab, "15", "6da3c1", 0x88f8}}}}}, 0x0) 427.07027ms ago: executing program 0 (id=3148): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001800)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) 346.394092ms ago: executing program 0 (id=3149): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x58, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0d}]}]}, 0x58}}, 0x0) 345.808282ms ago: executing program 0 (id=3150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="14002380060016001305000005001f"], 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) 317.424762ms ago: executing program 0 (id=3151): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e0100003801") 297.630123ms ago: executing program 1 (id=3152): socket(0x2, 0x2, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close(0x3) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 233.001544ms ago: executing program 8 (id=3153): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 228.663805ms ago: executing program 6 (id=3163): setns(0xc9, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r0 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 183.133996ms ago: executing program 1 (id=3154): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x66, &(0x7f00000004c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x30, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0x6, 0x0, 0x0, '\x00', {0xd, 0x6, "310300", 0xf4e, 0x89, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @loopback}}}}}}}}, 0x0) 152.884946ms ago: executing program 0 (id=3155): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 17.15595ms ago: executing program 6 (id=3156): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) symlinkat(&(0x7f00000000c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x280080) 16.33962ms ago: executing program 8 (id=3157): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8080, &(0x7f00000008c0)={[{@fat=@quiet}, {@fat=@errors_continue}, {@fat=@uid}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@fat=@check_normal}, {@fat=@check_normal}, {@nodots}, {@nodots}, {@fat=@nfs}, {@nodots}, {@nodots}, {@fat=@sys_immutable}, {@dots}, {@nodots}, {@fat=@quiet}]}, 0x21, 0x25c, &(0x7f0000000640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 615.56µs ago: executing program 1 (id=3158): openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket(0xa, 0x5, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8, 0x0, 0x3}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x8}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 0s ago: executing program 4 (id=3159): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0xfffffffffffffffe) ioctl$sock_netrom_SIOCADDRT(r0, 0x5411, &(0x7f0000000000)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, 'syz0\x00', @bcast, 0x0, 0x0, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) kernel console output (not intermixed with test programs): nd, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 253.319874][ T5362] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.336629][T10004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.346653][ T5363] hid-alps 0003:044E:1215.001D: unknown main item tag 0x0 [ 253.363337][ T5362] usb 2-1: Product: syz [ 253.367775][ T5363] hid-alps 0003:044E:1215.001D: unknown main item tag 0x0 [ 253.375281][ T5362] usb 2-1: Manufacturer: syz [ 253.380089][T10004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.405753][ T6699] Bluetooth: hci4: command 0x0409 tx timeout [ 253.413344][ T5362] usb 2-1: SerialNumber: syz [ 253.418185][ T5363] hid-alps 0003:044E:1215.001D: unknown main item tag 0x0 [ 253.434764][ T5362] usb 2-1: config 0 descriptor?? [ 253.439977][ T5363] hid-alps 0003:044E:1215.001D: unknown main item tag 0x0 [ 253.460370][ T5363] hid-alps 0003:044E:1215.001D: unknown main item tag 0x0 [ 253.468100][ T5363] hid-alps 0003:044E:1215.001D: item fetching failed at offset 32/40 [ 253.473729][T10004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.487302][ T5363] hid-alps 0003:044E:1215.001D: parse failed [ 253.506274][ T5363] hid-alps: probe of 0003:044E:1215.001D failed with error -22 [ 253.544424][T10028] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 253.568199][ T5363] usb 7-1: USB disconnect, device number 12 [ 253.581703][T10028] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 253.635675][ T144] device hsr_slave_0 left promiscuous mode [ 253.666608][ T144] device hsr_slave_1 left promiscuous mode [ 253.681262][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.690701][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.735614][ T5362] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 253.751195][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.759441][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.780817][ T144] device bridge_slave_1 left promiscuous mode [ 253.801070][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.842001][ T144] device bridge_slave_0 left promiscuous mode [ 253.887198][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.940270][ T144] device veth1_macvtap left promiscuous mode [ 253.953591][ T144] device veth0_macvtap left promiscuous mode [ 253.959718][ T144] device veth1_vlan left promiscuous mode [ 253.984728][ T144] device veth0_vlan left promiscuous mode [ 254.031119][T10058] loop0: detected capacity change from 0 to 1024 [ 254.080968][T10058] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 254.179696][T10058] hfsplus: filesystem is marked journaled, leaving read-only. [ 254.259179][T10062] loop4: detected capacity change from 0 to 1024 [ 254.296746][T10060] loop6: detected capacity change from 0 to 4096 [ 254.334508][ T5362] gspca_m5602: Failed to find a sensor [ 254.340080][ T5362] ALi m5602 2-1:0.88: ALi m5602 webcam failed [ 254.407141][ T5362] usb 2-1: USB disconnect, device number 15 [ 254.735891][T10072] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 254.743970][T10072] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 254.750725][T10072] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 254.757688][T10072] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 254.764505][T10072] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 254.774487][T10072] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 254.781290][T10072] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 254.788203][T10072] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 254.795608][T10072] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 254.802421][T10072] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 254.817101][T10072] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 254.836286][T10072] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 254.853785][T10072] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 254.870675][T10072] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 254.941084][ T144] team0 (unregistering): Port device team_slave_1 removed [ 254.993975][ T144] team0 (unregistering): Port device team_slave_0 removed [ 255.027457][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.049360][T10078] loop4: detected capacity change from 0 to 256 [ 255.068985][T10078] exfat: Deprecated parameter 'utf8' [ 255.082542][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.112341][T10078] exfat: Deprecated parameter 'utf8' [ 255.121345][T10078] exfat: Deprecated parameter 'namecase' [ 255.129661][T10078] exfat: Deprecated parameter 'namecase' [ 255.192298][T10078] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 255.346698][ T144] bond0 (unregistering): Released all slaves [ 255.483438][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 255.591548][T10090] loop4: detected capacity change from 0 to 8192 [ 255.679054][T10090] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 255.708531][T10004] device hsr_slave_0 entered promiscuous mode [ 255.728544][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.734926][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.764630][T10004] device hsr_slave_1 entered promiscuous mode [ 255.903732][T10004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.911435][T10004] Cannot create hsr debugfs directory [ 256.315000][T10116] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2014'. [ 256.509503][T10088] loop1: detected capacity change from 0 to 32768 [ 256.639081][T10135] loop6: detected capacity change from 0 to 8 [ 256.695764][T10088] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 256.695764][T10088] [ 256.706649][T10004] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 256.718271][T10004] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 256.759254][T10004] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 256.773587][T10088] ERROR: (device loop1): remounting filesystem as read-only [ 256.796380][T10088] xtLookup: xtSearch returned -5 [ 256.812601][T10088] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 256.812601][T10088] [ 256.819562][T10004] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 256.965260][T10144] loop4: detected capacity change from 0 to 64 [ 257.245963][T10004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.384879][T10004] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.422697][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.441784][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.502656][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.544106][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.571647][ T4495] Bluetooth: hci4: command 0x040f tx timeout [ 257.592295][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.592519][T10157] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 257.599495][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.634519][ T23] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 257.646253][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.690114][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.729645][ T26] audit: type=1326 audit(1786502797.324:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10162 comm="syz.0.2030" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4445b80d9 code=0x0 [ 257.767378][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.774580][ T1279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.831424][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 257.868476][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.903403][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 257.933518][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.997222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.023535][ T23] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.039265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.053362][ T23] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.058484][T10175] loop6: detected capacity change from 0 to 64 [ 258.092541][T10004] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 258.107563][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 258.130546][ T23] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 258.146960][T10004] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.163298][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.194698][T10175] attempt to access beyond end of device [ 258.194698][T10175] loop6: rw=0, want=1026, limit=64 [ 258.210353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 258.223868][T10175] Buffer I/O error on dev loop6, logical block 512, async page read [ 258.232505][T10175] attempt to access beyond end of device [ 258.232505][T10175] loop6: rw=0, want=113154, limit=64 [ 258.254431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.274356][ T23] usb 2-1: config 0 descriptor?? [ 258.306104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.325575][T10175] Buffer I/O error on dev loop6, logical block 56576, async page read [ 258.327562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 258.384004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.408318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.458271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.497458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 258.778768][T10206] loop0: detected capacity change from 0 to 512 [ 258.788439][ T23] mcp2221 0003:04D8:00DD.001E: unbalanced delimiter at end of report description [ 258.821066][ T23] mcp2221 0003:04D8:00DD.001E: can't parse reports [ 258.860016][ T23] mcp2221: probe of 0003:04D8:00DD.001E failed with error -22 [ 258.896430][T10206] EXT4-fs (loop0): Test dummy encryption mode enabled [ 258.942373][T10206] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.2043: inode #1: comm syz.0.2043: iget: illegal inode # [ 259.030452][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.044571][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.083434][T10206] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.2043: error while reading EA inode 1 err=-117 [ 259.097086][ T5363] usb 2-1: USB disconnect, device number 16 [ 259.115026][T10206] EXT4-fs (loop0): 1 orphan inode deleted [ 259.120840][T10206] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,inode_readahead_blks=0x0000000000800000,resgid=0x0000000000000000,noinit_itable,errors=continue,minixdf,usrjquota=,test_dummy_encryption=v1,discard,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 259.160233][T10004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.643680][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 260.099963][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 260.126739][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.179756][T10252] loop1: detected capacity change from 0 to 4096 [ 260.193831][T10262] loop4: detected capacity change from 0 to 128 [ 260.228817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 260.244620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 260.314915][T10267] loop0: detected capacity change from 0 to 128 [ 260.325990][T10004] device veth0_vlan entered promiscuous mode [ 260.355567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 260.364923][T10267] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 260.366025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 260.402164][T10272] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 260.426050][T10267] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 260.453162][T10252] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 260.480428][T10252] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=12) [ 260.554565][T10004] device veth1_vlan entered promiscuous mode [ 260.620671][T10252] Remounting filesystem read-only [ 260.633390][T10252] NILFS (loop1): error -5 truncating bmap (ino=12) [ 260.680869][T10004] device veth0_macvtap entered promiscuous mode [ 260.762296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 260.788816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 260.821299][ T4188] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 260.838448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 260.919701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.988751][T10004] device veth1_macvtap entered promiscuous mode [ 261.019367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 261.036706][T10287] loop4: detected capacity change from 0 to 512 [ 261.045318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 261.059451][T10277] loop6: detected capacity change from 0 to 8192 [ 261.138370][T10287] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 261.162703][T10004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.214758][T10287] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.2069: bad orphan inode 131083 [ 261.257167][T10277] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 261.273642][T10277] REISERFS (device loop6): using ordered data mode [ 261.280227][T10277] reiserfs: using flush barriers [ 261.286083][T10004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.313391][T10287] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000009,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 261.341778][T10004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.352502][T10277] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 261.359656][T10277] REISERFS (device loop6): checking transaction log (loop6) [ 261.469035][ T26] audit: type=1800 audit(1786502801.064:85): pid=10287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2069" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 261.521522][T10004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.554182][T10004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.608365][T10004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.654735][T10004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.697135][T10004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.728943][T10004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.735919][T10277] REISERFS (device loop6): Using tea hash to sort names [ 261.752076][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 261.781575][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.788810][T10277] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 261.813181][T10004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.848183][T10004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.912601][T10004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.959878][T10004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.997287][T10004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.039573][T10004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.070456][T10004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.101101][T10004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.133631][T10004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.165726][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 262.192457][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 262.257005][T10004] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.286149][T10004] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.313313][T10004] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.322107][T10004] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.432167][T10309] loop4: detected capacity change from 0 to 1024 [ 262.708207][ T4252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.733538][ T4252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.793969][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 262.846938][ T1224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.864731][ T1224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.903104][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 262.920989][T10321] loop4: detected capacity change from 0 to 16 [ 263.023125][T10326] loop1: detected capacity change from 0 to 2048 [ 263.051777][T10329] loop0: detected capacity change from 0 to 256 [ 263.149512][T10326] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.173438][T10321] erofs: (device loop4): mounted with root inode @ nid 36. [ 263.215912][T10334] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1968'. [ 263.486770][T10342] loop0: detected capacity change from 0 to 256 [ 263.866638][T10363] loop1: detected capacity change from 0 to 2048 [ 263.920093][T10363] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 263.973041][T10363] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.053582][ T6699] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 264.073458][ T5362] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 264.211771][T10380] loop1: detected capacity change from 0 to 64 [ 264.326825][T10380] attempt to access beyond end of device [ 264.326825][T10380] loop1: rw=0, want=1026, limit=64 [ 264.366231][T10380] Buffer I/O error on dev loop1, logical block 512, async page read [ 264.402922][T10380] attempt to access beyond end of device [ 264.402922][T10380] loop1: rw=0, want=113154, limit=64 [ 264.423511][ T6699] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 264.462024][ T6699] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 264.487660][T10380] Buffer I/O error on dev loop1, logical block 56576, async page read [ 264.507514][ T6699] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 264.527171][ T5362] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 264.544421][ T5362] usb 7-1: config 0 has no interface number 0 [ 264.552442][ T6699] usb 9-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 264.604507][ T6699] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.642762][ T6699] usb 9-1: config 0 descriptor?? [ 264.705819][ T6699] hdpvr 9-1:0.0: Could not find bulk-in endpoint [ 264.712335][ T6699] hdpvr: probe of 9-1:0.0 failed with error -12 [ 264.773813][ T5362] usb 7-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 264.804106][ T5362] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.849010][ T5362] usb 7-1: Product: syz [ 264.859576][ T5362] usb 7-1: Manufacturer: syz [ 264.890087][T10401] loop0: detected capacity change from 0 to 1024 [ 264.898368][ T5362] usb 7-1: SerialNumber: syz [ 264.941192][ T5362] usb 7-1: config 0 descriptor?? [ 264.947383][ T6699] usb 9-1: USB disconnect, device number 2 [ 265.034711][T10401] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,nojournal_checksum,grpquota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,mb_optimize_scan=0x0000000000000001,i_version,,errors=continue. Quota mode: writeback. [ 265.126259][T10414] loop4: detected capacity change from 0 to 512 [ 265.186570][T10414] EXT4-fs (loop4): Test dummy encryption mode enabled [ 265.228234][T10414] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.2109: inode #1: comm syz.4.2109: iget: illegal inode # [ 265.256644][ T5362] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 265.305133][T10414] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.2109: error while reading EA inode 1 err=-117 [ 265.377180][T10414] EXT4-fs (loop4): 1 orphan inode deleted [ 265.386504][T10414] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,inode_readahead_blks=0x0000000000800000,resgid=0x0000000000000000,noinit_itable,errors=continue,minixdf,usrjquota=,test_dummy_encryption=v1,discard,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 265.614164][T10427] loop0: detected capacity change from 0 to 4096 [ 265.727135][T10427] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 265.844012][ T5362] gspca_m5602: Failed to find a sensor [ 265.849948][ T5362] ALi m5602 7-1:0.88: ALi m5602 webcam failed [ 265.878367][T10427] ntfs3: loop0: failed to convert "c46c" to koi8-u [ 265.893981][ T5362] usb 7-1: USB disconnect, device number 13 [ 266.452844][ T5363] petalynx 0003:18B1:0037.001F: fixing up Petalynx Maxter Remote report descriptor [ 266.477949][ T5363] petalynx 0003:18B1:0037.001F: unknown main item tag 0x0 [ 266.497345][ T5363] petalynx 0003:18B1:0037.001F: unknown main item tag 0x0 [ 266.509682][ T5363] petalynx 0003:18B1:0037.001F: unknown main item tag 0x0 [ 266.533009][ T5363] petalynx 0003:18B1:0037.001F: unknown main item tag 0x0 [ 266.544894][ T26] audit: type=1326 audit(1786502806.144:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10470 comm="syz.4.2129" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c2e2a20d9 code=0x0 [ 266.575393][ T5363] petalynx 0003:18B1:0037.001F: unknown main item tag 0x0 [ 266.601441][ T5363] petalynx 0003:18B1:0037.001F: unknown main item tag 0x0 [ 266.614725][T10473] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 266.623597][ T5363] petalynx 0003:18B1:0037.001F: unknown main item tag 0x0 [ 266.649907][ T5363] petalynx 0003:18B1:0037.001F: unknown main item tag 0x0 [ 266.668284][T10473] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 266.673096][ T5363] petalynx 0003:18B1:0037.001F: unknown main item tag 0x0 [ 266.694884][ T5363] petalynx 0003:18B1:0037.001F: unknown main item tag 0x0 [ 266.723432][ T5363] petalynx 0003:18B1:0037.001F: unknown main item tag 0x0 [ 266.733659][ T5363] petalynx 0003:18B1:0037.001F: unknown main item tag 0x0 [ 266.774259][ T5363] petalynx 0003:18B1:0037.001F: unknown main item tag 0x0 [ 266.799461][ T5363] petalynx 0003:18B1:0037.001F: unknown main item tag 0x0 [ 266.822063][ T5363] petalynx 0003:18B1:0037.001F: unknown main item tag 0x0 [ 266.847928][ T5363] petalynx 0003:18B1:0037.001F: unknown main item tag 0x0 [ 266.894445][ T5363] petalynx 0003:18B1:0037.001F: unknown main item tag 0x0 [ 266.901668][ T5363] petalynx 0003:18B1:0037.001F: unknown main item tag 0x0 [ 266.923895][ T5363] petalynx 0003:18B1:0037.001F: unknown main item tag 0x0 [ 266.931125][ T5363] petalynx 0003:18B1:0037.001F: unknown main item tag 0x0 [ 266.983360][ T5363] petalynx 0003:18B1:0037.001F: unexpected long global item [ 266.983716][ T5363] petalynx 0003:18B1:0037.001F: parse failed [ 266.983747][ T5363] petalynx: probe of 0003:18B1:0037.001F failed with error -22 [ 267.571816][T10505] set_capacity_and_notify: 3 callbacks suppressed [ 267.571833][T10505] loop6: detected capacity change from 0 to 512 [ 267.604011][T10507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2142'. [ 267.790641][T10505] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 267.879160][T10505] EXT4-fs error (device loop6): ext4_orphan_get:1432: comm syz.6.2141: bad orphan inode 131083 [ 267.910975][T10493] loop4: detected capacity change from 0 to 32768 [ 267.933502][T10505] EXT4-fs (loop6): mounted filesystem without journal. Opts: stripe=0x0000000000000009,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 268.098794][T10493] XFS (loop4): Mounting V5 Filesystem [ 268.125378][T10527] loop1: detected capacity change from 0 to 8192 [ 268.146432][ T26] audit: type=1800 audit(1786502807.744:87): pid=10505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2141" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 268.173488][T10532] syz.0.2148 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 268.191786][T10527] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 268.227470][T10527] REISERFS (device loop1): using ordered data mode [ 268.253539][T10527] reiserfs: using flush barriers [ 268.281053][T10527] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 268.384630][T10493] XFS (loop4): Ending clean mount [ 268.400912][T10493] XFS (loop4): Quotacheck needed: Please wait. [ 268.409473][T10527] REISERFS (device loop1): checking transaction log (loop1) [ 268.661453][T10493] XFS (loop4): Quotacheck: Done. [ 268.851276][T10527] REISERFS (device loop1): Using tea hash to sort names [ 268.865427][ T4197] XFS (loop4): Unmounting Filesystem [ 268.911641][T10527] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 269.773375][ T4228] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 269.867894][T10587] loop1: detected capacity change from 0 to 64 [ 269.962013][T10590] loop4: detected capacity change from 0 to 512 [ 270.020324][T10590] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 270.053685][ T4228] usb 7-1: Using ep0 maxpacket: 8 [ 270.081662][T10590] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 270.173129][T10590] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,mblk_io_submit,jqfmt=vfsold,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 270.202718][T10590] ext4 filesystem being mounted at /428/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.223580][ T4228] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.236410][ T4228] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 270.275975][T10590] EXT4-fs error (device loop4): ext4_get_first_dir_block:3597: inode #12: comm syz.4.2178: Attempting to read directory block (0) that is past i_size (3) [ 270.423716][ T4228] usb 7-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice= 0.40 [ 270.458486][ T4228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.471675][ T4228] usb 7-1: Product: syz [ 270.478473][ T4228] usb 7-1: Manufacturer: syz [ 270.483228][ T4228] usb 7-1: SerialNumber: syz [ 270.606359][T10612] loop4: detected capacity change from 0 to 1024 [ 270.733834][T10612] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,nojournal_checksum,grpquota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,mb_optimize_scan=0x0000000000000001,i_version,,errors=continue. Quota mode: writeback. [ 270.961647][ T4228] usb 7-1: unit 3 not found! [ 270.962683][T10620] loop8: detected capacity change from 0 to 8192 [ 270.977849][T10624] loop4: detected capacity change from 0 to 8 [ 270.987857][ T6699] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 271.003952][ T4228] usb 7-1: selecting invalid altsetting 1 [ 271.025341][ T4228] snd-usb-caiaq 7-1:1.1: can't set alt interface. [ 271.031846][ T4228] usb 7-1: unable to init card! (ret=-5) [ 271.049791][ T4228] snd-usb-caiaq: probe of 7-1:1.1 failed with error -5 [ 271.064971][ T4228] usb 7-1: USB disconnect, device number 14 [ 271.093031][T10593] loop0: detected capacity change from 0 to 32768 [ 271.122670][T10620] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 271.351905][T10593] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 271.361516][ T6699] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.384343][ T4503] udevd[4503]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 271.462673][ T6699] usb 2-1: New USB device found, idVendor=056a, idProduct=0093, bcdDevice= 0.00 [ 271.508272][ T6699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.565232][ T6699] usb 2-1: config 0 descriptor?? [ 271.664848][ T4194] ocfs2: Unmounting device (7,0) on (node local) [ 272.013961][T10654] vivid-001: ================= START STATUS ================= [ 272.057271][ T6699] wacom 0003:056A:0093.0020: unknown main item tag 0x0 [ 272.076135][ T6699] wacom 0003:056A:0093.0020: unknown main item tag 0x0 [ 272.077756][T10654] vivid-001: Test Pattern: [ 272.097724][T10659] loop0: detected capacity change from 0 to 256 [ 272.116881][ T6699] wacom 0003:056A:0093.0020: unknown main item tag 0x0 [ 272.122329][T10654] 75% Colorbar [ 272.132970][T10654] vivid-001: Fill Percentage of Frame: 100 [ 272.150486][ T6699] wacom 0003:056A:0093.0020: unknown main item tag 0x0 [ 272.184693][ T6699] wacom 0003:056A:0093.0020: unknown main item tag 0x0 [ 272.187871][T10654] vivid-001: Horizontal Movement: No Movement [ 272.214259][T10659] exfat: Deprecated parameter 'utf8' [ 272.220950][T10659] exfat: Deprecated parameter 'utf8' [ 272.228154][T10654] vivid-001: Vertical Movement: No Movement [ 272.229369][ T6699] wacom 0003:056A:0093.0020: unknown main item tag 0x0 [ 272.250885][T10654] vivid-001: OSD Text Mode: All [ 272.272960][T10654] vivid-001: Show Border: false [ 272.276275][T10659] exfat: Deprecated parameter 'namecase' [ 272.293190][T10654] vivid-001: Show Square: false [ 272.299027][T10654] vivid-001: Sensor Flipped Horizontally: false [ 272.310002][T10654] vivid-001: Sensor Flipped Vertically: false [ 272.325326][ T6699] wacom 0003:056A:0093.0020: unknown main item tag 0x0 [ 272.335926][T10659] exfat: Deprecated parameter 'namecase' [ 272.352976][T10654] vivid-001: Insert SAV Code in Image: false [ 272.398786][ T6699] wacom 0003:056A:0093.0020: unknown main item tag 0x0 [ 272.423400][T10654] vivid-001: Insert EAV Code in Image: false [ 272.429580][T10654] vivid-001: Reduced Framerate: false [ 272.438729][T10659] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 272.451128][T10654] vivid-001: Enable Capture Cropping: true grabbed [ 272.451174][T10654] vivid-001: Enable Capture Composing: true grabbed [ 272.451208][T10654] vivid-001: Enable Capture Scaler: true grabbed [ 272.451241][T10654] vivid-001: Timestamp Source: End of Frame [ 272.451266][T10654] vivid-001: Colorspace: SMPTE 170M [ 272.451290][T10654] vivid-001: Transfer Function: Default [ 272.451316][T10654] vivid-001: Y'CbCr Encoding: Default [ 272.451340][T10654] vivid-001: HSV Encoding: Hue 0-179 [ 272.451365][T10654] vivid-001: Quantization: Default [ 272.451389][T10654] vivid-001: Apply Alpha To Red Only: false [ 272.451414][T10654] vivid-001: Standard Aspect Ratio: [ 272.464280][ T6699] wacom 0003:056A:0093.0020: unknown main item tag 0x0 [ 272.543217][T10654] 4x3 [ 272.579470][T10654] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 272.638614][T10654] vivid-001: DV Timings: 640x480p59 inactive [ 272.645041][ T6699] wacom 0003:056A:0093.0020: unknown main item tag 0x0 [ 272.651979][ T6699] wacom 0003:056A:0093.0020: unknown main item tag 0x0 [ 272.678114][ T6699] wacom 0003:056A:0093.0020: unknown main item tag 0x0 [ 272.685274][T10654] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 272.685310][T10654] vivid-001: Maximum EDID Blocks: 2 [ 272.685336][T10654] vivid-001: Limited RGB Range (16-235): false [ 272.685361][T10654] vivid-001: Rx RGB Quantization Range: [ 272.703953][ T6699] wacom 0003:056A:0093.0020: unknown main item tag 0x0 [ 272.739175][ T6699] wacom 0003:056A:0093.0020: hidraw0: USB HID v0.07 Device [HID 056a:0093] on usb-dummy_hcd.1-1/input0 [ 272.798069][ T6699] usb 2-1: USB disconnect, device number 17 [ 272.813417][T10654] Automatic [ 272.816628][T10654] vivid-001: Power Present: 0x00000001 [ 272.935287][T10654] tpg source WxH: 720x576 (Y'CbCr) [ 272.940499][T10654] tpg field: 4 [ 272.991350][T10654] tpg crop: 720x576@0x0 [ 273.018059][T10654] tpg compose: 720x576@0x0 [ 273.022558][T10654] tpg colorspace: 1 [ 273.057512][T10654] tpg transfer function: 0/1 [ 273.062191][T10654] tpg Y'CbCr encoding: 0/1 [ 273.108797][T10674] loop0: detected capacity change from 0 to 2048 [ 273.115625][T10654] tpg quantization: 0/2 [ 273.143481][T10654] tpg RGB range: 0/2 [ 273.153846][T10654] vivid-001: ================== END STATUS ================== [ 273.237666][T10674] loop0: p2 < > p3 < p5 > p4 [ 273.242457][T10674] loop0: partition table partially beyond EOD, truncated [ 273.275044][T10671] fido_id[10671]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 273.295886][T10674] loop0: p2 start 4278190080 is beyond EOD, truncated [ 273.343622][T10674] loop0: p4 size 8192 extends beyond EOD, truncated [ 273.393729][T10674] loop0: p5 size 8192 extends beyond EOD, truncated [ 273.528203][T10688] loop6: detected capacity change from 0 to 2048 [ 273.543911][T10678] loop8: detected capacity change from 0 to 8192 [ 273.594721][T10688] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=3932051, location=3932051 [ 273.619640][T10688] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.668186][T10678] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal [ 273.726832][T10678] REISERFS (device loop8): using ordered data mode [ 273.778368][T10678] reiserfs: using flush barriers [ 273.824767][T10678] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 273.933723][T10678] REISERFS (device loop8): checking transaction log (loop8) [ 274.217214][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 274.231504][ T4503] udevd[4503]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 274.276221][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 274.343487][ T5361] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 274.374468][T10678] REISERFS (device loop8): Using tea hash to sort names [ 274.381857][T10678] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 274.406429][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 274.420071][ T7907] udevd[7907]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 274.431764][ T4503] udevd[4503]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 274.449603][T10670] loop1: detected capacity change from 0 to 32768 [ 274.566708][T10670] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #4097: inline data i_size 312 exceeds id_count 8 [ 274.589083][T10670] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 274.632289][T10670] OCFS2: File system is now read-only. [ 274.638385][T10670] (syz.1.2203,10670,0):ocfs2_read_locked_inode:554 ERROR: status = -30 [ 274.638416][ T5361] usb 5-1: Using ep0 maxpacket: 16 [ 274.666718][T10670] (syz.1.2203,10670,0):ocfs2_init_global_system_inodes:441 ERROR: status = -30 [ 274.706820][T10670] (syz.1.2203,10670,0):ocfs2_init_global_system_inodes:473 ERROR: status = -30 [ 274.726250][T10670] (syz.1.2203,10670,0):ocfs2_initialize_super:2279 ERROR: status = -30 [ 274.753474][T10670] (syz.1.2203,10670,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 274.783556][ T5361] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 274.890269][T10715] netlink: 'syz.6.2218': attribute type 41 has an invalid length. [ 274.983772][ T5361] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 275.020112][ T5361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.035079][T10720] loop8: detected capacity change from 0 to 1024 [ 275.048782][T10708] loop0: detected capacity change from 0 to 32768 [ 275.055437][ T5361] usb 5-1: Product: syz [ 275.060083][ T5361] usb 5-1: Manufacturer: syz [ 275.094952][ T5361] usb 5-1: SerialNumber: syz [ 275.126604][ T5361] r8152-cfgselector 5-1: config 0 descriptor?? [ 275.192463][T10708] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.2213 (10708) [ 275.254113][T10708] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 275.271525][T10708] BTRFS info (device loop0): using free space tree [ 275.284137][T10708] BTRFS info (device loop0): has skinny extents [ 275.403519][ T5361] r8152-cfgselector 5-1: Unknown version 0x0000 [ 275.454485][ T5361] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 275.575593][T10708] BTRFS info (device loop0): enabling ssd optimizations [ 275.605246][T10745] loop8: detected capacity change from 0 to 1024 [ 275.711383][ T5361] usb 5-1: USB disconnect, device number 14 [ 275.970374][T10725] loop6: detected capacity change from 0 to 32768 [ 275.971734][ T4181] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 9 /dev/loop0 scanned by udevd (4181) [ 276.016107][T10725] JBD2: Ignoring recovery information on journal [ 276.243591][T10725] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 276.381506][ T26] audit: type=1800 audit(1786502815.974:88): pid=10725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2222" name="bus" dev="loop6" ino=17058 res=0 errno=0 [ 276.682860][ T5847] ocfs2: Unmounting device (7,6) on (node local) [ 276.907126][T10773] loop0: detected capacity change from 0 to 512 [ 277.002015][T10773] EXT4-fs (loop0): 1 truncate cleaned up [ 277.047688][T10773] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,sysvgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,noauto_da_alloc,quota,grpjquota=,errors=remount-ro,nodiscard,. Quota mode: writeback. [ 277.152605][T10773] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz.0.2236: deleted inode referenced: 15 [ 277.172782][T10773] EXT4-fs (loop0): Remounting filesystem read-only [ 277.412062][T10797] loop4: detected capacity change from 0 to 16 [ 277.463976][T10797] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 277.567803][T10797] cramfs: empty filesystem [ 277.883502][T10806] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.2252: bg 0: block 127: padding at end of block bitmap is not set [ 277.898704][T10806] EXT4-fs (loop6): Remounting filesystem read-only [ 277.905565][T10806] EXT4-fs error (device loop6): ext4_xattr_block_set:2197: inode #15: comm syz.6.2252: bad block 0 [ 277.916923][T10806] EXT4-fs (loop6): Remounting filesystem read-only [ 277.923691][T10806] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #11: comm syz.6.2252: iget: bad extra_isize 58 (inode size 256) [ 277.937895][T10806] EXT4-fs (loop6): Remounting filesystem read-only [ 277.944632][T10806] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.2252: error while reading EA inode 11 err=-117 [ 277.957551][T10806] EXT4-fs (loop6): Remounting filesystem read-only [ 277.964423][T10806] EXT4-fs (loop6): 1 orphan inode deleted [ 277.970242][T10806] EXT4-fs (loop6): mounted filesystem without journal. Opts: data_err=ignore,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,noquota,usrquota,debug_want_extra_isize=0x000000000000003a,min_batch_time=0x0000000000000003,jqfmt=vfsold,nodelalloc,. Quota mode: writeback. [ 278.152793][T10817] set_capacity_and_notify: 2 callbacks suppressed [ 278.152811][T10817] loop8: detected capacity change from 0 to 64 [ 278.240062][T10822] loop1: detected capacity change from 0 to 512 [ 278.355866][T10827] loop4: detected capacity change from 0 to 2048 [ 278.371385][T10822] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 278.414653][T10827] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=3932051, location=3932051 [ 278.494927][T10827] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 278.506890][T10834] loop6: detected capacity change from 0 to 16 [ 278.514015][T10822] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.2257: bad orphan inode 13 [ 278.514787][T10834] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 278.548566][T10834] cramfs: empty filesystem [ 278.596441][T10836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2262'. [ 278.649111][T10822] ext4_test_bit(bit=12, block=18) = 1 [ 278.684189][T10822] is_bad_inode(inode)=0 [ 278.700945][T10822] NEXT_ORPHAN(inode)=0 [ 278.729051][T10822] max_ino=32 [ 278.732341][T10822] i_nlink=1 [ 278.758520][T10822] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 278.863339][ T5361] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 278.897380][T10822] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 278.959294][T10822] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2257: bg 0: block 248: padding at end of block bitmap is not set [ 279.027436][T10822] Quota error (device loop1): write_blk: dquota write failed [ 279.043521][T10822] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 279.070634][T10822] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.2257: Failed to acquire dquot type 1 [ 279.208013][ T1172] Quota error (device loop1): remove_tree: Getting block too big (0 >= 6) [ 279.231763][T10867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2273'. [ 279.246406][ T1172] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 1 [ 279.258565][ T5361] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 279.297903][ T5361] usb 9-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 279.323568][ T5362] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 279.421746][ T5361] usb 9-1: config 0 interface 0 has no altsetting 0 [ 279.471424][ T5361] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 279.555683][ T5361] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.583473][ T5362] usb 7-1: Using ep0 maxpacket: 32 [ 279.596062][T10875] loop0: detected capacity change from 0 to 16 [ 279.632580][ T5361] usb 9-1: config 0 descriptor?? [ 279.687337][T10832] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 279.702806][T10875] erofs: (device loop0): mounted with root inode @ nid 36. [ 279.743768][ T5362] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 279.805093][T10878] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2276'. [ 279.963884][ T5362] usb 7-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=4b.99 [ 279.973495][T10886] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.2278'. [ 279.978415][ T5362] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.003957][ T5362] usb 7-1: Product: syz [ 280.013565][ T5362] usb 7-1: Manufacturer: syz [ 280.018244][ T5362] usb 7-1: SerialNumber: syz [ 280.143007][T10891] sp0: Synchronizing with TNC [ 280.190470][ T5361] konepure 0003:1E7D:2DBE.0021: unknown main item tag 0x2 [ 280.198727][ T5361] konepure 0003:1E7D:2DBE.0021: unbalanced delimiter at end of report description [ 280.227112][ T5361] konepure 0003:1E7D:2DBE.0021: parse failed [ 280.260256][ T5361] konepure: probe of 0003:1E7D:2DBE.0021 failed with error -22 [ 280.331496][ T5362] usb 7-1: USB disconnect, device number 15 [ 280.358620][T10899] loop1: detected capacity change from 0 to 1024 [ 280.401161][ T5361] usb 9-1: USB disconnect, device number 3 [ 280.610851][ T4227] kernel write not supported for file /uhid (pid: 4227 comm: kworker/1:4) [ 280.835426][T10916] loop1: detected capacity change from 0 to 256 [ 280.982097][T10916] FAT-fs (loop1): Directory bread(block 64) failed [ 280.999438][T10916] FAT-fs (loop1): Directory bread(block 65) failed [ 281.023505][T10916] FAT-fs (loop1): Directory bread(block 66) failed [ 281.042830][T10926] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2289'. [ 281.046437][T10916] FAT-fs (loop1): Directory bread(block 67) failed [ 281.079421][T10916] FAT-fs (loop1): Directory bread(block 68) failed [ 281.092283][T10916] FAT-fs (loop1): Directory bread(block 69) failed [ 281.103516][T10916] FAT-fs (loop1): Directory bread(block 70) failed [ 281.117099][T10916] FAT-fs (loop1): Directory bread(block 71) failed [ 281.130290][T10916] FAT-fs (loop1): Directory bread(block 72) failed [ 281.150582][T10916] FAT-fs (loop1): Directory bread(block 73) failed [ 281.164979][T10895] loop4: detected capacity change from 0 to 32768 [ 282.250723][T10964] loop6: detected capacity change from 0 to 64 [ 282.373225][T10963] loop1: detected capacity change from 0 to 2048 [ 282.504045][T10968] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.560896][T10963] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '..' [ 282.587467][T10963] Remounting filesystem read-only [ 282.638285][T10972] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 282.665079][ T4188] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 282.711234][T10972] exFAT-fs (loop8): hint_cluster is invalid (17) [ 282.757855][T10975] sp0: Synchronizing with TNC [ 283.008187][T10938] attempt to access beyond end of device [ 283.008187][T10938] loop4: rw=1, want=4680040, limit=32768 [ 283.057595][T10938] metapage_write_end_io: I/O error [ 283.082117][T10938] blkno = 8ed2c, nblocks = 1 [ 283.093543][T10938] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 283.093543][T10938] [ 283.143692][T10938] ERROR: (device loop4): remounting filesystem as read-only [ 283.172832][T10938] UFO tlock:0xffffc900028f2438 [ 283.200147][T10938] ERROR: (device loop4): dtSearch: DT_GETPAGE: dtree page corrupt [ 283.200147][T10938] [ 283.200796][T10991] set_capacity_and_notify: 3 callbacks suppressed [ 283.200842][T10991] loop6: detected capacity change from 0 to 2048 [ 283.249626][T10938] jfs_lookup: dtSearch returned -5 [ 283.303405][ T276] blkno = 8ed2c, nblocks = 4 [ 283.308076][ T276] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 283.308076][ T276] [ 283.372719][ T4197] attempt to access beyond end of device [ 283.372719][ T4197] loop4: rw=1, want=4680040, limit=32768 [ 283.413662][T10991] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 283.425350][ T4197] metapage_write_end_io: I/O error [ 283.443551][ T4197] JFS: metapage_get_blocks failed [ 283.448681][ T4197] JFS: metapage_get_blocks failed [ 283.493366][ T4197] JFS: metapage_get_blocks failed [ 283.517539][ T4197] JFS: metapage_get_blocks failed [ 283.577319][T11003] loop0: detected capacity change from 0 to 512 [ 283.674562][T11003] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 283.705397][T11003] System zones: 0-2, 18-18, 34-34 [ 283.761254][T11003] EXT4-fs (loop0): 1 orphan inode deleted [ 283.833344][T11003] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000000,debug,nombcache,,errors=continue. Quota mode: none. [ 283.880063][T11003] ext4 filesystem being mounted at /543/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.182298][T11018] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 284.470770][T10993] loop8: detected capacity change from 0 to 32768 [ 284.509421][T10992] loop1: detected capacity change from 0 to 32768 [ 284.516366][T11022] loop0: detected capacity change from 0 to 2048 [ 284.619148][T10993] JBD2: Ignoring recovery information on journal [ 284.629316][T11027] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 284.729512][T11022] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '..' [ 284.806771][T10993] ocfs2: Mounting device (7,8) on (node local, slot 0) with writeback data mode. [ 284.863857][T11022] Remounting filesystem read-only [ 284.972599][ T4194] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 285.016457][ T26] audit: type=1800 audit(1786502824.604:89): pid=10993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2309" name="bus" dev="loop8" ino=17058 res=0 errno=0 [ 285.130921][T10004] ocfs2: Unmounting device (7,8) on (node local) [ 285.219699][T11043] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 285.237868][T11041] loop0: detected capacity change from 0 to 1024 [ 285.279312][T11040] loop6: detected capacity change from 0 to 2048 [ 285.306445][T11041] EXT4-fs (loop0): Ignoring removed bh option [ 285.323668][T11043] ALSA: mixer_oss: invalid index 1374389 [ 285.342431][T11041] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 285.489404][T11041] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,nogrpid,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none. [ 285.516423][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.537123][T11054] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 285.561413][T11040] NILFS error (device loop6): nilfs_dotdot: directory #12 missing '..' [ 285.674594][T11040] Remounting filesystem read-only [ 285.776950][ T5847] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 285.993917][T11068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2330'. [ 286.020286][T11067] loop6: detected capacity change from 0 to 256 [ 286.054804][T11068] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2330'. [ 286.093437][T11068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2330'. [ 286.131942][T11067] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 286.220358][T11067] exFAT-fs (loop6): hint_cluster is invalid (17) [ 286.348911][T11073] loop4: detected capacity change from 0 to 8 [ 286.492084][T11055] loop1: detected capacity change from 0 to 32768 [ 286.534326][T11073] SQUASHFS error: xz decompression failed, data probably corrupt [ 286.603969][T11073] SQUASHFS error: Failed to read block 0x108: -5 [ 286.632813][T11073] SQUASHFS error: Unable to read metadata cache entry [106] [ 286.653881][T11073] SQUASHFS error: Unable to read inode 0x11f [ 286.959661][T11090] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.2339'. [ 287.273467][T11099] erofs: (device loop1): mounted with root inode @ nid 36. [ 287.328998][T11099] attempt to access beyond end of device [ 287.328998][T11099] loop1: rw=524288, want=32, limit=16 [ 287.361455][T11102] ax25_connect(): syz.4.2344 uses autobind, please contact jreuter@yaina.de [ 287.396500][T11099] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -21 in[55, 4041] out[4096] [ 287.491117][ T26] audit: type=1800 audit(1786502827.084:90): pid=11099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2342" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 287.575783][T11060] XFS (loop8): Mounting V5 Filesystem [ 287.810736][T11060] XFS (loop8): Ending clean mount [ 287.869737][T11118] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 287.973993][T10004] XFS (loop8): Unmounting Filesystem [ 288.135084][T11118] ntfs3: loop4: ino=1e, "file1" encrypted i/o not supported [ 288.144771][ T26] audit: type=1800 audit(1786502827.744:91): pid=11118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2345" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 288.239027][ T144] ntfs3: loop4: ino=1e, Internal error [ 288.245557][ T144] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22. [ 288.293429][ T4488] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 288.703937][ T4488] usb 2-1: unable to get BOS descriptor or descriptor too short [ 288.743715][ T4488] usb 2-1: not running at top speed; connect to a high speed hub [ 288.833654][ T4488] usb 2-1: config 202 has an invalid interface number: 93 but max is 0 [ 288.842296][ T4488] usb 2-1: config 202 has no interface number 0 [ 288.862856][ T4488] usb 2-1: config 202 interface 93 altsetting 4 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 288.876296][T11125] set_capacity_and_notify: 4 callbacks suppressed [ 288.876314][T11125] loop6: detected capacity change from 0 to 32768 [ 288.896547][ T4488] usb 2-1: config 202 interface 93 has no altsetting 0 [ 289.063694][ T4488] usb 2-1: New USB device found, idVendor=0557, idProduct=2022, bcdDevice=90.e9 [ 289.072831][ T4488] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.097754][ T4488] usb 2-1: Product: syz [ 289.102001][ T4488] usb 2-1: Manufacturer: syz [ 289.115186][ T4488] usb 2-1: SerialNumber: syz [ 289.143705][T11128] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 289.153646][ T4227] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 289.290304][T11163] loop6: detected capacity change from 0 to 512 [ 289.369758][T11163] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 289.392626][T11163] System zones: 0-2, 18-18, 34-34 [ 289.444615][ T4488] pl2303 2-1:202.93: required interrupt-in endpoint missing [ 289.467479][T11163] EXT4-fs (loop6): 1 orphan inode deleted [ 289.489889][ T4488] usb 2-1: USB disconnect, device number 18 [ 289.509749][T11163] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000000,debug,nombcache,,errors=continue. Quota mode: none. [ 289.553543][ T4227] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 289.553576][T11163] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.587439][T11161] loop4: detected capacity change from 0 to 32768 [ 289.594257][ T4227] usb 9-1: config 0 interface 0 has no altsetting 0 [ 289.600922][ T4227] usb 9-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 289.615804][ T4227] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.642091][ T4227] usb 9-1: config 0 descriptor?? [ 289.684132][T11161] JBD2: Ignoring recovery information on journal [ 289.744397][T11161] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 289.848043][ T26] audit: type=1800 audit(1786502829.444:92): pid=11173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2354" name="bus" dev="loop4" ino=17058 res=0 errno=0 [ 289.935073][ T4197] ocfs2: Unmounting device (7,4) on (node local) [ 290.188508][ T4227] input: HID 04b4:07b1 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:04B4:07B1.0022/input/input29 [ 290.251191][T11181] loop6: detected capacity change from 0 to 4096 [ 290.291277][T11185] ax25_connect(): syz.1.2364 uses autobind, please contact jreuter@yaina.de [ 290.309353][T11181] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 290.332768][ T4227] cypress 0003:04B4:07B1.0022: input,hidraw0: USB HID v80.00 Joystick [HID 04b4:07b1] on usb-dummy_hcd.8-1/input0 [ 290.452661][ T4500] usb 9-1: USB disconnect, device number 4 [ 290.505816][T11181] ntfs3: loop6: ino=1e, "file1" encrypted i/o not supported [ 290.519129][ T26] audit: type=1800 audit(1786502830.114:93): pid=11181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2362" name="file1" dev="loop6" ino=30 res=0 errno=0 [ 290.592415][ T9] ntfs3: loop6: ino=1e, Internal error [ 290.608562][ T9] ntfs3: loop6: ntfs3_write_inode r=1e failed, -22. [ 290.769134][T11193] fido_id[11193]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 291.081770][T11207] netlink: 452 bytes leftover after parsing attributes in process `syz.0.2374'. [ 291.108255][T11211] loop6: detected capacity change from 0 to 128 [ 291.123405][T11207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2374'. [ 291.225161][T11211] ufs: ufstype=nextstep is supported read-only [ 291.328014][T11219] ax25_connect(): syz.0.2378 uses autobind, please contact jreuter@yaina.de [ 291.362223][T11221] loop8: detected capacity change from 0 to 512 [ 291.431343][T11225] netlink: 452 bytes leftover after parsing attributes in process `syz.6.2392'. [ 291.451056][T11225] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2392'. [ 291.460602][T11221] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 291.506332][T11221] EXT4-fs (loop8): 1 truncate cleaned up [ 291.512115][T11221] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable,nombcache,max_batch_time=0x0000000000000006,nouid32,noinit_itable,auto_da_alloc,,errors=continue. Quota mode: none. [ 291.626510][T11195] loop1: detected capacity change from 0 to 32768 [ 291.714761][ T4227] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 291.923365][ T4500] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 292.013410][ T4227] usb 5-1: Using ep0 maxpacket: 8 [ 292.154878][ T4227] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 292.176493][ T4227] usb 5-1: config 0 interface 0 has no altsetting 0 [ 292.190793][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 292.211006][ T4227] usb 5-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 292.242237][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.258261][ T4503] udevd[4503]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 292.283635][ T4227] usb 5-1: config 0 descriptor?? [ 292.303576][ T4500] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 292.322405][ T4503] udevd[4503]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 292.358857][ T4500] usb 1-1: config 0 interface 0 has no altsetting 0 [ 292.374265][ T4500] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 292.396140][ T4503] udevd[4503]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 292.427127][ T4500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.442567][ T4503] udevd[4503]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 292.455316][ T4500] usb 1-1: config 0 descriptor?? [ 292.744624][T11285] UBIFS error (pid: 11285): cannot open "upperdir=./file1,", error -22 [ 292.785858][ T4227] hid-alps 0003:044E:1215.0023: unknown main item tag 0x0 [ 292.816221][ T4227] hid-alps 0003:044E:1215.0023: unknown main item tag 0x0 [ 292.842575][ T4227] hid-alps 0003:044E:1215.0023: unknown main item tag 0x0 [ 292.860981][ T4227] hid-alps 0003:044E:1215.0023: unknown main item tag 0x0 [ 292.872128][T11292] netlink: 'syz.1.2416': attribute type 29 has an invalid length. [ 292.879273][ T4227] hid-alps 0003:044E:1215.0023: unknown main item tag 0x0 [ 292.889765][ T4227] hid-alps 0003:044E:1215.0023: item fetching failed at offset 32/40 [ 292.901373][T11292] netlink: 'syz.1.2416': attribute type 29 has an invalid length. [ 292.911342][ T4227] hid-alps 0003:044E:1215.0023: parse failed [ 292.919257][T11292] netlink: 'syz.1.2416': attribute type 29 has an invalid length. [ 292.943524][ T4227] hid-alps: probe of 0003:044E:1215.0023 failed with error -22 [ 292.967089][ T4500] input: HID 04b4:07b1 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:04B4:07B1.0024/input/input30 [ 293.013522][ T4227] usb 5-1: USB disconnect, device number 15 [ 293.096471][ T4500] cypress 0003:04B4:07B1.0024: input,hidraw0: USB HID v80.00 Joystick [HID 04b4:07b1] on usb-dummy_hcd.0-1/input0 [ 293.118162][ T5362] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 293.174586][ T4500] usb 1-1: USB disconnect, device number 14 [ 293.269943][T11304] fido_id[11304]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 293.306893][T11308] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2424'. [ 293.425203][T11316] loop8: detected capacity change from 0 to 2048 [ 293.536062][T11316] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.553628][ T5362] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 293.571443][ T5362] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.611689][ T5362] usb 7-1: config 0 has no interface number 0 [ 293.618154][ T5362] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 293.661398][ T5362] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 293.670660][T11326] loop4: detected capacity change from 0 to 256 [ 293.687397][ T5362] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.761854][T11326] FAT-fs (loop4): Directory bread(block 64) failed [ 293.812051][T11326] FAT-fs (loop4): Directory bread(block 65) failed [ 293.826773][T11326] FAT-fs (loop4): Directory bread(block 66) failed [ 293.841416][T11326] FAT-fs (loop4): Directory bread(block 67) failed [ 293.852194][T11326] FAT-fs (loop4): Directory bread(block 68) failed [ 293.864801][T11326] FAT-fs (loop4): Directory bread(block 69) failed [ 293.871575][T11326] FAT-fs (loop4): Directory bread(block 70) failed [ 293.890860][T11326] FAT-fs (loop4): Directory bread(block 71) failed [ 293.901112][ T5362] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 293.916531][T11326] FAT-fs (loop4): Directory bread(block 72) failed [ 293.923143][T11326] FAT-fs (loop4): Directory bread(block 73) failed [ 293.933489][ T5362] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.941602][ T5362] usb 7-1: Product: syz [ 293.957142][ T5362] usb 7-1: Manufacturer: syz [ 293.961816][ T5362] usb 7-1: SerialNumber: syz [ 294.011256][ T5362] usb 7-1: config 0 descriptor?? [ 294.429168][ T4488] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 294.736850][ T5362] usb 7-1: USB disconnect, device number 16 [ 294.801311][T11354] loop8: detected capacity change from 0 to 40427 [ 294.849250][T11354] F2FS-fs (loop8): invalid crc value [ 294.887783][T11354] F2FS-fs (loop8): Found nat_bits in checkpoint [ 294.977439][ T4488] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 294.996320][ T4488] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.004850][ T4492] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 295.036044][T11354] F2FS-fs (loop8): Cannot turn on quotas: -2 on 0 [ 295.041243][ T4488] usb 2-1: Product: syz [ 295.053510][T11354] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 295.057900][ T4488] usb 2-1: Manufacturer: syz [ 295.080516][ T4488] usb 2-1: SerialNumber: syz [ 295.147858][ T4488] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 295.235736][T10004] attempt to access beyond end of device [ 295.235736][T10004] loop8: rw=2049, want=45104, limit=40427 [ 295.374336][ T4492] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 295.404661][ T4492] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 295.438360][ T4492] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 295.448047][ T4492] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.469137][ T4492] usb 5-1: config 0 descriptor?? [ 295.497071][T11372] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 295.908290][ T4488] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 295.918209][T11394] loop6: detected capacity change from 0 to 128 [ 295.969868][T11394] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 296.017295][ T4492] hid-rmi 0003:06CB:81A7.0025: unknown main item tag 0x2 [ 296.028521][T11394] hpfs: filesystem error: improperly stopped [ 296.040694][T11394] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 296.045249][ T4492] hid-rmi 0003:06CB:81A7.0025: unknown main item tag 0x4 [ 296.053633][T11394] hpfs: You really don't want any checks? You are crazy... [ 296.069468][T11394] hpfs: hpfs_map_sector(): read error [ 296.075533][T11394] hpfs: code page support is disabled [ 296.079555][ T4492] hid-rmi 0003:06CB:81A7.0025: unknown main item tag 0xd [ 296.081362][T11394] hpfs: hpfs_map_4sectors(): unaligned read [ 296.098903][ T4492] hid-rmi 0003:06CB:81A7.0025: unknown main item tag 0x1 [ 296.106430][T11394] hpfs: hpfs_map_4sectors(): unaligned read [ 296.106446][T11394] hpfs: filesystem error: unable to find root dir [ 296.186058][ T4492] hid-rmi 0003:06CB:81A7.0025: unknown main item tag 0x3 [ 296.223400][ T4492] hid-rmi 0003:06CB:81A7.0025: unknown main item tag 0x1 [ 296.243721][ T4492] hid-rmi 0003:06CB:81A7.0025: hidraw0: USB HID v80.09 Device [HID 06cb:81a7] on usb-dummy_hcd.4-1/input0 [ 296.333469][ T4492] usb 5-1: USB disconnect, device number 16 [ 296.530336][ T5362] usb 2-1: USB disconnect, device number 19 [ 296.556209][T11414] fido_id[11414]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 296.681345][T11420] loop8: detected capacity change from 0 to 2048 [ 296.738903][T11420] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 297.163489][ T4488] usb 2-1: Service connection timeout for: 256 [ 297.169765][ T4488] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 297.195239][ T4488] ath9k_htc: Failed to initialize the device [ 297.235015][ T5362] usb 2-1: ath9k_htc: USB layer deinitialized [ 297.626968][T11466] loop6: detected capacity change from 0 to 1024 [ 298.618697][T11500] netlink: 'syz.8.2514': attribute type 16 has an invalid length. [ 298.989511][T11514] loop8: detected capacity change from 0 to 512 [ 299.047237][T11514] EXT4-fs (loop8): Ignoring removed nobh option [ 299.074180][T11514] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 299.131657][T11514] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 299.171124][T11514] System zones: 1-12 [ 299.179196][T11514] EXT4-fs (loop8): orphan cleanup on readonly fs [ 299.192206][T11514] EXT4-fs error (device loop8): ext4_iget_extra_inode:4573: inode #15: comm syz.8.2520: corrupted in-inode xattr [ 299.212092][T11514] EXT4-fs error (device loop8): ext4_orphan_get:1411: comm syz.8.2520: couldn't read orphan inode 15 (err -117) [ 299.231003][T11514] EXT4-fs (loop8): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,debug,init_itable=0x0000000000000004,journal_dev=0x0000000000000007,,errors=continue. Quota mode: none. [ 299.525841][T11526] loop8: detected capacity change from 0 to 64 [ 299.572918][T11526] MINIX-fs: mounting file system with errors, running fsck is recommended [ 299.706466][ T5362] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 299.854903][T11532] loop4: detected capacity change from 0 to 128 [ 299.999916][T11532] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 300.093718][ T5362] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 300.129284][ T5362] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 300.133685][T11532] hpfs: filesystem error: improperly stopped [ 300.154206][T11538] loop8: detected capacity change from 0 to 1764 [ 300.170888][T11532] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 300.172549][ T5362] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 300.243455][T11532] hpfs: You really don't want any checks? You are crazy... [ 300.253418][ T5362] usb 2-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 300.262518][ T5362] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.291782][T11532] hpfs: hpfs_map_sector(): read error [ 300.311790][T11532] hpfs: code page support is disabled [ 300.340284][ T5362] usb 2-1: config 0 descriptor?? [ 300.348349][T11532] hpfs: hpfs_map_4sectors(): unaligned read [ 300.394968][T11523] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 300.405904][T11532] hpfs: hpfs_map_4sectors(): unaligned read [ 300.411887][T11532] hpfs: filesystem error: unable to find root dir [ 300.564608][T11547] tipc: Started in network mode [ 300.590014][T11547] tipc: Node identity 2db70000000000005f2e, cluster identity 4711 [ 300.925743][ T5362] hid (null): usage index exceeded [ 300.942390][ T5362] hid (null): global environment stack underflow [ 300.982953][ T5362] uclogic 0003:28BD:0075.0026: ignoring exceeding usage max [ 301.001932][T11563] loop4: detected capacity change from 0 to 64 [ 301.019218][ T5362] uclogic 0003:28BD:0075.0026: ignoring exceeding usage max [ 301.051850][ T5362] uclogic 0003:28BD:0075.0026: usage index exceeded [ 301.071943][ T5362] uclogic 0003:28BD:0075.0026: item 0 4 2 2 parsing failed [ 301.088757][ T5362] uclogic 0003:28BD:0075.0026: parse failed [ 301.106437][ T5362] uclogic: probe of 0003:28BD:0075.0026 failed with error -22 [ 301.150683][T11563] MINIX-fs: mounting file system with errors, running fsck is recommended [ 301.167605][ T5362] usb 2-1: USB disconnect, device number 20 [ 301.456658][T11570] syz.0.2545 (11570) used obsolete PPPIOCDETACH ioctl [ 301.786372][T11576] loop8: detected capacity change from 0 to 4096 [ 301.888524][T11586] loop4: detected capacity change from 0 to 1024 [ 301.927409][T11576] ntfs3: loop8: Different NTFS' sector size (1024) and media sector size (512) [ 302.117392][T11566] loop6: detected capacity change from 0 to 40427 [ 302.186830][T11566] F2FS-fs (loop6): invalid crc value [ 302.243534][ T4492] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 302.269403][T11566] F2FS-fs (loop6): Found nat_bits in checkpoint [ 302.379643][T11606] loop4: detected capacity change from 0 to 512 [ 302.471408][T11566] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 302.495510][T11606] EXT4-fs (loop4): Ignoring removed nobh option [ 302.513864][ T4492] usb 1-1: Using ep0 maxpacket: 16 [ 302.523498][T11606] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 302.530889][T11566] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 302.583778][T11606] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 302.612375][T11606] System zones: 1-12 [ 302.638868][ T4492] usb 1-1: config 0 interface 0 has no altsetting 0 [ 302.653499][ T4492] usb 1-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 302.671397][ T4492] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.679931][T11606] EXT4-fs (loop4): orphan cleanup on readonly fs [ 302.691592][ T4492] usb 1-1: config 0 descriptor?? [ 302.751692][T11606] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.2560: corrupted in-inode xattr [ 302.798482][T11606] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.2560: couldn't read orphan inode 15 (err -117) [ 302.824287][ T5847] attempt to access beyond end of device [ 302.824287][ T5847] loop6: rw=2049, want=45104, limit=40427 [ 302.847158][T11606] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,debug,init_itable=0x0000000000000004,journal_dev=0x0000000000000007,,errors=continue. Quota mode: none. [ 302.993455][ T4500] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 303.184849][ T4492] wacom 0003:056A:0028.0027: unknown main item tag 0x6 [ 303.191897][ T4492] wacom 0003:056A:0028.0027: ignoring exceeding usage max [ 303.222452][ T4492] wacom 0003:056A:0028.0027: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 303.244875][ T4492] wacom 0003:056A:0028.0027: hidraw0: USB HID v0.08 Device [HID 056a:0028] on usb-dummy_hcd.0-1/input0 [ 303.267815][ T4492] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0028.0027/input/input33 [ 303.363557][ T4500] usb 9-1: config 0 has an invalid interface number: 117 but max is 0 [ 303.372373][ T4500] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.392663][ T4492] usb 1-1: USB disconnect, device number 15 [ 303.441202][ T4500] usb 9-1: config 0 has no interface number 0 [ 303.457710][ T4500] usb 9-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 303.507856][ T4500] usb 9-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 303.520151][ T4500] usb 9-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.618575][T11629] fido_id[11629]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 303.635595][T11625] loop4: detected capacity change from 0 to 8192 [ 303.693573][ T4500] usb 9-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 303.722475][ T4500] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.741202][ T4500] usb 9-1: Product: syz [ 303.747375][T11625] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 303.753828][ T4500] usb 9-1: Manufacturer: syz [ 303.783769][T11625] FAT-fs (loop4): Filesystem has been set read-only [ 303.790559][ T4500] usb 9-1: SerialNumber: syz [ 303.820030][ T4500] usb 9-1: config 0 descriptor?? [ 304.143388][ T21] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 304.400077][T11673] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2591'. [ 304.413361][ T21] usb 7-1: Using ep0 maxpacket: 16 [ 304.519611][ T4492] usb 9-1: USB disconnect, device number 5 [ 304.562241][T11682] loop4: detected capacity change from 0 to 128 [ 304.569341][ T21] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 304.592569][ T21] usb 7-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 304.604093][ T4500] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 304.604726][ T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.627104][ T21] usb 7-1: config 0 descriptor?? [ 304.634129][T11682] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 304.662486][T11682] hpfs: filesystem error: improperly stopped [ 304.674317][T11682] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 304.682258][T11682] hpfs: You really don't want any checks? You are crazy... [ 304.694372][T11682] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 304.702341][T11682] hpfs: code page support is disabled [ 304.709393][T11682] hpfs: hpfs_map_4sectors(): unaligned read [ 304.715925][T11682] hpfs: hpfs_map_4sectors(): unaligned read [ 304.722061][T11682] hpfs: filesystem error: unable to find root dir [ 304.811829][T11688] tmpfs: Too few inodes for current use [ 304.978012][ T4500] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 304.993710][ T4500] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 305.013363][ T4500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.080035][ T4500] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 305.126153][ T21] kye 0003:0458:5015.0028: unknown main item tag 0xd [ 305.132951][ T21] kye 0003:0458:5015.0028: unknown main item tag 0x0 [ 305.171248][ T21] kye 0003:0458:5015.0028: unknown main item tag 0x0 [ 305.190589][ T21] kye 0003:0458:5015.0028: unknown main item tag 0x0 [ 305.197741][ T21] kye 0003:0458:5015.0028: unknown main item tag 0x0 [ 305.214319][ T21] kye 0003:0458:5015.0028: unknown main item tag 0x0 [ 305.236811][ T21] kye 0003:0458:5015.0028: unknown main item tag 0x0 [ 305.258041][ T21] kye 0003:0458:5015.0028: hidraw0: USB HID v0.09 Device [HID 0458:5015] on usb-dummy_hcd.6-1/input0 [ 305.266065][T11702] loop8: detected capacity change from 0 to 8192 [ 305.280285][ T21] kye 0003:0458:5015.0028: tablet-enabling feature report not found [ 305.302708][T11702] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal [ 305.303796][ T21] kye 0003:0458:5015.0028: tablet enabling failed [ 305.320334][T11702] REISERFS (device loop8): using ordered data mode [ 305.329728][T11702] reiserfs: using flush barriers [ 305.336722][T11702] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 305.353784][T11702] REISERFS (device loop8): checking transaction log (loop8) [ 305.380323][T11702] REISERFS (device loop8): Using r5 hash to sort names [ 305.410280][ T21] usb 7-1: USB disconnect, device number 17 [ 305.424609][T11702] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 305.611812][T11705] fido_id[11705]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 305.691990][T11710] loop4: detected capacity change from 0 to 164 [ 305.731842][T11712] loop8: detected capacity change from 0 to 128 [ 305.782518][T11710] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 305.800615][T11712] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 305.829191][T11712] hpfs: filesystem error: improperly stopped [ 305.839606][T11712] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 305.850673][T11710] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 305.862175][T11712] hpfs: You really don't want any checks? You are crazy... [ 305.874503][T11712] hpfs: hpfs_map_sector(): read error [ 305.879942][T11712] hpfs: code page support is disabled [ 305.886393][T11710] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 305.896245][T11712] hpfs: hpfs_map_4sectors(): unaligned read [ 305.902241][T11712] hpfs: hpfs_map_4sectors(): unaligned read [ 305.941123][T11712] hpfs: filesystem error: unable to find root dir [ 306.214113][T11722] tmpfs: Too few inodes for current use [ 306.433870][ T4500] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 306.442589][ T4500] stv0680 1-1:4.0: last error: 2, command = 0x30 [ 306.497944][ T4500] usb 1-1: USB disconnect, device number 16 [ 306.535690][T11717] loop6: detected capacity change from 0 to 32768 [ 306.613493][ T5362] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 306.636214][T11717] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 306.683633][ T26] audit: type=1800 audit(1786502846.284:94): pid=11717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2610" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 306.751166][ T5847] ocfs2: Unmounting device (7,6) on (node local) [ 307.059471][ T5362] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 307.093167][ T5362] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 307.112729][ T5362] usb 9-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 307.139069][ T5362] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.149379][ T5362] usb 9-1: config 0 descriptor?? [ 307.177867][T11726] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 307.203531][ T5363] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 307.666363][ T5362] hid-rmi 0003:06CB:81A7.0029: unknown main item tag 0x2 [ 307.683483][ T5362] hid-rmi 0003:06CB:81A7.0029: unknown main item tag 0x4 [ 307.700852][ T5362] hid-rmi 0003:06CB:81A7.0029: unknown main item tag 0xd [ 307.721096][ T5362] hid-rmi 0003:06CB:81A7.0029: unknown main item tag 0x1 [ 307.741331][ T5362] hid-rmi 0003:06CB:81A7.0029: unknown main item tag 0x3 [ 307.761594][ T5362] hid-rmi 0003:06CB:81A7.0029: unknown main item tag 0x1 [ 307.785110][ T5362] hid-rmi 0003:06CB:81A7.0029: hidraw0: USB HID v80.09 Device [HID 06cb:81a7] on usb-dummy_hcd.8-1/input0 [ 307.813870][ T5363] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 307.827548][T11753] loop6: detected capacity change from 0 to 32768 [ 307.829687][ T5363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.857281][ T5363] usb 5-1: Product: syz [ 307.861526][ T5363] usb 5-1: Manufacturer: syz [ 307.866695][ T5363] usb 5-1: SerialNumber: syz [ 307.890823][ T7] usb 9-1: USB disconnect, device number 6 [ 307.904659][ T5363] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 307.990886][T11753] XFS (loop6): Mounting V5 Filesystem [ 308.031276][T11762] fido_id[11762]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 308.114594][T11753] XFS (loop6): Ending clean mount [ 308.252919][ T5847] XFS (loop6): Unmounting Filesystem [ 308.544620][ T5362] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 309.202821][T11773] loop8: detected capacity change from 0 to 32768 [ 309.212035][ T5363] usb 5-1: USB disconnect, device number 17 [ 309.258700][T11773] (syz.8.2631,11773,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 309.303919][T11773] (syz.8.2631,11773,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 309.372879][T11773] JBD2: Ignoring recovery information on journal [ 309.464316][T11773] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 309.561303][T11777] loop6: detected capacity change from 0 to 32768 [ 309.636366][T10004] ocfs2: Unmounting device (7,8) on (node local) [ 309.808404][T11795] program syz.4.2640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.851350][T11777] XFS (loop6): Mounting V5 Filesystem [ 309.884843][ T5362] usb 5-1: Service connection timeout for: 256 [ 309.901387][ T5362] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 309.927741][ T5362] ath9k_htc: Failed to initialize the device [ 309.934290][ T5363] usb 5-1: ath9k_htc: USB layer deinitialized [ 310.150319][T11777] XFS (loop6): Ending clean mount [ 310.187049][T11777] XFS (loop6): Quotacheck needed: Please wait. [ 310.312617][T11777] XFS (loop6): Quotacheck: Done. [ 310.477312][ T5847] XFS (loop6): Unmounting Filesystem [ 310.971666][T11806] loop8: detected capacity change from 0 to 32768 [ 311.186379][ T5362] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 311.254365][ T5362] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 311.306565][T11806] XFS (loop8): Mounting V5 Filesystem [ 311.325866][T11832] loop6: detected capacity change from 0 to 1024 [ 311.495073][T11806] XFS (loop8): Ending clean mount [ 311.682488][T10004] XFS (loop8): Unmounting Filesystem [ 312.124757][T11850] netlink: 'syz.1.2658': attribute type 5 has an invalid length. [ 312.622184][T11870] loop4: detected capacity change from 0 to 512 [ 312.804166][T11870] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.2666: inode #1: comm syz.4.2666: iget: illegal inode # [ 312.890048][T11870] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.2666: error while reading EA inode 1 err=-117 [ 312.990258][T11870] EXT4-fs (loop4): 1 orphan inode deleted [ 313.000343][T11870] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,grpjquota=,debug_want_extra_isize=0x0000000000000006,noauto_da_alloc,grpjquota=,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 313.105174][T11870] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #13: comm syz.4.2666: corrupted inode contents [ 313.155035][T11870] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #13: comm syz.4.2666: mark_inode_dirty error [ 313.206257][T11870] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2666: invalid indirect mapped block 234881024 (level 0) [ 313.234050][T11870] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #13: comm syz.4.2666: corrupted inode contents [ 313.267479][T11870] EXT4-fs error (device loop4): ext4_truncate:4286: inode #13: comm syz.4.2666: mark_inode_dirty error [ 313.291286][T11870] EXT4-fs error (device loop4) in ext4_setattr:5645: Corrupt filesystem [ 313.600989][T11884] loop8: detected capacity change from 0 to 32768 [ 314.001210][T11884] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 314.037508][ T26] audit: type=1800 audit(1786502853.634:95): pid=11884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2670" name="file1" dev="loop8" ino=17058 res=0 errno=0 [ 314.116291][T10004] ocfs2: Unmounting device (7,8) on (node local) [ 314.279228][T11916] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 314.531263][T11927] loop4: detected capacity change from 0 to 256 [ 314.533911][ T4500] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 314.568108][T11927] exfat: Deprecated parameter 'namecase' [ 314.623367][T11927] exfat: Deprecated parameter 'namecase' [ 314.691715][T11927] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf24e9af, utbl_chksum : 0xe619d30d) [ 314.914100][ T4500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.943956][ T4500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.972151][ T4500] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 315.002125][ T4500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.041713][ T4500] usb 2-1: config 0 descriptor?? [ 315.166905][T11924] loop6: detected capacity change from 0 to 32768 [ 315.272191][T11924] XFS (loop6): Mounting V5 Filesystem [ 315.362236][T11924] XFS (loop6): Ending clean mount [ 315.491874][T11948] program syz.8.2694 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.512412][ T5847] XFS (loop6): Unmounting Filesystem [ 315.543843][ T4500] pyra 0003:1E7D:2CF6.002B: unknown main item tag 0x0 [ 315.550720][ T4500] pyra 0003:1E7D:2CF6.002B: unknown main item tag 0x0 [ 315.584927][ T4500] pyra 0003:1E7D:2CF6.002B: unknown main item tag 0x0 [ 315.591921][ T4500] pyra 0003:1E7D:2CF6.002B: unknown main item tag 0x0 [ 315.599418][ T4500] pyra 0003:1E7D:2CF6.002B: unknown main item tag 0x0 [ 315.607076][ T4500] pyra 0003:1E7D:2CF6.002B: unknown main item tag 0x0 [ 315.621959][ T4500] pyra 0003:1E7D:2CF6.002B: unknown main item tag 0x0 [ 315.643705][ T4500] pyra 0003:1E7D:2CF6.002B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 315.957804][T11958] loop8: detected capacity change from 0 to 1024 [ 315.983604][ T4500] pyra 0003:1E7D:2CF6.002B: couldn't init struct pyra_device [ 316.020343][ T4500] pyra 0003:1E7D:2CF6.002B: couldn't install mouse [ 316.059104][ T4500] pyra: probe of 0003:1E7D:2CF6.002B failed with error -71 [ 316.105507][ T4500] usb 2-1: USB disconnect, device number 21 [ 316.317317][T11963] fido_id[11963]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 316.745602][T11954] loop4: detected capacity change from 0 to 32768 [ 316.821952][T11954] (syz.4.2697,11954,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 316.903203][T11954] (syz.4.2697,11954,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 316.978197][T11985] af_packet: tpacket_rcv: packet too big, clamped from 75 to 4294967286. macoff=82 [ 317.006987][T11954] JBD2: Ignoring recovery information on journal [ 317.151426][T11988] sd 0:0:1:0: PR command failed: 2 [ 317.159399][T11988] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 317.173621][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.179995][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.200754][T11954] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 317.239437][T11988] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 317.469334][ T4197] ocfs2: Unmounting device (7,4) on (node local) [ 317.478616][T11972] loop8: detected capacity change from 0 to 32768 [ 317.664194][T11972] XFS (loop8): Mounting V5 Filesystem [ 317.824866][T11972] XFS (loop8): Ending clean mount [ 317.951944][T10004] XFS (loop8): Unmounting Filesystem [ 317.971265][T12018] loop6: detected capacity change from 0 to 512 [ 318.124614][T12018] EXT4-fs (loop6): too many log groups per flexible block group [ 318.132451][T12018] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 318.172195][T12018] EXT4-fs (loop6): mount failed [ 318.398703][T12032] sd 0:0:1:0: PR command failed: 2 [ 318.409982][T12032] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 318.419562][T12032] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 318.497778][T12036] ip_tables: iptables: counters copy to user failed while replacing table [ 318.664968][ T21] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 318.689728][ T21] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 318.715504][T12046] loop6: detected capacity change from 0 to 512 [ 318.759612][T12046] EXT4-fs (loop6): Test dummy encryption mode enabled [ 318.797513][T12046] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 318.844894][T12046] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 318.860352][T12046] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,prjquota,usrquota,barrier=0x0000000000000003,usrjquota=errors=continue,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 318.978810][T12055] loop4: detected capacity change from 0 to 256 [ 319.231235][T12064] sd 0:0:1:0: PR command failed: 2 [ 319.241584][T12066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2743'. [ 319.251977][T12064] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 319.252016][T12064] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 319.723431][ T4492] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 319.973422][ T4492] usb 7-1: Using ep0 maxpacket: 8 [ 320.096196][ T4492] usb 7-1: config 6 has an invalid interface number: 2 but max is 0 [ 320.111366][ T4492] usb 7-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 320.129935][ T4492] usb 7-1: config 6 has no interface number 0 [ 320.136808][ T4492] usb 7-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 320.152100][T12078] loop4: detected capacity change from 0 to 32768 [ 320.310283][T12078] XFS (loop4): Mounting V5 Filesystem [ 320.320013][ T4492] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 320.340369][ T4492] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.352443][ T4492] usb 7-1: Product: syz [ 320.359788][ T4492] usb 7-1: Manufacturer: syz [ 320.369630][ T4492] usb 7-1: SerialNumber: syz [ 320.420610][T12078] XFS (loop4): Ending clean mount [ 320.426982][ T4492] hso 7-1:6.2: Failed to find INT IN ep [ 320.459779][ T26] audit: type=1800 audit(1786502860.054:96): pid=12078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2747" name="file1" dev="loop4" ino=6150 res=0 errno=0 [ 320.523975][ T4197] XFS (loop4): Unmounting Filesystem [ 320.721981][ T4492] usb 7-1: USB disconnect, device number 18 [ 321.240170][T12120] ip_tables: iptables: counters copy to user failed while replacing table [ 321.613415][ T4492] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 321.653326][T12125] loop4: detected capacity change from 0 to 32768 [ 321.717866][T12125] XFS (loop4): Mounting V5 Filesystem [ 321.792354][T12125] XFS (loop4): Ending clean mount [ 321.816941][T12125] XFS (loop4): Quotacheck needed: Please wait. [ 321.880868][T12125] XFS (loop4): Quotacheck: Done. [ 321.983487][ T4492] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.013369][ T4492] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.028884][ T4492] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 322.038685][ T4492] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.057934][ T4492] usb 9-1: config 0 descriptor?? [ 322.101092][ T4197] XFS (loop4): Unmounting Filesystem [ 322.126103][T12150] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2771'. [ 322.145242][T12150] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2771'. [ 322.155102][T12150] Zero length message leads to an empty skb [ 322.199969][T12152] ip_tables: iptables: counters copy to user failed while replacing table [ 322.250950][T12154] loop6: detected capacity change from 0 to 256 [ 322.539279][ T4492] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 322.557627][ T4492] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 322.567749][ T4492] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 322.575788][ T4492] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 322.583192][ T4492] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 322.590425][ T4492] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 322.604936][ T4492] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 322.619166][ T4492] pyra 0003:1E7D:2CF6.002D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.8-1/input0 [ 322.963473][ T4492] pyra 0003:1E7D:2CF6.002D: couldn't init struct pyra_device [ 322.973856][ T4492] pyra 0003:1E7D:2CF6.002D: couldn't install mouse [ 322.996975][ T4492] pyra: probe of 0003:1E7D:2CF6.002D failed with error -71 [ 323.041880][ T4492] usb 9-1: USB disconnect, device number 7 [ 323.137958][T12185] fido_id[12185]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 323.458661][T12193] CacheFiles: Failed to register: -95 [ 323.763626][T12207] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2800'. [ 324.078668][T12224] loop4: detected capacity change from 0 to 1024 [ 324.251415][T12224] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 324.273425][T12224] CacheFiles: File cache on loop4 registered [ 324.318778][T12233] i2c i2c-0: delete_device: Extra parameters [ 324.327887][T12221] CacheFiles: File cache on loop4 unregistering [ 324.334435][T12221] FS-Cache: Withdrawing cache "CacheFiles" [ 324.606796][T12241] netlink: 6 bytes leftover after parsing attributes in process `syz.8.2813'. [ 324.733525][T12245] loop4: detected capacity change from 0 to 512 [ 324.865403][T12245] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 324.981352][T12245] ext4 filesystem being mounted at /542/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.114033][T12263] netem: change failed [ 325.179767][T12256] loop8: detected capacity change from 0 to 8192 [ 325.327080][T12256] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal [ 325.341814][T12256] REISERFS (device loop8): using ordered data mode [ 325.348750][T12256] reiserfs: using flush barriers [ 325.363334][T12256] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 325.379986][T12256] REISERFS (device loop8): checking transaction log (loop8) [ 325.410508][T12256] REISERFS (device loop8): Using r5 hash to sort names [ 325.424897][T12256] REISERFS (device loop8): using 3.5.x disk format [ 325.431929][T12256] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 325.474663][T12278] loop4: detected capacity change from 0 to 1024 [ 325.913316][ T4500] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 326.037514][T12304] netem: change failed [ 326.285611][ T4500] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 326.299316][ T4500] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 326.348032][ T4500] usb 2-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 326.359647][ T4500] usb 2-1: config 220 has no interface number 2 [ 326.383356][ T4500] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 326.422373][ T4500] usb 2-1: config 220 interface 0 has no altsetting 0 [ 326.423885][ T21] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 326.430825][ T4500] usb 2-1: config 220 interface 76 has no altsetting 0 [ 326.444387][ T4500] usb 2-1: config 220 interface 1 has no altsetting 0 [ 326.593868][T12332] loop8: detected capacity change from 0 to 1024 [ 326.613170][ T4500] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 326.634296][ T4500] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.642548][ T4500] usb 2-1: Product: syz [ 326.663386][ T4500] usb 2-1: Manufacturer: syz [ 326.673591][ T4500] usb 2-1: SerialNumber: syz [ 326.723322][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 326.893584][ T21] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 326.916998][ T21] usb 5-1: config 0 has no interface number 0 [ 327.053741][ T4500] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 327.060232][ T4500] usb 2-1: No valid video chain found. [ 327.073628][ T4500] usb 2-1: selecting invalid altsetting 0 [ 327.104090][ T21] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 327.115593][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.124730][ T21] usb 5-1: Product: syz [ 327.128957][ T21] usb 5-1: Manufacturer: syz [ 327.140645][ T21] usb 5-1: SerialNumber: syz [ 327.155416][ T21] usb 5-1: config 0 descriptor?? [ 327.174733][ T4500] usb 2-1: selecting invalid altsetting 0 [ 327.183474][ T4500] usbtest: probe of 2-1:220.1 failed with error -22 [ 327.212436][ T4500] usb 2-1: USB disconnect, device number 22 [ 327.453483][ T21] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 327.459975][ T21] usb 5-1: No valid video chain found. [ 327.468030][ T21] usb 5-1: USB disconnect, device number 18 [ 328.318255][T10765] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 328.425202][T12400] loop8: detected capacity change from 0 to 1024 [ 328.583323][T10765] usb 1-1: Using ep0 maxpacket: 32 [ 328.783554][T10765] usb 1-1: config 0 has an invalid interface number: 140 but max is 0 [ 328.792193][T10765] usb 1-1: config 0 has no interface number 0 [ 328.812275][T10765] usb 1-1: config 0 interface 140 has no altsetting 0 [ 328.826031][T12421] loop4: detected capacity change from 0 to 16 [ 328.878461][T12421] erofs: (device loop4): mounted with root inode @ nid 36. [ 328.964784][T12427] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2882'. [ 328.997739][T12427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2882'. [ 329.007213][T10765] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=62.2a [ 329.027327][T10765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.059005][T10765] usb 1-1: Product: syz [ 329.081182][T10765] usb 1-1: Manufacturer: syz [ 329.104210][T10765] usb 1-1: SerialNumber: syz [ 329.133698][T10765] usb 1-1: config 0 descriptor?? [ 329.459877][T10765] usb 1-1: bad CDC descriptors [ 329.477901][T10765] usb 1-1: bad CDC descriptors [ 329.519385][T10765] usb 1-1: USB disconnect, device number 17 [ 329.758251][T12442] loop8: detected capacity change from 0 to 16 [ 329.798063][T12434] loop4: detected capacity change from 0 to 32768 [ 329.838934][T12442] erofs: (device loop8): mounted with root inode @ nid 36. [ 329.942467][T12434] JBD2: Ignoring recovery information on journal [ 330.056387][T12434] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 330.078927][T12454] loop6: detected capacity change from 0 to 16 [ 330.199432][T12454] erofs: (device loop6): mounted with root inode @ nid 36. [ 330.227856][T12455] loop8: detected capacity change from 0 to 2048 [ 330.440264][T12455] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 330.756278][ T4197] ocfs2: Unmounting device (7,4) on (node local) [ 330.800882][T12480] loop8: detected capacity change from 0 to 1024 [ 330.869498][T12480] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 330.883466][T12480] EXT4-fs (loop8): inline encryption not supported [ 330.893616][T12480] EXT4-fs (loop8): Ignoring removed bh option [ 330.999268][T12480] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodelalloc,noload,user_xattr,nolazytime,grpjquota=,nomblk_io_submit,inlinecrypt,nodiscard,bh,nombcache,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 331.090936][T12492] loop4: detected capacity change from 0 to 128 [ 331.093666][T10765] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 331.138497][T12492] hpfs: hpfs_map_sector(): read error [ 331.509173][T10765] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 331.528011][T10765] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 331.548610][T10765] usb 7-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 331.559191][ T4492] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 331.579438][T10765] usb 7-1: config 220 has no interface number 2 [ 331.610037][T10765] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 331.648364][T10765] usb 7-1: config 220 interface 0 has no altsetting 0 [ 331.676868][T10765] usb 7-1: config 220 interface 76 has no altsetting 0 [ 331.698027][T10765] usb 7-1: config 220 interface 1 has no altsetting 0 [ 331.805973][ T4492] usb 5-1: Using ep0 maxpacket: 32 [ 331.906062][T10765] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 331.926154][T10765] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.942049][T12521] loop8: detected capacity change from 0 to 2048 [ 331.956551][T10765] usb 7-1: Product: syz [ 331.967232][T10765] usb 7-1: Manufacturer: syz [ 331.972201][T10765] usb 7-1: SerialNumber: syz [ 332.003573][ T4492] usb 5-1: config 0 has an invalid interface number: 140 but max is 0 [ 332.022346][T12521] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 332.039794][ T4492] usb 5-1: config 0 has no interface number 0 [ 332.060957][ T4492] usb 5-1: config 0 interface 140 has no altsetting 0 [ 332.142389][T12521] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 332.178251][T12521] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 332.198771][T12521] EXT4-fs (loop8): This should not happen!! Data will be lost [ 332.198771][T12521] [ 332.220869][T12521] EXT4-fs (loop8): Total free blocks count 0 [ 332.228378][T12521] EXT4-fs (loop8): Free/Dirty block details [ 332.240005][T12521] EXT4-fs (loop8): free_blocks=2415919504 [ 332.247893][T12521] EXT4-fs (loop8): dirty_blocks=32 [ 332.256964][ T4492] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=62.2a [ 332.275615][T12521] EXT4-fs (loop8): Block reservation details [ 332.281884][ T4492] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.297829][T12521] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 332.306146][ T4492] usb 5-1: Product: syz [ 332.317775][ T4492] usb 5-1: Manufacturer: syz [ 332.323171][ T4492] usb 5-1: SerialNumber: syz [ 332.326337][T12525] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 332.353863][T12525] EXT4-fs (loop8): This should not happen!! Data will be lost [ 332.353863][T12525] [ 332.367785][ T4492] usb 5-1: config 0 descriptor?? [ 332.373602][T10765] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 332.388306][T10765] usb 7-1: No valid video chain found. [ 332.406286][T10765] usb 7-1: selecting invalid altsetting 0 [ 332.505134][T10765] usb 7-1: selecting invalid altsetting 0 [ 332.514248][T10765] usbtest: probe of 7-1:220.1 failed with error -22 [ 332.578070][T10765] usb 7-1: USB disconnect, device number 19 [ 332.676656][T12529] loop8: detected capacity change from 0 to 64 [ 332.737330][ T4492] usb 5-1: bad CDC descriptors [ 332.744241][ T4492] usb 5-1: bad CDC descriptors [ 332.779222][ T4492] usb 5-1: USB disconnect, device number 19 [ 333.405598][T12556] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2932'. [ 333.466444][T12556] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2932'. [ 333.860416][T12567] loop4: detected capacity change from 0 to 2048 [ 333.892099][T12570] loop6: detected capacity change from 0 to 256 [ 334.034589][T12567] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 334.050768][T12576] program syz.0.2941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.534167][T12593] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2949'. [ 335.012903][T12621] loop4: detected capacity change from 0 to 256 [ 335.373503][ T5362] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 335.793577][ T5361] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 335.813583][ T5362] usb 7-1: unable to get BOS descriptor or descriptor too short [ 335.875123][ T5362] usb 7-1: not running at top speed; connect to a high speed hub [ 335.985362][ T5362] usb 7-1: config 127 has an invalid interface number: 176 but max is 0 [ 335.993969][ T5362] usb 7-1: config 127 has no interface number 0 [ 336.000443][ T5362] usb 7-1: config 127 interface 176 altsetting 141 has an invalid endpoint with address 0x0, skipping [ 336.011814][ T5362] usb 7-1: config 127 interface 176 altsetting 141 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 336.023440][ T5362] usb 7-1: config 127 interface 176 has no altsetting 0 [ 336.053537][ T5361] usb 9-1: Using ep0 maxpacket: 16 [ 336.200080][ T5361] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.228591][ T5362] usb 7-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 336.240388][ T5361] usb 9-1: config 0 interface 0 has no altsetting 0 [ 336.250121][ T5362] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.258869][ T5362] usb 7-1: Product: syz [ 336.263175][ T5362] usb 7-1: Manufacturer: syz [ 336.267865][ T5362] usb 7-1: SerialNumber: syz [ 336.360630][T12672] loop4: detected capacity change from 0 to 64 [ 336.423600][ T5361] usb 9-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 336.432731][ T5361] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.458185][ T5361] usb 9-1: Product: syz [ 336.462606][ T5361] usb 9-1: Manufacturer: syz [ 336.493301][ T5361] usb 9-1: SerialNumber: syz [ 336.500454][ T5361] usb 9-1: config 0 descriptor?? [ 336.625445][ T5362] go7007 7-1:127.176: The Lifeview TV Walker Ultra is not supported. Sorry! [ 336.661975][ T5362] usb 7-1: USB disconnect, device number 20 [ 336.682277][T12678] loop4: detected capacity change from 0 to 2048 [ 336.758015][T12678] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 336.795799][ T5361] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 336.819915][ T5361] imon 9-1:0.0: unable to initialize intf0, err -19 [ 336.843422][ T5361] imon:imon_probe: failed to initialize context! [ 336.849845][ T5361] imon 9-1:0.0: unable to register, err -19 [ 336.904835][ T5361] usb 9-1: USB disconnect, device number 8 [ 337.161157][T12689] loop4: detected capacity change from 0 to 2048 [ 337.208310][T12691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2991'. [ 337.261675][T12693] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 337.462260][T12699] program syz.6.2995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.499779][T12704] loop8: detected capacity change from 0 to 128 [ 337.569798][T12704] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 337.600035][T12704] hpfs: filesystem error: improperly stopped [ 337.660340][T12704] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 337.681975][T12709] bond0: option packets_per_slave: invalid value (65536) [ 337.698088][T12704] hpfs: You really don't want any checks? You are crazy... [ 337.712589][T12709] bond0: option packets_per_slave: allowed values 0 - 65535 [ 337.731803][T12704] hpfs: hpfs_map_sector(): read error [ 337.774677][T12704] hpfs: code page support is disabled [ 337.790355][T12704] hpfs: hpfs_map_4sectors(): unaligned read [ 337.829153][T12704] hpfs: hpfs_map_4sectors(): unaligned read [ 337.864211][T12704] hpfs: filesystem error: unable to find root dir [ 337.871690][T12715] loop6: detected capacity change from 0 to 256 [ 337.900455][T12704] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim [ 337.946758][T12715] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 338.269297][T12738] overlayfs: conflicting lowerdir path [ 338.343478][ T5362] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 338.576252][T12754] program syz.4.3020 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.613352][ T5362] usb 2-1: Using ep0 maxpacket: 16 [ 338.735574][T12765] loop4: detected capacity change from 0 to 128 [ 338.742776][T12763] kAFS: bad VL server IP address [ 338.773584][ T5362] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 338.783705][ T13] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 338.801204][T12765] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 338.996484][T12776] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3032'. [ 339.005952][ T5362] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 339.012063][T12776] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3032'. [ 339.017732][ T5362] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.032641][ T5362] usb 2-1: Product: syz [ 339.042789][ T5362] usb 2-1: Manufacturer: syz [ 339.047639][ T5362] usb 2-1: SerialNumber: syz [ 339.054545][ T5362] usb 2-1: config 0 descriptor?? [ 339.133682][ T5362] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 339.183938][ T13] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 339.193060][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.213537][ T4500] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 339.254171][ T13] usb 7-1: config 0 descriptor?? [ 339.316793][ T13] cp210x 7-1:0.0: cp210x converter detected [ 339.359246][ T9] usb 2-1: Failed to submit usb control message: -71 [ 339.370114][ T5362] usb 2-1: USB disconnect, device number 23 [ 339.377198][ T9] usb 2-1: unable to send the bmi data to the device: -71 [ 339.389104][ T9] usb 2-1: unable to get target info from device [ 339.398388][ T9] usb 2-1: could not get target info (-71) [ 339.407528][ T9] usb 2-1: could not probe fw (-71) [ 339.444496][ T4492] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 339.583449][ T4500] usb 1-1: config 0 interface 0 altsetting 22 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 339.594294][ T4500] usb 1-1: config 0 interface 0 altsetting 22 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 339.607571][ T4500] usb 1-1: config 0 interface 0 has no altsetting 0 [ 339.614563][ T4500] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 339.633342][ T4500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.647990][ T4500] usb 1-1: config 0 descriptor?? [ 339.663636][T12770] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 339.693375][ T4492] usb 9-1: Using ep0 maxpacket: 16 [ 339.733462][ T4492] usb 9-1: too many configurations: 112, using maximum allowed: 8 [ 339.753474][ T13] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 339.755383][T12793] loop4: detected capacity change from 0 to 32768 [ 339.798306][ T13] usb 7-1: cp210x converter now attached to ttyUSB0 [ 340.004391][ T13] usb 7-1: USB disconnect, device number 21 [ 340.023429][ T4500] usbhid 1-1:0.0: can't add hid device: -71 [ 340.029486][ T4500] usbhid: probe of 1-1:0.0 failed with error -71 [ 340.049452][ T13] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 340.083660][ T4500] usb 1-1: USB disconnect, device number 18 [ 340.136154][ T13] cp210x 7-1:0.0: device disconnected [ 340.216801][T12804] program syz.1.3043 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 340.513439][ T4492] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 340.536166][T12817] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3049'. [ 340.543829][ T4492] usb 9-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 340.574641][ T4492] usb 9-1: Product: syz [ 340.578976][ T4492] usb 9-1: Manufacturer: syz [ 340.612697][ T4492] r8152-cfgselector 9-1: config 0 descriptor?? [ 340.643309][ T13] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 340.729867][T12823] netlink: 'syz.0.3051': attribute type 8 has an invalid length. [ 340.774694][T12825] loop4: detected capacity change from 0 to 64 [ 340.803754][T12825] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 340.869714][T12825] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 340.880860][ T4492] r8152-cfgselector 9-1: Unknown version 0x0000 [ 340.889874][ T4492] cdc_acm 9-1:0.0: Zero length descriptor references [ 340.915103][ T4492] cdc_acm: probe of 9-1:0.0 failed with error -22 [ 340.955757][ T4492] r8152-cfgselector 9-1: Unknown version 0x0000 [ 340.991016][ T4492] r8152-cfgselector 9-1: USB disconnect, device number 9 [ 341.023486][ T13] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 341.042184][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.089756][ T13] usb 2-1: config 0 descriptor?? [ 341.134684][ T13] ums-realtek 2-1:0.0: USB Mass Storage device detected [ 341.348484][T12812] udc-core: couldn't find an available UDC or it's busy [ 341.356894][T12812] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 341.375358][ T5362] usb 2-1: USB disconnect, device number 24 [ 341.543360][ T4488] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 341.553574][ T4227] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 341.863531][ T4227] usb 5-1: Using ep0 maxpacket: 16 [ 341.903625][ T4488] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 341.915359][ T4488] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 341.925141][ T4488] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 341.936005][ T4488] usb 7-1: config 220 has no interface number 2 [ 341.942399][ T4488] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 341.956931][ T4488] usb 7-1: config 220 interface 0 has no altsetting 0 [ 341.976933][ T4488] usb 7-1: config 220 interface 76 has no altsetting 0 [ 341.987384][ T4488] usb 7-1: config 220 interface 1 has no altsetting 0 [ 342.003565][ T4227] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 342.011762][ T4227] usb 5-1: config 0 has no interface number 0 [ 342.023343][ T4227] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 342.033998][ T5362] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 342.042172][ T4227] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 342.157623][ T4488] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 342.173435][ T4488] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.181503][ T4488] usb 7-1: Product: syz [ 342.192571][ T4488] usb 7-1: Manufacturer: syz [ 342.200105][ T4488] usb 7-1: SerialNumber: syz [ 342.233558][ T4227] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 342.243846][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.252015][ T4227] usb 5-1: Product: syz [ 342.256695][ T4227] usb 5-1: Manufacturer: syz [ 342.261410][ T4227] usb 5-1: SerialNumber: syz [ 342.269252][ T4227] usb 5-1: config 0 descriptor?? [ 342.293865][T12841] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 342.301319][T12841] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 342.537631][T12841] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 342.552650][T12841] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 342.563818][ T4488] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 342.576249][ T4488] usb 7-1: No valid video chain found. [ 342.581961][ T4488] usb 7-1: selecting invalid altsetting 0 [ 342.623643][ T5362] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 342.637810][ T5362] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.650611][ T5362] usb 1-1: Product: syz [ 342.655922][ T5362] usb 1-1: Manufacturer: syz [ 342.660966][ T5362] usb 1-1: SerialNumber: syz [ 342.695188][ T4488] usb 7-1: selecting invalid altsetting 0 [ 342.702154][ T4488] usbtest: probe of 7-1:220.1 failed with error -22 [ 342.734745][ T4488] usb 7-1: USB disconnect, device number 22 [ 342.783571][ T4227] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 343.133541][ T5362] usb 1-1: USB disconnect, device number 19 [ 343.204120][ T4227] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 343.251706][ T4227] asix: probe of 5-1:0.34 failed with error -71 [ 343.294688][ T4227] usb 5-1: USB disconnect, device number 20 [ 343.571633][ T4459] udevd[4459]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.633512][ T5363] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 343.669159][T12901] loop8: detected capacity change from 0 to 32768 [ 343.892386][T12901] XFS (loop8): Mounting V5 Filesystem [ 343.903574][ T5363] usb 7-1: Using ep0 maxpacket: 16 [ 344.025694][T12901] XFS (loop8): Ending clean mount [ 344.032773][T12932] input: syz0 as /devices/virtual/input/input37 [ 344.162478][T12936] program syz.0.3099 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.197254][T10004] XFS (loop8): Unmounting Filesystem [ 344.213600][ T5363] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 344.222895][ T5363] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.268064][ T5363] usb 7-1: Product: syz [ 344.279864][ T5363] usb 7-1: Manufacturer: syz [ 344.295612][ T5363] usb 7-1: SerialNumber: syz [ 344.329462][ T5363] usb 7-1: config 0 descriptor?? [ 344.424897][T12945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3103'. [ 344.493368][T12949] program syz.0.3105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.729129][ T4227] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 344.800142][T12965] scsi_dev_info_list_add_str: bad dev info string 'Ÿ¿‚¥˜_' '' '(null)' [ 344.879179][T12969] program syz.1.3114 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.888909][ T5363] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 344.917167][ T5363] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 344.963730][ T5363] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 344.974550][ T5363] usb 7-1: media controller created [ 344.991910][ T5363] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 345.103683][ T5363] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 345.111624][ T5363] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 345.134200][ T4227] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.153412][ T4227] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 345.174149][ T4227] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 345.203422][ T4227] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 345.226668][ T4227] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 345.246926][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.326746][ T5363] usb 7-1: USB disconnect, device number 23 [ 345.350185][ T5363] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 345.729206][ T4227] gud 5-1:1.0: No supported pixel formats found [ 345.743304][ T4227] gud: probe of 5-1:1.0 failed with error -22 [ 345.927180][ T4488] usb 5-1: USB disconnect, device number 21 [ 346.019287][T12998] loop6: detected capacity change from 0 to 1024 [ 346.188706][T12998] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 346.229107][T13000] loop8: detected capacity change from 0 to 16384 [ 346.338633][T13011] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 346.432532][T13013] CacheFiles: Failed to register: -95 [ 346.716966][T13024] loop8: detected capacity change from 0 to 1024 [ 346.810898][T13024] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 346.836783][T13029] loop4: detected capacity change from 0 to 2048 [ 346.881125][T13024] EXT4-fs (loop8): Errors on filesystem, clearing orphan list. [ 346.890946][T13041] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3146'. [ 346.927110][T13024] EXT4-fs (loop8): mounted filesystem without journal. Opts: norecovery,quota,nojournal_checksum,resgid=0x0000000000000000,bsdgroups,,errors=continue. Quota mode: writeback. [ 346.968153][T13029] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 347.094407][T13024] EXT4-fs warning (device loop8): empty_inline_dir:1870: bad inline directory (dir #12) - no `..' [ 347.175998][T13056] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 347.460381][ T4804] [ 347.462785][ T4804] ====================================================== [ 347.469940][ T4804] WARNING: possible circular locking dependency detected [ 347.476996][ T4804] syzkaller #0 Not tainted [ 347.481524][ T4804] ------------------------------------------------------ [ 347.488649][ T4804] kworker/u4:7/4804 is trying to acquire lock: [ 347.494825][ T4804] ffff88805fab4690 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x24/0xe0 [ 347.504599][ T4804] [ 347.504599][ T4804] but task is already holding lock: [ 347.511985][ T4804] ffff888079a82c58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2d40 [ 347.522205][ T4804] [ 347.522205][ T4804] which lock already depends on the new lock. [ 347.522205][ T4804] [ 347.532626][ T4804] [ 347.532626][ T4804] the existing dependency chain (in reverse order) is: [ 347.541668][ T4804] [ 347.541668][ T4804] -> #1 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 347.550121][ T4804] percpu_down_read+0x46/0x1b0 [ 347.555434][ T4804] ext4_writepages+0x213/0x2d40 [ 347.560830][ T4804] do_writepages+0x493/0x700 [ 347.565960][ T4804] __writeback_single_inode+0x153/0xda0 [ 347.572057][ T4804] writeback_single_inode+0x3d2/0x8e0 [ 347.577975][ T4804] write_inode_now+0x23b/0x2c0 [ 347.583282][ T4804] iput+0x599/0x880 [ 347.587658][ T4804] ext4_xattr_set_entry+0x1d76/0x3f70 [ 347.593574][ T4804] ext4_xattr_block_set+0x8a7/0x2ce0 [ 347.599400][ T4804] ext4_expand_extra_isize_ea+0xebe/0x18e0 [ 347.605750][ T4804] __ext4_expand_extra_isize+0x301/0x3e0 [ 347.611922][ T4804] __ext4_mark_inode_dirty+0x444/0x6c0 [ 347.617920][ T4804] ext4_evict_inode+0xa55/0x1050 [ 347.623400][ T4804] evict+0x4b6/0x8b0 [ 347.627838][ T4804] ext4_orphan_cleanup+0xad8/0x1320 [ 347.633576][ T4804] ext4_fill_super+0x8c65/0x93f0 [ 347.639060][ T4804] mount_bdev+0x28a/0x3c0 [ 347.643955][ T4804] legacy_get_tree+0xe6/0x180 [ 347.649178][ T4804] vfs_get_tree+0x88/0x270 [ 347.654130][ T4804] do_new_mount+0x247/0xa40 [ 347.659171][ T4804] __se_sys_mount+0x2e3/0x3d0 [ 347.664390][ T4804] do_syscall_64+0x4c/0xa0 [ 347.669344][ T4804] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 347.675782][ T4804] [ 347.675782][ T4804] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 347.683361][ T4804] __lock_acquire+0x2c66/0x7b50 [ 347.688753][ T4804] lock_acquire+0x19e/0x400 [ 347.693795][ T4804] down_write+0x38/0x60 [ 347.698491][ T4804] ext4_destroy_inline_data+0x24/0xe0 [ 347.704401][ T4804] ext4_writepages+0x599/0x2d40 [ 347.709797][ T4804] do_writepages+0x493/0x700 [ 347.714930][ T4804] __writeback_single_inode+0x153/0xda0 [ 347.721114][ T4804] writeback_sb_inodes+0xaaa/0x1750 [ 347.726847][ T4804] wb_writeback+0x44a/0xbc0 [ 347.731886][ T4804] wb_workfn+0x43a/0xf20 [ 347.736670][ T4804] process_one_work+0x867/0xff0 [ 347.742062][ T4804] worker_thread+0xad7/0x12a0 [ 347.747333][ T4804] kthread+0x42e/0x520 [ 347.751967][ T4804] ret_from_fork+0x1f/0x30 [ 347.756952][ T4804] [ 347.756952][ T4804] other info that might help us debug this: [ 347.756952][ T4804] [ 347.767373][ T4804] Possible unsafe locking scenario: [ 347.767373][ T4804] [ 347.774860][ T4804] CPU0 CPU1 [ 347.780250][ T4804] ---- ---- [ 347.785629][ T4804] lock(&sbi->s_writepages_rwsem); [ 347.790855][ T4804] lock(&ei->xattr_sem); [ 347.797720][ T4804] lock(&sbi->s_writepages_rwsem); [ 347.805455][ T4804] lock(&ei->xattr_sem); [ 347.809825][ T4804] [ 347.809825][ T4804] *** DEADLOCK *** [ 347.809825][ T4804] [ 347.817981][ T4804] 3 locks held by kworker/u4:7/4804: [ 347.823362][ T4804] #0: ffff88814479c938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 347.834024][ T4804] #1: ffffc9000333fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 347.845899][ T4804] #2: ffff888079a82c58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2d40 [ 347.856476][ T4804] [ 347.856476][ T4804] stack backtrace: [ 347.862383][ T4804] CPU: 0 PID: 4804 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 347.869948][ T4804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.880021][ T4804] Workqueue: writeback wb_workfn (flush-7:4) [ 347.886049][ T4804] Call Trace: [ 347.889348][ T4804] [ 347.892298][ T4804] dump_stack_lvl+0x188/0x250 [ 347.897005][ T4804] ? load_image+0x410/0x410 [ 347.901532][ T4804] ? show_regs_print_info+0x20/0x20 [ 347.906755][ T4804] ? print_circular_bug+0x12b/0x1a0 [ 347.911974][ T4804] check_noncircular+0x296/0x330 [ 347.916933][ T4804] ? add_chain_block+0x9b0/0x9b0 [ 347.921891][ T4804] ? lockdep_lock+0xf1/0x1f0 [ 347.926507][ T4804] ? mark_lock+0x94/0x320 [ 347.930862][ T4804] ? mark_lock+0x94/0x320 [ 347.935243][ T4804] ? _find_first_zero_bit+0xd1/0xf0 [ 347.940464][ T4804] __lock_acquire+0x2c66/0x7b50 [ 347.945350][ T4804] ? verify_lock_unused+0x140/0x140 [ 347.950570][ T4804] ? __lock_acquire+0x1305/0x7b50 [ 347.955617][ T4804] ? verify_lock_unused+0x140/0x140 [ 347.960843][ T4804] ? verify_lock_unused+0x140/0x140 [ 347.966063][ T4804] lock_acquire+0x19e/0x400 [ 347.970594][ T4804] ? ext4_destroy_inline_data+0x24/0xe0 [ 347.976160][ T4804] ? read_lock_is_recursive+0x10/0x10 [ 347.981557][ T4804] ? rcu_read_lock_any_held+0xb0/0x130 [ 347.987039][ T4804] ? ext4_journal_check_start+0x17f/0x240 [ 347.992785][ T4804] down_write+0x38/0x60 [ 347.996966][ T4804] ? ext4_destroy_inline_data+0x24/0xe0 [ 348.002537][ T4804] ext4_destroy_inline_data+0x24/0xe0 [ 348.007939][ T4804] ext4_writepages+0x599/0x2d40 [ 348.012828][ T4804] ? verify_lock_unused+0x140/0x140 [ 348.018154][ T4804] ? __lock_acquire+0x13dc/0x7b50 [ 348.023207][ T4804] ? ext4_readpage+0x2e0/0x2e0 [ 348.027994][ T4804] ? mark_lock+0x94/0x320 [ 348.032343][ T4804] ? verify_lock_unused+0x140/0x140 [ 348.037558][ T4804] ? __lock_acquire+0x13dc/0x7b50 [ 348.042618][ T4804] ? __lock_acquire+0x7b50/0x7b50 [ 348.047671][ T4804] ? do_raw_spin_lock+0x128/0x2f0 [ 348.052722][ T4804] ? do_raw_spin_unlock+0x11d/0x230 [ 348.058026][ T4804] ? ext4_readpage+0x2e0/0x2e0 [ 348.062811][ T4804] do_writepages+0x493/0x700 [ 348.067453][ T4804] ? __writepage+0x130/0x130 [ 348.072063][ T4804] ? writeback_sb_inodes+0x6b7/0x1750 [ 348.077451][ T4804] ? __lock_acquire+0x7b50/0x7b50 [ 348.082494][ T4804] ? do_raw_spin_lock+0x128/0x2f0 [ 348.087545][ T4804] __writeback_single_inode+0x153/0xda0 [ 348.093129][ T4804] writeback_sb_inodes+0xaaa/0x1750 [ 348.098373][ T4804] ? move_expired_inodes+0x341/0x770 [ 348.103706][ T4804] ? queue_io+0x530/0x530 [ 348.108063][ T4804] ? move_expired_inodes+0x722/0x770 [ 348.113378][ T4804] ? rcu_is_watching+0x11/0xa0 [ 348.118180][ T4804] ? queue_io+0x3ba/0x530 [ 348.122541][ T4804] wb_writeback+0x44a/0xbc0 [ 348.127074][ T4804] ? rcu_lock_release+0x20/0x20 [ 348.131944][ T4804] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 348.137945][ T4804] ? __lock_acquire+0x7b50/0x7b50 [ 348.142990][ T4804] ? _raw_spin_unlock_irq+0x1f/0x40 [ 348.148209][ T4804] wb_workfn+0x43a/0xf20 [ 348.152566][ T4804] ? inode_wait_for_writeback+0x220/0x220 [ 348.158319][ T4804] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 348.164321][ T4804] ? __lock_acquire+0x7b50/0x7b50 [ 348.169373][ T4804] ? read_lock_is_recursive+0x10/0x10 [ 348.174768][ T4804] ? __schedule+0x11cb/0x4350 [ 348.179466][ T4804] ? _raw_spin_unlock_irq+0x1f/0x40 [ 348.184683][ T4804] process_one_work+0x867/0xff0 [ 348.189567][ T4804] ? worker_detach_from_pool+0x240/0x240 [ 348.195216][ T4804] ? lockdep_hardirqs_off+0x70/0x100 [ 348.200551][ T4804] ? _raw_spin_lock_irq+0xb7/0xf0 [ 348.205591][ T4804] ? _raw_spin_lock_irqsave+0x100/0x100 [ 348.211157][ T4804] ? wq_worker_running+0x97/0x170 [ 348.216205][ T4804] worker_thread+0xad7/0x12a0 [ 348.220924][ T4804] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 348.226857][ T4804] kthread+0x42e/0x520 [ 348.230954][ T4804] ? rcu_lock_release+0x20/0x20 [ 348.235872][ T4804] ? kthread_blkcg+0xd0/0xd0 [ 348.240483][ T4804] ret_from_fork+0x1f/0x30 [ 348.245044][ T4804] [ 348.288321][T13074] loop8: detected capacity change from 0 to 512 [ 348.304105][ T4804] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 348.319204][T13074] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 348.329271][ T4804] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 348.350278][T13074] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 348.375082][ T4804] EXT4-fs (loop4): This should not happen!! Data will be lost [ 348.375082][ T4804] [ 348.394064][ T1172] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 348.409345][ T4804] EXT4-fs (loop4): Total free blocks count 0 [ 348.415885][ T4804] EXT4-fs (loop4): Free/Dirty block details [ 348.426849][ T4804] EXT4-fs (loop4): free_blocks=4096 [ 348.433310][ T4804] EXT4-fs (loop4): dirty_blocks=512 [ 348.438564][ T4804] EXT4-fs (loop4): Block reservation details [ 348.447052][ T4804] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 348.454697][ T4804] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 348.467470][ T4804] EXT4-fs (loop4): This should not happen!! Data will be lost [ 348.467470][ T4804]