last executing test programs: 37.874354284s ago: executing program 1 (id=1400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) dup(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="400000000021000008001b00"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mq_open(0x0, 0x800, 0x20, &(0x7f0000000340)={0x1, 0x3, 0x2, 0x2}) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x3cd400, 0x0) 35.261835937s ago: executing program 1 (id=1404): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) sendfile(r2, r2, 0x0, 0x9) 35.04522203s ago: executing program 1 (id=1407): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) chdir(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x121c80, 0x47) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x40000000) 34.803600814s ago: executing program 1 (id=1408): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) 34.37315807s ago: executing program 1 (id=1412): syz_open_dev$dri(0x0, 0x0, 0x88400) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) 32.869923347s ago: executing program 1 (id=1416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0x5, 0xb}, {0x4, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x608, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 29.256718838s ago: executing program 3 (id=1433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) dup(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="400000000021000008001b00000000001c00"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mq_open(0x0, 0x800, 0x20, &(0x7f0000000340)={0x1, 0x3, 0x2, 0x2}) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x3cd400, 0x0) 25.65187912s ago: executing program 4 (id=1449): socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) sendfile(r1, r1, 0x0, 0x9) 25.399819764s ago: executing program 4 (id=1452): syz_io_uring_setup(0x4f6, 0x0, 0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f0000000380)=@base={0x1e, 0xffffffff, 0x4, 0xfffffc75, 0x0, 0xffffffffffffffff, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0) write$sndseq(r3, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 24.480755568s ago: executing program 4 (id=1454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 22.482659295s ago: executing program 4 (id=1457): clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x1, 0x6, 0x4, 0x0, 0x2, 0x1, 0x4, 0x7, 0x8000009658, 0x7, 0x9, 0x0, 0x10, 0x800000000b, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x10000000000001, 0x0, 0x7, 0x0, 0xfffffffffffffffa, 0x80003, 0xf64d}) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x87d0339841435164, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[], 0x24, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000002, 0x2, 0x2000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv4_newrule={0x30, 0x20, 0x1, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x21}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'hsr0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040044}, 0x4004004) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) fstat(0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 19.095849453s ago: executing program 0 (id=1467): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 18.033612925s ago: executing program 0 (id=1469): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000080)='./file2\x00', 0x2000048, &(0x7f00000002c0)={[{@nouuid}, {@sysvgroups}, {@nouuid}]}, 0x1, 0xb950, &(0x7f000000d2c0)="$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") listxattr(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) 17.731834253s ago: executing program 32 (id=1416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0x5, 0xb}, {0x4, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x608, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 16.025616953s ago: executing program 0 (id=1475): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 15.993207755s ago: executing program 2 (id=1476): syz_io_uring_setup(0x4f6, 0x0, &(0x7f0000000180)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f0000000380)=@base={0x1e, 0xffffffff, 0x4, 0xfffffc75, 0x0, 0xffffffffffffffff, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0) write$sndseq(r3, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 14.940933227s ago: executing program 2 (id=1477): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x2) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x1f0, 0x0, 0xfffffffffffffff9, [{{0x2, 0x2, 0x31a6, 0x3, 0x8c, 0x2, {0x4, 0x7fff, 0x9, 0x1000, 0x8, 0x7f, 0x44, 0xc4, 0x4, 0x2000, 0x9, 0x0, 0x0, 0x7b, 0x9}}, {0x4, 0x5, 0x2, 0x3, 'fd'}}, {{0x4, 0x1, 0xc61, 0xffffffffffffffff, 0x5, 0x1, {0x5, 0x80000000, 0x6, 0x8, 0x7, 0x100000001, 0x1, 0xfffd, 0x4, 0x6000, 0x7ff, 0x0, 0x0, 0x7fffffff, 0x1}}, {0x1, 0x1, 0x2, 0xa, ']['}}, {{0x4, 0x8000000000000000, 0x7, 0x1, 0x2, 0x5ae, {0x2, 0x7, 0x81, 0xe12b, 0x10001, 0xa000000000, 0x4, 0x8000, 0x0, 0xa000, 0x10000, 0x0, 0x0, 0x7, 0x3}}, {0x4, 0x8, 0x2, 0xc, 'fd'}}]}, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000000, 0x11012, r3, 0x10c000) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.730747019s ago: executing program 4 (id=1478): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) chdir(&(0x7f0000000700)='mnt/encrypted_dir\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x121c80, 0x47) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x40000000) 14.699311761s ago: executing program 3 (id=1479): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x60008090) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x10002) rseq(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x44) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0xd) 14.597927836s ago: executing program 2 (id=1480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) 14.597366146s ago: executing program 0 (id=1481): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.616051501s ago: executing program 2 (id=1482): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x2, 0x1, 0x0, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000340)={0x2, 0x1, 0x200000000000000, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) 4.530115426s ago: executing program 3 (id=1483): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, r1, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0xa, {0x28}, {}, @result={0x0, 0x400004}}], 0x1c) 4.498377587s ago: executing program 0 (id=1484): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) close(r0) 4.307974499s ago: executing program 3 (id=1485): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.307656389s ago: executing program 2 (id=1486): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x141000, 0x0) memfd_secret(0x80000) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x95) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000340)={0x2000, r7}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32, @ANYRES16, @ANYBLOB="0c00050024010000000000004fe626b8a339ff18727b876b62e856769f9b2689d07c434bb05e1913d39367e3eb57b1b3a7fb3f8f6e41684524560ff8449b5cf38fdf5d3310e6c48f903251f8ee14b27f147224b032f64f231c82d0dafe35cfcf9f90202fe334205bd2db12fb3045eae7977e66c60739471cda02089b5284ad22075e61a203f47054eba6a22ccfcdda72271443c63d9104445f080cd7514381fedca1e40ee27646cb6630a94d"], 0x74}, 0x1, 0x0, 0x0, 0x40008c4}, 0x4040815) connect$bt_rfcomm(r1, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) 4.260572941s ago: executing program 0 (id=1487): syz_io_uring_setup(0x4f6, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f0000000380)=@base={0x1e, 0xffffffff, 0x4, 0xfffffc75, 0x0, 0xffffffffffffffff, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x50) r2 = getpid() r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0) write$sndseq(r3, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.587907668s ago: executing program 2 (id=1488): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) dup(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="400000000021000008001b00000000001c00"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mq_open(0x0, 0x800, 0x20, &(0x7f0000000340)={0x1, 0x3, 0x2, 0x2}) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x3cd400, 0x0) 1.473345445s ago: executing program 3 (id=1489): syz_io_uring_setup(0x4f6, 0x0, &(0x7f0000000180)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f0000000380)=@base={0x1e, 0xffffffff, 0x4, 0xfffffc75, 0x0, 0xffffffffffffffff, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0) write$sndseq(r3, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 181.45058ms ago: executing program 3 (id=1490): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x3, 0x47d, &(0x7f0000000ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xbc) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000080), 0x80, 0x63c, &(0x7f0000001bc0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000500)=@tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x3}, 0x4}}, 0x80, 0x0}, 0x20) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0x100000000002}]}) 0s ago: executing program 4 (id=1491): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 61.792094][ T4317] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 161.993894][ T4317] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.034497][ T5553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.363'. [ 162.043682][ T4317] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 162.077895][ T4317] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 162.090464][ T4317] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 162.100034][ T4317] usb 1-1: Manufacturer: syz [ 163.213919][ T4317] usb 1-1: config 0 descriptor?? [ 163.275230][ T4317] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 164.609428][ T7] usb 1-1: USB disconnect, device number 3 [ 164.795491][ T5584] loop2: detected capacity change from 0 to 4096 [ 164.795840][ T5586] netlink: 92 bytes leftover after parsing attributes in process `syz.0.372'. [ 165.220497][ T5584] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 165.637197][ T4355] ntfs3: loop2: ntfs3_write_inode r=1e failed, -22. [ 165.672851][ T4273] ntfs3: loop2: ntfs_evict_inode r=1e failed, -22. [ 165.689088][ T4273] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 165.700344][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 165.742198][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 168.055426][ T5615] loop3: detected capacity change from 0 to 512 [ 168.092504][ T5615] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 168.542155][ T5615] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 168.640522][ T5615] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.382: Invalid block bitmap block 0 in block_group 0 [ 168.684062][ T5615] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 168.727316][ T5615] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.382: attempt to clear invalid blocks 983261 len 1 [ 168.753616][ T5615] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.382: Invalid inode table block 0 in block_group 0 [ 168.788281][ T5615] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 168.914418][ T5615] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 169.219023][ T5615] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.382: Invalid inode table block 0 in block_group 0 [ 169.446180][ T5615] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 169.525329][ T5615] EXT4-fs error (device loop3): ext4_truncate:4318: inode #11: comm syz.3.382: mark_inode_dirty error [ 169.537721][ T5615] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 169.561314][ T5615] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.382: Invalid inode table block 0 in block_group 0 [ 169.601072][ T5615] EXT4-fs (loop3): 1 truncate cleaned up [ 169.607138][ T5615] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 169.631078][ T5631] loop0: detected capacity change from 0 to 4096 [ 169.665579][ T5631] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 169.682426][ T5637] loop1: detected capacity change from 0 to 512 [ 169.706053][ T5637] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.774989][ T5637] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 169.953393][ T4451] ntfs3: loop0: ntfs3_write_inode r=1e failed, -22. [ 169.975950][ T4266] ntfs3: loop0: ntfs_evict_inode r=1e failed, -22. [ 169.987637][ T4266] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 170.213793][ T5637] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.388: Invalid block bitmap block 0 in block_group 0 [ 170.280884][ T5637] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 170.316789][ T5646] input: syz1 as /devices/virtual/input/input7 [ 170.338220][ T5637] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.388: attempt to clear invalid blocks 983261 len 1 [ 170.363891][ T5646] input: failed to attach handler leds to device input7, error: -6 [ 170.408905][ T5637] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz.1.388: Invalid inode table block 0 in block_group 0 [ 170.456913][ T5637] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 170.458788][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 170.476567][ T5637] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 170.520442][ T5637] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz.1.388: Invalid inode table block 0 in block_group 0 [ 170.547778][ T5637] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 170.589008][ T5637] EXT4-fs error (device loop1): ext4_truncate:4318: inode #11: comm syz.1.388: mark_inode_dirty error [ 170.626285][ T5637] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 170.650503][ T5637] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz.1.388: Invalid inode table block 0 in block_group 0 [ 170.691093][ T5637] EXT4-fs (loop1): 1 truncate cleaned up [ 170.759814][ T5637] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 170.803999][ T5633] loop2: detected capacity change from 0 to 32768 [ 172.053254][ T5633] XFS (loop2): Mounting V5 Filesystem [ 172.239084][ T5633] XFS (loop2): Ending clean mount [ 172.250798][ T5633] XFS (loop2): Quotacheck needed: Please wait. [ 172.312283][ T5633] XFS (loop2): Quotacheck: Done. [ 172.369323][ T4273] XFS (loop2): Unmounting Filesystem [ 173.199447][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 173.628478][ T5687] loop2: detected capacity change from 0 to 512 [ 173.673269][ T5687] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 173.722845][ T5687] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 173.755220][ T5690] input: syz1 as /devices/virtual/input/input8 [ 173.761884][ T5690] input: failed to attach handler leds to device input8, error: -6 [ 173.779489][ T5687] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.403: Invalid block bitmap block 0 in block_group 0 [ 173.792872][ T5688] loop1: detected capacity change from 0 to 4096 [ 173.796060][ T5688] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 174.068787][ T5687] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 174.177584][ T5687] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.403: attempt to clear invalid blocks 983261 len 1 [ 174.249172][ T5687] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.403: Invalid inode table block 0 in block_group 0 [ 174.274014][ T5687] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 174.289578][ T35] ntfs3: loop1: ntfs3_write_inode r=1e failed, -22. [ 174.309332][ T5687] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 174.334497][ T4267] ntfs3: loop1: ntfs_evict_inode r=1e failed, -22. [ 174.341063][ T4267] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 174.354104][ T5687] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.403: Invalid inode table block 0 in block_group 0 [ 174.387093][ T5687] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 174.439227][ T5687] EXT4-fs error (device loop2): ext4_truncate:4318: inode #11: comm syz.2.403: mark_inode_dirty error [ 174.491387][ T5687] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 174.531619][ T5687] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.403: Invalid inode table block 0 in block_group 0 [ 174.536743][ T5704] loop3: detected capacity change from 0 to 1024 [ 174.590701][ T5687] EXT4-fs (loop2): 1 truncate cleaned up [ 174.599765][ T5704] EXT4-fs: inline encryption not supported [ 174.620959][ T5687] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 174.630018][ T5704] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 174.831356][ T5704] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 176.182123][ T5704] EXT4-fs (loop3): shut down requested (2) [ 176.192433][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 176.307360][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 176.430145][ T5720] loop3: detected capacity change from 0 to 47 [ 176.986837][ T5726] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 177.763044][ T5731] loop2: detected capacity change from 0 to 4096 [ 177.797908][ T5731] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 178.344456][ T5076] ntfs3: loop2: ntfs3_write_inode r=1e failed, -22. [ 178.356495][ T4273] ntfs3: loop2: ntfs_evict_inode r=1e failed, -22. [ 179.539190][ T4273] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 179.576278][ T5752] loop0: detected capacity change from 0 to 512 [ 179.642150][ T5752] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 179.691848][ T5752] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 179.783954][ T5752] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.423: Invalid block bitmap block 0 in block_group 0 [ 179.842271][ T5752] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 179.852376][ T5752] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.423: attempt to clear invalid blocks 983261 len 1 [ 179.866067][ T5752] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.423: Invalid inode table block 0 in block_group 0 [ 179.879534][ T5752] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 179.890750][ T5752] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 179.907691][ T5752] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.423: Invalid inode table block 0 in block_group 0 [ 179.921580][ T5752] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 179.936669][ T5752] EXT4-fs error (device loop0): ext4_truncate:4318: inode #11: comm syz.0.423: mark_inode_dirty error [ 179.949828][ T5752] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 179.964371][ T5752] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.423: Invalid inode table block 0 in block_group 0 [ 180.000746][ T5752] EXT4-fs (loop0): 1 truncate cleaned up [ 180.052781][ T5752] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 180.134272][ T5765] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 180.659068][ T5769] loop2: detected capacity change from 0 to 47 [ 181.638100][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 181.770924][ T5785] loop1: detected capacity change from 0 to 1024 [ 181.807917][ T5785] EXT4-fs: inline encryption not supported [ 181.913622][ T5785] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 182.020031][ T5785] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 182.065728][ T5785] EXT4-fs (loop1): shut down requested (2) [ 182.850492][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 183.766876][ T5783] loop2: detected capacity change from 0 to 32768 [ 183.866912][ T5818] loop1: detected capacity change from 0 to 47 [ 183.956445][ T5783] XFS (loop2): Mounting V5 Filesystem [ 184.121521][ T5783] XFS (loop2): Ending clean mount [ 184.147135][ T5783] XFS (loop2): Quotacheck needed: Please wait. [ 184.257504][ T5783] XFS (loop2): Quotacheck: Done. [ 184.481063][ T4273] XFS (loop2): Unmounting Filesystem [ 184.621173][ T5833] loop0: detected capacity change from 0 to 512 [ 184.723371][ T5833] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 184.803834][ T5833] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 184.864655][ T5833] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.449: Invalid block bitmap block 0 in block_group 0 [ 184.948509][ T5833] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 184.962604][ T5833] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.449: attempt to clear invalid blocks 983261 len 1 [ 185.203766][ T5833] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.449: Invalid inode table block 0 in block_group 0 [ 185.357440][ T5833] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 185.519622][ T5833] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 185.560845][ T5833] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.449: Invalid inode table block 0 in block_group 0 [ 185.617225][ T5833] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 185.752228][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 185.759073][ T5833] EXT4-fs error (device loop0): ext4_truncate:4318: inode #11: comm syz.0.449: mark_inode_dirty error [ 185.780272][ T5850] loop1: detected capacity change from 0 to 1024 [ 185.788095][ T5833] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 185.798521][ T5850] EXT4-fs: inline encryption not supported [ 185.806890][ T5833] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.449: Invalid inode table block 0 in block_group 0 [ 185.809367][ T5850] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 185.840606][ T5833] EXT4-fs (loop0): 1 truncate cleaned up [ 185.846442][ T5833] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 186.008538][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 186.014314][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 186.016711][ T4271] Bluetooth: hci0: command 0x0406 tx timeout [ 186.021553][ T4272] Bluetooth: hci2: command 0x0406 tx timeout [ 186.578964][ T5850] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 186.798401][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 186.807299][ T5850] EXT4-fs (loop1): shut down requested (2) [ 186.940257][ T5865] overlayfs: failed to clone lowerpath [ 186.983660][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 187.088120][ T5869] loop3: detected capacity change from 0 to 512 [ 187.131529][ T5869] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 187.152782][ T5869] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 187.315506][ T5869] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.462: Invalid block bitmap block 0 in block_group 0 [ 187.354443][ T5884] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 187.389017][ T5869] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 187.413655][ T5869] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.462: attempt to clear invalid blocks 983261 len 1 [ 187.970893][ T5869] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.462: Invalid inode table block 0 in block_group 0 [ 187.996491][ T5869] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 188.031192][ T5869] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 188.085907][ T5869] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.462: Invalid inode table block 0 in block_group 0 [ 188.186264][ T5869] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 188.223184][ T5869] EXT4-fs error (device loop3): ext4_truncate:4318: inode #11: comm syz.3.462: mark_inode_dirty error [ 188.577266][ T5869] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 188.822357][ T5869] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.462: Invalid inode table block 0 in block_group 0 [ 188.888401][ T5869] EXT4-fs (loop3): 1 truncate cleaned up [ 188.922130][ T5869] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 189.098314][ T5909] loop1: detected capacity change from 0 to 1024 [ 189.142707][ T5909] EXT4-fs: inline encryption not supported [ 189.197644][ T5909] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 189.314470][ T5909] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 189.451252][ T5909] EXT4-fs (loop1): shut down requested (2) [ 189.644629][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 189.832477][ T5925] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 190.943483][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.487'. [ 192.330926][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 193.415668][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 193.526823][ T5981] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 194.132787][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.143447][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.960667][ T5994] loop1: detected capacity change from 0 to 512 [ 195.001253][ T5994] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 195.050343][ T5996] loop2: detected capacity change from 0 to 1024 [ 195.164678][ T5996] EXT4-fs: inline encryption not supported [ 195.250970][ T5996] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 195.379205][ T5994] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 195.742998][ T5994] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.507: Invalid block bitmap block 0 in block_group 0 [ 195.795070][ T5994] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 195.812144][ T5996] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 195.827151][ T5994] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.507: attempt to clear invalid blocks 983261 len 1 [ 195.841343][ T5994] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz.1.507: Invalid inode table block 0 in block_group 0 [ 195.854847][ T5994] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 195.888029][ T5994] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 195.896527][ T5996] EXT4-fs (loop2): shut down requested (2) [ 195.897537][ T5994] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz.1.507: Invalid inode table block 0 in block_group 0 [ 196.033228][ T5994] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 196.043595][ T5994] EXT4-fs error (device loop1): ext4_truncate:4318: inode #11: comm syz.1.507: mark_inode_dirty error [ 196.070432][ T5994] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 196.082646][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 196.089011][ T5994] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz.1.507: Invalid inode table block 0 in block_group 0 [ 196.125427][ T5994] EXT4-fs (loop1): 1 truncate cleaned up [ 196.137623][ T5994] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 198.701979][ T6035] input: syz1 as /devices/virtual/input/input11 [ 198.862815][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 200.141021][ T6053] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 202.074373][ T6074] input: syz1 as /devices/virtual/input/input12 [ 202.361317][ T6079] loop2: detected capacity change from 0 to 1024 [ 203.135464][ T4817] hfsplus: b-tree write err: -5, ino 4 [ 206.486987][ T6124] loop3: detected capacity change from 0 to 1024 [ 206.643007][ T6124] EXT4-fs: inline encryption not supported [ 206.689747][ T6124] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 207.198390][ T6131] loop2: detected capacity change from 0 to 128 [ 207.327588][ T6131] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 207.348552][ T6132] loop1: detected capacity change from 0 to 1024 [ 207.362536][ T6124] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 207.383853][ T6131] hpfs: filesystem error: improperly stopped [ 207.389885][ T6131] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 207.398535][ T6131] hpfs: You really don't want any checks? You are crazy... [ 207.406160][ T6131] hpfs: hpfs_map_sector(): read error [ 207.411693][ T6131] hpfs: code page support is disabled [ 207.424979][ T6131] hpfs: hpfs_map_4sectors(): unaligned read [ 207.431121][ T6131] hpfs: hpfs_map_4sectors(): unaligned read [ 207.437467][ T6124] EXT4-fs (loop3): shut down requested (2) [ 207.437923][ T6136] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 207.461971][ T6131] hpfs: filesystem error: unable to find root dir [ 207.534741][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 207.549449][ T5076] hfsplus: b-tree write err: -5, ino 4 [ 207.806086][ T6147] input: syz1 as /devices/virtual/input/input13 [ 207.857713][ T6147] input: failed to attach handler leds to device input13, error: -6 [ 208.388314][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.560'. [ 210.337350][ T6180] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 210.702156][ T26] audit: type=1326 audit(1770675520.125:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5419af79 code=0x7ffc0000 [ 210.826712][ T26] audit: type=1326 audit(1770675520.145:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5b5413c399 code=0x7ffc0000 [ 210.987368][ T26] audit: type=1326 audit(1770675520.155:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5419af79 code=0x7ffc0000 [ 211.393354][ T26] audit: type=1326 audit(1770675520.155:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5b5413c399 code=0x7ffc0000 [ 211.531836][ T26] audit: type=1326 audit(1770675520.155:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5419af79 code=0x7ffc0000 [ 211.598911][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.577'. [ 211.630182][ T26] audit: type=1326 audit(1770675520.155:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5419af79 code=0x7ffc0000 [ 211.834118][ T26] audit: type=1326 audit(1770675520.155:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5419af79 code=0x7ffc0000 [ 211.866585][ T26] audit: type=1326 audit(1770675520.155:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5419af79 code=0x7ffc0000 [ 211.901845][ T4379] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 212.277207][ T26] audit: type=1326 audit(1770675520.155:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5b5413c399 code=0x7ffc0000 [ 212.539190][ T26] audit: type=1326 audit(1770675520.155:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5b5413c399 code=0x7ffc0000 [ 213.743774][ T4379] usb 1-1: Using ep0 maxpacket: 32 [ 213.761362][ T4379] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 213.781912][ T4379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.789965][ T4379] usb 1-1: Product: syz [ 213.831925][ T4379] usb 1-1: Manufacturer: syz [ 213.837779][ T4379] usb 1-1: SerialNumber: syz [ 214.091200][ T4379] usb 1-1: palm_os_4_probe - error -71 getting connection info [ 214.110926][ T4379] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 214.159804][ T4379] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 214.208861][ T4379] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 214.267731][ T4379] usb 1-1: USB disconnect, device number 4 [ 214.298156][ T4379] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 214.379948][ T4379] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 214.427540][ T4379] visor 1-1:1.0: device disconnected [ 215.111255][ T6238] loop3: detected capacity change from 0 to 2048 [ 215.358734][ T6238] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.493952][ T3598] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 215.737379][ T3598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.811810][ T4332] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 216.537641][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 216.537657][ T26] audit: type=1800 audit(1770675525.965:70): pid=6238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.582" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 216.552095][ T3598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.577635][ T6250] netlink: 'syz.0.594': attribute type 29 has an invalid length. [ 216.592696][ T6250] netlink: 'syz.0.594': attribute type 29 has an invalid length. [ 216.621958][ T4332] usb 3-1: Using ep0 maxpacket: 32 [ 216.633606][ T4332] usb 3-1: config 0 has an invalid interface number: 76 but max is 0 [ 216.653529][ T3598] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 216.666365][ T4332] usb 3-1: config 0 has no interface number 0 [ 216.676638][ T4332] usb 3-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 216.681835][ T3598] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 216.720306][ T4332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.731569][ T3598] usb 2-1: Manufacturer: syz [ 216.744817][ T4332] usb 3-1: Product: syz [ 216.749004][ T4332] usb 3-1: Manufacturer: syz [ 216.769472][ T3598] usb 2-1: config 0 descriptor?? [ 216.780688][ T4332] usb 3-1: SerialNumber: syz [ 216.939429][ T6254] loop0: detected capacity change from 0 to 1024 [ 216.953826][ T4332] usb 3-1: config 0 descriptor?? [ 216.972479][ T4332] dw2102: su3000_identify_state [ 216.977373][ T4332] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 216.986304][ T4332] dw2102: su3000_power_ctrl: 1, initialized 0 [ 216.992961][ T4332] dvb-usb: bulk message failed: -22 (2/0) [ 217.006665][ T4332] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 217.182341][ T3598] usbhid 2-1:0.0: can't add hid device: -71 [ 217.197606][ T3598] usbhid: probe of 2-1:0.0 failed with error -71 [ 217.248429][ T3598] usb 2-1: USB disconnect, device number 4 [ 217.279686][ T5326] hfsplus: b-tree write err: -5, ino 4 [ 217.339457][ T6234] dvb-usb: bulk message failed: -22 (3/0) [ 217.399891][ T6234] dw2102: i2c transfer failed. [ 217.432392][ T4332] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 217.451811][ T4332] usb 3-1: media controller created [ 217.459379][ T4332] dvb-usb: bulk message failed: -22 (6/0) [ 217.484689][ T4332] dw2102: i2c transfer failed. [ 217.489847][ T4332] dvb-usb: bulk message failed: -22 (6/0) [ 217.496587][ T4332] dw2102: i2c transfer failed. [ 217.503558][ T4332] dvb-usb: bulk message failed: -22 (6/0) [ 217.509376][ T4332] dw2102: i2c transfer failed. [ 217.514625][ T4332] dvb-usb: bulk message failed: -22 (6/0) [ 217.534253][ T4332] dw2102: i2c transfer failed. [ 217.539054][ T4332] dvb-usb: bulk message failed: -22 (6/0) [ 217.545067][ T4332] dw2102: i2c transfer failed. [ 217.549882][ T4332] dvb-usb: bulk message failed: -22 (6/0) [ 218.309775][ T6265] loop0: detected capacity change from 0 to 128 [ 218.348177][ T4332] dw2102: i2c transfer failed. [ 218.378830][ T4332] dvb-usb: MAC address: 02:02:02:02:02:02 [ 218.415745][ T6265] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 218.438996][ T4332] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 218.451442][ T6265] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 218.470792][ T4332] dvb-usb: bulk message failed: -22 (3/0) [ 218.476714][ T4332] dw2102: command 0x0e transfer failed. [ 218.482603][ T4332] dvb-usb: bulk message failed: -22 (3/0) [ 218.488422][ T4332] dw2102: command 0x0e transfer failed. [ 218.813095][ T4332] dvb-usb: bulk message failed: -22 (3/0) [ 218.824506][ T4332] dw2102: command 0x0e transfer failed. [ 218.857588][ T4332] dvb-usb: bulk message failed: -22 (3/0) [ 218.881104][ T4332] dw2102: command 0x0e transfer failed. [ 218.897350][ T4332] dvb-usb: bulk message failed: -22 (1/0) [ 218.920927][ T4332] dw2102: command 0x51 transfer failed. [ 218.947953][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 218.969755][ T6284] device syzkaller0 entered promiscuous mode [ 219.269015][ T6294] netlink: 100 bytes leftover after parsing attributes in process `syz.4.609'. [ 219.664355][ T4332] DVB: Unable to find symbol ds3000_attach() [ 219.670890][ T4332] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 219.782166][ T6297] capability: warning: `syz.4.611' uses deprecated v2 capabilities in a way that may be insecure [ 220.031952][ T4332] rc_core: IR keymap rc-su3000 not found [ 220.037700][ T4332] Registered IR keymap rc-empty [ 220.061530][ T3598] kernel write not supported for file /uinput (pid: 3598 comm: kworker/0:3) [ 220.127928][ T4332] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 220.207345][ T4332] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input14 [ 220.269962][ T4332] dvb-usb: schedule remote query interval to 150 msecs. [ 220.283155][ T4332] dw2102: su3000_power_ctrl: 0, initialized 1 [ 220.290361][ T4332] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 220.388111][ T4332] usb 3-1: USB disconnect, device number 5 [ 220.631369][ T6315] loop3: detected capacity change from 0 to 40427 [ 220.684524][ T6315] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 220.844180][ T6315] loop3: detected capacity change from 0 to 4096 [ 220.897533][ T4332] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 221.142502][ T6330] netlink: 344 bytes leftover after parsing attributes in process `syz.3.624'. [ 221.512265][ T6333] loop1: detected capacity change from 0 to 40427 [ 221.521524][ T6333] F2FS-fs (loop1): Invalid log blocks per segment (1) [ 221.528453][ T6333] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 221.536740][ T6333] F2FS-fs (loop1): Unrecognized mount option "fault_type=00000000000ãJ`‰W¿000032767" or missing value [ 222.773944][ T6347] netlink: 132 bytes leftover after parsing attributes in process `syz.2.632'. [ 223.725023][ T6368] loop3: detected capacity change from 0 to 512 [ 223.762685][ T6368] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 223.814860][ T6368] EXT4-fs (loop3): orphan cleanup on readonly fs [ 223.904354][ T6368] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:511: comm syz.3.641: Block bitmap for bg 0 marked uninitialized [ 224.040385][ T6368] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 224.062573][ T6368] EXT4-fs (loop3): 1 orphan inode deleted [ 224.068364][ T6368] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 224.285223][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 224.718649][ T6383] overlayfs: failed to clone upperpath [ 224.731926][ T4332] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 224.921884][ T4332] usb 4-1: Using ep0 maxpacket: 8 [ 224.928547][ T4332] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 224.975018][ T4332] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.024926][ T4332] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.067802][ T4332] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.068054][ T6388] loop1: detected capacity change from 0 to 2048 [ 225.086795][ T6390] device syzkaller0 entered promiscuous mode [ 225.116780][ T6388] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.131185][ T4332] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.175719][ T4332] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 225.226821][ T4332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.314722][ T6396] fuse: Bad value for 'fd' [ 225.500073][ T4332] usb 4-1: usb_control_msg returned -32 [ 226.240747][ T4332] usbtmc 4-1:16.0: can't read capabilities [ 226.258820][ T4332] usb 4-1: USB disconnect, device number 9 [ 226.824266][ T6425] loop3: detected capacity change from 0 to 2048 [ 226.899657][ T6425] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.025895][ T6434] loop3: detected capacity change from 0 to 256 [ 228.094533][ T6434] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 228.852144][ T6448] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 228.999537][ T3598] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 229.229245][ T6466] loop2: detected capacity change from 0 to 512 [ 229.281258][ T6466] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 229.300326][ T6466] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 229.312564][ T3598] usb 1-1: Using ep0 maxpacket: 8 [ 229.319064][ T3598] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 229.341136][ T3598] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.544755][ T6466] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.679: Invalid block bitmap block 0 in block_group 0 [ 229.709715][ T6466] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 229.815889][ T6471] loop3: detected capacity change from 0 to 4096 [ 229.863041][ T6466] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.679: attempt to clear invalid blocks 983261 len 1 [ 229.950596][ T3598] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 229.976850][ T6471] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 230.017327][ T6466] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.679: Invalid inode table block 0 in block_group 0 [ 230.042221][ T3598] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 230.052296][ T3598] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.065441][ T3598] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 230.084122][ T3598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.096518][ T6466] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 230.110489][ T6471] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 230.152381][ T6466] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 230.161958][ T6476] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 230.187069][ T6466] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.679: Invalid inode table block 0 in block_group 0 [ 230.238173][ T6466] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 230.260779][ T6471] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 230.290960][ T6471] Remounting filesystem read-only [ 230.298644][ T6466] EXT4-fs error (device loop2): ext4_truncate:4318: inode #11: comm syz.2.679: mark_inode_dirty error [ 230.306973][ T6471] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 230.315306][ T3598] usb 1-1: usb_control_msg returned -32 [ 230.350609][ T6471] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 230.356343][ T3598] usbtmc 1-1:16.0: can't read capabilities [ 230.366611][ T6466] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 230.379252][ T6471] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 230.423920][ T6466] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.679: Invalid inode table block 0 in block_group 0 [ 230.444045][ T6471] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 230.446771][ T3598] usb 1-1: USB disconnect, device number 5 [ 230.477370][ T6471] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 230.487799][ T6466] EXT4-fs (loop2): 1 truncate cleaned up [ 230.510306][ T6466] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 230.602797][ T4274] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 230.906961][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 231.331914][ T3598] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 231.362042][ T129] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 231.588517][ T129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.603511][ T3598] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 231.658556][ T129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.680294][ T3598] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 231.774417][ T129] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 231.787146][ T3598] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 231.837528][ T129] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 231.846190][ T3598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.862772][ T129] usb 2-1: Manufacturer: syz [ 231.888635][ T129] usb 2-1: config 0 descriptor?? [ 232.068916][ T6520] loop0: detected capacity change from 0 to 512 [ 232.088733][ T3598] usb 4-1: USB disconnect, device number 10 [ 232.106324][ T6520] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 232.206943][ T6520] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.699: bg 0: block 104: invalid block bitmap [ 232.295332][ T6520] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 232.349292][ T129] usbhid 2-1:0.0: can't add hid device: -71 [ 232.355487][ T129] usbhid: probe of 2-1:0.0 failed with error -71 [ 232.364661][ T129] usb 2-1: USB disconnect, device number 5 [ 232.396059][ T6520] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.699: invalid indirect mapped block 1 (level 1) [ 232.428400][ T6520] EXT4-fs (loop0): 1 truncate cleaned up [ 232.435179][ T6520] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 232.457946][ T26] audit: type=1800 audit(1770675541.885:71): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.699" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 232.491675][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 232.671856][ T4310] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 232.680926][ T6533] loop0: detected capacity change from 0 to 32768 [ 232.694266][ T6533] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.704 (6533) [ 232.727942][ T6533] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 232.738602][ T6533] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 232.747414][ T6533] BTRFS info (device loop0): enabling disk space caching [ 232.754502][ T6533] BTRFS info (device loop0): force clearing of disk cache [ 232.761969][ T6533] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 232.771847][ T6533] BTRFS info (device loop0): use zstd compression, level 3 [ 232.779574][ T6533] BTRFS info (device loop0): disk space caching is enabled [ 232.877583][ T4310] usb 3-1: Using ep0 maxpacket: 8 [ 232.893598][ T4310] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 232.927426][ T4310] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.948645][ T4310] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 232.992558][ T4310] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 233.004084][ T6533] BTRFS info (device loop0): enabling ssd optimizations [ 233.014932][ T6533] BTRFS info (device loop0): rebuilding free space tree [ 233.022107][ T4310] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.061027][ T6533] BTRFS info (device loop0): disabling free space tree [ 233.068124][ T6533] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 233.078152][ T6533] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 233.150455][ T4310] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 233.201115][ T4310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.353523][ T6559] loop1: detected capacity change from 0 to 4096 [ 233.369108][ T6559] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 233.477235][ T4310] usb 3-1: usb_control_msg returned -32 [ 233.484739][ T4310] usbtmc 3-1:16.0: can't read capabilities [ 233.524814][ T4310] usb 3-1: USB disconnect, device number 6 [ 233.540409][ T6559] ntfs3: loop1: ino=1e, "file1" fallocate(0x11) is not supported [ 233.881653][ T6564] loop1: detected capacity change from 0 to 1024 [ 233.908415][ T4266] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 233.984559][ T6564] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 234.007476][ T6564] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.087377][ T6555] loop3: detected capacity change from 0 to 32768 [ 234.187772][ T6564] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.710: bg 0: block 112: padding at end of block bitmap is not set [ 234.227238][ T6555] XFS (loop3): Mounting V5 Filesystem [ 234.282879][ T6555] XFS (loop3): totally zeroed log [ 234.292299][ T6555] XFS (loop3): Corruption warning: Metadata has LSN (1:384) ahead of current LSN (1:0). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 234.312257][ T6555] XFS (loop3): log mount/recovery failed: error -22 [ 234.389661][ T6555] XFS (loop3): log mount failed [ 234.401414][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 234.412024][ T6590] loop2: detected capacity change from 0 to 4096 [ 234.472949][ T6590] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 234.586072][ T6590] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.2.712: bad entry in directory: rec_len is too small for name_len - offset=44, inode=12, rec_len=16, size=4096 fake=0 [ 234.618694][ T6594] netlink: 'syz.1.713': attribute type 13 has an invalid length. [ 234.732159][ T6590] EXT4-fs error (device loop2) in ext4_delete_entry:2800: Corrupt filesystem [ 234.805469][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 235.085174][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 235.206917][ T6594] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.215960][ T6594] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.022802][ T6594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.061675][ T6594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.365642][ T6594] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.374888][ T6594] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.384788][ T6594] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.394092][ T6594] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.996592][ T6649] loop0: detected capacity change from 0 to 512 [ 239.146040][ T6649] EXT4-fs: Ignoring removed bh option [ 239.529582][ T6649] EXT4-fs: Ignoring removed mblk_io_submit option [ 239.662498][ T6649] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 239.703030][ T6658] loop3: detected capacity change from 0 to 256 [ 240.240993][ T6649] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 240.270443][ T6649] EXT4-fs (loop0): orphan cleanup on readonly fs [ 240.280579][ T6649] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4 [ 240.290964][ T6649] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 240.313700][ T6649] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.733: Failed to acquire dquot type 1 [ 240.327023][ T6658] FAT-fs (loop3): Directory bread(block 64) failed [ 240.364636][ T6649] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.733: Invalid block bitmap block 0 in block_group 0 [ 240.387073][ T6649] Quota error (device loop0): write_blk: dquota write failed [ 240.396809][ T6649] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 240.425147][ T6649] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.733: Failed to acquire dquot type 1 [ 240.467003][ T6658] FAT-fs (loop3): Directory bread(block 65) failed [ 240.503428][ T6658] FAT-fs (loop3): Directory bread(block 66) failed [ 240.527382][ T6649] Quota error (device loop0): write_blk: dquota write failed [ 240.537463][ T6658] FAT-fs (loop3): Directory bread(block 67) failed [ 240.547819][ T6658] FAT-fs (loop3): Directory bread(block 68) failed [ 240.555993][ T6649] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 240.579051][ T6658] FAT-fs (loop3): Directory bread(block 69) failed [ 240.597169][ T6658] FAT-fs (loop3): Directory bread(block 70) failed [ 240.623807][ T6649] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.733: Failed to acquire dquot type 1 [ 240.624182][ T6658] FAT-fs (loop3): Directory bread(block 71) failed [ 240.644221][ T6658] FAT-fs (loop3): Directory bread(block 72) failed [ 240.650895][ T6658] FAT-fs (loop3): Directory bread(block 73) failed [ 240.679131][ T6649] EXT4-fs (loop0): 1 orphan inode deleted [ 240.705460][ T6649] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 240.832442][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 240.986043][ T6677] device syzkaller0 entered promiscuous mode [ 242.390028][ T6697] netlink: 15 bytes leftover after parsing attributes in process `syz.1.748'. [ 242.502089][ T6697] netlink: 15 bytes leftover after parsing attributes in process `syz.1.748'. [ 242.512377][ T6697] netlink: 15 bytes leftover after parsing attributes in process `syz.1.748'. [ 242.522786][ T6697] netlink: 15 bytes leftover after parsing attributes in process `syz.1.748'. [ 242.545915][ T6697] netlink: 15 bytes leftover after parsing attributes in process `syz.1.748'. [ 242.555058][ T6697] netlink: 15 bytes leftover after parsing attributes in process `syz.1.748'. [ 242.567107][ T6697] netlink: 15 bytes leftover after parsing attributes in process `syz.1.748'. [ 242.579178][ T6697] netlink: 15 bytes leftover after parsing attributes in process `syz.1.748'. [ 242.592383][ T6697] netlink: 15 bytes leftover after parsing attributes in process `syz.1.748'. [ 242.594795][ T6704] loop2: detected capacity change from 0 to 4096 [ 242.609104][ T6697] netlink: 15 bytes leftover after parsing attributes in process `syz.1.748'. [ 242.609416][ T6700] loop3: detected capacity change from 0 to 1024 [ 242.627763][ T6704] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 242.656920][ T6700] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #3: comm syz.3.750: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 242.761210][ T4273] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 242.767784][ T4273] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 242.775376][ T4273] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 242.809984][ T6700] EXT4-fs error (device loop3): ext4_quota_enable:7046: comm syz.3.750: Bad quota inode: 3, type: 0 [ 242.853723][ T6700] EXT4-fs warning (device loop3): ext4_enable_quotas:7087: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 242.872207][ T6709] binder: BINDER_SET_CONTEXT_MGR already set [ 242.878613][ T6709] binder: 6708:6709 ioctl 4018620d 200000000040 returned -16 [ 242.903585][ T6700] EXT4-fs (loop3): mount failed [ 243.810785][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 243.895382][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.914310][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.209181][ T6744] loop2: detected capacity change from 0 to 4096 [ 244.237132][ T6744] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 244.530751][ T4273] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 244.567771][ T4273] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 244.656495][ T4273] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 244.847148][ T6763] input: syz1 as /devices/virtual/input/input15 [ 244.866957][ T6763] input: failed to attach handler leds to device input15, error: -6 [ 245.057638][ T6770] loop3: detected capacity change from 0 to 47 [ 246.041877][ T6572] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 246.416441][ T6572] usb 3-1: unable to get BOS descriptor or descriptor too short [ 246.434875][ T6572] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 246.453405][ T6572] usb 3-1: can't read configurations, error -71 [ 247.322046][ T6800] input: syz1 as /devices/virtual/input/input16 [ 247.329162][ T6800] input: failed to attach handler leds to device input16, error: -6 [ 247.645042][ T6812] fuse: Bad value for 'fd' [ 248.102594][ T6819] __nla_validate_parse: 281 callbacks suppressed [ 248.102636][ T6819] netlink: 15 bytes leftover after parsing attributes in process `syz.2.796'. [ 248.118048][ T6819] netlink: 15 bytes leftover after parsing attributes in process `syz.2.796'. [ 248.127398][ T6819] netlink: 15 bytes leftover after parsing attributes in process `syz.2.796'. [ 248.140161][ T6819] netlink: 15 bytes leftover after parsing attributes in process `syz.2.796'. [ 248.149238][ T6819] netlink: 15 bytes leftover after parsing attributes in process `syz.2.796'. [ 248.161759][ T6819] netlink: 15 bytes leftover after parsing attributes in process `syz.2.796'. [ 248.170855][ T6819] netlink: 15 bytes leftover after parsing attributes in process `syz.2.796'. [ 248.182604][ T6819] netlink: 15 bytes leftover after parsing attributes in process `syz.2.796'. [ 248.191612][ T6819] netlink: 15 bytes leftover after parsing attributes in process `syz.2.796'. [ 248.202892][ T6819] netlink: 15 bytes leftover after parsing attributes in process `syz.2.796'. [ 248.237076][ T6819] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 248.256695][ T6819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 248.265837][ T6819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 248.726815][ T6821] loop1: detected capacity change from 0 to 2048 [ 248.774305][ T6821] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.827373][ T26] audit: type=1800 audit(1770675558.255:72): pid=6821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.797" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 249.857090][ T6833] input: syz1 as /devices/virtual/input/input17 [ 249.946984][ T6835] loop3: detected capacity change from 0 to 47 [ 249.987540][ T6833] input: failed to attach handler leds to device input17, error: -6 [ 250.018434][ T6835] MINIX-fs: deleted inode referenced: 9 [ 251.618684][ T6849] loop0: detected capacity change from 0 to 4096 [ 251.681868][ T126] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 251.707505][ T6849] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 251.882002][ T126] usb 2-1: Using ep0 maxpacket: 32 [ 251.892549][ T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.055905][ T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.216190][ T126] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 252.340127][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.486912][ T126] usb 2-1: config 0 descriptor?? [ 252.772385][ T4266] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 252.778863][ T4266] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 252.792036][ T4266] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 252.975071][ T6863] loop0: detected capacity change from 0 to 128 [ 253.003752][ T126] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 253.082833][ T6863] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 253.091637][ T6863] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 253.307357][ T126] usb 2-1: USB disconnect, device number 6 [ 253.330992][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 253.404855][ T6868] fido_id[6868]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 253.538434][ T6876] loop2: detected capacity change from 0 to 47 [ 253.616921][ T6876] MINIX-fs: deleted inode referenced: 9 [ 254.291613][ T6890] loop0: detected capacity change from 0 to 1024 [ 254.314552][ T6893] overlayfs: failed to clone upperpath [ 254.456977][ T6881] __nla_validate_parse: 135 callbacks suppressed [ 254.456990][ T6881] netlink: 15 bytes leftover after parsing attributes in process `syz.3.813'. [ 254.472645][ T6881] netlink: 15 bytes leftover after parsing attributes in process `syz.3.813'. [ 254.481482][ T6881] netlink: 15 bytes leftover after parsing attributes in process `syz.3.813'. [ 254.490804][ T6881] netlink: 15 bytes leftover after parsing attributes in process `syz.3.813'. [ 254.499675][ T6881] netlink: 15 bytes leftover after parsing attributes in process `syz.3.813'. [ 254.508974][ T6881] netlink: 15 bytes leftover after parsing attributes in process `syz.3.813'. [ 254.517841][ T6881] netlink: 15 bytes leftover after parsing attributes in process `syz.3.813'. [ 254.526951][ T6881] netlink: 15 bytes leftover after parsing attributes in process `syz.3.813'. [ 254.535881][ T6881] netlink: 15 bytes leftover after parsing attributes in process `syz.3.813'. [ 254.544971][ T6881] netlink: 15 bytes leftover after parsing attributes in process `syz.3.813'. [ 254.555154][ T6881] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 254.563540][ T6881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 254.570940][ T6881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 254.627754][ T6629] hfsplus: b-tree write err: -5, ino 4 [ 254.875756][ T6908] input: syz1 as /devices/virtual/input/input18 [ 254.902774][ T6908] input: failed to attach handler leds to device input18, error: -6 [ 254.964488][ T6911] fuse: Bad value for 'fd' [ 255.514567][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.522413][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.613916][ T6925] loop3: detected capacity change from 0 to 512 [ 255.693122][ T6925] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 255.799831][ T6925] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 255.843031][ T6925] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 256.257443][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 256.650170][ T6945] fuse: Bad value for 'fd' [ 257.946722][ T4339] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 258.151862][ T4339] usb 4-1: Using ep0 maxpacket: 16 [ 258.163685][ T4339] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.181669][ T4339] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 258.254507][ T4339] usb 4-1: string descriptor 0 read error: -71 [ 258.268052][ T4339] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.354238][ T4339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.386584][ T4339] usb 4-1: can't set config #1, error -71 [ 258.412270][ T4339] usb 4-1: USB disconnect, device number 11 [ 259.194768][ T6975] loop2: detected capacity change from 0 to 32768 [ 259.207564][ T6979] loop1: detected capacity change from 0 to 1024 [ 259.261958][ T6979] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 259.273443][ T6979] EXT4-fs (loop1): orphan cleanup on readonly fs [ 259.280247][ T6979] EXT4-fs error (device loop1): ext4_free_blocks:6221: comm syz.1.857: Freeing blocks not in datazone - block = 0, count = 4096 [ 259.306143][ T6975] XFS (loop2): Mounting V5 Filesystem [ 259.317246][ T6975] XFS (loop2): totally zeroed log [ 259.325394][ T6975] XFS (loop2): Corruption warning: Metadata has LSN (1:384) ahead of current LSN (1:0). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 259.340206][ T6975] XFS (loop2): log mount/recovery failed: error -22 [ 259.352816][ T6979] EXT4-fs (loop1): 1 orphan inode deleted [ 259.366126][ T6975] XFS (loop2): log mount failed [ 259.371832][ T6979] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 259.399071][ T6983] loop3: detected capacity change from 0 to 4096 [ 260.077034][ T26] audit: type=1800 audit(1770675569.505:73): pid=6983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.858" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 260.268841][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 260.291624][ T6999] __nla_validate_parse: 135 callbacks suppressed [ 260.291641][ T6999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.861'. [ 260.341793][ T6999] netlink: 144 bytes leftover after parsing attributes in process `syz.2.861'. [ 260.369252][ T6999] netlink: 56 bytes leftover after parsing attributes in process `syz.2.861'. [ 260.453618][ T7003] loop3: detected capacity change from 0 to 512 [ 260.491016][ T7003] EXT4-fs: Ignoring removed nobh option [ 260.502433][ T7003] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 260.551530][ T7003] EXT4-fs (loop3): 1 truncate cleaned up [ 260.562893][ T7003] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 260.578748][ T7003] EXT4-fs (loop3): unmounting filesystem. [ 260.608113][ T7007] loop1: detected capacity change from 0 to 1024 [ 260.742590][ T4258] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 260.769962][ T7016] loop2: detected capacity change from 0 to 47 [ 260.837011][ T7016] MINIX-fs: deleted inode referenced: 9 [ 261.213037][ T7024] netlink: 15 bytes leftover after parsing attributes in process `syz.3.870'. [ 261.222251][ T7024] netlink: 15 bytes leftover after parsing attributes in process `syz.3.870'. [ 261.231209][ T7024] netlink: 15 bytes leftover after parsing attributes in process `syz.3.870'. [ 261.242860][ T7024] netlink: 15 bytes leftover after parsing attributes in process `syz.3.870'. [ 261.253023][ T7024] netlink: 15 bytes leftover after parsing attributes in process `syz.3.870'. [ 261.264781][ T7024] netlink: 15 bytes leftover after parsing attributes in process `syz.3.870'. [ 261.273948][ T7024] netlink: 15 bytes leftover after parsing attributes in process `syz.3.870'. [ 261.317832][ T7024] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 261.336062][ T7024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 261.344896][ T7024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 261.721589][ T7007] EXT4-fs: Ignoring removed i_version option [ 261.742664][ T7007] EXT4-fs (loop1): Test dummy encryption mode enabled [ 261.783979][ T7007] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 261.865042][ T6572] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 262.066058][ T6572] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.089449][ T6572] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.130669][ T6572] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 262.166963][ T6572] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 262.195097][ T6572] usb 3-1: Manufacturer: syz [ 262.197162][ T7007] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 262.220230][ T6572] usb 3-1: config 0 descriptor?? [ 262.233387][ T7034] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 262.371300][ T7047] loop3: detected capacity change from 0 to 1024 [ 262.456314][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 262.565549][ T7047] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 262.685561][ T7047] EXT4-fs (loop3): orphan cleanup on readonly fs [ 262.726622][ T7047] EXT4-fs error (device loop3): ext4_free_blocks:6221: comm syz.3.873: Freeing blocks not in datazone - block = 0, count = 4096 [ 262.756234][ T7050] loop1: detected capacity change from 0 to 256 [ 262.782433][ T7047] EXT4-fs (loop3): 1 orphan inode deleted [ 262.810754][ T7050] exfat: Deprecated parameter 'utf8' [ 262.827754][ T7047] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 262.860553][ T7050] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 262.882060][ T6572] usbhid 3-1:0.0: can't add hid device: -71 [ 262.898081][ T6572] usbhid: probe of 3-1:0.0 failed with error -71 [ 263.015352][ T6572] usb 3-1: USB disconnect, device number 9 [ 263.432375][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 263.853802][ T7064] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 266.789579][ T7106] loop2: detected capacity change from 0 to 128 [ 266.887899][ T7106] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 266.902091][ T7106] ext4 filesystem being mounted at /158/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 267.044602][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 267.170929][ T7124] kvm: pic: single mode not supported [ 267.171024][ T7124] kvm: pic: level sensitive irq not supported [ 268.466719][ T6573] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 268.629719][ T7137] syz.4.907 uses obsolete (PF_INET,SOCK_PACKET) [ 268.662031][ T6573] usb 3-1: device descriptor read/64, error -71 [ 268.771873][ T4332] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 268.941758][ T6573] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 268.971809][ T4332] usb 2-1: Using ep0 maxpacket: 16 [ 268.979254][ T4332] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.005799][ T7150] loop3: detected capacity change from 0 to 512 [ 269.019070][ T4332] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.048579][ T4332] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 269.057742][ T7150] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 269.097544][ T4332] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.107738][ T7150] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 269.118123][ T6573] usb 3-1: device descriptor read/64, error -71 [ 269.125265][ T4332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.146735][ T4332] usb 2-1: Product: syz [ 269.150942][ T4332] usb 2-1: Manufacturer: syz [ 269.163701][ T7150] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.903: Invalid block bitmap block 0 in block_group 0 [ 269.176666][ T4332] usb 2-1: SerialNumber: syz [ 269.195832][ T7150] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 269.214936][ T7150] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.903: attempt to clear invalid blocks 983261 len 1 [ 269.229445][ T7150] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.903: Invalid inode table block 0 in block_group 0 [ 269.247224][ T7150] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 269.257216][ T6573] usb usb3-port1: attempt power cycle [ 269.267052][ T7150] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 269.286418][ T7150] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.903: Invalid inode table block 0 in block_group 0 [ 269.317282][ T7150] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 269.327669][ T7150] EXT4-fs error (device loop3): ext4_truncate:4318: inode #11: comm syz.3.903: mark_inode_dirty error [ 269.345479][ T7150] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 269.358592][ T7150] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.903: Invalid inode table block 0 in block_group 0 [ 269.384182][ T7150] EXT4-fs (loop3): 1 truncate cleaned up [ 269.389879][ T7150] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 270.203204][ T6573] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 270.214990][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 270.263974][ T6573] usb 3-1: device descriptor read/8, error -71 [ 271.635660][ T4332] usb 2-1: 0:2 : does not exist [ 271.733465][ T4332] usb 2-1: USB disconnect, device number 7 [ 271.758111][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.171933][ T4332] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 272.243713][ T7188] tipc: Started in network mode [ 272.273141][ T7188] tipc: Node identity 32641415df6e, cluster identity 4711 [ 272.295478][ T7188] tipc: Enabled bearer , priority 0 [ 272.345415][ T7193] device syzkaller0 entered promiscuous mode [ 272.373520][ T4332] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.409050][ T4332] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.433585][ T7188] __nla_validate_parse: 138 callbacks suppressed [ 272.433601][ T7188] netlink: 44 bytes leftover after parsing attributes in process `syz.2.921'. [ 272.467569][ T4332] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 272.504113][ T4332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.237892][ T7193] tipc: Resetting bearer [ 273.260125][ T7187] tipc: Resetting bearer [ 273.363009][ T7187] tipc: Disabling bearer [ 273.398864][ T7202] loop3: detected capacity change from 0 to 512 [ 273.437659][ T4332] usb 2-1: usb_control_msg returned -32 [ 273.445330][ T4332] usbtmc 2-1:16.0: can't read capabilities [ 273.457407][ T7202] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 273.497429][ T4332] usb 2-1: USB disconnect, device number 8 [ 273.501520][ T7202] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 273.596697][ T7202] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.925: Invalid block bitmap block 0 in block_group 0 [ 273.638358][ T7202] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 273.667900][ T7202] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.925: attempt to clear invalid blocks 983261 len 1 [ 273.696219][ T7202] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.925: Invalid inode table block 0 in block_group 0 [ 273.713076][ T7202] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 273.739321][ T7202] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 273.748851][ T7202] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.925: Invalid inode table block 0 in block_group 0 [ 273.762295][ T7202] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 273.772565][ T7202] EXT4-fs error (device loop3): ext4_truncate:4318: inode #11: comm syz.3.925: mark_inode_dirty error [ 273.784183][ T7202] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 273.798559][ T7202] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.925: Invalid inode table block 0 in block_group 0 [ 273.818033][ T7202] EXT4-fs (loop3): 1 truncate cleaned up [ 273.823285][ T7208] loop2: detected capacity change from 0 to 8192 [ 273.825659][ T7202] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 274.143804][ T7215] loop1: detected capacity change from 0 to 47 [ 274.330167][ T7218] fuse: Bad value for 'fd' [ 274.700166][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 275.910522][ T7243] loop1: detected capacity change from 0 to 16 [ 275.950559][ T7243] erofs: (device loop1): mounted with root inode @ nid 36. [ 275.980266][ T4271] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 275.994743][ T7243] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 276.017399][ T26] audit: type=1800 audit(1770675585.445:74): pid=7243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.939" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 276.930684][ T7257] loop3: detected capacity change from 0 to 512 [ 277.013756][ T7257] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 277.062107][ T7257] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 277.276151][ T7257] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.945: Invalid block bitmap block 0 in block_group 0 [ 277.465283][ T7257] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 277.511295][ T7257] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.945: attempt to clear invalid blocks 983261 len 1 [ 277.576752][ T7257] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.945: Invalid inode table block 0 in block_group 0 [ 277.658051][ T7257] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 277.715988][ T7257] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 277.788869][ T7257] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.945: Invalid inode table block 0 in block_group 0 [ 277.911792][ T7257] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 277.967948][ T7257] EXT4-fs error (device loop3): ext4_truncate:4318: inode #11: comm syz.3.945: mark_inode_dirty error [ 278.033288][ T7257] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 278.047200][ T7257] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.945: Invalid inode table block 0 in block_group 0 [ 278.073962][ T7257] EXT4-fs (loop3): 1 truncate cleaned up [ 278.079654][ T7257] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 279.781899][ T4332] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 279.983499][ T4332] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 280.007372][ T4332] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.034625][ T4332] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 280.066644][ T4332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.301594][ T4332] usb 1-1: usb_control_msg returned -32 [ 280.320202][ T4332] usbtmc 1-1:16.0: can't read capabilities [ 280.359791][ T4332] usb 1-1: USB disconnect, device number 6 [ 280.679687][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 282.109614][ T7345] netlink: 15 bytes leftover after parsing attributes in process `syz.4.971'. [ 282.118526][ T7345] netlink: 15 bytes leftover after parsing attributes in process `syz.4.971'. [ 282.127493][ T7345] netlink: 15 bytes leftover after parsing attributes in process `syz.4.971'. [ 282.136790][ T7345] netlink: 15 bytes leftover after parsing attributes in process `syz.4.971'. [ 282.145673][ T7345] netlink: 15 bytes leftover after parsing attributes in process `syz.4.971'. [ 282.154934][ T7345] netlink: 15 bytes leftover after parsing attributes in process `syz.4.971'. [ 282.163892][ T7345] netlink: 15 bytes leftover after parsing attributes in process `syz.4.971'. [ 282.173043][ T7345] netlink: 15 bytes leftover after parsing attributes in process `syz.4.971'. [ 282.181904][ T7345] netlink: 15 bytes leftover after parsing attributes in process `syz.4.971'. [ 282.191185][ T7345] netlink: 15 bytes leftover after parsing attributes in process `syz.4.971'. [ 282.201759][ T7345] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 282.210214][ T7345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 282.217661][ T7345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 282.627392][ T7363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.680608][ T7363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.935558][ T7377] device syzkaller0 entered promiscuous mode [ 284.599955][ T7398] loop3: detected capacity change from 0 to 512 [ 284.627617][ T7398] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.992: inode has both inline data and extents flags [ 284.653136][ T7398] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.992: couldn't read orphan inode 15 (err -117) [ 284.673036][ T7398] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 284.791754][ T4332] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 284.818054][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 284.884273][ T7400] loop1: detected capacity change from 0 to 32768 [ 284.981920][ T4332] usb 3-1: Using ep0 maxpacket: 8 [ 284.998062][ T4332] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 285.017490][ T4332] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 285.038141][ T4332] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 285.063870][ T4332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.064050][ T7400] XFS (loop1): Mounting V5 Filesystem [ 285.106336][ T7400] XFS (loop1): totally zeroed log [ 285.131855][ T7400] XFS (loop1): Corruption warning: Metadata has LSN (1:384) ahead of current LSN (1:0). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 285.161796][ T7400] XFS (loop1): log mount/recovery failed: error -22 [ 285.207138][ T7400] XFS (loop1): log mount failed [ 286.690415][ T7430] overlayfs: failed to clone upperpath [ 286.939445][ T7434] device syzkaller0 entered promiscuous mode [ 287.293636][ T7447] loop1: detected capacity change from 0 to 4096 [ 287.304140][ T7447] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 287.400577][ T4267] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 287.411311][ T4267] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 287.429786][ T4267] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 288.621330][ T6568] usb 3-1: USB disconnect, device number 14 [ 289.119328][ T7475] loop2: detected capacity change from 0 to 47 [ 289.502659][ T7449] loop0: detected capacity change from 0 to 32768 [ 290.327435][ T7449] XFS (loop0): Mounting V5 Filesystem [ 290.379730][ T7449] XFS (loop0): totally zeroed log [ 290.386249][ T7449] XFS (loop0): Corruption warning: Metadata has LSN (1:384) ahead of current LSN (1:0). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 290.401316][ T7449] XFS (loop0): log mount/recovery failed: error -22 [ 290.461946][ T7449] XFS (loop0): log mount failed [ 290.581778][ T126] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 290.781749][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 290.788603][ T126] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 290.821497][ T126] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 290.851809][ T126] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 290.860885][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.963951][ T7503] loop0: detected capacity change from 0 to 32768 [ 291.009159][ T7503] JBD2: Ignoring recovery information on journal [ 291.060272][ T7503] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 291.080300][ T7503] (syz.0.1027,7503,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 291.140863][ T4266] ocfs2: Unmounting device (7,0) on (node local) [ 292.002861][ T7540] loop1: detected capacity change from 0 to 47 [ 292.691857][ T4394] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 292.851743][ T4394] usb 2-1: device descriptor read/64, error -71 [ 293.131756][ T4394] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 293.281770][ T4394] usb 2-1: device descriptor read/64, error -71 [ 293.294869][ T6573] usb 3-1: USB disconnect, device number 15 [ 293.356865][ T7572] loop2: detected capacity change from 0 to 128 [ 293.390938][ T7572] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 293.412699][ T7572] ext4 filesystem being mounted at /176/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 293.421923][ T4394] usb usb2-port1: attempt power cycle [ 293.529681][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 293.832156][ T4394] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 293.894306][ T4394] usb 2-1: device descriptor read/8, error -71 [ 294.202331][ T4394] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 294.244812][ T4394] usb 2-1: device descriptor read/8, error -71 [ 294.364587][ T4394] usb usb2-port1: unable to enumerate USB device [ 294.483254][ T7599] loop3: detected capacity change from 0 to 47 [ 296.276504][ T7637] loop1: detected capacity change from 0 to 47 [ 296.504659][ T7643] device syzkaller0 entered promiscuous mode [ 296.521747][ T6572] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 296.689063][ T6572] usb 1-1: device descriptor read/64, error -71 [ 296.842818][ T6573] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 296.961823][ T6572] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 297.001845][ T6573] usb 4-1: device descriptor read/64, error -71 [ 297.121802][ T6572] usb 1-1: device descriptor read/64, error -71 [ 297.557660][ T6572] usb usb1-port1: attempt power cycle [ 297.621982][ T6573] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 297.792028][ T6573] usb 4-1: device descriptor read/64, error -71 [ 297.806267][ T7676] device syzkaller0 entered promiscuous mode [ 297.912000][ T6573] usb usb4-port1: attempt power cycle [ 297.971825][ T6572] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 298.002423][ T6572] usb 1-1: device descriptor read/8, error -71 [ 298.272112][ T6572] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 298.316749][ T6572] usb 1-1: device descriptor read/8, error -71 [ 298.339657][ T6573] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 298.383820][ T6573] usb 4-1: device descriptor read/8, error -71 [ 298.535141][ T6572] usb usb1-port1: unable to enumerate USB device [ 298.693464][ T6573] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 298.732450][ T6573] usb 4-1: device descriptor read/8, error -71 [ 298.851853][ T6573] usb usb4-port1: unable to enumerate USB device [ 299.953050][ T7701] device syzkaller0 entered promiscuous mode [ 302.419840][ T7721] loop2: detected capacity change from 0 to 47 [ 302.517011][ T7721] MINIX-fs: deleted inode referenced: 9 [ 302.541374][ T7723] loop0: detected capacity change from 0 to 512 [ 302.599727][ T7723] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 302.671851][ T7723] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 302.737379][ T7723] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.1113: Invalid block bitmap block 0 in block_group 0 [ 302.788265][ T7723] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 302.843615][ T7723] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.1113: attempt to clear invalid blocks 983261 len 1 [ 302.898023][ T7723] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.1113: Invalid inode table block 0 in block_group 0 [ 302.939045][ T7723] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 302.971745][ T4394] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 302.992312][ T7723] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 303.021431][ T7723] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.1113: Invalid inode table block 0 in block_group 0 [ 303.049111][ T7723] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 303.094641][ T7723] EXT4-fs error (device loop0): ext4_truncate:4318: inode #11: comm syz.0.1113: mark_inode_dirty error [ 303.131833][ T4394] usb 4-1: device descriptor read/64, error -71 [ 303.152480][ T7723] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 303.166318][ T7723] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.1113: Invalid inode table block 0 in block_group 0 [ 303.186233][ T7723] EXT4-fs (loop0): 1 truncate cleaned up [ 303.193513][ T7723] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 303.401960][ T4394] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 303.561808][ T4394] usb 4-1: device descriptor read/64, error -71 [ 303.681948][ T4394] usb usb4-port1: attempt power cycle [ 303.928497][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 304.472389][ T6572] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 304.912157][ T4394] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 305.073914][ T6572] usb 2-1: Using ep0 maxpacket: 8 [ 305.274329][ T4394] usb 4-1: device descriptor read/8, error -71 [ 305.328252][ T6572] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 305.398631][ T6572] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 305.487240][ T6572] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 305.544125][ T6572] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 305.571768][ T4394] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 305.615191][ T6572] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 305.632006][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 305.639753][ T4394] usb 4-1: device descriptor read/8, error -32 [ 305.666566][ T6572] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 305.686938][ T6572] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.725536][ T6572] usbtmc 2-1:16.0: bulk endpoints not found [ 305.763245][ T4394] usb usb4-port1: unable to enumerate USB device [ 307.991428][ T6572] usb 2-1: USB disconnect, device number 13 [ 310.492934][ T6572] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 310.667040][ T6572] usb 2-1: device descriptor read/64, error -71 [ 310.871834][ T4351] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 310.961881][ T6572] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 311.035590][ T4351] usb 4-1: device descriptor read/64, error -71 [ 311.131805][ T6572] usb 2-1: device descriptor read/64, error -71 [ 311.251886][ T6572] usb usb2-port1: attempt power cycle [ 311.321856][ T4351] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 311.481890][ T4351] usb 4-1: device descriptor read/64, error -71 [ 311.601981][ T4351] usb usb4-port1: attempt power cycle [ 311.661758][ T4332] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 311.855491][ T4332] usb 3-1: Using ep0 maxpacket: 8 [ 311.866697][ T4332] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 311.898253][ T4332] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 311.933599][ T4332] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 311.961399][ T4332] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 311.972673][ T7850] loop0: detected capacity change from 0 to 128 [ 311.998237][ T4332] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 312.037929][ T7850] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 312.049947][ T4332] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 312.051808][ T4351] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 312.064473][ T4332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.066964][ T7850] ext4 filesystem being mounted at /191/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 312.093122][ T4332] usbtmc 3-1:16.0: bulk endpoints not found [ 312.152367][ T4351] usb 4-1: device descriptor read/8, error -71 [ 312.263972][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 312.436754][ T4351] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 312.482660][ T4351] usb 4-1: device descriptor read/8, error -71 [ 312.602786][ T4351] usb usb4-port1: unable to enumerate USB device [ 313.766938][ T7866] loop1: detected capacity change from 0 to 512 [ 313.810509][ T7866] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 313.861716][ T7866] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 313.983389][ T7866] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.1160: Invalid block bitmap block 0 in block_group 0 [ 314.016302][ T7866] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 314.348529][ T7866] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.1160: attempt to clear invalid blocks 983261 len 1 [ 314.506448][ T7866] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz.1.1160: Invalid inode table block 0 in block_group 0 [ 314.522854][ T4332] usb 3-1: USB disconnect, device number 16 [ 314.640903][ T7866] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 314.671192][ T7866] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 314.697099][ T7866] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz.1.1160: Invalid inode table block 0 in block_group 0 [ 314.767039][ T7866] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 314.821739][ T7866] EXT4-fs error (device loop1): ext4_truncate:4318: inode #11: comm syz.1.1160: mark_inode_dirty error [ 314.856877][ T7866] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 314.863031][ T7883] loop2: detected capacity change from 0 to 128 [ 314.884181][ T7866] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz.1.1160: Invalid inode table block 0 in block_group 0 [ 314.925784][ T7866] EXT4-fs (loop1): 1 truncate cleaned up [ 314.931499][ T7866] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 314.978876][ T7883] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 315.014483][ T7883] ext4 filesystem being mounted at /200/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 315.252621][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 316.715279][ T7905] loop3: detected capacity change from 0 to 47 [ 316.777234][ T7905] MINIX-fs: deleted inode referenced: 9 [ 316.944182][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 316.954349][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.960672][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.970543][ T4351] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 316.990250][ T7907] loop3: detected capacity change from 0 to 47 [ 317.131771][ T4351] usb 1-1: device descriptor read/64, error -71 [ 317.381790][ T4379] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 317.452127][ T4351] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 317.571722][ T4379] usb 2-1: Using ep0 maxpacket: 8 [ 317.587961][ T4379] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 317.596436][ T4379] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 317.612594][ T4379] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 317.624294][ T4379] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 317.636129][ T4379] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 317.653341][ T4379] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 317.664512][ T4379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.693025][ T4351] usb 1-1: device descriptor read/64, error -71 [ 317.739351][ T4379] usbtmc 2-1:16.0: bulk endpoints not found [ 317.921936][ T4351] usb usb1-port1: attempt power cycle [ 318.397538][ T4351] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 318.442498][ T4351] usb 1-1: device descriptor read/8, error -71 [ 319.154258][ T7938] loop2: detected capacity change from 0 to 47 [ 319.228160][ T7938] MINIX-fs: deleted inode referenced: 9 [ 319.311719][ T4351] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 319.372373][ T4351] usb 1-1: device descriptor read/8, error -71 [ 319.496881][ T4351] usb usb1-port1: unable to enumerate USB device [ 320.334809][ T4351] usb 2-1: USB disconnect, device number 17 [ 321.247838][ T7969] loop2: detected capacity change from 0 to 47 [ 321.357440][ T7971] loop1: detected capacity change from 0 to 47 [ 321.407584][ T7971] MINIX-fs: deleted inode referenced: 9 [ 321.722332][ T6569] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 322.121776][ T6569] usb 4-1: Using ep0 maxpacket: 32 [ 322.127492][ T6569] usb 4-1: no configurations [ 322.142830][ T6569] usb 4-1: can't read configurations, error -22 [ 322.268701][ T7990] fuse: Bad value for 'fd' [ 323.044338][ T6569] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 323.141971][ T4394] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 323.231734][ T6569] usb 4-1: Using ep0 maxpacket: 32 [ 323.237617][ T6569] usb 4-1: no configurations [ 323.251709][ T6569] usb 4-1: can't read configurations, error -22 [ 323.268313][ T6569] usb usb4-port1: attempt power cycle [ 323.331731][ T4394] usb 3-1: Using ep0 maxpacket: 8 [ 323.338581][ T4394] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 323.361708][ T4394] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 323.391760][ T4394] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 323.421735][ T4394] usb 3-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 323.461706][ T4394] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.491707][ T4394] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 323.500880][ T4394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.540498][ T4394] usbtmc 3-1:16.0: bulk endpoints not found [ 323.686905][ T6569] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 323.734257][ T6569] usb 4-1: Using ep0 maxpacket: 32 [ 323.740178][ T6569] usb 4-1: no configurations [ 323.760155][ T6569] usb 4-1: can't read configurations, error -22 [ 323.922753][ T6569] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 323.963442][ T6569] usb 4-1: Using ep0 maxpacket: 32 [ 323.969383][ T6569] usb 4-1: no configurations [ 323.984492][ T6569] usb 4-1: can't read configurations, error -22 [ 324.010189][ T6569] usb usb4-port1: unable to enumerate USB device [ 324.388976][ T8010] loop0: detected capacity change from 0 to 47 [ 324.519673][ T8015] loop3: detected capacity change from 0 to 47 [ 324.567263][ T8015] MINIX-fs: deleted inode referenced: 9 [ 324.891819][ T126] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 325.051880][ T126] usb 1-1: device descriptor read/64, error -71 [ 325.155679][ T8022] loop3: detected capacity change from 0 to 128 [ 325.324350][ T126] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 325.332911][ T8022] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 325.362432][ T8022] ext4 filesystem being mounted at /215/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 325.485393][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 325.547249][ T126] usb 1-1: device descriptor read/64, error -71 [ 325.606373][ T4379] usb 3-1: USB disconnect, device number 17 [ 325.692028][ T126] usb usb1-port1: attempt power cycle [ 326.181885][ T126] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 326.222578][ T126] usb 1-1: device descriptor read/8, error -71 [ 326.491861][ T126] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 326.522452][ T126] usb 1-1: device descriptor read/8, error -71 [ 326.642971][ T126] usb usb1-port1: unable to enumerate USB device [ 327.299201][ T8051] loop3: detected capacity change from 0 to 47 [ 327.730958][ T8059] loop0: detected capacity change from 0 to 128 [ 327.803475][ T8059] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 327.864421][ T8059] ext4 filesystem being mounted at /202/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 328.056576][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 328.403018][ T8065] loop3: detected capacity change from 0 to 47 [ 328.511876][ T6572] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 328.701879][ T6572] usb 1-1: Using ep0 maxpacket: 8 [ 328.708709][ T6572] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 328.737951][ T6572] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 328.763679][ T6572] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 328.803313][ T6572] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 328.835024][ T6572] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 328.850599][ T6572] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 328.863954][ T6572] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.898952][ T6572] usbtmc 1-1:16.0: bulk endpoints not found [ 329.438543][ T8086] loop1: detected capacity change from 0 to 47 [ 330.045702][ T8099] tmpfs: Bad value for 'mpol' [ 330.058651][ T8099] overlayfs: failed to clone upperpath [ 330.281819][ T4379] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 330.501929][ T4379] usb 4-1: Using ep0 maxpacket: 32 [ 330.516541][ T4379] usb 4-1: no configurations [ 330.540109][ T4379] usb 4-1: can't read configurations, error -22 [ 330.711876][ T4379] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 330.919777][ T4379] usb 4-1: Using ep0 maxpacket: 32 [ 330.928154][ T4379] usb 4-1: no configurations [ 330.937196][ T4379] usb 4-1: can't read configurations, error -22 [ 330.945028][ T4379] usb usb4-port1: attempt power cycle [ 331.448428][ T4332] usb 1-1: USB disconnect, device number 19 [ 331.491758][ T4379] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 331.532797][ T4379] usb 4-1: Using ep0 maxpacket: 32 [ 331.546694][ T4379] usb 4-1: no configurations [ 331.566254][ T4379] usb 4-1: can't read configurations, error -22 [ 331.721748][ T4379] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 331.752917][ T8129] tmpfs: Bad value for 'mpol' [ 331.762370][ T4379] usb 4-1: Using ep0 maxpacket: 32 [ 331.768646][ T4379] usb 4-1: no configurations [ 331.775381][ T4379] usb 4-1: can't read configurations, error -22 [ 331.788359][ T4379] usb usb4-port1: unable to enumerate USB device [ 331.842016][ T6569] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 332.033281][ T6569] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 332.048742][ T6569] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 332.058224][ T6569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.646312][ T8163] overlayfs: workdir and upperdir must reside under the same mount [ 334.047174][ T6572] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 334.241717][ T6572] usb 1-1: Using ep0 maxpacket: 8 [ 334.248817][ T6572] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 334.296422][ T6572] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 334.307426][ T6572] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 334.339316][ T6572] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 334.388757][ T6572] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.437786][ T6572] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 334.450012][ T6572] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.027623][ T6572] usbtmc 1-1:16.0: bulk endpoints not found [ 335.085838][ T4332] usb 3-1: USB disconnect, device number 18 [ 335.317041][ T8185] loop3: detected capacity change from 0 to 128 [ 335.331602][ T8185] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 335.346147][ T8185] ext4 filesystem being mounted at /226/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 335.455322][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 335.511742][ T4332] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 335.701928][ T4332] usb 3-1: Using ep0 maxpacket: 32 [ 336.070210][ T4332] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.267324][ T4332] usb 3-1: config 0 has no interfaces? [ 336.309856][ T4332] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 336.319789][ T4332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.328093][ T4332] usb 3-1: Product: syz [ 336.333046][ T4332] usb 3-1: Manufacturer: syz [ 336.337827][ T4332] usb 3-1: SerialNumber: syz [ 336.351924][ T4332] usb 3-1: config 0 descriptor?? [ 336.698682][ T8204] loop1: detected capacity change from 0 to 512 [ 336.738233][ T8204] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 336.747506][ T8204] ext4 filesystem being mounted at /264/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.788552][ T8204] EXT4-fs (loop1): shut down requested (2) [ 336.848014][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 337.456513][ T4332] usb 1-1: USB disconnect, device number 20 [ 338.574460][ T6572] usb 3-1: USB disconnect, device number 19 [ 339.261390][ T6569] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 340.013535][ T6569] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 340.058136][ T6569] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 340.092400][ T6569] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.983182][ T8257] overlayfs: workdir and upperdir must reside under the same mount [ 341.603047][ T8264] __nla_validate_parse: 133 callbacks suppressed [ 341.603062][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1303'. [ 341.717583][ T8264] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.727045][ T8264] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.736099][ T8264] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.744934][ T8264] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.767381][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1303'. [ 342.013607][ T8270] loop2: detected capacity change from 0 to 128 [ 342.302721][ T8270] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 342.469554][ T8270] ext4 filesystem being mounted at /229/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 342.745427][ T6573] usb 2-1: USB disconnect, device number 18 [ 342.921138][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 343.172171][ T8286] loop1: detected capacity change from 0 to 512 [ 343.209034][ T8286] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 343.251086][ T8286] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 343.303863][ T8286] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.1309: Invalid block bitmap block 0 in block_group 0 [ 343.340887][ T8286] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 343.370171][ T8286] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.1309: attempt to clear invalid blocks 983261 len 1 [ 343.439274][ T8290] loop0: detected capacity change from 0 to 4096 [ 343.492917][ T8286] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz.1.1309: Invalid inode table block 0 in block_group 0 [ 343.518694][ T8286] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 343.598133][ T8290] ntfs3: loop0: failed to convert "0080" to maciceland [ 343.608474][ T8286] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 343.653711][ T8290] ntfs3: loop0: failed to convert name for inode 1e. [ 343.679097][ T8286] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz.1.1309: Invalid inode table block 0 in block_group 0 [ 343.723483][ T8286] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 343.749973][ T8286] EXT4-fs error (device loop1): ext4_truncate:4318: inode #11: comm syz.1.1309: mark_inode_dirty error [ 343.824191][ T8286] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 343.873768][ T8286] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz.1.1309: Invalid inode table block 0 in block_group 0 [ 343.911952][ T8286] EXT4-fs (loop1): 1 truncate cleaned up [ 343.917678][ T8286] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 344.299612][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 344.518431][ T8309] loop1: detected capacity change from 0 to 128 [ 344.659105][ T8309] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 345.175320][ T8309] ext4 filesystem being mounted at /270/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 345.337106][ T8319] overlayfs: failed to clone upperpath [ 345.348704][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 345.419261][ T8321] fuse: Bad value for 'fd' [ 345.708462][ T8333] loop3: detected capacity change from 0 to 512 [ 345.742765][ T8333] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 345.777715][ T8333] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 345.791929][ T6569] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 345.847960][ T8333] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.1329: Invalid block bitmap block 0 in block_group 0 [ 345.872473][ T8333] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 345.884726][ T8333] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.1329: attempt to clear invalid blocks 983261 len 1 [ 345.893459][ T8335] device syzkaller0 entered promiscuous mode [ 345.922862][ T8333] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.1329: Invalid inode table block 0 in block_group 0 [ 345.983952][ T8333] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 346.021730][ T6569] usb 2-1: Using ep0 maxpacket: 32 [ 346.028940][ T6569] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.042452][ T8333] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 346.054827][ T6569] usb 2-1: config 0 has no interfaces? [ 346.073636][ T8333] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.1329: Invalid inode table block 0 in block_group 0 [ 346.092516][ T6569] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 346.093172][ T8333] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 346.115367][ T6569] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.118646][ T8333] EXT4-fs error (device loop3): ext4_truncate:4318: inode #11: comm syz.3.1329: mark_inode_dirty error [ 346.123533][ T6569] usb 2-1: Product: syz [ 346.123551][ T6569] usb 2-1: Manufacturer: syz [ 346.123566][ T6569] usb 2-1: SerialNumber: syz [ 346.141277][ T8333] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 346.163646][ T8333] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.1329: Invalid inode table block 0 in block_group 0 [ 346.171234][ T6569] usb 2-1: config 0 descriptor?? [ 346.180271][ T8333] EXT4-fs (loop3): 1 truncate cleaned up [ 346.189443][ T8333] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 347.047369][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 348.434786][ T4394] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 348.448833][ T8359] fuse: Bad value for 'fd' [ 348.514476][ T6569] usb 2-1: USB disconnect, device number 19 [ 348.643812][ T4394] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 348.659086][ T8363] loop1: detected capacity change from 0 to 128 [ 348.669969][ T4394] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.715202][ T4394] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 348.756008][ T4394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.799233][ T4394] usbtmc 1-1:16.0: bulk endpoints not found [ 350.928117][ T4323] usb 1-1: USB disconnect, device number 21 [ 351.541852][ T4323] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 351.763351][ T4323] usb 1-1: Using ep0 maxpacket: 32 [ 351.776467][ T4323] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.788792][ T4323] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 351.809762][ T4323] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 351.831769][ T4323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.870594][ T4323] usb 1-1: Product: syz [ 351.891990][ T4323] usb 1-1: Manufacturer: syz [ 351.896642][ T4323] usb 1-1: SerialNumber: syz [ 351.976008][ T8399] fuse: Bad value for 'fd' [ 353.216420][ T6569] usb 1-1: USB disconnect, device number 22 [ 353.451523][ T8409] overlayfs: failed to clone upperpath [ 355.851741][ T4332] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 356.013763][ T8402] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1351'. [ 356.075425][ T4332] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 356.124486][ T4332] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.156517][ T4332] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 356.166810][ T4332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.189234][ T4332] usbtmc 1-1:16.0: bulk endpoints not found [ 356.218361][ T8432] binder: 8431:8432 ioctl c0306201 2000000003c0 returned -22 [ 357.285292][ T8441] overlayfs: failed to resolve './bus': -2 [ 357.411875][ T4332] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 357.661860][ T4332] usb 2-1: Using ep0 maxpacket: 32 [ 357.674335][ T4332] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.821769][ T4332] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 357.958334][ T4332] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 357.978315][ T4332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.011753][ T4332] usb 2-1: Product: syz [ 358.016217][ T4332] usb 2-1: Manufacturer: syz [ 358.020819][ T4332] usb 2-1: SerialNumber: syz [ 358.286609][ T4339] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 359.149804][ T4339] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.176295][ T4339] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 359.193051][ T4339] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 359.204579][ T4339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.230933][ T4339] usb 3-1: config 0 descriptor?? [ 359.264983][ T4339] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 359.276433][ T4339] dvb-usb: bulk message failed: -22 (3/0) [ 359.306519][ T8460] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1370'. [ 359.324886][ T4339] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 359.339405][ T4339] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 359.356406][ T6572] usb 1-1: USB disconnect, device number 23 [ 359.357339][ T4339] usb 3-1: media controller created [ 359.384501][ T4339] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 359.440377][ T4339] dvb-usb: bulk message failed: -22 (6/0) [ 359.465338][ T8447] dvb-usb: bulk message failed: -22 (2/0) [ 359.479258][ T4339] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 359.501486][ T8447] dvb-usb: bulk message failed: -22 (4/0) [ 359.531896][ T4339] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 359.574103][ T4339] dvb-usb: schedule remote query interval to 150 msecs. [ 359.718494][ T4339] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 359.769917][ T4339] usb 3-1: USB disconnect, device number 20 [ 360.067381][ T4339] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 360.529850][ T6572] usb 2-1: USB disconnect, device number 20 [ 360.698125][ T8477] overlayfs: failed to resolve './bus': -2 [ 361.669188][ T8486] loop0: detected capacity change from 0 to 128 [ 361.758823][ T8486] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 361.771240][ T8486] ext4 filesystem being mounted at /233/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 362.360926][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 362.650166][ T8492] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1382'. [ 362.661119][ T8492] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 362.669534][ T8492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 362.677078][ T8492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 362.772049][ T126] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 363.051749][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 363.058374][ T126] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.191802][ T126] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 363.255639][ T126] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 363.281754][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.294070][ T126] usb 1-1: Product: syz [ 363.303048][ T126] usb 1-1: Manufacturer: syz [ 363.311764][ T126] usb 1-1: SerialNumber: syz [ 364.123900][ T8533] loop3: detected capacity change from 0 to 256 [ 364.182665][ T8533] exfat: Deprecated parameter 'namecase' [ 364.342213][ T8533] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 364.748367][ T8533] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 364.882698][ T4394] usb 1-1: USB disconnect, device number 24 [ 364.979846][ T8548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1400'. [ 367.254265][ T8558] loop2: detected capacity change from 0 to 512 [ 367.341999][ T8558] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 367.418093][ T8558] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 367.532912][ T8558] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.1402: Invalid block bitmap block 0 in block_group 0 [ 367.554167][ T8558] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 367.587765][ T8558] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.1402: attempt to clear invalid blocks 983261 len 1 [ 367.623081][ T8572] loop1: detected capacity change from 0 to 128 [ 367.654385][ T8558] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.1402: Invalid inode table block 0 in block_group 0 [ 367.688765][ T8572] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 367.706543][ T8572] ext4 filesystem being mounted at /288/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 367.762571][ T8558] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 367.792447][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 367.798369][ T8558] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 367.852928][ T8558] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.1402: Invalid inode table block 0 in block_group 0 [ 367.888282][ T8558] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 367.996193][ T8558] EXT4-fs error (device loop2): ext4_truncate:4318: inode #11: comm syz.2.1402: mark_inode_dirty error [ 368.057592][ T8558] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 368.092547][ T8558] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.1402: Invalid inode table block 0 in block_group 0 [ 368.125331][ T8558] EXT4-fs (loop2): 1 truncate cleaned up [ 368.143946][ T8558] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 369.635306][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 369.946904][ T8602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1415'. [ 370.283909][ T8602] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 370.437578][ T8602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 371.143962][ T8602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 371.164831][ T8609] loop0: detected capacity change from 0 to 1024 [ 371.294380][ T8609] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 371.412574][ T26] audit: type=1800 audit(1770675680.845:75): pid=8609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1419" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 371.425294][ T8609] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3852: comm syz.0.1419: Allocating blocks 337-513 which overlap fs metadata [ 371.466648][ T8603] device syzkaller0 entered promiscuous mode [ 371.515124][ T8611] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 371.537441][ T8609] EXT4-fs (loop0): Remounting filesystem read-only [ 371.556789][ T26] audit: type=1800 audit(1770675680.985:76): pid=8619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1419" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 371.557491][ T8611] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.585721][ T8611] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.662917][ T8608] EXT4-fs (loop0): pa ffff888051d14000: logic 0, phys. 321, len 12 [ 371.671523][ T8608] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 11 [ 371.718376][ T8608] EXT4-fs (loop0): Remounting filesystem read-only [ 371.837748][ T8625] loop2: detected capacity change from 0 to 512 [ 371.855479][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 371.898729][ T8625] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 371.993602][ T8625] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 372.059075][ T8625] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.1425: Invalid block bitmap block 0 in block_group 0 [ 372.082126][ T8625] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 372.101851][ T8625] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.1425: attempt to clear invalid blocks 983261 len 1 [ 372.124106][ T8634] loop0: detected capacity change from 0 to 1024 [ 372.268048][ T8625] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.1425: Invalid inode table block 0 in block_group 0 [ 372.530755][ T8625] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 372.844547][ T8625] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 372.987963][ T8625] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.1425: Invalid inode table block 0 in block_group 0 [ 373.023977][ T8639] fuse: Bad value for 'fd' [ 373.032351][ T8625] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 373.058805][ T4369] hfsplus: b-tree write err: -5, ino 4 [ 373.072248][ T8625] EXT4-fs error (device loop2): ext4_truncate:4318: inode #11: comm syz.2.1425: mark_inode_dirty error [ 373.141690][ T8625] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 373.168524][ T8625] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.1425: Invalid inode table block 0 in block_group 0 [ 373.227293][ T8625] EXT4-fs (loop2): 1 truncate cleaned up [ 373.251746][ T8625] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 373.759435][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 374.534790][ T8662] loop0: detected capacity change from 0 to 512 [ 374.663798][ T8662] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 374.789529][ T8662] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.633235][ T8662] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 375.650872][ T8674] fuse: Bad value for 'fd' [ 375.726732][ T8662] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 64512 [ 375.777982][ T8662] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.1437: Failed to acquire dquot type 0 [ 375.958148][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 376.247087][ T8682] loop2: detected capacity change from 0 to 512 [ 376.299415][ T8682] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 376.384768][ T8682] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 376.410476][ T8682] ext4 filesystem being mounted at /251/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 376.719413][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 379.102275][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.108983][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.401030][ T8709] fuse: Bad value for 'fd' [ 379.868026][ T8701] syz.2.1453 (8701): drop_caches: 2 [ 380.829509][ T8718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1458'. [ 380.861341][ T8718] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1458'. [ 382.245997][ T8732] loop2: detected capacity change from 0 to 128 [ 382.359845][ T8732] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 382.526936][ T8732] ext4 filesystem being mounted at /257/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 383.544861][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 385.597512][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.643021][ T4283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.652665][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.662338][ T4283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.670127][ T4283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 385.679273][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 386.125199][ T8752] loop0: detected capacity change from 0 to 65536 [ 386.263192][ T8752] XFS (loop0): Mounting V5 Filesystem [ 386.386713][ T8752] XFS (loop0): Ending clean mount [ 386.535629][ T4266] XFS (loop0): Unmounting Filesystem [ 387.618820][ T8653] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 387.683516][ T8653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 387.690973][ T8653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 387.751753][ T4271] Bluetooth: hci5: command 0x0409 tx timeout [ 389.851779][ T4271] Bluetooth: hci5: command 0x041b tx timeout [ 391.911676][ T4271] Bluetooth: hci5: command 0x040f tx timeout [ 393.991669][ T4271] Bluetooth: hci5: command 0x0419 tx timeout [ 398.530608][ T8761] chnl_net:caif_netlink_parms(): no params data found [ 401.056568][ T8761] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.174731][ T8761] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.193111][ T8761] device bridge_slave_0 entered promiscuous mode [ 401.367430][ T8761] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.376434][ T8761] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.389170][ T8761] device bridge_slave_1 entered promiscuous mode [ 401.413559][ T8761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.426111][ T8761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.498600][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 401.524368][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 402.340981][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 402.448282][ T8825] loop3: detected capacity change from 0 to 512 [ 402.509415][ T8825] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 402.531313][ T8825] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 402.648115][ T8825] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.1490: Invalid block bitmap block 0 in block_group 0 [ 402.665883][ T8825] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 521.761578][ C0] ------------[ cut here ]------------ [ 521.768355][ C0] WARNING: CPU: 0 PID: 8831 at kernel/rcu/tree_stall.h:970 rcu_check_gp_start_stall+0x2dc/0x460 [ 521.778944][ C0] Modules linked in: [ 521.782832][ C0] CPU: 0 PID: 8831 Comm: syz.4.1491 Not tainted syzkaller #0 [ 521.790181][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 521.800223][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 521.806535][ C0] Code: ff ff ff 48 c7 c7 20 ff c3 96 be 04 00 00 00 e8 3a 56 66 00 48 89 df b8 01 00 00 00 87 05 4c f4 56 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 80 2b b3 8c 74 47 48 c7 c0 24 00 20 8e 48 c1 e8 03 [ 521.826122][ C0] RSP: 0018:ffffc90000007b78 EFLAGS: 00010046 [ 521.832205][ C0] RAX: 0000000000000000 RBX: ffffffff8cb32b80 RCX: ffffffff816d0ac6 [ 521.840160][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cb32b80 [ 521.848112][ C0] RBP: ffffc90000007df0 R08: 0000000000000003 R09: 0000000000000004 [ 521.856063][ C0] R10: dffffc0000000000 R11: fffffbfff2d87fe4 R12: 0000000000002904 [ 521.864019][ C0] R13: dffffc0000000000 R14: 0000000000000a06 R15: dffffc0000000000 [ 521.871970][ C0] FS: 00007faca7b0b6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 521.880877][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 521.887526][ C0] CR2: 000000110c35959d CR3: 000000007cbb2000 CR4: 00000000003506f0 [ 521.895480][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 521.903446][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 521.911422][ C0] Call Trace: [ 521.914698][ C0] [ 521.917528][ C0] rcu_core+0x60b/0x1740 [ 521.921816][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 521.927015][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 521.932206][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 521.937391][ C0] ? sched_clock_cpu+0x6e/0x260 [ 521.942235][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 521.948201][ C0] ? lock_chain_count+0x20/0x20 [ 521.953038][ C0] handle_softirqs+0x2a1/0x930 [ 521.957838][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 521.962668][ C0] ? do_softirq+0x210/0x210 [ 521.967192][ C0] __irq_exit_rcu+0x13b/0x230 [ 521.971848][ C0] ? irq_exit_rcu+0x20/0x20 [ 521.976332][ C0] irq_exit_rcu+0x5/0x20 [ 521.980557][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 521.986242][ C0] [ 521.989162][ C0] [ 521.992078][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 521.998084][ C0] RIP: 0010:syscall_enter_from_user_mode+0x2a/0x80 [ 522.004571][ C0] Code: 41 56 53 48 89 f3 49 89 fe 48 8b 7c 24 10 e8 ed fa ff ff 66 90 66 90 e8 14 42 5c f7 e8 8f 40 5c f7 fb 65 48 8b 05 36 d3 d5 75 <48> 8b 70 08 40 f6 c6 3f 74 0b 4c 89 f7 5b 41 5e e9 91 a1 42 f7 48 [ 522.024243][ C0] RSP: 0018:ffffc90003307f08 EFLAGS: 00000286 [ 522.030377][ C0] RAX: ffff888077803b80 RBX: 000000000000000f RCX: b11b156ee47c1200 [ 522.038328][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0d20 [ 522.046281][ C0] RBP: ffffc90003307f48 R08: ffffffff8e1fcb6f R09: 1ffffffff1c3f96d [ 522.054233][ C0] R10: dffffc0000000000 R11: fffffbfff1c3f96e R12: 0000000000000000 [ 522.062189][ C0] R13: 0000000000000000 R14: ffffc90003307f58 R15: 0000000000000000 [ 522.070150][ C0] ? syscall_enter_from_user_mode+0x21/0x80 [ 522.076116][ C0] do_syscall_64+0x24/0xa0 [ 522.080510][ C0] ? clear_bhb_loop+0x60/0xb0 [ 522.085169][ C0] ? clear_bhb_loop+0x60/0xb0 [ 522.089822][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 522.095695][ C0] RIP: 0033:0x7faca6b3c399 [ 522.100099][ C0] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 522.119689][ C0] RSP: 002b:00007faca7b0aa80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 522.128082][ C0] RAX: ffffffffffffffda RBX: 00007faca6e15fa0 RCX: 00007faca6b3c399 [ 522.136035][ C0] RDX: 00007faca7b0aa80 RSI: 00007faca7b0abb0 RDI: 0000000000000011 [ 522.143989][ C0] RBP: 00007faca6c316e0 R08: 0000000000000000 R09: 0000000000000000 [ 522.151957][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.159907][ C0] R13: 00007faca6e16038 R14: 00007faca6e15fa0 R15: 00007ffe5d0a1ce8 [ 522.167872][ C0] [ 522.170891][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 522.178146][ C0] CPU: 0 PID: 8831 Comm: syz.4.1491 Not tainted syzkaller #0 [ 522.185490][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 522.195522][ C0] Call Trace: [ 522.198779][ C0] [ 522.201603][ C0] dump_stack_lvl+0x188/0x24e [ 522.206261][ C0] ? memcpy+0x3c/0x60 [ 522.210285][ C0] ? show_regs_print_info+0x12/0x12 [ 522.215462][ C0] ? load_image+0x400/0x400 [ 522.219962][ C0] panic+0x2e5/0x730 [ 522.223834][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 522.228320][ C0] __warn+0x2f8/0x4f0 [ 522.232278][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 522.237974][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 522.243675][ C0] report_bug+0x2ba/0x4f0 [ 522.248041][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 522.253742][ C0] handle_bug+0x3a/0x70 [ 522.257878][ C0] exc_invalid_op+0x16/0x40 [ 522.262360][ C0] asm_exc_invalid_op+0x16/0x20 [ 522.267193][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 522.273498][ C0] Code: ff ff ff 48 c7 c7 20 ff c3 96 be 04 00 00 00 e8 3a 56 66 00 48 89 df b8 01 00 00 00 87 05 4c f4 56 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 80 2b b3 8c 74 47 48 c7 c0 24 00 20 8e 48 c1 e8 03 [ 522.293088][ C0] RSP: 0018:ffffc90000007b78 EFLAGS: 00010046 [ 522.299130][ C0] RAX: 0000000000000000 RBX: ffffffff8cb32b80 RCX: ffffffff816d0ac6 [ 522.307080][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cb32b80 [ 522.315029][ C0] RBP: ffffc90000007df0 R08: 0000000000000003 R09: 0000000000000004 [ 522.322984][ C0] R10: dffffc0000000000 R11: fffffbfff2d87fe4 R12: 0000000000002904 [ 522.330931][ C0] R13: dffffc0000000000 R14: 0000000000000a06 R15: dffffc0000000000 [ 522.338886][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 522.344591][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 522.350287][ C0] rcu_core+0x60b/0x1740 [ 522.354506][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 522.359683][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 522.364859][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 522.370035][ C0] ? sched_clock_cpu+0x6e/0x260 [ 522.374877][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 522.380841][ C0] ? lock_chain_count+0x20/0x20 [ 522.385676][ C0] handle_softirqs+0x2a1/0x930 [ 522.390418][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 522.395244][ C0] ? do_softirq+0x210/0x210 [ 522.399725][ C0] __irq_exit_rcu+0x13b/0x230 [ 522.404389][ C0] ? irq_exit_rcu+0x20/0x20 [ 522.408974][ C0] irq_exit_rcu+0x5/0x20 [ 522.413213][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 522.418847][ C0] [ 522.421766][ C0] [ 522.424679][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 522.430650][ C0] RIP: 0010:syscall_enter_from_user_mode+0x2a/0x80 [ 522.437150][ C0] Code: 41 56 53 48 89 f3 49 89 fe 48 8b 7c 24 10 e8 ed fa ff ff 66 90 66 90 e8 14 42 5c f7 e8 8f 40 5c f7 fb 65 48 8b 05 36 d3 d5 75 <48> 8b 70 08 40 f6 c6 3f 74 0b 4c 89 f7 5b 41 5e e9 91 a1 42 f7 48 [ 522.456747][ C0] RSP: 0018:ffffc90003307f08 EFLAGS: 00000286 [ 522.462795][ C0] RAX: ffff888077803b80 RBX: 000000000000000f RCX: b11b156ee47c1200 [ 522.470835][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0d20 [ 522.478787][ C0] RBP: ffffc90003307f48 R08: ffffffff8e1fcb6f R09: 1ffffffff1c3f96d [ 522.486741][ C0] R10: dffffc0000000000 R11: fffffbfff1c3f96e R12: 0000000000000000 [ 522.494693][ C0] R13: 0000000000000000 R14: ffffc90003307f58 R15: 0000000000000000 [ 522.502656][ C0] ? syscall_enter_from_user_mode+0x21/0x80 [ 522.508528][ C0] do_syscall_64+0x24/0xa0 [ 522.512928][ C0] ? clear_bhb_loop+0x60/0xb0 [ 522.517585][ C0] ? clear_bhb_loop+0x60/0xb0 [ 522.522252][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 522.528124][ C0] RIP: 0033:0x7faca6b3c399 [ 522.532544][ C0] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 522.552151][ C0] RSP: 002b:00007faca7b0aa80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 522.560547][ C0] RAX: ffffffffffffffda RBX: 00007faca6e15fa0 RCX: 00007faca6b3c399 [ 522.568497][ C0] RDX: 00007faca7b0aa80 RSI: 00007faca7b0abb0 RDI: 0000000000000011 [ 522.576448][ C0] RBP: 00007faca6c316e0 R08: 0000000000000000 R09: 0000000000000000 [ 522.584401][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.592373][ C0] R13: 00007faca6e16038 R14: 00007faca6e15fa0 R15: 00007ffe5d0a1ce8 [ 522.600348][ C0] [ 522.603691][ C0] Kernel Offset: disabled [ 522.608671][ C0] Rebooting in 86400 seconds..