last executing test programs: 4m22.12655017s ago: executing program 4 (id=1518): syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b70800000000000003010902"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') pread64(r0, &(0x7f0000000200)=""/87, 0x57, 0x8) 4m20.256149341s ago: executing program 4 (id=1546): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000001c0)='=', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) 4m20.157849165s ago: executing program 4 (id=1547): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 4m19.223313965s ago: executing program 4 (id=1561): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000007300)={[{@quota}, {@nodiscard}, {@gid}, {@nodiscard}, {@discard_size={'discard', 0x3d, 0x4}}, {@discard_size={'discard', 0x3d, 0x6}}, {@quota}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@discard}]}, 0x21, 0x6182, &(0x7f0000001140)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x1c1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x80086601, 0x0) 4m18.091235432s ago: executing program 4 (id=1579): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4m16.542828144s ago: executing program 4 (id=1603): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000001600)) 4m16.089887068s ago: executing program 32 (id=1603): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000001600)) 3m17.410058428s ago: executing program 2 (id=2266): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000480)={0x1, 0x0, [{0x40000102, 0x0, 0xbf}]}) 3m17.204992815s ago: executing program 2 (id=2269): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r1, &(0x7f0000000280)=""/172, 0xac, 0x38) 3m17.079636749s ago: executing program 2 (id=2271): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x0, 0x0, 0x100000}) 3m17.000192262s ago: executing program 2 (id=2272): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 3m16.260204726s ago: executing program 2 (id=2278): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200000, &(0x7f0000000080), 0x1, 0x567, &(0x7f0000001f80)="$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") creat(&(0x7f0000000580)='./file0\x00', 0x20) r0 = open(&(0x7f0000000040)='.\x00', 0x163100, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 3m15.724134384s ago: executing program 2 (id=2287): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) truncate(&(0x7f0000000140)='./file2\x00', 0x5c00) 3m15.455502482s ago: executing program 33 (id=2287): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) truncate(&(0x7f0000000140)='./file2\x00', 0x5c00) 3.840865192s ago: executing program 6 (id=4816): syz_mount_image$squashfs(&(0x7f00000003c0), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x5, 0x1b8, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x4, 0x0) getdents64(r0, 0x0, 0x0) 3.375065538s ago: executing program 6 (id=4822): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 3.134168626s ago: executing program 6 (id=4826): r0 = epoll_create(0x8) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x202, 0x0) pselect6(0x40, &(0x7f0000004f40)={0x9, 0x0, 0x9, 0x6, 0x1000000000, 0x5, 0x7fb, 0xac}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x10000005}) 3.055474658s ago: executing program 0 (id=4827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800084000000000140005"], 0x5c}}, 0x0) 2.894715664s ago: executing program 6 (id=4831): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009780)='./file0\x00', 0x41, &(0x7f0000000000)={[{@norecovery}]}, 0x1, 0x97f7, &(0x7f0000013c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000200)={0x0, 0x3}) 2.729565919s ago: executing program 0 (id=4832): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/216, 0xd8}], 0x1}, 0x6daf}], 0x1, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 2.498934877s ago: executing program 0 (id=4837): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r0, &(0x7f0000000140)="02", 0x1, 0x8000c61) truncate(&(0x7f0000000900)='./file1\x00', 0x300008c) 2.08423897s ago: executing program 5 (id=4842): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) fcntl$notify(r1, 0x402, 0x7) write$binfmt_format(r0, &(0x7f0000000140)='1\x00', 0x49) 2.077092601s ago: executing program 5 (id=4843): r0 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) 1.992271164s ago: executing program 5 (id=4845): r0 = timerfd_create(0x8, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f00000002c0)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x3, 0x0, 0x1, 0x0, 0x91, 0x1c5, 0x9, 0x0, 0x114b, 0x0, 0x0, 0x7fffffff, 0x4}) timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) 1.957293645s ago: executing program 5 (id=4846): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x5c, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x3a, 0x0, @gue={{0x1, 0x1, 0x1, 0xff, 0x0, @void}, "eb51590e50a855d9f46ed86f22620a1f806ae23d99518042f2b325ca854082448fdb556d358d513cf29aed7876a2"}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000013c0)=""/49, 0x31}, {0x0, 0x31}], 0x2}, 0x5}], 0x1, 0x40000000, 0x0) 1.914289467s ago: executing program 0 (id=4848): setreuid(0xee01, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) ioprio_set$uid(0x3, 0xee01, 0x2007) 1.433717992s ago: executing program 6 (id=4849): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8000}, {0x0, 0x7ffffffffffffffd, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x2b}, 0x2, @in6=@private2, 0x3503, 0x4, 0x3, 0x0, 0x0, 0x0, 0x113b}]}]}, 0xfc}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3e}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8700630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 1.432852842s ago: executing program 1 (id=4859): socket$inet6(0xa, 0x80002, 0x0) r0 = socket(0x2b, 0x80801, 0x1) listen(r0, 0x7e5a) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.326845976s ago: executing program 1 (id=4851): pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x3c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.239299769s ago: executing program 3 (id=4852): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0xffc0, 0x4, 0x0, 0x6}, 'syz1\x00', 0xe}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$KVM_CREATE_VM(r0, 0x8000552c, 0x0) 1.2193612s ago: executing program 0 (id=4853): r0 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(r0, 0x0, 0x20000000, 0x0) wait4(0x0, 0x0, 0x8, 0x0) 1.153388742s ago: executing program 1 (id=4854): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xcd, 0x0, &(0x7f0000000300)="b994bc444b9893b04bf30981fd1a626f7389e32a4a7941c2515284700e44a97c20a00f058be0da09f79b19459fe87a2d1c33b64e62a91efc244b5f1e5f2751a8a71426c42e2819529c68f0cb08d7abcb7517687c402e46f41741ed42cf78d4bb059cdd4cb3b8a6688aec470f364827b2fe1b2f117ffed12a16621878284769347464b039230762fe3606c1f2ad62d657d2280e735362c779b4e7ecf49f3f0f2ba3394636a7f2eb647d3fac6fe0e1360ed0c4e9bba1c89cd8bc9f415189d695f401f4993481e036bf159b1ff68c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x1b) 1.034072366s ago: executing program 5 (id=4855): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000740)='./file0\x00', 0x800, &(0x7f00000006c0)=ANY=[], 0x5, 0x7fd, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 972.314178ms ago: executing program 1 (id=4856): open(&(0x7f0000000200)='./file1\x00', 0x4a07e, 0xdc) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0xa000014a) rename(&(0x7f0000006200)='./file1\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 878.737941ms ago: executing program 3 (id=4857): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="934300005200337287277b9b108b4ab502"], 0xfe33) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x80) 841.748762ms ago: executing program 1 (id=4858): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) fsopen(&(0x7f0000000c00)='pvfs2\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x6, 0x80, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r0}, 0x38) 684.357248ms ago: executing program 3 (id=4860): r0 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mbind(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x6, 0x1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 564.249861ms ago: executing program 5 (id=4861): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x6}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) 481.772114ms ago: executing program 1 (id=4862): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r2, 0x0, 0x38f9, 0x0) write(r0, &(0x7f0000000040), 0xffffff4a) 451.815035ms ago: executing program 3 (id=4863): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)={0x24, 0x14, 0x105, 0x70bc26, 0x25dfdb7b, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "da880c4f7e37eb8685"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840) 360.203788ms ago: executing program 0 (id=4864): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/psched\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendfile(r1, r0, 0x0, 0x8004) 202.348413ms ago: executing program 3 (id=4865): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4014000}, 0x90) 70.691488ms ago: executing program 3 (id=4866): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, [0x1, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000) 0s ago: executing program 6 (id=4867): syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f0000000300)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) kernel console output (not intermixed with test programs): r=5 failed, -22. [ 337.991991][ T5030] usb 4-1: Using ep0 maxpacket: 32 [ 338.006262][ T9498] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0020/input/input37 [ 338.113871][ T5030] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 338.133441][ T5030] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.176940][ T5030] usb 4-1: config 0 descriptor?? [ 338.226141][ T9498] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 338.338850][ T5022] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 338.444739][ T5030] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 338.479483][ T5030] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 338.496412][ T7] usb 6-1: USB disconnect, device number 14 [ 338.517260][ T5030] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 338.530975][ T5030] usb 4-1: media controller created [ 338.569397][ T5030] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 338.671738][ T5030] az6027: usb out operation failed. (-71) [ 338.691700][ T5030] az6027: usb out operation failed. (-71) [ 338.697725][ T5030] stb0899_attach: Driver disabled by Kconfig [ 338.704667][ T5030] az6027: no front-end attached [ 338.704667][ T5030] [ 338.712338][ T5022] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.724396][ T5022] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.735011][ T5022] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 338.745705][ T5030] az6027: usb out operation failed. (-71) [ 338.752514][ T5030] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 338.759827][ T5022] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.779739][ T5030] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input38 [ 338.800838][ T5022] usb 2-1: config 0 descriptor?? [ 338.808312][ T5030] dvb-usb: schedule remote query interval to 400 msecs. [ 338.816509][ T5030] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 338.852486][ T5030] usb 4-1: USB disconnect, device number 26 [ 338.919169][ T5030] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 339.092321][T12912] [U]  [ 339.095172][T12912] [U] K{‘ [ 339.098407][T12912] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 339.113250][T12912] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 339.130624][T12912] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 339.142272][ T5022] usbhid 2-1:0.0: can't add hid device: -71 [ 339.149012][ T5022] usbhid: probe of 2-1:0.0 failed with error -71 [ 339.159732][T12912] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 339.195570][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.219575][ T5022] usb 2-1: USB disconnect, device number 28 [ 339.316609][T12912] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 339.382388][T12912] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 339.395404][T12912] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 339.408999][T12912] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 339.518191][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.531372][T12912] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 339.563315][T12912] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 339.626416][T12912] [U] 22½“Æ©ÐÛ©X?0;3U± [ 339.640566][T12912] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 339.665649][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.680007][ T5022] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 339.688647][T12912] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 339.705736][T12912] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 339.717371][T12912] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 339.729477][T12912] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 339.759910][T12912] [U] ¹ EC [ 339.777358][T12912] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 339.921324][ T5022] usb 2-1: Using ep0 maxpacket: 16 [ 339.940863][T12911] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 339.999940][T12928] loop3: detected capacity change from 0 to 2048 [ 340.052085][ T5022] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.079544][ T5022] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.105660][ T5022] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 340.119189][ T5022] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.136942][ T5022] usb 2-1: config 0 descriptor?? [ 340.184457][T12928] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 340.197503][ T5022] pegasus_notetaker 2-1:0.0: packet size is too small (0) [ 340.219222][ T5022] pegasus_notetaker: probe of 2-1:0.0 failed with error -22 [ 340.471416][ T5022] usbhid 2-1:0.0: can't add hid device: -71 [ 340.478337][ T5022] usbhid: probe of 2-1:0.0 failed with error -71 [ 340.509088][T12943] hugetlbfs: Bad value 'g' for mount option 'size' [ 340.509088][T12943] [ 340.526707][ T5022] usb 2-1: USB disconnect, device number 29 [ 340.618114][T12945] loop6: detected capacity change from 0 to 128 [ 340.709082][T12945] EXT4-fs (loop6): Test dummy encryption mode enabled [ 340.749633][T12955] bridge0: port 1(bridge_slave_0) entered listening state [ 340.757433][T12945] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 340.778385][T12945] System zones: 1-3, 19-19, 35-36 [ 340.785616][T12945] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,nolazytime,dax=inode,jqfmt=vfsv0,dioread_lock,usrjquota=.,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 340.806753][T12945] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.829412][T12955] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.980395][T12963] loop5: detected capacity change from 0 to 256 [ 341.007588][T12945] EXT4-fs (loop6): re-mounted. Opts: . Quota mode: writeback. [ 341.082916][T12963] FAT-fs (loop5): Directory bread(block 64) failed [ 341.130275][T12963] FAT-fs (loop5): Directory bread(block 65) failed [ 341.152067][T12963] FAT-fs (loop5): Directory bread(block 66) failed [ 341.158795][T12963] FAT-fs (loop5): Directory bread(block 67) failed [ 341.196772][T12963] FAT-fs (loop5): Directory bread(block 68) failed [ 341.214786][T12963] FAT-fs (loop5): Directory bread(block 69) failed [ 341.224184][T12963] FAT-fs (loop5): Directory bread(block 70) failed [ 341.230867][T12963] FAT-fs (loop5): Directory bread(block 71) failed [ 341.238110][T12963] FAT-fs (loop5): Directory bread(block 72) failed [ 341.245065][T12963] FAT-fs (loop5): Directory bread(block 73) failed [ 341.261024][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.320421][T12981] [U]  [ 341.354686][T12981] [U] K{‘ [ 341.380603][T12981] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 341.444082][T12981] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 341.539556][T12981] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 341.550773][ T4897] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 341.560436][T12981] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 341.631342][T12981] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 341.665701][T12981] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 341.680792][T12981] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 341.694349][T12981] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 341.823056][T12981] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 341.840094][T12981] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 341.897637][T12981] [U] 22½“Æ©ÐÛ©X?0;3U± [ 341.903632][T12981] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 341.937128][T12981] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 341.949898][T12981] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 341.978781][T12998] loop5: detected capacity change from 0 to 256 [ 341.990373][T12981] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 341.997808][T12981] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 342.018452][T12981] [U] ¹ EC [ 342.022308][ T4897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 342.036730][T12981] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 342.049892][ T4897] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 342.063863][T12998] exfat: Deprecated parameter 'utf8' [ 342.078756][ T4897] usb 4-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 342.096053][ T4897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.108720][ T4897] usb 4-1: config 0 descriptor?? [ 342.125024][T12998] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 342.141388][T12978] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 342.164562][T12980] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 342.384736][T12978] udc-core: couldn't find an available UDC or it's busy [ 342.392058][T12978] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 342.638790][ T4897] wacom 0003:056A:00EC.0021: unknown main item tag 0xd [ 342.656080][ T4897] wacom 0003:056A:00EC.0021: unknown main item tag 0x4 [ 342.680648][ T4897] wacom 0003:056A:00EC.0021: hidraw0: USB HID v0.09 Device [HID 056a:00ec] on usb-dummy_hcd.3-1/input0 [ 342.854514][ T4897] usb 4-1: USB disconnect, device number 27 [ 342.930555][T13018] fido_id[13018]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 342.955488][T13026] loop5: detected capacity change from 0 to 256 [ 343.078791][T13026] FAT-fs (loop5): Directory bread(block 64) failed [ 343.095812][T13026] FAT-fs (loop5): Directory bread(block 65) failed [ 343.104917][T13026] FAT-fs (loop5): Directory bread(block 66) failed [ 343.116509][T13026] FAT-fs (loop5): Directory bread(block 67) failed [ 343.124814][T13026] FAT-fs (loop5): Directory bread(block 68) failed [ 343.136255][T13026] FAT-fs (loop5): Directory bread(block 69) failed [ 343.144890][T13026] FAT-fs (loop5): Directory bread(block 70) failed [ 343.161154][T13026] FAT-fs (loop5): Directory bread(block 71) failed [ 343.168142][T13026] FAT-fs (loop5): Directory bread(block 72) failed [ 343.183166][T13026] FAT-fs (loop5): Directory bread(block 73) failed [ 343.364201][T13032] loop5: detected capacity change from 0 to 128 [ 343.378495][T13032] EXT4-fs (loop5): Test dummy encryption mode enabled [ 343.435642][T13032] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 343.455989][T13032] System zones: 1-3, 19-19, 35-36 [ 343.503278][T13032] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,nolazytime,dax=inode,jqfmt=vfsv0,dioread_lock,usrjquota=.,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 343.594092][T13032] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.693905][T13032] EXT4-fs (loop5): re-mounted. Opts: . Quota mode: writeback. [ 343.781774][T13050] hugetlbfs: Bad value 'g' for mount option 'size' [ 343.781774][T13050] [ 344.106331][T13068] loop3: detected capacity change from 0 to 256 [ 344.141799][T13068] exfat: Deprecated parameter 'utf8' [ 344.169102][T13068] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 344.460014][T13082] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3280'. [ 344.673399][T13094] loop1: detected capacity change from 0 to 128 [ 344.711922][T13094] EXT4-fs (loop1): Test dummy encryption mode enabled [ 344.738750][T13094] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 344.748088][T13094] System zones: 1-3, 19-19, 35-36 [ 344.761872][T13094] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,nolazytime,dax=inode,jqfmt=vfsv0,dioread_lock,usrjquota=.,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 344.789751][T13094] ext4 filesystem being mounted at /670/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.817225][T13094] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: writeback. [ 344.913615][ T9498] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 345.343581][T13119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3298'. [ 345.353617][ T9498] usb 6-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 345.364428][ T9498] usb 6-1: config 0 interface 0 has no altsetting 0 [ 345.372688][T13119] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3298'. [ 345.382156][T13119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3298'. [ 345.561107][ T9498] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 345.570220][ T9498] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 345.599806][ T9498] usb 6-1: Product: syz [ 345.604500][ T9498] usb 6-1: Manufacturer: syz [ 345.609139][ T9498] usb 6-1: SerialNumber: syz [ 345.645077][ T9498] usb 6-1: config 0 descriptor?? [ 345.658198][T13129] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3303'. [ 345.668731][T13131] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3302'. [ 345.671674][T13091] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 345.680382][T13129] netem: unknown loss type 13 [ 345.691359][T13131] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3302'. [ 345.702304][T13129] netem: change failed [ 345.714445][ T9498] usb 6-1: selecting invalid altsetting 0 [ 345.955129][T13091] usb 6-1: selecting invalid altsetting 0 [ 345.981363][T13091] usb 6-1: 0:0: usb_set_interface failed (-22) [ 345.987865][T13091] usb 6-1: selecting invalid altsetting 0 [ 346.020676][T13091] usb 6-1: 0:0: usb_set_interface failed (-22) [ 346.029423][T13091] usb 6-1: selecting invalid altsetting 0 [ 346.047909][T13091] usb 6-1: 0:0: usb_set_interface failed (-22) [ 346.054540][T13091] usb 6-1: selecting invalid altsetting 0 [ 346.060434][T13091] usb 6-1: 0:0: usb_set_interface failed (-22) [ 346.082960][T13091] usb 6-1: selecting invalid altsetting 0 [ 346.088932][T13091] usb 6-1: 0:0: usb_set_interface failed (-22) [ 346.104159][ T9498] usb 6-1: USB disconnect, device number 15 [ 346.827499][T13166] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3319'. [ 347.415142][T13189] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3332'. [ 347.471187][T13190] tap0: tun_chr_ioctl cmd 21731 [ 347.630740][ T9496] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 348.046400][ T9496] usb 2-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 348.069904][ T9496] usb 2-1: config 0 interface 0 has no altsetting 0 [ 348.243660][T13222] loop6: detected capacity change from 0 to 8192 [ 348.273158][ T9496] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 348.282966][ T9496] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 348.300037][ T9496] usb 2-1: Product: syz [ 348.310587][ T9496] usb 2-1: Manufacturer: syz [ 348.315250][ T9496] usb 2-1: SerialNumber: syz [ 348.327200][ T9496] usb 2-1: config 0 descriptor?? [ 348.338615][T13222] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 348.350726][T13186] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 348.361005][T13222] REISERFS (device loop6): using ordered data mode [ 348.375089][T13222] reiserfs: using flush barriers [ 348.383357][T13222] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 348.384612][ T9496] usb 2-1: selecting invalid altsetting 0 [ 348.410817][T13222] REISERFS (device loop6): checking transaction log (loop6) [ 348.411029][ T7] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 348.432421][T13222] REISERFS (device loop6): Using rupasov hash to sort names [ 348.439797][T13222] REISERFS (device loop6): using 3.5.x disk format [ 348.448068][T13222] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 348.478881][T13222] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 348.556756][T13222] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 348.586030][T13222] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 348.656163][T13186] usb 2-1: selecting invalid altsetting 0 [ 348.664176][T13186] usb 2-1: 0:0: usb_set_interface failed (-22) [ 348.677048][T13186] usb 2-1: selecting invalid altsetting 0 [ 348.685700][T13186] usb 2-1: 0:0: usb_set_interface failed (-22) [ 348.756068][T13186] usb 2-1: selecting invalid altsetting 0 [ 348.783631][T13186] usb 2-1: 0:0: usb_set_interface failed (-22) [ 348.789879][T13186] usb 2-1: selecting invalid altsetting 0 [ 348.802894][T13186] usb 2-1: 0:0: usb_set_interface failed (-22) [ 348.809408][T13186] usb 2-1: selecting invalid altsetting 0 [ 348.857688][T13186] usb 2-1: 0:0: usb_set_interface failed (-22) [ 348.870837][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 348.891359][ T5030] usb 2-1: USB disconnect, device number 30 [ 349.040630][ T7] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 349.072930][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.083628][ T7] usb 6-1: Product: syz [ 349.087974][ T7] usb 6-1: Manufacturer: syz [ 349.093112][ T7] usb 6-1: SerialNumber: syz [ 349.108749][ T7] usb 6-1: config 0 descriptor?? [ 349.173793][T13253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3359'. [ 349.288368][T13256] netlink: 'syz.3.3361': attribute type 6 has an invalid length. [ 349.369027][ T5030] usb 6-1: USB disconnect, device number 16 [ 349.488722][T13265] __nla_validate_parse: 2 callbacks suppressed [ 349.488746][T13265] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3366'. [ 349.529062][T13265] device bridge_slave_1 left promiscuous mode [ 349.546491][T13265] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.607505][T13267] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3368'. [ 349.621273][T13267] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3368'. [ 350.172586][T13301] delete_channel: no stack [ 350.689416][T13317] loop1: detected capacity change from 0 to 4096 [ 350.797887][T13317] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 350.850835][T13317] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 350.886273][T13317] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 350.933610][T13317] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 350.957207][T13317] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 350.993057][T13317] ntfs: volume version 3.1. [ 351.008592][T13317] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 351.042667][T13317] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 351.094413][T13317] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 351.138675][T13317] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 351.176866][T13317] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 351.454118][T13338] loop1: detected capacity change from 0 to 128 [ 351.497759][T13338] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 351.500696][ T4897] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 351.558125][T13338] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 351.585356][T13331] loop6: detected capacity change from 0 to 40427 [ 351.636879][T13343] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3399'. [ 351.676647][T13331] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 351.694455][T13331] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 351.706329][T13331] F2FS-fs (loop6): invalid crc value [ 351.747953][T13331] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 351.841536][T13331] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 351.855530][T13331] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 351.957645][T13331] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3393'. [ 351.966121][ T4897] usb 6-1: unable to get BOS descriptor or descriptor too short [ 352.060073][ T4897] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 352.079027][ T4897] usb 6-1: config 63 has an invalid descriptor of length 184, skipping remainder of the config [ 352.127364][ T4897] usb 6-1: config 63 has no interface number 0 [ 352.142315][ T4897] usb 6-1: config 63 interface 66 has no altsetting 0 [ 352.360628][ T4897] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 352.378677][ T4897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.397267][ T4897] usb 6-1: Product: syz [ 352.407404][ T4897] usb 6-1: Manufacturer: syz [ 352.427661][ T4897] usb 6-1: SerialNumber: syz [ 352.603962][T13372] loop6: detected capacity change from 0 to 2048 [ 352.707937][T13372] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,jqfmt=vfsv0,quota,inode_readahead_blks=0x0000000000000400,. Quota mode: writeback. [ 352.730717][T13372] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.756003][T13372] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.3408: bg 0: block 345: padding at end of block bitmap is not set [ 352.774762][T13372] EXT4-fs (loop6): Remounting filesystem read-only [ 352.809798][ T9496] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 352.910452][ T4897] uvcvideo 6-1:63.66: Found Unit with invalid ID 0 [ 352.917071][ T4897] usb 6-1: Found UVC 0.07 device syz (174f:8acf) [ 352.924770][ T4897] usb 6-1: No valid video chain found. [ 352.932492][ T4897] usb 6-1: USB disconnect, device number 17 [ 353.109964][ T9496] usb 2-1: Using ep0 maxpacket: 8 [ 353.269951][ T9496] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 353.298311][ T9496] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 353.328033][ T9496] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 52064, setting to 1024 [ 353.350908][ T9496] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 353.376952][ T9496] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.418053][ T9496] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 353.429760][ T9496] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.465017][T13397] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3422'. [ 353.719851][ T9496] usb 2-1: GET_CAPABILITIES returned 0 [ 353.725430][ T9496] usbtmc 2-1:16.0: can't read capabilities [ 353.937498][ T9496] usb 2-1: USB disconnect, device number 31 [ 354.332583][T13419] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3432'. [ 354.344292][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3432'. [ 354.354417][T13419] netlink: 'syz.6.3432': attribute type 18 has an invalid length. [ 354.362840][T13419] netlink: 'syz.6.3432': attribute type 15 has an invalid length. [ 354.608602][T13423] kvm: apic: phys broadcast and lowest prio [ 354.669692][T13413] loop5: detected capacity change from 0 to 32768 [ 354.826457][T13433] loop6: detected capacity change from 0 to 4096 [ 354.835045][T13413] XFS (loop5): Mounting V5 Filesystem [ 354.953527][ T5030] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 354.963135][T13441] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 354.976891][T13413] XFS (loop5): Ending clean mount [ 354.995227][T13413] XFS (loop5): Quotacheck needed: Please wait. [ 355.102936][T13444] tap0: tun_chr_ioctl cmd 1074025677 [ 355.108585][T13444] tap0: linktype set to 6 [ 355.135365][T13413] XFS (loop5): Quotacheck: Done. [ 355.340223][ T5030] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 7 [ 355.363233][ T8328] XFS (loop5): Unmounting Filesystem [ 355.385364][ T5030] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2015, setting to 1024 [ 355.492972][T13458] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3447'. [ 355.643081][ T5030] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice= 0.40 [ 355.659124][ T5030] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.668683][ T5030] usb 2-1: Product: syz [ 355.678228][ T5030] usb 2-1: Manufacturer: syz [ 355.684454][ T5030] usb 2-1: SerialNumber: syz [ 355.786826][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3452'. [ 355.812162][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3452'. [ 356.050201][ T5030] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 356.098582][ T5030] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 356.171508][T13482] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 356.191538][ T5030] usb 2-1: USB disconnect, device number 32 [ 356.202485][T13482] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 356.459011][T13488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.480806][ T4290] udevd[4290]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 356.494648][ T4286] udevd[4286]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.530571][ T5419] udevd[5419]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.929345][T13495] netlink: 'syz.1.3461': attribute type 10 has an invalid length. [ 357.048635][T13495] device macvlan0 entered promiscuous mode [ 357.130473][T13495] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 357.205165][T13496] netlink: 'syz.1.3461': attribute type 4 has an invalid length. [ 357.228217][T13496] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3461'. [ 357.641067][T13522] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3476'. [ 357.800365][T13531] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3480'. [ 358.063149][T13544] netlink: 'syz.0.3487': attribute type 5 has an invalid length. [ 358.893519][T13574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3501'. [ 358.961441][T13574] netlink: 'syz.0.3501': attribute type 15 has an invalid length. [ 358.991423][T13574] netlink: 'syz.0.3501': attribute type 25 has an invalid length. [ 359.041422][T13574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3501'. [ 359.056628][T13582] loop6: detected capacity change from 0 to 8 [ 359.191435][T13582] SQUASHFS error: Failed to read block 0x2d7: -5 [ 359.198162][T13582] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 359.379154][ T5022] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 359.448331][T13599] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3512'. [ 359.535224][T13602] tap1: tun_chr_ioctl cmd 1074025677 [ 359.544978][T13602] tap1: linktype set to 6 [ 359.618942][ T5022] usb 4-1: Using ep0 maxpacket: 16 [ 359.735518][T13600] loop6: detected capacity change from 0 to 32768 [ 359.739909][ T5022] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.753336][ T5022] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.764856][ T5022] usb 4-1: config 0 interface 0 has no altsetting 0 [ 359.771641][ T5022] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 359.781393][ T5022] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.812773][ T5022] usb 4-1: config 0 descriptor?? [ 359.846038][T13600] XFS (loop6): Mounting V5 Filesystem [ 359.950928][T13600] XFS (loop6): Ending clean mount [ 359.960071][T13600] XFS (loop6): Quotacheck needed: Please wait. [ 360.008214][T13600] XFS (loop6): Quotacheck: Done. [ 360.164580][T10414] XFS (loop6): Unmounting Filesystem [ 360.292987][T13618] sp0: Synchronizing with TNC [ 360.308145][ T5022] hid (null): unknown global tag 0xe [ 360.359253][T13617] [U] è [ 360.540743][ T4897] usb 4-1: USB disconnect, device number 28 [ 360.960306][T13640] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3530'. [ 360.975806][T13637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.140141][T13648] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 361.160396][T13648] pim6reg0: linktype set to 774 [ 361.389850][T13660] program syz.3.3536 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 361.598195][T13668] netlink: 'syz.3.3538': attribute type 11 has an invalid length. [ 361.624623][T13668] netlink: 'syz.3.3538': attribute type 11 has an invalid length. [ 361.646142][T13644] loop1: detected capacity change from 0 to 32768 [ 361.659276][T13668] netlink: 2704 bytes leftover after parsing attributes in process `syz.3.3538'. [ 361.777630][T13684] loop3: detected capacity change from 0 to 256 [ 361.822934][T13684] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 361.844490][T13683] netlink: 'syz.5.3543': attribute type 10 has an invalid length. [ 361.880816][T13684] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 361.981334][T13644] XFS (loop1): Mounting V5 Filesystem [ 362.014484][T13684] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 362.069026][T13644] XFS (loop1): Ending clean mount [ 362.105458][T13644] XFS (loop1): Quotacheck needed: Please wait. [ 362.342218][T13644] XFS (loop1): Quotacheck: Done. [ 362.527300][ T4187] XFS (loop1): Unmounting Filesystem [ 362.593700][T13710] loop5: detected capacity change from 0 to 1024 [ 362.711048][T13710] EXT4-fs (loop5): Ignoring removed bh option [ 362.809337][T13710] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000005,dioread_lock,debug_want_extra_isize=0x0000000000000008,usrquota,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,errors=continue,bh,nogrpid,. Quota mode: writeback. [ 363.014814][T13708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.052851][T13701] loop6: detected capacity change from 0 to 32768 [ 363.086339][T13713] loop3: detected capacity change from 0 to 32768 [ 363.101470][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 363.101484][ T26] audit: type=1800 audit(1780493019.944:51): pid=13710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3558" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 363.163880][T13713] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.3557 (13713) [ 363.281641][T13713] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 363.341020][T13713] BTRFS info (device loop3): setting nodatasum [ 363.365712][T13719] ALSA: mixer_oss: invalid OSS volume '' [ 363.418789][T13713] BTRFS info (device loop3): force zlib compression, level 3 [ 363.456781][T13713] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 363.495277][T13713] BTRFS info (device loop3): use lzo compression, level 0 [ 363.532350][T13713] BTRFS info (device loop3): turning on flush-on-commit [ 363.557021][T13713] BTRFS info (device loop3): enabling auto defrag [ 363.581724][T13713] BTRFS info (device loop3): max_inline at 4096 [ 363.608851][T13713] BTRFS info (device loop3): using free space tree [ 363.622095][T13713] BTRFS info (device loop3): has skinny extents [ 363.966547][T13713] BTRFS info (device loop3): enabling ssd optimizations [ 364.567148][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.675053][T13771] netlink: 'syz.1.3575': attribute type 5 has an invalid length. [ 364.707437][T13771] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.716488][T13771] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.725527][T13771] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.734362][T13771] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.749851][T13772] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3574'. [ 365.083304][T13771] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.092555][T13771] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.101552][T13771] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.110529][T13771] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.569520][T13796] loop3: detected capacity change from 0 to 1764 [ 365.879345][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3590'. [ 366.114818][T13812] netlink: 'syz.3.3594': attribute type 5 has an invalid length. [ 366.176142][T13812] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.185706][T13812] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.194756][T13812] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.203536][T13812] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.253659][T13812] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.262948][T13812] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.271997][T13812] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.280955][T13812] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.967444][T13820] loop1: detected capacity change from 0 to 32768 [ 367.975105][T13863] loop1: detected capacity change from 0 to 16 [ 368.041072][T13863] erofs: (device loop1): mounted with root inode @ nid 36. [ 368.278059][T13870] input: syz1 as /devices/virtual/input/input44 [ 368.337609][T13872] loop1: detected capacity change from 0 to 256 [ 368.707285][T13887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3637'. [ 369.093959][T13856] loop5: detected capacity change from 0 to 32768 [ 369.144420][T13856] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.3614 (13856) [ 369.281537][T13856] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 369.310870][T13856] BTRFS info (device loop5): setting nodatasum [ 369.327746][ T9498] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 369.346124][T13856] BTRFS info (device loop5): force zlib compression, level 3 [ 369.367992][T13856] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 369.414542][T13856] BTRFS info (device loop5): use lzo compression, level 0 [ 369.446724][T13856] BTRFS info (device loop5): turning on flush-on-commit [ 369.495156][T13856] BTRFS info (device loop5): enabling auto defrag [ 369.533818][T13856] BTRFS info (device loop5): max_inline at 4096 [ 369.560496][T13856] BTRFS info (device loop5): using free space tree [ 369.627710][T13856] BTRFS info (device loop5): has skinny extents [ 369.718070][ T9498] usb 2-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 369.787032][ T9498] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 369.796742][ T9498] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 369.957974][ T9498] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 369.979895][ T9498] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 370.002642][ T9498] usb 2-1: Product: syz [ 370.012777][ T9498] usb 2-1: SerialNumber: syz [ 370.030748][T13856] BTRFS info (device loop5): enabling ssd optimizations [ 370.089198][ T9498] cdc_ncm 2-1:1.0: skipping garbage [ 370.096429][ T9498] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 370.125779][ T9498] cdc_ncm 2-1:1.0: bind() failure [ 370.967682][ T4899] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 370.994806][T13945] Bluetooth: hci1: command 0x0406 tx timeout [ 371.148421][T13949] usb 2-1: USB disconnect, device number 33 [ 371.377775][ T4899] usb 4-1: config 2 has an invalid interface number: 79 but max is 0 [ 371.417546][ T4899] usb 4-1: config 2 has no interface number 0 [ 371.434042][ T4899] usb 4-1: config 2 interface 79 has no altsetting 0 [ 371.622157][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.667718][ T4899] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 371.676864][ T4899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.685408][ T4899] usb 4-1: Product: syz [ 371.690263][ T4899] usb 4-1: Manufacturer: syz [ 371.695020][ T4899] usb 4-1: SerialNumber: syz [ 372.028068][ T4899] esd_usb2 4-1:2.79: sending version message failed [ 372.034780][ T4899] esd_usb2: probe of 4-1:2.79 failed with error -22 [ 372.045092][ T4899] usb 4-1: USB disconnect, device number 29 [ 372.943827][T13973] program syz.1.3663 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 373.204068][T13983] loop5: detected capacity change from 0 to 512 [ 373.255934][T13983] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 373.356631][T13983] EXT4-fs (loop5): 1 truncate cleaned up [ 373.370936][T13983] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,noinit_itable,sb=0x000000000000ffff,debug_want_extra_isize=0x0000000000000080,block_validity,noload,,errors=continue. Quota mode: none. [ 373.651820][T13992] loop3: detected capacity change from 0 to 4096 [ 373.814706][T13992] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 373.930370][T13992] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 374.050777][ T26] audit: type=1800 audit(1780493030.885:52): pid=13992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3660" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 374.259536][T14006] program syz.6.3667 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 374.489428][T14004] loop5: detected capacity change from 0 to 40427 [ 374.502708][ T4631] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 374.516856][T14008] netlink: 'syz.6.3669': attribute type 1 has an invalid length. [ 374.525776][T14008] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3669'. [ 374.542461][ T8880] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 374.567538][ T8880] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 374.574607][ T8880] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 374.605513][T14004] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 374.613088][T14004] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 374.652032][ T144] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 374.692635][ T8880] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 375.053917][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.073813][T14012] loop5: detected capacity change from 0 to 8192 [ 375.111860][T14018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3673'. [ 375.165540][T14012] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 375.217157][T14012] REISERFS (device loop5): using ordered data mode [ 375.224007][T14012] reiserfs: using flush barriers [ 375.245368][T13999] loop1: detected capacity change from 0 to 32768 [ 375.306680][T14012] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 375.417731][T14012] REISERFS (device loop5): checking transaction log (loop5) [ 375.467387][T14012] REISERFS (device loop5): Using r5 hash to sort names [ 375.508502][T14012] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 375.897280][T14029] program syz.0.3679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 376.086730][T14034] loop5: detected capacity change from 0 to 512 [ 376.121240][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.205052][T14023] loop6: detected capacity change from 0 to 32768 [ 376.206196][T14034] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc,barrier,noblock_validity,journal_ioprio=0x0000000000000004,delalloc,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 376.256333][T14034] ext4 filesystem being mounted at /383/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.307105][T14039] loop1: detected capacity change from 0 to 1024 [ 376.317996][ T5022] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 376.339438][T14023] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.3675 (14023) [ 376.359707][T14039] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 376.461983][T14039] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 376.556211][T14023] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 376.592492][T14023] BTRFS info (device loop6): setting nodatasum [ 376.609541][T14023] BTRFS info (device loop6): force zlib compression, level 3 [ 376.636957][T14023] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 376.686970][T14023] BTRFS info (device loop6): use lzo compression, level 0 [ 376.694176][T14023] BTRFS info (device loop6): turning on flush-on-commit [ 376.725093][T14023] BTRFS info (device loop6): enabling auto defrag [ 376.766942][T14023] BTRFS info (device loop6): max_inline at 4096 [ 376.773272][T14023] BTRFS info (device loop6): using free space tree [ 376.806830][ T5022] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.807589][T14023] BTRFS info (device loop6): has skinny extents [ 377.146805][T14050] loop1: detected capacity change from 0 to 40427 [ 377.223549][T14050] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 377.230822][T14050] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 377.297358][ T5022] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 377.312173][ T5022] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.322355][ T5022] usb 4-1: Product: syz [ 377.326580][ T5022] usb 4-1: Manufacturer: syz [ 377.331287][ T5022] usb 4-1: SerialNumber: syz [ 377.352010][ T5022] usb 4-1: config 0 descriptor?? [ 377.367732][T14023] BTRFS info (device loop6): enabling ssd optimizations [ 377.446278][ T5022] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 377.848667][T14083] netlink: 'syz.1.3691': attribute type 1 has an invalid length. [ 377.886375][T14083] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3691'. [ 378.003296][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.070816][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.326867][ T5022] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 378.341271][ T5022] gspca_pac7302: probe of 4-1:0.0 failed with error -71 [ 378.359928][ T5022] usb 4-1: USB disconnect, device number 30 [ 378.549291][T14091] IPv6: addrconf: prefix option has invalid lifetime [ 378.803597][T14101] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3699'. [ 378.976565][ T4231] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 378.999231][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.005589][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.194792][T14110] loop1: detected capacity change from 0 to 512 [ 379.216787][ T4231] usb 6-1: Using ep0 maxpacket: 32 [ 379.273456][T14113] loop6: detected capacity change from 0 to 1024 [ 379.341217][T14110] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 379.346787][ T4231] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.362605][T14113] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 379.382221][ T4231] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.432380][T14110] EXT4-fs (loop1): 1 truncate cleaned up [ 379.443170][T14113] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 379.476213][T14110] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,noinit_itable,sb=0x000000000000ffff,debug_want_extra_isize=0x0000000000000080,block_validity,noload,,errors=continue. Quota mode: none. [ 379.546944][ T4231] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 379.556081][ T4231] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 379.593633][ T4231] usb 6-1: Product: syz [ 379.604823][ T4231] usb 6-1: Manufacturer: syz [ 379.672058][T14103] loop3: detected capacity change from 0 to 32768 [ 379.686900][ T4231] hub 6-1:4.0: USB hub found [ 379.730681][T14103] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.3700 (14103) [ 379.804436][T14103] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 379.836465][T14103] BTRFS info (device loop3): setting nodatasum [ 379.872647][T14103] BTRFS info (device loop3): force zlib compression, level 3 [ 379.904440][T14120] IPv6: addrconf: prefix option has invalid lifetime [ 379.914133][T14103] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 379.955429][T14103] BTRFS info (device loop3): use lzo compression, level 0 [ 379.982389][T14103] BTRFS info (device loop3): turning on flush-on-commit [ 379.996594][ T4231] hub 6-1:4.0: config failed, hub has too many ports! (err -19) [ 380.033242][T14103] BTRFS info (device loop3): enabling auto defrag [ 380.059254][T14103] BTRFS info (device loop3): max_inline at 4096 [ 380.076843][T14124] loop1: detected capacity change from 0 to 764 [ 380.096838][T14103] BTRFS info (device loop3): using free space tree [ 380.132203][T14103] BTRFS info (device loop3): has skinny extents [ 380.242146][T14130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3710'. [ 380.336622][ T5778] usb 6-1: USB disconnect, device number 18 [ 380.499061][T14103] BTRFS info (device loop3): enabling ssd optimizations [ 380.621255][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3715'. [ 380.969031][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.076868][T14170] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3721'. [ 381.115099][T14173] loop5: detected capacity change from 0 to 764 [ 381.374212][T14149] loop6: detected capacity change from 0 to 32768 [ 381.735241][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3727'. [ 382.195550][T14201] netlink: 'syz.6.3735': attribute type 1 has an invalid length. [ 382.283608][T14205] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3736'. [ 382.390952][T14207] loop3: detected capacity change from 0 to 764 [ 382.438447][T14210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3749'. [ 382.768326][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.779559][T14221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3743'. [ 383.017513][T14233] netlink: 'syz.5.3750': attribute type 1 has an invalid length. [ 383.162290][T14237] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3751'. [ 383.556010][ T21] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 383.727098][T14265] netlink: 'syz.1.3764': attribute type 1 has an invalid length. [ 383.955035][ T21] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 383.975055][ T21] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 384.014166][ T21] usb 4-1: config 0 has no interface number 0 [ 384.041164][ T21] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 384.086458][ T21] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 384.127800][ T21] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 384.167244][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.211427][ T21] usb 4-1: config 0 descriptor?? [ 384.937269][ T21] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input45 [ 384.973184][ T21] input: failed to attach handler kbd to device input45, error: -5 [ 385.167393][ T7] usb 4-1: USB disconnect, device number 31 [ 385.719292][T14312] program syz.0.3785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 385.729296][T14314] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3778'. [ 385.926470][ T26] audit: type=1326 audit(1780493042.767:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.1.3779" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b634a5e59 code=0x0 [ 386.038087][T14334] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 386.634645][T14368] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 386.746353][ T5028] kernel write not supported for file /input/mice (pid: 5028 comm: kworker/0:17) [ 387.003018][T14383] program syz.5.3807 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 387.093018][T14387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3809'. [ 387.246806][T14395] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 387.294020][T14397] tap0: tun_chr_ioctl cmd 1074025677 [ 387.300315][T14397] tap0: linktype set to 778 [ 387.464799][T14401] loop1: detected capacity change from 0 to 4096 [ 387.688529][T14401] ntfs: volume version 3.1. [ 387.773830][T14418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3824'. [ 388.374190][ T26] audit: type=1326 audit(1780493045.207:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14439 comm="syz.3.3835" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94403c1e59 code=0x0 [ 388.601102][ T4228] kernel write not supported for file /input/mice (pid: 4228 comm: kworker/0:5) [ 388.923417][T14462] loop6: detected capacity change from 0 to 4096 [ 389.075506][T14462] ntfs: volume version 3.1. [ 389.509242][T14487] tap1: tun_chr_ioctl cmd 1074025677 [ 389.545821][T14487] tap1: linktype set to 778 [ 389.950939][T14500] loop5: detected capacity change from 0 to 4096 [ 390.130089][T14500] ntfs: volume version 3.1. [ 390.485804][T14526] tap0: tun_chr_ioctl cmd 1074025677 [ 390.499415][T14526] tap0: linktype set to 778 [ 390.944933][T14546] loop3: detected capacity change from 0 to 4096 [ 391.120217][T14546] ntfs: volume version 3.1. [ 391.537412][T14575] loop3: detected capacity change from 0 to 128 [ 391.704370][T14556] loop6: detected capacity change from 0 to 32768 [ 391.748419][T14556] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.3885 (14556) [ 391.869164][T14556] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 391.893536][T14556] BTRFS info (device loop6): enabling auto defrag [ 391.918033][T14556] BTRFS info (device loop6): use no compression [ 391.938184][T14556] BTRFS info (device loop6): max_inline at 4096 [ 391.959524][T14556] BTRFS info (device loop6): using free space tree [ 391.973499][T14556] BTRFS info (device loop6): has skinny extents [ 392.235041][T14556] BTRFS info (device loop6): enabling ssd optimizations [ 392.688623][ T5028] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 392.833896][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.901872][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.937800][T14590] loop1: detected capacity change from 0 to 40427 [ 392.966567][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.008770][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.174997][ T5028] usb 4-1: config 0 has an invalid interface number: 37 but max is 1 [ 393.205192][ T5028] usb 4-1: config 0 has an invalid interface number: 255 but max is 1 [ 393.223791][T14590] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x1ffff [ 393.238312][ T5028] usb 4-1: config 0 has no interface number 0 [ 393.247232][T14590] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x30e4 [ 393.260634][ T5028] usb 4-1: config 0 has no interface number 1 [ 393.271419][ T5028] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 393.286468][ T5028] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 393.304549][ T5028] usb 4-1: config 0 interface 255 has no altsetting 0 [ 393.323838][T14590] F2FS-fs (loop1): invalid crc value [ 393.349818][T14590] F2FS-fs (loop1): Found nat_bits in checkpoint [ 393.491585][ T5028] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 393.516693][T14590] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0 [ 393.535275][ T5028] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.573688][ T5028] usb 4-1: Product: syz [ 393.589652][ T5028] usb 4-1: Manufacturer: syz [ 393.594294][ T5028] usb 4-1: SerialNumber: syz [ 393.636466][ T5028] usb 4-1: config 0 descriptor?? [ 393.646991][T14590] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 393.754947][T14643] ipt_CLUSTERIP: Please specify destination IP [ 393.866951][T14652] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3918'. [ 393.926001][T13949] usb 4-1: USB disconnect, device number 32 [ 394.514234][T14656] loop1: detected capacity change from 0 to 512 [ 394.681512][T14656] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.3931: iget: bad i_size value: 38620345925642 [ 394.743260][T14656] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.3931: couldn't read orphan inode 15 (err -117) [ 394.757669][T14656] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=continue,delalloc,data_err=ignore,journal_ioprio=0x0000000000000002,data_err=ignore,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 394.825296][T14656] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.3931: bg 0: block 5: invalid block bitmap [ 394.892339][T14667] loop3: detected capacity change from 0 to 512 [ 394.952994][T14656] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 394.990413][T14667] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 395.008264][T14656] EXT4-fs (loop1): This should not happen!! Data will be lost [ 395.008264][T14656] [ 395.065343][T14656] EXT4-fs (loop1): Total free blocks count 0 [ 395.117708][T14656] EXT4-fs (loop1): Free/Dirty block details [ 395.123822][T14656] EXT4-fs (loop1): free_blocks=0 [ 395.129306][T14656] EXT4-fs (loop1): dirty_blocks=1 [ 395.134600][T14656] EXT4-fs (loop1): Block reservation details [ 395.140628][T14656] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 395.355387][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.561639][T14654] loop5: detected capacity change from 0 to 32768 [ 395.661490][T14654] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.3920 (14654) [ 395.778828][T14654] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 395.798612][T14654] BTRFS info (device loop5): enabling auto defrag [ 395.831447][T14654] BTRFS info (device loop5): use no compression [ 395.858795][T14654] BTRFS info (device loop5): max_inline at 4096 [ 395.900484][T14654] BTRFS info (device loop5): using free space tree [ 395.952598][T14654] BTRFS info (device loop5): has skinny extents [ 396.078840][T14703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3942'. [ 396.233005][T14715] loop3: detected capacity change from 0 to 512 [ 396.389128][T14654] BTRFS info (device loop5): enabling ssd optimizations [ 396.404849][T14715] EXT4-fs (loop3): Test dummy encryption mode enabled [ 396.411696][T14715] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 396.615167][T14715] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #17: comm syz.3.3944: inline data xattr refers to an external xattr inode [ 396.730748][T14715] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.3944: couldn't read orphan inode 17 (err -117) [ 396.763587][T14715] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x000000000000000c,lazytime,debug_want_extra_isize=0x000000000000006e,block_validity,test_dummy_encryption,quota,,errors=continue. Quota mode: writeback. [ 396.785262][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.445638][T14744] loop6: detected capacity change from 0 to 512 [ 397.577828][T14744] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 397.680099][ T146] Bluetooth: hci4: link tx timeout [ 397.686147][ T146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 397.698289][ T146] Bluetooth: hci4: link tx timeout [ 397.703493][ T146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 397.711658][ T146] Bluetooth: hci4: link tx timeout [ 397.721386][ T146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 398.366353][T14781] loop6: detected capacity change from 0 to 512 [ 398.581429][T14781] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.3970: iget: bad i_size value: 38620345925642 [ 398.604423][T14781] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.3970: couldn't read orphan inode 15 (err -117) [ 398.630116][T14781] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=continue,delalloc,data_err=ignore,journal_ioprio=0x0000000000000002,data_err=ignore,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 398.650683][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.704272][ T1325] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 398.779476][T14781] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.3970: bg 0: block 5: invalid block bitmap [ 398.812559][T14781] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 398.837818][T14781] EXT4-fs (loop6): This should not happen!! Data will be lost [ 398.837818][T14781] [ 398.858987][T14781] EXT4-fs (loop6): Total free blocks count 0 [ 398.878562][T14781] EXT4-fs (loop6): Free/Dirty block details [ 398.893450][T14781] EXT4-fs (loop6): free_blocks=0 [ 398.904642][T14781] EXT4-fs (loop6): dirty_blocks=1 [ 398.915486][T14781] EXT4-fs (loop6): Block reservation details [ 398.928369][T14781] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 399.154151][ T1325] usb 6-1: config 0 has an invalid interface number: 37 but max is 1 [ 399.162294][ T1325] usb 6-1: config 0 has an invalid interface number: 255 but max is 1 [ 399.187956][ T1325] usb 6-1: config 0 has no interface number 0 [ 399.195027][ T1325] usb 6-1: config 0 has no interface number 1 [ 399.201277][ T1325] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 399.213234][ T1325] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 399.228225][T14817] loop1: detected capacity change from 0 to 16 [ 399.252457][T14817] erofs: (device loop1): mounted with root inode @ nid 36. [ 399.282829][ T1325] usb 6-1: config 0 interface 255 has no altsetting 0 [ 399.474396][ T1325] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 399.483668][ T1325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.496104][ T1325] usb 6-1: Product: syz [ 399.500714][ T1325] usb 6-1: Manufacturer: syz [ 399.505829][ T1325] usb 6-1: SerialNumber: syz [ 399.526923][ T1325] usb 6-1: config 0 descriptor?? [ 399.712553][T14832] loop3: detected capacity change from 0 to 512 [ 399.794308][ T1325] Bluetooth: hci4: command 0x0406 tx timeout [ 399.796066][T14832] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.3993: iget: bad i_size value: 38620345925642 [ 399.820468][ T1325] usb 6-1: USB disconnect, device number 19 [ 399.861224][T14832] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.3993: couldn't read orphan inode 15 (err -117) [ 399.944396][T14832] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,delalloc,data_err=ignore,journal_ioprio=0x0000000000000002,data_err=ignore,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 399.964991][ C0] vkms_vblank_simulate: vblank timer overrun [ 400.037887][T14832] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.3993: bg 0: block 5: invalid block bitmap [ 400.054953][T14832] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 400.088200][T14832] EXT4-fs (loop3): This should not happen!! Data will be lost [ 400.088200][T14832] [ 400.122004][T14832] EXT4-fs (loop3): Total free blocks count 0 [ 400.135025][T14832] EXT4-fs (loop3): Free/Dirty block details [ 400.161838][T14832] EXT4-fs (loop3): free_blocks=0 [ 400.183851][T14832] EXT4-fs (loop3): dirty_blocks=1 [ 400.197412][T14832] EXT4-fs (loop3): Block reservation details [ 400.203503][T14832] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 400.640539][T14857] sch_tbf: peakrate 2 is lower than or equals to rate 2 ! [ 400.902103][T14866] loop1: detected capacity change from 0 to 512 [ 401.012220][T14866] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 401.045929][T14866] EXT4-fs (loop1): invalid journal inode [ 401.051903][T14866] EXT4-fs (loop1): can't get journal size [ 401.182575][T14866] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 401.250917][T14866] System zones: 1-12, 13-13 [ 401.275648][T14866] EXT4-fs (loop1): 1 truncate cleaned up [ 401.281483][T14866] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,grpquota,debug,discard,,errors=continue. Quota mode: writeback. [ 401.440705][T14888] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4019'. [ 401.499459][ T26] audit: type=1800 audit(1780493058.339:55): pid=14866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4009" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 401.643401][T14897] loop5: detected capacity change from 0 to 16 [ 401.683207][T14897] erofs: (device loop5): mounted with root inode @ nid 36. [ 402.235347][T14924] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4036'. [ 402.301400][T14927] loop6: detected capacity change from 0 to 512 [ 402.389217][T14932] sch_tbf: peakrate 2 is lower than or equals to rate 2 ! [ 402.401749][T14927] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 402.431080][T14927] EXT4-fs (loop6): invalid journal inode [ 402.443888][ T4899] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 402.472111][T14927] EXT4-fs (loop6): can't get journal size [ 402.504637][T14927] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 402.550532][T14927] System zones: 1-12, 13-13 [ 402.580274][T14927] EXT4-fs (loop6): 1 truncate cleaned up [ 402.592355][T14927] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,grpquota,debug,discard,,errors=continue. Quota mode: writeback. [ 402.666941][ T26] audit: type=1800 audit(1780493059.509:56): pid=14927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4038" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 402.693704][ T4899] usb 4-1: Using ep0 maxpacket: 16 [ 402.973977][ T4899] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 402.983444][ T4899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.038296][ T4899] usb 4-1: Product: syz [ 403.042856][ T4899] usb 4-1: Manufacturer: syz [ 403.055158][T14962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4062'. [ 403.064118][ T4899] usb 4-1: SerialNumber: syz [ 403.077284][T14962] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4062'. [ 403.106736][ T4899] usb 4-1: config 0 descriptor?? [ 403.146209][ T4899] gspca_main: spca508-2.14.0 probing 041e:4018 [ 403.182271][T14968] sch_tbf: peakrate 2 is lower than or equals to rate 2 ! [ 403.219560][T14964] ipt_CLUSTERIP: Please specify destination IP [ 403.363684][ T4899] gspca_spca508: reg_read err -32 [ 403.623987][ T4899] gspca_spca508: reg_read err -71 [ 403.643838][ T4899] gspca_spca508: reg_read err -71 [ 403.663785][ T4899] gspca_spca508: reg_read err -71 [ 403.683671][ T4899] gspca_spca508: reg write: error -71 [ 403.689153][ T4899] spca508: probe of 4-1:0.0 failed with error -71 [ 403.726858][ T4899] usb 4-1: USB disconnect, device number 33 [ 403.927430][T14993] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4068'. [ 404.506418][T15014] netlink: 'syz.6.4077': attribute type 1 has an invalid length. [ 404.549415][T15014] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4077'. [ 404.621265][T15016] sctp: Trying to GSO but underlying device doesn't support it. [ 404.787007][T15021] loop6: detected capacity change from 0 to 512 [ 404.845081][T15027] sctp: [Deprecated]: syz.1.4084 (pid 15027) Use of struct sctp_assoc_value in delayed_ack socket option. [ 404.845081][T15027] Use struct sctp_sack_info instead [ 404.948976][T15021] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 405.058886][T15021] EXT4-fs (loop6): 1 truncate cleaned up [ 405.076936][T15021] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 405.383417][T15049] netlink: 'syz.3.4092': attribute type 1 has an invalid length. [ 405.403360][T15049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4092'. [ 405.482054][T15052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4094'. [ 405.493722][ T1111] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 405.619973][T15054] loop3: detected capacity change from 0 to 4096 [ 405.668352][T15058] netem: change failed [ 405.739695][T15054] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 405.793476][ T1111] usb 2-1: Using ep0 maxpacket: 16 [ 405.875895][T15065] netlink: 'syz.6.4102': attribute type 12 has an invalid length. [ 405.943489][T15065] netlink: 'syz.6.4102': attribute type 29 has an invalid length. [ 405.984416][T15065] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4102'. [ 406.113992][ T1111] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 406.136293][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.157425][ T1111] usb 2-1: Product: syz [ 406.161751][ T1111] usb 2-1: Manufacturer: syz [ 406.173364][ T1111] usb 2-1: SerialNumber: syz [ 406.180874][ T1111] usb 2-1: config 0 descriptor?? [ 406.248636][T15074] loop6: detected capacity change from 0 to 16 [ 406.284538][ T1111] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 406.398797][T15074] erofs: (device loop6): mounted with root inode @ nid 36. [ 406.499352][T15082] netlink: 'syz.0.4108': attribute type 1 has an invalid length. [ 406.508848][T15082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4108'. [ 406.512583][ T4278] usb 2-1: USB disconnect, device number 34 [ 406.604670][T15084] loop6: detected capacity change from 0 to 1024 [ 406.618671][T15086] netem: change failed [ 406.648754][T15084] EXT4-fs (loop6): Ignoring removed bh option [ 406.723377][T15084] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 406.773513][T15084] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.802711][T15084] EXT4-fs error (device loop6): ext4_map_blocks:741: inode #15: block 3: comm syz.6.4109: lblock 3 mapped to illegal pblock 3 (length 3) [ 406.843992][T15084] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 406.857811][T15084] EXT4-fs (loop6): This should not happen!! Data will be lost [ 406.857811][T15084] [ 406.926753][ T26] audit: type=1326 audit(1780493063.769:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15095 comm="syz.0.4113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d8f3dfe59 code=0x7ffc0000 [ 406.987436][ T154] EXT4-fs error (device loop6): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 407.017792][ T26] audit: type=1326 audit(1780493063.769:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15095 comm="syz.0.4113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1d8f3dfe59 code=0x7ffc0000 [ 407.083241][ T154] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 407.103260][ T26] audit: type=1326 audit(1780493063.799:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15095 comm="syz.0.4113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d8f3dfe59 code=0x7ffc0000 [ 407.132882][T15102] loop3: detected capacity change from 0 to 512 [ 407.138205][ T154] EXT4-fs (loop6): This should not happen!! Data will be lost [ 407.138205][ T154] [ 407.185039][ T26] audit: type=1326 audit(1780493063.799:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15095 comm="syz.0.4113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1d8f3dfe59 code=0x7ffc0000 [ 407.274282][T15102] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 407.343080][ T26] audit: type=1326 audit(1780493063.799:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15095 comm="syz.0.4113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d8f3dfe59 code=0x7ffc0000 [ 407.367203][ C0] vkms_vblank_simulate: vblank timer overrun [ 407.402370][T15102] EXT4-fs (loop3): 1 truncate cleaned up [ 407.418984][T15102] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 407.428943][T15111] syzkaller0: tun_chr_ioctl cmd 35108 [ 407.442085][ T26] audit: type=1326 audit(1780493063.799:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15095 comm="syz.0.4113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1d8f3dfe59 code=0x7ffc0000 [ 407.466253][ C0] vkms_vblank_simulate: vblank timer overrun [ 407.474015][ T26] audit: type=1326 audit(1780493063.799:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15095 comm="syz.0.4113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1d8f3dfe59 code=0x7ffc0000 [ 407.498329][ C0] vkms_vblank_simulate: vblank timer overrun [ 407.661532][T15117] netlink: 'syz.5.4123': attribute type 12 has an invalid length. [ 407.686919][T15117] netlink: 'syz.5.4123': attribute type 29 has an invalid length. [ 407.706347][T15117] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4123'. [ 407.971399][T15132] loop5: detected capacity change from 0 to 8192 [ 408.033575][T15132] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 408.057108][T15132] REISERFS (device loop5): using ordered data mode [ 408.065867][T15132] reiserfs: using flush barriers [ 408.077039][T15132] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 408.102664][T15132] REISERFS (device loop5): checking transaction log (loop5) [ 408.143402][ T4278] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 408.282691][T15132] REISERFS (device loop5): Using tea hash to sort names [ 408.290121][T15132] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 408.393081][ T4278] usb 4-1: Using ep0 maxpacket: 8 [ 408.553221][ T4278] usb 4-1: unable to get BOS descriptor or descriptor too short [ 408.641224][ T4278] usb 4-1: config 1 has an invalid interface descriptor of length 7, skipping [ 408.668027][ T4278] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.683552][ T4278] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 408.824932][T15147] loop5: detected capacity change from 0 to 1024 [ 408.850370][T15151] syzkaller0: tun_chr_ioctl cmd 35108 [ 408.860066][ T4278] usb 4-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 408.878903][ T4278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.884112][T15147] EXT4-fs (loop5): Ignoring removed bh option [ 408.903612][ T4278] usb 4-1: Product: syz [ 408.907845][ T4278] usb 4-1: Manufacturer: syz [ 408.918613][ T4278] usb 4-1: SerialNumber: syz [ 408.960656][T15147] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 408.997885][T15147] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.035614][T15147] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: block 3: comm syz.5.4132: lblock 3 mapped to illegal pblock 3 (length 3) [ 409.052105][T15147] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 409.065113][T15147] EXT4-fs (loop5): This should not happen!! Data will be lost [ 409.065113][T15147] [ 409.113851][ T4631] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 409.169734][ T4631] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 409.205432][ T4631] EXT4-fs (loop5): This should not happen!! Data will be lost [ 409.205432][ T4631] [ 409.323306][ T4278] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 409.343033][ T4278] usb 4-1: 0:2 : does not exist [ 409.465069][ T4278] usb 4-1: USB disconnect, device number 34 [ 409.763954][ T5419] udevd[5419]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.837499][T15188] loop1: detected capacity change from 0 to 1024 [ 409.923068][T15188] EXT4-fs (loop1): Ignoring removed bh option [ 409.953131][ T1111] Bluetooth: hci4: command 0x0411 tx timeout [ 410.024887][T15188] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 410.043369][T15188] ext4 filesystem being mounted at /842/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.126104][T15188] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: block 3: comm syz.1.4151: lblock 3 mapped to illegal pblock 3 (length 3) [ 410.141754][T15188] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 410.156820][ T1325] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 410.165022][T15188] EXT4-fs (loop1): This should not happen!! Data will be lost [ 410.165022][T15188] [ 410.210846][ T4631] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 410.270160][ T4631] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 410.299029][ T4631] EXT4-fs (loop1): This should not happen!! Data will be lost [ 410.299029][ T4631] [ 410.482828][ T1325] usb 6-1: Using ep0 maxpacket: 8 [ 410.617837][ T1325] usb 6-1: config 6 has an invalid interface number: 2 but max is 0 [ 410.638788][ T1325] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 410.664743][ T1325] usb 6-1: config 6 has no interface number 0 [ 410.672416][ T26] audit: type=1326 audit(1780493067.510:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.1.4162" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b634a5e59 code=0x7ffc0000 [ 410.681030][ T1325] usb 6-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 410.733981][ T26] audit: type=1326 audit(1780493067.510:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.1.4162" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b634a5e59 code=0x7ffc0000 [ 410.760423][ T26] audit: type=1326 audit(1780493067.550:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.1.4162" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b634a5e59 code=0x7ffc0000 [ 410.784566][ C0] vkms_vblank_simulate: vblank timer overrun [ 410.904151][T15224] loop3: detected capacity change from 0 to 8192 [ 410.923382][ T1325] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 410.933745][ T1325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.942176][ T1325] usb 6-1: Product: syz [ 410.950967][ T1325] usb 6-1: Manufacturer: syz [ 410.957738][ T1325] usb 6-1: SerialNumber: syz [ 410.971948][T15224] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 410.983337][T15224] REISERFS (device loop3): using ordered data mode [ 410.989903][T15224] reiserfs: using flush barriers [ 411.008038][T15224] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 411.033998][T15224] REISERFS (device loop3): checking transaction log (loop3) [ 411.069827][ T1325] hso 6-1:6.2: Failed to find INT IN ep [ 411.163061][ T1111] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 411.258474][T15224] REISERFS (device loop3): Using tea hash to sort names [ 411.266261][T15224] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 411.294485][ T1325] usb 6-1: USB disconnect, device number 20 [ 411.423234][ T1111] usb 2-1: Using ep0 maxpacket: 8 [ 411.612874][ T1111] usb 2-1: unable to get BOS descriptor or descriptor too short [ 411.647015][T15247] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input47 [ 411.732893][ T1111] usb 2-1: config 1 has an invalid interface descriptor of length 7, skipping [ 411.748404][ T1111] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.759164][ T1111] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 411.943024][ T1111] usb 2-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 411.959158][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.968497][T15261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4182'. [ 411.977931][ T1111] usb 2-1: Product: syz [ 411.982243][ T1111] usb 2-1: Manufacturer: syz [ 411.992516][ T1111] usb 2-1: SerialNumber: syz [ 412.182824][ T5028] kernel write not supported for file /snd/seq (pid: 5028 comm: kworker/0:17) [ 412.257966][T15276] loop3: detected capacity change from 0 to 512 [ 412.319632][T15276] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 412.332132][T15276] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 412.341507][T15276] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,errors=continue,noblock_validity,. Quota mode: none. [ 412.368358][T15276] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.4188: Unimplemented hash flags: 0x0001 [ 412.381459][T15276] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.4188: Corrupt directory, running e2fsck is recommended [ 412.398811][T15276] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.4188: path /414/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 412.420464][ T1111] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 412.452964][ T1111] usb 2-1: 0:2 : does not exist [ 412.474276][ T1111] usb 2-1: USB disconnect, device number 35 [ 412.739509][ T4293] udevd[4293]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 412.845633][T15297] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4193'. [ 412.901165][T15299] loop3: detected capacity change from 0 to 256 [ 412.960410][T15299] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 413.012668][T15299] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 413.101199][T15311] loop5: detected capacity change from 0 to 1024 [ 413.108888][T15299] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 413.170947][T15311] EXT4-fs (loop5): inline encryption not supported [ 413.242853][T15311] EXT4-fs (loop5): Ignoring removed bh option [ 413.332625][T15311] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,barrier,nodelalloc,inlinecrypt,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: none. [ 413.690838][T15329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4211'. [ 413.987198][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 413.987213][ T26] audit: type=1326 audit(1780493070.830:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15341 comm="syz.5.4216" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6991be59 code=0x7ffc0000 [ 414.017454][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.096305][ T26] audit: type=1326 audit(1780493070.870:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15341 comm="syz.5.4216" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6991be59 code=0x7ffc0000 [ 414.123306][ T26] audit: type=1326 audit(1780493070.870:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15341 comm="syz.5.4216" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6991be59 code=0x7ffc0000 [ 414.147409][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.207179][T15351] loop3: detected capacity change from 0 to 128 [ 414.234347][ T26] audit: type=1326 audit(1780493070.870:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15341 comm="syz.5.4216" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fae6991be59 code=0x7ffc0000 [ 414.326594][ T26] audit: type=1326 audit(1780493070.870:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15341 comm="syz.5.4216" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6991be59 code=0x7ffc0000 [ 414.350752][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.385480][T15357] loop1: detected capacity change from 0 to 1024 [ 414.394803][ T26] audit: type=1326 audit(1780493070.870:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15341 comm="syz.5.4216" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6991be59 code=0x7ffc0000 [ 414.418931][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.433998][ T26] audit: type=1326 audit(1780493070.870:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15341 comm="syz.5.4216" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6991be59 code=0x7ffc0000 [ 414.462419][T15357] EXT4-fs (loop1): inline encryption not supported [ 414.469000][T15357] EXT4-fs (loop1): Ignoring removed bh option [ 414.496579][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.592059][T15357] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,barrier,nodelalloc,inlinecrypt,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: none. [ 414.616184][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.625492][T15354] loop6: detected capacity change from 0 to 8192 [ 414.664397][T15362] Falling back ldisc for ttyS3. [ 414.675571][ T26] audit: type=1326 audit(1780493070.870:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15341 comm="syz.5.4216" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6991be59 code=0x7ffc0000 [ 414.736977][T15354] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 414.780939][T15365] loop5: detected capacity change from 0 to 1024 [ 414.783055][T15354] REISERFS (device loop6): using ordered data mode [ 414.813667][ T1111] kernel write not supported for file /snd/seq (pid: 1111 comm: kworker/0:2) [ 414.824524][T15365] EXT4-fs (loop5): Ignoring removed orlov option [ 414.829978][ T26] audit: type=1326 audit(1780493070.870:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15341 comm="syz.5.4216" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fae6991be59 code=0x7ffc0000 [ 414.859718][ T26] audit: type=1326 audit(1780493070.870:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15341 comm="syz.5.4216" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6991be59 code=0x7ffc0000 [ 414.883880][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.894516][T15354] reiserfs: using flush barriers [ 414.904567][T15354] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 414.922846][T15354] REISERFS (device loop6): checking transaction log (loop6) [ 414.983944][T15365] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 415.252562][T15354] REISERFS (device loop6): Using tea hash to sort names [ 415.259886][T15354] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 415.742215][ T4895] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 415.874083][ T4278] kernel write not supported for file /snd/seq (pid: 4278 comm: kworker/1:8) [ 416.031905][T15405] loop6: detected capacity change from 0 to 1024 [ 416.080531][T15405] EXT4-fs (loop6): inline encryption not supported [ 416.089174][T15405] EXT4-fs (loop6): Ignoring removed bh option [ 416.122395][ T4895] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 416.132985][ T4895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.133594][T15405] EXT4-fs (loop6): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,barrier,nodelalloc,inlinecrypt,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: none. [ 416.164978][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.172616][ T4895] usb 6-1: config 0 descriptor?? [ 416.213375][ T4895] cp210x 6-1:0.0: cp210x converter detected [ 416.393001][T15413] Falling back ldisc for ttyS3. [ 416.407969][T15417] loop6: detected capacity change from 0 to 256 [ 416.445904][T15419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4246'. [ 416.516674][T15417] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 416.558388][T15417] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 416.622748][T15417] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 416.642104][ T4895] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 416.707867][ T4895] usb 6-1: cp210x converter now attached to ttyUSB0 [ 416.877731][T15434] loop1: detected capacity change from 0 to 8192 [ 416.905191][ T4278] usb 6-1: USB disconnect, device number 21 [ 416.914341][ T4278] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 416.944916][T15434] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 416.965013][ T4278] cp210x 6-1:0.0: device disconnected [ 416.995304][T15434] REISERFS (device loop1): using ordered data mode [ 417.009958][T15438] loop6: detected capacity change from 0 to 128 [ 417.016551][T15434] reiserfs: using flush barriers [ 417.024906][T15434] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 417.075424][T15438] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 417.112501][T15434] REISERFS (device loop1): checking transaction log (loop1) [ 417.126476][T15438] hpfs: filesystem error: improperly stopped [ 417.138274][T15438] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 417.155917][T15438] hpfs: You really don't want any checks? You are crazy... [ 417.176087][T15438] hpfs: hpfs_map_sector(): read error [ 417.181558][T15438] hpfs: code page support is disabled [ 417.192429][T15438] hpfs: hpfs_map_4sectors(): unaligned read [ 417.198616][T15438] hpfs: hpfs_map_4sectors(): unaligned read [ 417.207483][T15438] hpfs: filesystem error: unable to find root dir [ 417.291604][T15434] REISERFS (device loop1): Using tea hash to sort names [ 417.328511][T15434] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 417.380934][T15441] loop6: detected capacity change from 0 to 256 [ 417.559281][T15445] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 417.582082][T15445] syzkaller1: linktype set to 777 [ 417.799506][T15455] loop3: detected capacity change from 0 to 256 [ 417.886856][T15455] exfat: Deprecated parameter 'utf8' [ 417.913496][T15455] exfat: Deprecated parameter 'utf8' [ 417.965741][T15455] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 418.438653][T15477] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "\x22"[15477] [ 418.547864][T15481] program syz.1.4273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 418.992660][T15500] netlink: 'syz.1.4282': attribute type 4 has an invalid length. [ 419.059038][T15505] lo speed is unknown, defaulting to 1000 [ 419.162805][T15505] lo speed is unknown, defaulting to 1000 [ 419.176313][T15505] lo speed is unknown, defaulting to 1000 [ 419.646534][T15531] bridge0: port 2(vlan2) entered blocking state [ 419.676463][T15531] bridge0: port 2(vlan2) entered disabled state [ 419.731318][ T1325] lo speed is unknown, defaulting to 1000 [ 419.759920][T15505] infiniband sz1: set down [ 419.768540][T15536] loop3: detected capacity change from 0 to 164 [ 419.781594][T15505] infiniband sz1: added lo [ 419.942360][T15517] loop5: detected capacity change from 0 to 32768 [ 420.005458][T15505] RDS/IB: sz1: added [ 420.018513][T15505] smc: adding ib device sz1 with port count 1 [ 420.027297][T15505] smc: ib device sz1 port 1 has pnetid [ 420.041121][ T1325] lo speed is unknown, defaulting to 1000 [ 420.083677][T15550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4304'. [ 420.111797][T15517] XFS (loop5): Mounting V5 Filesystem [ 420.136842][T15505] lo speed is unknown, defaulting to 1000 [ 420.214323][T15559] loop6: detected capacity change from 0 to 64 [ 420.222735][T15517] XFS (loop5): Ending clean mount [ 420.274994][T15517] XFS (loop5): Quotacheck needed: Please wait. [ 420.307064][T15563] program syz.3.4308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 420.468493][T15517] XFS (loop5): Quotacheck: Done. [ 420.580999][ T8328] XFS (loop5): Unmounting Filesystem [ 420.658308][T15505] lo speed is unknown, defaulting to 1000 [ 421.120067][T15505] lo speed is unknown, defaulting to 1000 [ 421.594792][T15608] loop3: detected capacity change from 0 to 128 [ 421.627086][T15505] lo speed is unknown, defaulting to 1000 [ 421.671472][T15608] FAT-fs (loop3): bogus number of FAT sectors [ 421.677966][T15608] FAT-fs (loop3): Can't find a valid FAT filesystem [ 422.163513][T15505] lo speed is unknown, defaulting to 1000 [ 422.303418][T15636] netlink: 'syz.3.4341': attribute type 25 has an invalid length. [ 422.334713][T15635] (syz.6.4340,15635,0):dlmfs_mkdir:413 ERROR: invalid domain name for directory. [ 422.349370][T15636] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4341'. [ 422.678265][T15606] loop5: detected capacity change from 0 to 40427 [ 422.822928][T15606] F2FS-fs (loop5): inline encryption not supported [ 422.858138][T15606] F2FS-fs (loop5): invalid crc value [ 422.897925][T15606] F2FS-fs (loop5): Found nat_bits in checkpoint [ 423.059392][T15606] F2FS-fs (loop5): Start checkpoint disabled! [ 423.081265][ T1325] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 423.132912][T15606] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 423.190281][T15606] attempt to access beyond end of device [ 423.190281][T15606] loop5: rw=2049, want=53384, limit=40427 [ 423.273207][T15606] attempt to access beyond end of device [ 423.273207][T15606] loop5: rw=2049, want=53256, limit=40427 [ 423.371274][ T1325] usb 2-1: Using ep0 maxpacket: 16 [ 423.452412][ T144] attempt to access beyond end of device [ 423.452412][ T144] loop5: rw=2049, want=40992, limit=40427 [ 423.537028][ T1325] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 423.560775][ T1325] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 423.583361][ T1325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.620708][ T1325] usb 2-1: config 0 descriptor?? [ 423.921932][T15666] loop3: detected capacity change from 0 to 32768 [ 424.010565][T15666] XFS (loop3): Mounting V5 Filesystem [ 424.130281][T15666] XFS (loop3): Ending clean mount [ 424.144617][ T1325] kone 0003:1E7D:2CED.0023: unknown main item tag 0x0 [ 424.154673][T15666] XFS (loop3): Quotacheck needed: Please wait. [ 424.161128][ T1325] kone 0003:1E7D:2CED.0023: unknown main item tag 0x0 [ 424.171493][ T1325] kone 0003:1E7D:2CED.0023: unknown main item tag 0x0 [ 424.179046][ T1325] kone 0003:1E7D:2CED.0023: unknown main item tag 0x0 [ 424.186103][ T1325] kone 0003:1E7D:2CED.0023: unknown main item tag 0x0 [ 424.194042][ T1325] kone 0003:1E7D:2CED.0023: unknown main item tag 0x0 [ 424.201005][ T1325] kone 0003:1E7D:2CED.0023: unknown main item tag 0x0 [ 424.209529][ T1325] kone 0003:1E7D:2CED.0023: item fetching failed at offset 15/44 [ 424.230175][ T1325] kone 0003:1E7D:2CED.0023: parse failed [ 424.246994][ T1325] kone: probe of 0003:1E7D:2CED.0023 failed with error -22 [ 424.353376][ T4895] usb 2-1: USB disconnect, device number 36 [ 424.412353][T15666] XFS (loop3): Quotacheck: Done. [ 424.518984][ T8880] XFS (loop3): Unmounting Filesystem [ 424.566975][T15686] loop5: detected capacity change from 0 to 32768 [ 424.715560][T15686] JBD2: Ignoring recovery information on journal [ 424.731529][T15686] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75 [ 424.745467][T15686] JBD2: bad block at offset 32 [ 424.759108][T15686] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 424.892997][ T8328] ocfs2: Unmounting device (7,5) on (node local) [ 424.929123][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.429079][T15711] loop1: detected capacity change from 0 to 4096 [ 425.435912][T15717] program syz.5.4375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 425.827452][T15732] loop1: detected capacity change from 0 to 512 [ 425.888239][T15732] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 425.930601][T15732] EXT4-fs (loop1): 1 truncate cleaned up [ 425.939963][T15732] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 426.205770][T15749] loop5: detected capacity change from 0 to 256 [ 426.460537][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.541546][T15762] loop6: detected capacity change from 0 to 64 [ 426.639563][T15764] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4390'. [ 426.661698][T15768] loop1: detected capacity change from 0 to 128 [ 426.679510][T15764] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 426.739437][T15768] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 426.784625][T15768] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 427.126179][T15785] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 427.133878][T15785] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 427.344688][T15793] program syz.1.4409 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 428.370027][T15835] loop3: detected capacity change from 0 to 128 [ 428.440960][T15835] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 428.479358][T15821] loop5: detected capacity change from 0 to 32768 [ 428.502616][T15835] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.521033][T15835] EXT4-fs warning (device loop3): ext4_group_add:1696: No reserved GDT blocks, can't resize [ 428.556398][T15821] XFS (loop5): Mounting V5 Filesystem [ 428.656616][T15821] XFS (loop5): Ending clean mount [ 428.736771][ T8328] XFS (loop5): Unmounting Filesystem [ 429.025255][T15852] loop3: detected capacity change from 0 to 1024 [ 429.212874][T15852] hfsplus: catalog searching failed [ 429.244959][T15856] loop1: detected capacity change from 0 to 4096 [ 429.273350][ T154] hfsplus: b-tree write err: -5, ino 3 [ 429.373251][T15856] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 429.402296][T15865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4438'. [ 429.491829][T15867] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4439'. [ 429.503148][T15862] block nbd5: shutting down sockets [ 431.344192][T15908] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4457'. [ 431.537408][ C0] sd 0:0:1:0: tag#1920 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 431.547937][ C0] sd 0:0:1:0: tag#1920 CDB: Variable length, sa=0xa880 [ 431.554914][ C0] sd 0:0:1:0: tag#1920 CDB[00]: 7f 00 00 00 00 00 3a 11 a8 80 20 69 c6 91 b7 89 [ 431.564032][ C0] sd 0:0:1:0: tag#1920 CDB[10]: 60 b9 f3 18 1e 01 c3 aa 18 83 12 c7 7d 5c a1 bc [ 431.573133][ C0] sd 0:0:1:0: tag#1920 CDB[20]: 6e [ 431.839858][T15933] loop6: detected capacity change from 0 to 64 [ 431.978370][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 431.978387][ T26] audit: type=1800 audit(1780493088.823:109): pid=15933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4466" name="file1" dev="loop6" ino=21 res=0 errno=0 [ 432.063859][T15941] hfs: request for non-existent node -16318464 in B*Tree [ 432.089442][T15941] hfs: request for non-existent node -16318464 in B*Tree [ 432.116018][T15933] hfs: request for non-existent node -16318464 in B*Tree [ 432.133689][T15933] hfs: request for non-existent node -16318464 in B*Tree [ 432.168527][ T154] hfs: request for non-existent node -16318464 in B*Tree [ 432.190439][ T154] hfs: request for non-existent node -16318464 in B*Tree [ 432.542392][T15962] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4479'. [ 432.852627][T15982] loop3: detected capacity change from 0 to 128 [ 432.976333][T15982] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 433.038675][T15982] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 433.482723][T16014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4502'. [ 433.741876][T16032] loop3: detected capacity change from 0 to 512 [ 433.840758][T16035] block nbd6: shutting down sockets [ 433.857392][T16032] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 433.883440][T16032] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,min_batch_time=0x0000000000000000,nombcache,,errors=continue. Quota mode: writeback. [ 433.901649][T16032] ext4 filesystem being mounted at /495/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.134547][T16051] program syz.5.4517 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 434.444023][T16068] netlink: 'syz.6.4524': attribute type 4 has an invalid length. [ 434.506764][T16070] rdma_rxe: rxe_register_device failed with error -23 [ 434.574689][T16070] rdma_rxe: failed to add lo [ 434.771723][T16084] loop1: detected capacity change from 0 to 64 [ 435.358140][T16096] loop1: detected capacity change from 0 to 4096 [ 435.478347][T16096] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 435.491211][T16096] ntfs3: loop1: Failed to load $Extend. [ 435.527679][ T26] audit: type=1800 audit(1780493092.373:110): pid=16096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4535" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 435.615302][T16098] loop5: detected capacity change from 0 to 128 [ 435.704902][T16098] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 435.729725][T16098] FAT-fs (loop5): Filesystem has been set read-only [ 435.736590][T16098] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 436.040107][ T4187] ntfs3: loop1: ntfs_sync_fs r=9 failed, -22. [ 436.047160][ T4187] ntfs3: loop1: ntfs_evict_inode r=9 failed, -22. [ 436.302561][T16121] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4542'. [ 436.606905][T16137] device team_slave_0 entered promiscuous mode [ 436.613872][T16137] device team_slave_1 entered promiscuous mode [ 436.620483][T16137] device bond_slave_0 entered promiscuous mode [ 436.627626][T16137] device bond_slave_1 entered promiscuous mode [ 436.756838][T16137] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 436.804772][T16148] tap1: tun_chr_ioctl cmd 1074812118 [ 437.098577][T16167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4565'. [ 437.204737][T16171] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4568'. [ 437.269092][T16175] loop3: detected capacity change from 0 to 256 [ 438.123962][T16195] syz.3.4577 (16195) used greatest stack depth: 20144 bytes left [ 438.256325][T16215] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 438.264782][T16215] IPv6: NLM_F_CREATE should be set when creating new route [ 438.272117][T16215] IPv6: NLM_F_CREATE should be set when creating new route [ 438.279419][T16215] IPv6: NLM_F_CREATE should be set when creating new route [ 438.326048][T16218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4589'. [ 438.376211][T16212] loop3: detected capacity change from 0 to 4096 [ 438.479520][T16212] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 438.613379][T16229] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8880] was attempted by "\x22"[16229] [ 439.222654][ T6399] wlan1: Trigger new scan to find an IBSS to join [ 439.259390][T16261] bridge0: port 3(vlan2) entered blocking state [ 439.278041][T16261] bridge0: port 3(vlan2) entered disabled state [ 439.293717][T16259] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4609'. [ 439.345973][T16265] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4612'. [ 439.474736][ C0] vkms_vblank_simulate: vblank timer overrun [ 439.625503][T16268] loop1: detected capacity change from 0 to 4096 [ 439.685435][T16268] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 440.305170][T16273] loop3: detected capacity change from 0 to 32768 [ 440.415420][T16273] XFS (loop3): Mounting V5 Filesystem [ 440.425568][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.432172][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.476168][T16313] loop5: detected capacity change from 0 to 256 [ 440.538645][T16273] XFS (loop3): Ending clean mount [ 440.577860][T16313] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 440.599467][T16313] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 440.712975][T16319] loop1: detected capacity change from 0 to 512 [ 440.726484][T16313] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d) [ 440.775769][ T8880] XFS (loop3): Unmounting Filesystem [ 440.879657][T16319] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 440.896487][T16319] ext4 filesystem being mounted at /942/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 441.109167][ C0] vkms_vblank_simulate: vblank timer overrun [ 441.381574][T16333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4639'. [ 441.568669][T16343] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4642'. [ 441.857903][T16359] loop3: detected capacity change from 0 to 1024 [ 441.875323][T16355] loop5: detected capacity change from 0 to 4096 [ 441.894554][T16359] EXT4-fs (loop3): Ignoring removed orlov option [ 441.915762][T16359] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 441.968373][T16355] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 441.978261][ T4892] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 442.032186][T16355] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 442.056506][T16355] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 442.093106][ T8328] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 442.107568][ T8328] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22. [ 442.259253][ T4226] wlan1: Trigger new scan to find an IBSS to join [ 442.379148][ T4892] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 442.390431][ T4892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 442.410692][ T4892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 442.428715][ T4892] usb 2-1: New USB device found, idVendor=056a, idProduct=0100, bcdDevice= 0.00 [ 442.438472][ T4892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.452279][ T4892] usb 2-1: config 0 descriptor?? [ 442.469283][T16349] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 442.661507][T16374] loop5: detected capacity change from 0 to 32768 [ 442.695621][T16374] ERROR: (device loop5): diAllocAG: ipimap->i_size is wrong [ 442.695621][T16374] [ 442.713020][T16374] ERROR: (device loop5): remounting filesystem as read-only [ 442.720885][T16374] ialloc: diAlloc returned -5! [ 442.960344][ T4892] wacom 0003:056A:0100.0024: ignoring exceeding usage max [ 442.988352][ T4892] wacom 0003:056A:0100.0024: hidraw0: USB HID v4.00 Device [HID 056a:0100] on usb-dummy_hcd.1-1/input0 [ 443.189357][ T7] usb 2-1: USB disconnect, device number 37 [ 443.254884][T16391] loop3: detected capacity change from 0 to 128 [ 443.359422][T16391] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 443.393914][T16391] hpfs: filesystem error: improperly stopped [ 443.413401][T16391] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 443.442669][T16391] hpfs: You really don't want any checks? You are crazy... [ 443.459045][T16391] hpfs: hpfs_map_sector(): read error [ 443.469360][T16391] hpfs: code page support is disabled [ 443.474907][T16391] hpfs: hpfs_map_4sectors(): unaligned read [ 443.498003][T16391] hpfs: hpfs_map_4sectors(): unaligned read [ 443.514977][T16391] hpfs: filesystem error: unable to find root dir [ 443.615763][T16391] hpfs: hpfs_map_4sectors(): unaligned read [ 443.696824][T16406] netlink: 260 bytes leftover after parsing attributes in process `syz.5.4671'. [ 443.786272][T16411] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4675'. [ 443.844282][T16415] loop3: detected capacity change from 0 to 256 [ 443.961675][T16415] FAT-fs (loop3): Directory bread(block 64) failed [ 443.988706][T16415] FAT-fs (loop3): Directory bread(block 65) failed [ 443.995371][T16415] FAT-fs (loop3): Directory bread(block 66) failed [ 444.027620][T16415] FAT-fs (loop3): Directory bread(block 67) failed [ 444.055194][T16415] FAT-fs (loop3): Directory bread(block 68) failed [ 444.077181][T16415] FAT-fs (loop3): Directory bread(block 69) failed [ 444.090885][T16415] FAT-fs (loop3): Directory bread(block 70) failed [ 444.139521][T16415] FAT-fs (loop3): Directory bread(block 71) failed [ 444.156495][T16415] FAT-fs (loop3): Directory bread(block 72) failed [ 444.200171][T16415] FAT-fs (loop3): Directory bread(block 73) failed [ 444.480217][T16415] attempt to access beyond end of device [ 444.480217][T16415] loop3: rw=1, want=1228, limit=256 [ 445.166819][T16464] vxcan0: tx address claim with dest, not broadcast [ 445.298712][ T4631] wlan1: Trigger new scan to find an IBSS to join [ 446.279435][ T4631] wlan1: Creating new IBSS network, BSSID ba:6a:46:8a:77:42 [ 446.343045][T16494] loop1: detected capacity change from 0 to 8192 [ 446.417251][T16494] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 446.442348][T16494] REISERFS (device loop1): using ordered data mode [ 446.479577][T16494] reiserfs: using flush barriers [ 446.508919][T16494] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 446.617475][T16494] REISERFS (device loop1): checking transaction log (loop1) [ 446.852279][T16494] REISERFS (device loop1): Using tea hash to sort names [ 446.861220][T16494] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 447.056910][T16512] lo speed is unknown, defaulting to 1000 [ 447.151675][T16518] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 447.339644][T16514] loop6: detected capacity change from 0 to 8192 [ 447.845333][T16537] lo speed is unknown, defaulting to 1000 [ 447.881150][ T4892] hid-generic 0000:0004:261D.0025: unknown main item tag 0x0 [ 447.903548][ T4892] hid-generic 0000:0004:261D.0025: unknown main item tag 0x0 [ 447.913579][T16543] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec1 [ 447.932625][T16543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.937023][ T4892] hid-generic 0000:0004:261D.0025: unknown main item tag 0x0 [ 447.960794][ T4892] hid-generic 0000:0004:261D.0025: unknown main item tag 0x0 [ 447.982745][ T4892] hid-generic 0000:0004:261D.0025: unknown main item tag 0x0 [ 447.993860][ T4892] hid-generic 0000:0004:261D.0025: unknown main item tag 0x0 [ 448.005572][ T4892] hid-generic 0000:0004:261D.0025: unknown main item tag 0x0 [ 448.016061][ T4892] hid-generic 0000:0004:261D.0025: unknown main item tag 0x0 [ 448.033491][ T4892] hid-generic 0000:0004:261D.0025: unknown main item tag 0x0 [ 448.052497][ T4892] hid-generic 0000:0004:261D.0025: unknown main item tag 0x0 [ 448.067652][ T4892] hid-generic 0000:0004:261D.0025: unknown main item tag 0x0 [ 448.078617][ T4892] hid-generic 0000:0004:261D.0025: unknown main item tag 0x0 [ 448.086306][ T4892] hid-generic 0000:0004:261D.0025: unknown main item tag 0x0 [ 448.095979][ T4892] hid-generic 0000:0004:261D.0025: unknown main item tag 0x0 [ 448.131497][ T4892] hid-generic 0000:0004:261D.0025: hidraw0: HID v0.03 Device [syz1] on syz0 [ 448.206605][T16550] device vlan2 entered promiscuous mode [ 448.233431][T16550] device bond0 entered promiscuous mode [ 448.244862][T16550] device bond_slave_0 entered promiscuous mode [ 448.270845][T16550] device bond_slave_1 entered promiscuous mode [ 448.457235][T16555] fido_id[16555]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 448.710882][T16571] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4746'. [ 449.317705][T16593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.361004][T16593] bond0: (slave bond1): Enslaving as an active interface with an up link [ 449.553641][T16603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4760'. [ 449.739146][T16618] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec1 [ 449.809430][T16618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.227953][ T4892] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 450.478164][ T4892] usb 2-1: Using ep0 maxpacket: 8 [ 450.758378][ T4892] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 450.807241][ T4892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.821514][ T4892] usb 2-1: Product: syz [ 450.825764][ T4892] usb 2-1: Manufacturer: syz [ 450.833777][ T4892] usb 2-1: SerialNumber: syz [ 450.844797][ T4892] usb 2-1: config 0 descriptor?? [ 450.879796][ T26] audit: type=1326 audit(1780493107.725:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16652 comm="syz.0.4780" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d8f3dfe59 code=0x0 [ 450.894147][ T4892] gspca_main: se401-2.14.0 probing 047d:5003 [ 451.253798][T16662] loop6: detected capacity change from 0 to 4096 [ 451.304964][T16662] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 451.348255][ T4892] gspca_se401: ExtraFeatures: 187 [ 451.353355][ T4892] gspca_se401: Too many frame sizes [ 451.578964][ T4892] usb 2-1: USB disconnect, device number 38 [ 451.923488][T16691] loop3: detected capacity change from 0 to 512 [ 452.025998][T16691] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 452.051244][T16701] netlink: 'syz.5.4796': attribute type 3 has an invalid length. [ 452.096567][T16691] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 452.180766][T16691] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.4793: invalid indirect mapped block 2683928664 (level 1) [ 452.248564][T16707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4797'. [ 452.283713][T16691] EXT4-fs (loop3): Remounting filesystem read-only [ 452.308073][T16691] EXT4-fs (loop3): 1 truncate cleaned up [ 452.334293][T16691] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.,. Quota mode: writeback. [ 452.375244][ T5028] kernel read not supported for file /dsp (pid: 5028 comm: kworker/0:17) [ 452.430744][T16691] EXT4-fs (loop3): can't change dax mount option while remounting [ 452.482094][ T146] Bluetooth: hci4: link tx timeout [ 452.487288][ T146] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 452.495605][ T146] Bluetooth: hci4: link tx timeout [ 452.501527][ T146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 452.509381][ T146] Bluetooth: hci4: link tx timeout [ 452.514559][ T146] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 452.523296][ T146] Bluetooth: hci4: link tx timeout [ 452.528529][ T146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 452.657150][ T146] Bluetooth: hci4: link tx timeout [ 452.662947][ T146] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 452.671534][ T146] Bluetooth: hci4: link tx timeout [ 452.676731][ T146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 452.721233][ T146] Bluetooth: hci4: link tx timeout [ 452.726739][ T146] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 452.738244][ T146] Bluetooth: hci4: link tx timeout [ 452.743511][ T146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 452.841434][T16723] netlink: 'syz.0.4803': attribute type 1 has an invalid length. [ 453.128827][ T146] Bluetooth: hci4: link tx timeout [ 453.134075][ T146] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 453.141945][ T146] Bluetooth: hci4: link tx timeout [ 453.147090][ T146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 453.219723][T10677] wlan1: Trigger new scan to find an IBSS to join [ 453.472578][ T146] Bluetooth: hci4: link tx timeout [ 453.477805][ T146] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 453.485501][ T146] Bluetooth: hci4: link tx timeout [ 453.491731][ T146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 453.557211][T16756] loop6: detected capacity change from 0 to 8 [ 453.665248][T16751] loop5: detected capacity change from 0 to 4096 [ 453.783177][T16751] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 454.292611][T16787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4827'. [ 454.363284][T16787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4827'. [ 454.393017][T16791] input: syz1 as /devices/virtual/input/input52 [ 454.489315][ C0] vkms_vblank_simulate: vblank timer overrun [ 454.586478][ T146] Bluetooth: hci4: link tx timeout [ 454.591844][ T146] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 454.600087][ T146] Bluetooth: hci4: link tx timeout [ 454.605318][ T146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 454.618073][ T1111] Bluetooth: hci4: command 0x0406 tx timeout [ 454.835881][ T146] Bluetooth: hci4: link tx timeout [ 454.841947][ T146] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 454.850120][ T146] Bluetooth: hci4: link tx timeout [ 454.855305][ T146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 455.112769][ T146] Bluetooth: hci4: link tx timeout [ 455.118303][ T146] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 455.130297][ T146] Bluetooth: hci4: link tx timeout [ 455.139247][ T146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 455.527846][T16794] loop6: detected capacity change from 0 to 32768 [ 455.551377][ T146] Bluetooth: hci4: link tx timeout [ 455.556642][ T146] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 455.564427][ T146] Bluetooth: hci4: link tx timeout [ 455.576198][ T146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 455.643305][T16794] XFS (loop6): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 455.763038][T10414] XFS (loop6): Unmounting Filesystem [ 456.188380][T16855] input: syz1 as /devices/virtual/input/input53 [ 456.305303][T16858] loop5: detected capacity change from 0 to 764 [ 456.507745][T16858] rock: directory entry would overflow storage [ 456.513999][T16858] rock: sig=0x4654, size=5, remaining=4 [ 456.838533][ C0] vkms_vblank_simulate: vblank timer overrun [ 457.220171][ T154] wlan1: Trigger new scan to find an IBSS to join [ 457.267390][ T144] ------------[ cut here ]------------ [ 457.274124][ T144] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x20 [ 457.285177][ T144] WARNING: CPU: 1 PID: 144 at net/mac80211/rate.c:376 __rate_control_send_low+0x630/0x880 [ 457.295198][ T144] Modules linked in: [ 457.299177][ T144] CPU: 1 PID: 144 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 457.306685][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 457.316824][ T144] Workqueue: phy20 ieee80211_scan_work [ 457.322399][ T144] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 457.328754][ T144] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 00 a0 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 e0 01 6a 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 457.348442][ T144] RSP: 0000:ffffc9000175f488 EFLAGS: 00010246 [ 457.354552][ T144] RAX: c1a308834054c700 RBX: 000000000000000c RCX: ffff88801bee9dc0 [ 457.362620][ T144] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 457.370666][ T144] RBP: 0000000000000084 R08: ffffc9000175efa7 R09: 1ffff920002ebdf4 [ 457.378725][ T144] R10: dffffc0000000000 R11: fffff520002ebdf5 R12: ffff888062a7a528 [ 457.386743][ T144] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000020 [ 457.394801][ T144] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 457.404092][ T144] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.410759][ T144] CR2: 000000110c3b679d CR3: 000000004fca4000 CR4: 00000000003506e0 [ 457.418827][ T144] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 457.426844][ T144] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 457.434934][ T144] Call Trace: [ 457.438290][ T144] [ 457.441269][ T144] rate_control_send_low+0x194/0x790 [ 457.446614][ T144] ? ieee80211_scan_work+0x4eb/0x1b40 [ 457.452083][ T144] rate_control_get_rate+0x207/0x5c0 [ 457.457559][ T144] ieee80211_tx_h_rate_ctrl+0xb02/0x1700 [ 457.463259][ T144] ? ieee80211_tx_h_select_key+0x17f0/0x17f0 [ 457.469543][ T144] ? sta_info_hash_lookup+0x53e/0x580 [ 457.474975][ T144] ? ieee80211_queue_skb+0xbc/0x2060 [ 457.480361][ T144] invoke_tx_handlers_late+0xaa/0x16a0 [ 457.485869][ T144] ? ieee80211_tx_h_select_key+0x12c0/0x17f0 [ 457.491955][ T144] ? sta_info_get+0x220/0x230 [ 457.496779][ T144] ? invoke_tx_handlers_early+0xa11/0x1d10 [ 457.502685][ T144] ieee80211_tx+0x2d4/0x460 [ 457.507278][ T144] ? ieee80211_skb_resize+0x630/0x630 [ 457.512740][ T144] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 457.518634][ T144] ieee80211_scan_state_send_probe+0x526/0x8a0 [ 457.524860][ T144] ieee80211_scan_work+0x4eb/0x1b40 [ 457.530182][ T144] process_one_work+0x85f/0x1010 [ 457.535220][ T144] ? worker_detach_from_pool+0x240/0x240 [ 457.540956][ T144] ? lockdep_hardirqs_off+0x70/0x100 [ 457.546296][ T144] ? _raw_spin_lock_irq+0xb7/0xf0 [ 457.551402][ T144] ? _raw_spin_lock_irqsave+0x100/0x100 [ 457.557091][ T144] ? wq_worker_running+0x97/0x170 [ 457.562206][ T144] worker_thread+0xaa6/0x1290 [ 457.566943][ T144] ? lockdep_hardirqs_on+0x94/0x140 [ 457.572236][ T144] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 457.578227][ T144] kthread+0x436/0x520 [ 457.582341][ T144] ? rcu_lock_release+0x20/0x20 [ 457.587280][ T144] ? kthread_blkcg+0xd0/0xd0 [ 457.591919][ T144] ret_from_fork+0x1f/0x30 [ 457.596393][ T144] [ 457.599601][ T144] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 457.606930][ T144] CPU: 1 PID: 144 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 457.614432][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 457.624524][ T144] Workqueue: phy20 ieee80211_scan_work [ 457.630031][ T144] Call Trace: [ 457.633459][ T144] [ 457.636431][ T144] dump_stack_lvl+0x188/0x250 [ 457.641151][ T144] ? show_regs_print_info+0x20/0x20 [ 457.646388][ T144] ? load_image+0x400/0x400 [ 457.650944][ T144] panic+0x2e5/0x810 [ 457.654882][ T144] ? bpf_jit_dump+0xd0/0xd0 [ 457.659434][ T144] ? ret_from_fork+0x1f/0x30 [ 457.664070][ T144] ? __rate_control_send_low+0x630/0x880 [ 457.669746][ T144] __warn+0x248/0x2b0 [ 457.673760][ T144] ? __rate_control_send_low+0x630/0x880 [ 457.679448][ T144] report_bug+0x1b7/0x2e0 [ 457.683821][ T144] handle_bug+0x3a/0x70 [ 457.688011][ T144] exc_invalid_op+0x16/0x40 [ 457.692646][ T144] asm_exc_invalid_op+0x16/0x20 [ 457.697600][ T144] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 457.703893][ T144] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 00 a0 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 e0 01 6a 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 457.723538][ T144] RSP: 0000:ffffc9000175f488 EFLAGS: 00010246 [ 457.729655][ T144] RAX: c1a308834054c700 RBX: 000000000000000c RCX: ffff88801bee9dc0 [ 457.738048][ T144] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 457.746193][ T144] RBP: 0000000000000084 R08: ffffc9000175efa7 R09: 1ffff920002ebdf4 [ 457.754211][ T144] R10: dffffc0000000000 R11: fffff520002ebdf5 R12: ffff888062a7a528 [ 457.762265][ T144] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000020 [ 457.770309][ T144] ? __rate_control_send_low+0x630/0x880 [ 457.776009][ T144] rate_control_send_low+0x194/0x790 [ 457.781336][ T144] ? ieee80211_scan_work+0x4eb/0x1b40 [ 457.786768][ T144] rate_control_get_rate+0x207/0x5c0 [ 457.792123][ T144] ieee80211_tx_h_rate_ctrl+0xb02/0x1700 [ 457.797918][ T144] ? ieee80211_tx_h_select_key+0x17f0/0x17f0 [ 457.804753][ T144] ? sta_info_hash_lookup+0x53e/0x580 [ 457.810182][ T144] ? ieee80211_queue_skb+0xbc/0x2060 [ 457.815507][ T144] invoke_tx_handlers_late+0xaa/0x16a0 [ 457.821008][ T144] ? ieee80211_tx_h_select_key+0x12c0/0x17f0 [ 457.827031][ T144] ? sta_info_get+0x220/0x230 [ 457.831760][ T144] ? invoke_tx_handlers_early+0xa11/0x1d10 [ 457.837726][ T144] ieee80211_tx+0x2d4/0x460 [ 457.842282][ T144] ? ieee80211_skb_resize+0x630/0x630 [ 457.847998][ T144] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 457.853853][ T144] ieee80211_scan_state_send_probe+0x526/0x8a0 [ 457.860301][ T144] ieee80211_scan_work+0x4eb/0x1b40 [ 457.865590][ T144] process_one_work+0x85f/0x1010 [ 457.870682][ T144] ? worker_detach_from_pool+0x240/0x240 [ 457.876373][ T144] ? lockdep_hardirqs_off+0x70/0x100 [ 457.881707][ T144] ? _raw_spin_lock_irq+0xb7/0xf0 [ 457.886779][ T144] ? _raw_spin_lock_irqsave+0x100/0x100 [ 457.892387][ T144] ? wq_worker_running+0x97/0x170 [ 457.897708][ T144] worker_thread+0xaa6/0x1290 [ 457.902462][ T144] ? lockdep_hardirqs_on+0x94/0x140 [ 457.907880][ T144] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 457.914118][ T144] kthread+0x436/0x520 [ 457.918245][ T144] ? rcu_lock_release+0x20/0x20 [ 457.923557][ T144] ? kthread_blkcg+0xd0/0xd0 [ 457.928193][ T144] ret_from_fork+0x1f/0x30 [ 457.932666][ T144] [ 457.935991][ T144] Kernel Offset: disabled [ 457.940947][ T144] Rebooting in 86400 seconds..