last executing test programs: 6.947103171s ago: executing program 2 (id=1054): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002100)=0x0) sched_setscheduler(r0, 0x0, &(0x7f0000004300)=0x54) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680), 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000002000)={0x49dd, 0xfeff, 0x9, 0x3, 0x7, "fa3d76170000001b"}) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x5000000d, 0x244, 0x9, '\x00=\x00'}) r2 = syz_open_pts(r1, 0x400) r3 = dup3(r2, r1, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x0, &(0x7f0000004400)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000000000)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)={0x20, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000008180)={0x0, "5e97461069416b3f42d9b02dc0c4e3bc"}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0x105, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400), 0x0, 0x8, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001700)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000003000000010000000100000f030000000c000000000000e2000000000061"], 0x0, 0x33}, 0x28) 5.899666666s ago: executing program 2 (id=1066): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@prjquota}, {@inlinecrypt}, {@grpid}, {@nomblk_io_submit}, {@quota}, {@nobarrier}, {@inode_readahead_blks}, {@usrjquota}, {@block_validity}, {@noblock_validity}, {@noquota}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") setresuid(0x0, 0xee01, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) 5.827590208s ago: executing program 4 (id=1067): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000002200)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb00ed00000000000002000100000000000000000200000000030005000000000002000000ac1414aa000000000000000001001b00000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) 5.72979402s ago: executing program 3 (id=1069): r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x20, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 5.32958368s ago: executing program 2 (id=1072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000e00), 0x20000) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000e40)={{0xa9}, {0x5}, 0x9687, 0x5, 0x4}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001e80)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000080000000400000001000084010000e004000000030000000000000000000000000000010500000020000000000000000000000300000000020000000200000000000000006100302e"], 0x0, 0x60}, 0x28) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xffffffffffffffff) syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1) r4 = syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000000), 0x1, 0xbc8, &(0x7f0000000380)="$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") r5 = getpid() r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r7 = dup3(r4, r4, 0x0) ioctl$KVM_CAP_XEN_HVM(r7, 0x4068aea3, &(0x7f0000000180)={0x26, 0x0, 0x100}) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3ffffffe]}, 0x8, 0x80000) readv(r8, &(0x7f0000000b80)=[{&(0x7f0000000280)=""/221, 0xdd}], 0x1) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r5, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) waitid(0x0, r9, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) r10 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pread64(r10, &(0x7f0000000f80)=""/116, 0x74, 0x8000000000000000) 5.32941142s ago: executing program 3 (id=1073): syz_usb_connect$midi(0x2, 0x38, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x4141, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x1, 0xff, 0x0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x6, [@ms_header={0x7, 0x24, 0x1, 0x9d1, 0x7}], [{{0x9, 0x5, 0x8e, 0xb, 0x200, 0xf, 0xd7, 0x2, {0x4}}}]}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 5.070875166s ago: executing program 4 (id=1075): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f000000d080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c0000008100"], 0xfeffffff) 3.997602392s ago: executing program 4 (id=1076): sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x2004c884) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7d}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x1, 0x0, 0x4, 0x4, 0x0, 0x0, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x4000000, 0x1}}, 0xe8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/220, &(0x7f00000000c0)=""/80, &(0x7f0000000780)=""/82}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0x102c8000, 0x0, 0xfffffffffffffef7, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10, 0x800) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) 3.620311812s ago: executing program 3 (id=1079): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.525817104s ago: executing program 2 (id=1081): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendto$inet(r0, &(0x7f0000000180)="6ac56a5849e8b9e3", 0xfffffffb, 0x10040895, 0x0, 0xffffffffffffffa6) 3.503320424s ago: executing program 4 (id=1082): syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8214, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x7, 0xe0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa5f, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0x9, 0x74, {0x7, 0x25, 0x1, 0x8, 0x2, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x2, 0x3, {0x7, 0x25, 0x1, 0x4, 0x1, 0xb2a}}}}}}}}]}}, 0x0) 2.349776023s ago: executing program 0 (id=1087): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000940)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48805}, 0x80) 2.322109213s ago: executing program 2 (id=1088): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x109000) syz_open_dev$loop(0x0, 0x5ca, 0xc000) r1 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) 1.983233242s ago: executing program 0 (id=1089): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYBLOB="6ccbc08cc2654b39856a0d2844e3c5f7ad3946260f5a1f952c46eed611e0b6b9c6bfef7acc35604972ab594e4e0e692c66f8c0c44912542fa28472c967c80d11d4c15d9a5bcc61fa906d994138af0838d142c1bab4e5c62302c6b95853127b5ca3566ef10670a70e70c52fc45043566054a75477ad86dab25bb57c576c94448c471f98aafab5e0acf552eb36f900d54f32724b25b8fe7d07ef90a37ec3cf1a66c792816b7a91ca95eee10e708d1dbec055ca124e7e3301a6d1a2da", @ANYRESOCT, @ANYRES64, @ANYRES32, @ANYRESHEX], 0xff, 0x183, &(0x7f0000000040)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000080)={@random="5bb65d3f2511", @local, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0xe, 0x7c, 0x65, 0x0, 0x3, 0x11, 0x0, @empty, @multicast1, {[@end]}}, {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x3, "f66abb6f369aaa15d309a5209a57d6b633de150bf5c0f9eed577c9053e33e8a6", "ad01c9ea336a20bee7eb5eca2632253a", {"d69e4998ec79f919e2f5fdbe24252c46", "94f2cbbb76aeff3f3f60692fd9841b58"}}}}}}}, 0x0) 1.62935828s ago: executing program 0 (id=1091): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000001c0)=0x1) 1.555870842s ago: executing program 1 (id=1092): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FITRIM(r0, 0xc0185879, 0x0) 1.389661676s ago: executing program 1 (id=1093): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x206f) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) truncate(&(0x7f00000000c0)='./file0\x00', 0x3) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 1.389466376s ago: executing program 0 (id=1094): r0 = epoll_create1(0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0x0, 0x2000}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) 1.301578728s ago: executing program 1 (id=1095): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x40000d5}, 0xc010) sendmsg$nl_route_sched_retired(r1, 0x0, 0x40044) dup(r0) 1.274079519s ago: executing program 2 (id=1096): syz_usb_connect$uac2(0x0, 0x83, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0xf9, 0x20, 0x9, {0x8, 0xb, 0x1, 0x1, 0x1, 0x2, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xb, 0x0, 0x9, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x9, 0x4, 0xa, 0x47}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x31, 0xb8, 0x8, {0x8, 0x25, 0x1, 0x0, 0x33, 0x8, 0x28e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x2, 0x8d, {0x8, 0x25, 0x1, 0x81, 0x0, 0x4, 0x2}}}}}}}}]}}, 0x0) 1.159523721s ago: executing program 4 (id=1097): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f0000004100)=[{&(0x7f00000001c0)='\f\x00\x00\x00', 0x4}], 0x1) 1.109196903s ago: executing program 0 (id=1098): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000002e40)}}], 0x1, 0x0) sendto$inet(r0, &(0x7f0000000180)="6ac56a5849e8b9e3", 0xfffffffb, 0x10040895, 0x0, 0xffffffffffffffa6) 1.038497324s ago: executing program 1 (id=1099): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000005c0)='./file7\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) 851.920029ms ago: executing program 1 (id=1100): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbf9, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x7fff, 0x4, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x45}, 0x4000) 773.739691ms ago: executing program 4 (id=1101): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nobh}, {@quota}]}, 0x1, 0x560, &(0x7f0000000440)="$eJzs3c9vI1cdAPDvTH42u212oQeogF2gsKDV2htvu6p6abmAUFWpouLEYRsSbxTWXi+xU5oQifRvAAkkTvAncEDigNQTB24ckTgAohyQCkSgDRIHoxlPEjdxWLN2bDb+fKTZ+fFm5vuevTPv+dmZF8DEuhoRuxExGxFvRcRisT0ppni1M2X7PdzbWdnf21lJot1+829Jnp5ti65jMheKc85HxNe+EvHN5GTc5tb2veVarbpRrJdb9Qfl5tb2jfX68lp1rXq/Urm9dPvmS7derAytrFfqP/vgy+uvff2Xv/jk+7/Z/eJ3s2xdLNK6yzFMnaLPHMbJTEfEa2cRbAymivnsmPPB40kj4iMR8Zn8+l+Mqfx/JwBwnrXbi9Fe7F4HAM67NO8DS9JSRKRp0Qgodfrwno2FtNZotq7fbWzeX+30lV2KmfTueq168/Lc776d7zyTZOtLeVqenq9Xjq3fiojLEfGDuafy9dJKo7Y6niYPAEy8C931f0T8cy5NS6W+Du3xrR4A8MSYH3cGAICRU/8DwORR/wPA5Omj/i++7N8987wAAKPh8z8ATB71PwBMHvU/AEyUN15/PZva+8Xzr1ff3tq813j7xmq1ea9U31wprTQ2HpTWGo21/Jk99Uedr9ZoPFh6ITbfKbeqzVa5ubV9p97YvN+6kz/X+051ZiSlAgD+m8tX3vttEhG7Lz+VT9E1loO6Gs63dIh7AU+WqUEO1kCAJ5rRvmBy9VWF542EX595XoDx6Pkw7/meix/2o/8hiN8Zwf+Vax/vv//fGM9wvujZh8n1eP3/rww9H8DoPXb//x+Gmw9g9Nrt5PiY/7OHSd3eGOWoxADAWRrgJ3zt7w2rEQKM1aMG8x7K9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwzlyMiG9FkpbyscDT7N+0VIp4OiIuxUxyd71WvRkRz8SViJiZy9aXxp1pAGBA6V+SYvyva4vPXzyeOpv8ay6fR8R3fvzmD99ZbrU2lrLtfz/cPncwfFjl6LgBxhUEAPr3p352yuvvSjHv+iD/cG9n5WA6wzye8MGXDgcfXdnf28mnTsp0tNvtdsR83pZY+EcS08Ux8xHxXERMDSH+7rsR8bFe5U/yvpFLxcin3fGjiP30SOOnH4qf5mmdefbyfXQIeYFJ8152/3m11/WXxtV83vv6n8/vUIPL73/zEQf3vv2u+NNFpKke8bNr/mq/MV741VdPbGwvdtLejXhuulf85DB+ckr85/uM//tPfOr7r5yS1v5JxLXoHb87VrlVf1Bubm3fWK8vr1XXqvcrldtLt2++dOvFSjnvoy4f9FSf9NeXrz9zWt6y8i+cEr/zzl84Vv7Zw2M/12f5f/rvt77x6aPVuePxv/DZ3u//s/m89+uf1Ymf7zP+8sLPTx2+O4u/ekr5H/X+X+8z/vt/3l7tc1cAYASaW9v3lmu16sZAC9mn0GGc58RClsX+dj5oLg4W9I+RLxy9LEkkMexyZY2xfnaeOatX9cwXpg/bisM44VRnYaE45YiLkw6pFIMtxKVi4eGogo7nfgSMztFFP+6cAAAAAAAAAAAAAAAApxnF3zCNu4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcX/8JAAD//7a0vsc=") syz_mount_image$exfat(0x0, &(0x7f0000000040)='./bus\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000140)='./file0\x00', 0x50c050, 0x0, 0x0, 0x0, &(0x7f0000000180)) stat(&(0x7f0000007d00)='./file0/file0\x00', 0x0) 716.796952ms ago: executing program 3 (id=1102): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x2000003, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6f6465636f6d706f7365008000000000000042000fc32c6e6f636172726965722c6e6f6465636e6d706f736500a580263e005a80c976898113cb9f4680642ce86dd3b5d3ba4a739e6654e4a1277ef2dd52ea98c5ea630da0c29cd73f8b9f4fd077e97f3ec1acc1ac9132611fb53a41b8fdb6b9"], 0x1, 0x62c, &(0x7f0000000cc0)="$eJzs3U9rHOcdB/DvrKS1pBRbduwmLoWKFEKpqa0/TqpCoWmaFlFCCfQSCDmIWoqF106QlKLkUNTSV9BXkFLUQ0499FQo5NBz34JKjoWefNGlbJnZWe3akqWV7WrXzucDs/M88/ydn2aGmRXLBPjKWn43Ezspsnzt7e0yv7e72Nprt9vtMrO72EpyLkkjmUxSlFv/muTLZCedJVe7BZlIUVU7wvvTzfufv3d1rZObrJeqXXHQ/rHt5MLYQaaRZObY6ieO1t23YjzJwgn9TSbXmyeO1xlzNsmleg1D1+7615HFT3heAgCjrEjGjto+k0zXN+vlc0Dnjr9zj51H3es/C3aGPQEAAAA4Axf2s5/tnB/2PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBZUr//v6iXRjc9m6L7/v9mvS11+pn2xbAnAAAAAAAAAABPwbf2s5/tnO/m20X1P/9Xqszl6vOFfJzNrGYj17OdlWxlKxuZTzLT11Fze2Vra2N+gJYLR7ZcOJv9BQAAAAAAAIDn1O+y3Pv/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjIIiGeusUownl7vpmTTGk0wmaZb1djrlzWHP93S+dmjLF0OZBwAAAJytC/vZz3bOd/Ptonrm/3r13D+Zj3MvW1nPVlpZza3qu4DOU39jb3extbe7eLdcev2N1esf/+dU06h6PGh+1MhzVY0rBy2W87P8Mtcym3eykfX8OivZympm81aVWkmRmfrbi5nuPA/Pt/TGA7l3Tprry9VMprKW9Wpu1/OrfJhWbqVR7UNV5/gRf1tGp/hRbcAY3arX5R79vF6PhpkqIhMHEZmrY19G4+LxkTjlcfLwSPNpHHwHdfn/EPPpel3G+q2RjvlC7+h7oa7yqEgkr/7pD/dvt+7dub22eW10dukxPRyJxb7z8KXjj4nnLBLNOhqdq+jprpavVG3PZz2/yIe5ldW8nptZykJey83M5wd5rS+uVwY41xqnO9e+/Z06MZHkp/V6NJRxvdgX1/4r3UxV1r+lF6VLT/+KNP6NOlEerG+O3BXp4kPX5m4kXjw+En9sl5+brXt3Nm6vfDTgeK/W6zICPxmpSJTHy6Xyj1XlHjw6yrIXjyybr8ouH5Q1DpVdOSg76Uxt1vdwh3qaWqjKXjpylMWq7OW+sqPucgAYedPfnW5O/Xvqn1OfTf1+6vbU25Nvnls6981mJv4x/rexvzT+3PhhkXyW3/Se/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMe3+cmnd1ZardWNExLdl60NULkYqMOvduKNsxmrMcjf6xlM/Lfdbo/ANI6NfPIU+um+R6u/aKrs+phW3fdhPeHoQ7ogAWfmxtbdj25sfvLp99bvrnyw+sHqvZtL3198/eb80tKNtfXW6lznc9izBACept5N/7BnAgAAAAAAAAAAAAAAPMppfhg8Odjv/w8lhr2PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA82353UzspMj83PW5Mr+3u9gql266V3MySVEm/p7ky2QnnSUzfd0Vjxrn/enm/c/fu7rW62uyW784rt1gHphL46E5PWl/C0/cX28PZ5NcqtcwdP8LAAD//wew8bU=") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) 643.961584ms ago: executing program 1 (id=1103): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 357.757341ms ago: executing program 3 (id=1104): shmget(0x2, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) 103.347637ms ago: executing program 3 (id=1105): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x206f) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) truncate(&(0x7f00000000c0)='./file0\x00', 0x3) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 0s ago: executing program 0 (id=1106): unshare(0x480) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) kernel console output (not intermixed with test programs): : ext4_validate_block_bitmap:438: comm syz.4.182: bg 0: block 34: padding at end of block bitmap is not set [ 106.757381][ T5003] Zero length message leads to an empty skb [ 106.783009][ T4980] Quota error (device loop4): write_blk: dquota write failed [ 106.831742][ T4980] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 106.929287][ T4980] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.182: Failed to acquire dquot type 1 [ 106.981353][ T5009] binder_alloc: 5005: binder_alloc_buf, no vma [ 107.060621][ T4980] EXT4-fs (loop4): 1 truncate cleaned up [ 107.127481][ T4980] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 107.161771][ T5011] kvm: pic: non byte write [ 107.203176][ T4980] EXT4-fs (loop4): unmounting filesystem. [ 108.115198][ T5016] VFS: Mount too revealing [ 108.168997][ T5029] loop1: detected capacity change from 0 to 512 [ 108.246514][ T5029] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 108.342034][ T5029] EXT4-fs (loop1): 1 truncate cleaned up [ 108.347830][ T5029] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 108.717162][ T5049] loop4: detected capacity change from 0 to 1024 [ 108.944897][ T5058] loop0: detected capacity change from 0 to 256 [ 108.958003][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 109.130373][ T4318] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 109.343024][ T4318] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.380264][ T4318] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 109.389282][ T4318] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 109.440463][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.468436][ T4318] usb 4-1: config 0 descriptor?? [ 109.531680][ T5068] loop4: detected capacity change from 0 to 1024 [ 109.683514][ T5068] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 109.729006][ T5077] loop0: detected capacity change from 0 to 256 [ 109.773383][ T4376] usb 4-1: USB disconnect, device number 2 [ 109.820383][ T5077] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 110.024872][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 110.292737][ T5083] loop2: detected capacity change from 0 to 512 [ 110.335584][ T5083] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 110.400309][ T5083] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 110.450299][ T5083] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 110.491782][ T5083] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 110.515357][ T5083] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0080] [ 110.533825][ T5083] EXT4-fs (loop2): orphan cleanup on readonly fs [ 110.555112][ T5083] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.212: bg 0: block 34: padding at end of block bitmap is not set [ 110.651278][ T5083] Quota error (device loop2): write_blk: dquota write failed [ 110.697225][ T5083] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 110.757946][ T5083] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.212: Failed to acquire dquot type 1 [ 110.786705][ T5083] EXT4-fs (loop2): 1 truncate cleaned up [ 110.805276][ T5083] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 110.817034][ T5083] EXT4-fs (loop2): unmounting filesystem. [ 111.169840][ T5095] loop2: detected capacity change from 0 to 512 [ 111.239278][ T5095] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.316066][ T5095] EXT4-fs (loop2): 1 truncate cleaned up [ 111.340612][ T5095] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 111.498129][ T5102] netlink: 'syz.0.219': attribute type 16 has an invalid length. [ 111.506035][ T4350] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 111.536405][ T5102] netlink: 'syz.0.219': attribute type 17 has an invalid length. [ 111.581028][ T5102] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 111.720332][ T4350] usb 5-1: Using ep0 maxpacket: 32 [ 111.733765][ T4350] usb 5-1: unable to get BOS descriptor or descriptor too short [ 111.748029][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 111.774024][ T5113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.785263][ T4350] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 111.810325][ T4350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.822433][ T5113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.841958][ T4350] usb 5-1: Product: syz [ 111.846173][ T4350] usb 5-1: Manufacturer: syz [ 111.862965][ T4350] usb 5-1: SerialNumber: syz [ 111.909259][ T5112] loop3: detected capacity change from 0 to 512 [ 111.951687][ T5112] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.067147][ T5112] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 112.091609][ T4350] usb 5-1: unit 4 not found! [ 112.106822][ T4350] usb 5-1: unit 0 not found! [ 112.167894][ T5112] EXT4-fs (loop3): 1 truncate cleaned up [ 112.178272][ T5112] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 112.215340][ T5112] EXT4-fs (loop3): shut down requested (2) [ 112.261527][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 112.308230][ T5117] loop2: detected capacity change from 0 to 512 [ 112.347516][ T5117] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.401257][ T5117] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 112.458715][ T5123] loop0: detected capacity change from 0 to 256 [ 112.468108][ T5117] EXT4-fs (loop2): 1 truncate cleaned up [ 112.474414][ T5117] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 112.500775][ T5117] EXT4-fs (loop2): shut down requested (2) [ 112.510582][ T4350] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 112.604635][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 112.671829][ T4350] usb 5-1: unit 4 not found! [ 112.676509][ T4350] usb 5-1: unit 0 not found! [ 112.685238][ T4350] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 112.695219][ T4350] usb 5-1: unit 4 not found! [ 112.719482][ T4350] usb 5-1: unit 0 not found! [ 112.876608][ T5126] netlink: 44 bytes leftover after parsing attributes in process `syz.0.223'. [ 113.002220][ T5125] netlink: 140 bytes leftover after parsing attributes in process `syz.0.223'. [ 113.011328][ T5125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.223'. [ 113.469323][ T4350] snd-usb-audio: probe of 5-1:1.2 failed with error -22 [ 113.497183][ T4350] usb 5-1: USB disconnect, device number 3 [ 113.761111][ T5131] loop4: detected capacity change from 0 to 4096 [ 113.784011][ T5132] loop2: detected capacity change from 0 to 4096 [ 113.788806][ T5131] EXT4-fs: inline encryption not supported [ 113.802162][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.825932][ T5131] EXT4-fs (loop4): Test dummy encryption mode enabled [ 113.851367][ T5132] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 113.854195][ T5131] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 113.868530][ T5131] System zones: 0-5 [ 113.890335][ T5131] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 113.911887][ T5132] EXT4-fs (loop2): shut down requested (2) [ 113.935157][ T5132] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #2: comm syz.2.227: directory missing '.' [ 113.963564][ T5131] EXT4-fs: Cannot change quota options when quota turned on [ 114.123646][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 114.250887][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 114.319156][ T5144] loop0: detected capacity change from 0 to 8 [ 114.657767][ T5155] loop0: detected capacity change from 0 to 512 [ 114.698521][ T5156] loop2: detected capacity change from 0 to 2048 [ 114.722398][ T5155] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 114.778384][ T5156] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.983903][ T5165] loop1: detected capacity change from 0 to 256 [ 115.814387][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 115.916673][ T5172] loop1: detected capacity change from 0 to 8 [ 116.033533][ T4315] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 116.057003][ T5178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.070556][ T5178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.096904][ T5172] SQUASHFS error: Unable to read directory block [631:26] [ 116.230561][ T4315] usb 5-1: Using ep0 maxpacket: 32 [ 116.244272][ T4315] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 116.254589][ T4315] usb 5-1: config 0 has no interface number 0 [ 116.264847][ T4315] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.276191][ T4315] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 116.290361][ T4315] usb 5-1: config 0 interface 85 has no altsetting 0 [ 116.309136][ T5184] loop2: detected capacity change from 0 to 512 [ 116.324666][ T4315] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 116.349757][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.358807][ T4315] usb 5-1: Product: syz [ 116.367412][ T4315] usb 5-1: Manufacturer: syz [ 116.372369][ T4315] usb 5-1: SerialNumber: syz [ 116.485275][ T4315] usb 5-1: config 0 descriptor?? [ 116.511998][ T5184] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 116.521892][ T5184] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.602090][ T5184] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz.2.246: Directory hole found for htree leaf block 0 [ 116.646966][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 116.674727][ T5188] loop1: detected capacity change from 0 to 1024 [ 116.918536][ T4315] appletouch 5-1:0.85: Failed to request geyser raw mode [ 116.934573][ T4315] appletouch: probe of 5-1:0.85 failed with error -5 [ 116.954732][ T4315] usb 5-1: USB disconnect, device number 4 [ 117.013063][ T5194] loop0: detected capacity change from 0 to 1024 [ 117.192871][ T5199] EXT4-fs: Ignoring removed nobh option [ 117.415384][ T5199] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 117.545663][ T5199] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.862703][ T5199] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz.2.252: Directory hole found for htree leaf block 0 [ 117.948333][ T11] hfsplus: b-tree write err: -5, ino 25 [ 117.964717][ T11] hfsplus: b-tree write err: -5, ino 4 [ 117.995251][ T11] hfsplus: b-tree write err: -5, ino 2 [ 118.011387][ T11] hfsplus: b-tree write err: -5, ino 26 [ 118.103968][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 118.116665][ T5209] erofs: (device loop0): mounted with root inode @ nid 36. [ 118.485195][ T5224] netlink: 104 bytes leftover after parsing attributes in process `syz.1.261'. [ 119.542499][ T5233] netlink: 44 bytes leftover after parsing attributes in process `syz.4.262'. [ 119.888721][ T5233] netlink: 140 bytes leftover after parsing attributes in process `syz.4.262'. [ 119.898058][ T5233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.262'. [ 120.517204][ T5250] set_capacity_and_notify: 3 callbacks suppressed [ 120.518716][ T5250] loop4: detected capacity change from 0 to 8 [ 121.248810][ T5256] loop0: detected capacity change from 0 to 1024 [ 121.425578][ T5250] SQUASHFS error: Unable to read directory block [631:26] [ 121.470256][ C1] sched: RT throttling activated [ 122.031976][ T5273] loop2: detected capacity change from 0 to 128 [ 122.219627][ T5273] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 122.241949][ T5273] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.477721][ T5282] loop3: detected capacity change from 0 to 256 [ 124.391176][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 124.765800][ T5301] netlink: 44 bytes leftover after parsing attributes in process `syz.3.281'. [ 125.136355][ T5300] netlink: 140 bytes leftover after parsing attributes in process `syz.3.281'. [ 125.145486][ T5300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.281'. [ 125.539484][ T5305] loop4: detected capacity change from 0 to 128 [ 125.600157][ T5307] device bridge1 entered promiscuous mode [ 125.665228][ T5305] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 125.766089][ T5305] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 125.912428][ T5318] loop2: detected capacity change from 0 to 512 [ 126.029847][ T5318] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 126.040417][ T5318] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.050627][ T5305] fscrypt (loop4, inode 12): Error allocating 'adiantum(xchacha12,aes)' transform: -4 [ 127.093014][ T5320] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 127.556218][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 127.865099][ T5345] netlink: 440 bytes leftover after parsing attributes in process `syz.1.301'. [ 127.894789][ T5345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.301'. [ 127.909134][ T5345] netlink: 16 bytes leftover after parsing attributes in process `syz.1.301'. [ 127.925670][ T5345] netlink: 16 bytes leftover after parsing attributes in process `syz.1.301'. [ 128.507367][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 128.726079][ T5361] device bridge1 entered promiscuous mode [ 128.771857][ T5365] loop0: detected capacity change from 0 to 512 [ 128.784905][ T5365] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 128.836643][ T5365] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 128.845708][ T5365] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.084813][ T5381] loop3: detected capacity change from 0 to 1024 [ 130.135376][ T5381] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 130.360654][ T22] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 130.429395][ T5389] loop4: detected capacity change from 0 to 512 [ 130.491912][ T5389] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 130.510392][ T5389] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.570885][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 130.577902][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.593678][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.603973][ T22] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 130.617541][ T22] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 130.626690][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.691987][ T22] usb 3-1: config 0 descriptor?? [ 131.168204][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 131.550676][ T22] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 131.557948][ T22] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 131.566544][ T22] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 131.575437][ T22] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 131.584247][ T22] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 131.595751][ T22] microsoft 0003:045E:07DA.0003: no inputs found [ 131.602280][ T22] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 131.635567][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 131.815203][ T14] usb 3-1: USB disconnect, device number 3 [ 131.868554][ T5407] fido_id[5407]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 132.520653][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.527026][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.710920][ T5423] loop0: detected capacity change from 0 to 164 [ 132.820956][ T5425] device bridge1 entered promiscuous mode [ 133.694269][ T5442] loop4: detected capacity change from 0 to 512 [ 133.717110][ T5442] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 133.751564][ T5442] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 133.760752][ T5442] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.022934][ T5453] loop3: detected capacity change from 0 to 512 [ 134.331335][ T5453] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 134.828837][ T5453] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.043508][ T5462] loop2: detected capacity change from 0 to 256 [ 135.308672][ T5462] exfat: Deprecated parameter 'utf8' [ 135.667669][ T5462] exfat: Deprecated parameter 'namecase' [ 135.673889][ T5462] exfat: Deprecated parameter 'utf8' [ 135.715064][ T5462] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x57b86610, utbl_chksum : 0xe619d30d) [ 135.868382][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 135.976189][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 136.021010][ T5462] syz.2.338: attempt to access beyond end of device [ 136.021010][ T5462] loop2: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 136.100837][ T5462] syz.2.338: attempt to access beyond end of device [ 136.100837][ T5462] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 136.116207][ T27] audit: type=1804 audit(1785077292.439:5): pid=5472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.338" name="/newroot/72/file0/file1" dev="loop2" ino=1048606 res=1 errno=0 [ 136.182781][ T27] audit: type=1800 audit(1785077292.509:6): pid=5462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.338" name="file1" dev="loop2" ino=1048606 res=0 errno=0 [ 136.270769][ T5472] syz.2.338: attempt to access beyond end of device [ 136.270769][ T5472] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 136.360543][ T27] audit: type=1800 audit(1785077292.689:7): pid=5472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.338" name="file1" dev="loop2" ino=1048606 res=0 errno=0 [ 136.368228][ T5481] loop4: detected capacity change from 0 to 4096 [ 136.774769][ T5484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.956343][ T5484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.982118][ T5481] EXT4-fs: Ignoring removed orlov option [ 137.021896][ T5481] EXT4-fs (loop4): Test dummy encryption mode enabled [ 137.075814][ T5481] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 137.343157][ T5481] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 137.360282][ T4316] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 137.560182][ T4316] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 137.568673][ T4316] usb 4-1: config 127 has no interface number 0 [ 137.587568][ T4316] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 137.642544][ T4316] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 137.651907][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.660007][ T4316] usb 4-1: Product: syz [ 137.664687][ T4316] usb 4-1: Manufacturer: syz [ 137.669365][ T4316] usb 4-1: SerialNumber: syz [ 137.689365][ T5486] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 137.696650][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 137.892934][ T5506] overlayfs: unrecognized mount option "9p=û\}" or missing value [ 137.903405][ T5507] loop2: detected capacity change from 0 to 512 [ 137.917011][ T5507] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 137.952686][ T4316] asix: probe of 4-1:127.57 failed with error -71 [ 137.977451][ T5507] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 137.986673][ T5507] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.046019][ T4316] usb 4-1: USB disconnect, device number 3 [ 138.205172][ T5512] loop0: detected capacity change from 0 to 512 [ 138.288312][ T5512] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.501312][ T5512] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 140.191053][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 140.296353][ T5535] loop2: detected capacity change from 0 to 164 [ 140.325581][ T5535] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 140.348485][ T5535] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 140.366667][ T5535] rock: directory entry would overflow storage [ 140.373378][ T5535] rock: sig=0x4f50, size=4, remaining=3 [ 140.379026][ T5535] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 140.784034][ T5543] device syzkaller0 entered promiscuous mode [ 142.067340][ T5563] loop4: detected capacity change from 0 to 1024 [ 142.108646][ T5563] hfsplus: catalog record size mismatch (type 2, got 88, expected 248) [ 142.175260][ T5566] loop3: detected capacity change from 0 to 512 [ 142.196603][ T5567] loop2: detected capacity change from 0 to 256 [ 142.232354][ T5566] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 142.269975][ T5567] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 142.311164][ T5566] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 142.337229][ T27] audit: type=1800 audit(1785077298.659:8): pid=5567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.376" name="file1" dev="loop2" ino=1048607 res=0 errno=0 [ 142.383260][ T5566] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 142.450504][ T5566] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 142.480443][ T5566] System zones: 0-2, 18-18, 34-35 [ 142.502779][ T5566] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 142.582680][ T5566] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 3: comm syz.3.377: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 142.680528][ T5566] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 142.921375][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 143.125515][ T5591] loop2: detected capacity change from 0 to 512 [ 143.390619][ T5591] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 143.399604][ T5591] ext4 filesystem being mounted at /82/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.287973][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 144.402455][ T5610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.440700][ T5610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.451277][ T5615] loop2: detected capacity change from 0 to 1024 [ 144.463197][ T5616] loop4: detected capacity change from 0 to 512 [ 144.592026][ T5616] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 144.634540][ T5616] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.876398][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 144.967298][ T5630] loop3: detected capacity change from 0 to 256 [ 145.125133][ T5630] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 146.522199][ T5641] loop4: detected capacity change from 0 to 512 [ 146.533685][ T5641] EXT4-fs error (device loop4): __ext4_iget:5102: inode #11: block 1: comm syz.4.402: invalid block [ 146.545056][ T5641] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.402: couldn't read orphan inode 11 (err -117) [ 146.557486][ T5641] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 146.976072][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 147.189109][ T5662] loop3: detected capacity change from 0 to 164 [ 147.232611][ T5662] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 147.267195][ T5662] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 148.235517][ T5674] loop3: detected capacity change from 0 to 1024 [ 148.685245][ T5685] loop3: detected capacity change from 0 to 256 [ 148.769322][ T5685] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 148.939378][ T5691] loop2: detected capacity change from 0 to 2048 [ 149.016586][ T5693] loop0: detected capacity change from 0 to 512 [ 149.038888][ T5691] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.082877][ T5693] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 149.141234][ T5697] loop3: detected capacity change from 0 to 512 [ 149.288787][ T5693] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.421: invalid indirect mapped block 9 (level 0) [ 149.352922][ T5693] EXT4-fs (loop0): 1 truncate cleaned up [ 149.358640][ T5693] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 149.385302][ T5697] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 149.841371][ T5693] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.0.421: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 150.004691][ T5705] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.422: Invalid inode table block 4294967294 in block_group 0 [ 150.048015][ T5693] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem [ 150.077423][ T5693] EXT4-fs warning (device loop0): ext4_rename_delete:3778: inode #2: comm syz.0.421: Deleting old file: nlink 6, error=-117 [ 150.270085][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 150.281576][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 150.326153][ T4279] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 4294967294 in block_group 0 [ 150.374252][ T4279] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 150.414705][ T4279] EXT4-fs error (device loop3): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 150.462980][ T5722] loop0: detected capacity change from 0 to 128 [ 150.467238][ T4279] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 4294967294 in block_group 0 [ 150.530305][ T4279] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 150.550092][ T4279] EXT4-fs error (device loop3): ext4_quota_off:7147: inode #4: comm syz-executor: mark_inode_dirty error [ 150.923856][ T5737] loop3: detected capacity change from 0 to 2048 [ 150.977919][ T5737] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.008047][ T5739] loop4: detected capacity change from 0 to 1024 [ 151.114391][ T27] audit: type=1800 audit(1785077307.439:9): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.436" name="file1" dev="loop4" ino=2 res=0 errno=0 [ 152.069515][ T5756] loop2: detected capacity change from 0 to 736 [ 152.079220][ T5750] xt_CT: No such helper "pptp" [ 152.298717][ T5762] loop3: detected capacity change from 0 to 512 [ 152.696493][ T5777] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 152.906398][ T5785] FAT-fs (loop4): Directory bread(block 32) failed [ 152.942561][ T5785] FAT-fs (loop4): Directory bread(block 33) failed [ 152.976760][ T5785] FAT-fs (loop4): Directory bread(block 34) failed [ 153.010309][ T5785] FAT-fs (loop4): Directory bread(block 35) failed [ 153.027229][ T5785] FAT-fs (loop4): Directory bread(block 36) failed [ 153.047314][ T5785] FAT-fs (loop4): Directory bread(block 37) failed [ 153.057491][ T5785] FAT-fs (loop4): Directory bread(block 38) failed [ 153.070786][ T5785] FAT-fs (loop4): Directory bread(block 39) failed [ 153.088350][ T5785] FAT-fs (loop4): Directory bread(block 40) failed [ 153.108606][ T5785] FAT-fs (loop4): Directory bread(block 41) failed [ 153.426214][ T5794] set_capacity_and_notify: 2 callbacks suppressed [ 153.426228][ T5794] loop0: detected capacity change from 0 to 512 [ 153.529884][ T5796] syz.4.454: attempt to access beyond end of device [ 153.529884][ T5796] loop4: rw=524288, sector=4108, nr_sectors = 4 limit=128 [ 153.545362][ T5796] syz.4.454: attempt to access beyond end of device [ 153.545362][ T5796] loop4: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 153.564653][ T5796] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 153.581462][ T5796] FAT-fs (loop4): Filesystem has been set read-only [ 153.588534][ T27] audit: type=1800 audit(1785077309.879:10): pid=5796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.454" name="file1" dev="loop4" ino=1048612 res=0 errno=0 [ 153.778932][ T5794] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 153.810959][ T27] audit: type=1800 audit(1785077310.069:11): pid=5777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.451" name="file1" dev="loop3" ino=94 res=0 errno=0 [ 154.354079][ T5814] loop3: detected capacity change from 0 to 128 [ 155.192342][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 156.366092][ T5851] loop0: detected capacity change from 0 to 16 [ 156.376395][ T5851] erofs: (device loop0): mounted with root inode @ nid 36. [ 157.254255][ T5860] loop4: detected capacity change from 0 to 256 [ 157.298219][ T5860] exfat: Deprecated parameter 'namecase' [ 157.306471][ T5860] exfat: Deprecated parameter 'namecase' [ 157.361600][ T5860] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 157.396554][ T5864] loop3: detected capacity change from 0 to 512 [ 157.409144][ T5863] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 157.444463][ T5860] syz.4.477: attempt to access beyond end of device [ 157.444463][ T5860] loop4: rw=524288, sector=34225520824, nr_sectors = 1 limit=256 [ 157.466527][ T5864] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.479: invalid indirect mapped block 256 (level 2) [ 157.492496][ T5864] EXT4-fs (loop3): Remounting filesystem read-only [ 157.499302][ T5864] EXT4-fs (loop3): 2 truncates cleaned up [ 157.510268][ T4314] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 157.521350][ T5860] syz.4.477: attempt to access beyond end of device [ 157.521350][ T5860] loop4: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 157.535652][ T27] audit: type=1800 audit(1785077313.859:12): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.477" name="file1" dev="loop4" ino=1048614 res=0 errno=0 [ 157.590416][ T5864] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 157.663714][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 157.720455][ T4314] usb 3-1: Using ep0 maxpacket: 16 [ 157.751489][ T4314] usb 3-1: unable to get BOS descriptor or descriptor too short [ 157.775554][ T4314] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 157.790246][ T4314] usb 3-1: can't read configurations, error -71 [ 159.254510][ T5901] loop3: detected capacity change from 0 to 128 [ 159.319989][ T5901] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 159.366995][ T5901] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.658520][ T5913] netlink: 'syz.4.498': attribute type 16 has an invalid length. [ 159.708379][ T5913] netlink: 'syz.4.498': attribute type 17 has an invalid length. [ 159.745844][ T5913] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 160.003843][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 161.330387][ T22] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 161.358330][ T5952] process 'syz.2.512' launched './file0' with NULL argv: empty string added [ 161.446470][ T5959] loop0: detected capacity change from 0 to 128 [ 161.673168][ T22] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.687320][ T22] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.722122][ T22] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.752587][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.779127][ T22] usb 4-1: Product: syz [ 161.793826][ T22] usb 4-1: Manufacturer: syz [ 161.812846][ T22] usb 4-1: SerialNumber: syz [ 162.861127][ T5981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.885864][ T5981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.989955][ T5977] loop2: detected capacity change from 0 to 8192 [ 163.000994][ T22] cdc_ncm 4-1:1.0: bind() failure [ 163.011407][ T22] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 163.018726][ T22] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 163.032207][ T22] usbtest: probe of 4-1:1.1 failed with error -71 [ 163.042034][ T22] usb 4-1: USB disconnect, device number 4 [ 163.324235][ T5977] loop2: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 163.337289][ T5977] loop2: p1 start 524288 is beyond EOD, [ 163.780682][ T4314] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 163.819159][ T5977] truncated [ 163.825022][ T5977] loop2: p2 size 16128 extends beyond EOD, truncated [ 163.868723][ T5977] loop2: p5 start 524288 is beyond EOD, truncated [ 163.876235][ T5977] loop2: p6 size 16128 extends beyond EOD, truncated [ 163.892244][ T5977] loop2: p7 start 524288 is beyond EOD, truncated [ 163.900817][ T5977] loop2: p8 size 16128 extends beyond EOD, truncated [ 163.918385][ T5977] loop2: p9 start 524288 is beyond EOD, truncated [ 163.931539][ T5977] loop2: p10 size 16128 extends beyond EOD, truncated [ 163.949783][ T5977] loop2: p11 start 524288 is beyond EOD, truncated [ 163.957247][ T5977] loop2: p12 size 16128 extends beyond EOD, truncated [ 163.981072][ T4314] usb 5-1: Using ep0 maxpacket: 16 [ 163.999492][ T4314] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.010631][ T5977] loop2: p13 start 524288 is beyond EOD, truncated [ 164.010674][ T5977] loop2: p14 size 16128 extends beyond EOD, truncated [ 164.013421][ T5977] loop2: p15 start 524288 is beyond EOD, [ 164.040686][ T4314] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 164.051311][ T5977] truncated [ 164.069419][ T5977] loop2: p16 size 16128 extends beyond EOD, truncated [ 164.086868][ T5977] loop2: p17 start 524288 is beyond EOD, truncated [ 164.089881][ T4314] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.102797][ T5977] loop2: p18 size 16128 extends beyond EOD, truncated [ 164.118073][ T5977] loop2: p19 start 524288 is beyond EOD, truncated [ 164.131913][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.139936][ T4314] usb 5-1: Product: syz [ 164.154495][ T5977] loop2: p20 size 16128 extends beyond EOD, truncated [ 164.161580][ T4314] usb 5-1: Manufacturer: syz [ 164.166983][ T4314] usb 5-1: SerialNumber: syz [ 164.177694][ T5977] loop2: p21 start 524288 is beyond EOD, truncated [ 164.194730][ T5977] loop2: p22 size 16128 extends beyond EOD, truncated [ 164.204477][ T5977] loop2: p23 start 524288 is beyond EOD, truncated [ 164.211410][ T5977] loop2: p24 size 16128 extends beyond EOD, truncated [ 164.219499][ T5977] loop2: p25 start 524288 is beyond EOD, truncated [ 164.226501][ T5977] loop2: p26 size 16128 extends beyond EOD, truncated [ 164.235646][ T5977] loop2: p27 start 524288 is beyond EOD, truncated [ 164.242577][ T4315] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 164.256152][ T5995] loop0: detected capacity change from 0 to 512 [ 164.265763][ T5977] loop2: p28 size 16128 extends beyond EOD, truncated [ 164.276016][ T5977] loop2: p29 start 524288 is beyond EOD, truncated [ 164.286952][ T5977] loop2: p30 size 16128 extends beyond EOD, truncated [ 164.301342][ T5995] EXT4-fs: Ignoring removed i_version option [ 164.318624][ T5995] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 164.332388][ T5977] loop2: p31 start 524288 is beyond EOD, truncated [ 164.359503][ T5977] loop2: p32 size 16128 extends beyond EOD, truncated [ 164.374930][ T5977] loop2: p33 start 524288 is beyond EOD, truncated [ 164.384871][ T5977] loop2: p34 size 16128 extends beyond EOD, truncated [ 164.396190][ T5977] loop2: p35 start 524288 is beyond EOD, truncated [ 164.406211][ T5977] loop2: p36 size 16128 extends beyond EOD, truncated [ 164.417674][ T5977] loop2: p37 start 524288 is beyond EOD, truncated [ 164.424629][ T5977] loop2: p38 size 16128 extends beyond EOD, truncated [ 164.433149][ T5977] loop2: p39 start 524288 is beyond EOD, truncated [ 164.439691][ T5977] loop2: p40 size 16128 extends beyond EOD, truncated [ 164.447785][ T5977] loop2: p41 start 524288 is beyond EOD, truncated [ 164.456346][ T5977] loop2: p42 size 16128 extends beyond EOD, truncated [ 164.459817][ T5995] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 164.469670][ T4315] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 164.484252][ T5977] loop2: p43 start 524288 is beyond EOD, truncated [ 164.491204][ T4315] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 164.502632][ T5995] ext4 filesystem being mounted at /97/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.503053][ T5977] loop2: p44 size 16128 extends beyond EOD, [ 164.514604][ T4315] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 164.530652][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.538685][ T4315] usb 4-1: Product: syz [ 164.543365][ T4315] usb 4-1: Manufacturer: syz [ 164.547995][ T4315] usb 4-1: SerialNumber: syz [ 164.554062][ T5977] truncated [ 164.555833][ T4315] usb 4-1: config 0 descriptor?? [ 164.570723][ T5991] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 164.580724][ T5977] loop2: p45 start 524288 is beyond EOD, truncated [ 164.587297][ T5977] loop2: p46 size 16128 extends beyond EOD, truncated [ 164.596233][ T5991] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 164.638267][ T5977] loop2: p47 start 524288 is beyond EOD, truncated [ 164.656393][ T5995] EXT4-fs error (device loop0): ext4_dx_csum_verify:502: inode #2: comm syz.0.528: dir seems corrupt? Run e2fsck -D. [ 164.673375][ T4502] udevd[4502]: incorrect ext4 checksum on /dev/loop0 [ 164.680591][ T5977] loop2: p48 size 16128 extends beyond EOD, truncated [ 164.695273][ T5977] loop2: p49 start 524288 is beyond EOD, truncated [ 164.708756][ T5995] EXT4-fs (loop0): Remounting filesystem read-only [ 164.720059][ T5977] loop2: p50 size 16128 extends beyond EOD, truncated [ 164.729493][ T5995] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.528: Directory index failed checksum [ 164.750795][ T5977] loop2: p51 start 524288 is beyond EOD, truncated [ 164.757366][ T5977] loop2: p52 size 16128 extends beyond EOD, truncated [ 164.771957][ T5977] loop2: p53 start 524288 is beyond EOD, truncated [ 164.778956][ T5995] EXT4-fs (loop0): Remounting filesystem read-only [ 164.793009][ T5977] loop2: p54 size 16128 extends beyond EOD, truncated [ 164.802809][ T5999] EXT4-fs error (device loop0): ext4_dx_csum_verify:502: inode #2: comm syz.0.528: dir seems corrupt? Run e2fsck -D. [ 164.816308][ T5977] loop2: p55 start 524288 is beyond EOD, truncated [ 164.831291][ T5977] loop2: p56 size 16128 extends beyond EOD, truncated [ 164.845851][ T5999] EXT4-fs (loop0): Remounting filesystem read-only [ 164.853070][ T5991] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 164.856099][ T5977] loop2: p57 start 524288 is beyond EOD, truncated [ 164.867401][ T5999] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.528: Directory index failed checksum [ 164.878804][ T5991] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 164.892324][ T5977] loop2: p58 size 16128 extends beyond EOD, truncated [ 164.900683][ T5977] loop2: p59 start 524288 is beyond EOD, truncated [ 164.907885][ T5977] loop2: p60 size 16128 extends beyond EOD, truncated [ 164.916294][ T5999] EXT4-fs (loop0): Remounting filesystem read-only [ 164.928037][ T6000] EXT4-fs error (device loop0): ext4_dx_csum_verify:502: inode #2: comm syz.0.528: dir seems corrupt? Run e2fsck -D. [ 164.941024][ T5977] loop2: p61 start 524288 is beyond EOD, truncated [ 164.947592][ T5977] loop2: p62 size 16128 extends beyond EOD, truncated [ 164.974232][ T5977] loop2: p63 start 524288 is beyond EOD, truncated [ 164.975679][ T6000] EXT4-fs (loop0): Remounting filesystem read-only [ 165.000555][ T5977] loop2: p64 size 16128 extends beyond EOD, truncated [ 165.004128][ T6000] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.528: Directory index failed checksum [ 165.024705][ T5977] loop2: p65 start 524288 is beyond EOD, truncated [ 165.033436][ T5977] loop2: p66 size 16128 extends beyond EOD, truncated [ 165.046280][ T6000] EXT4-fs (loop0): Remounting filesystem read-only [ 165.054631][ T5995] EXT4-fs error (device loop0): ext4_dx_csum_verify:502: inode #2: comm syz.0.528: dir seems corrupt? Run e2fsck -D. [ 165.067480][ T5977] loop2: p67 start 524288 is beyond EOD, truncated [ 165.089237][ T5977] loop2: p68 size 16128 extends beyond EOD, truncated [ 165.099026][ T5977] loop2: p69 start 524288 is beyond EOD, truncated [ 165.109892][ T5995] EXT4-fs (loop0): Remounting filesystem read-only [ 165.118653][ T5977] loop2: p70 size 16128 extends beyond EOD, truncated [ 165.131901][ T5995] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.528: Directory index failed checksum [ 165.147864][ T5977] loop2: p71 start 524288 is beyond EOD, truncated [ 165.156909][ T5995] EXT4-fs (loop0): Remounting filesystem read-only [ 165.167140][ T5977] loop2: p72 size 16128 extends beyond EOD, truncated [ 165.177738][ T5999] EXT4-fs error (device loop0): ext4_dx_csum_verify:502: inode #2: comm syz.0.528: dir seems corrupt? Run e2fsck -D. [ 165.178332][ T5977] loop2: p73 start 524288 is beyond EOD, truncated [ 165.218940][ T5977] loop2: p74 size 16128 extends beyond EOD, truncated [ 165.227293][ T5999] EXT4-fs (loop0): Remounting filesystem read-only [ 165.234169][ T5999] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.528: Directory index failed checksum [ 165.245875][ T5977] loop2: p75 start 524288 is beyond EOD, truncated [ 165.257814][ T5977] loop2: p76 size 16128 extends beyond EOD, truncated [ 165.268600][ T5977] loop2: p77 start 524288 is beyond EOD, truncated [ 165.287412][ T5977] loop2: p78 size 16128 extends beyond EOD, truncated [ 165.304590][ T4315] Error reading MAC address [ 165.308801][ T5977] loop2: p79 start 524288 is beyond EOD, truncated [ 165.324892][ T5977] loop2: p80 size 16128 extends beyond EOD, truncated [ 165.351491][ T5977] loop2: p81 start 524288 is beyond EOD, truncated [ 165.368539][ T5977] loop2: p82 size 16128 extends beyond EOD, truncated [ 165.377413][ T5977] loop2: p83 start 524288 is beyond EOD, truncated [ 165.390706][ T5977] loop2: p84 size 16128 extends beyond EOD, truncated [ 165.411300][ T5977] loop2: p85 start 524288 is beyond EOD, truncated [ 165.417889][ T5977] loop2: p86 size 16128 extends beyond EOD, truncated [ 165.427183][ T4314] cdc_ncm 5-1:1.0: bind() failure [ 165.446183][ T4314] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 165.458310][ T5977] loop2: p87 start 524288 is beyond EOD, truncated [ 165.465607][ T4314] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 165.480289][ T5977] loop2: p88 size 16128 extends beyond EOD, truncated [ 165.490456][ T4314] usbtest: probe of 5-1:1.1 failed with error -71 [ 165.503096][ T5977] loop2: p89 start 524288 is beyond EOD, truncated [ 165.530411][ T4314] usb 5-1: USB disconnect, device number 5 [ 165.543149][ T5977] loop2: p90 size 16128 extends beyond EOD, truncated [ 165.561798][ T5977] loop2: p91 start 524288 is beyond EOD, truncated [ 165.568345][ T5977] loop2: p92 size 16128 extends beyond EOD, truncated [ 165.596093][ T5977] loop2: p93 start 524288 is beyond EOD, truncated [ 165.610360][ T5977] loop2: p94 size 16128 extends beyond EOD, truncated [ 165.620843][ T5977] loop2: p95 start 524288 is beyond EOD, truncated [ 165.637754][ T5977] loop2: p96 size 16128 extends beyond EOD, truncated [ 165.655292][ T5977] loop2: p97 start 524288 is beyond EOD, truncated [ 165.664106][ T5977] loop2: p98 size 16128 extends beyond EOD, truncated [ 165.684925][ T5977] loop2: p99 start 524288 is beyond EOD, truncated [ 165.697185][ T5977] loop2: p100 size 16128 extends beyond EOD, truncated [ 165.724651][ T5977] loop2: p101 start 524288 is beyond EOD, truncated [ 165.744765][ T5977] loop2: p102 size 16128 extends beyond EOD, truncated [ 165.755935][ T5977] loop2: p103 start 524288 is beyond EOD, truncated [ 165.769035][ T5977] loop2: p104 size 16128 extends beyond EOD, truncated [ 165.846068][ T5977] loop2: p105 start 524288 is beyond EOD, truncated [ 165.855999][ T5977] loop2: p106 size 16128 extends beyond EOD, truncated [ 165.873442][ T5977] loop2: p107 start 524288 is beyond EOD, truncated [ 165.888118][ T5977] loop2: p108 size 16128 extends beyond EOD, truncated [ 165.904914][ T5977] loop2: p109 start 524288 is beyond EOD, truncated [ 165.918929][ T5977] loop2: p110 size 16128 extends beyond EOD, truncated [ 165.969255][ T5977] loop2: p111 start 524288 is beyond EOD, truncated [ 165.987199][ T5977] loop2: p112 size 16128 extends beyond EOD, truncated [ 166.010314][ T4314] usb 4-1: USB disconnect, device number 5 [ 166.245277][ T5977] loop2: p113 start 524288 is beyond EOD, truncated [ 166.409077][ T5977] loop2: p114 size 16128 extends beyond EOD, truncated [ 166.605996][ T5977] loop2: p115 start 524288 is beyond EOD, truncated [ 166.666464][ T5977] loop2: p116 size 16128 extends beyond EOD, truncated [ 166.683384][ T6014] loop4: detected capacity change from 0 to 128 [ 166.708595][ T5977] loop2: p117 start 524288 is beyond EOD, truncated [ 166.734780][ T6014] UDF-fs: bad mount option "0xffffffffffffffff00000000000000000000" or missing value [ 166.780462][ T5977] loop2: p118 size 16128 extends beyond EOD, truncated [ 166.790597][ T5977] loop2: p119 start 524288 is beyond EOD, truncated [ 166.800435][ T5977] loop2: p120 size 16128 extends beyond EOD, truncated [ 166.820470][ T5977] loop2: p121 start 524288 is beyond EOD, truncated [ 166.827118][ T5977] loop2: p122 size 16128 extends beyond EOD, truncated [ 166.835362][ T5977] loop2: p123 start 524288 is beyond EOD, truncated [ 166.860346][ T5977] loop2: p124 size 16128 extends beyond EOD, truncated [ 166.876223][ T5977] loop2: p125 start 524288 is beyond EOD, truncated [ 166.910265][ T5977] loop2: p126 size 16128 extends beyond EOD, truncated [ 166.930439][ T5977] loop2: p127 start 524288 is beyond EOD, truncated [ 166.950321][ T5977] loop2: p128 size 16128 extends beyond EOD, truncated [ 166.996214][ T5977] loop2: p129 start 524288 is beyond EOD, truncated [ 167.010268][ T5977] loop2: p130 size 16128 extends beyond EOD, truncated [ 167.030471][ T5977] loop2: p131 start 524288 is beyond EOD, truncated [ 167.055231][ T6020] loop3: detected capacity change from 0 to 512 [ 167.061688][ T5977] loop2: p132 size 16128 extends beyond EOD, truncated [ 167.080452][ T5977] loop2: p133 start 524288 is beyond EOD, truncated [ 167.100351][ T5977] loop2: p134 size 16128 extends beyond EOD, truncated [ 167.121294][ T5977] loop2: p135 start 524288 is beyond EOD, truncated [ 167.141464][ T6020] ext4: Unknown parameter 'subj_role' [ 167.147217][ T5977] loop2: p136 size 16128 extends beyond EOD, truncated [ 167.181276][ T5977] loop2: p137 start 524288 is beyond EOD, truncated [ 167.187929][ T5977] loop2: p138 size 16128 extends beyond EOD, truncated [ 167.241000][ T4489] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 167.324692][ T5977] loop2: p139 start 524288 is beyond EOD, truncated [ 167.334286][ T5977] loop2: p140 size 16128 extends beyond EOD, truncated [ 167.388652][ T5977] loop2: p141 start 524288 is beyond EOD, truncated [ 167.397724][ T5977] loop2: p142 size 16128 extends beyond EOD, truncated [ 167.410429][ T5977] loop2: p143 start 524288 is beyond EOD, truncated [ 167.427256][ T5977] loop2: p144 size 16128 extends beyond EOD, truncated [ 167.435507][ T5977] loop2: p145 start 524288 is beyond EOD, truncated [ 167.444948][ T5977] loop2: p146 size 16128 extends beyond EOD, truncated [ 167.593829][ T5977] loop2: p147 start 524288 is beyond EOD, truncated [ 167.697902][ T5977] loop2: p148 size 16128 extends beyond EOD, truncated [ 167.962215][ T5977] loop2: p149 start 524288 is beyond EOD, truncated [ 167.968876][ T5977] loop2: p150 size 16128 extends beyond EOD, truncated [ 168.057229][ T5977] loop2: p151 start 524288 is beyond EOD, truncated [ 168.110354][ T5977] loop2: p152 size 16128 extends beyond EOD, truncated [ 168.180571][ T5977] loop2: p153 start 524288 is beyond EOD, truncated [ 168.187220][ T5977] loop2: p154 size 16128 extends beyond EOD, truncated [ 168.227536][ T5977] loop2: p155 start 524288 is beyond EOD, truncated [ 168.237781][ T5977] loop2: p156 size 16128 extends beyond EOD, truncated [ 168.259261][ T5977] loop2: p157 start 524288 is beyond EOD, truncated [ 168.280328][ T5977] loop2: p158 size 16128 extends beyond EOD, truncated [ 168.299676][ T5977] loop2: p159 start 524288 is beyond EOD, truncated [ 168.330519][ T5977] loop2: p160 size 16128 extends beyond EOD, truncated [ 168.340535][ T5977] loop2: p161 start 524288 is beyond EOD, truncated [ 168.347168][ T5977] loop2: p162 size 16128 extends beyond EOD, truncated [ 168.384505][ T5977] loop2: p163 start 524288 is beyond EOD, truncated [ 168.402230][ T5977] loop2: p164 size 16128 extends beyond EOD, truncated [ 168.430514][ T5977] loop2: p165 start 524288 is beyond EOD, truncated [ 168.437156][ T5977] loop2: p166 size 16128 extends beyond EOD, truncated [ 168.473316][ T5977] loop2: p167 start 524288 is beyond EOD, truncated [ 168.479948][ T5977] loop2: p168 size 16128 extends beyond EOD, truncated [ 168.522601][ T5977] loop2: p169 start 524288 is beyond EOD, truncated [ 168.529233][ T5977] loop2: p170 size 16128 extends beyond EOD, truncated [ 168.582899][ T5977] loop2: p171 start 524288 is beyond EOD, truncated [ 168.589546][ T5977] loop2: p172 size 16128 extends beyond EOD, truncated [ 168.633490][ T5977] loop2: p173 start 524288 is beyond EOD, truncated [ 168.640147][ T5977] loop2: p174 size 16128 extends beyond EOD, truncated [ 168.669114][ T5977] loop2: p175 start 524288 is beyond EOD, truncated [ 168.690411][ T5977] loop2: p176 size 16128 extends beyond EOD, truncated [ 168.710493][ T5977] loop2: p177 start 524288 is beyond EOD, truncated [ 168.717133][ T5977] loop2: p178 size 16128 extends beyond EOD, truncated [ 168.757777][ T5977] loop2: p179 start 524288 is beyond EOD, truncated [ 168.764543][ T5977] loop2: p180 size 16128 extends beyond EOD, truncated [ 168.781585][ T5977] loop2: p181 start 524288 is beyond EOD, truncated [ 168.797318][ T5977] loop2: p182 size 16128 extends beyond EOD, truncated [ 168.825521][ T5977] loop2: p183 start 524288 is beyond EOD, truncated [ 168.837698][ T5977] loop2: p184 size 16128 extends beyond EOD, truncated [ 168.870288][ T5977] loop2: p185 start 524288 is beyond EOD, truncated [ 168.877117][ T5977] loop2: p186 size 16128 extends beyond EOD, truncated [ 168.895205][ T5977] loop2: p187 start 524288 is beyond EOD, truncated [ 168.906126][ T5977] loop2: p188 size 16128 extends beyond EOD, truncated [ 168.960271][ T22] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 169.020305][ T5977] loop2: p189 start 524288 is beyond EOD, truncated [ 169.046794][ T5977] loop2: p190 size 16128 extends beyond EOD, truncated [ 169.100490][ T5977] loop2: p191 start 524288 is beyond EOD, truncated [ 169.107149][ T5977] loop2: p192 size 16128 extends beyond EOD, truncated [ 169.120874][ T5977] loop2: p193 start 524288 is beyond EOD, truncated [ 169.131653][ T5977] loop2: p194 size 16128 extends beyond EOD, truncated [ 169.160670][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 169.174505][ T22] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 169.272040][ T5977] loop2: p195 start 524288 is beyond EOD, truncated [ 169.279125][ T22] usb 4-1: config 0 has no interface number 0 [ 169.349653][ T5977] loop2: p196 size 16128 extends beyond EOD, truncated [ 169.427941][ T22] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 169.520836][ T5977] loop2: p197 start 524288 is beyond EOD, truncated [ 169.589451][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.633457][ T5977] loop2: p198 size 16128 extends beyond EOD, truncated [ 169.722126][ T22] usb 4-1: Product: syz [ 169.731539][ T5977] loop2: p199 start 524288 is beyond EOD, truncated [ 169.759926][ T22] usb 4-1: Manufacturer: syz [ 169.786452][ T5977] loop2: p200 size 16128 extends beyond EOD, truncated [ 169.793717][ T22] usb 4-1: SerialNumber: syz [ 169.825481][ T22] usb 4-1: config 0 descriptor?? [ 169.839511][ T5977] loop2: p201 start 524288 is beyond EOD, truncated [ 169.874037][ T5977] loop2: p202 size 16128 extends beyond EOD, truncated [ 169.913351][ T5977] loop2: p203 start 524288 is beyond EOD, truncated [ 169.920032][ T5977] loop2: p204 size 16128 extends beyond EOD, truncated [ 169.955407][ T5977] loop2: p205 start 524288 is beyond EOD, truncated [ 169.978837][ T5977] loop2: p206 size 16128 extends beyond EOD, truncated [ 170.018599][ T5977] loop2: p207 start 524288 is beyond EOD, truncated [ 170.068881][ T5977] loop2: p208 size 16128 extends beyond EOD, truncated [ 170.080025][ T22] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 170.088752][ T22] usb 4-1: No valid video chain found. [ 170.109824][ T5977] loop2: p209 start 524288 is beyond EOD, truncated [ 170.120488][ T22] usb 4-1: USB disconnect, device number 6 [ 170.136549][ T5977] loop2: p210 size 16128 extends beyond EOD, truncated [ 170.166801][ T5977] loop2: p211 start 524288 is beyond EOD, truncated [ 170.187505][ T5977] loop2: p212 size 16128 extends beyond EOD, truncated [ 170.197784][ T5977] loop2: p213 start 524288 is beyond EOD, truncated [ 170.217060][ T5977] loop2: p214 size 16128 extends beyond EOD, truncated [ 170.228339][ T5977] loop2: p215 start 524288 is beyond EOD, truncated [ 170.237192][ T5977] loop2: p216 size 16128 extends beyond EOD, truncated [ 170.248635][ T5977] loop2: p217 start 524288 is beyond EOD, truncated [ 170.259682][ T5977] loop2: p218 size 16128 extends beyond EOD, truncated [ 170.279955][ T5977] loop2: p219 start 524288 is beyond EOD, truncated [ 170.292435][ T5977] loop2: p220 size 16128 extends beyond EOD, truncated [ 170.303832][ T5977] loop2: p221 start 524288 is beyond EOD, truncated [ 170.313039][ T5977] loop2: p222 size 16128 extends beyond EOD, truncated [ 170.326830][ T5977] loop2: p223 start 524288 is beyond EOD, truncated [ 170.336104][ T5977] loop2: p224 size 16128 extends beyond EOD, truncated [ 170.347371][ T5977] loop2: p225 start 524288 is beyond EOD, truncated [ 170.356440][ T5977] loop2: p226 size 16128 extends beyond EOD, truncated [ 170.367625][ T5977] loop2: p227 start 524288 is beyond EOD, truncated [ 170.376294][ T5977] loop2: p228 size 16128 extends beyond EOD, truncated [ 170.390696][ T5977] loop2: p229 start 524288 is beyond EOD, truncated [ 170.397426][ T5977] loop2: p230 size 16128 extends beyond EOD, truncated [ 170.410378][ T5977] loop2: p231 start 524288 is beyond EOD, truncated [ 170.417241][ T5977] loop2: p232 size 16128 extends beyond EOD, truncated [ 170.430476][ T5977] loop2: p233 start 524288 is beyond EOD, truncated [ 170.458101][ T5977] loop2: p234 size 16128 extends beyond EOD, truncated [ 170.476385][ T5977] loop2: p235 start 524288 is beyond EOD, truncated [ 170.495669][ T5977] loop2: p236 size 16128 extends beyond EOD, truncated [ 170.516709][ T5977] loop2: p237 start 524288 is beyond EOD, truncated [ 170.546124][ T5977] loop2: p238 size 16128 extends beyond EOD, truncated [ 170.558782][ T5977] loop2: p239 start 524288 is beyond EOD, truncated [ 170.565924][ T5977] loop2: p240 size 16128 extends beyond EOD, truncated [ 170.585386][ T5977] loop2: p241 start 524288 is beyond EOD, truncated [ 170.599093][ T5977] loop2: p242 size 16128 extends beyond EOD, truncated [ 170.631458][ T5977] loop2: p243 start 524288 is beyond EOD, truncated [ 170.658545][ T5977] loop2: p244 size 16128 extends beyond EOD, truncated [ 170.685264][ T5977] loop2: p245 start 524288 is beyond EOD, truncated [ 170.702682][ T5977] loop2: p246 size 16128 extends beyond EOD, truncated [ 170.739057][ T5977] loop2: p247 start 524288 is beyond EOD, truncated [ 170.745999][ T5977] loop2: p248 size 16128 extends beyond EOD, truncated [ 170.759505][ T5977] loop2: p249 start 524288 is beyond EOD, truncated [ 170.766936][ T5977] loop2: p250 size 16128 extends beyond EOD, truncated [ 170.779872][ T5977] loop2: p251 start 524288 is beyond EOD, truncated [ 170.786779][ T5977] loop2: p252 size 16128 extends beyond EOD, truncated [ 170.810039][ T6057] loop3: detected capacity change from 0 to 2048 [ 170.817714][ T5977] loop2: p253 start 524288 is beyond EOD, truncated [ 170.853799][ T5977] loop2: p254 size 16128 extends beyond EOD, truncated [ 170.866901][ T5977] loop2: p255 start 524288 is beyond EOD, truncated [ 170.875676][ T6057] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 170.925341][ T6057] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 170.970389][ T6057] UDF-fs: Scanning with blocksize 512 failed [ 171.048187][ T6057] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 171.080667][ T6057] UDF-fs: Scanning with blocksize 1024 failed [ 171.150952][ T6061] device syzkaller0 entered promiscuous mode [ 171.175836][ T6057] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 171.207756][ T6064] input: syz0 as /devices/virtual/input/input9 [ 171.238262][ T6057] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 171.268351][ T6057] UDF-fs: Scanning with blocksize 2048 failed [ 171.295862][ T6057] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 171.348555][ T6057] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 171.395197][ T6057] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 171.413789][ T6057] UDF-fs: Scanning with blocksize 4096 failed [ 171.420129][ T6057] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 172.306126][ T4314] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 172.822584][ T4314] usb 5-1: unable to get BOS descriptor or descriptor too short [ 172.837139][ T4314] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.874305][ T4314] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 173.008813][ T4314] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 173.090412][ T4314] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 173.164183][ T4484] udevd[4484]: inotify_add_watch(7, /dev/loop2p8, 10) failed: No such file or directory [ 173.177054][ T4264] udevd[4264]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 173.203404][ T4263] udevd[4263]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 173.238681][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 173.268939][ T4314] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 173.380298][ T4314] usb 5-1: config 1 interface 1 has no altsetting 0 [ 173.403745][ T4314] usb 5-1: string descriptor 0 read error: -22 [ 173.414675][ T6089] udevd[6089]: inotify_add_watch(7, /dev/loop2p10, 10) failed: No such file or directory [ 173.435088][ T4314] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 173.449680][ T4263] udevd[4263]: inotify_add_watch(7, /dev/loop2p20, 10) failed: No such file or directory [ 173.464885][ T6090] udevd[6090]: inotify_add_watch(7, /dev/loop2p12, 10) failed: No such file or directory [ 173.476214][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop2p22, 10) failed: No such file or directory [ 173.489501][ T4489] udevd[4489]: inotify_add_watch(7, /dev/loop2p24, 10) failed: No such file or directory [ 173.503989][ T4264] udevd[4264]: inotify_add_watch(7, /dev/loop2p26, 10) failed: No such file or directory [ 173.578773][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.840454][ T22] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 174.074215][ T22] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 174.114195][ T22] usb 4-1: config 0 has no interface number 0 [ 174.131105][ T22] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 174.143436][ T22] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 174.153785][ T22] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 174.178735][ T22] usb 4-1: Manufacturer: syz [ 174.190143][ T22] usb 4-1: SerialNumber: syz [ 174.212283][ T22] usb 4-1: config 0 descriptor?? [ 174.276308][ T4314] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 174.304680][ T4314] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 174.327428][ T4314] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 174.382330][ T4314] usb 5-1: USB disconnect, device number 6 [ 174.433954][ T22] usbtouchscreen 4-1:0.214: Failed to read FW rev: -32 [ 174.448416][ T22] usbtouchscreen: probe of 4-1:0.214 failed with error -32 [ 174.461481][ T22] usb 4-1: USB disconnect, device number 7 [ 175.006312][ T6114] loop0: detected capacity change from 0 to 512 [ 175.023155][ T6114] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 175.083689][ T6114] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.567: bad orphan inode 131083 [ 175.134984][ T6114] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 175.180476][ T4314] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 175.200305][ T6122] loop2: detected capacity change from 0 to 512 [ 175.383227][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 175.387026][ T6122] EXT4-fs (loop2): 1 orphan inode deleted [ 175.394875][ T6122] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 175.404046][ T6122] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.179727][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 176.712613][ T4314] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 176.770357][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.813554][ T4314] usb 5-1: config 0 descriptor?? [ 176.846957][ T4314] cp210x 5-1:0.0: cp210x converter detected [ 177.322158][ T4314] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 177.367856][ T4314] usb 5-1: cp210x converter now attached to ttyUSB0 [ 177.558271][ T22] usb 5-1: USB disconnect, device number 7 [ 177.590875][ T22] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 177.635590][ T6151] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.655203][ T22] cp210x 5-1:0.0: device disconnected [ 177.675583][ T6151] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.702473][ T6151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.000596][ T6167] loop0: detected capacity change from 0 to 1024 [ 178.031903][ T6167] EXT4-fs: Ignoring removed orlov option [ 178.049946][ T6167] EXT4-fs: quotafile must be on filesystem root [ 180.525157][ T6191] loop0: detected capacity change from 0 to 512 [ 180.566000][ T6191] EXT4-fs: Ignoring removed i_version option [ 180.589306][ T6191] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 180.620413][ T4325] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 180.679456][ T6191] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 180.731308][ T6191] Quota error (device loop0): write_blk: dquota write failed [ 180.772198][ T6191] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 180.966974][ T4325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 180.978124][ T4325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.988193][ T4325] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 181.001534][ T6191] Quota error (device loop0): write_blk: dquota write failed [ 181.380807][ T4325] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 181.390051][ T4325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.411395][ T6191] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 181.424663][ T6191] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.590: Failed to acquire dquot type 1 [ 181.437892][ T6191] EXT4-fs (loop0): 1 truncate cleaned up [ 181.448905][ T4325] usb 5-1: config 0 descriptor?? [ 181.457089][ T6191] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 181.468629][ T6210] loop3: detected capacity change from 0 to 256 [ 181.491220][ T6210] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 181.516053][ T27] audit: type=1800 audit(1785077337.839:13): pid=6210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.597" name="file1" dev="loop3" ino=1048616 res=0 errno=0 [ 181.829537][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 181.891668][ T4325] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 181.899129][ T4325] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 182.069208][ T4325] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 182.077274][ T4325] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 182.084969][ T4325] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 182.097029][ T4325] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 182.111411][ T4325] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 182.133269][ T6221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.210855][ T6221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.850879][ T4325] usb 5-1: USB disconnect, device number 8 [ 183.007937][ T6233] loop4: detected capacity change from 0 to 128 [ 183.042833][ T6224] fido_id[6224]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 183.081393][ T6233] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 183.987491][ T6248] loop3: detected capacity change from 0 to 1024 [ 184.174300][ T6242] kvm [6241]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 184.211140][ T6242] kvm [6241]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 184.247471][ T6242] kvm [6241]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 184.313341][ T6242] kvm [6241]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 184.323089][ T6242] kvm [6241]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 184.332114][ T6242] kvm [6241]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 184.384910][ T6258] loop2: detected capacity change from 0 to 512 [ 184.471216][ T6258] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 184.542540][ T6258] EXT4-fs (loop2): 1 truncate cleaned up [ 184.566215][ T6263] loop3: detected capacity change from 0 to 4096 [ 184.574037][ T6258] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 184.616482][ T6263] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 185.638162][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 185.688433][ T6277] loop0: detected capacity change from 0 to 256 [ 185.768888][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 185.814021][ T6277] FAT-fs (loop0): Directory bread(block 1285) failed [ 185.823204][ T6277] FAT-fs (loop0): Directory bread(block 1286) failed [ 185.829934][ T6277] FAT-fs (loop0): Directory bread(block 1287) failed [ 185.890590][ T6277] FAT-fs (loop0): Directory bread(block 1288) failed [ 185.924866][ T6277] FAT-fs (loop0): Directory bread(block 1285) failed [ 185.960325][ T6277] FAT-fs (loop0): Directory bread(block 1286) failed [ 185.967069][ T6277] FAT-fs (loop0): Directory bread(block 1287) failed [ 185.991366][ T6277] FAT-fs (loop0): Directory bread(block 1288) failed [ 185.998165][ T6277] FAT-fs (loop0): Directory bread(block 1285) failed [ 186.041703][ T6277] FAT-fs (loop0): Directory bread(block 1286) failed [ 186.050007][ T6284] binder_alloc: 6283: pid 6283 spamming oneway? 2 buffers allocated for a total size of 5136 [ 187.305071][ T6297] netlink: 48 bytes leftover after parsing attributes in process `syz.2.627'. [ 188.447005][ T6318] loop4: detected capacity change from 0 to 2048 [ 188.495220][ T6318] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 188.549724][ T6318] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.815005][ T6328] loop0: detected capacity change from 0 to 128 [ 188.853405][ T6328] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 189.721622][ T6334] loop2: detected capacity change from 0 to 128 [ 189.729532][ T6334] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 189.909787][ T27] audit: type=1804 audit(1785077346.229:14): pid=6334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.641" name="/newroot/130/file1/file1" dev="loop2" ino=94 res=1 errno=0 [ 189.948207][ T6332] loop4: detected capacity change from 0 to 8192 [ 189.974574][ T6334] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 190.021084][ T6334] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 191.366598][ T6365] loop0: detected capacity change from 0 to 1024 [ 192.105867][ T6376] loop2: detected capacity change from 0 to 256 [ 192.322695][ T6376] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.409729][ T6379] loop3: detected capacity change from 0 to 512 [ 192.430382][ T6376] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 192.516307][ T6379] EXT4-fs error (device loop3): ext4_get_journal_inode:5762: comm syz.3.656: inode #2147418112: comm syz.3.656: iget: illegal inode # [ 192.539734][ T6376] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 192.554724][ T6382] loop4: detected capacity change from 0 to 128 [ 192.563180][ T6379] EXT4-fs (loop3): no journal found [ 192.569519][ T6379] EXT4-fs (loop3): can't get journal size [ 192.583714][ T6382] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 192.620865][ T6379] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 192.736153][ T6379] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 192.795358][ T6379] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 192.961511][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 193.105460][ T6400] loop3: detected capacity change from 0 to 128 [ 193.174940][ T6400] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 193.197113][ T6400] System zones: 1-3, 19-19, 35-36 [ 193.206918][ T6402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.243253][ T6400] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 193.262890][ T6402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.282412][ T6400] ext4 filesystem being mounted at /120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 193.366249][ T6400] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 4294901763 (only 1 groups) [ 193.439610][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 193.487738][ T4431] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 193.529262][ T4431] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 193.755495][ T6415] loop4: detected capacity change from 0 to 256 [ 193.795501][ T6415] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 194.022851][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.034772][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.360316][ T6423] loop3: detected capacity change from 0 to 512 [ 194.398344][ T6423] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 195.315932][ T6433] loop0: detected capacity change from 0 to 256 [ 195.378066][ T6437] loop2: detected capacity change from 0 to 128 [ 195.437907][ T6433] FAT-fs (loop0): Directory bread(block 64) failed [ 195.465116][ T6433] FAT-fs (loop0): Directory bread(block 65) failed [ 195.477597][ T6437] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 195.501675][ T6433] FAT-fs (loop0): Directory bread(block 66) failed [ 195.508407][ T6433] FAT-fs (loop0): Directory bread(block 67) failed [ 195.528756][ T6433] FAT-fs (loop0): Directory bread(block 68) failed [ 195.543550][ T6433] FAT-fs (loop0): Directory bread(block 69) failed [ 195.752417][ T6433] FAT-fs (loop0): Directory bread(block 70) failed [ 195.903304][ T6433] FAT-fs (loop0): Directory bread(block 71) failed [ 196.024841][ T6433] FAT-fs (loop0): Directory bread(block 72) failed [ 196.060402][ T27] audit: type=1800 audit(1785077352.379:15): pid=6437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.678" name="file1" dev="loop2" ino=1048620 res=0 errno=0 [ 196.090485][ T6433] FAT-fs (loop0): Directory bread(block 73) failed [ 196.921405][ T6459] loop0: detected capacity change from 0 to 256 [ 196.972163][ T6459] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 197.018066][ T6459] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 197.054460][ T6459] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 197.165250][ T6462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.688'. [ 197.704256][ T6476] loop4: detected capacity change from 0 to 1024 [ 197.985165][ T6476] hfsplus: invalid length 32517 has been corrected to 255 [ 198.370872][ T6476] hfsplus: invalid length 32517 has been corrected to 255 [ 198.451080][ T6476] hfsplus: invalid length 32517 has been corrected to 255 [ 198.476562][ T6479] loop2: detected capacity change from 0 to 2048 [ 198.519497][ T6479] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 198.590326][ T6479] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.665953][ T4478] hfsplus: b-tree write err: -5, ino 2 [ 198.692159][ T4478] hfsplus: b-tree write err: -5, ino 4 [ 199.681333][ T6513] loop0: detected capacity change from 0 to 256 [ 200.553404][ T6524] loop4: detected capacity change from 0 to 512 [ 200.603479][ T6524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 200.646033][ T6524] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 200.727868][ T6524] EXT4-fs (loop4): 1 truncate cleaned up [ 200.748194][ T6524] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 200.957009][ T6524] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.711: Invalid inode bitmap blk 3848039373 in block_group 0 [ 201.116342][ T6543] netlink: 36 bytes leftover after parsing attributes in process `syz.0.716'. [ 201.216791][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 202.479372][ T6556] loop3: detected capacity change from 0 to 512 [ 202.589189][ T6556] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 202.600452][ T6556] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.878262][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 203.084276][ T6572] Bluetooth: MGMT ver 1.22 [ 203.327046][ T6579] loop4: detected capacity change from 0 to 1024 [ 203.391844][ T6579] EXT4-fs: inline encryption not supported [ 203.397730][ T6579] EXT4-fs: quotafile must be on filesystem root [ 203.638832][ T6589] loop4: detected capacity change from 0 to 16 [ 203.665811][ T6589] erofs: (device loop4): mounted with root inode @ nid 36. [ 203.751926][ T4276] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 203.830574][ T6589] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 203.885715][ T27] audit: type=1800 audit(1785077360.209:16): pid=6589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.734" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 204.018344][ T6596] syz.2.737 uses obsolete (PF_INET,SOCK_PACKET) [ 204.080855][ T6589] syz.4.734 (6589) used greatest stack depth: 19552 bytes left [ 204.091229][ T6595] loop0: detected capacity change from 0 to 4096 [ 204.098450][ T6595] EXT4-fs: inline encryption not supported [ 204.130833][ T6595] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 204.144962][ T6595] EXT4-fs (loop0): Test dummy encryption mode enabled [ 204.191130][ T6595] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 204.277561][ T6595] System zones: 0-5 [ 204.323873][ T6595] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 204.452229][ T6604] loop2: detected capacity change from 0 to 4096 [ 204.509974][ T6604] EXT4-fs: Conflicting test_dummy_encryption options [ 204.567734][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 204.662751][ T6606] loop4: detected capacity change from 0 to 128 [ 204.717631][ T6606] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 204.770724][ T6606] ext4 filesystem being mounted at /138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 205.845405][ T6622] loop3: detected capacity change from 0 to 1024 [ 205.920471][ T6622] hfsplus: invalid length 32517 has been corrected to 255 [ 205.955849][ T6622] hfsplus: invalid length 32517 has been corrected to 255 [ 205.965264][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 205.984684][ T6622] hfsplus: invalid length 32517 has been corrected to 255 [ 206.133871][ T4478] hfsplus: b-tree write err: -5, ino 2 [ 206.139576][ T4478] hfsplus: b-tree write err: -5, ino 4 [ 206.164904][ T6630] loop4: detected capacity change from 0 to 1024 [ 206.205335][ T6630] EXT4-fs: Ignoring removed bh option [ 206.225666][ T6630] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 206.955797][ T6630] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 207.842730][ T6656] loop3: detected capacity change from 0 to 1024 [ 207.984430][ T6656] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 208.002869][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 208.235487][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 208.765730][ T6662] loop4: detected capacity change from 0 to 512 [ 208.801901][ T6662] EXT4-fs: Ignoring removed i_version option [ 208.836972][ T6662] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 208.889758][ T6662] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 112 vs 41 free clusters [ 209.090384][ T6662] Quota error (device loop4): write_blk: dquota write failed [ 209.098526][ T6662] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 209.150384][ T6662] Quota error (device loop4): write_blk: dquota write failed [ 209.158213][ T6662] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 209.202318][ T6662] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.759: Failed to acquire dquot type 1 [ 209.442590][ T6662] EXT4-fs (loop4): 1 truncate cleaned up [ 209.465943][ T6662] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 210.205527][ T6682] loop3: detected capacity change from 0 to 128 [ 210.260522][ T6682] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 210.293705][ T6686] loop0: detected capacity change from 0 to 8 [ 210.344131][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 210.355390][ T6686] SQUASHFS error: zlib decompression failed, data probably corrupt [ 210.380305][ T6686] SQUASHFS error: Failed to read block 0x9b: -5 [ 210.401872][ T6686] SQUASHFS error: Unable to read metadata cache entry [99] [ 210.440307][ T6686] SQUASHFS error: Unable to read inode 0x127 [ 210.788802][ T6693] loop0: detected capacity change from 0 to 512 [ 210.812566][ T6693] EXT4-fs: Ignoring removed i_version option [ 210.863938][ T6693] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 210.958990][ T6693] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 211.007465][ T6693] ext4 filesystem being mounted at /154/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.040419][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 211.120409][ T6693] EXT4-fs error (device loop0): ext4_dx_csum_verify:502: inode #2: comm syz.0.772: dir seems corrupt? Run e2fsck -D. [ 211.158304][ T4263] udevd[4263]: incorrect ext4 checksum on /dev/loop0 [ 211.184453][ T6693] EXT4-fs (loop0): Remounting filesystem read-only [ 211.214112][ T6693] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.772: Directory index failed checksum [ 211.225305][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.225346][ T7] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 211.225369][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.233753][ T7] usb 5-1: config 0 descriptor?? [ 211.305509][ T6693] EXT4-fs (loop0): Remounting filesystem read-only [ 211.326486][ T6706] EXT4-fs error (device loop0): ext4_dx_csum_verify:502: inode #2: comm syz.0.772: dir seems corrupt? Run e2fsck -D. [ 211.351978][ T6706] EXT4-fs (loop0): Remounting filesystem read-only [ 211.370133][ T6706] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.772: Directory index failed checksum [ 211.426173][ T6706] EXT4-fs (loop0): Remounting filesystem read-only [ 211.433386][ T6693] EXT4-fs error (device loop0): ext4_dx_csum_verify:502: inode #2: comm syz.0.772: dir seems corrupt? Run e2fsck -D. [ 211.452236][ T6693] EXT4-fs (loop0): Remounting filesystem read-only [ 211.458987][ T6693] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.772: Directory index failed checksum [ 211.484878][ T6693] EXT4-fs (loop0): Remounting filesystem read-only [ 211.620430][ T6708] EXT4-fs error (device loop0): ext4_dx_csum_verify:502: inode #2: comm syz.0.772: dir seems corrupt? Run e2fsck -D. [ 211.643160][ T6708] EXT4-fs (loop0): Remounting filesystem read-only [ 211.656174][ T6708] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.772: Directory index failed checksum [ 211.698126][ T6708] EXT4-fs (loop0): Remounting filesystem read-only [ 211.844581][ T7] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 211.978372][ T7] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0005/input/input16 [ 212.015104][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 212.561977][ T7] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 212.641319][ T4315] usb 5-1: USB disconnect, device number 9 [ 212.894588][ T6736] loop2: detected capacity change from 0 to 1024 [ 212.918569][ T6727] fido_id[6727]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 212.948846][ T6736] hfsplus: invalid length 32517 has been corrected to 255 [ 212.991147][ T6736] hfsplus: invalid length 32517 has been corrected to 255 [ 213.042444][ T6736] hfsplus: invalid length 32517 has been corrected to 255 [ 213.207299][ T4431] hfsplus: b-tree write err: -5, ino 2 [ 213.221594][ T4431] hfsplus: b-tree write err: -5, ino 4 [ 213.387735][ T6750] loop3: detected capacity change from 0 to 512 [ 213.423767][ T6750] EXT4-fs: Ignoring removed i_version option [ 213.477688][ T6750] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 213.739845][ T6750] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 213.750486][ T6750] ext4 filesystem being mounted at /147/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.894899][ T6750] EXT4-fs error (device loop3): ext4_dx_csum_verify:502: inode #2: comm syz.3.791: dir seems corrupt? Run e2fsck -D. [ 213.944048][ T6750] EXT4-fs (loop3): Remounting filesystem read-only [ 213.974829][ T6750] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.791: Directory index failed checksum [ 214.161284][ T6750] EXT4-fs (loop3): Remounting filesystem read-only [ 214.688918][ T6768] EXT4-fs error (device loop3): ext4_dx_csum_verify:502: inode #2: comm syz.3.791: dir seems corrupt? Run e2fsck -D. [ 214.777393][ T6768] EXT4-fs (loop3): Remounting filesystem read-only [ 214.790307][ T6768] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.791: Directory index failed checksum [ 214.806168][ T6776] loop0: detected capacity change from 0 to 512 [ 214.814291][ T6768] EXT4-fs (loop3): Remounting filesystem read-only [ 214.822635][ T6769] EXT4-fs error (device loop3): ext4_dx_csum_verify:502: inode #2: comm syz.3.791: dir seems corrupt? Run e2fsck -D. [ 214.839919][ T6776] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #13: comm syz.0.797: iget: bad i_size value: 12154757448730 [ 214.860837][ T6776] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.797: couldn't read orphan inode 13 (err -117) [ 214.861013][ T6769] EXT4-fs (loop3): Remounting filesystem read-only [ 214.887743][ T6776] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 214.903707][ T6776] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 214.943554][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 214.964093][ T6780] loop4: detected capacity change from 0 to 512 [ 214.972325][ T6769] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.791: Directory index failed checksum [ 214.982660][ T6780] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 215.041148][ T6769] EXT4-fs (loop3): Remounting filesystem read-only [ 215.055956][ T6772] EXT4-fs error (device loop3): ext4_dx_csum_verify:502: inode #2: comm syz.3.791: dir seems corrupt? Run e2fsck -D. [ 215.118416][ T6780] EXT4-fs (loop4): 1 truncate cleaned up [ 215.135177][ T6772] EXT4-fs (loop3): Remounting filesystem read-only [ 215.141949][ T6772] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.791: Directory index failed checksum [ 215.159375][ T6772] EXT4-fs (loop3): Remounting filesystem read-only [ 215.184560][ T6780] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 215.217554][ T27] audit: type=1804 audit(1785077371.539:17): pid=6780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.799" name="/newroot/144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop4" ino=18 res=1 errno=0 [ 215.267382][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 215.290314][ T6780] EXT4-fs (loop4): shut down requested (2) [ 215.336891][ T6783] loop0: detected capacity change from 0 to 128 [ 215.398792][ T6783] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 215.414625][ T6783] ext4 filesystem being mounted at /159/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 215.631174][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 215.768185][ T6806] loop4: detected capacity change from 0 to 8 [ 215.829183][ T6806] SQUASHFS error: zlib decompression failed, data probably corrupt [ 215.866968][ T6806] SQUASHFS error: Failed to read block 0x9b: -5 [ 215.904052][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 215.905160][ T6806] SQUASHFS error: Unable to read metadata cache entry [99] [ 216.076903][ T6806] SQUASHFS error: Unable to read inode 0x127 [ 216.238161][ T6815] loop0: detected capacity change from 0 to 512 [ 216.295374][ T6815] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 216.314065][ T6815] ext4 filesystem being mounted at /160/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.072309][ T6829] loop4: detected capacity change from 0 to 512 [ 217.096466][ T6829] EXT4-fs: Ignoring removed i_version option [ 217.122192][ T6829] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 217.144941][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 217.316862][ T6837] loop2: detected capacity change from 0 to 512 [ 217.325901][ T6837] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 217.380328][ T6837] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 217.389320][ T6837] EXT4-fs (loop2): orphan cleanup on readonly fs [ 217.405188][ T6829] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 217.427865][ T6837] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.815: bg 0: block 15: invalid block bitmap [ 217.451773][ T6829] ext4 filesystem being mounted at /146/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.489029][ T6845] loop3: detected capacity change from 0 to 2048 [ 217.504578][ T6837] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 217.514653][ T6837] EXT4-fs (loop2): 1 truncate cleaned up [ 217.520384][ T6837] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 217.536975][ T6845] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.545999][ T6846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.588112][ T6846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.618595][ T6845] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 217.634073][ T6837] EXT4-fs (loop2): shut down requested (2) [ 217.670407][ T6845] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 217.684618][ T6829] EXT4-fs error (device loop4): ext4_dx_csum_verify:502: inode #2: comm syz.4.811: dir seems corrupt? Run e2fsck -D. [ 217.729391][ T6095] udevd[6095]: incorrect ext4 checksum on /dev/loop4 [ 217.742991][ T6829] EXT4-fs (loop4): Remounting filesystem read-only [ 217.765180][ T6829] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.811: Directory index failed checksum [ 217.813065][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 217.825605][ T6829] EXT4-fs (loop4): Remounting filesystem read-only [ 217.850493][ T6847] EXT4-fs error (device loop4): ext4_dx_csum_verify:502: inode #2: comm syz.4.811: dir seems corrupt? Run e2fsck -D. [ 217.915379][ T6846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.926633][ T6847] EXT4-fs (loop4): Remounting filesystem read-only [ 217.950507][ T6846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.971215][ T6847] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.811: Directory index failed checksum [ 218.002235][ T6847] EXT4-fs (loop4): Remounting filesystem read-only [ 218.009019][ T6850] EXT4-fs error (device loop4): ext4_dx_csum_verify:502: inode #2: comm syz.4.811: dir seems corrupt? Run e2fsck -D. [ 218.032475][ T6850] EXT4-fs (loop4): Remounting filesystem read-only [ 218.039018][ T6850] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.811: Directory index failed checksum [ 218.064632][ T6850] EXT4-fs (loop4): Remounting filesystem read-only [ 218.308788][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 218.404262][ T6865] loop3: detected capacity change from 0 to 1024 [ 218.478992][ T6865] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 218.549216][ T6874] loop4: detected capacity change from 0 to 1024 [ 219.833072][ T6893] loop2: detected capacity change from 0 to 512 [ 219.879628][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 219.882424][ T6893] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 220.001850][ T6893] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802e028, mo2=0002] [ 220.038929][ T6893] System zones: 0-2, 18-18, 34-35 [ 220.066312][ T6893] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 220.111525][ T6893] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.303084][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 221.869974][ T6939] fuse: Bad value for 'group_id' [ 222.120965][ T6947] loop3: detected capacity change from 0 to 512 [ 222.141527][ T6947] EXT4-fs: Ignoring removed i_version option [ 222.177508][ T6947] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 222.275786][ T6947] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 222.303469][ T6947] ext4 filesystem being mounted at /158/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.393081][ T6947] EXT4-fs error (device loop3): ext4_dx_csum_verify:502: inode #2: comm syz.3.848: dir seems corrupt? Run e2fsck -D. [ 222.423294][ T4263] udevd[4263]: incorrect ext4 checksum on /dev/loop3 [ 222.443060][ T6947] EXT4-fs (loop3): Remounting filesystem read-only [ 222.449612][ T6947] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.848: Directory index failed checksum [ 222.495416][ T6947] EXT4-fs (loop3): Remounting filesystem read-only [ 222.542719][ T6947] EXT4-fs error (device loop3): ext4_dx_csum_verify:502: inode #2: comm syz.3.848: dir seems corrupt? Run e2fsck -D. [ 222.587393][ T6947] EXT4-fs (loop3): Remounting filesystem read-only [ 222.600455][ T6947] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.848: Directory index failed checksum [ 222.635515][ T6947] EXT4-fs (loop3): Remounting filesystem read-only [ 222.763404][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 222.922270][ T6964] loop3: detected capacity change from 0 to 1024 [ 223.215981][ T6973] loop2: detected capacity change from 0 to 128 [ 223.258546][ T6973] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 223.317854][ T6975] loop3: detected capacity change from 0 to 512 [ 223.357282][ T6975] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 223.389865][ T6975] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.855: bad orphan inode 131083 [ 223.417631][ T6975] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 224.050563][ T6982] fuse: Bad value for 'group_id' [ 224.247926][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 224.468803][ T6988] loop4: detected capacity change from 0 to 1024 [ 224.773089][ T6988] hfsplus: b-tree write err: -5, ino 3 [ 224.839976][ T6993] loop0: detected capacity change from 0 to 512 [ 225.009661][ T6993] EXT4-fs: Ignoring removed i_version option [ 225.061904][ T6993] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 225.332126][ T4589] hfsplus: bad catalog file entry [ 225.448687][ T6993] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 225.693326][ T6993] ext4 filesystem being mounted at /172/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.706602][ T7001] loop3: detected capacity change from 0 to 512 [ 225.859710][ T7001] EXT4-fs error (device loop3): __ext4_iget:5102: inode #11: block 1: comm syz.3.859: invalid block [ 225.894639][ T7005] loop2: detected capacity change from 0 to 8 [ 225.915169][ T7001] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.859: couldn't read orphan inode 11 (err -117) [ 225.950445][ T6993] EXT4-fs error (device loop0): ext4_dx_csum_verify:502: inode #2: comm syz.0.863: dir seems corrupt? Run e2fsck -D. [ 226.031723][ T7001] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 226.055933][ T6993] EXT4-fs (loop0): Remounting filesystem read-only [ 226.115656][ T6993] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.863: Directory index failed checksum [ 226.140252][ T6993] EXT4-fs (loop0): Remounting filesystem read-only [ 226.839048][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 226.851418][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 227.001936][ T7020] fuse: Bad value for 'group_id' [ 227.021805][ T7017] loop2: detected capacity change from 0 to 512 [ 227.104617][ T7024] device syzkaller0 entered promiscuous mode [ 227.108596][ T7017] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 227.142550][ T7017] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.164987][ T7027] loop0: detected capacity change from 0 to 16 [ 227.349437][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 227.486913][ T7034] loop3: detected capacity change from 0 to 128 [ 227.534663][ T7034] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 227.578022][ T27] audit: type=1800 audit(1785077383.899:18): pid=7034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.875" name="file1" dev="loop3" ino=94 res=0 errno=0 [ 227.611982][ T7034] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 227.877429][ T7042] loop3: detected capacity change from 0 to 2048 [ 227.956541][ T7042] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.035177][ T27] audit: type=1800 audit(1785077384.359:19): pid=7042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.878" name="file2" dev="loop3" ino=1347 res=0 errno=0 [ 228.352470][ T7051] device syzkaller0 entered promiscuous mode [ 228.365485][ T7054] loop3: detected capacity change from 0 to 128 [ 228.414506][ T7054] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 228.428258][ T7054] ext4 filesystem being mounted at /166/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 228.670249][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 228.710503][ T7060] loop4: detected capacity change from 0 to 1024 [ 228.855152][ T11] hfsplus: b-tree write err: -5, ino 25 [ 228.911798][ T11] hfsplus: b-tree write err: -5, ino 4 [ 228.929787][ T11] hfsplus: b-tree write err: -5, ino 2 [ 228.945382][ T7067] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.890: bg 0: block 289: padding at end of block bitmap is not set [ 228.964288][ T11] hfsplus: b-tree write err: -5, ino 17 [ 228.974266][ T7067] EXT4-fs (loop3): Remounting filesystem read-only [ 228.990928][ T7067] EXT4-fs (loop3): 1 truncate cleaned up [ 228.996622][ T7067] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 229.171071][ T7076] EXT4-fs: Ignoring removed i_version option [ 229.203975][ T7074] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.892: inode has both inline data and extents flags [ 229.226569][ T7074] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.892: couldn't read orphan inode 15 (err -117) [ 229.236858][ T7076] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 229.250249][ T7074] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 229.281188][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 229.307163][ T7076] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 229.316421][ T7076] ext4 filesystem being mounted at /176/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.381876][ T7076] EXT4-fs error (device loop2): ext4_dx_csum_verify:502: inode #2: comm syz.2.893: dir seems corrupt? Run e2fsck -D. [ 229.402559][ T7076] EXT4-fs (loop2): Remounting filesystem read-only [ 229.409997][ T7076] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.893: Directory index failed checksum [ 229.423647][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 229.505854][ T7076] EXT4-fs (loop2): Remounting filesystem read-only [ 229.616959][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 229.709425][ T7092] device syzkaller0 entered promiscuous mode [ 229.902402][ T7102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.936091][ T7102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.057682][ T7109] set_capacity_and_notify: 3 callbacks suppressed [ 230.057698][ T7109] loop4: detected capacity change from 0 to 512 [ 230.123088][ T7109] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.906: bg 0: block 289: padding at end of block bitmap is not set [ 230.149785][ T7109] EXT4-fs (loop4): Remounting filesystem read-only [ 230.194000][ T7109] EXT4-fs (loop4): 1 truncate cleaned up [ 230.240413][ T7109] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 230.423834][ T7122] loop3: detected capacity change from 0 to 512 [ 230.439358][ T7122] EXT4-fs: Ignoring removed i_version option [ 230.455140][ T7122] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 230.502055][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 230.512749][ T7122] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 230.530567][ T7122] ext4 filesystem being mounted at /171/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.621555][ T7122] EXT4-fs error (device loop3): ext4_dx_csum_verify:502: inode #2: comm syz.3.912: dir seems corrupt? Run e2fsck -D. [ 230.657659][ T4263] udevd[4263]: incorrect ext4 checksum on /dev/loop3 [ 230.724840][ T7122] EXT4-fs (loop3): Remounting filesystem read-only [ 230.748537][ T7122] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.912: Directory index failed checksum [ 230.800781][ T7122] EXT4-fs (loop3): Remounting filesystem read-only [ 230.877568][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 231.018537][ T7139] device syzkaller0 entered promiscuous mode [ 232.195732][ T7150] loop3: detected capacity change from 0 to 512 [ 232.290464][ T7150] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 232.337378][ T7150] ext4 filesystem being mounted at /173/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.416631][ T7170] loop0: detected capacity change from 0 to 512 [ 232.439399][ T7170] EXT4-fs: Ignoring removed i_version option [ 232.446083][ T7167] loop2: detected capacity change from 0 to 128 [ 232.458355][ T7150] EXT4-fs (loop3): unmounting filesystem. [ 232.464863][ T7168] netlink: 'syz.4.928': attribute type 1 has an invalid length. [ 232.479770][ T7170] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 232.486986][ T7168] netlink: 'syz.4.928': attribute type 2 has an invalid length. [ 232.549366][ T7167] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 232.579192][ T7170] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 232.590711][ T7170] ext4 filesystem being mounted at /184/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.843223][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 233.118764][ T7183] device syzkaller0 entered promiscuous mode [ 234.285115][ T7209] loop4: detected capacity change from 0 to 512 [ 234.355520][ T7209] EXT4-fs: Ignoring removed i_version option [ 234.396150][ T7209] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 234.456089][ T7209] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 234.478543][ T7209] ext4 filesystem being mounted at /168/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.937112][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 235.274393][ T7229] loop2: detected capacity change from 0 to 2048 [ 235.311154][ T7229] ext4: Unknown parameter 'smackfsfloor' [ 236.155394][ T7241] loop0: detected capacity change from 0 to 128 [ 236.303425][ T7241] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 236.357407][ T7241] ext4 filesystem being mounted at /191/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 236.412550][ T7249] fuse: Unknown parameter 'grou00000000000000000000' [ 236.544102][ T7253] loop4: detected capacity change from 0 to 512 [ 236.565341][ T7253] EXT4-fs: Ignoring removed i_version option [ 236.595227][ T7253] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 236.710777][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 236.873123][ T7253] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 236.929076][ T7253] ext4 filesystem being mounted at /171/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.062226][ T7264] loop0: detected capacity change from 0 to 512 [ 237.159859][ T7264] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.961: missing EA_INODE flag [ 237.256443][ T7264] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.961: error while reading EA inode 2 err=-117 [ 237.363897][ T7264] EXT4-fs (loop0): 1 orphan inode deleted [ 237.401233][ T7264] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 237.507486][ T27] audit: type=1804 audit(1785077393.829:20): pid=7264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.961" name="/newroot/192/file0/file1" dev="loop0" ino=15 res=1 errno=0 [ 237.862845][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 238.233146][ T7275] netlink: 'syz.4.963': attribute type 16 has an invalid length. [ 238.285499][ T7275] netlink: 'syz.4.963': attribute type 17 has an invalid length. [ 238.348323][ T7275] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 238.355977][ T7275] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 238.365016][ T7275] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 238.392739][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 238.407577][ T7275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.480600][ T7280] fuse: Unknown parameter 'grou00000000000000000000' [ 238.729725][ T7291] loop4: detected capacity change from 0 to 128 [ 238.779600][ T7293] loop0: detected capacity change from 0 to 512 [ 238.788822][ T7291] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 238.839928][ T7293] EXT4-fs: Ignoring removed i_version option [ 238.849840][ T7291] ext4 filesystem being mounted at /173/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 238.926108][ T7293] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 238.993375][ T7293] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 239.049047][ T7293] ext4 filesystem being mounted at /194/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.362340][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 239.392861][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 239.702889][ T7314] fuse: Unknown parameter 'grou00000000000000000000' [ 239.711346][ T7315] loop0: detected capacity change from 0 to 256 [ 239.725710][ T7315] exfat: Deprecated parameter 'utf8' [ 239.740580][ T7315] exfat: Deprecated parameter 'namecase' [ 239.753018][ T7315] exfat: Deprecated parameter 'utf8' [ 239.796707][ T7315] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 239.855724][ T7315] exFAT-fs (loop0): error, tried to truncate zeroed cluster. [ 239.911688][ T7315] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 239.937721][ T7315] exFAT-fs (loop0): error, failed to bmap (inode : ffff8880539a62e0 iblock : 73, err : -5) [ 239.984476][ T7315] exFAT-fs (loop0): error, tried to truncate zeroed cluster. [ 240.080907][ T7325] netlink: 'syz.3.984': attribute type 16 has an invalid length. [ 240.089111][ T7325] netlink: 'syz.3.984': attribute type 17 has an invalid length. [ 240.135894][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 240.144601][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 240.153299][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 240.176926][ T7325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.229726][ T7330] loop0: detected capacity change from 0 to 128 [ 240.265497][ T7330] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 240.344886][ T27] audit: type=1800 audit(1785077396.669:21): pid=7330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.988" name="file1" dev="loop0" ino=94 res=0 errno=0 [ 240.404963][ T27] audit: type=1800 audit(1785077396.689:22): pid=7330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.988" name="file1" dev="loop0" ino=94 res=0 errno=0 [ 240.809604][ T7345] fuse: Unknown parameter 'group_i00000000000000000000' [ 241.380667][ T4318] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 241.619487][ T4318] usb 5-1: unable to get BOS descriptor or descriptor too short [ 241.685779][ T4318] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1080, setting to 1024 [ 241.967288][ T4318] usb 5-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 241.976674][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.985666][ T4318] usb 5-1: Product: syz [ 241.989994][ T4318] usb 5-1: Manufacturer: syz [ 241.995396][ T4318] usb 5-1: SerialNumber: syz [ 242.162223][ T7368] loop2: detected capacity change from 0 to 764 [ 242.312146][ T4318] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 242.360876][ T4318] usb 5-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to g@b4.vu [ 242.381020][ T4318] usb 5-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 242.398444][ T7372] netlink: 'syz.0.1003': attribute type 16 has an invalid length. [ 242.410496][ T7372] netlink: 'syz.0.1003': attribute type 17 has an invalid length. [ 242.442697][ T4318] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 242.496323][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 242.504917][ T4318] usb 5-1: USB disconnect, device number 10 [ 242.537274][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.561132][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 242.579292][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 242.609327][ T7372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.802436][ T7383] fuse: Unknown parameter 'group_i00000000000000000000' [ 243.213625][ T7396] loop0: detected capacity change from 0 to 512 [ 243.682118][ T7396] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.1014: bad orphan inode 15 [ 243.817449][ T7396] ext4_test_bit(bit=14, block=18) = 1 [ 243.926494][ T7396] is_bad_inode(inode)=0 [ 243.998719][ T7396] NEXT_ORPHAN(inode)=1023 [ 244.127735][ T7396] max_ino=32 [ 244.140289][ T7396] i_nlink=0 [ 244.154848][ T7396] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2918: inode #15: comm syz.0.1014: corrupted xattr block 19 [ 244.248822][ T7396] EXT4-fs warning (device loop0): ext4_evict_inode:301: xattr delete (err -117) [ 244.270672][ T7396] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 244.308409][ T7411] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1017'. [ 244.320503][ T7396] ext4 filesystem being mounted at /203/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 244.499002][ T7396] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.1014: No space for directory leaf checksum. Please run e2fsck -D. [ 244.585906][ T7396] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.1014: checksumming directory block 0 [ 244.632995][ T7419] fuse: Unknown parameter 'group_i00000000000000000000' [ 244.707146][ T7421] loop4: detected capacity change from 0 to 512 [ 244.727917][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 244.734896][ T7421] EXT4-fs: Ignoring removed bh option [ 244.796586][ T7421] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.1023: corrupted in-inode xattr [ 244.818341][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1024'. [ 244.830365][ T4318] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 244.860095][ T7421] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1023: couldn't read orphan inode 15 (err -117) [ 244.892918][ T7421] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 244.991542][ T7421] xt_hashlimit: size too large, truncated to 1048576 [ 245.154011][ T4318] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.178144][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.229993][ T4318] usb 3-1: Product: syz [ 246.210243][ T4318] usb 3-1: Manufacturer: syz [ 246.215013][ T4318] usb 3-1: SerialNumber: syz [ 247.217995][ T4318] cdc_ncm 3-1:1.0: bind() failure [ 247.226553][ T4318] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 247.233763][ T4318] cdc_ncm 3-1:1.1: bind() failure [ 247.591759][ T4318] usb 3-1: USB disconnect, device number 6 [ 247.613224][ T4263] udevd[4263]: setting owner of /dev/bus/usb/003/006 to uid=0, gid=0 failed: No such file or directory [ 247.637680][ T7460] loop0: detected capacity change from 0 to 512 [ 247.644983][ T7460] EXT4-fs: Ignoring removed i_version option [ 247.654187][ T7460] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 247.686370][ T7462] fuse: Unknown parameter 'group_id00000000000000000000' [ 247.752525][ T7460] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 247.813960][ T7468] loop2: detected capacity change from 0 to 512 [ 247.818034][ T7460] ext4 filesystem being mounted at /207/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.893167][ T7468] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1038: iget: bad i_size value: 38620345925642 [ 247.910738][ T7468] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1038: couldn't read orphan inode 15 (err -117) [ 247.986292][ T7468] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 248.019679][ T7468] EXT4-fs (loop2): shut down requested (0) [ 248.027278][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 248.246753][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 248.384176][ T7479] loop2: detected capacity change from 0 to 512 [ 248.453127][ T7479] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 248.475374][ T7479] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.556739][ T7479] EXT4-fs error (device loop2): ext4_get_first_dir_block:3583: inode #12: comm syz.2.1041: Directory hole found for htree leaf block 0 [ 249.446192][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 249.825734][ T7503] fuse: Unknown parameter 'group_id00000000000000000000' [ 251.844003][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 251.996465][ T7540] fuse: Unknown parameter 'group_id00000000000000000000' [ 252.144467][ T7545] loop2: detected capacity change from 0 to 512 [ 252.157375][ T7545] EXT4-fs: inline encryption not supported [ 252.164442][ T7545] EXT4-fs: Ignoring removed nomblk_io_submit option [ 252.220884][ T7545] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1066: inode #1: comm syz.2.1066: iget: illegal inode # [ 252.283937][ T7545] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1066: error while reading EA inode 1 err=-117 [ 252.369930][ T7545] EXT4-fs (loop2): 1 orphan inode deleted [ 252.400299][ T7545] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 252.539437][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 252.600717][ T7562] loop0: detected capacity change from 0 to 1024 [ 252.644354][ T7562] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 252.911581][ T7562] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 253.885927][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 254.480054][ T7593] fuse: Bad value for 'user_id' [ 254.533963][ T7595] xt_TPROXY: Can be used only with -p tcp or -p udp [ 254.906946][ T7603] loop0: detected capacity change from 0 to 2048 [ 255.086500][ T7603] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 255.118962][ T7603] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.150405][ T14] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 255.277697][ T7603] fs-verity: sha256 using implementation "sha256-avx2" [ 255.372322][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.378665][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.390226][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 255.403301][ T14] usb 5-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 255.470231][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.478268][ T14] usb 5-1: Product: syz [ 255.517945][ T14] usb 5-1: Manufacturer: syz [ 255.534951][ T14] usb 5-1: SerialNumber: syz [ 255.622111][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 255.748455][ T7619] loop2: detected capacity change from 0 to 512 [ 255.867288][ T7619] EXT4-fs (loop2): 1 orphan inode deleted [ 255.878652][ T7619] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 255.890663][ T7619] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.898863][ T4330] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 255.917310][ T4330] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 1 [ 255.955422][ T14] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 255.972907][ T14] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 256.024766][ T14] usb 5-1: USB disconnect, device number 11 [ 256.118200][ T7624] loop0: detected capacity change from 0 to 8 [ 256.154537][ T7624] squashfs: Unknown parameter 'ÿlËÀŒÂeK9…j(DãÅ÷­9F&Z•' [ 256.244207][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.541218][ T7633] fuse: Bad value for 'user_id' [ 256.640784][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 256.727689][ T7637] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 257.073761][ T22] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 257.228851][ T7649] loop4: detected capacity change from 0 to 512 [ 257.270265][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 257.277151][ T22] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 49, changing to 7 [ 257.294121][ T7649] EXT4-fs: Ignoring removed nobh option [ 257.312725][ T22] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 257.350688][ T22] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 257.372903][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.391341][ T22] usb 3-1: Product: syz [ 257.400463][ T22] usb 3-1: Manufacturer: syz [ 257.410379][ T22] usb 3-1: SerialNumber: syz [ 257.431536][ T7649] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 257.468599][ T7649] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.618644][ T7649] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.1101: corrupted inode contents [ 257.641091][ T22] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 257.699831][ T22] usb 3-1: USB disconnect, device number 7 [ 257.723363][ T7649] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #2: comm syz.4.1101: mark_inode_dirty error [ 257.788931][ T7649] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.1101: corrupted inode contents [ 257.869352][ T7649] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.1101: mark_inode_dirty error [ 257.934829][ T7660] fuse: Bad value for 'user_id' [ 257.952407][ T6091] udevd[6091]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.010588][ T7649] [ 258.012977][ T7649] ====================================================== [ 258.020022][ T7649] WARNING: possible circular locking dependency detected [ 258.027084][ T7649] syzkaller #0 Not tainted [ 258.031521][ T7649] ------------------------------------------------------ [ 258.038557][ T7649] syz.4.1101/7649 is trying to acquire lock: [ 258.044574][ T7649] ffff888053921068 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 258.053588][ T7649] [ 258.053588][ T7649] but task is already holding lock: [ 258.060979][ T7649] ffff8880742752c8 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x914/0x1a90 [ 258.070545][ T7649] [ 258.070545][ T7649] which lock already depends on the new lock. [ 258.070545][ T7649] [ 258.080961][ T7649] [ 258.080961][ T7649] the existing dependency chain (in reverse order) is: [ 258.089985][ T7649] [ 258.089985][ T7649] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 258.097831][ T7649] down_read+0x42/0x2d0 [ 258.102583][ T7649] ext4_map_blocks+0x338/0x1a90 [ 258.107974][ T7649] ext4_getblk+0x1c5/0x720 [ 258.112924][ T7649] ext4_bread+0x26/0x170 [ 258.117708][ T7649] ext4_quota_read+0x17f/0x380 [ 258.123539][ T7649] find_tree_dqentry+0x1cc/0xf40 [ 258.129027][ T7649] find_tree_dqentry+0x6ac/0xf40 [ 258.134513][ T7649] qtree_read_dquot+0x59a/0x880 [ 258.139912][ T7649] v2_read_dquot+0xc0/0x110 [ 258.144955][ T7649] dquot_acquire+0x152/0x520 [ 258.150087][ T7649] ext4_acquire_dquot+0x2e3/0x4a0 [ 258.155660][ T7649] dqget+0x713/0xbb0 [ 258.160102][ T7649] __dquot_initialize+0x324/0xd00 [ 258.165674][ T7649] ext4_process_orphan+0x4c/0x2e0 [ 258.171301][ T7649] ext4_orphan_cleanup+0xc32/0x1470 [ 258.177051][ T7649] ext4_fill_super+0x6f0c/0x78f0 [ 258.182561][ T7649] get_tree_bdev+0x3e6/0x610 [ 258.187737][ T7649] vfs_get_tree+0x88/0x270 [ 258.192700][ T7649] do_new_mount+0x247/0xa40 [ 258.197842][ T7649] __se_sys_mount+0x2e3/0x3d0 [ 258.203059][ T7649] do_syscall_64+0x4c/0xa0 [ 258.208041][ T7649] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.214518][ T7649] [ 258.214518][ T7649] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 258.222647][ T7649] down_read+0x42/0x2d0 [ 258.227358][ T7649] v2_read_dquot+0x4a/0x110 [ 258.232407][ T7649] dquot_acquire+0x152/0x520 [ 258.237544][ T7649] ext4_acquire_dquot+0x2e3/0x4a0 [ 258.243193][ T7649] dqget+0x713/0xbb0 [ 258.247663][ T7649] __dquot_initialize+0x324/0xd00 [ 258.253237][ T7649] ext4_process_orphan+0x4c/0x2e0 [ 258.258809][ T7649] ext4_orphan_cleanup+0xc32/0x1470 [ 258.264558][ T7649] ext4_fill_super+0x6f0c/0x78f0 [ 258.270036][ T7649] get_tree_bdev+0x3e6/0x610 [ 258.275172][ T7649] vfs_get_tree+0x88/0x270 [ 258.280125][ T7649] do_new_mount+0x247/0xa40 [ 258.285184][ T7649] __se_sys_mount+0x2e3/0x3d0 [ 258.290406][ T7649] do_syscall_64+0x4c/0xa0 [ 258.295395][ T7649] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.301838][ T7649] [ 258.301838][ T7649] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 258.309513][ T7649] __lock_acquire+0x2d18/0x7c40 [ 258.314948][ T7649] lock_acquire+0x1bb/0x4a0 [ 258.319998][ T7649] __mutex_lock+0x12d/0xae0 [ 258.325051][ T7649] dquot_commit+0x5a/0x410 [ 258.330007][ T7649] ext4_write_dquot+0x1f0/0x360 [ 258.335406][ T7649] mark_all_dquot_dirty+0xf9/0x400 [ 258.341063][ T7649] __dquot_alloc_space+0x5f6/0xe50 [ 258.346718][ T7649] ext4_mb_new_blocks+0xf55/0x44d0 [ 258.352381][ T7649] ext4_ext_map_blocks+0x18d1/0x6640 [ 258.358270][ T7649] ext4_map_blocks+0x9d7/0x1a90 [ 258.363671][ T7649] ext4_getblk+0x1c5/0x720 [ 258.368655][ T7649] ext4_bread+0x26/0x170 [ 258.373445][ T7649] ext4_append+0x2bb/0x560 [ 258.378451][ T7649] ext4_init_new_dir+0x2b8/0x550 [ 258.383940][ T7649] ext4_mkdir+0x4c3/0xc90 [ 258.388817][ T7649] vfs_mkdir+0x386/0x570 [ 258.393640][ T7649] do_mkdirat+0x1d8/0x440 [ 258.398511][ T7649] __x64_sys_mkdirat+0x85/0x90 [ 258.403814][ T7649] do_syscall_64+0x4c/0xa0 [ 258.408776][ T7649] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.415216][ T7649] [ 258.415216][ T7649] other info that might help us debug this: [ 258.415216][ T7649] [ 258.425462][ T7649] Chain exists of: [ 258.425462][ T7649] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 258.425462][ T7649] [ 258.439140][ T7649] Possible unsafe locking scenario: [ 258.439140][ T7649] [ 258.446608][ T7649] CPU0 CPU1 [ 258.451984][ T7649] ---- ---- [ 258.457359][ T7649] lock(&ei->i_data_sem/2); [ 258.461974][ T7649] lock(&s->s_dquot.dqio_sem); [ 258.469364][ T7649] lock(&ei->i_data_sem/2); [ 258.476496][ T7649] lock(&dquot->dq_lock); [ 258.480944][ T7649] [ 258.480944][ T7649] *** DEADLOCK *** [ 258.480944][ T7649] [ 258.489100][ T7649] 4 locks held by syz.4.1101/7649: [ 258.494223][ T7649] #0: ffff888053f7e460 (sb_writers#4){++++}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 258.503414][ T7649] #1: ffff88807179e850 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 258.514063][ T7649] #2: ffff8880742752c8 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x914/0x1a90 [ 258.524020][ T7649] #3: ffffffff8cc750a8 (dquot_srcu){....}-{0:0}, at: __dquot_alloc_space+0x16e/0xe50 [ 258.533622][ T7649] [ 258.533622][ T7649] stack backtrace: [ 258.539533][ T7649] CPU: 1 PID: 7649 Comm: syz.4.1101 Not tainted syzkaller #0 [ 258.546919][ T7649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 258.557000][ T7649] Call Trace: [ 258.560332][ T7649] [ 258.563280][ T7649] dump_stack_lvl+0x188/0x24e [ 258.567993][ T7649] ? load_image+0x410/0x410 [ 258.572527][ T7649] ? show_regs_print_info+0x12/0x12 [ 258.577736][ T7649] ? print_circular_bug+0x12b/0x1a0 [ 258.582961][ T7649] check_noncircular+0x296/0x330 [ 258.587927][ T7649] ? add_chain_block+0x9b0/0x9b0 [ 258.592885][ T7649] ? lockdep_lock+0xf1/0x1f0 [ 258.597494][ T7649] ? _find_first_zero_bit+0xd2/0x100 [ 258.602903][ T7649] __lock_acquire+0x2d18/0x7c40 [ 258.607776][ T7649] ? verify_lock_unused+0x140/0x140 [ 258.612986][ T7649] ? mark_lock+0x94/0x320 [ 258.617352][ T7649] lock_acquire+0x1bb/0x4a0 [ 258.621887][ T7649] ? dquot_commit+0x5a/0x410 [ 258.626515][ T7649] ? finish_task_switch+0x262/0x8e0 [ 258.631866][ T7649] ? __might_sleep+0xd0/0xd0 [ 258.636485][ T7649] ? read_lock_is_recursive+0x10/0x10 [ 258.641896][ T7649] __mutex_lock+0x12d/0xae0 [ 258.646432][ T7649] ? dquot_commit+0x5a/0x410 [ 258.651047][ T7649] ? __might_sleep+0xd0/0xd0 [ 258.655662][ T7649] ? dquot_commit+0x5a/0x410 [ 258.660282][ T7649] ? __sched_text_start+0x8/0x8 [ 258.665167][ T7649] ? mutex_lock_nested+0x10/0x10 [ 258.670145][ T7649] ? ext4_journal_check_start+0x17d/0x240 [ 258.675901][ T7649] dquot_commit+0x5a/0x410 [ 258.680343][ T7649] ext4_write_dquot+0x1f0/0x360 [ 258.685255][ T7649] mark_all_dquot_dirty+0xf9/0x400 [ 258.690394][ T7649] __dquot_alloc_space+0x5f6/0xe50 [ 258.695524][ T7649] ? __dquot_alloc_space+0x16e/0xe50 [ 258.700836][ T7649] ext4_mb_new_blocks+0xf55/0x44d0 [ 258.705971][ T7649] ? ext4_find_extent+0x372/0xde0 [ 258.711020][ T7649] ? rcu_is_watching+0x11/0xa0 [ 258.715903][ T7649] ? memset+0x1e/0x40 [ 258.719959][ T7649] ? ext4_mb_pa_callback+0xd0/0xd0 [ 258.725108][ T7649] ? ext4_inode_to_goal_block+0x313/0x450 [ 258.730854][ T7649] ext4_ext_map_blocks+0x18d1/0x6640 [ 258.736179][ T7649] ? ext4_ext_release+0x10/0x10 [ 258.741058][ T7649] ? rwsem_write_trylock+0x135/0x1c0 [ 258.746385][ T7649] ? ext4_es_lookup_extent+0x638/0xb00 [ 258.751887][ T7649] ext4_map_blocks+0x9d7/0x1a90 [ 258.756758][ T7649] ? ext4_issue_zeroout+0x250/0x250 [ 258.761990][ T7649] ext4_getblk+0x1c5/0x720 [ 258.766430][ T7649] ? ext4_get_block_unwritten+0x100/0x100 [ 258.772269][ T7649] ? __ext4_new_inode+0x326d/0x3b50 [ 258.777493][ T7649] ext4_bread+0x26/0x170 [ 258.781837][ T7649] ext4_append+0x2bb/0x560 [ 258.786285][ T7649] ? ext4_init_new_dir+0x550/0x550 [ 258.791434][ T7649] ? dquot_initialize+0x20/0x20 [ 258.796305][ T7649] ext4_init_new_dir+0x2b8/0x550 [ 258.801277][ T7649] ext4_mkdir+0x4c3/0xc90 [ 258.805639][ T7649] ? ext4_symlink+0x940/0x940 [ 258.810353][ T7649] ? inode_permission+0xef/0x480 [ 258.815306][ T7649] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 258.820473][ T7649] ? security_inode_mkdir+0xb3/0x100 [ 258.825849][ T7649] vfs_mkdir+0x386/0x570 [ 258.830129][ T7649] do_mkdirat+0x1d8/0x440 [ 258.834482][ T7649] ? vfs_mkdir+0x570/0x570 [ 258.838932][ T7649] __x64_sys_mkdirat+0x85/0x90 [ 258.843723][ T7649] do_syscall_64+0x4c/0xa0 [ 258.848168][ T7649] ? clear_bhb_loop+0x60/0xb0 [ 258.852886][ T7649] ? clear_bhb_loop+0x60/0xb0 [ 258.857582][ T7649] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.863510][ T7649] RIP: 0033:0x7ff3cdf9cd07 [ 258.867953][ T7649] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.887593][ T7649] RSP: 002b:00007ff3cee33e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 258.896020][ T7649] RAX: ffffffffffffffda RBX: 00007ff3cee33ee0 RCX: 00007ff3cdf9cd07 [ 258.903997][ T7649] RDX: 00000000000001ff RSI: 0000200000000140 RDI: 00000000ffffff9c [ 258.911977][ T7649] RBP: 0000000000000000 R08: 0000200000000180 R09: 0000000000000000 [ 258.919957][ T7649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000140 [ 258.927931][ T7649] R13: 00007ff3cee33ea0 R14: 0000000000000000 R15: 0000000000000000 [ 258.935918][ T7649] [ 259.016532][ T7649] EXT4-fs error (device loop4): ext4_lookup:1855: inode #19: comm syz.4.1101: 'file0' linked to parent dir [ 259.088060][ T4271] EXT4-fs (loop4): unmounting filesystem.