last executing test programs: 9m11.575779772s ago: executing program 4 (id=199): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000100)) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c0c0) 9m11.2125979s ago: executing program 4 (id=203): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@noquota}, {@delalloc}, {@barrier}]}, 0x1, 0xbd0, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20) fallocate(r0, 0x20, 0x4000, 0x3000000) 9m10.07041295s ago: executing program 4 (id=212): syz_mount_image$nilfs2(&(0x7f0000002680), &(0x7f00000026c0)='./file0\x00', 0x0, &(0x7f0000002700), 0x1, 0x267d, &(0x7f0000002740)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40106e80, &(0x7f0000000040)={0x1, 0x1, 0x9, 0x0, 0x7, 0x4fe4, 0x2401}) 9m8.909875411s ago: executing program 4 (id=215): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) 9m8.585742548s ago: executing program 4 (id=218): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file2\x00', 0x2000000, &(0x7f0000000000)=ANY=[], 0x9, 0x1ce, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read$FUSE(r0, &(0x7f0000003f00)={0x2020}, 0x2020) 9m8.036417897s ago: executing program 4 (id=219): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff}}, 0x10) 9m7.463081528s ago: executing program 32 (id=219): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff}}, 0x10) 6m47.621815636s ago: executing program 1 (id=1388): r0 = syz_io_uring_setup(0xd03, &(0x7f0000002900)={0x0, 0xf25d, 0x10, 0x0, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_enter(r0, 0x88e, 0x1f, 0x0, 0x0, 0x0) 6m47.026828638s ago: executing program 1 (id=1394): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271f, 0x0, &(0x7f0000000000)) 6m46.755233502s ago: executing program 1 (id=1398): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) 6m46.528893634s ago: executing program 1 (id=1401): syz_mount_image$nilfs2(&(0x7f0000000a00), &(0x7f0000000080)='./file0\x00', 0x800408, &(0x7f0000000500)=ANY=[@ANYBLOB="00c1d143753d2c083ee422f83383b46202c4de2de291601c80052445e264d4679b97678c14da06e79245374cfb5a59ebaeff670caadb5694b952eb30672a383ac36fadcd60e27a35d7"], 0x1, 0xa0e, &(0x7f00000020c0)="$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") mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 6m45.764093414s ago: executing program 1 (id=1412): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x3, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x16}}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) 6m45.043698702s ago: executing program 1 (id=1419): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087900060000000000000109022400010000200209040000090300030009210b00100122290009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002229000000835d2e6def0bf745506883672f3d98a0a3675ca97899660b22391c804a441bc338adf9e1c3f718"], 0x0}, 0x0) 6m44.571069246s ago: executing program 33 (id=1419): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087900060000000000000109022400010000200209040000090300030009210b00100122290009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002229000000835d2e6def0bf745506883672f3d98a0a3675ca97899660b22391c804a441bc338adf9e1c3f718"], 0x0}, 0x0) 6m39.260967766s ago: executing program 0 (id=1464): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) lseek(r0, 0x100, 0x7) 6m39.085820314s ago: executing program 0 (id=1465): syz_mount_image$nilfs2(&(0x7f0000003380), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f0000003300)={[{}, {@discard}, {@norecovery}, {@order_strict}, {@nobarrier}, {@order_strict}, {@nodiscard}, {@discard}], [], 0x2c}, 0x3, 0xed3, &(0x7f0000002400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0x10, 0xe5}, {0x0, 0x0, 0x10, 0x20c, 0x4}, {0x0}, {0x0, 0x0, 0x28, 0x9, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0xffffffffffffffff}}) 6m38.518509504s ago: executing program 0 (id=1466): r0 = syz_open_dev$media(&(0x7f0000000080), 0x2, 0x40001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000003c0)={0x0, 0xfffffffffffffe10, 0x0, 0x0, 0x5b, 0x0, &(0x7f00000016c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m38.341183864s ago: executing program 0 (id=1468): syz_mount_image$nilfs2(&(0x7f0000000a00), &(0x7f0000000080)='./file0\x00', 0x800408, &(0x7f0000000500)=ANY=[@ANYBLOB="00c1d143753d2c083ee422f83383b46202c4de2de291601c80052445e264d4679b97678c14da06e79245374cfb5a59ebaeff670caadb5694b952eb30672a383ac36fadcd60e27a35d7"], 0x1, 0xa0e, &(0x7f00000020c0)="$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") mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 6m37.814187831s ago: executing program 0 (id=1470): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 6m35.596759837s ago: executing program 0 (id=1482): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x3000040, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {&(0x7f0000000340)=[{0xad, 0x700}, {0x6, 0x10}], 0x2, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0xffff}}) 6m35.142757441s ago: executing program 34 (id=1482): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x3000040, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {&(0x7f0000000340)=[{0xad, 0x700}, {0x6, 0x10}], 0x2, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0xffff}}) 2m59.171649455s ago: executing program 5 (id=3154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 2m58.954443976s ago: executing program 5 (id=3156): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000040)={[{@nodatacow}, {@flushoncommit}]}, 0x11, 0x5109, &(0x7f000000f400)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x4) 2m56.57950311s ago: executing program 5 (id=3174): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x13, &(0x7f0000001900)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710063d2ac", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m55.065294859s ago: executing program 5 (id=3182): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x14, r0, 0x1, 0x70bd27, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m54.671535209s ago: executing program 5 (id=3187): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x5) 2m54.412227212s ago: executing program 5 (id=3188): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x30, 0x4, 0x1) 2m39.347027839s ago: executing program 35 (id=3188): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x30, 0x4, 0x1) 4.647071888s ago: executing program 6 (id=4349): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x141001, 0x0) sendfile(r1, r0, 0x0, 0x10001) 4.260584968s ago: executing program 2 (id=4354): r0 = socket(0xa, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000800)={[{@dir_umask={'dir_umask', 0x3d, 0x7}}, {@creator={'creator', 0x3d, "fddb3dde"}}, {@creator={'creator', 0x3d, "8c10b081"}}, {@codepage={'codepage', 0x3d, 'default'}}, {@part={'part', 0x3d, 0x9}}, {@uid}, {@creator={'creator', 0x3d, "177c3afa"}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@gid={'gid', 0x3d, r1}}, {@file_umask={'file_umask', 0x3d, 0x7}}, {@session={'session', 0x3d, 0x9}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@codepage={'codepage', 0x3d, 'maciceland'}}, {@dir_umask={'dir_umask', 0x3d, 0x8}}]}, 0x2, 0x36b, &(0x7f0000000d80)="$eJzs3c1O1EAAB/D/tPspBCtgMN5ETTyRBQ8aY6Ix3HwBD4aIUBJCxQQwUaIBPXgyxpuJiUdvno2+gl6ML6AnDsSTXggx1Mx0uu2Wme4uHwXC/5ewdNv5nnY6g+4WRHRs3Rr/+eHymvwRZQAugGuAA6AGlACcxlDt0fzS7FLgT+cl5KoY8kcgiim2hZma901RZTwVQ/PkuxJ60/tof4RhGP5qG+pPIWWhgyOia38bB6jqq1MdrxVesh1Z7SBAtZiiHCKpHhYb2DD3OBERHSf6/u/ou0Svnr87DnBRz8OP0v0/ll5BtNztNoCnJ4svz6Gh7v+Pk94MhWwf1SIiWe+pJZxsQydeJZrSUqmUMzvDpLkriM6slg4QhlVly4xMlcWpz8wG/siqSuAFbmipYIPqdTo6dWO20laiX8OGtWmOvLrn61F1KMs6lC3lH+g6xy/reGvObuJbpX2ZxFfxXUwID+8wjT69sxQK2TgqugfU9e64TWcDv2FPUdXSU7VstNQyufpOqUzOxj3w+WNSy7qtXWtwZVlMZCoiO3/XJQDeWFpB7e5vHRR074zaa6diDRhjjTXfbxpjDWZj1WfKgT8y9TCITvpwxZ7tXjDO78VrcUcM4zc+YbzZ/7KrXTnUW67M7MgvVMioFRrN+piUVEhLP7ZQJ9uDrq5Mwua/MKLfZ8dhMw+vcB9X0bf4ZHluMgj8hcI25GhhPBRfKgWXx7YRnYj6dJR75O9UGNTkhmzuPct0KwxD46GSucXiDaejLCpxUW1ljk6dK++bVVbDrP5Tyu4qiNWoDVOHbtoDJ8OmqrvWZaYq+kozlrxbdBP9b5S77HdjGJGUcKGyvydknNVkEJxpdpyLakdXSn0Hmd5+NjcZ7HhEoiNk8eU5PeZg6O769YMuDhVPzrtEtP5LrVcaatSRL17OaiRsl3gqxVHLCqhfvZ5IVhtC//0+Z83VY1/B9cQbgT+Wt+Y6fwm4kNopc3MQ5/g8m6yHeLJ+CP9VsmoqVj27Yzm1LcbxA/dS838iIiIiIiIiIiIiIiIiIiIiIiIiIjoSkv/07+3y4wRb+nNI5k9iJNaO4RdvEBERERERERERERERERERERERERERERHtTur5v4CrnhhT2fPn/8Zf7N3p83/dDp7/K9o+4pOI2vgfAAD//xhyY3Q=") 4.064096988s ago: executing program 6 (id=4356): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000002c0)=0x1, 0x4) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) 3.820714851s ago: executing program 2 (id=4360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}}, {0x14, 0x2, @in={0x2, 0x0, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 3.709551607s ago: executing program 6 (id=4361): setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b47880000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.640765881s ago: executing program 7 (id=4363): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010000, 0x0) 3.508472277s ago: executing program 6 (id=4364): syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f00000004c0), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SEND(r0, 0xd0009411, &(0x7f0000000180)={{r0}, 0x0, 0x0, 0xfffffeffffffffff, 0x4}) 3.378842734s ago: executing program 8 (id=4365): r0 = semget(0x0, 0x4, 0x39c) semop(r0, &(0x7f0000000000)=[{0x0, 0xc, 0x800}, {0x1, 0xffff, 0x1000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000240)=[0x7fff]) 3.335777757s ago: executing program 7 (id=4366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000008c0)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x2400c000) 3.27572081s ago: executing program 2 (id=4367): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000080)=0x6, 0x4) getsockopt$inet_mptcp_buf(r0, 0x6, 0x4, 0xfffffffffffffffd, &(0x7f0000000000)) 2.989547255s ago: executing program 8 (id=4368): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x4000000}, 0x0) 2.982910215s ago: executing program 7 (id=4369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x40, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x2008040) 2.905436449s ago: executing program 2 (id=4371): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000040}, 0x40040) 2.589172095s ago: executing program 7 (id=4372): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x0, 0x60, 0xd0e0000, 0x0, 0x100, 0x3c0, 0x1d8, 0x1d8, 0x3c0, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x2, 0x0, 0x0, './file0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x9400, 0x98, 0x100, 0x94, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) 2.561426827s ago: executing program 8 (id=4373): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x2, 0x12) memfd_create(0x0, 0xf) 2.525153569s ago: executing program 2 (id=4374): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@test_dummy_encryption}, {@init_itable_val}, {@minixdf}, {@jqfmt_vfsv1}, {@max_batch_time={'max_batch_time', 0x3d, 0x100}}, {@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@errors_remount}, {@auto_da_alloc}, {@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@sb={'sb', 0x3d, 0xffffffffffffffff}}, {@user_xattr}, {@dax}]}, 0xdf, 0x475, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 2.30335051s ago: executing program 7 (id=4376): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000080), 0x1, 0x79a, &(0x7f0000002880)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2.283001871s ago: executing program 8 (id=4377): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x10040, &(0x7f00000001c0)={[{@shortname_lower}, {@uni_xlate}, {@shortname_lower}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@shortname_lower}, {@numtail}, {@shortname_mixed}, {@shortname_winnt}, {@uni_xlateno}, {@rodir}, {@uni_xlateno}, {@shortname_lower}]}, 0x25, 0x35b, &(0x7f0000000640)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.269134612s ago: executing program 3 (id=4378): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="3000000000000000290000000b0000000002"], 0x30}, 0x0) 1.885103392s ago: executing program 3 (id=4379): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x74, 0x43, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000440), 0xfffffffe, r0}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f00000001c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004001, 0x8, 0x0, 0x0}}, 0x10) 1.652202065s ago: executing program 3 (id=4380): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3d}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140), &(0x7f00000000c0)=0x8) 1.608943776s ago: executing program 2 (id=4381): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000040411215500000000000010902240001000000c609040007020300010009210000050122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002213"], 0x0}, 0x0) 1.370704209s ago: executing program 3 (id=4382): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x30, r1, 0x7, 0x70bd2b, 0x25dfdc01, {{0x8}, {@val={0x8, 0x1, 0x27}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x2}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x91}, 0x4000090) 1.303069512s ago: executing program 3 (id=4383): open(0x0, 0x40, 0x10) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='cifs.spnego\x00', 0x0) 1.072680504s ago: executing program 6 (id=4384): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x5, 0x401, 0x1, {0x0, 0xea60}, {0x0, 0x2710}, {0x2, 0x1, 0x1}, 0x1, @can={{0x4, 0x1, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "6084d60f5b369079"}}, 0x48}, 0x1, 0x0, 0x0, 0x4040880}, 0x84844) 1.037868467s ago: executing program 3 (id=4385): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000407d1e2e2c0000000000010902240001000040b1090400000103000100092101019f0122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="400306"], 0x0, 0x0, 0x0, 0x0}, 0x0) 929.081092ms ago: executing program 7 (id=4386): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 883.792984ms ago: executing program 8 (id=4387): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_cmd={0xe, 0x1, 0x7fff, 0x0, 0x3, 0x4, 0x41, 0x5, 0x8, 0x6, 0x7, 0x4, 0xfff3, 0x80, 0x84, 0x7f, [0x7fffffff, 0x4]}}) 569.315151ms ago: executing program 8 (id=4388): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) accept$alg(r0, 0x0, 0x0) 0s ago: executing program 6 (id=4389): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) kernel console output (not intermixed with test programs): lict (0x9,4) [ 514.910936][T13772] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 514.931637][T13772] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 514.938171][T13772] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 515.216678][T13784] loop7: detected capacity change from 0 to 1024 [ 515.235955][ T5642] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 515.486300][T13784] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 2: comm syz.7.3379: lblock 2 mapped to illegal pblock 2 (length 1) [ 515.558068][T13784] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 515.578455][ T5642] usb 9-1: Using ep0 maxpacket: 32 [ 515.590309][T13784] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 48: comm syz.7.3379: lblock 0 mapped to illegal pblock 48 (length 1) [ 515.658610][T13784] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 515.691221][T13784] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.3379: Failed to acquire dquot type 0 [ 515.726397][ T5642] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 515.747806][T13784] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 515.757607][ T5642] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 515.806731][ T5642] usb 9-1: config 0 interface 0 has no altsetting 0 [ 515.818089][T13784] EXT4-fs error (device loop7): ext4_evict_inode:281: inode #11: comm syz.7.3379: mark_inode_dirty error [ 515.818401][T13784] EXT4-fs warning (device loop7): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 515.818487][T13784] EXT4-fs (loop7): 1 orphan inode deleted [ 515.818520][T13784] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 515.918495][ T5642] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 515.949620][ T5642] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.988502][ T5642] usb 9-1: config 0 descriptor?? [ 516.076341][T13807] loop2: detected capacity change from 0 to 256 [ 516.129474][T13807] exfat: Deprecated parameter 'utf8' [ 516.149105][ T8565] EXT4-fs (loop7): unmounting filesystem. [ 516.207249][T13807] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 516.230170][ T1114] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 516.286543][ T26] audit: type=1800 audit(1777079317.985:199): pid=13807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3387" name="file1" dev="loop2" ino=1048862 res=0 errno=0 [ 516.305537][ T1114] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 516.387546][ T1114] EXT4-fs error (device loop7): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 0 [ 516.421804][ T8565] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 516.450137][ T8565] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 516.541796][ T8565] EXT4-fs error (device loop7): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 516.560697][ T5642] corsair-psu 0003:1B1C:1C09.0028: unknown main item tag 0x0 [ 516.568450][ T5642] corsair-psu 0003:1B1C:1C09.0028: unknown main item tag 0x0 [ 516.612761][ T5642] corsair-psu 0003:1B1C:1C09.0028: unknown main item tag 0x0 [ 516.637781][ T5642] corsair-psu 0003:1B1C:1C09.0028: unknown main item tag 0x0 [ 516.699675][ T5642] corsair-psu 0003:1B1C:1C09.0028: unknown main item tag 0x0 [ 516.777451][ T5642] corsair-psu 0003:1B1C:1C09.0028: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.8-1/input0 [ 516.860749][T13813] loop6: detected capacity change from 0 to 4096 [ 516.902704][ T5642] corsair-psu 0003:1B1C:1C09.0028: unable to initialize device (-90) [ 516.939458][ T5642] corsair-psu: probe of 0003:1B1C:1C09.0028 failed with error -90 [ 516.958382][T13813] NILFS (loop6): invalid segment: Checksum error in segment payload [ 517.030250][T13813] NILFS (loop6): trying rollback from an earlier position [ 517.042662][ T5642] usb 9-1: USB disconnect, device number 2 [ 517.173913][T13813] NILFS (loop6): recovery complete [ 517.212789][T13823] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 517.532898][T13820] fido_id[13820]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 517.950645][T13834] loop6: detected capacity change from 0 to 1024 [ 518.050627][T13815] mmap: syz.2.3390 (13815): VmData 25833472 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 519.154026][T13861] loop8: detected capacity change from 0 to 512 [ 519.349685][T13861] EXT4-fs error (device loop8): ext4_orphan_get:1405: inode #15: comm syz.8.3404: inode has both inline data and extents flags [ 519.466268][T13861] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.3404: couldn't read orphan inode 15 (err -117) [ 519.548074][T13861] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 519.841178][T13537] EXT4-fs (loop8): unmounting filesystem. [ 520.129761][ T5585] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 520.262586][T13888] netlink: 296 bytes leftover after parsing attributes in process `syz.7.3412'. [ 520.364626][ T5585] usb 3-1: config 0 has an invalid interface number: 221 but max is 0 [ 520.390710][ T5585] usb 3-1: config 0 has no interface number 0 [ 520.428492][ T5585] usb 3-1: config 0 interface 221 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.479605][ T5585] usb 3-1: config 0 interface 221 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.524292][ T5585] usb 3-1: config 0 interface 221 has no altsetting 0 [ 520.555595][ T5585] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice=10.00 [ 520.576308][T13894] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 520.621488][ T5585] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.670962][ T5585] usb 3-1: config 0 descriptor?? [ 521.117197][ T5585] uclogic 0003:5543:0522.0029: item fetching failed at offset 0/3 [ 521.188768][ T5585] uclogic 0003:5543:0522.0029: parse failed [ 521.207167][ T5585] uclogic: probe of 0003:5543:0522.0029 failed with error -22 [ 521.383732][ T5585] usb 3-1: USB disconnect, device number 27 [ 521.648549][T13926] loop6: detected capacity change from 0 to 8 [ 521.810234][T13926] SQUASHFS error: Unable to read directory block [2c0:35] [ 522.218642][T13936] netlink: 'syz.6.3429': attribute type 8 has an invalid length. [ 522.554580][T13944] loop6: detected capacity change from 0 to 256 [ 522.627395][T13944] exfat: Deprecated parameter 'utf8' [ 522.669860][T13944] exfat: Deprecated parameter 'namecase' [ 522.696099][T13944] exfat: Deprecated parameter 'namecase' [ 522.732163][T13944] exfat: Deprecated parameter 'utf8' [ 522.831039][T13944] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 523.256909][T13958] loop7: detected capacity change from 0 to 4096 [ 523.356232][T13964] loop6: detected capacity change from 0 to 512 [ 523.468357][T13960] loop3: detected capacity change from 0 to 4096 [ 523.510055][T13966] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 523.559909][T13964] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 523.614435][T13960] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 524.142464][ T26] audit: type=1800 audit(1777079325.845:200): pid=13960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3440" name="file1" dev="loop3" ino=24 res=0 errno=0 [ 524.162500][T13976] loop8: detected capacity change from 0 to 512 [ 524.206839][T13937] loop2: detected capacity change from 0 to 32768 [ 524.222096][T13976] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 524.385489][T13980] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3446'. [ 524.388436][ T4278] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 524.467094][T13976] EXT4-fs error (device loop8): ext4_orphan_get:1405: inode #17: comm syz.8.3445: inode has both inline data and extents flags [ 524.539824][T13976] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.3445: couldn't read orphan inode 17 (err -117) [ 524.556460][ T4278] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 524.562765][T13976] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 524.577680][ T4278] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 524.787938][T13989] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3450'. [ 524.897121][T13537] EXT4-fs (loop8): unmounting filesystem. [ 525.537614][T14010] loop3: detected capacity change from 0 to 256 [ 525.552408][ T5647] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 526.053624][ T5647] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 526.116081][ T5647] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 526.169660][ T5647] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 526.203434][ T5647] usb 9-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 526.247804][ T5647] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.303876][ T5647] usb 9-1: config 0 descriptor?? [ 526.326285][T13998] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 526.808196][ T5647] petalynx 0003:18B1:0037.002A: ignoring exceeding usage max [ 526.834958][ T5647] petalynx 0003:18B1:0037.002A: usage index exceeded [ 526.884199][ T5647] petalynx 0003:18B1:0037.002A: item 0 4 2 0 parsing failed [ 526.910135][ T5647] petalynx 0003:18B1:0037.002A: parse failed [ 526.916330][ T5647] petalynx: probe of 0003:18B1:0037.002A failed with error -22 [ 527.074751][ T5642] usb 9-1: USB disconnect, device number 3 [ 527.117299][T14038] sctp: [Deprecated]: syz.6.3468 (pid 14038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 527.117299][T14038] Use struct sctp_sack_info instead [ 527.175923][T14038] sctp: [Deprecated]: syz.6.3468 (pid 14038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 527.175923][T14038] Use struct sctp_sack_info instead [ 528.136570][T14032] loop2: detected capacity change from 0 to 32768 [ 528.282068][T14032] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.3466 (14032) [ 528.328642][T14067] netlink: 'syz.6.3478': attribute type 1 has an invalid length. [ 528.376266][T14032] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 528.459463][T14032] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 528.531945][T14032] BTRFS info (device loop2): using free space tree [ 528.650849][T14081] loop8: detected capacity change from 0 to 64 [ 528.846613][T14091] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3483'. [ 529.089643][T14032] BTRFS info (device loop2): enabling ssd optimizations [ 529.229905][T14104] loop6: detected capacity change from 0 to 736 [ 529.400031][ T4273] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 529.408441][T14107] loop8: detected capacity change from 0 to 1024 [ 530.281334][ T11] hfsplus: b-tree write err: -5, ino 25 [ 530.287243][ T11] hfsplus: b-tree write err: -5, ino 4 [ 530.331550][ T11] hfsplus: b-tree write err: -5, ino 2 [ 530.913894][T14123] loop6: detected capacity change from 0 to 4096 [ 531.026371][T14123] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 531.215894][T14123] ntfs3: loop6: Failed to load $Extend. [ 531.443168][T14123] ntfs3: loop6: ino=5, "/" directory corrupted [ 531.536670][T14111] loop3: detected capacity change from 0 to 32768 [ 531.539282][T14140] loop8: detected capacity change from 0 to 64 [ 531.757425][T14111] XFS (loop3): Mounting V5 Filesystem [ 532.009043][T14111] XFS (loop3): Ending clean mount [ 532.017942][T14111] XFS (loop3): Quotacheck needed: Please wait. [ 532.099276][T14154] loop6: detected capacity change from 0 to 1024 [ 532.190713][T14158] loop8: detected capacity change from 0 to 256 [ 532.205423][T14154] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 532.247591][T14154] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 532.267990][T14158] exfat: Deprecated parameter 'utf8' [ 532.319911][T14158] exfat: Deprecated parameter 'namecase' [ 532.336871][T14111] XFS (loop3): Quotacheck: Done. [ 532.354822][T14154] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #3: comm syz.6.3499: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 532.400023][T14158] exfat: Deprecated parameter 'namecase' [ 532.465400][T14154] EXT4-fs (loop6): no journal found [ 532.471054][T14154] EXT4-fs (loop6): can't get journal size [ 532.477502][T14158] exfat: Deprecated parameter 'utf8' [ 532.489093][T14154] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 532.528827][T14158] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 532.611112][T14158] exfat: Deprecated parameter 'utf8' [ 532.622203][ T8385] EXT4-fs (loop6): unmounting filesystem. [ 532.625739][T14158] exfat: Deprecated parameter 'utf8' [ 532.654318][T14158] exfat: Deprecated parameter 'utf8' [ 532.659154][ T4278] XFS (loop3): Unmounting Filesystem [ 533.062648][T14172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3506'. [ 533.384626][T14178] vivid-000: disconnect [ 533.403244][T14177] vivid-000: reconnect [ 533.936482][T14184] loop2: detected capacity change from 0 to 8192 [ 534.040314][T14184] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 534.058631][T14184] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 534.097819][T14184] REISERFS (device loop2): using ordered data mode [ 534.127722][T14184] reiserfs: using flush barriers [ 534.200216][T14184] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 534.277310][T14184] REISERFS (device loop2): checking transaction log (loop2) [ 534.304208][T14184] REISERFS (device loop2): Using r5 hash to sort names [ 534.339016][T14184] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 534.413170][T14184] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 534.669352][T14199] device bridge0 entered promiscuous mode [ 534.750524][T14198] device bridge0 left promiscuous mode [ 535.021834][T14205] loop3: detected capacity change from 0 to 128 [ 535.049027][T14205] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 535.165177][T14205] hpfs: filesystem error: improperly stopped [ 535.219576][T14205] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 535.266517][T14205] hpfs: You really don't want any checks? You are crazy... [ 535.309911][T14205] hpfs: hpfs_map_sector(): read error [ 535.315439][T14205] hpfs: code page support is disabled [ 535.342034][T14205] hpfs: hpfs_map_4sectors(): unaligned read [ 535.382465][T14205] hpfs: hpfs_map_4sectors(): unaligned read [ 535.388482][T14205] hpfs: filesystem error: unable to find root dir [ 535.467099][T14215] loop2: detected capacity change from 0 to 256 [ 535.520767][T14215] exfat: Deprecated parameter 'namecase' [ 535.580698][T14215] exfat: Deprecated parameter 'utf8' [ 535.714995][T14215] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 536.268217][T14232] loop3: detected capacity change from 0 to 1024 [ 536.571343][T14237] loop2: detected capacity change from 0 to 2048 [ 536.598929][T14239] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 536.709255][T14237] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 536.731915][T14237] ext4 filesystem being mounted at /674/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 536.886222][T14213] loop8: detected capacity change from 0 to 32768 [ 536.987202][T14213] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop8 scanned by syz.8.3518 (14213) [ 537.084272][T14213] BTRFS info (device loop8): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 537.089345][T14247] loop6: detected capacity change from 0 to 512 [ 537.170690][T14243] overlayfs: Failed to create volatile/dirty file. [ 537.171037][T14213] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 537.272824][T14247] EXT4-fs (loop6): orphan cleanup on readonly fs [ 537.292343][T14213] BTRFS info (device loop8): using free space tree [ 537.434857][T14257] loop3: detected capacity change from 0 to 736 [ 537.449607][T14247] EXT4-fs error (device loop6): ext4_find_extent:936: inode #4: comm syz.6.3528: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 537.537798][T14247] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=-117 [ 537.560817][T14247] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 537.579663][T14247] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 537.590114][T14247] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 537.636551][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 537.682877][T14213] BTRFS info (device loop8): enabling ssd optimizations [ 537.736639][T14247] EXT4-fs error (device loop6): ext4_lookup:1855: inode #2: comm syz.6.3528: 'file0' linked to parent dir [ 538.024362][ T8385] EXT4-fs (loop6): unmounting filesystem. [ 538.269933][T13537] BTRFS info (device loop8): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 539.404332][T14309] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3544'. [ 539.468508][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3544'. [ 539.514678][T14312] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3544'. [ 539.611309][T14312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3544'. [ 539.858916][T14288] loop2: detected capacity change from 0 to 32768 [ 539.863979][T14318] loop6: detected capacity change from 0 to 512 [ 540.410592][T14329] loop3: detected capacity change from 0 to 1024 [ 541.083573][T14344] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3555'. [ 541.239496][T14341] loop3: detected capacity change from 0 to 4096 [ 541.320451][T14348] loop6: detected capacity change from 0 to 64 [ 541.347335][T14346] loop7: detected capacity change from 0 to 1024 [ 541.393459][T14351] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 541.471496][T14341] NILFS (loop3): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 541.770293][T14346] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 541.779051][T14346] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.890105][T14361] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 542.094060][T14363] loop3: detected capacity change from 0 to 4096 [ 542.101584][ T8565] EXT4-fs (loop7): unmounting filesystem. [ 542.271189][T14368] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 542.617927][T14353] loop2: detected capacity change from 0 to 32768 [ 542.893220][T14353] JBD2: Ignoring recovery information on journal [ 543.151457][T14353] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 543.635801][T14367] loop6: detected capacity change from 0 to 32768 [ 543.690353][ T4273] ocfs2: Unmounting device (7,2) on (node local) [ 543.697959][T14367] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.3561 (14367) [ 543.799934][T14367] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 543.829328][T14367] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 543.870769][T14367] BTRFS info (device loop6): setting nodatasum [ 543.923085][T14367] BTRFS info (device loop6): force zlib compression, level 3 [ 543.946236][T14367] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 544.002875][T14367] BTRFS info (device loop6): use lzo compression, level 0 [ 544.024854][T14367] BTRFS info (device loop6): turning on flush-on-commit [ 544.053142][T14367] BTRFS info (device loop6): enabling auto defrag [ 544.083527][T14367] BTRFS info (device loop6): max_inline at 4096 [ 544.090310][T14367] BTRFS info (device loop6): using free space tree [ 544.402816][T14367] BTRFS info (device loop6): enabling ssd optimizations [ 544.719967][ T8385] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 546.125713][T14459] loop6: detected capacity change from 0 to 8192 [ 546.169465][T14459] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 546.724129][T14463] loop6: detected capacity change from 0 to 4096 [ 546.834615][T14464] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 546.894651][T14463] NILFS error (device loop6): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 546.942037][T14455] loop2: detected capacity change from 0 to 32768 [ 546.975466][T14461] loop7: detected capacity change from 0 to 32768 [ 546.991211][T14463] Remounting filesystem read-only [ 547.004012][T14463] NILFS error (device loop6): nilfs_readdir: bad page in #2 [ 547.010681][T14455] XFS (loop2): Mounting V5 Filesystem [ 547.018571][T14461] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.3589 (14461) [ 547.068274][T14461] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 547.094398][T14461] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 547.149592][T14461] BTRFS info (device loop7): setting nodatasum [ 547.156111][T14461] BTRFS info (device loop7): force zlib compression, level 3 [ 547.179684][T14461] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8) [ 547.188986][T14461] BTRFS info (device loop7): use lzo compression, level 0 [ 547.278332][T14461] BTRFS info (device loop7): turning on flush-on-commit [ 547.292266][T14461] BTRFS info (device loop7): enabling auto defrag [ 547.298815][T14461] BTRFS info (device loop7): max_inline at 4096 [ 547.329620][T14461] BTRFS info (device loop7): using free space tree [ 547.333231][T14455] XFS (loop2): Ending clean mount [ 547.620727][T14491] loop8: detected capacity change from 0 to 64 [ 547.651571][T14455] XFS (loop2): Quotacheck needed: Please wait. [ 547.667179][T14487] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 547.819390][T14461] BTRFS info (device loop7): enabling ssd optimizations [ 547.890547][T14455] XFS (loop2): Quotacheck: Done. [ 548.144955][ T4273] XFS (loop2): Unmounting Filesystem [ 548.248347][ T8565] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 548.534090][T14510] loop6: detected capacity change from 0 to 2048 [ 550.139984][ T4935] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 550.369666][ T4935] usb 9-1: Using ep0 maxpacket: 8 [ 550.386188][ T4935] usb 9-1: unable to get BOS descriptor or descriptor too short [ 550.433509][ T4935] usb 9-1: config 4 interface 0 has no altsetting 0 [ 550.473084][ T4935] usb 9-1: string descriptor 0 read error: -22 [ 550.515480][ T4935] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 550.571791][ T4935] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 550.645739][ T4935] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 550.701416][ T4935] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 550.758233][T14560] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 550.766304][ T4935] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 550.778635][T14562] netlink: 143932 bytes leftover after parsing attributes in process `syz.7.3612'. [ 550.802951][ T4935] usb 9-1: media controller created [ 550.819259][T14562] netlink: zone id is out of range [ 550.866815][T14562] netlink: zone id is out of range [ 550.876860][T14562] netlink: zone id is out of range [ 550.886492][ T4935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 550.896520][T14535] usb 9-1: dvb_usb_au6610: wlen=245, aborting [ 550.919211][T14562] netlink: zone id is out of range [ 550.965043][T14562] netlink: zone id is out of range [ 550.989677][T14562] netlink: zone id is out of range [ 550.994371][ T4935] zl10353_read_register: readreg error (reg=127, ret==0) [ 551.021697][T14562] netlink: zone id is out of range [ 551.046647][T14562] netlink: zone id is out of range [ 551.069742][T14562] netlink: zone id is out of range [ 551.088040][T14562] netlink: zone id is out of range [ 551.193122][ T4935] usb 9-1: USB disconnect, device number 4 [ 551.281738][ T46] device hsr_slave_0 left promiscuous mode [ 551.289476][ T46] device hsr_slave_1 left promiscuous mode [ 551.332127][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.377110][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.416466][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.456572][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.487899][ T46] device bridge_slave_1 left promiscuous mode [ 551.512541][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.574014][ T46] device bridge_slave_0 left promiscuous mode [ 551.589491][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.617029][T14574] loop7: detected capacity change from 0 to 4096 [ 551.799654][T14574] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 551.811595][ T46] device veth1_macvtap left promiscuous mode [ 551.837097][ T46] device veth0_macvtap left promiscuous mode [ 551.887962][ T46] device veth1_vlan left promiscuous mode [ 551.904535][ T46] device veth0_vlan left promiscuous mode [ 552.067505][ T8565] EXT4-fs (loop7): unmounting filesystem. [ 552.346190][T14593] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3621'. [ 552.351938][T14594] option changes via remount are deprecated (pid=14590 comm=syz.3.3622) [ 552.427601][T14593] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3621'. [ 552.677778][T14555] loop6: detected capacity change from 0 to 40427 [ 552.758272][T14555] F2FS-fs (loop6): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 552.811349][T14555] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 552.841980][ T46] team0 (unregistering): Port device bridge1 removed [ 552.856258][T14555] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x35f7 [ 552.936248][T14555] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x3ffff [ 552.997970][T14555] F2FS-fs (loop6): invalid crc value [ 553.038858][T14555] F2FS-fs (loop6): Found nat_bits in checkpoint [ 553.152888][T14555] F2FS-fs (loop6): Start checkpoint disabled! [ 553.189378][T14555] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 553.199055][T14555] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 553.566535][ T4747] kernel write not supported for file /snd/midiC2D0 (pid: 4747 comm: kworker/0:15) [ 553.650238][ T1114] kworker/u4:4: attempt to access beyond end of device [ 553.650238][ T1114] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 554.021888][T14608] loop3: detected capacity change from 0 to 32768 [ 554.063260][T14617] loop8: detected capacity change from 0 to 8192 [ 554.174522][T14617] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 554.219670][T14617] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal [ 554.229153][T14617] REISERFS (device loop8): using ordered data mode [ 554.252779][T14617] reiserfs: using flush barriers [ 554.282711][T14617] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 554.326904][T14608] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 554.359159][T14617] REISERFS (device loop8): checking transaction log (loop8) [ 554.542830][ T4278] ocfs2: Unmounting device (7,3) on (node local) [ 554.703547][T14617] REISERFS (device loop8): Using r5 hash to sort names [ 554.723860][T14617] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 554.955308][T14626] loop3: detected capacity change from 0 to 512 [ 555.180574][T14626] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 555.191543][T14626] ext4 filesystem being mounted at /735/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 555.361403][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 556.859105][ T46] team0 (unregistering): Port device team_slave_1 removed [ 557.007141][ T46] team0 (unregistering): Port device team_slave_0 removed [ 557.137272][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.260491][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.270822][ T46] bond0 (unregistering): Released all slaves [ 558.532388][T14611] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3628'. [ 558.549821][T14613] netlink: 'syz.7.3628': attribute type 21 has an invalid length. [ 558.557888][T14613] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3628'. [ 558.945791][T14644] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3638'. [ 559.324508][T14655] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.3641'. [ 559.346341][T14655] net_ratelimit: 3660 callbacks suppressed [ 559.346359][T14655] netlink: zone id is out of range [ 559.361776][T14655] netlink: zone id is out of range [ 559.367161][T14655] netlink: zone id is out of range [ 559.382163][T14655] netlink: zone id is out of range [ 559.389361][T14655] netlink: zone id is out of range [ 559.411393][T14655] netlink: zone id is out of range [ 559.421091][T14655] netlink: zone id is out of range [ 559.437415][T14655] netlink: zone id is out of range [ 559.448527][T14655] netlink: zone id is out of range [ 559.465308][T14655] netlink: zone id is out of range [ 559.997433][T14669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3646'. [ 560.109566][T14669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3646'. [ 560.144278][T14674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3646'. [ 560.227622][T14674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3646'. [ 560.496266][T14677] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3650'. [ 560.991252][T14690] wireguard: wg0: Could not create IPv4 socket [ 561.363327][T14702] binder_alloc: binder_alloc_mmap_handler: 14701 200000ffe000-200000fff000 already mapped failed -16 [ 561.730657][T14714] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3663'. [ 561.799959][T14714] nbd: couldn't find device at index 64 [ 562.169020][T14726] loop6: detected capacity change from 0 to 64 [ 563.184639][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.191390][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.237301][T14752] loop8: detected capacity change from 0 to 1024 [ 563.548085][T14752] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #3: block 2: comm syz.8.3678: lblock 2 mapped to illegal pblock 2 (length 1) [ 563.615972][T14752] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 563.679104][T14752] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #3: block 48: comm syz.8.3678: lblock 0 mapped to illegal pblock 48 (length 1) [ 563.775698][T14752] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 563.838691][T14752] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.3678: Failed to acquire dquot type 0 [ 563.878766][ T26] audit: type=1326 audit(1777079365.575:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.2.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f799cdd9 code=0x7ffc0000 [ 563.930435][T14752] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 563.960322][T14752] EXT4-fs error (device loop8): ext4_evict_inode:281: inode #11: comm syz.8.3678: mark_inode_dirty error [ 563.972297][ T26] audit: type=1326 audit(1777079365.625:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.2.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb0f795d60e code=0x7ffc0000 [ 564.020914][T14752] EXT4-fs warning (device loop8): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 564.140013][T14752] EXT4-fs (loop8): 1 orphan inode deleted [ 564.145844][T14752] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 564.155211][ T26] audit: type=1326 audit(1777079365.625:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.2.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f799cdd9 code=0x7ffc0000 [ 564.228949][ T9] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 564.299878][ T9] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 564.308581][ T9] EXT4-fs error (device loop8): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 0 [ 564.335691][ T26] audit: type=1326 audit(1777079365.625:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.2.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f799cdd9 code=0x7ffc0000 [ 564.397602][T14752] EXT4-fs error (device loop8): __ext4_get_inode_loc:4520: comm syz.8.3678: Invalid inode table block 1 in block_group 0 [ 564.458579][ T26] audit: type=1326 audit(1777079365.625:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.2.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fb0f799cdd9 code=0x7ffc0000 [ 564.566001][T14752] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 564.616175][ T26] audit: type=1326 audit(1777079365.625:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.2.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f799cdd9 code=0x7ffc0000 [ 564.740660][ T26] audit: type=1326 audit(1777079365.625:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.2.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f799cdd9 code=0x7ffc0000 [ 564.834071][T13537] EXT4-fs (loop8): unmounting filesystem. [ 564.850995][T13537] EXT4-fs error (device loop8): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 564.889587][T13537] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 564.921186][T13537] EXT4-fs error (device loop8): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 565.543559][T14761] loop7: detected capacity change from 0 to 32768 [ 566.426641][T14831] loop6: detected capacity change from 0 to 128 [ 566.481663][T14831] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 566.617356][T14831] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 568.233372][T14868] loop3: detected capacity change from 0 to 4096 [ 568.367523][T14868] NILFS (loop3): invalid segment: Checksum error in segment payload [ 568.405321][T14868] NILFS (loop3): trying rollback from an earlier position [ 568.506760][T14868] NILFS (loop3): recovery complete [ 568.557650][T14875] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 569.716204][T14862] loop7: detected capacity change from 0 to 40427 [ 569.783742][T14862] F2FS-fs (loop7): build fault injection attr: rate: 771, type: 0x3ffff [ 569.840594][T14862] F2FS-fs (loop7): invalid crc value [ 569.907005][T14862] F2FS-fs (loop7): Found nat_bits in checkpoint [ 570.111722][T14862] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 570.356965][T14914] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3731'. [ 570.509374][T14914] team0: Device vlan2 is already an upper device of the team interface [ 570.530125][ T8565] syz-executor: attempt to access beyond end of device [ 570.530125][ T8565] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 571.416788][T14932] loop2: detected capacity change from 0 to 64 [ 571.487832][T14932] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 571.661963][T14934] loop8: detected capacity change from 0 to 1024 [ 571.981145][T14917] loop3: detected capacity change from 0 to 32768 [ 572.154098][T14917] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3733 (14917) [ 572.240882][T14917] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 572.322782][T14917] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 572.369993][T14917] BTRFS info (device loop3): using free space tree [ 572.776534][T14917] BTRFS info (device loop3): enabling ssd optimizations [ 572.981912][T14977] loop8: detected capacity change from 0 to 256 [ 573.019048][T14977] exfat: Deprecated parameter 'utf8' [ 573.066026][T14977] exfat: Deprecated parameter 'namecase' [ 573.143555][T14977] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 573.526644][ T4278] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 574.432115][T15001] loop8: detected capacity change from 0 to 2048 [ 574.535211][T15001] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 574.569423][T14974] loop2: detected capacity change from 0 to 32768 [ 574.662820][T15006] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 574.711530][ T4259] udevd[4259]: incorrect nilfs2 checksum on /dev/loop8 [ 574.900441][T15010] syz.3.3754 (15010): drop_caches: 2 [ 574.900583][T14974] XFS (loop2): Mounting V5 Filesystem [ 575.093132][T15023] Cannot find set identified by id 0 to match [ 575.290361][T14987] loop7: detected capacity change from 0 to 40427 [ 575.379088][T14987] F2FS-fs (loop7): Corrupted extension count (33554469 + 1 > 64) [ 575.412844][T14987] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 575.435187][T14974] XFS (loop2): Ending clean mount [ 575.467820][T15029] loop8: detected capacity change from 0 to 512 [ 575.509342][T14987] F2FS-fs (loop7): invalid crc value [ 575.585913][T15029] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 575.601721][T14987] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 575.601979][ T4273] XFS (loop2): Unmounting Filesystem [ 575.649572][ T22] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 575.682033][T15029] EXT4-fs (loop8): can't mount with journal_checksum, fs mounted w/o journal [ 575.946296][ T22] usb 7-1: Using ep0 maxpacket: 8 [ 575.987183][T14987] F2FS-fs (loop7): recover fsync data on readonly fs [ 576.031081][T14987] F2FS-fs (loop7): Try to recover 2th superblock, ret: -30 [ 576.050058][T14987] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 576.099767][ T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.123797][ T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.156633][ T22] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 576.300340][ T22] usb 7-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 576.316316][T14987] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=470000, run fsck to fix. [ 576.339561][ T22] usb 7-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 576.347883][ T22] usb 7-1: Product: syz [ 576.368772][T15037] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 576.393003][ T22] usb 7-1: config 0 descriptor?? [ 576.927411][ T22] uclogic 0003:28BD:0075.002B: interface is invalid, ignoring [ 577.193663][ T4747] usb 7-1: USB disconnect, device number 11 [ 577.323115][T15034] loop3: detected capacity change from 0 to 32768 [ 577.368575][T15036] loop8: detected capacity change from 0 to 32768 [ 577.532963][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 577.532982][ T26] audit: type=1800 audit(1777079379.235:265): pid=15036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3768" name="file1" dev="loop8" ino=4 res=0 errno=0 [ 577.633709][T15048] MetaData crosses page boundary!! [ 577.674803][T15048] lblock = 6161616161, size = 370544640 [ 577.695691][T15048] CPU: 0 PID: 15048 Comm: syz.3.3767 Not tainted syzkaller #0 [ 577.703335][T15048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 577.713454][T15048] Call Trace: [ 577.716781][T15048] [ 577.719768][T15048] dump_stack_lvl+0x188/0x24e [ 577.724686][T15048] ? __wake_up_bit+0x210/0x210 [ 577.729591][T15048] ? show_regs_print_info+0x12/0x12 [ 577.734965][T15048] ? load_image+0x400/0x400 [ 577.739536][T15048] __get_metapage+0xaa8/0xfa0 [ 577.744411][T15048] dtSearch+0x5d5/0x2050 [ 577.748872][T15048] jfs_symlink+0x851/0xfb0 [ 577.753662][T15048] ? jfs_unlink+0xa00/0xa00 [ 577.758456][T15048] ? make_kgid+0x660/0x660 [ 577.763132][T15048] ? apparmor_path_symlink+0x1ac/0x230 [ 577.768824][T15048] ? lookup_one_qstr_excl+0x11c/0x240 [ 577.774403][T15048] ? generic_permission+0x230/0x510 [ 577.779887][T15048] ? inode_permission+0xef/0x480 [ 577.785227][T15048] ? bpf_lsm_inode_symlink+0x5/0x10 [ 577.790448][T15048] ? security_inode_symlink+0xb2/0x100 [ 577.795936][T15048] vfs_symlink+0x247/0x3d0 [ 577.800381][T15048] do_symlinkat+0x1b6/0x400 [ 577.804904][T15048] ? vfs_symlink+0x3d0/0x3d0 [ 577.809525][T15048] ? getname_flags+0x206/0x500 [ 577.814408][T15048] __x64_sys_symlink+0x7a/0x90 [ 577.819189][T15048] do_syscall_64+0x4c/0xa0 [ 577.823825][T15048] ? clear_bhb_loop+0x60/0xb0 [ 577.828523][T15048] ? clear_bhb_loop+0x60/0xb0 [ 577.833250][T15048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.839184][T15048] RIP: 0033:0x7fe37eb9cdd9 [ 577.844005][T15048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.863816][T15048] RSP: 002b:00007fe37f9a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 577.872266][T15048] RAX: ffffffffffffffda RBX: 00007fe37ee16090 RCX: 00007fe37eb9cdd9 [ 577.880338][T15048] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 000020000000a900 [ 577.888471][T15048] RBP: 00007fe37ec32d69 R08: 0000000000000000 R09: 0000000000000000 [ 577.896566][T15048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.904645][T15048] R13: 00007fe37ee16128 R14: 00007fe37ee16090 R15: 00007ffc39933738 [ 577.912647][T15048] [ 578.159452][T15048] bread failed! [ 579.059434][T15067] loop6: detected capacity change from 0 to 64 [ 579.162073][T15065] loop8: detected capacity change from 0 to 4096 [ 579.462262][T15072] loop3: detected capacity change from 0 to 1024 [ 579.485011][T15065] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 579.667190][T15065] ntfs3: loop8: failed to convert "0080" to maccenteuro [ 579.697068][T15077] loop6: detected capacity change from 0 to 64 [ 579.743079][T15065] ntfs3: loop8: failed to convert name for inode 1e. [ 580.028379][T14513] hfsplus: b-tree write err: -5, ino 25 [ 580.056150][ T5639] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 580.065012][T14513] hfsplus: b-tree write err: -5, ino 4 [ 580.117935][T14513] hfsplus: b-tree write err: -5, ino 2 [ 580.148269][T14513] hfsplus: b-tree write err: -5, ino 26 [ 580.405022][T15090] loop7: detected capacity change from 0 to 256 [ 580.744489][ T5639] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 580.747080][T15090] FAT-fs (loop7): Directory bread(block 64) failed [ 580.754688][ T5639] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.798464][T15090] FAT-fs (loop7): Directory bread(block 65) failed [ 580.807428][ T5639] usb 3-1: Product: syz [ 580.818387][ T5639] usb 3-1: Manufacturer: syz [ 580.818417][T15090] FAT-fs (loop7): Directory bread(block 66) failed [ 580.823118][ T5639] usb 3-1: SerialNumber: syz [ 580.844956][ T5639] usb 3-1: config 0 descriptor?? [ 580.867721][T15090] FAT-fs (loop7): Directory bread(block 67) failed [ 580.876607][ T5639] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 580.891442][T15090] FAT-fs (loop7): Directory bread(block 68) failed [ 580.911814][ T5639] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 580.932700][T15090] FAT-fs (loop7): Directory bread(block 69) failed [ 580.969207][ T5639] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 580.994516][T15090] FAT-fs (loop7): Directory bread(block 70) failed [ 580.994678][ T5639] usb 3-1: media controller created [ 581.030421][T15090] FAT-fs (loop7): Directory bread(block 71) failed [ 581.047898][ T26] audit: type=1326 audit(1777079382.745:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15098 comm="syz.8.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6074b9cdd9 code=0x7ffc0000 [ 581.055152][T15090] FAT-fs (loop7): Directory bread(block 72) failed [ 581.083776][T15076] dvb-usb: bulk message failed: -22 (7/0) [ 581.100982][T15090] FAT-fs (loop7): Directory bread(block 73) failed [ 581.111196][ T5639] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 581.145911][ T26] audit: type=1326 audit(1777079382.745:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15098 comm="syz.8.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f6074b9cdd9 code=0x7ffc0000 [ 581.248472][ T26] audit: type=1326 audit(1777079382.745:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15098 comm="syz.8.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6074b9cdd9 code=0x7ffc0000 [ 581.358291][ T26] audit: type=1326 audit(1777079382.745:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15098 comm="syz.8.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6074b9cdd9 code=0x7ffc0000 [ 581.375638][ T5639] DVB: Unable to find symbol mt352_attach() [ 581.459151][ T26] audit: type=1326 audit(1777079382.785:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15098 comm="syz.8.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f6074b9cdd9 code=0x7ffc0000 [ 581.521545][ T26] audit: type=1326 audit(1777079382.845:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15098 comm="syz.8.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6074b9cdd9 code=0x7ffc0000 [ 581.635730][ T5639] DVB: Unable to find symbol nxt6000_attach() [ 581.642307][ T5639] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 581.701209][ T26] audit: type=1326 audit(1777079382.845:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15098 comm="syz.8.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6074b9cdd9 code=0x7ffc0000 [ 581.749189][ T5639] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21 [ 581.763767][T15086] loop3: detected capacity change from 0 to 32768 [ 581.833698][ T5639] dvb-usb: schedule remote query interval to 1000 msecs. [ 581.888498][T15115] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3800'. [ 581.904389][ T5639] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 581.956322][ T5639] dvb-usb: bulk message failed: -22 (7/0) [ 582.011096][ T5639] dvb-usb: bulk message failed: -22 (7/0) [ 582.063122][T15086] XFS (loop3): Mounting V5 Filesystem [ 582.067642][ T5639] usb 3-1: USB disconnect, device number 28 [ 582.280400][ T5639] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 582.283281][T15124] loop6: detected capacity change from 0 to 128 [ 582.339612][T15086] XFS (loop3): Ending clean mount [ 582.390893][T15124] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 582.447466][T15126] Invalid ELF header magic: != ELF [ 582.493339][T15124] hpfs: filesystem error: improperly stopped [ 582.509746][T15124] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 582.577415][T15124] hpfs: You really don't want any checks? You are crazy... [ 582.621233][ T26] audit: type=1326 audit(1777079384.325:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15127 comm="syz.8.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6074b9cdd9 code=0x7ffc0000 [ 582.659974][T15124] hpfs: hpfs_map_sector(): read error [ 582.666141][T15124] hpfs: code page support is disabled [ 582.699931][T15124] hpfs: hpfs_map_4sectors(): unaligned read [ 582.706108][T15124] hpfs: hpfs_map_4sectors(): unaligned read [ 582.714141][ T26] audit: type=1326 audit(1777079384.325:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15127 comm="syz.8.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6074b9cdd9 code=0x7ffc0000 [ 582.763794][ T4278] XFS (loop3): Unmounting Filesystem [ 582.796753][T15124] hpfs: filesystem error: unable to find root dir [ 582.841543][ T26] audit: type=1326 audit(1777079384.325:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15127 comm="syz.8.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f6074b9cdd9 code=0x7ffc0000 [ 582.969452][T15131] loop2: detected capacity change from 0 to 2048 [ 582.994128][T15118] loop7: detected capacity change from 0 to 32768 [ 583.007702][ T26] audit: type=1326 audit(1777079384.325:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15127 comm="syz.8.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6074b9cdd9 code=0x7ffc0000 [ 583.044653][T15131] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 583.071979][T15118] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 scanned by syz.7.3801 (15118) [ 583.176690][ T26] audit: type=1326 audit(1777079384.325:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15127 comm="syz.8.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6074b9cdd9 code=0x7ffc0000 [ 583.211171][T15131] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 583.246557][T15118] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 583.262782][T15118] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 583.308574][T15118] BTRFS info (device loop7): force clearing of disk cache [ 583.360373][T15118] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 583.413775][T15118] BTRFS info (device loop7): use zstd compression, level 3 [ 583.429604][T15118] BTRFS info (device loop7): using free space tree [ 583.868323][T15118] BTRFS info (device loop7): enabling ssd optimizations [ 583.902398][T15118] BTRFS info (device loop7): rebuilding free space tree [ 583.916397][T15165] loop8: detected capacity change from 0 to 1024 [ 583.966828][T15165] EXT4-fs: Ignoring removed orlov option [ 584.030253][T15165] EXT4-fs: inline encryption not supported [ 584.056292][T15165] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 584.089078][T15165] EXT4-fs (loop8): invalid journal inode [ 584.127883][T15165] EXT4-fs (loop8): can't get journal size [ 584.190981][T15165] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 584.413706][T13537] EXT4-fs (loop8): unmounting filesystem. [ 584.632393][ T8565] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 585.378742][T15192] loop6: detected capacity change from 0 to 128 [ 585.427596][T15192] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 585.498201][T15192] hpfs: filesystem error: improperly stopped [ 585.560379][T15192] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 585.568725][T15192] hpfs: You really don't want any checks? You are crazy... [ 585.649449][T15192] hpfs: Code page index out of array [ 585.654982][T15192] hpfs: code page support is disabled [ 585.689745][T15192] hpfs: hpfs_map_4sectors(): unaligned read [ 585.695953][T15192] hpfs: hpfs_map_4sectors(): unaligned read [ 585.721760][T15192] hpfs: filesystem error: unable to find root dir [ 585.958768][T15196] loop7: detected capacity change from 0 to 256 [ 586.600434][ T26] audit: type=1326 audit(1777079388.305:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15204 comm="syz.6.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4579cdd9 code=0x7ffc0000 [ 586.656331][T15185] loop2: detected capacity change from 0 to 32768 [ 586.686644][ T26] audit: type=1326 audit(1777079388.345:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15204 comm="syz.6.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f4579cdd9 code=0x7ffc0000 [ 586.773160][T15208] loop7: detected capacity change from 0 to 128 [ 586.807055][T15208] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 586.895827][ T26] audit: type=1326 audit(1777079388.345:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15204 comm="syz.6.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4579cdd9 code=0x7ffc0000 [ 586.922116][T15189] loop8: detected capacity change from 0 to 32768 [ 586.925822][ T26] audit: type=1326 audit(1777079388.345:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15204 comm="syz.6.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4579cdd9 code=0x7ffc0000 [ 587.008186][T15185] XFS (loop2): Mounting V5 Filesystem [ 587.035922][ T26] audit: type=1326 audit(1777079388.345:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15204 comm="syz.6.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f6f4579cdd9 code=0x7ffc0000 [ 587.093239][T15208] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 587.211045][T15189] XFS (loop8): Mounting V5 Filesystem [ 587.314590][T15230] loop3: detected capacity change from 0 to 64 [ 587.547269][T15185] XFS (loop2): Ending clean mount [ 587.626754][T15189] XFS (loop8): Ending clean mount [ 587.819373][T15238] trusted_key: encrypted_key: key user:syz not found [ 587.851844][ T4273] XFS (loop2): Unmounting Filesystem [ 587.876364][T13537] XFS (loop8): Unmounting Filesystem [ 588.438580][ T2185] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 588.927219][ T2185] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 589.097403][ T2185] usb 7-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 589.117618][ T2185] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.157283][ T2185] usb 7-1: Product: syz [ 589.167762][T15265] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 589.180159][ T2185] usb 7-1: Manufacturer: syz [ 589.184827][ T2185] usb 7-1: SerialNumber: syz [ 589.189822][T15265] comedi comedi3: 8255: I/O port conflict (0xffffffffffffff00,4) [ 589.215654][T15265] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 589.219084][T15267] loop7: detected capacity change from 0 to 512 [ 589.233263][T15265] comedi comedi3: 8255: I/O port conflict (0x80007,4) [ 589.268087][T15265] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 589.313752][T15265] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 589.345472][T15265] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 589.363008][T15265] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 589.405956][T15267] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 589.467207][T15267] ext4 filesystem being mounted at /441/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 589.515105][ T2185] usb 7-1: selecting invalid altsetting 1 [ 589.696569][T15274] loop8: detected capacity change from 0 to 164 [ 589.723393][ T2185] LME2510(C): Firmware Status: 1a 03 34 00 32 00 [ 589.723494][ T2185] dvb_usb_lmedm04: probe of 7-1:2.0 failed with error -22 [ 589.756254][T15276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3850'. [ 589.803464][ T8565] EXT4-fs (loop7): unmounting filesystem. [ 589.965541][ T2185] usb 7-1: USB disconnect, device number 12 [ 590.027918][T15278] loop7: detected capacity change from 0 to 2048 [ 590.091471][T15278] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 590.195239][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 590.195259][ T26] audit: type=1800 audit(1777079391.895:285): pid=15278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3851" name="bus" dev="loop7" ino=1367 res=0 errno=0 [ 590.675884][T15294] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3858'. [ 591.041535][T15303] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3864'. [ 591.464934][T15312] netlink: 'syz.6.3868': attribute type 27 has an invalid length. [ 592.377435][T15326] loop8: detected capacity change from 0 to 2048 [ 592.439451][T15326] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 592.525975][T15326] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 592.978323][T15346] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3883'. [ 593.286718][T15352] loop8: detected capacity change from 0 to 128 [ 593.362863][T15352] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 593.395271][T15352] hpfs: filesystem error: improperly stopped [ 593.427398][T15352] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 593.462396][T15352] hpfs: You really don't want any checks? You are crazy... [ 593.510211][T15352] hpfs: hpfs_map_sector(): read error [ 593.543357][T15352] hpfs: code page support is disabled [ 593.587918][T15352] hpfs: hpfs_map_4sectors(): unaligned read [ 593.635976][T15352] hpfs: hpfs_map_4sectors(): unaligned read [ 593.653440][T15352] hpfs: filesystem error: unable to find root dir [ 593.966025][ T22] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 594.260316][T15337] loop7: detected capacity change from 0 to 40427 [ 594.295140][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 594.300819][T15337] F2FS-fs (loop7): Invalid log_blocksize (64), supports only 12 [ 594.308510][T15337] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 594.357311][T15337] F2FS-fs (loop7): inline encryption not supported [ 594.372029][T15337] F2FS-fs (loop7): invalid crc value [ 594.410340][ T22] usb 4-1: unable to get BOS descriptor or descriptor too short [ 594.487440][T15337] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 594.512534][ T22] usb 4-1: config 140 has an invalid interface number: 182 but max is 1 [ 594.521277][ T22] usb 4-1: config 140 has no interface number 1 [ 594.547971][ T22] usb 4-1: config 140 interface 182 has no altsetting 0 [ 594.597311][T15371] loop2: detected capacity change from 0 to 1024 [ 594.665819][T15349] loop6: detected capacity change from 0 to 32768 [ 594.695144][ T22] usb 4-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 594.715715][T15371] hfsplus: b-tree write err: -5, ino 2 [ 594.719563][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.756253][T15349] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.3885 (15349) [ 594.781511][ T22] usb 4-1: Product: syz [ 594.785847][ T22] usb 4-1: Manufacturer: syz [ 594.813335][ T22] usb 4-1: SerialNumber: syz [ 594.859212][T15337] F2FS-fs (loop7): Cannot turn on quotas: -2 on 1 [ 594.871537][T15349] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 594.917339][T15349] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 594.943002][T15337] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 594.952652][T15337] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 594.962537][T15349] BTRFS info (device loop6): force clearing of disk cache [ 594.970777][T15376] loop8: detected capacity change from 0 to 256 [ 594.978597][T15376] exfat: Deprecated parameter 'utf8' [ 594.992428][T15349] BTRFS info (device loop6): disabling free space tree [ 595.018206][T14513] hfsplus: b-tree write err: -5, ino 25 [ 595.044071][T15349] BTRFS info (device loop6): enabling auto defrag [ 595.055312][T14513] hfsplus: b-tree write err: -5, ino 4 [ 595.097420][T15349] BTRFS info (device loop6): max_inline at 0 [ 595.157814][T15349] BTRFS info (device loop6): enabling disk space caching [ 595.188406][T15376] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 595.209234][T15349] BTRFS info (device loop6): disk space caching is enabled [ 595.288343][ T22] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 595.522065][T15349] BTRFS info (device loop6): enabling ssd optimizations [ 595.590640][T15349] BTRFS info (device loop6): rebuilding free space tree [ 595.671252][T15349] BTRFS info (device loop6): disabling free space tree [ 595.704512][T15398] loop8: detected capacity change from 0 to 512 [ 595.710648][T15349] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 595.736201][T15349] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 595.766973][T15400] netlink: 'syz.2.3900': attribute type 2 has an invalid length. [ 595.785185][T15398] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000772 (sector = 1) [ 595.853290][T15398] FAT-fs (loop8): Directory bread(block 1056) failed [ 595.860903][ T22] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 595.899061][T15398] FAT-fs (loop8): Directory bread(block 1057) failed [ 595.952900][T15398] FAT-fs (loop8): Directory bread(block 1058) failed [ 596.002278][T15398] FAT-fs (loop8): Directory bread(block 1059) failed [ 596.019783][T15398] FAT-fs (loop8): Directory bread(block 1060) failed [ 596.067400][T15398] FAT-fs (loop8): Directory bread(block 1061) failed [ 596.099637][T15398] FAT-fs (loop8): Directory bread(block 1062) failed [ 596.106511][T15398] FAT-fs (loop8): Directory bread(block 1063) failed [ 596.178543][T15398] FAT-fs (loop8): Directory bread(block 1056) failed [ 596.228353][T15398] FAT-fs (loop8): Directory bread(block 1057) failed [ 596.235808][ T8385] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 596.336315][ T22] usb 4-1: unable to get BOS descriptor or descriptor too short [ 596.396465][ T22] usb 4-1: device firmware changed [ 596.416700][ T22] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 596.424693][ T22] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 596.452678][ T22] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 596.483021][ T22] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 596.528185][ T22] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 596.587283][ T2185] usb 4-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 596.626618][ T22] usb 4-1: USB disconnect, device number 22 [ 596.663365][ T2185] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 596.739584][ T22] usb 4-1: [ueagle-atm] ADSL device removed [ 597.084478][T15416] tipc: Enabled bearer , priority 9 [ 597.143673][ T4261] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 12 /dev/loop6 scanned by udevd (4261) [ 597.193324][T15418] device vlan3 entered promiscuous mode [ 597.261443][T15418] device batadv0 entered promiscuous mode [ 597.713281][T15430] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3912'. [ 598.010902][T15435] program syz.7.3915 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 598.067733][T15439] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 598.402792][T15444] loop3: detected capacity change from 0 to 4096 [ 598.444889][T15448] loop7: detected capacity change from 0 to 1024 [ 598.774867][ T46] hfsplus: b-tree write err: -5, ino 25 [ 598.780859][ T46] hfsplus: b-tree write err: -5, ino 4 [ 598.786449][ T46] hfsplus: b-tree write err: -5, ino 2 [ 598.829830][ T4744] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 599.021765][ T4744] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 599.049273][ T4744] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 599.051255][T15461] loop7: detected capacity change from 0 to 512 [ 599.090953][ T4744] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 599.170267][ T4744] usb 9-1: config 220 has no interface number 2 [ 599.176717][ T4744] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 599.283131][T15461] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 599.330161][T15469] netlink: 'syz.6.3930': attribute type 1 has an invalid length. [ 599.371522][ T4744] usb 9-1: config 220 interface 0 has no altsetting 0 [ 599.378433][ T4744] usb 9-1: config 220 interface 76 has no altsetting 0 [ 599.398844][T15461] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 599.430196][T15469] netlink: 'syz.6.3930': attribute type 1 has an invalid length. [ 599.464336][ T4744] usb 9-1: config 220 interface 1 has no altsetting 0 [ 599.508056][ T4744] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 599.542633][ T4744] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.575727][ T4744] usb 9-1: Product: syz [ 599.584496][ T4744] usb 9-1: Manufacturer: syz [ 599.602549][ T4744] usb 9-1: SerialNumber: syz [ 599.675974][ T8565] EXT4-fs (loop7): unmounting filesystem. [ 599.843155][ T4744] usb 9-1: selecting invalid altsetting 0 [ 599.871344][ T4744] usb 9-1: Found UVC 7.01 device syz (8086:0b07) [ 599.877839][ T4744] usb 9-1: No valid video chain found. [ 599.945735][T15483] loop2: detected capacity change from 0 to 128 [ 599.957343][ T4744] usb 9-1: selecting invalid altsetting 0 [ 599.968141][ T4744] usbtest: probe of 9-1:220.1 failed with error -22 [ 600.012839][ T4744] usb 9-1: USB disconnect, device number 5 [ 601.299375][T15515] loop3: detected capacity change from 0 to 512 [ 601.375186][T15490] loop7: detected capacity change from 0 to 32768 [ 601.410105][T15490] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 12 [ 601.434461][T15515] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 601.454367][T15515] EXT4-fs (loop3): orphan cleanup on readonly fs [ 601.479857][T15515] Quota error (device loop3): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 601.494319][T15515] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 601.510000][T15515] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 601.589039][T15515] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.3951: bg 0: block 15: invalid block bitmap [ 601.655734][T15515] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 601.703320][T15515] EXT4-fs (loop3): 1 truncate cleaned up [ 601.729808][T15515] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 601.987591][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 601.998188][ T4261] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 12 [ 602.200404][T15513] loop2: detected capacity change from 0 to 32768 [ 602.268214][T15513] (syz.2.3950,15513,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 602.328546][ T5639] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 602.336585][T15513] (syz.2.3950,15513,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 602.395918][T15530] loop3: detected capacity change from 0 to 1024 [ 602.469111][T15513] JBD2: Ignoring recovery information on journal [ 602.505466][T15530] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 602.650220][ T5639] usb 9-1: Using ep0 maxpacket: 8 [ 602.733947][T15513] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 602.827008][ T5639] usb 9-1: unable to get BOS descriptor or descriptor too short [ 602.839126][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 602.921637][ T5639] usb 9-1: config 140 has an invalid interface number: 182 but max is 1 [ 602.950474][ T5639] usb 9-1: config 140 has no interface number 1 [ 602.956829][ T5639] usb 9-1: config 140 interface 182 has no altsetting 0 [ 603.168506][ T5639] usb 9-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 603.189558][ T5639] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.197634][ T5639] usb 9-1: Product: syz [ 603.233928][ T5639] usb 9-1: Manufacturer: syz [ 603.238721][ T5639] usb 9-1: SerialNumber: syz [ 603.293526][ T4273] ocfs2: Unmounting device (7,2) on (node local) [ 603.326314][T15547] lo speed is unknown, defaulting to 1000 [ 603.374568][T15547] lo speed is unknown, defaulting to 1000 [ 603.502721][T15550] mkiss: ax0: crc mode is auto. [ 603.513424][T15547] lo speed is unknown, defaulting to 1000 [ 603.620239][T15547] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 603.661063][ T5639] usb 9-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 603.675170][T15557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3968'. [ 603.691827][T15547] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 603.738463][T15559] loop3: detected capacity change from 0 to 764 [ 603.885861][T15547] lo speed is unknown, defaulting to 1000 [ 603.931774][T15547] lo speed is unknown, defaulting to 1000 [ 603.963031][T15547] lo speed is unknown, defaulting to 1000 [ 604.003462][T15547] lo speed is unknown, defaulting to 1000 [ 604.024779][T15547] lo speed is unknown, defaulting to 1000 [ 604.180544][T15563] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 604.195099][ T5639] usb 9-1: reset high-speed USB device number 6 using dummy_hcd [ 604.241786][T15563] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 604.533774][T15565] loop6: detected capacity change from 0 to 4096 [ 604.541227][T15567] loop3: detected capacity change from 0 to 128 [ 604.566567][T15565] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 604.630573][ T5639] usb 9-1: unable to get BOS descriptor or descriptor too short [ 604.719758][ T5639] usb 9-1: device firmware changed [ 604.737602][ T5639] usb 9-1: [ueagle-atm] pre-firmware device, uploading firmware [ 604.745682][ T5639] usb 9-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 604.761830][ T5639] usb 9-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 604.764422][T15567] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 604.809267][ T5639] usb 9-1: [ueagle-atm] pre-firmware device, uploading firmware [ 604.824180][ T5639] usb 9-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 604.878936][ T5639] usb 9-1: USB disconnect, device number 6 [ 604.901761][ T5639] usb 9-1: [ueagle-atm] ADSL device removed [ 604.924798][T15567] FAT-fs (loop3): Filesystem has been set read-only [ 605.938684][T15561] loop2: detected capacity change from 0 to 32768 [ 605.985963][T15561] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 606.014687][T15561] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 606.151255][T15561] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 606.190007][ T5639] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 606.213873][ T5639] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 606.390570][ T5639] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 176ms [ 606.398952][T15603] tipc: Started in network mode [ 606.434049][ T5639] gfs2: fsid=syz:syz.0: jid=0: Done [ 606.467695][T15603] tipc: Node identity , cluster identity 4711 [ 606.485591][T15561] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 607.442569][T15618] loop3: detected capacity change from 0 to 2048 [ 607.518629][T15623] loop8: detected capacity change from 0 to 1024 [ 607.632296][T15623] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #3: block 2: comm syz.8.3998: lblock 2 mapped to illegal pblock 2 (length 1) [ 607.668217][T15618] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 607.745896][T15635] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4001'. [ 607.753973][T15623] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 607.756227][T15618] EXT4-fs error (device loop3): ext4_ext_precache:627: inode #2: comm syz.3.3997: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 7(7) [ 607.779610][T15623] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #3: block 48: comm syz.8.3998: lblock 0 mapped to illegal pblock 48 (length 1) [ 607.916266][T15623] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 607.999541][T15623] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.3998: Failed to acquire dquot type 0 [ 608.119593][T15623] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 608.140517][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 608.186595][T15623] EXT4-fs error (device loop8): ext4_evict_inode:281: inode #11: comm syz.8.3998: mark_inode_dirty error [ 608.322967][T15623] EXT4-fs warning (device loop8): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 608.332661][T15642] loop2: detected capacity change from 0 to 16 [ 608.389941][T15642] erofs: (device loop2): mounted with root inode @ nid 36. [ 608.417180][T15642] syz.2.4004: attempt to access beyond end of device [ 608.417180][T15642] loop2: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 608.466434][T15623] EXT4-fs (loop8): 1 orphan inode deleted [ 608.478504][T15642] syz.2.4004: attempt to access beyond end of device [ 608.478504][T15642] loop2: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 608.510116][ T46] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 608.562310][T15623] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 608.569972][ T46] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 608.619857][ T46] EXT4-fs error (device loop8): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 0 [ 608.871448][T15646] loop2: detected capacity change from 0 to 1024 [ 608.944190][T13537] EXT4-fs (loop8): unmounting filesystem. [ 608.988020][T13537] EXT4-fs error (device loop8): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 609.082237][T13537] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 609.149941][T13537] EXT4-fs error (device loop8): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 609.169113][T15637] loop7: detected capacity change from 0 to 32768 [ 609.260194][T15639] loop6: detected capacity change from 0 to 32768 [ 609.333902][T15637] JBD2: Ignoring recovery information on journal [ 609.349699][T15639] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.4003 (15639) [ 609.395793][ T5639] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 609.538186][T15639] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 609.558729][T15639] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 609.589668][T15639] BTRFS info (device loop6): enabling auto defrag [ 609.626516][T15639] BTRFS info (device loop6): use no compression [ 609.634392][T15637] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 609.660326][T15639] BTRFS info (device loop6): force clearing of disk cache [ 609.691404][T15639] BTRFS info (device loop6): max_inline at 4096 [ 609.704548][T15639] BTRFS info (device loop6): using free space tree [ 609.764154][ T5639] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.781622][ T5639] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 609.910509][ T5639] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 609.951119][ T5639] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 609.959307][ T5639] usb 3-1: SerialNumber: syz [ 610.125517][ T8565] ocfs2: Unmounting device (7,7) on (node local) [ 610.144678][T15644] loop3: detected capacity change from 0 to 32768 [ 610.224449][T15644] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 610.258840][ T5639] usb 3-1: 0:2 : does not exist [ 610.268468][T15644] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 610.289617][T15639] BTRFS info (device loop6): enabling ssd optimizations [ 610.340008][T15639] BTRFS info (device loop6): rebuilding free space tree [ 610.396060][ T5639] usb 3-1: USB disconnect, device number 29 [ 610.424673][T15644] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 610.487524][T14311] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 610.495993][T14311] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 610.627690][T14311] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 131ms [ 610.686110][T14311] gfs2: fsid=syz:syz.0: jid=0: Done [ 610.705091][T15644] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 610.754971][ T4261] udevd[4261]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 610.757111][ T8385] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 611.306137][T15684] tc_dump_action: action bad kind [ 611.457780][T15686] loop8: detected capacity change from 0 to 164 [ 611.607826][T15686] rock: directory entry would overflow storage [ 611.690161][T15686] rock: sig=0x66, size=4, remaining=3 [ 612.595162][T15714] vivid-000: disconnect [ 612.607273][T15713] vivid-000: reconnect [ 612.620304][T15716] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4026'. [ 612.784461][T15718] loop3: detected capacity change from 0 to 256 [ 612.850539][T15718] exfat: Deprecated parameter 'utf8' [ 612.977309][T15718] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 613.210842][T15727] loop8: detected capacity change from 0 to 256 [ 613.445309][T15727] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 613.781504][ T26] audit: type=1800 audit(1777079415.485:286): pid=15739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4030" name="file1" dev="loop8" ino=1048878 res=0 errno=0 [ 614.504135][ T14] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 614.589977][T14311] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 614.719349][ T14] usb 7-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=33.00 [ 614.742081][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.767633][ T14] usb 7-1: Product: syz [ 614.778817][ T14] usb 7-1: Manufacturer: syz [ 614.796842][ T14] usb 7-1: SerialNumber: syz [ 614.807245][T14311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.838267][ T14] usb 7-1: config 0 descriptor?? [ 614.870516][T14311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.884208][ T14] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 614.902620][T14311] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 614.921025][ T14] usb 7-1: Detected FT232HP [ 614.939879][T14311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.023742][T14311] usb 3-1: config 0 descriptor?? [ 615.096733][ T14] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 615.131717][ T14] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 615.136012][T15763] loop3: detected capacity change from 0 to 512 [ 615.260775][T15763] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 615.354279][T15763] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 615.354389][T15763] ext4 filesystem being mounted at /821/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 615.373514][ T4746] usb 7-1: USB disconnect, device number 13 [ 615.376387][ T4746] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 615.426714][ T4746] ftdi_sio 7-1:0.0: device disconnected [ 615.516484][T15769] EXT4-fs error (device loop3): __ext4_new_inode:1291: comm syz.3.4048: failed to insert inode 16: doubly allocated? [ 615.662412][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 615.689775][T14311] razer 0003:1532:010E.002C: failed to enable macro keys: -71 [ 615.717134][T14311] razer 0003:1532:010E.002C: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.2-1/input0 [ 615.821277][T14311] usb 3-1: USB disconnect, device number 30 [ 616.159432][T15771] fido_id[15771]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 616.707601][T15788] netlink: 'syz.7.4057': attribute type 12 has an invalid length. [ 616.727084][T15788] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4057'. [ 616.736966][T15790] loop2: detected capacity change from 0 to 128 [ 617.611539][ T6038] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 617.932152][T14311] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 617.945138][ T6038] usb 3-1: config 127 has an invalid interface number: 84 but max is 0 [ 617.957436][ T6038] usb 3-1: config 127 has no interface number 0 [ 618.102527][ T6038] usb 3-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=9c.e5 [ 618.119730][ T6038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.127233][T14311] usb 4-1: Using ep0 maxpacket: 32 [ 618.127850][ T6038] usb 3-1: Product: syz [ 618.127869][ T6038] usb 3-1: Manufacturer: syz [ 618.127885][ T6038] usb 3-1: SerialNumber: syz [ 618.171353][T14311] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 618.202827][T14311] usb 4-1: config 0 has no interface number 0 [ 618.210543][T15796] loop7: detected capacity change from 0 to 32768 [ 618.241731][T14311] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 618.276553][T14311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.302666][T14311] usb 4-1: Product: syz [ 618.307005][T14311] usb 4-1: Manufacturer: syz [ 618.323341][T15813] support for cryptoloop has been removed. Use dm-crypt instead. [ 618.339790][T14311] usb 4-1: SerialNumber: syz [ 618.367219][T14311] usb 4-1: config 0 descriptor?? [ 618.393588][T14311] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 618.413488][T15796] JBD2: Ignoring recovery information on journal [ 618.428852][ T6038] gspca_main: spca501-2.14.0 probing 040a:0002 [ 618.491018][T14311] usb 4-1: selecting invalid altsetting 1 [ 618.496836][T14311] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 618.538158][T15816] loop8: detected capacity change from 0 to 512 [ 618.654940][T14311] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 618.705665][T15796] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 618.731158][T14311] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 618.791555][T14311] usb 4-1: media controller created [ 618.841774][ T6038] gspca_spca501: reg write: error -71 [ 618.847234][ T6038] spca501 3-1:127.84: Reg write failed for 0x00,0x02,0x01 [ 618.847773][T15816] EXT4-fs error (device loop8): ext4_do_update_inode:5279: inode #16: comm syz.8.4070: corrupted inode contents [ 618.865752][ T6038] spca501: probe of 3-1:127.84 failed with error -22 [ 618.893653][ T6038] usb 3-1: USB disconnect, device number 31 [ 618.937435][T14311] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 618.959577][T15816] EXT4-fs error (device loop8): ext4_dirty_inode:6156: inode #16: comm syz.8.4070: mark_inode_dirty error [ 618.973632][T15796] (syz.7.4061,15796,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 619.018518][T15816] EXT4-fs error (device loop8): ext4_do_update_inode:5279: inode #16: comm syz.8.4070: corrupted inode contents [ 619.076972][T15816] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #16: comm syz.8.4070: mark_inode_dirty error [ 619.089026][T14311] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 619.100913][T14311] zl10353_read_register: readreg error (reg=127, ret==-71) [ 619.119988][T14311] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 619.148355][T15816] EXT4-fs error (device loop8): ext4_do_update_inode:5279: inode #16: comm syz.8.4070: corrupted inode contents [ 619.178768][T15824] loop6: detected capacity change from 0 to 2048 [ 619.219344][T15816] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 619.242001][T14311] usb 4-1: USB disconnect, device number 23 [ 619.274218][ T8565] ocfs2: Unmounting device (7,7) on (node local) [ 619.293199][T15816] EXT4-fs error (device loop8): ext4_do_update_inode:5279: inode #16: comm syz.8.4070: corrupted inode contents [ 619.380160][T15816] EXT4-fs error (device loop8): ext4_truncate:4325: inode #16: comm syz.8.4070: mark_inode_dirty error [ 619.388278][T15827] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 619.408359][T15826] loop3: detected capacity change from 0 to 1024 [ 619.448823][T15816] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 619.511721][T15826] hfsplus: bad catalog entry type [ 619.537319][T15816] EXT4-fs (loop8): 1 truncate cleaned up [ 619.570143][ T11] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 619.578469][T15816] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 619.609798][ T11] EXT4-fs error (device loop8): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 1 [ 619.642167][T15816] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 619.701080][ T11] hfsplus: b-tree write err: -5, ino 25 [ 619.734202][ T11] hfsplus: b-tree write err: -5, ino 4 [ 619.788385][ T11] hfsplus: b-tree write err: -5, ino 2 [ 620.008080][T15833] loop2: detected capacity change from 0 to 1024 [ 620.052060][T13537] EXT4-fs (loop8): unmounting filesystem. [ 620.303861][T15841] loop6: detected capacity change from 0 to 256 [ 620.339712][T15840] loop8: detected capacity change from 0 to 1024 [ 620.387960][T15843] program syz.7.4081 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 620.409660][T14513] hfsplus: b-tree write err: -5, ino 25 [ 620.428095][T14513] hfsplus: b-tree write err: -5, ino 4 [ 620.436434][T14513] hfsplus: b-tree write err: -5, ino 2 [ 620.510961][T15841] FAT-fs (loop6): Directory bread(block 64) failed [ 620.517678][T15841] FAT-fs (loop6): Directory bread(block 65) failed [ 620.554639][T15840] hfsplus: request for non-existent node 211 in B*Tree [ 620.601303][T15840] hfsplus: request for non-existent node 211 in B*Tree [ 620.625697][T15841] FAT-fs (loop6): Directory bread(block 66) failed [ 620.639613][T15841] FAT-fs (loop6): Directory bread(block 67) failed [ 620.646900][T15841] FAT-fs (loop6): Directory bread(block 68) failed [ 620.698840][T15841] FAT-fs (loop6): Directory bread(block 69) failed [ 620.739725][T15841] FAT-fs (loop6): Directory bread(block 70) failed [ 620.746391][T15841] FAT-fs (loop6): Directory bread(block 71) failed [ 620.771512][T15851] loop7: detected capacity change from 0 to 1024 [ 620.809689][T15841] FAT-fs (loop6): Directory bread(block 72) failed [ 620.816347][T15841] FAT-fs (loop6): Directory bread(block 73) failed [ 620.866405][ T46] hfsplus: b-tree write err: -5, ino 8 [ 620.946895][T15851] hfsplus: bad catalog entry type [ 621.105625][T15856] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 621.153853][T15856] [U] J"—E:ÀÆ" [ 621.963397][T15872] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4094'. [ 621.985098][T15873] loop8: detected capacity change from 0 to 128 [ 622.302869][T15880] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4098'. [ 622.640533][T15891] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 622.668631][T15891] [U] J"—E:ÀÆ" [ 622.904706][T15901] program syz.2.4108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 622.916355][T15899] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4106'. [ 622.925778][ T14] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 623.129962][ T14] usb 7-1: Using ep0 maxpacket: 8 [ 623.140627][ T14] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 623.182284][ T14] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 623.235781][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.262495][ T14] usb 7-1: Product: syz [ 623.266815][ T14] usb 7-1: Manufacturer: syz [ 623.327304][ T14] usb 7-1: SerialNumber: syz [ 623.357385][ T14] usb 7-1: config 0 descriptor?? [ 623.400175][ T14] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 623.412203][T15913] loop3: detected capacity change from 0 to 64 [ 623.418525][ T14] usb 7-1: setting power ON [ 623.425326][ T14] dvb-usb: bulk message failed: -22 (2/0) [ 623.442876][ T14] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 623.477845][T15913] hfs: filesystem is marked locked, mounting read-only. [ 623.507730][ T14] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 623.531301][ T14] usb 7-1: media controller created [ 623.554340][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 623.563530][T15913] hfs: filesystem is marked locked, leaving read-only. [ 623.593202][T15894] dvb-usb: bulk message failed: -22 (3/0) [ 623.618706][ T14] usb 7-1: selecting invalid altsetting 6 [ 623.693873][ T14] usb 7-1: digital interface selection failed (-22) [ 623.707138][ T14] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 623.735535][ T14] usb 7-1: setting power OFF [ 623.753525][ T14] dvb-usb: bulk message failed: -22 (2/0) [ 623.772533][ T14] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 623.792522][ T14] (NULL device *): no alternate interface [ 623.873176][ T14] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 623.940858][ T14] usb 7-1: USB disconnect, device number 14 [ 624.245917][T15921] loop8: detected capacity change from 0 to 128 [ 624.275971][T15907] loop2: detected capacity change from 0 to 32768 [ 624.329713][T15921] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 624.449967][T15921] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 624.490305][T15921] ext2 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 624.610922][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.617617][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.922293][T13537] EXT4-fs (loop8): unmounting filesystem. [ 625.338016][T15919] loop3: detected capacity change from 0 to 32768 [ 625.499449][ T5645] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 625.507217][T15919] XFS (loop3): Mounting V5 Filesystem [ 625.610376][T15919] XFS (loop3): Ending clean mount [ 625.648392][T15919] XFS (loop3): Quotacheck needed: Please wait. [ 625.775481][T15919] XFS (loop3): Quotacheck: Done. [ 625.797084][T15929] loop6: detected capacity change from 0 to 32768 [ 625.826807][T15929] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.4122 (15929) [ 625.883476][T15929] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 625.888051][ T6038] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 625.893960][T15929] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 625.894009][T15929] BTRFS info (device loop6): setting nodatasum [ 625.894029][T15929] BTRFS info (device loop6): force zlib compression, level 3 [ 625.894054][T15929] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 625.894121][T15929] BTRFS info (device loop6): use lzo compression, level 0 [ 625.894144][T15929] BTRFS info (device loop6): turning on flush-on-commit [ 625.894164][T15929] BTRFS info (device loop6): enabling auto defrag [ 625.894209][T15929] BTRFS info (device loop6): max_inline at 4096 [ 625.894233][T15929] BTRFS info (device loop6): using free space tree [ 625.906074][ T4278] XFS (loop3): Unmounting Filesystem [ 625.921087][ T5645] usb 9-1: config 0 has an invalid interface number: 22 but max is 0 [ 625.921118][ T5645] usb 9-1: config 0 has no interface number 0 [ 625.921153][ T5645] usb 9-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.107555][T15929] BTRFS info (device loop6): enabling ssd optimizations [ 626.139551][ T5645] usb 9-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.169042][ T5645] usb 9-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 626.207314][ T5645] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.264063][ T5645] usb 9-1: config 0 descriptor?? [ 626.305825][ T6038] usb 3-1: Using ep0 maxpacket: 16 [ 626.333980][ T8385] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 626.404030][ T6038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.426548][ T6038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.507206][ T6038] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 626.521071][ T6038] usb 3-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 626.549574][ T6038] usb 3-1: Manufacturer: syz [ 626.583728][ T6038] usb 3-1: config 0 descriptor?? [ 626.723501][ T5645] elo 0003:04E7:0030.002D: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.8-1/input22 [ 626.991519][ T5645] usb 9-1: USB disconnect, device number 7 [ 627.019129][T15971] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4128'. [ 627.059888][ T6038] hid (null): unknown global tag 0xd [ 627.071179][ T6038] creative-sb0540 0003:041E:3100.002E: unknown global tag 0xd [ 627.078843][ T6038] creative-sb0540 0003:041E:3100.002E: item 0 1 1 13 parsing failed [ 627.172522][ T6038] creative-sb0540 0003:041E:3100.002E: parse failed [ 627.191639][ T6038] creative-sb0540: probe of 0003:041E:3100.002E failed with error -22 [ 627.283518][T15969] fido_id[15969]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 627.326841][T14311] usb 3-1: USB disconnect, device number 32 [ 627.391256][T15975] netlink: 'syz.7.4131': attribute type 2 has an invalid length. [ 627.468997][T15977] loop6: detected capacity change from 0 to 1024 [ 627.619063][T15977] hfsplus: can't free extent [ 628.185042][T15987] loop7: detected capacity change from 0 to 1024 [ 628.206690][T15991] loop8: detected capacity change from 0 to 512 [ 628.208455][T15990] loop2: detected capacity change from 0 to 512 [ 628.281846][T15991] EXT4-fs (loop8): orphan cleanup on readonly fs [ 628.359745][T15991] EXT4-fs error (device loop8): ext4_ext_check_inode:520: inode #4: comm syz.8.4138: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 628.397065][T15994] loop6: detected capacity change from 0 to 64 [ 628.482776][T15990] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 628.525083][T15990] ext4 filesystem being mounted at /792/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 628.536694][T15991] EXT4-fs error (device loop8): ext4_quota_enable:7052: comm syz.8.4138: Bad quota inode: 4, type: 1 [ 628.557783][T15994] hfs: request for non-existent node 196608 in B*Tree [ 628.567090][T15991] EXT4-fs warning (device loop8): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 628.605782][T15991] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 628.626004][T15991] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 628.646354][ T8890] hfsplus: b-tree write err: -5, ino 25 [ 628.672971][T15994] hfs: request for non-existent node 196608 in B*Tree [ 628.680534][ T8890] hfsplus: b-tree write err: -5, ino 4 [ 628.688074][ T8890] hfsplus: b-tree write err: -5, ino 2 [ 628.853154][T15991] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 628.891710][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 629.022813][T15991] EXT4-fs warning (device loop8): ext4_multi_mount_protect:335: MMP interval 2680 higher than expected, please wait. [ 629.022813][T15991] [ 629.285350][T15991] EXT4-fs warning (device loop8): ext4_multi_mount_protect:338: MMP startup interrupted, failing mount [ 629.285350][T15991] [ 629.436048][T16014] loop3: detected capacity change from 0 to 128 [ 629.498469][T13537] EXT4-fs (loop8): unmounting filesystem. [ 629.529069][T16014] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 629.588544][T16014] hpfs: filesystem error: improperly stopped [ 629.594861][T16014] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 629.610382][T16014] hpfs: You really don't want any checks? You are crazy... [ 629.671664][T16014] hpfs: Code page index out of array [ 629.699611][T16014] hpfs: code page support is disabled [ 629.713861][T16014] hpfs: hpfs_map_4sectors(): unaligned read [ 629.734446][ T5645] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 629.748284][T16014] hpfs: hpfs_map_4sectors(): unaligned read [ 629.748767][T16016] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4148'. [ 629.765530][T16014] hpfs: filesystem error: unable to find root dir [ 629.904156][T16014] hpfs: hpfs_map_4sectors(): unaligned read [ 630.104712][T16018] loop8: detected capacity change from 0 to 1024 [ 630.131034][T16018] EXT4-fs: inline encryption not supported [ 630.135962][ T5645] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.147196][T16018] EXT4-fs: Ignoring removed mblk_io_submit option [ 630.179538][ T5645] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.219211][ T5645] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 630.239649][ T5645] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.258654][ T5645] usb 7-1: config 0 descriptor?? [ 630.267385][T16018] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 630.379913][T16007] loop2: detected capacity change from 0 to 32768 [ 630.686301][T16007] JBD2: Ignoring recovery information on journal [ 630.691656][T13537] EXT4-fs (loop8): unmounting filesystem. [ 630.695306][T16007] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 630.707737][T16007] JBD2: bad block at offset 32 [ 630.758285][ T5645] hid (null): unknown global tag 0xe [ 630.772672][ T5645] playstation 0003:054C:0DF2.002F: unknown global tag 0xe [ 630.794577][ T5645] playstation 0003:054C:0DF2.002F: item 0 1 1 14 parsing failed [ 630.818994][ T5645] playstation 0003:054C:0DF2.002F: Parse failed [ 630.842444][ T5645] playstation: probe of 0003:054C:0DF2.002F failed with error -22 [ 630.863569][T16007] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 630.987845][T13280] usb 7-1: USB disconnect, device number 15 [ 631.071874][T16020] loop3: detected capacity change from 0 to 32768 [ 631.171007][ T4273] ocfs2: Unmounting device (7,2) on (node local) [ 631.299282][T16020] XFS (loop3): Mounting V5 Filesystem [ 631.396252][T16041] loop2: detected capacity change from 0 to 164 [ 631.564699][T16024] loop7: detected capacity change from 0 to 32768 [ 631.609937][T16020] XFS (loop3): Ending clean mount [ 631.645354][T16020] XFS (loop3): Quotacheck needed: Please wait. [ 631.709754][T16051] can0: slcan on ptm0. [ 631.722479][T16024] XFS (loop7): Mounting V5 Filesystem [ 631.848499][T16020] XFS (loop3): Quotacheck: Done. [ 632.047314][T16048] can0 (unregistered): slcan off ptm0. [ 632.159734][T16024] XFS (loop7): Ending clean mount [ 632.193950][ T4278] XFS (loop3): Unmounting Filesystem [ 632.249231][T16024] XFS (loop7): Quotacheck needed: Please wait. [ 632.467027][T16063] loop6: detected capacity change from 0 to 4096 [ 632.531094][T16063] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 632.689064][T16024] XFS (loop7): Quotacheck: Done. [ 632.734755][T16069] ax25_connect(): syz.2.4162 uses autobind, please contact jreuter@yaina.de [ 632.762278][T16071] loop8: detected capacity change from 0 to 64 [ 632.797225][T16063] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 632.900178][T16063] ntfs3: loop6: ino=5, "/" directory corrupted [ 633.134205][ T8565] XFS (loop7): Unmounting Filesystem [ 634.219047][T16090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4171'. [ 634.356318][T16096] loop8: detected capacity change from 0 to 512 [ 634.387213][T16096] EXT4-fs: Ignoring removed nobh option [ 634.428735][T16074] loop2: detected capacity change from 0 to 32768 [ 634.465034][T16074] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.4165 (16074) [ 634.499946][T16098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4174'. [ 634.538197][T16074] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 634.557691][T16096] fscrypt (loop8, inode 2): Error -61 getting encryption context [ 634.567249][T16096] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -61 [ 634.578657][T16074] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 634.621100][T16096] EXT4-fs error (device loop8): ext4_orphan_get:1405: inode #13: comm syz.8.4173: inode has both inline data and extents flags [ 634.635469][T16074] BTRFS info (device loop2): using free space tree [ 634.658990][T16096] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.4173: couldn't read orphan inode 13 (err -117) [ 634.768490][T16096] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 634.902997][T16115] loop7: detected capacity change from 0 to 512 [ 634.930130][T16115] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 634.942621][T13537] EXT4-fs (loop8): unmounting filesystem. [ 635.084879][T16115] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.4178: invalid indirect mapped block 9 (level 0) [ 635.164802][T16074] BTRFS info (device loop2): enabling ssd optimizations [ 635.206989][T16115] EXT4-fs (loop7): 1 truncate cleaned up [ 635.256988][T16115] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 635.438798][T16115] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 635.475137][T16134] loop6: detected capacity change from 0 to 512 [ 635.482763][ T4273] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 635.598311][T16134] FAT-fs (loop6): Directory bread(block 199916) failed [ 635.632190][ T8565] EXT4-fs (loop7): unmounting filesystem. [ 635.788322][T16134] FAT-fs (loop6): Directory bread(block 199917) failed [ 635.840131][T16134] FAT-fs (loop6): Directory bread(block 199918) failed [ 635.847191][T16134] FAT-fs (loop6): Directory bread(block 199919) failed [ 635.929582][T16134] FAT-fs (loop6): Directory bread(block 199920) failed [ 635.936652][T16134] FAT-fs (loop6): Directory bread(block 199921) failed [ 635.998384][T16141] loop3: detected capacity change from 0 to 1024 [ 636.015556][T16134] FAT-fs (loop6): Directory bread(block 199922) failed [ 636.064576][T16134] FAT-fs (loop6): Directory bread(block 199923) failed [ 636.072894][T16141] EXT4-fs: Ignoring removed nobh option [ 636.229006][T16141] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 636.275462][T16141] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 7: comm syz.3.4185: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 636.345821][T16141] EXT4-fs (loop3): Remounting filesystem read-only [ 636.368389][T16134] FAT-fs (loop6): FAT read failed (blocknr 128) [ 636.735702][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 636.939012][T16159] loop3: detected capacity change from 0 to 1024 [ 636.986505][T16159] EXT4-fs: inline encryption not supported [ 637.039373][T16159] EXT4-fs: Ignoring removed mblk_io_submit option [ 637.230486][T16159] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 637.660129][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 637.867134][T16182] loop2: detected capacity change from 0 to 1024 [ 637.921173][T16151] loop7: detected capacity change from 0 to 32768 [ 638.057020][T16182] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 638.073684][T16182] ext4 filesystem being mounted at /803/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 638.274067][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 638.304411][T16194] loop6: detected capacity change from 0 to 128 [ 638.336736][T16194] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 638.356551][T16194] hpfs: filesystem error: improperly stopped [ 638.375439][T16194] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 638.387042][T16194] hpfs: You really don't want any checks? You are crazy... [ 638.441674][T16194] hpfs: Code page index out of array [ 638.470063][T16194] hpfs: code page support is disabled [ 638.520088][T16151] JBD2: Ignoring recovery information on journal [ 638.540606][T16194] hpfs: hpfs_map_4sectors(): unaligned read [ 638.546810][T16194] hpfs: hpfs_map_4sectors(): unaligned read [ 638.614306][T16194] hpfs: filesystem error: unable to find root dir [ 638.719086][T16151] (syz.7.4188,16151,1):ocfs2_clear_journal_error:1114 ERROR: File system error 33023 recorded in journal 0. [ 638.757087][T16194] hpfs: hpfs_map_4sectors(): unaligned read [ 638.764186][T16151] (syz.7.4188,16151,1):ocfs2_clear_journal_error:1116 ERROR: File system on device loop7 needs checking. [ 638.803592][T16151] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 638.882682][ T11] (kworker/u4:1,11,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4104: rec_len is smaller than minimal - offset=0, inode=4104, rec_len=8, name_len=0 [ 639.222242][ T8565] ocfs2: Unmounting device (7,7) on (node local) [ 639.277537][T16216] loop3: detected capacity change from 0 to 256 [ 639.512743][T16216] FAT-fs (loop3): Directory bread(block 64) failed [ 639.527279][T16216] FAT-fs (loop3): Directory bread(block 65) failed [ 639.539690][T16216] FAT-fs (loop3): Directory bread(block 66) failed [ 639.546355][T16216] FAT-fs (loop3): Directory bread(block 67) failed [ 639.612973][T16224] loop8: detected capacity change from 0 to 512 [ 639.621185][T16216] FAT-fs (loop3): Directory bread(block 68) failed [ 639.628095][T16216] FAT-fs (loop3): Directory bread(block 69) failed [ 639.674775][T16216] FAT-fs (loop3): Directory bread(block 70) failed [ 639.724044][T16224] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 639.732189][T16216] FAT-fs (loop3): Directory bread(block 71) failed [ 639.739182][T16216] FAT-fs (loop3): Directory bread(block 72) failed [ 639.848500][T16224] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 639.859552][T16216] FAT-fs (loop3): Directory bread(block 73) failed [ 639.896301][T16224] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 639.933378][T16224] EXT4-fs error (device loop8): ext4_resize_begin:62: comm syz.8.4219: resize_inode disabled but reserved GDT blocks non-zero [ 640.170532][T13537] EXT4-fs (loop8): unmounting filesystem. [ 640.506346][T16239] loop8: detected capacity change from 0 to 512 [ 640.570100][T16239] EXT4-fs (loop8): Test dummy encryption mode enabled [ 640.596512][T16242] loop7: detected capacity change from 0 to 512 [ 640.622215][T16239] EXT4-fs error (device loop8): ext4_find_inline_data_nolock:164: inode #12: comm syz.8.4224: inline data xattr refers to an external xattr inode [ 640.632693][T16242] EXT4-fs: Ignoring removed nomblk_io_submit option [ 640.693893][T16242] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 640.719666][T16242] ext4 filesystem being mounted at /505/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 640.739664][T16239] EXT4-fs (loop8): Remounting filesystem read-only [ 640.789645][T16239] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.4224: couldn't read orphan inode 12 (err -117) [ 640.882595][T16239] EXT4-fs (loop8): Remounting filesystem read-only [ 640.936414][T16239] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 641.109184][T16253] program syz.3.4230 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 641.240323][ T8565] EXT4-fs (loop7): unmounting filesystem. [ 641.366849][T13537] EXT4-fs (loop8): unmounting filesystem. [ 641.431284][T16257] loop2: detected capacity change from 0 to 2048 [ 641.438128][T16260] sch_tbf: burst 4 is lower than device wg0 mtu (1420) ! [ 641.491046][T16257] EXT4-fs: Ignoring removed i_version option [ 641.694430][T16257] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 641.709506][T16265] nbd: socks must be embedded in a SOCK_ITEM attr [ 641.779646][T16257] ext4 filesystem being mounted at /810/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 642.028584][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 642.083439][T16273] netlink: 'syz.7.4239': attribute type 1 has an invalid length. [ 642.100093][T16273] netlink: 120 bytes leftover after parsing attributes in process `syz.7.4239'. [ 642.883301][T16296] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 643.418493][T16303] loop8: detected capacity change from 0 to 736 [ 643.571444][T16305] netlink: 'syz.2.4255': attribute type 29 has an invalid length. [ 643.633225][T16305] netlink: 'syz.2.4255': attribute type 29 has an invalid length. [ 643.680447][T16306] netlink: 'syz.2.4255': attribute type 29 has an invalid length. [ 643.747872][T16275] loop3: detected capacity change from 0 to 32768 [ 643.973640][T16275] XFS (loop3): Mounting V5 Filesystem [ 644.178894][T16297] loop6: detected capacity change from 0 to 32768 [ 644.255264][T16275] XFS (loop3): Ending clean mount [ 644.310891][T16297] JBD2: Ignoring recovery information on journal [ 644.504344][T16297] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 644.624327][ T4278] XFS (loop3): Unmounting Filesystem [ 644.896788][ T8385] ocfs2: Unmounting device (7,6) on (node local) [ 645.756993][T16311] loop8: detected capacity change from 0 to 32768 [ 645.835292][T16337] sp0: Synchronizing with TNC [ 645.913910][T16336] [U] è [ 645.923828][T16325] loop2: detected capacity change from 0 to 32768 [ 645.957351][T16311] XFS (loop8): Mounting V5 Filesystem [ 646.198560][T16325] XFS (loop2): Mounting V5 Filesystem [ 646.266561][T16311] XFS (loop8): Ending clean mount [ 646.286768][T16311] XFS (loop8): Quotacheck needed: Please wait. [ 646.322236][T16325] XFS (loop2): Ending clean mount [ 646.580732][T16311] XFS (loop8): Quotacheck: Done. [ 646.649006][ T4273] XFS (loop2): Unmounting Filesystem [ 646.770182][T13537] XFS (loop8): Unmounting Filesystem [ 646.980955][T16363] net_ratelimit: 3660 callbacks suppressed [ 646.981306][T16363] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 647.216533][T16367] loop7: detected capacity change from 0 to 2048 [ 647.293512][T16367] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 647.331979][T16367] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 647.373930][T16367] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 647.396988][T16367] UDF-fs: Scanning with blocksize 512 failed [ 647.576979][T16372] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 647.616711][T16372] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 647.631002][T16372] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 647.637539][T16372] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 647.658609][T16367] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 647.668848][T16372] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 647.694894][T16372] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffa,4) [ 647.741756][T16372] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 648.355285][T16390] loop2: detected capacity change from 0 to 512 [ 648.475928][T16393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4283'. [ 648.535900][T16393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4283'. [ 648.601240][T16395] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4284'. [ 648.848059][T16390] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 648.859662][T16390] ext4 filesystem being mounted at /821/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 648.978988][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 649.173778][T16411] loop8: detected capacity change from 0 to 128 [ 649.281147][T16411] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 649.319606][T16411] hpfs: filesystem error: improperly stopped [ 649.349573][T16411] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 649.359814][T16411] hpfs: You really don't want any checks? You are crazy... [ 649.367743][T16411] hpfs: hpfs_map_sector(): read error [ 649.428557][T16411] hpfs: code page support is disabled [ 649.435158][T16411] hpfs: hpfs_map_4sectors(): unaligned read [ 649.519667][T16411] hpfs: hpfs_map_4sectors(): unaligned read [ 649.559204][T16411] hpfs: filesystem error: unable to find root dir [ 650.431668][T16437] loop8: detected capacity change from 0 to 4096 [ 650.564782][T16444] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 650.611573][T16437] NILFS (loop8): nilfs_sufile_do_free: segment 9 is already clean [ 650.628615][T16437] NILFS (loop8): nilfs_sufile_do_free: segment 13 is already clean [ 650.826371][T16421] loop7: detected capacity change from 0 to 32768 [ 650.873596][T16421] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.4294 (16421) [ 650.969767][T16421] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 650.993531][T16450] loop2: detected capacity change from 0 to 2048 [ 651.008814][T16421] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 651.032030][T16421] BTRFS info (device loop7): using free space tree [ 651.137087][T16450] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 651.440838][T16421] BTRFS info (device loop7): enabling ssd optimizations [ 651.611483][T16471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4309'. [ 651.741123][T16475] loop2: detected capacity change from 0 to 64 [ 651.920796][ T8565] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 651.953962][T16443] loop6: detected capacity change from 0 to 32768 [ 652.065156][T16443] ERROR: (device loop6): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 652.065156][T16443] [ 652.271620][T16482] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4314'. [ 652.352309][T16482] nbd: must specify at least one socket [ 653.075942][T16494] netlink: 'syz.3.4319': attribute type 3 has an invalid length. [ 653.615138][T16508] device vlan5 entered promiscuous mode [ 653.704378][T16508] device syz_tun entered promiscuous mode [ 653.863549][ T26] audit: type=1326 audit(1777079455.565:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16514 comm="syz.3.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37eb9cdd9 code=0x7ffc0000 [ 653.951903][ T26] audit: type=1326 audit(1777079455.625:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16514 comm="syz.3.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe37eb9cdd9 code=0x7ffc0000 [ 654.054409][ T26] audit: type=1326 audit(1777079455.625:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16514 comm="syz.3.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37eb9cdd9 code=0x7ffc0000 [ 654.065617][T16513] loop8: detected capacity change from 0 to 4096 [ 654.133889][T16517] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4328'. [ 654.182561][ T26] audit: type=1326 audit(1777079455.625:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16514 comm="syz.3.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37eb9cdd9 code=0x7ffc0000 [ 654.237740][ T26] audit: type=1326 audit(1777079455.625:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16514 comm="syz.3.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7fe37eb9cdd9 code=0x7ffc0000 [ 654.260911][T16519] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 654.271957][T16520] loop3: detected capacity change from 0 to 256 [ 654.273271][T16520] exfat: Deprecated parameter 'namecase' [ 654.318946][T16513] NILFS (loop8): cannot delete checkpoints: invalid range [2026, 1792) [ 654.336512][T16513] NILFS (loop8): error -22 preparing GC: cannot delete checkpoints [ 654.368154][ T26] audit: type=1326 audit(1777079455.625:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16514 comm="syz.3.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37eb9cdd9 code=0x7ffc0000 [ 654.474412][ T26] audit: type=1326 audit(1777079455.625:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16514 comm="syz.3.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37eb9cdd9 code=0x7ffc0000 [ 654.533540][T16520] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 654.884338][T16520] exFAT-fs (loop3): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5) [ 654.902192][T16530] exFAT-fs (loop3): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5) [ 655.246706][T16540] loop6: detected capacity change from 0 to 64 [ 655.330754][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4341'. [ 655.387632][T16540] hfs: bad catalog folder thread [ 655.623096][T16547] loop7: detected capacity change from 0 to 1024 [ 655.880173][T16547] hfsplus: extend alloc file! (16384,256,150995125) [ 656.454944][T16572] loop2: detected capacity change from 0 to 64 [ 656.509111][T16572] hfs: gid requires an argument [ 656.523773][T16572] hfs: unable to parse mount options [ 656.974221][T16584] tipc: New replicast peer: 100.1.1.1 [ 657.018613][T16584] tipc: Enabled bearer , priority 9 [ 657.106262][T16590] loop3: detected capacity change from 0 to 512 [ 657.180510][T16590] EXT4-fs: Ignoring removed bh option [ 657.209627][T16590] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 657.296865][T16590] EXT4-fs (loop3): 1 truncate cleaned up [ 657.329666][T16590] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 657.700688][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 658.221021][T16616] loop2: detected capacity change from 0 to 512 [ 658.255806][T16616] EXT4-fs (loop2): Test dummy encryption mode enabled [ 658.375469][T16592] loop6: detected capacity change from 0 to 32768 [ 658.398857][T16621] loop8: detected capacity change from 0 to 256 [ 658.409301][T16616] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 658.430186][T16592] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.4364 (16592) [ 658.577153][T16616] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.4374: Directory hole found for htree leaf block 0 [ 658.601308][T16592] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 658.674366][T16592] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 658.680464][T16624] loop7: detected capacity change from 0 to 2048 [ 658.709964][T16592] BTRFS info (device loop6): using free space tree [ 658.712973][T16616] EXT4-fs (loop2): Remounting filesystem read-only [ 658.875010][T16621] FAT-fs (loop8): Directory bread(block 64) failed [ 658.904470][T16624] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 658.949622][T16621] FAT-fs (loop8): Directory bread(block 65) failed [ 658.992539][T16621] FAT-fs (loop8): Directory bread(block 66) failed [ 658.999277][T16621] FAT-fs (loop8): Directory bread(block 67) failed [ 659.006340][T16624] ext4 filesystem being mounted at /533/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 659.009920][T16621] FAT-fs (loop8): Directory bread(block 68) failed [ 659.072677][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 659.099635][T16621] FAT-fs (loop8): Directory bread(block 69) failed [ 659.106911][T16621] FAT-fs (loop8): Directory bread(block 70) failed [ 659.127245][T16621] FAT-fs (loop8): Directory bread(block 71) failed [ 659.156573][T16621] FAT-fs (loop8): Directory bread(block 72) failed [ 659.163954][T16592] BTRFS info (device loop6): enabling ssd optimizations [ 659.183420][T16621] FAT-fs (loop8): Directory bread(block 73) failed [ 659.297493][T16624] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 659.340188][T16624] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 659.535532][ T8385] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 659.751870][ T6040] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 660.127329][ T6040] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 660.138709][ T6040] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.214005][ T6040] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 660.253531][ T6040] usb 3-1: config 0 interface 0 has no altsetting 0 [ 660.273633][ T6040] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 660.313672][ T6040] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.335634][ T6040] usb 3-1: config 0 descriptor?? [ 660.354550][ T8565] EXT4-fs (loop7): unmounting filesystem. [ 660.481171][ T4322] usb 4-1: [UEAGLE-ATM] firmware is not available [ 660.487905][ T5650] usb 9-1: [UEAGLE-ATM] firmware is not available [ 660.494986][ T22] usb 9-1: [UEAGLE-ATM] firmware is not available [ 660.512632][ T2185] ------------[ cut here ]------------ [ 660.526668][ T2185] sysfs group 'power' not found for kobject 'ueagle-atm!eagleI.fw' [ 660.548701][ T2185] WARNING: CPU: 1 PID: 2185 at fs/sysfs/group.c:280 sysfs_remove_group+0x174/0x290 [ 660.558284][ T2185] Modules linked in: [ 660.562354][ T2185] CPU: 1 PID: 2185 Comm: kworker/1:3 Not tainted syzkaller #0 [ 660.570088][ T2185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 660.580359][ T2185] Workqueue: events request_firmware_work_func [ 660.586704][ T2185] RIP: 0010:sysfs_remove_group+0x174/0x290 [ 660.592658][ T2185] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 6e 3d cb ff 49 8b 17 48 c7 c7 20 6d 9c 8a 48 89 de e8 fc a0 45 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 06 31 7a ff [ 660.612630][ T2185] RSP: 0018:ffffc90005c37880 EFLAGS: 00010246 [ 660.618758][ T2185] RAX: 08076d801e291500 RBX: ffffffff8b036b40 RCX: ffff8880299abb80 [ 660.626847][ T2185] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 660.629532][ T4745] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 660.634888][ T2185] RBP: dffffc0000000000 R08: ffffc90005c37507 R09: 1ffff92000b86ea0 [ 660.650701][ T2185] R10: dffffc0000000000 R11: fffff52000b86ea1 R12: 1ffffffff1606d6c [ 660.658749][ T2185] R13: 1ffff92000b86f24 R14: ffff88802e9269f8 R15: ffff888075160008 [ 660.666826][ T2185] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 660.675874][ T2185] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 660.682615][ T2185] CR2: 0000001b2fd22ff8 CR3: 000000005b53c000 CR4: 00000000003506e0 [ 660.690685][ T2185] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 660.698880][ T2185] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 660.706954][ T2185] Call Trace: [ 660.710340][ T2185] [ 660.713338][ T2185] ? sysfs_unmerge_group+0x109/0x130 [ 660.718813][ T2185] device_del+0x2cb/0xaf0 [ 660.723243][ T2185] ? mutex_unlock+0x10/0x10 [ 660.727827][ T2185] ? kill_device+0x160/0x160 [ 660.732530][ T2185] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 660.738658][ T2185] ? _raw_spin_unlock+0x40/0x40 [ 660.743711][ T2185] ? complete_all+0xc5/0x1d0 [ 660.748369][ T2185] firmware_fallback_sysfs+0x67e/0x930 [ 660.754068][ T2185] _request_firmware+0xca3/0x1250 [ 660.759268][ T2185] ? request_firmware+0x50/0x50 [ 660.764223][ T2185] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 660.770405][ T2185] ? read_lock_is_recursive+0x10/0x10 [ 660.775925][ T2185] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 660.782256][ T2185] request_firmware_work_func+0xac/0x1b0 [ 660.787961][ T2185] ? process_one_work+0x7b0/0x1160 [ 660.793191][ T2185] process_one_work+0x8a2/0x1160 [ 660.798214][ T2185] ? worker_detach_from_pool+0x240/0x240 [ 660.803963][ T2185] ? _raw_spin_lock_irq+0xb7/0xf0 [ 660.809040][ T2185] ? _raw_spin_lock_irqsave+0x100/0x100 [ 660.814655][ T2185] ? kthread_data+0x4b/0xc0 [ 660.819218][ T2185] worker_thread+0xaa2/0x1270 [ 660.824055][ T2185] kthread+0x29d/0x330 [ 660.828174][ T2185] ? worker_clr_flags+0x1a0/0x1a0 [ 660.833259][ T2185] ? kthread_blkcg+0xd0/0xd0 [ 660.837855][ T2185] ret_from_fork+0x1f/0x30 [ 660.842570][ T2185] [ 660.845619][ T2185] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 660.853166][ T2185] CPU: 1 PID: 2185 Comm: kworker/1:3 Not tainted syzkaller #0 [ 660.860649][ T2185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 660.870732][ T2185] Workqueue: events request_firmware_work_func [ 660.876904][ T2185] Call Trace: [ 660.880204][ T2185] [ 660.883148][ T2185] dump_stack_lvl+0x188/0x24e [ 660.888022][ T2185] ? memcpy+0x3c/0x60 [ 660.892094][ T2185] ? show_regs_print_info+0x12/0x12 [ 660.897305][ T2185] ? load_image+0x400/0x400 [ 660.901943][ T2185] panic+0x2e5/0x730 [ 660.905896][ T2185] ? bpf_jit_dump+0xd0/0xd0 [ 660.909504][ T4745] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.909534][ T4745] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.909566][ T4745] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 660.909587][ T4745] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.914764][ T4745] usb 4-1: config 0 descriptor?? [ 660.953267][ T2185] ? ret_from_fork+0x1f/0x30 [ 660.957953][ T2185] __warn+0x2f8/0x4f0 [ 660.962149][ T2185] ? sysfs_remove_group+0x174/0x290 [ 660.967520][ T2185] ? sysfs_remove_group+0x174/0x290 [ 660.972785][ T2185] report_bug+0x2ba/0x4f0 [ 660.977156][ T2185] ? sysfs_remove_group+0x174/0x290 [ 660.982379][ T2185] handle_bug+0x3a/0x70 [ 660.986559][ T2185] exc_invalid_op+0x16/0x40 [ 660.991088][ T2185] asm_exc_invalid_op+0x16/0x20 [ 660.995960][ T2185] RIP: 0010:sysfs_remove_group+0x174/0x290 [ 661.001964][ T2185] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 6e 3d cb ff 49 8b 17 48 c7 c7 20 6d 9c 8a 48 89 de e8 fc a0 45 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 06 31 7a ff [ 661.021800][ T2185] RSP: 0018:ffffc90005c37880 EFLAGS: 00010246 [ 661.027907][ T2185] RAX: 08076d801e291500 RBX: ffffffff8b036b40 RCX: ffff8880299abb80 [ 661.035915][ T2185] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 661.044038][ T2185] RBP: dffffc0000000000 R08: ffffc90005c37507 R09: 1ffff92000b86ea0 [ 661.052378][ T2185] R10: dffffc0000000000 R11: fffff52000b86ea1 R12: 1ffffffff1606d6c [ 661.060478][ T2185] R13: 1ffff92000b86f24 R14: ffff88802e9269f8 R15: ffff888075160008 [ 661.068605][ T2185] ? sysfs_unmerge_group+0x109/0x130 [ 661.074034][ T2185] device_del+0x2cb/0xaf0 [ 661.078381][ T2185] ? mutex_unlock+0x10/0x10 [ 661.083026][ T2185] ? kill_device+0x160/0x160 [ 661.087632][ T2185] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 661.093637][ T2185] ? _raw_spin_unlock+0x40/0x40 [ 661.098589][ T2185] ? complete_all+0xc5/0x1d0 [ 661.103202][ T2185] firmware_fallback_sysfs+0x67e/0x930 [ 661.108704][ T2185] _request_firmware+0xca3/0x1250 [ 661.113757][ T2185] ? request_firmware+0x50/0x50 [ 661.118713][ T2185] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 661.124975][ T2185] ? read_lock_is_recursive+0x10/0x10 [ 661.130455][ T2185] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 661.136453][ T2185] request_firmware_work_func+0xac/0x1b0 [ 661.142193][ T2185] ? process_one_work+0x7b0/0x1160 [ 661.147358][ T2185] process_one_work+0x8a2/0x1160 [ 661.152354][ T2185] ? worker_detach_from_pool+0x240/0x240 [ 661.158017][ T2185] ? _raw_spin_lock_irq+0xb7/0xf0 [ 661.163116][ T2185] ? _raw_spin_lock_irqsave+0x100/0x100 [ 661.168797][ T2185] ? kthread_data+0x4b/0xc0 [ 661.173334][ T2185] worker_thread+0xaa2/0x1270 [ 661.178104][ T2185] kthread+0x29d/0x330 [ 661.182614][ T2185] ? worker_clr_flags+0x1a0/0x1a0 [ 661.187657][ T2185] ? kthread_blkcg+0xd0/0xd0 [ 661.192262][ T2185] ret_from_fork+0x1f/0x30 [ 661.196706][ T2185] [ 661.200274][ T2185] Kernel Offset: disabled [ 661.204737][ T2185] Rebooting in 86400 seconds..