last executing test programs: 12.786697564s ago: executing program 1 (id=372): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r1) 12.183759427s ago: executing program 1 (id=375): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 10.059539088s ago: executing program 0 (id=383): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="13", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x2, 0x0, 0x2, 0x7fff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x20000000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$iso9660(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x1004491, &(0x7f0000000480)=ANY=[], 0xfe, 0x847, &(0x7f0000000a40)="$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") openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RSETATTR(r6, &(0x7f00000003c0)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r5, 0x0, r0, 0x0, 0xffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000659b8c4a0000c60001000800000085100000010000009500"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) 9.985763584s ago: executing program 1 (id=384): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x1000401, &(0x7f0000000440)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ca, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000002c0)='dev/ttyUSB0\x00', 0x2, 0x0) 9.318827352s ago: executing program 1 (id=387): syz_ublk_setup_io_uring(0x6a4a, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000640)="884c18a1f9e8825677da", 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvfrom(r0, 0x0, 0x0, 0x11120, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc804) 9.175058602s ago: executing program 2 (id=388): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000002000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000002040), 0xfffffedf, 0x10, &(0x7f0000002080)}, 0x48) 8.963043234s ago: executing program 0 (id=389): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000a) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x2, 0x5003) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1c040, &(0x7f00000001c0)={[{@namecase}, {@fmask={'fmask', 0x3d, 0x2}}, {@time_offset={'time_offset', 0x3d, 0x400}}, {@dmask={'dmask', 0x3d, 0x8}}, {@sys_tz}, {@umask={'umask', 0x3d, 0x400}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@namecase}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}]}, 0x1, 0x1533, &(0x7f00000014c0)="$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") mount$cgroup(0x0, &(0x7f0000002a00)='./file0\x00', 0x0, 0x5cd0253a44407e25, 0x0) mount$9p_fd(0x0, &(0x7f0000002a40)='./file0\x00', 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r3, 0x2) 8.860488321s ago: executing program 2 (id=390): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x8000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x1003, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x1, 0xffffffff, 0x0, r2}}], 0x1, 0x0, 0x0) 7.809927683s ago: executing program 2 (id=391): r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@enospc_debug}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@notreelog}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x70, 0x34, 0x70, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) 7.718195508s ago: executing program 4 (id=392): r0 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x1, 0x2, '\x00\x00'}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000200), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) 6.963927095s ago: executing program 3 (id=394): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000007cc0)='net/mcfilter\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000007c40)=ANY=[@ANYBLOB="aaaaaaaaaaaaa15cd4cc191b0800450000300000000000019078ac1e0001ac"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000}, 0x50) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x183b41, 0x12b) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001d00)=@mangle={'mangle\x00', 0x10, 0x6, 0x540, 0x0, 0x410, 0x0, 0x2f8, 0x2f8, 0x640, 0x640, 0x640, 0x640, 0x640, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) vmsplice(r0, &(0x7f0000008380)=[{&(0x7f0000000000)="a90e2d1f29433a795b663f1a54ed1e071f489ed192a26c709decad4e259a97f541a6f41026a2c07b0ba4db160f8d2af19b1342b5761ae1b0a96f297a369de686f1a18e2c0899ca45d255f155c93f28dc5bf3dfa5622fd3fb7bc61c2640447f00c562f821bcea6350120a8a79dd20a8ab399d3d617fa2f3970351c2d41e9134a1c16b8dbb4c54f7be5eae297b0ad0566da3ead30f9d6bff9a4fb428f4928b9a052239effbe34e0bbdbbd295890498a23a72f0f0bf56861c884d8d4af61c1704c272abe7b0ad83208f394e7c502584dc5e6266dcf188f4c0888ccd658ef9b993fde4", 0xe1}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="54237effd99d1d07899e11eb4b3bf4cb64445b59fefbdd6aa9596b80cce15e1be290de9eb30ad0d0a10825e8b5b8cc44b0fa97a7fc712a1aca7ce7ea86ba2a95fbbee71e727f7a8c89b3f5d6af770d7e8d484c0c66edf78da37e6994e0b6dd099524160fbeb2fbad6713a3fff1e30898924f53b43c68c9e1791f1201b77e2a08b8b441a8efe1a16568ad769b30331ce63dc0d7429924902769b961b4f9652b5ab8d3376cd2f4cacdc47c272104edc3d100e41d94421c753035293c9aa2a2de69a4b80fb5118c42f40e0fb5ac300e2ec56146c1304095e1eaae49e6d079964ecbe30ef4", 0xe3}, {&(0x7f0000001940)="120647bb2ddb8774eb257578c205eb2c00cfad499e08679f45b2d0863ccb6359f12b8f885ce99217e64b212e6f25f9b679418adbb618ec46f7361268b8ff2740c4f949843eb008b30a91a873ce1b50287cd03235f2941e9f29d25f84a40982a76ee7e0143fca81d50cfcfefe26493cf0da90c2351a626a66b5d3f42ef3bdfb3a0ef33df741f4983423e180de558ce89e564a7d483bdd290fa14ea4d74fa717293f309fb4d3823d1b6b12ea9b66a8cc6e043d275e4fc56f81fac1bb9e5cfeb63d5908c0d2bfa86d860375269701431c965fe13ea46c", 0xd5}, {&(0x7f0000001a40)="6f8aea98e7f5", 0x6}, {&(0x7f0000001c80)="0dd6f64f06725e7c0997b86ef752a331f195f65351493b7e4b19414309ad879e5a3d68b066d0d2b9d82847fa8df01d34ff3d7cff870908abc2ecadcbfc862966a05e4b8f99993da6bff51744c7f5e2a45e32009f01d93d4d235e32ab2a10b2e188af01e4bf5d20d5df1d6006b4e21a93ba5c25dc98d302", 0x77}, {&(0x7f0000000340)="c0a10188da98b7ad88ca32c47c3adcd5d0c56ff872e4748faccf6d3ba2cef2488143735b31826c1400512ef22ca6761c21eeb31a391641d88ae03b8c5f47e8a5d7007377c5a16e1efcae1e93a038044819dcd86bec4c6379a05e49e1796bc89a3278408dcb5e278a133e1f088dbde897ac38cafc061e4f0ec3449be9aa852b62f8024fc1670790e5721cff990d68443eef7f80a1b2ecb26bd5f4f523889f6df5f86147cc43b465402255c3c024987f5774ffa690a70fd27e3e71885482e4a0149cf1e848b08f4b47321e7e3bdef0a1e3f2ed57c5f981bc4eb49ab50d9e4a9a0e01ceb36a54f41ce51a5d0d0f64a6a298", 0xf0}, {&(0x7f0000001a80)="f09fe0d031d6db06a8df2cef3cbfa04c35a3f78a2809f65b122ab0227d61aaab9a3148fe9c0fdb176c5e12bc38532cd9d3b5f465057fa9b2b2df5c37db6d673d323f63138cc26985e0242ec7efed8d025521a9d139ccb99e86800e15485d7cc06505ebde16c210e60ba2bfc6488c28386f79743d1504c92098e3d020f1fe725bb7d5855dce07cf77cef535c1bef2c9087ef52af0d6f17bb961207cfd00e659f8642fd321669d5f3219184f88f2b9d9a4b7", 0xb1}, {&(0x7f0000001bc0)="f2d2155493fcf7013a36d040967f8e2d1efa9d4fdc156af3427ab296fdf179f8e398725c7cfdb52e81000000000000002f821164d7550147fa7e00cd423f56dd3f0b4471e08ee3918c993103666eaeecbbd50c1dfe420900748ec56d4c82485431012518e4f4980751148204d8c6da8f84fc14aa4f236a6a06688aa49f70458fa2f6b6609b8240e6ec0ead", 0x8b}, {&(0x7f0000007e80)="eed4e4ea35b55dd575f5a7d22b678e04807c47409ca95c84d43be0aba4ac6294d39e2e2bb4a589056994bcd15b64fde36a95c1c18af9a011e8ee39cbe4c17a260cce8efe6aca2ff3011cc5db59f59d1e352c9eed97dad2dbba8d2d8928fbb53fd9e5748d2975aabffa5cb9cf768b377b08eb16f3b33d2a4f38778a119ea650778296ccd2b64f818ba150e2ef", 0x8c}, {&(0x7f0000007f40)="1cbf950d706390b11c61c33a15cd59ae63eb43a8ed7cf31fb195de8f3893ee22fc538fee770dec97d57d1c02e0e6c22a75cf6e70fa9d90b3158c73fb85c4586887cfb5c5fc259e6ebbed03e7dcbc0a65f5c005739bcbe79811ce2f95ee678aefe8f7cfed49da4d881de21c163a649d5f1a142c6425dcb387305c533dcf88fceeefef39b4c91e545979e8434f6b9ccdb5b0a3ae8f7a219ee5b36a6d730fab4ea65f8e658642671e238eb6c5fbfeaaf78a8ae2a3d77dec976a03dd4c39b7be3e0423fa4422", 0xc4}, {&(0x7f0000008040)="5b653db4724d4bfd6f65835b358deef5d275e8633e1d49c9fc3e19719c2116f4a86e3c35398f9f3bfb2feded60a6a082ab66f2066ad293e11aaba80502e0", 0x3e}, {&(0x7f0000008140)="cdcc25288cb1c6e92b12b252cde3d85170c78ee99ff267186b35794fe8e49d125f02b7402e96fa0edcb0bca2495c9331fc23658dee04d3c069395765722e49d4bf5a265dc795580de8e7311e3673d3dee60a909ae482591fce42aca6818a0b33c5e42c5ec991a54831764855f4d2954487a27f97ff0c320790ddadfbcde464078db5fd6032fad7ac3f1c20925b0e560299a56c581021d4f701d3302d01600a0079aaf4ded7bfbd9749a57a6784efd15810caf2f8df2e57700a13d05ae4879db5d901f0e1cb9cd1374b79a7b0c90ee2caac5dcfdc489d50c69ffa1102f90695f49d1e65c5afaeeaa0409393542b", 0xed}, {&(0x7f0000008240)="0d08267a36046dab03fb80907d2320f3aef7a50bf4c46ec0cd2087cba932d4daa20ca60b9d1adb3b93eb0c0f0c9d596389ebd07aff92a6a542bb6ef1d9fa834462d6854e0c014d4a8f67510c84394750f519e3fa9a5e686471869b1a9f88fba38322456905b4124c2c997c0fae6f07c200e35e20885c8f45b7a3c0c9a96171ce5d3ab49bcec32f35fb4702bc517a96eeac0e7235", 0x94}, {&(0x7f0000008300)="d1754bcab0e2aaa16e6c837603d4cdc5be4551ea50274976e1f1819d3b455afb227f1fb54d443bc4a76094bf2142fd9b70", 0x31}, {&(0x7f0000008340)="cd", 0x1}], 0x10, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000740), 0xfffffff8, r0}, 0x38) syz_open_dev$rtc(&(0x7f0000000300), 0x3, 0x200) 6.510509231s ago: executing program 0 (id=395): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x2b) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x106, 0x3}}, 0xffffff99) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x4e22, 0xfffffffe, @mcast2}, r0, 0x40099d}}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.060409504s ago: executing program 0 (id=396): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000440), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/resume', 0x1c9a82, 0x38) sendfile(r4, r0, 0x0, 0xbc44) 5.974178611s ago: executing program 2 (id=397): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000004e80)) 5.971778597s ago: executing program 1 (id=398): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002100)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002140)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000002180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000021c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000022c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000002300), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000002340), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r4, 0x0, 0x0, 0x0) connect$vsock_stream(r5, &(0x7f0000002380)={0x28, 0x0, 0x0, @local}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000023c0)='./sys\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000002400), 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002440)={'syz_tun\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002480)='./file0\x00', 0xc7) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x207) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)={[], [], 0x2c}) fsync(0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002580)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40, 0x400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000002600)=ANY=[@ANYBLOB], 0x0) 5.923787497s ago: executing program 3 (id=399): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="13", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x2, 0x0, 0x2, 0x7fff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x20000000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$iso9660(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x1004491, &(0x7f0000000480)=ANY=[], 0xfe, 0x847, &(0x7f0000000a40)="$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") openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RSETATTR(r6, &(0x7f00000003c0)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r5, 0x0, r0, 0x0, 0xffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000659b8c4a0000c60001000800000085100000010000009500"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) 4.907096732s ago: executing program 4 (id=400): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, 0x0, 0x0) ftruncate(r1, 0x2000009) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) sendfile(r0, r1, 0x0, 0x7ffff004) 4.867339829s ago: executing program 3 (id=401): name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x200a00) mount(0x0, &(0x7f0000000a00)='./proc\x00', &(0x7f0000005cc0)='proc\x00', 0x40, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000005d00)='./proc/net/ip_vs_conn\x00', 0x0, 0x0) pread64(r0, &(0x7f0000005d80)=""/4096, 0x1000, 0x1) 4.656058239s ago: executing program 4 (id=402): bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) statfs(0x0, &(0x7f00000005c0)=""/216) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000700)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000800), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000840), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500000000000280f82849d7eb78000000020000194f0000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0d0000000a000000040000000100000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000a00000000000000000000f934c1f17a00f0e70000000000000000"], 0x50) close(r3) r4 = epoll_create1(0x0) poll(&(0x7f0000000980)=[{r4, 0x251}], 0x1, 0xdb3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000a00)) shutdown(r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000a40)={0x2000200b}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000b00)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000b40), 0x64) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x56, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1fd) 3.792824246s ago: executing program 0 (id=403): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x10, 0x2, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x608, 0xfd, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.227158385s ago: executing program 3 (id=404): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x20, 0x8, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 3.16793215s ago: executing program 2 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001400)={0x4, &(0x7f00000000c0)=[{0x25, 0x0, 0x2, 0x2}, {0x80}, {0x3, 0x0, 0x3}, {0x6, 0x0, 0xff, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000000440)={&(0x7f0000000000)=""/35, 0x2, 0x23}, &(0x7f0000002740)={0x0}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) setns(0xc9, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000300)='./file0\x00', 0x300801c, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYRES8, @ANYRESDEC, @ANYBLOB="de3631d09a34c16dcba1ffab984911dcdbc1e2658c0e67172ccdcb14208a27a4ff0c1cbd0fa976fdbbaad16f5c6fde7c2c92f2e0ab2344e716564d5a635f805beb1b8f511710cab116bf7d89a29c2663983ab0d1ba440d9b6dad26650c4fcbc378c942f1886742a767c7a16ea03d45863b2d1cb3c0b110fce5adcfb2a8b7eaeb511b156d10fcaff3dc0e49dab7a3f17f23f991b330ebbbe05cf266927dbfaf48e5a94cc269103cc3becda023f5c580b23c1692efe1242191b52e58260985c320a9fe27a1cb3b4d1fa1494038ee8af6168a9d6ec2c35671b71eaac01cf09c1df4cd5cf00ae24e0191a460c21f04f00c70d4", @ANYRES16], 0x1, 0x2d0, &(0x7f00000005c0)="$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") socket$packet(0x11, 0x3, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 3.157647519s ago: executing program 4 (id=406): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r4 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x200008, &(0x7f00000001c0)=ANY=[@ANYRES8=r4, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000440)="$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") r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x1c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x1c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) nanosleep(&(0x7f0000000b00)={0x1}, 0x0) sendto$packet(r0, &(0x7f0000000200)="b61a13b51e2d18c59d32f26586bddc4eb00a5947f5aac26c60e6efd91e3a45efebae30b6a02a44bffda8f09fb7e818d9f70402bc24c514b1cfabdaae11126255e7c6c3740a1b7069bb1aecfca8806a187ff00aa612df38eaf4d7d169229f2a7c598a1349c61bac2a241ddf9bcc06bc6610755b6a9625f386f073af16818cc8dfa297320f1398fad8d571217398d4fee201edf091dad649a0b688b5e71b632862ec9454de1939c6830aa883338366e925456e69834aafed13b40fccfc2cb7a89ab4609667eb698dfa441966f4d558", 0xce, 0x2000c010, &(0x7f0000002d40)={0x11, 0x1e, r3, 0x1, 0x5, 0x6, @random="e2db483226e8"}, 0x14) r8 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./file1\x00', 0x101042, 0x0) add_key(&(0x7f0000000b80)='rxrpc\x00', 0x0, &(0x7f0000000bc0)="000000000000000463656c6c00000002000000440000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000400000000000000140000000200"/112, 0x70, 0xffffffffffffffff) r9 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x6042, 0x101) syz_fuse_handle_req(r9, &(0x7f0000000c80)="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", 0x2000, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r9, r8, 0x0, 0xe3aa6ea) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000010400000000fcdbdf2500000000", @ANYRES32=r3, @ANYBLOB="00000000c0010400280012800b000100697036746e6c00001800028014000300fc00000000000000000000000000000008000300", @ANYRES32=r3, @ANYBLOB="b8eaabf40fd34262318c04e1687dcb8718f567c1f82661a9cce54375f29768d2e8c27cac5f511b248e08c482dc0f6b94c7cd3a3e3fec5326c230489f080b0c0000006db9363a29e8aea98c126ccff46b7194d63b2b53a054aefb1047771c2a290006023742cca86afaaebcf1073e44cb7ca336ff9b58462d71756acc554df86bccc6c7b2d1c84877a7630742f22eb7f0f8f98d338ea8f79089d86fe021b81cb92ed15735da0ea6f1a2b32173d18a5cbceba86d2f0900000013"], 0x50}}, 0x24000840) 2.189526847s ago: executing program 3 (id=407): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)="686973743a6b6579733d636f6d6d6f6e5f74696d657374616d702e75736563731b2d2d1e2d3cb066760787deffba336b01663f4b", 0x34) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file7\x00', 0x0, &(0x7f0000000080), 0x1, 0x507, &(0x7f0000000c00)="$eJzs3cFvI1cZAPBvJvEmzaabFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Wx4yh2ShNWavI/IFGJA4ITZw5IHCr1xBHBDW69lANSgRVog8TBaOxJNpvYSdj12tr495NGM2/eZL731pr37G9lvwBG1vWI2IuIKxHxTkTM5OeTfIs3Olt23f17d5cP7t1dTqLVevsfSbs+OxfH/iZzNb/nZER8/zsRP0pOx220xtaXqtXKVl4uNWubpcbO7q212tJqZbWyUS4vzC/MvXb71XLf+vpi7TeffnvtzR98+LsvffKnvW/+JGvWdF53vB/91Ol64ShOZjwi3nwSwYZgLO/PlWE3hEeSRsRnIuKl9vM/E2PtV/NiujzWAMBToNWaidbM8TIAcNml7RxYkhbzXMB0pGmx2MnhPR9TabXeaN68U9/eWOnkymajkN5Zq1bm8lzhbBSSrDz/fnb8oFyOh8u3I+K5iPjpxDPtcnH54nkGAKC/rp6Y//890Zn/AYBLbvK8CxYH0w4AYHDOnf8BgEvH/A8Ao8f8DwCjx/wPAKPm6rAbAAAM3MeHn//Hht0SAGAgvvfWW9nWOsh//3rl3Z3t9fq7t1YqjfVibXu5uFzf2iyu1uur1UpxuV47737Ven1z/pXYfq/UrDSapcbO7mKtvr3RXGz/rvdipTCQXgEAZ3nuxY/+kkTE3uvPtLc4tpaDuRout3TYDQCGRs4fRpdf4YbR5TM+cN5anj2/IvTBIwRrvf8IfwT0243Py//DqJL/h9El/w+jS/4fRlerlfRa8z89uuSYa91OAgBPFTl+YKD//w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACXxHR7mz1WTtNiMeLZiJiNQnJnrVqZi4hrEfHnicJEVp4faosBgMeX/i3J1/+6MfPy9MnaK8l/Jtr7iPjxz9/+2XtLzeZW9gYg+efR+eYH+fnyMNoPAJzncJ4+msdz9+/dXT7cBtmeT7/VWVw0i3uQb52a8RjPdn+cjEJETP0r6ZRz2fuVsT7E39uPiM9163/Szo3M5iufnoyfxX52oPHTh+Kn7brOPvu3+OypO0/0jHneWq8wKj7Kxp83uj1/aVxv7ye7Ln482R6hHt/h+Hdwavw7fN4n22NNt/Hv+kVjvPL77/as24/4wni3+MlR/KRH/JcvGP/jL375pV51rV9G3IgT8dOHr8lilZq1zVJjZ/fWWm1ptbJa2SiXF+YX5l67/Wq51M5Rlw4z1af9/fWb13r2/9cRUyfj51Enz+n/187sdetoAP7Vf9/54Vd6xd+P+MZXu7/+z58RP5sTv35m/AeWpn7bc/nuLP5Kp//7/+/rf/OC8T/56+7KBS8FAAagsbO7vlStVrb6elCIPt/w2EHyhNrs4JIfZO/HH/c+L+Qps67X/OEXH76QVQ69p305GPLABDxxDx76YbcEAAAAAAAAAAAAAADo5cSXfpK+f50oHXYPAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuMz+FwAA//+EycLn") socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r1, 0x0) lremovexattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00') 933.417627ms ago: executing program 3 (id=408): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000240)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000002c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000480), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x1214040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x4, 0x80) r4 = syz_open_procfs(0x0, &(0x7f0000000680)='clear_refs\x00') writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000700)='4', 0x1}, {&(0x7f0000000740)="4641ddb8e8abf89ad15aae0e62c69a13f68d9bd85101fe14e3cb32dcfd75a94e61eae847a1ece7a95a8f662ad9e6e056b37e3989ff8a2f07d71964c5891ab614b8981aea73a7e2d721c39e9ea884ea67b37d0195b5281839be1c6523674509927a629d554caa6bb4d5281bfa7e2b2d982d8741e495688e5e0db50e30d343e33b44817c81abcae1e80b0119346ab6d93f11e8384f0adb0f9762315b24c6e4438cb2166fc0f62e3dae0b6dca33d14411239b625a795a23ba2c964a4c16283f827b21b7862d2ed4f1e7a0ceffe21714a0ae6d851d080595243d7609655fac715f7a68e20ea9e860258b0002c5d439fa5960d0ec15aa9ff0", 0xf6}], 0x2) chdir(&(0x7f00000001c0)='./bus\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40400, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, 0x0, 0x44000160) getdents64(r5, &(0x7f0000000000)=""/49, 0x31) 697.790692ms ago: executing program 4 (id=409): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000580)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x1, 0x0, 0xad, 0xfffffffffffffff7, 0x6, 0x81, 0xffffff09, 0x473f, 0x6, 0x0, 0x9, 0x93d0, 0x6, 0x929}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 242.294227ms ago: executing program 2 (id=410): r0 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x1, 0x2, '\x00\x00'}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000200), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) 152.258823ms ago: executing program 1 (id=411): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="13", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x2, 0x0, 0x2, 0x7fff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x20000000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$iso9660(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x1004491, &(0x7f0000000480)=ANY=[], 0xfe, 0x847, &(0x7f0000000a40)="$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") openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RSETATTR(r6, &(0x7f00000003c0)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r5, 0x0, r0, 0x0, 0xffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000659b8c4a0000c60001000800000085100000010000009500"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) 12.485058ms ago: executing program 4 (id=412): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newtaction={0x48, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = dup(r0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0xa, 0x3, 0x87) r6 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000008c0)={'veth1_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000900)={@local, 0x40, r7}) sendmsg$nl_route(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfd, {0xa, 0x3f, 0x0, 0xc8, r7}, [@IFA_FLAGS={0x8, 0x8, 0x582}, @IFA_LOCAL={0x14, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000780)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3}) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x9}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_open_procfs(0x0, &(0x7f0000000540)='net/vlan/config\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x1, &(0x7f0000000700)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mknod$loop(&(0x7f0000000740)='./file0\x00', 0x6000, 0x0) lseek(r10, 0x0, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r3, 0x5501) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r9}, 0x20) write$uinput_user_dev(r2, &(0x7f00000000c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x4, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x5, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x7, 0x0, 0x5, 0xba, 0x1, 0x7fe, 0x7fff, 0x2, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x7, 0xb66, 0x2, 0xd5c4, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81319d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x7, 0x4, 0xfffffffd, 0x5, 0xe46, 0xfffffb66, 0x80, 0x2, 0x84, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x807, 0x2, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008f, 0x10000, 0xfe4, 0x3ff], [0x2, 0xffffffff, 0x4, 0x3, 0x3, 0x20000010, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x1, 0xffffffff, 0x0, 0x9, 0x13, 0x10001, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x401, 0x4, 0xf, 0x7, 0x47, 0x7, 0x0, 0x11, 0xfffffffd, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0xe, 0x10001, 0x1, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x3, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb02d, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x2, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) read$hiddev(r3, 0x0, 0x0) 0s ago: executing program 0 (id=413): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) kernel console output (not intermixed with test programs): loop4): failed to test first cluster bit of root dir(5) [ 107.648896][ T5911] erofs (device loop1): mounted with root inode @ nid 36. [ 107.696438][ T5911] syz.1.33: attempt to access beyond end of device [ 107.696438][ T5911] loop1: rw=524288, sector=12296, nr_sectors = 8 limit=16 [ 107.696705][ T5911] syz.1.33: attempt to access beyond end of device [ 107.696705][ T5911] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 107.697515][ T5911] syz.1.33: attempt to access beyond end of device [ 107.697515][ T5911] loop1: rw=0, sector=12296, nr_sectors = 8 limit=16 [ 107.697744][ T5911] erofs (device loop1): read error -5 @ 0 of nid 89 [ 107.699992][ T33] audit: type=1800 audit(1791944072.747:2): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.33" name="file2" dev="loop1" ino=89 res=0 errno=-5 [ 107.770386][ T5911] syz.1.33: attempt to access beyond end of device [ 107.770386][ T5911] loop1: rw=0, sector=12296, nr_sectors = 8 limit=16 [ 107.771152][ T5911] erofs (device loop1): read error -5 @ 0 of nid 89 [ 107.853554][ T5885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.854073][ T5885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.050876][ T5613] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 108.080807][ T5736] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 108.128213][ T5916] set_capacity_and_notify: 1 callbacks suppressed [ 108.128233][ T5916] loop4: detected capacity change from 0 to 1024 [ 108.221692][ T5722] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 108.252623][ T5736] usb 3-1: New USB device found: idVendor=08fd, idProduct=0002, bcdDevice=0.00 [ 108.256287][ T5736] usb 3-1: config index 0 descriptor too short (expected 53, got 36) [ 108.256317][ T5736] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.256371][ T5736] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 897 [ 108.256397][ T5736] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 108.256440][ T5736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.359600][ T5611] usb 1-1: USB disconnect, device number 5 [ 108.368392][ T5916] hfsplus: request for non-existent node 33423360 in B*Tree [ 108.368411][ T5916] hfsplus: request for non-existent node 33423360 in B*Tree [ 108.394806][ T5916] hfsplus: request for non-existent node 33423360 in B*Tree [ 108.394829][ T5916] hfsplus: request for non-existent node 33423360 in B*Tree [ 108.421833][ T5722] usb 2-1: Using ep0 maxpacket: 32 [ 108.423124][ T5722] usb 2-1: New USB device found: idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 108.423168][ T5722] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 108.425058][ T5722] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 108.425082][ T5722] usb 2-1: config 0 has no interface number 0 [ 108.427311][ T5722] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 108.427337][ T5722] usb 2-1: config 0 has no interface number 0 [ 108.429872][ T5722] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 108.429896][ T5722] usb 2-1: config 0 has no interface number 0 [ 108.454124][ T5722] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 108.454151][ T5722] usb 2-1: config 0 has no interface number 0 [ 108.476052][ T5722] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 108.476126][ T5722] usb 2-1: config 0 has no interface number 0 [ 108.497933][ T5722] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 108.498013][ T5722] usb 2-1: config 0 has no interface number 0 [ 108.543030][ T5722] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 108.543058][ T5722] usb 2-1: config 0 has no interface number 0 [ 108.564905][ T5722] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 108.565010][ T5722] usb 2-1: config 0 has no interface number 0 [ 108.589915][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.589979][ T5722] usb 2-1: Product: syz [ 108.589995][ T5722] usb 2-1: Manufacturer: syz [ 108.590011][ T5722] usb 2-1: SerialNumber: syz [ 108.619351][ T5916] hfsplus: request for non-existent node 33423360 in B*Tree [ 108.619372][ T5916] hfsplus: request for non-existent node 33423360 in B*Tree [ 108.647034][ T5722] usb 2-1: config 0 descriptor?? [ 108.651257][ T5722] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 108.716744][ T5919] hfsplus: request for non-existent node 33423360 in B*Tree [ 108.716767][ T5919] hfsplus: request for non-existent node 33423360 in B*Tree [ 108.737070][ T5916] hfsplus: request for non-existent node 33423360 in B*Tree [ 108.737309][ T5916] hfsplus: request for non-existent node 33423360 in B*Tree [ 108.768887][ T5921] hfsplus: request for non-existent node 33423360 in B*Tree [ 108.768908][ T5921] hfsplus: request for non-existent node 33423360 in B*Tree [ 108.796127][ T5916] hfsplus: request for non-existent node 33423360 in B*Tree [ 108.796148][ T5916] hfsplus: request for non-existent node 33423360 in B*Tree [ 108.799031][ T5916] hfsplus: request for non-existent node 33423360 in B*Tree [ 108.799048][ T5916] hfsplus: request for non-existent node 33423360 in B*Tree [ 108.838348][ T5916] hfsplus: request for non-existent node 33423360 in B*Tree [ 108.838369][ T5916] hfsplus: request for non-existent node 33423360 in B*Tree [ 108.865175][ T5916] hfsplus: request for non-existent node 33423360 in B*Tree [ 108.865198][ T5916] hfsplus: request for non-existent node 33423360 in B*Tree [ 108.869028][ T5914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.869720][ T5914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.886841][ T5722] etas_es58x 2-1:0.2: could not retrieve the product info string [ 108.897024][ T5916] hfsplus: request for non-existent node 33423360 in B*Tree [ 108.897079][ T5916] hfsplus: request for non-existent node 33423360 in B*Tree [ 108.955169][ T5916] hfsplus: request for non-existent node 33423360 in B*Tree [ 108.955191][ T5916] hfsplus: request for non-existent node 33423360 in B*Tree [ 109.051202][ T5826] usb 3-1: USB disconnect, device number 7 [ 109.051252][ C0] Bluetooth: hci5: urb ffff888035721200 failed to resubmit (19) [ 109.180740][ T5923] loop3: detected capacity change from 0 to 1024 [ 109.194580][ T5923] EXT4-fs: Ignoring removed orlov option [ 109.194632][ T5923] EXT4-fs: Ignoring removed orlov option [ 109.271330][ T5923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.325740][ T5931] loop0: detected capacity change from 0 to 512 [ 109.513745][ T5613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.764215][ T5943] loop3: detected capacity change from 0 to 2048 [ 109.853169][ T5947] loop2: detected capacity change from 0 to 164 [ 109.928964][ T5943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.958114][ T5947] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 109.999793][ T5943] EXT4-fs error (device loop3): ext4_ext_precache:631: inode #2: comm syz.3.41: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 110.118774][ T5613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.166127][ T5722] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 110.195581][ T5938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.200042][ T5938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.263105][ T5933] loop4: detected capacity change from 0 to 32768 [ 110.266269][ C1] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 110.266384][ C1] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 110.266403][ C1] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 110.266630][ C1] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 110.266679][ C1] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 110.266697][ C1] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 110.266915][ C1] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 110.266963][ C1] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 110.266982][ C1] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 110.267199][ C1] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 110.267249][ C1] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 110.267264][ C1] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 110.267485][ C1] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 110.267532][ C1] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 110.267550][ C1] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 110.267762][ C1] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 110.267812][ C1] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 110.267831][ C1] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 110.268041][ C1] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 110.268093][ C1] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 110.268112][ C1] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 110.268350][ C1] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 110.268404][ C1] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 110.268423][ C1] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 110.293691][ T5269] etas_es58x 2-1:0.2 can0: bit-timing not yet defined [ 110.345987][ T5722] usb 1-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 110.359792][ T5722] usb 1-1: config 0 has no interfaces? [ 110.359969][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.480381][ T5722] usb 1-1: config 0 descriptor?? [ 110.491977][ T5933] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 110.620034][ T5933] XFS (loop4): Ending clean mount [ 110.691596][ T5617] Bluetooth: hci5: command 0xfc0e tx timeout [ 110.730527][ T5952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.744289][ T5952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.782272][ T5722] usb 1-1: USB disconnect, device number 6 [ 110.842484][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.847641][ T5607] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 110.953305][ T5967] loop2: detected capacity change from 0 to 4096 [ 110.981459][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 110.981584][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 110.981677][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 110.981770][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 110.981860][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 110.982111][ C1] etas_es58x 2-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 110.991531][ T5269] etas_es58x 2-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 111.044012][ T5611] usb 2-1: USB disconnect, device number 4 [ 111.051088][ T10] usb 4-1: New USB device found: idVendor=5543, idProduct=0064, bcdDevice=0.00 [ 111.070278][ T5611] etas_es58x 2-1:0.2: Disconnecting syz syz [ 111.079804][ T10] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.079839][ T10] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.079866][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 111.079902][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.131088][ T10] usb 4-1: config 0 descriptor?? [ 111.338577][ T5969] loop4: detected capacity change from 0 to 16 [ 111.372685][ T5969] erofs (device loop4): mounted with root inode @ nid 36. [ 111.377896][ T5970] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.401599][ T5967] NILFS (loop2): corrupt root inode [ 111.412355][ T5722] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 111.582325][ T5722] usb 1-1: Using ep0 maxpacket: 8 [ 111.584047][ T5722] usb 1-1: New USB device found: idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 111.597067][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 111.597142][ T5722] usb 1-1: Product: syz [ 111.597184][ T5722] usb 1-1: Manufacturer: syz [ 111.597226][ T5722] usb 1-1: SerialNumber: syz [ 111.654323][ T10] input: HID 5543:0064 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:0064.0004/input/input9 [ 111.694984][ T5722] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 111.695219][ T5973] loop4: detected capacity change from 0 to 764 [ 111.749520][ T5973] rock: directory entry would overflow storage [ 111.749537][ T5973] rock: sig=0x5245, size=8, remaining=5 [ 111.786400][ T10] uclogic 0003:5543:0064.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 5543:0064] on usb-dummy_hcd.3-1/input0 [ 112.116199][ T5722] vp7045: USB control message 'in' went wrong. [ 112.116233][ T5722] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 112.117804][ T5722] dvbdev: DVB: registering new adapter (DigitalNow TinyUSB 2 DVB-t Receiver) [ 112.117873][ T5722] usb 1-1: media controller created [ 112.195355][ T5983] loop2: detected capacity change from 0 to 256 [ 112.276419][ T33] audit: type=1800 audit(1791944077.327:3): pid=5983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.52" name="file1" dev="loop2" ino=5 res=0 errno=-22 [ 112.368685][ T5980] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.560084][ T5736] usb 4-1: USB disconnect, device number 3 [ 112.601900][ T5722] vp7045: USB control message 'out' went wrong. [ 112.601917][ T5722] dvb-usb: MAC address reading failed. [ 112.656281][ T5993] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.824545][ T5722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.871713][ T5996] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 113.037164][ T5722] vp7045: USB control message 'out' went wrong. [ 113.041321][ T5722] vp7045: USB control message 'out' went wrong. [ 113.041926][ T5722] vp7045: USB control message 'out' went wrong. [ 113.042209][ T5722] usb 1-1: DVB: registering adapter 1 frontend 0 (Twinhan VP7045/46 USB DVB-T)... [ 113.042660][ T5722] dvbdev: dvb_create_media_entity: media entity 'Twinhan VP7045/46 USB DVB-T' registered. [ 113.197275][ T5996] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 113.281227][ T5996] ntfs3(loop1): ino=1e, mi_enum_attr [ 113.281256][ T5996] ntfs3(loop1): ino=1e, mi_enum_attr [ 113.563807][ T6012] set_capacity_and_notify: 4 callbacks suppressed [ 113.563828][ T6012] loop1: detected capacity change from 0 to 1024 [ 113.642852][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.58'. [ 113.884706][ T5722] rc_core: IR keymap rc-twinhan1027 not found [ 113.884729][ T5722] Registered IR keymap rc-empty [ 113.925172][ T33] audit: type=1800 audit(1791944078.977:4): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.61" name="bus" dev="loop1" ino=30 res=0 errno=-22 [ 113.973643][ T5722] rc rc0: DigitalNow TinyUSB 2 DVB-t Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 113.996515][ T5722] input: DigitalNow TinyUSB 2 DVB-t Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input10 [ 114.009584][ T5722] dvb-usb: schedule remote query interval to 400 msecs. [ 114.026469][ T5722] vp7045: USB control message 'out' went wrong. [ 114.026486][ T5722] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver successfully initialized and connected. [ 114.040945][ T5722] usb 1-1: USB disconnect, device number 7 [ 114.134358][ T6024] xt_hashlimit: size too large, truncated to 1048576 [ 114.174585][ T6026] loop2: detected capacity change from 0 to 2048 [ 114.261982][ T6026] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 114.262009][ T6026] UDF-fs: Scanning with blocksize 512 failed [ 114.342024][ T6017] loop3: detected capacity change from 0 to 32768 [ 114.374551][ T6026] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.548478][ T6037] loop1: detected capacity change from 0 to 128 [ 114.695877][ T6017] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 114.819993][ T6010] loop0: detected capacity change from 0 to 32768 [ 115.228274][ T5722] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver successfully deinitialized and disconnected. [ 115.360528][ T6037] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 115.360576][ T6037] FAT-fs (loop1): Filesystem has been set read-only [ 115.522578][ T6055] loop4: detected capacity change from 0 to 512 [ 115.530062][ T6055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.530089][ T6055] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.616732][ T6055] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 115.616756][ T6055] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 115.656082][ T6055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 115.737525][ T6055] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.68: bad symlink. [ 115.753036][ T6055] EXT4-fs (loop4): Remounting filesystem read-only [ 115.947820][ T5613] ocfs2: Unmounting device (7,3) on (node local) [ 115.956543][ T6061] CacheFiles: No cache directory specified [ 115.984495][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.176122][ T6063] loop1: detected capacity change from 0 to 2048 [ 116.271657][ T6063] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.349169][ T6051] loop2: detected capacity change from 0 to 32768 [ 116.537798][ T6051] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 116.689527][ T6061] loop0: detected capacity change from 0 to 40427 [ 116.729685][ T6061] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 116.729713][ T6061] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 116.782835][ T6061] F2FS-fs (loop0): invalid crc value [ 116.813079][ T6083] loop3: detected capacity change from 0 to 128 [ 116.925011][ T6083] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.927732][ T6083] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.956845][ T5768] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 117.027170][ T5610] ocfs2: Unmounting device (7,2) on (node local) [ 117.106761][ T5768] usb 5-1: New USB device found: idVendor=5543, idProduct=0064, bcdDevice=0.00 [ 117.108228][ T5768] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.108262][ T5768] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.108289][ T5768] usb 5-1: config 0 interface 0 has no altsetting 0 [ 117.108323][ T5768] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.208647][ T5768] usb 5-1: config 0 descriptor?? [ 117.224276][ T6061] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 117.289260][ T6091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.75'. [ 117.325691][ T6061] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 117.326123][ T6061] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 117.380574][ T5613] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.457524][ T6095] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.459105][ T6095] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.590018][ T5610] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.740714][ T5768] input: HID 5543:0064 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:5543:0064.0005/input/input11 [ 117.839799][ T5768] uclogic 0003:5543:0064.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 5543:0064] on usb-dummy_hcd.4-1/input0 [ 117.864451][ T6102] xt_hashlimit: size too large, truncated to 1048576 [ 117.937733][ T33] audit: type=1800 audit(1791944082.987:5): pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.69" name="file1" dev="loop0" ino=10 res=0 errno=-22 [ 118.099465][ T6088] XFS (loop1): Mounting V5 Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 118.126916][ T6112] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.416235][ T6088] XFS (loop1): Ending clean mount [ 118.668386][ T5608] XFS (loop1): Unmounting Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 118.933759][ T6119] set_capacity_and_notify: 3 callbacks suppressed [ 118.933781][ T6119] loop2: detected capacity change from 0 to 4096 [ 119.119450][ T33] audit: type=1800 audit(1791944084.167:6): pid=6119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.81" name="file1" dev="loop2" ino=30 res=0 errno=-22 [ 119.357492][ T6122] loop0: detected capacity change from 0 to 2048 [ 119.384274][ T6122] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=16307, location=16307 [ 119.402885][ T6124] loop1: detected capacity change from 0 to 128 [ 119.406302][ T6122] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 119.410578][ T6122] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.461963][ T6124] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.463455][ T6124] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.547783][ T6128] loop2: detected capacity change from 0 to 1024 [ 119.646101][ T6128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.690935][ T5768] usb 5-1: USB disconnect, device number 5 [ 119.856388][ T5608] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.878127][ T6131] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 119.903121][ T6131] EXT4-fs error (device loop2) in ext4_setattr:7157: error 28 [ 119.956277][ T6118] loop3: detected capacity change from 0 to 32768 [ 120.080060][ T6118] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.80 (6118) [ 120.136277][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.194159][ T6139] loop1: detected capacity change from 0 to 64 [ 120.261627][ T6133] loop0: detected capacity change from 0 to 40427 [ 120.301092][ T6133] F2FS-fs (loop0): invalid crc value [ 120.316916][ T6141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.87'. [ 120.488112][ T6139] syz.1.86: attempt to access beyond end of device [ 120.488112][ T6139] loop1: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 120.488320][ T6139] Buffer I/O error on dev loop1, logical block 512, async page read [ 120.488533][ T6139] syz.1.86: attempt to access beyond end of device [ 120.488533][ T6139] loop1: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 120.488564][ T6139] Buffer I/O error on dev loop1, logical block 56576, async page read [ 120.590752][ T6118] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.590809][ T6118] BTRFS info (device loop3): using crc32c checksum algorithm [ 120.645811][ T6139] 9pnet_fd: p9_fd_create_unix (6139): problem connecting socket: ./file2: -111 [ 120.805982][ T6144] loop2: detected capacity change from 0 to 32768 [ 120.861294][ T6144] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.88 (6144) [ 120.908811][ T33] audit: type=1800 audit(1791944085.957:7): pid=6139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.86" name="file1" dev="loop1" ino=5 res=0 errno=-22 [ 120.972341][ T6144] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 120.972380][ T6144] BTRFS info (device loop2): using blake2b checksum algorithm [ 121.032519][ T6133] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 121.105524][ T6133] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 121.286428][ T6118] BTRFS info (device loop3): setting nodatasum [ 121.286459][ T6118] BTRFS info (device loop3): setting nodatacow [ 121.286477][ T6118] BTRFS info (device loop3): disabling tree log [ 121.286500][ T6118] BTRFS info (device loop3): turning on async discard [ 121.286518][ T6118] BTRFS info (device loop3): enabling free space tree [ 121.286545][ T6118] BTRFS info (device loop3): max_inline set to 0 [ 121.325094][ T6144] BTRFS info (device loop2): enabling ssd optimizations [ 121.325165][ T6144] BTRFS info (device loop2): turning on async discard [ 121.325209][ T6144] BTRFS info (device loop2): enabling free space tree [ 121.325270][ T6144] BTRFS info (device loop2): use zstd compression, level 3 [ 121.407326][ T6139] syz.1.86: attempt to access beyond end of device [ 121.407326][ T6139] loop1: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 121.407366][ T6139] Buffer I/O error on dev loop1, logical block 512, async page read [ 121.407453][ T6139] syz.1.86: attempt to access beyond end of device [ 121.407453][ T6139] loop1: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 121.407479][ T6139] Buffer I/O error on dev loop1, logical block 56576, async page read [ 121.740209][ T5610] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 121.830945][ T5613] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.118566][ T6163] loop4: detected capacity change from 0 to 32768 [ 122.206940][ T6163] XFS (loop4): Mounting V5 Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 122.346093][ T6196] xt_hashlimit: size too large, truncated to 1048576 [ 122.552696][ T6163] XFS (loop4): Ending clean mount [ 122.571555][ T5722] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 122.753334][ T5722] usb 2-1: New USB device found: idVendor=072f, idProduct=2200, bcdDevice=1.00 [ 122.757570][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.937130][ T33] audit: type=1800 audit(1791944087.987:8): pid=6201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.89" name="file1" dev="loop4" ino=7558 res=0 errno=-4 [ 123.124569][ T5607] XFS (loop4): Unmounting Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 123.345958][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.97'. [ 123.449758][ T6212] loop3: detected capacity change from 0 to 256 [ 123.572384][ T6213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.574995][ T6213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.761377][ T33] audit: type=1800 audit(1791944088.807:9): pid=6217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.94" name="bus" dev="loop2" ino=7 res=0 errno=-22 [ 123.788163][ C1] usb 2-1: NFC: Received an invalid frame [ 123.791374][ T5722] usb 2-1: NFC: Unable to get FW version [ 123.818025][ T5722] pn533_usb 2-1:1.0: probe with driver pn533_usb failed with error -5 [ 123.991015][ T5736] usb 2-1: USB disconnect, device number 5 [ 124.092976][ T6205] set_capacity_and_notify: 1 callbacks suppressed [ 124.093000][ T6205] loop0: detected capacity change from 0 to 32768 [ 124.188846][ T6205] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 124.206189][ T6223] loop4: detected capacity change from 0 to 512 [ 124.339676][ T6205] XFS (loop0): Ending clean mount [ 124.409665][ T5609] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 124.609603][ T6216] loop3: detected capacity change from 0 to 32768 [ 124.681635][ T6238] loop1: detected capacity change from 0 to 512 [ 124.686313][ T6216] find_entry called with index = 0 [ 124.686334][ T6216] find_entry called with index = 0 [ 124.686345][ T6216] find_entry called with index = 0 [ 124.686388][ T6216] find_entry called with index = 0 [ 124.686418][ T6216] find_entry called with index = 0 [ 124.686428][ T6216] find_entry called with index = 0 [ 124.700967][ T6216] read_mapping_page failed! [ 124.701049][ T6216] ERROR: (device loop3): txCommit: [ 124.701049][ T6216] [ 124.780190][ T6238] EXT4-fs error (device loop1): ext4_iget_extra_inode:6003: inode #15: comm syz.1.103: corrupted in-inode xattr: invalid ea_ino [ 124.780228][ T6238] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 124.780844][ T6243] loop2: detected capacity change from 0 to 512 [ 124.795055][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 124.795080][ C1] EXT4-fs (loop1): initial error at time 1791944089: ext4_iget_extra_inode:6003: inode 15 [ 124.795115][ C1] EXT4-fs (loop1): last error at time 1791944089: ext4_iget_extra_inode:6003: inode 15 [ 124.812516][ T6238] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.103: couldn't read orphan inode 15 (err -117) [ 124.812611][ T6238] loop1: lost filesystem error report for type 5 error -117 [ 124.869784][ T6238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.185283][ T6247] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 125.185317][ T6247] FAT-fs (loop2): Filesystem has been set read-only [ 125.185876][ T6247] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 125.185953][ T6247] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 125.291011][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.499690][ T6252] xt_hashlimit: size too large, truncated to 1048576 [ 125.598843][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.108'. [ 125.775950][ T6259] loop2: detected capacity change from 0 to 512 [ 125.837566][ T6262] loop0: detected capacity change from 0 to 256 [ 125.880192][ T6262] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 125.922659][ T33] audit: type=1800 audit(1791944090.967:10): pid=6262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.111" name="file1" dev="loop0" ino=15 res=0 errno=-22 [ 125.959596][ T6259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.985436][ T6259] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.089274][ T6267] loop4: detected capacity change from 0 to 2048 [ 126.159395][ T6267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.175972][ T33] audit: type=1800 audit(1791944091.227:11): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.109" name="file1" dev="loop2" ino=15 res=0 errno=-22 [ 126.179590][ T6267] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.112: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 126.244328][ T6270] loop3: detected capacity change from 0 to 128 [ 126.282352][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.357915][ T6270] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 126.519490][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.593253][ T6278] loop4: detected capacity change from 0 to 256 [ 126.593668][ T5736] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 126.594268][ T6278] exfat: Deprecated parameter 'utf8' [ 126.594288][ T6278] exfat: Deprecated parameter 'utf8' [ 126.605096][ T6278] exfat: Deprecated parameter 'namecase' [ 126.694211][ T6278] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 126.773503][ T5736] usb 2-1: New USB device found: idVendor=072f, idProduct=2200, bcdDevice=1.00 [ 126.776077][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.887129][ T6280] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 126.890368][ T6282] EXT4-fs error (device loop2): ext4_iget_extra_inode:6003: inode #15: comm syz.2.116: corrupted in-inode xattr: invalid ea_ino [ 126.890405][ T6282] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 126.891495][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 126.891518][ C1] EXT4-fs (loop2): initial error at time 1791944091: ext4_iget_extra_inode:6003: inode 15 [ 126.891550][ C1] EXT4-fs (loop2): last error at time 1791944091: ext4_iget_extra_inode:6003: inode 15 [ 126.907065][ T6282] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.116: couldn't read orphan inode 15 (err -117) [ 126.907163][ T6282] loop2: lost filesystem error report for type 5 error -117 [ 126.975887][ T6282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.014232][ T6280] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 127.029415][ T6280] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.198104][ T33] audit: type=1800 audit(1791944092.247:12): pid=6276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.115" name="file1" dev="loop3" ino=7 res=0 errno=-22 [ 127.237046][ T6280] syz.0.117 (pid 6280) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 127.408535][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.410173][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.455718][ T33] audit: type=1800 audit(1791944092.507:13): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.115" name="file1" dev="loop3" ino=7 res=0 errno=-4 [ 127.575413][ T6289] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 127.575449][ T6289] FAT-fs (loop4): Filesystem has been set read-only [ 127.575781][ T6289] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 127.575854][ T6289] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 127.647094][ T6291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.647735][ T6291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.759109][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.120'. [ 127.857196][ T5736] usb 2-1: NFC: Unable to get FW version [ 127.894579][ T5736] pn533_usb 2-1:1.0: probe with driver pn533_usb failed with error -71 [ 127.926289][ T5736] usb 2-1: USB disconnect, device number 6 [ 127.990596][ T6299] xt_hashlimit: size too large, truncated to 1048576 [ 128.062484][ T1230] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 128.222336][ T1230] usb 4-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 128.223709][ T1230] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 128.223746][ T1230] usb 4-1: config 0 has no interface number 0 [ 128.223787][ T1230] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.228700][ T1230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.228830][ T1230] usb 4-1: Product: syz [ 128.228852][ T1230] usb 4-1: Manufacturer: syz [ 128.228894][ T1230] usb 4-1: SerialNumber: syz [ 128.275822][ T1230] usb 4-1: config 0 descriptor?? [ 128.308911][ T1230] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 128.345940][ T6309] EXT4-fs (loop0): Test dummy encryption mode enabled [ 128.367609][ T6309] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e064e0ad, mo2=0002] [ 128.367758][ T6309] System zones: 1-12 [ 128.433438][ T6309] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.484732][ T6309] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.127: Directory hole found for htree leaf block 0 [ 128.517759][ T6309] EXT4-fs (loop0): Remounting filesystem read-only [ 128.536593][ T6308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.614581][ T6308] jffs2: notice: (6308) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 128.640608][ T5609] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 128.679728][ T6315] netlink: 148 bytes leftover after parsing attributes in process `syz.4.128'. [ 128.679771][ T6315] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 128.713882][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 128.715851][ T5736] usb 4-1: USB disconnect, device number 4 [ 128.735416][ T5736] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 128.877644][ T5610] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 128.937959][ T6325] hfsplus: (loop1): Extents Overflow File (cnid 0x3) map record invalid or bitmap corruption detected, forcing read-only. [ 128.937987][ T6325] hfsplus: Run fsck.hfsplus to repair. [ 128.971315][ T6324] EXT4-fs error (device loop0): ext4_iget_extra_inode:6003: inode #15: comm syz.0.130: corrupted in-inode xattr: invalid ea_ino [ 128.971351][ T6324] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 128.971504][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 128.971524][ C0] EXT4-fs (loop0): initial error at time 1791944094: ext4_iget_extra_inode:6003: inode 15 [ 128.971557][ C0] EXT4-fs (loop0): last error at time 1791944094: ext4_iget_extra_inode:6003: inode 15 [ 129.030953][ T6324] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.130: couldn't read orphan inode 15 (err -117) [ 129.030988][ T6324] loop0: lost filesystem error report for type 5 error -117 [ 129.047818][ T6324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.120346][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.167103][ T6328] set_capacity_and_notify: 8 callbacks suppressed [ 129.167119][ T6328] loop4: detected capacity change from 0 to 16 [ 129.167970][ T6328] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 129.236304][ T5827] udevd[5827]: incorrect cramfs checksum on /dev/loop4 [ 129.253248][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.395266][ T6052] udevd[6052]: incorrect cramfs checksum on /dev/loop4 [ 129.613064][ T5722] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 129.725904][ T6342] loop3: detected capacity change from 0 to 1024 [ 129.772596][ T5722] usb 3-1: New USB device found: idVendor=045e, idProduct=00e3, bcdDevice=0.00 [ 129.776133][ T5722] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 129.776171][ T5722] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1544, setting to 1024 [ 129.776200][ T5722] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.776228][ T5722] usb 3-1: config 0 interface 0 has no altsetting 0 [ 129.776263][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.833554][ T6340] xt_hashlimit: size too large, truncated to 1048576 [ 129.860387][ T5722] usb 3-1: config 0 descriptor?? [ 129.861187][ T6330] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.909791][ T6348] loop1: detected capacity change from 0 to 2048 [ 129.938961][ T6349] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.111816][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 130.265887][ T10] usb 1-1: New USB device found: idVendor=072f, idProduct=2200, bcdDevice=1.00 [ 130.268622][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.330284][ T5722] microsoft 0003:045E:00E3.0006: ignoring exceeding usage max [ 130.337364][ T6352] loop3: detected capacity change from 0 to 4096 [ 130.361852][ T5722] microsoft 0003:045E:00E3.0006: hidraw0: USB HID v0.10 Joystick [HID 045e:00e3] on usb-dummy_hcd.2-1/input0 [ 130.399672][ T6352] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 130.487379][ T6352] ntfs3(loop3): ino=19, mi_enum_attr [ 130.487630][ T6352] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 130.520520][ T6352] ntfs3(loop3): ino=1a, mi_enum_attr [ 130.520654][ T6352] ntfs3(loop3): ino=1a, mi_enum_attr [ 130.520674][ T6352] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 130.548518][ T5826] usb 3-1: USB disconnect, device number 8 [ 130.635684][ T6353] fido_id[6353]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 130.817652][ T6355] netlink: 148 bytes leftover after parsing attributes in process `syz.1.143'. [ 130.817679][ T6355] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 130.928352][ T6359] loop4: detected capacity change from 0 to 2048 [ 130.960053][ T6361] loop1: detected capacity change from 0 to 8 [ 130.968107][ T6359] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.084381][ T6363] Zero length message leads to an empty skb [ 131.160684][ T6367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.180086][ T6367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.297474][ T6370] loop1: detected capacity change from 0 to 512 [ 131.319423][ T6370] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 131.319473][ T6370] UDF-fs: Scanning with blocksize 512 failed [ 131.331047][ T6370] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 131.331175][ T6370] UDF-fs: Scanning with blocksize 1024 failed [ 131.357993][ T6370] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 131.358020][ T6370] UDF-fs: Scanning with blocksize 2048 failed [ 131.379197][ T6370] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 131.417849][ T6370] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.447586][ T10] usb 1-1: NFC: Unable to get FW version [ 131.472621][ T10] pn533_usb 1-1:1.0: probe with driver pn533_usb failed with error -71 [ 131.527615][ T10] usb 1-1: USB disconnect, device number 8 [ 131.583282][ T6372] loop2: detected capacity change from 0 to 512 [ 131.585925][ T6372] EXT4-fs: Ignoring removed oldalloc option [ 131.585976][ T6372] EXT4-fs: Ignoring removed i_version option [ 131.589471][ T6372] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.654920][ T6372] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.152: invalid block [ 131.655048][ T6372] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 131.659395][ T6372] EXT4-fs error (device loop2) in ext4_process_orphan:346: IO failure [ 131.659423][ T6372] loop2: lost filesystem error report for type 5 error -5 [ 131.665669][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 131.665738][ C0] EXT4-fs (loop2): initial error at time 1791944096: ext4_get_branch:178: inode 11: block 4294967295 [ 131.665869][ C0] EXT4-fs (loop2): last error at time 1791944096: ext4_process_orphan:346 [ 131.691127][ T6372] EXT4-fs (loop2): 2 truncates cleaned up [ 131.717934][ T6372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.789410][ T6368] loop3: detected capacity change from 0 to 32768 [ 131.821361][ T6372] EXT4-fs (loop2): shut down requested (1) [ 131.824811][ T6368] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 131.923055][ T6368] XFS (loop3): Ending clean mount [ 131.991236][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.094431][ T6389] loop1: detected capacity change from 0 to 128 [ 132.126596][ T5613] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 132.210151][ T6390] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x88f4ad1f, utbl_chksum : 0xe619d30d) [ 132.312719][ T6393] erofs (device loop4): mounted with root inode @ nid 36. [ 132.363577][ T33] audit: type=1800 audit(1791944097.417:14): pid=6389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.154" name="file1" dev="loop1" ino=19 res=0 errno=-22 [ 132.585581][ T6394] hfs: cannot create new inode: folder count exceeds limit [ 132.902851][ T6405] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.015262][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.015405][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.284932][ T6418] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.329943][ T6410] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 133.380099][ T6410] NILFS (loop4): mounting fs with errors [ 133.641678][ T6411] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.163 (6411) [ 133.674552][ T6411] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 133.674588][ T6411] BTRFS info (device loop0): using crc32c checksum algorithm [ 133.791240][ T6411] BTRFS info (device loop0): enabling ssd optimizations [ 133.791279][ T6411] BTRFS info (device loop0): turning on flush-on-commit [ 133.791297][ T6411] BTRFS info (device loop0): enabling free space tree [ 133.791315][ T6411] BTRFS info (device loop0): enabling auto defrag [ 133.791351][ T6411] BTRFS info (device loop0): use lzo compression, level 1 [ 133.791372][ T6411] BTRFS info (device loop0): max_inline set to 4096 [ 133.890624][ T6422] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 134.024292][ T6422] ntfs3(loop3): ino=1a, mi_enum_attr [ 134.024494][ T6422] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 134.131084][ T6422] ntfs3(loop3): ino=5, "/" ntfs_readdir [ 134.291127][ T6417] set_capacity_and_notify: 8 callbacks suppressed [ 134.291148][ T6417] loop2: detected capacity change from 0 to 32768 [ 134.340259][ T6417] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 134.361387][ T6417] JBD2: Ignoring recovery information on journal [ 134.480270][ T6411] overlay: ./file2 is not a directory [ 134.556102][ T6417] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 134.818390][ T5609] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 134.888543][ T6420] loop1: detected capacity change from 0 to 32768 [ 134.895067][ T5610] ocfs2: Unmounting device (7,2) on (node local) [ 134.974868][ T6420] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 135.149891][ T6420] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 135.356597][ T6420] XFS (loop1): Starting recovery (logdev: internal) [ 135.389004][ T6449] loop4: detected capacity change from 0 to 32768 [ 135.437162][ T6449] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 135.460898][ T6420] XFS (loop1): Ending recovery (logdev: internal) [ 135.509935][ T6420] XFS (loop1): Metadata corruption detected at xfs_inobt_verify+0x9e/0x1f0, xfs_finobt block 0x8 [ 135.509984][ T6420] XFS (loop1): Unmount and run xfs_repair [ 135.509998][ T6420] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 135.510017][ T6420] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 135.510036][ T6420] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 135.510053][ T6420] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 135.510069][ T6420] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 135.510085][ T6420] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 135.510110][ T6420] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 135.510125][ T6420] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 135.510141][ T6420] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 135.510366][ T6420] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x8 len 8 error 117 [ 135.637076][ T6449] XFS (loop4): Ending clean mount [ 135.719169][ T5608] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 135.719789][ T5608] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 135.754203][ T6467] loop0: detected capacity change from 0 to 8 [ 135.817282][ T6446] loop3: detected capacity change from 0 to 32768 [ 135.889203][ T6446] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 135.919696][ T5607] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 136.013739][ T6479] loop0: detected capacity change from 0 to 512 [ 136.040832][ T6446] XFS (loop3): Ending clean mount [ 136.049839][ T6479] EXT4-fs (loop0): Test dummy encryption mode enabled [ 136.075088][ T6479] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e064e0ad, mo2=0002] [ 136.075331][ T6479] System zones: 1-12 [ 136.094071][ T33] audit: type=1800 audit(1791944101.147:15): pid=6446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.173" name="file1" dev="loop3" ino=4422 res=0 errno=-22 [ 136.142867][ T6479] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.222662][ T5613] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 136.227206][ T6479] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.180: Directory hole found for htree leaf block 0 [ 136.227584][ T6479] EXT4-fs (loop0): Remounting filesystem read-only [ 136.265273][ T6483] loop2: detected capacity change from 0 to 2048 [ 136.426824][ T6484] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.495116][ T5609] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 136.521053][ T6483] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 136.627009][ T6483] Remounting filesystem read-only [ 136.656245][ T6485] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 136.657623][ T6483] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 136.709823][ T6483] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 137.062564][ T5766] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 137.114117][ T6497] fuse: Bad value for 'fd' [ 137.179885][ T6499] loop4: detected capacity change from 0 to 512 [ 137.211739][ T5766] usb 1-1: Using ep0 maxpacket: 32 [ 137.217420][ T5766] usb 1-1: New USB device found: idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 137.220696][ T5766] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 137.220731][ T5766] usb 1-1: config 0 has no interface number 0 [ 137.220775][ T5766] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 137.268120][ T5766] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.268150][ T5766] usb 1-1: Product: syz [ 137.268167][ T5766] usb 1-1: Manufacturer: syz [ 137.268183][ T5766] usb 1-1: SerialNumber: syz [ 137.298992][ T5766] usb 1-1: config 0 descriptor?? [ 137.299882][ T6491] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 137.334086][ T6502] loop2: detected capacity change from 0 to 64 [ 137.371053][ T6499] FAT-fs (loop4): error, clusters badly computed (1 != 0) [ 137.418644][ T6488] loop3: detected capacity change from 0 to 32768 [ 137.527158][ T33] audit: type=1800 audit(1791944102.577:16): pid=6488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.182" name="file1" dev="loop3" ino=4 res=0 errno=-22 [ 137.534716][ T6503] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 137.534780][ T6503] UDF-fs: Scanning with blocksize 512 failed [ 137.563413][ T6491] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 137.629214][ T6503] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.725516][ T6505] read_mapping_page failed! [ 137.725546][ T6505] ERROR: (device loop3): txCommit: [ 137.725546][ T6505] [ 138.218052][ T5766] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 138.238139][ T5766] asix 1-1:0.188: probe with driver asix failed with error -32 [ 138.570975][ T6511] unable to read inode lookup table [ 139.212247][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 139.319878][ T6535] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 139.363787][ T10] usb 3-1: New USB device found: idVendor=5543, idProduct=0064, bcdDevice=0.00 [ 139.365274][ T10] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.365308][ T10] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.365337][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 139.365373][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.369358][ T10] usb 3-1: config 0 descriptor?? [ 139.444944][ T6535] ntfs3(loop3): Failed to load $Extend (-22). [ 139.444974][ T6535] ntfs3(loop3): Failed to initialize $Extend. [ 139.647172][ T6526] set_capacity_and_notify: 3 callbacks suppressed [ 139.647193][ T6526] loop4: detected capacity change from 0 to 32768 [ 139.668878][ T6526] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.194 (6526) [ 139.716846][ T6526] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 139.716885][ T6526] BTRFS info (device loop4): using crc32c checksum algorithm [ 139.798842][ T6550] loop3: detected capacity change from 0 to 256 [ 139.813309][ T6550] exfat: Deprecated parameter 'utf8' [ 139.813345][ T6550] exfat: Deprecated parameter 'namecase' [ 139.853295][ T6550] exFAT-fs (loop3): error, bad upcase table size (0 bytes). Please run fsck [ 139.873880][ T10] input: HID 5543:0064 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:0064.0007/input/input13 [ 139.932411][ T6526] BTRFS info (device loop4): enabling ssd optimizations [ 139.932439][ T6526] BTRFS info (device loop4): turning on flush-on-commit [ 139.932457][ T6526] BTRFS info (device loop4): enabling free space tree [ 139.932474][ T6526] BTRFS info (device loop4): enabling auto defrag [ 139.932493][ T6526] BTRFS info (device loop4): use lzo compression, level 1 [ 139.932513][ T6526] BTRFS info (device loop4): max_inline set to 4096 [ 139.998591][ T10] uclogic 0003:5543:0064.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 5543:0064] on usb-dummy_hcd.2-1/input0 [ 140.077291][ T5722] usb 1-1: USB disconnect, device number 9 [ 140.101828][ T6526] BTRFS critical (device loop4 state EH): emergency shutdown [ 140.119948][ T6526] BTRFS info (device loop4 state EMH): max_inline set to 4096 [ 140.228041][ T6556] loop0: detected capacity change from 0 to 512 [ 140.241309][ T5607] BTRFS info (device loop4 state EH): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 140.343397][ T6556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.343529][ T6556] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.438020][ T6534] loop1: detected capacity change from 0 to 32768 [ 140.577959][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.587673][ T6534] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 140.715818][ T6534] XFS (loop1): Ending clean mount [ 140.890174][ T6573] loop4: detected capacity change from 0 to 2048 [ 141.006470][ T6579] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.056642][ T6573] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 141.088466][ T6573] Remounting filesystem read-only [ 141.097971][ T6580] loop0: detected capacity change from 0 to 512 [ 141.239766][ T5608] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 141.598190][ T6590] loop4: detected capacity change from 0 to 2048 [ 141.623826][ T6590] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 141.623850][ T6590] UDF-fs: Scanning with blocksize 512 failed [ 141.672600][ T6590] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.057855][ T5722] usb 3-1: USB disconnect, device number 9 [ 142.164104][ T6593] loop1: detected capacity change from 0 to 32768 [ 142.222651][ T6593] (syz.1.210,6593,0):ocfs2_check_set_options:1251 ERROR: Invalid heartbeat mount options [ 142.228871][ T6596] loop0: detected capacity change from 0 to 2048 [ 142.243013][ T6593] (syz.1.210,6593,0):ocfs2_fill_super:1185 ERROR: status = -22 [ 142.300903][ T6600] loop2: detected capacity change from 0 to 256 [ 142.314041][ T6596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.381537][ T6600] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 142.439777][ T6600] overlay: ./file0 is not a directory [ 142.506569][ T5609] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 142.692835][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.796768][ T6606] erofs (device loop1): mounted with root inode @ nid 36. [ 142.951693][ T6591] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.212 (6591) [ 142.985704][ T6591] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 142.985740][ T6591] BTRFS info (device loop3): using blake2b checksum algorithm [ 143.028588][ T6607] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.058065][ T6621] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.137028][ T6609] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 143.138012][ T6609] Remounting filesystem read-only [ 143.160674][ T6591] BTRFS info (device loop3): enabling ssd optimizations [ 143.160704][ T6591] BTRFS info (device loop3): turning on async discard [ 143.160730][ T6591] BTRFS info (device loop3): enabling free space tree [ 143.160755][ T6591] BTRFS info (device loop3): use zstd compression, level 3 [ 143.306893][ T6627] FAT-fs (loop1): bogus sectors per cluster 13 [ 143.306927][ T6627] FAT-fs (loop1): Can't find a valid FAT filesystem [ 143.568124][ T6633] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.965624][ T5826] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 144.023550][ T6642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.110862][ T5613] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 144.128842][ T5826] usb 3-1: New USB device found: idVendor=5543, idProduct=0064, bcdDevice=0.00 [ 144.142085][ T5826] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.142121][ T5826] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.142150][ T5826] usb 3-1: config 0 interface 0 has no altsetting 0 [ 144.142185][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.203076][ T5826] usb 3-1: config 0 descriptor?? [ 144.258416][ T5607] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 144.359000][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.668756][ T6644] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 144.727188][ T5826] input: HID 5543:0064 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:0064.0008/input/input14 [ 144.779859][ T6644] (syz.0.228,6644,0):ocfs2_check_set_options:1251 ERROR: Invalid heartbeat mount options [ 144.826128][ T5826] uclogic 0003:5543:0064.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 5543:0064] on usb-dummy_hcd.2-1/input0 [ 144.868438][ T6649] set_capacity_and_notify: 10 callbacks suppressed [ 144.868459][ T6649] loop3: detected capacity change from 0 to 8192 [ 144.895901][ T6651] loop4: detected capacity change from 0 to 4096 [ 145.173337][ T5609] ocfs2: Unmounting device (7,0) on (node local) [ 145.411205][ T6664] loop1: detected capacity change from 0 to 128 [ 145.456727][ T6664] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 145.469923][ T6663] loop3: detected capacity change from 0 to 2048 [ 145.502124][ T6664] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.516166][ T5768] usb 3-1: USB disconnect, device number 10 [ 145.525773][ T6663] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.026412][ T6674] loop0: detected capacity change from 0 to 1024 [ 146.029582][ T6674] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.081916][ T6671] loop1: detected capacity change from 0 to 4096 [ 146.082500][ T6674] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 146.082619][ T6674] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.091409][ T6671] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 146.132167][ T6674] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.238: bg 0: block 112: padding at end of block bitmap is not set [ 146.181696][ T6674] EXT4-fs (loop0): Remounting filesystem read-only [ 146.227405][ T6665] loop4: detected capacity change from 0 to 32768 [ 146.297685][ T6681] loop2: detected capacity change from 0 to 256 [ 146.348251][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 146.349396][ T6671] ntfs3(loop1): ino=5, "/" indx_read_ra [ 146.349456][ T6671] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 146.384142][ T6679] loop3: detected capacity change from 0 to 2048 [ 146.411794][ T6681] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 146.423498][ T6671] ntfs3(loop1): ino=5, "/" ntfs_readdir [ 146.475008][ T6679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.506892][ T6681] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff) [ 146.598649][ T5613] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 146.796237][ T5613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.037628][ T6694] loop1: detected capacity change from 0 to 256 [ 147.043443][ T6694] exfat: Deprecated parameter 'utf8' [ 147.043805][ T6694] exfat: Deprecated parameter 'namecase' [ 147.279714][ T6694] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 147.458146][ T6701] unable to read inode lookup table [ 147.966217][ T6702] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.973964][ T6696] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 147.981807][ T6696] NILFS (loop3): mounting fs with errors [ 147.982485][ T6700] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.454347][ T6708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.454477][ T6708] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.787180][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.888709][ T6721] EXT4-fs: Ignoring removed bh option [ 148.911532][ T6721] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c128, mo2=0002] [ 148.911668][ T6721] System zones: 1-12 [ 148.917499][ T6721] EXT4-fs (loop3): 1 truncate cleaned up [ 148.952750][ T6721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.069970][ T6724] EXT4-fs: Ignoring removed bh option [ 149.080585][ T6724] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 149.138471][ T6724] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1159: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 149.149398][ T6724] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.255: bg 0: block 248: padding at end of block bitmap is not set [ 149.149538][ T6724] loop4: lost filesystem error report for type 5 error -117 [ 149.153296][ T6724] Quota error (device loop4): write_blk: dquota write failed [ 149.156986][ T6724] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 149.157150][ T6724] EXT4-fs error (device loop4): ext4_acquire_dquot:7120: comm syz.4.255: Failed to acquire dquot type 1 [ 149.157211][ T6724] loop4: lost filesystem error report for type 5 error -28 [ 149.161540][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 149.161601][ C1] EXT4-fs (loop4): last error at time 1791944114: ext4_acquire_dquot:7120 [ 149.192537][ T5613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.384725][ T6724] EXT4-fs (loop4): 1 truncate cleaned up [ 149.391410][ T6724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 149.581920][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 149.589015][ T6732] SQUASHFS error: lzo decompression failed, data probably corrupt [ 149.589054][ T6732] SQUASHFS error: Failed to read block 0x71: -5 [ 149.650245][ T6732] SQUASHFS error: lzo decompression failed, data probably corrupt [ 149.650285][ T6732] SQUASHFS error: Failed to read block 0x71: -5 [ 149.650537][ T33] audit: type=1800 audit(1791944114.697:17): pid=6732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.258" name="file0" dev="loop2" ino=3 res=0 errno=-5 [ 150.273733][ T6742] set_capacity_and_notify: 8 callbacks suppressed [ 150.273773][ T6742] loop4: detected capacity change from 0 to 8 [ 150.512731][ T6742] unable to read inode lookup table [ 150.915310][ T6745] loop1: detected capacity change from 0 to 128 [ 150.941721][ T6741] loop2: detected capacity change from 0 to 512 [ 150.959868][ T6730] loop3: detected capacity change from 0 to 32768 [ 150.979760][ T6730] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.257 (6730) [ 151.036661][ T6741] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 151.036686][ T6741] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 151.036910][ T6741] EXT4-fs (loop2): orphan cleanup on readonly fs [ 151.041913][ T6741] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #13: comm syz.2.262: iget: bad i_size value: 12154761577498 [ 151.041998][ T6741] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 151.051561][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 151.051624][ C0] EXT4-fs (loop2): initial error at time 1791944116: ext4_orphan_get:1404: inode 13 [ 151.051715][ C0] EXT4-fs (loop2): last error at time 1791944116: ext4_orphan_get:1404: inode 13 [ 151.110766][ T6741] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.262: couldn't read orphan inode 13 (err -117) [ 151.110869][ T6741] loop2: lost filesystem error report for type 5 error -117 [ 151.117109][ T6730] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.117150][ T6730] BTRFS info (device loop3): using crc32c checksum algorithm [ 151.220847][ T6753] loop4: detected capacity change from 0 to 24 [ 151.227195][ T6741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 151.262719][ T6753] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 151.357425][ T6753] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 151.372300][ T6730] BTRFS info (device loop3): setting nodatasum [ 151.372328][ T6730] BTRFS info (device loop3): enabling ssd optimizations [ 151.372352][ T6730] BTRFS info (device loop3): disabling tree log [ 151.372369][ T6730] BTRFS info (device loop3): turning on async discard [ 151.372386][ T6730] BTRFS info (device loop3): enabling free space tree [ 151.372403][ T6730] BTRFS info (device loop3): enabling auto defrag [ 151.531022][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.555364][ T5613] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.811883][ T6770] loop1: detected capacity change from 0 to 512 [ 151.826466][ T6770] EXT4-fs: Ignoring removed bh option [ 151.876039][ T6770] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c128, mo2=0002] [ 151.876167][ T6770] System zones: 1-12 [ 151.917172][ T6774] loop0: detected capacity change from 0 to 128 [ 151.942751][ T6770] EXT4-fs (loop1): 1 truncate cleaned up [ 151.969319][ T6780] loop2: detected capacity change from 0 to 1024 [ 151.969351][ T6770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.982009][ T6780] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 152.062865][ T6770] EXT4-fs (loop1): shut down requested (2) [ 152.167094][ T6780] EXT4-fs error (device loop2): ext4_map_blocks:864: inode #3: block 2: comm syz.2.272: lblock 2 mapped to illegal pblock 2 (length 1) [ 152.167135][ T6780] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 152.171484][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 152.171508][ C0] EXT4-fs (loop2): initial error at time 1791944117: ext4_map_blocks:864: inode 3: block 2 [ 152.171550][ C0] EXT4-fs (loop2): last error at time 1791944117: ext4_map_blocks:864: inode 3: block 2 [ 152.195888][ T6780] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 152.195945][ T6780] EXT4-fs error (device loop2): ext4_map_blocks:864: inode #3: block 48: comm syz.2.272: lblock 0 mapped to illegal pblock 48 (length 1) [ 152.195978][ T6780] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 152.202783][ T6780] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 152.202808][ T6780] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.272: Failed to acquire dquot type 0 [ 152.202833][ T6780] loop2: lost filesystem error report for type 5 error -117 [ 152.203207][ T6774] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 152.203242][ T6774] hpfs: filesystem error: improperly stopped [ 152.203257][ T6774] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 152.203271][ T6774] hpfs: You really don't want any checks? You are crazy... [ 152.203283][ T6774] hpfs: Code page index out of array [ 152.203290][ T6774] hpfs: code page support is disabled [ 152.247609][ T6780] EXT4-fs error (device loop2) in ext4_reserve_inode_write:7429: Corrupt filesystem [ 152.247682][ T6780] loop2: lost filesystem error report for type 5 error -117 [ 152.343948][ T6774] hpfs: hpfs_map_4sectors(): unaligned read [ 152.344461][ T6774] hpfs: hpfs_map_4sectors(): unaligned read [ 152.344488][ T6774] hpfs: filesystem error: unable to find root dir [ 152.462260][ T6780] EXT4-fs error (device loop2): ext4_evict_inode:338: inode #11: comm syz.2.272: mark_inode_dirty error [ 152.462332][ T6780] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 152.475875][ T6780] EXT4-fs warning (device loop2): ext4_evict_inode:341: couldn't mark inode dirty (err -117) [ 152.476047][ T6780] EXT4-fs (loop2): 1 orphan inode deleted [ 152.512551][ T6780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.513978][ T34] EXT4-fs error (device loop2): ext4_map_blocks:864: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 152.514015][ T34] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 152.565983][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.673328][ T34] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 152.697824][ T34] EXT4-fs error (device loop2): ext4_release_dquot:7156: comm kworker/u8:2: Failed to release dquot type 0 [ 152.770143][ T6780] EXT4-fs error (device loop2): __ext4_get_inode_loc:5709: comm syz.2.272: Invalid inode table block 1 in block_group 0 [ 152.794830][ T6780] EXT4-fs error (device loop2) in ext4_reserve_inode_write:7429: Corrupt filesystem [ 152.797765][ T6780] EXT4-fs error (device loop2): ext4_setattr:7068: inode #2: comm syz.2.272: mark_inode_dirty error [ 153.014415][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.026346][ T34] EXT4-fs error (device loop2): ext4_map_blocks:864: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 153.026386][ T34] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 153.026910][ T34] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 153.026949][ T34] EXT4-fs error (device loop2): ext4_release_dquot:7156: comm kworker/u8:2: Failed to release dquot type 0 [ 153.026972][ T34] loop2: lost filesystem error report for type 5 error -117 [ 153.029746][ T5610] EXT4-fs error (device loop2): __ext4_get_inode_loc:5709: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 153.029778][ T5610] loop2: lost filesystem error report for type 5 error -117 [ 153.114822][ T5610] EXT4-fs error (device loop2) in ext4_reserve_inode_write:7429: Corrupt filesystem [ 153.114850][ T5610] loop2: lost filesystem error report for type 5 error -117 [ 153.116499][ T5610] EXT4-fs error (device loop2): ext4_quota_off:7404: inode #3: comm syz-executor: mark_inode_dirty error [ 153.116529][ T5610] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 153.131110][ T5610] loop2: lost filesystem error report for type 5 error -117 [ 153.372213][ T5715] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 153.396153][ T6794] loop2: detected capacity change from 0 to 512 [ 153.424363][ T6794] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 153.424384][ T6794] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 153.424399][ T6794] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 153.474173][ T6794] EXT4-fs (loop2): 1 truncate cleaned up [ 153.486589][ T6794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.535069][ T5715] usb 4-1: New USB device found: idVendor=072f, idProduct=2200, bcdDevice=1.00 [ 153.537781][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.551141][ T6794] EXT4-fs error (device loop2): __ext4_expand_extra_isize:7449: inode #12: comm syz.2.276: bad extra_isize 62 (inode size 256) [ 153.623231][ T6794] EXT4-fs (loop2): Remounting filesystem read-only [ 153.633803][ T6789] loop0: detected capacity change from 0 to 32768 [ 153.666713][ T6789] (syz.0.274,6789,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 153.668970][ T6789] (syz.0.274,6789,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 153.701380][ T6789] (syz.0.274,6789,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 153.767525][ T6789] JBD2: Ignoring recovery information on journal [ 153.839837][ T5715] usb 4-1: NFC: Reader power on cmd error 0 [ 153.839866][ T5715] pn533_usb 4-1:1.0: NFC: Couldn't poweron the reader (error -22) [ 153.839997][ T5715] pn533_usb 4-1:1.0: probe with driver pn533_usb failed with error -22 [ 153.948717][ T6789] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 153.970164][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.351614][ T6788] (syz.0.274,6788,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x6db03cd7, computed 0xe423803c. Applying ECC. [ 154.372277][ T6788] (syz.0.274,6788,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x6db03cd7, computed 0xa5e8ec9c [ 154.372323][ T6788] (syz.0.274,6788,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 154.372358][ T6788] (syz.0.274,6788,1):ocfs2_quota_read:201 ERROR: status = -5 [ 154.372384][ T6788] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 1 [ 154.380621][ T6788] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 154.380716][ T6788] (syz.0.274,6788,1):ocfs2_acquire_dquot:904 ERROR: status = -5 [ 154.489221][ T6788] (syz.0.274,6788,1):ocfs2_mknod:318 ERROR: status = -5 [ 154.489276][ T6788] (syz.0.274,6788,1):ocfs2_mknod:507 ERROR: status = -5 [ 154.489292][ T6788] (syz.0.274,6788,1):ocfs2_mkdir:663 ERROR: status = -5 [ 154.521585][ T5722] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 154.550126][ T6799] ntfs3(loop1): failed to convert "0080" to cp1255 [ 154.664680][ T6799] ntfs3(loop1): failed to convert name for inode 1e. [ 154.668211][ T6799] ntfs3(loop1): ino=1f, mi_enum_attr [ 154.668342][ T6799] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 154.703055][ T5722] usb 3-1: New USB device found: idVendor=5543, idProduct=0064, bcdDevice=0.00 [ 154.709306][ T5722] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.709401][ T5722] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.709475][ T5722] usb 3-1: config 0 interface 0 has no altsetting 0 [ 154.709622][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.768761][ T5722] usb 3-1: config 0 descriptor?? [ 154.864570][ T5609] ocfs2: Unmounting device (7,0) on (node local) [ 154.951152][ T6803] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 154.951182][ T6803] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 154.971243][ T6803] F2FS-fs (loop4): invalid crc value [ 155.255877][ T6803] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 155.289074][ T5722] input: HID 5543:0064 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:0064.0009/input/input15 [ 155.306162][ T6803] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 155.306194][ T6803] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 155.398079][ T6815] set_capacity_and_notify: 3 callbacks suppressed [ 155.398102][ T6815] loop0: detected capacity change from 0 to 4096 [ 155.429436][ T6815] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 155.508281][ T5722] uclogic 0003:5543:0064.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 5543:0064] on usb-dummy_hcd.2-1/input0 [ 155.552537][ T5722] usb 3-1: USB disconnect, device number 11 [ 155.557375][ T6817] loop1: detected capacity change from 0 to 512 [ 155.591008][ T6815] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 155.612484][ T6815] ntfs3(loop0): mft corrupted [ 155.612585][ T6815] ntfs3(loop0): Failed to load $Extend (-22). [ 155.612613][ T6815] ntfs3(loop0): Failed to initialize $Extend. [ 155.680268][ T6815] ntfs3(loop0): ino=1e, mi_enum_attr [ 155.680300][ T6815] ntfs3(loop0): ino=1e, mi_enum_attr [ 155.755125][ T6817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.776797][ T6817] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.850020][ T33] audit: type=1800 audit(1791944120.897:18): pid=6817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.283" name="file1" dev="loop1" ino=15 res=0 errno=-22 [ 155.900551][ T6818] fido_id[6818]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 156.167495][ T5722] usb 4-1: USB disconnect, device number 5 [ 156.328326][ T6826] loop2: detected capacity change from 0 to 1024 [ 156.353210][ T6826] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 156.399377][ T6826] EXT4-fs error (device loop2): ext4_map_blocks:864: inode #3: block 2: comm syz.2.286: lblock 2 mapped to illegal pblock 2 (length 1) [ 156.399424][ T6826] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 156.400376][ T6826] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 156.400425][ T6826] EXT4-fs error (device loop2): ext4_map_blocks:864: inode #3: block 48: comm syz.2.286: lblock 0 mapped to illegal pblock 48 (length 1) [ 156.400460][ T6826] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 156.400707][ T6826] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 156.400728][ T6826] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.286: Failed to acquire dquot type 0 [ 156.400752][ T6826] loop2: lost filesystem error report for type 5 error -117 [ 156.401063][ T6826] EXT4-fs error (device loop2) in ext4_reserve_inode_write:7429: Corrupt filesystem [ 156.401086][ T6826] loop2: lost filesystem error report for type 5 error -117 [ 156.402923][ C0] EXT4-fs (loop2): error count since last fsck: 4 [ 156.402946][ C0] EXT4-fs (loop2): initial error at time 1791944121: ext4_map_blocks:864: inode 3: block 2 [ 156.402990][ C0] EXT4-fs (loop2): last error at time 1791944121: ext4_reserve_inode_write:7429 [ 156.536282][ T6826] EXT4-fs error (device loop2): ext4_evict_inode:338: inode #11: comm syz.2.286: mark_inode_dirty error [ 156.536318][ T6826] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 156.538165][ T6826] EXT4-fs warning (device loop2): ext4_evict_inode:341: couldn't mark inode dirty (err -117) [ 156.538272][ T6826] EXT4-fs (loop2): 1 orphan inode deleted [ 156.556422][ T1285] EXT4-fs error (device loop2): ext4_map_blocks:864: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 156.556528][ T1285] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 156.560043][ T1285] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 156.560174][ T1285] EXT4-fs error (device loop2): ext4_release_dquot:7156: comm kworker/u8:10: Failed to release dquot type 0 [ 156.599146][ T6826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.699918][ T6831] loop0: detected capacity change from 0 to 512 [ 156.713415][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.716850][ T5610] EXT4-fs error (device loop2): __ext4_get_inode_loc:5709: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 156.716880][ T5610] loop2: lost filesystem error report for type 5 error -117 [ 156.717149][ T5610] EXT4-fs error (device loop2) in ext4_reserve_inode_write:7429: Corrupt filesystem [ 156.717171][ T5610] loop2: lost filesystem error report for type 5 error -117 [ 156.717378][ T5610] EXT4-fs error (device loop2): ext4_quota_off:7404: inode #3: comm syz-executor: mark_inode_dirty error [ 156.717405][ T5610] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 156.717654][ T5610] EXT4-fs error (device loop2): __ext4_get_inode_loc:5709: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 156.717682][ T5610] loop2: lost filesystem error report for type 5 error -117 [ 157.119766][ T6837] loop4: detected capacity change from 0 to 2048 [ 157.190554][ T6838] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.230169][ T6837] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 157.240396][ T6837] Remounting filesystem read-only [ 157.277741][ T6837] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 157.279038][ T6837] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 157.393746][ T6829] loop3: detected capacity change from 0 to 32768 [ 157.426452][ T6829] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 157.514280][ T6829] XFS (loop3): Ending clean mount [ 157.682289][ T6829] XFS (loop3): Quotacheck needed: Please wait. [ 157.788964][ T6850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.291'. [ 157.865135][ T6829] XFS (loop3): Quotacheck: Done. [ 158.015952][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.149276][ T6852] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 158.275412][ T6859] overlayfs: failed to resolve './bus': -2 [ 158.318904][ T5613] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 158.415826][ T6860] netlink: 24 bytes leftover after parsing attributes in process `syz.4.295'. [ 158.541081][ T6867] loop2: detected capacity change from 0 to 1024 [ 158.551822][ T6869] loop0: detected capacity change from 0 to 512 [ 158.572984][ T6867] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 158.580320][ T6867] EXT4-fs error (device loop2): ext4_map_blocks:864: inode #3: block 2: comm syz.2.299: lblock 2 mapped to illegal pblock 2 (length 1) [ 158.580364][ T6867] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 158.580624][ T6867] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 158.580665][ T6867] EXT4-fs error (device loop2): ext4_map_blocks:864: inode #3: block 48: comm syz.2.299: lblock 0 mapped to illegal pblock 48 (length 1) [ 158.580694][ T6867] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 158.580883][ T6867] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 158.580901][ T6867] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.299: Failed to acquire dquot type 0 [ 158.580922][ T6867] loop2: lost filesystem error report for type 5 error -117 [ 158.581192][ T6867] EXT4-fs error (device loop2) in ext4_reserve_inode_write:7429: Corrupt filesystem [ 158.581212][ T6867] loop2: lost filesystem error report for type 5 error -117 [ 158.583258][ C0] EXT4-fs (loop2): error count since last fsck: 4 [ 158.583283][ C0] EXT4-fs (loop2): initial error at time 1791944123: ext4_map_blocks:864: inode 3: block 2 [ 158.583325][ C0] EXT4-fs (loop2): last error at time 1791944123: ext4_reserve_inode_write:7429 [ 158.594312][ T5722] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 158.602365][ T6867] EXT4-fs error (device loop2): ext4_evict_inode:338: inode #11: comm syz.2.299: mark_inode_dirty error [ 158.602459][ T6867] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 158.653220][ T6869] EXT4-fs (loop0): bad s_want_extra_isize: 1536 [ 158.664366][ T6867] EXT4-fs warning (device loop2): ext4_evict_inode:341: couldn't mark inode dirty (err -117) [ 158.664667][ T6867] EXT4-fs (loop2): 1 orphan inode deleted [ 158.675790][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.295'. [ 158.686497][ T64] EXT4-fs error (device loop2): ext4_map_blocks:864: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 158.686594][ T64] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 158.687426][ T64] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 158.687517][ T64] EXT4-fs error (device loop2): ext4_release_dquot:7156: comm kworker/u8:5: Failed to release dquot type 0 [ 158.687579][ T64] loop2: lost filesystem error report for type 5 error -117 [ 158.807199][ T6867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.810884][ T5722] usb 2-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 158.874440][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.874468][ T5722] usb 2-1: Product: syz [ 158.874493][ T5722] usb 2-1: Manufacturer: syz [ 158.874509][ T5722] usb 2-1: SerialNumber: syz [ 158.877341][ T5722] usb 2-1: config 0 descriptor?? [ 159.089005][ T5722] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 159.124166][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.140386][ T5610] EXT4-fs error (device loop2): __ext4_get_inode_loc:5709: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 159.140461][ T5610] loop2: lost filesystem error report for type 5 error -117 [ 159.154786][ T5610] EXT4-fs error (device loop2) in ext4_reserve_inode_write:7429: Corrupt filesystem [ 159.154815][ T5610] loop2: lost filesystem error report for type 5 error -117 [ 159.172755][ T5610] EXT4-fs error (device loop2): ext4_quota_off:7404: inode #3: comm syz-executor: mark_inode_dirty error [ 159.172790][ T5610] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 159.180360][ T5610] EXT4-fs error (device loop2): __ext4_get_inode_loc:5709: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 159.496084][ T6881] loop2: detected capacity change from 0 to 512 [ 159.546424][ T6881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.546817][ T6881] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.599770][ T33] audit: type=1800 audit(1791944124.647:19): pid=6881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.303" name="file1" dev="loop2" ino=15 res=0 errno=-22 [ 159.632321][ T5768] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 159.771925][ T6875] loop0: detected capacity change from 0 to 40427 [ 159.778925][ T6875] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 159.778955][ T6875] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 159.783167][ T5768] usb 4-1: New USB device found: idVendor=072f, idProduct=2200, bcdDevice=1.00 [ 159.787960][ T5768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.802802][ T6875] F2FS-fs (loop0): build fault injection rate: 17008 [ 159.802827][ T6875] F2FS-fs (loop0): build fault injection type: 0x1f8 [ 159.837839][ T5736] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 159.841065][ T6875] F2FS-fs (loop0): invalid crc value [ 159.978848][ T6875] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 159.994210][ T5736] usb 5-1: not running at top speed; connect to a high speed hub [ 159.994251][ T5736] usb 5-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 159.997165][ T5736] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.997262][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.041718][ T6875] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 160.041749][ T6875] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 160.088585][ T5736] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 160.088707][ T5736] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 160.088877][ T5768] usb 4-1: NFC: Reader power on cmd error 0 [ 160.088897][ T5768] pn533_usb 4-1:1.0: NFC: Couldn't poweron the reader (error -22) [ 160.089041][ T5768] pn533_usb 4-1:1.0: probe with driver pn533_usb failed with error -22 [ 160.258458][ T5609] syz-executor: attempt to access beyond end of device [ 160.258458][ T5609] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 160.279615][ T5609] CPU: 0 UID: 0 PID: 5609 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 160.279657][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 160.279679][ T5609] Call Trace: [ 160.279688][ T5609] [ 160.279701][ T5609] dump_stack_lvl+0xe8/0x150 [ 160.279738][ T5609] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 160.279777][ T5609] f2fs_write_end_bio+0xda7/0x11c0 [ 160.279821][ T5609] __submit_merged_bio+0x258/0x6a0 [ 160.279858][ T5609] ? rcu_is_watching+0x16/0xb0 [ 160.279891][ T5609] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 160.279929][ T5609] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 160.279990][ T5609] f2fs_write_data_pages+0x2a13/0x36e0 [ 160.280056][ T5609] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 160.280079][ T5609] ? is_bpf_text_address+0x26/0x2b0 [ 160.280125][ T5609] ? arch_stack_walk+0xfb/0x150 [ 160.280187][ T5609] ? add_lock_to_list+0xc7/0x100 [ 160.280220][ T5609] ? lockdep_unlock+0x5c/0xd0 [ 160.280240][ T5609] ? __lock_acquire+0x1511/0x2de0 [ 160.280297][ T5609] ? do_raw_spin_lock+0x12b/0x2f0 [ 160.280342][ T5609] ? do_raw_spin_unlock+0xf5/0x200 [ 160.280378][ T5609] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 160.280403][ T5609] do_writepages+0x338/0x560 [ 160.280447][ T5609] ? do_raw_spin_unlock+0xf5/0x200 [ 160.280484][ T5609] filemap_fdatawrite+0x1e9/0x2f0 [ 160.280518][ T5609] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 160.280596][ T5609] ? do_raw_spin_unlock+0xf5/0x200 [ 160.280635][ T5609] f2fs_sync_dirty_inodes+0x471/0x970 [ 160.280680][ T5609] f2fs_write_checkpoint+0x860/0x24d0 [ 160.280749][ T5609] kill_f2fs_super+0x2dc/0x700 [ 160.280782][ T5609] ? rcu_do_enqueue+0x616/0x870 [ 160.280807][ T5609] ? lockdep_hardirqs_on+0x7b/0x110 [ 160.280843][ T5609] ? __pfx_kill_f2fs_super+0x10/0x10 [ 160.280888][ T5609] ? __pfx_call_rcu+0x10/0x10 [ 160.280927][ T5609] ? shrinker_free+0x2a7/0x3b0 [ 160.280963][ T5609] deactivate_locked_super+0xbe/0x110 [ 160.281001][ T5609] cleanup_mnt+0x204/0x2a0 [ 160.281032][ T5609] task_work_run+0x1d9/0x260 [ 160.281063][ T5609] ? __pfx_task_work_run+0x10/0x10 [ 160.281099][ T5609] exit_to_user_mode_loop+0x204/0x770 [ 160.281127][ T5609] ? rcu_is_watching+0x16/0xb0 [ 160.281162][ T5609] do_syscall_64+0x328/0x520 [ 160.281188][ T5609] ? trace_irq_disable+0x3b/0x140 [ 160.281215][ T5609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.281239][ T5609] ? clear_bhb_loop+0x70/0xc0 [ 160.281268][ T5609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.281291][ T5609] RIP: 0033:0x7f98e359f517 [ 160.281336][ T5609] Code: a2 c7 05 dc 61 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 160.281358][ T5609] RSP: 002b:00007ffd8d3411d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 160.281383][ T5609] RAX: 0000000000000000 RBX: 00007f98e3634ccb RCX: 00007f98e359f517 [ 160.281399][ T5609] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8d341290 [ 160.281413][ T5609] RBP: 00007ffd8d341290 R08: 00007ffd8d342290 R09: 00000000ffffffff [ 160.281428][ T5609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8d342320 [ 160.281442][ T5609] R13: 00007f98e3634ccb R14: 0000000000027197 R15: 00007ffd8d342360 [ 160.281483][ T5609] [ 160.327325][ T5609] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 160.401074][ T10] usb 5-1: USB disconnect, device number 6 [ 160.920340][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.080481][ T6892] loop0: detected capacity change from 0 to 2048 [ 161.103053][ T6894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.305'. [ 161.120555][ T6892] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.264509][ T6902] overlayfs: failed to resolve './bus': -2 [ 161.306579][ T6898] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 161.747337][ T6911] loop2: detected capacity change from 0 to 16 [ 161.749520][ T6911] erofs (device loop2): mounted with root inode @ nid 36. [ 161.920076][ T6907] loop4: detected capacity change from 0 to 32768 [ 161.977789][ T6907] [ 161.977789][ T6907] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.977789][ T6907] [ 162.071563][ T33] audit: type=1800 audit(1791944127.117:20): pid=6907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.310" name="file1" dev="loop4" ino=4 res=0 errno=-22 [ 162.282054][ T64] [ 162.282054][ T64] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.282054][ T64] [ 162.282079][ T64] [ 162.282079][ T64] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.282079][ T64] [ 162.351995][ T125] [ 162.351995][ T125] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.351995][ T125] [ 162.352275][ T5607] [ 162.352275][ T5607] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.352275][ T5607] [ 162.394715][ T5607] [ 162.394715][ T5607] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.394715][ T5607] [ 162.538234][ T10] usb 4-1: USB disconnect, device number 6 [ 162.847215][ T5722] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 162.849417][ T5722] usb 2-1: USB disconnect, device number 7 [ 162.920761][ T6915] loop0: detected capacity change from 0 to 128 [ 162.939848][ T6915] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 163.126683][ T6920] loop3: detected capacity change from 0 to 512 [ 163.355725][ T6920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.383465][ T6920] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.384633][ T6915] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 163.389787][ T6915] ext2 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.468436][ T6927] loop2: detected capacity change from 0 to 1024 [ 163.485874][ T33] audit: type=1800 audit(1791944128.537:21): pid=6920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.315" name="file1" dev="loop3" ino=15 res=0 errno=-22 [ 163.531231][ T6927] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 163.550666][ T6927] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 163.581730][ T6927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.707843][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.769407][ T6932] loop1: detected capacity change from 0 to 2048 [ 163.797967][ T5609] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.855049][ T6933] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.946499][ T6937] loop0: detected capacity change from 0 to 2048 [ 163.998580][ T6937] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.330915][ T6945] loop1: detected capacity change from 0 to 512 [ 164.342391][ T6945] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 164.342411][ T6945] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 164.365329][ T6945] EXT4-fs (loop1): 1 truncate cleaned up [ 164.388122][ T6945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.501080][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.531998][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 164.682332][ T10] usb 1-1: New USB device found: idVendor=072f, idProduct=2200, bcdDevice=1.00 [ 164.683595][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.783837][ T6951] loop2: detected capacity change from 0 to 512 [ 164.797003][ T6951] EXT4-fs: Ignoring removed i_version option [ 164.797131][ T6951] EXT4-fs: quotafile must be on filesystem root [ 164.916804][ T10] usb 1-1: NFC: Reader power on cmd error 0 [ 164.916831][ T10] pn533_usb 1-1:1.0: NFC: Couldn't poweron the reader (error -22) [ 164.916962][ T10] pn533_usb 1-1:1.0: probe with driver pn533_usb failed with error -22 [ 167.206694][ T6959] set_capacity_and_notify: 1 callbacks suppressed [ 167.206716][ T6959] loop2: detected capacity change from 0 to 512 [ 167.266811][ T6959] EXT4-fs error (device loop2): ext4_xattr_inode_iget:473: comm syz.2.325: EA inode 11 has unexpected i_nlink=0 ref_count=1 [ 167.266896][ T6959] fserror_report: 2 callbacks suppressed [ 167.266930][ T6959] loop2: lost filesystem error report for type 5 error -117 [ 167.272335][ T6959] EXT4-fs (loop2): 1 orphan inode deleted [ 167.276830][ T6959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.945498][ T5613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.983838][ T1230] usb 1-1: USB disconnect, device number 10 [ 168.170472][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.289308][ T6971] loop1: detected capacity change from 0 to 2048 [ 168.305625][ T5736] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 168.319791][ T6973] capability: warning: `syz.3.329' uses deprecated v2 capabilities in a way that may be insecure [ 168.397305][ T6977] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.462781][ T5736] usb 5-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 168.509234][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.509283][ T5736] usb 5-1: Product: syz [ 168.509301][ T5736] usb 5-1: Manufacturer: syz [ 168.509317][ T5736] usb 5-1: SerialNumber: syz [ 168.539604][ T5736] usb 5-1: config 0 descriptor?? [ 168.560436][ T6980] netlink: 28 bytes leftover after parsing attributes in process `syz.3.334'. [ 168.666512][ T6980] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.743609][ T6987] loop2: detected capacity change from 0 to 512 [ 168.744579][ T6987] vfat: Unknown parameter 'ÿ~xîqƒ\ÍéR\E—ô¥°1M[hɬÿ1Ý™t€Í’‡s/‚ö1f‚ëT„ òÃÂëszr1xã$õ¸»3„¨XÕþØûÜkuyÑCK¾w²PëC+¨Ï‰ÄØ¥¸+UMÛ®Ø û×VwDLXŒÏ-x‡ùÞ¹üØØYÉ9G‰©Bxò{Hžœ}Æ {€ª0N ¿¶+;' [ 168.785092][ T5736] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 168.851091][ T6986] loop1: detected capacity change from 0 to 764 [ 168.875453][ T6989] loop3: detected capacity change from 0 to 512 [ 168.945974][ T5826] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 169.096047][ T5826] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 169.099642][ T5826] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.099857][ T5826] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.099912][ T5826] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 169.156061][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.156096][ T5826] usb 1-1: Product: syz [ 169.156115][ T5826] usb 1-1: Manufacturer: syz [ 169.156132][ T5826] usb 1-1: SerialNumber: syz [ 169.240093][ T6992] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 169.436181][ T6990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.794362][ T6995] loop1: detected capacity change from 0 to 512 [ 169.863381][ T6995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.866216][ T6995] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 169.930486][ T33] audit: type=1800 audit(1791944134.977:22): pid=6995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.339" name="file1" dev="loop1" ino=15 res=0 errno=-22 [ 170.046480][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.289946][ T6983] random: crng reseeded on system resumption [ 170.411875][ T5826] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 171.365759][ T5826] cdc_ncm 1-1:1.0: bind() failure [ 171.377673][ T6983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.335'. [ 171.392398][ T5826] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 171.392443][ T5826] cdc_ncm 1-1:1.1: bind() failure [ 171.410890][ T5826] usb 1-1: USB disconnect, device number 11 [ 172.262193][ T7017] loop0: detected capacity change from 0 to 2048 [ 172.280912][ T5736] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 172.313106][ T5736] usb 5-1: USB disconnect, device number 7 [ 172.358802][ T7023] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.395529][ T7024] loop2: detected capacity change from 0 to 764 [ 172.519646][ T7025] netlink: 16 bytes leftover after parsing attributes in process `syz.1.348'. [ 172.542485][ T7025] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.765616][ T7051] loop2: detected capacity change from 0 to 32768 [ 174.021558][ T7060] FAULT_INJECTION: forcing a failure. [ 174.021558][ T7060] name failslab, interval 1, probability 0, space 0, times 0 [ 174.022958][ T7060] CPU: 0 UID: 0 PID: 7060 Comm: syz.0.357 Not tainted syzkaller #0 PREEMPT(full) [ 174.022988][ T7060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 174.023003][ T7060] Call Trace: [ 174.023012][ T7060] [ 174.023022][ T7060] dump_stack_lvl+0xe8/0x150 [ 174.023063][ T7060] should_fail_ex+0x3eb/0x540 [ 174.023104][ T7060] should_failslab+0xa8/0x100 [ 174.023139][ T7060] __kmalloc_noprof+0xf9/0x710 [ 174.023177][ T7060] ? security_sk_alloc+0x52/0x360 [ 174.023212][ T7060] ? security_sk_alloc+0x52/0x360 [ 174.023246][ T7060] security_sk_alloc+0x52/0x360 [ 174.023276][ T7060] sk_prot_alloc+0x101/0x210 [ 174.023308][ T7060] ? sk_alloc+0x27/0x390 [ 174.023342][ T7060] sk_alloc+0x3a/0x390 [ 174.023378][ T7060] __netlink_create+0x62/0x260 [ 174.023402][ T7060] ? __pfx_genl_release+0x10/0x10 [ 174.023435][ T7060] netlink_create+0x3ca/0x590 [ 174.023464][ T7060] ? __pfx_genl_unbind+0x10/0x10 [ 174.023494][ T7060] ? __pfx_genl_bind+0x10/0x10 [ 174.023526][ T7060] __sock_create+0x4b5/0xac0 [ 174.023561][ T7060] __sys_socket+0xd6/0x1b0 [ 174.023591][ T7060] __x64_sys_socket+0x7a/0x90 [ 174.023618][ T7060] do_syscall_64+0x166/0x520 [ 174.023644][ T7060] ? trace_irq_disable+0x3b/0x140 [ 174.023672][ T7060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.023695][ T7060] ? clear_bhb_loop+0x70/0xc0 [ 174.023723][ T7060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.023746][ T7060] RIP: 0033:0x7f98e359e2d9 [ 174.023769][ T7060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.023791][ T7060] RSP: 002b:00007f98e445e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 174.023818][ T7060] RAX: ffffffffffffffda RBX: 00007f98e3825fa0 RCX: 00007f98e359e2d9 [ 174.023836][ T7060] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 174.023850][ T7060] RBP: 00007f98e3635888 R08: 0000000000000000 R09: 0000000000000000 [ 174.023866][ T7060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.023880][ T7060] R13: 00007f98e3826038 R14: 00007f98e3825fa0 R15: 00007ffd8d341f68 [ 174.023915][ T7060] [ 175.115557][ T7074] loop2: detected capacity change from 0 to 1024 [ 175.191234][ T7074] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.191257][ T7074] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.202994][ T7074] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.203050][ T7074] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.234320][ T7074] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.234342][ T7074] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.238290][ T7074] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.238309][ T7074] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.263258][ T7074] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.263312][ T7074] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.323244][ T7074] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.323268][ T7074] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.325833][ T7074] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.325852][ T7074] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.339829][ T7074] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.339849][ T7074] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.344491][ T7074] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.348667][ T7074] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.357592][ T7074] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.357636][ T7074] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.366440][ T7074] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.366506][ T7074] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.433153][ T7074] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.433176][ T7074] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.692157][ T7080] loop2: detected capacity change from 0 to 1024 [ 175.763664][ T7080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.829317][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.009184][ T7085] loop2: detected capacity change from 0 to 764 [ 176.465477][ T7068] netlink: 16 bytes leftover after parsing attributes in process `syz.0.361'. [ 176.467803][ T7068] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.678987][ T7092] loop1: detected capacity change from 0 to 1024 [ 176.865440][ T7092] EXT4-fs (loop1): mounted filesystem 00000000-0100-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 176.865560][ T7092] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.572435][ T33] audit: type=1800 audit(1791944142.617:23): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.370" name="file1" dev="loop1" ino=15 res=0 errno=-4 [ 177.641337][ T7105] loop3: detected capacity change from 0 to 512 [ 177.656332][ T7105] ext4: Unknown parameter 'defcontext' [ 177.834671][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0100-0006-0000-000000000000. [ 177.975998][ T33] audit: type=1326 audit(1791944143.017:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7100 comm="syz.3.371" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e559e2d9 code=0x7fc00000 [ 178.011312][ T7108] loop2: detected capacity change from 0 to 256 [ 178.478277][ T7113] loop2: detected capacity change from 0 to 512 [ 178.536225][ T7113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.540446][ T7113] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 178.610781][ T33] audit: type=1800 audit(1791944143.657:25): pid=7113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.374" name="file1" dev="loop2" ino=15 res=0 errno=-22 [ 178.768434][ T33] audit: type=1326 audit(1791944143.817:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7100 comm="syz.3.371" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f28e559e2d9 code=0x7fc00000 [ 178.854187][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.940273][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.378'. [ 178.990732][ T7122] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 179.130585][ T7126] loop2: detected capacity change from 0 to 1024 [ 179.137999][ T7126] EXT4-fs: Ignoring removed bh option [ 179.153421][ T7126] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 179.207423][ T7126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.286327][ T7133] loop0: detected capacity change from 0 to 512 [ 179.395369][ T7133] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.380: bad orphan inode 13 [ 179.395406][ T7133] loop0: lost filesystem error report for type 5 error -117 [ 179.405961][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 179.405997][ C0] EXT4-fs (loop0): initial error at time 1791944144: ext4_orphan_get:1430 [ 179.406026][ C0] EXT4-fs (loop0): last error at time 1791944144: ext4_orphan_get:1430 [ 179.441655][ T7133] ext4_test_bit(bit=12, block=4) = 1 [ 179.441679][ T7133] is_bad_inode(inode)=0 [ 179.441689][ T7133] NEXT_ORPHAN(inode)=0 [ 179.441698][ T7133] max_ino=32 [ 179.441708][ T7133] i_nlink=1 [ 179.481202][ T7133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.515554][ T7131] loop3: detected capacity change from 0 to 256 [ 180.589071][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.813521][ T7142] loop1: detected capacity change from 0 to 512 [ 180.870290][ T7144] loop0: detected capacity change from 0 to 764 [ 180.877468][ T7142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 180.989777][ T7142] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.384: Unimplemented hash flags: 0x0001 [ 180.989816][ T7142] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.384: Corrupt directory, running e2fsck is recommended [ 181.334163][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.492521][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.681578][ T5736] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 181.834541][ T5736] usb 4-1: New USB device found: idVendor=045e, idProduct=00e3, bcdDevice=0.00 [ 181.835713][ T5736] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 181.835748][ T5736] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1544, setting to 1024 [ 181.835776][ T5736] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.835806][ T5736] usb 4-1: config 0 interface 0 has no altsetting 0 [ 181.835874][ T5736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.888999][ T5736] usb 4-1: config 0 descriptor?? [ 181.911979][ T7151] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 182.035327][ T7162] loop0: detected capacity change from 0 to 256 [ 182.050682][ T7162] exfat: Deprecated parameter 'namecase' [ 182.050843][ T7162] exfat: Deprecated parameter 'namecase' [ 182.129340][ T7138] loop4: detected capacity change from 0 to 40427 [ 182.165166][ T7138] F2FS-fs (loop4): invalid crc value [ 182.184137][ T7162] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 182.326523][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 182.340745][ T5736] usbhid 4-1:0.0: can't add hid device: -71 [ 182.340855][ T5736] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 182.375787][ T5736] usb 4-1: USB disconnect, device number 7 [ 182.573976][ T7138] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 182.671567][ T7138] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 182.915912][ T5607] syz-executor: attempt to access beyond end of device [ 182.915912][ T5607] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 182.968257][ T5607] CPU: 0 UID: 0 PID: 5607 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 182.968293][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 182.968308][ T5607] Call Trace: [ 182.968318][ T5607] [ 182.968328][ T5607] dump_stack_lvl+0xe8/0x150 [ 182.968372][ T5607] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 182.968415][ T5607] f2fs_write_end_bio+0xda7/0x11c0 [ 182.968465][ T5607] __submit_merged_bio+0x258/0x6a0 [ 182.968499][ T5607] ? rcu_is_watching+0x16/0xb0 [ 182.968535][ T5607] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 182.968575][ T5607] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 182.968646][ T5607] f2fs_write_data_pages+0x2a13/0x36e0 [ 182.968721][ T5607] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 182.968743][ T5607] ? is_bpf_text_address+0x26/0x2b0 [ 182.968793][ T5607] ? arch_stack_walk+0xfb/0x150 [ 182.968860][ T5607] ? add_lock_to_list+0xc7/0x100 [ 182.968893][ T5607] ? lockdep_unlock+0x5c/0xd0 [ 182.968913][ T5607] ? __lock_acquire+0x1511/0x2de0 [ 182.968975][ T5607] ? do_raw_spin_lock+0x12b/0x2f0 [ 182.969024][ T5607] ? do_raw_spin_unlock+0xf5/0x200 [ 182.969069][ T5607] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 182.969095][ T5607] do_writepages+0x338/0x560 [ 182.969142][ T5607] ? do_raw_spin_unlock+0xf5/0x200 [ 182.969183][ T5607] filemap_fdatawrite+0x1e9/0x2f0 [ 182.969222][ T5607] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 182.969315][ T5607] ? do_raw_spin_unlock+0xf5/0x200 [ 182.969355][ T5607] f2fs_sync_dirty_inodes+0x471/0x970 [ 182.969404][ T5607] f2fs_write_checkpoint+0x860/0x24d0 [ 182.969479][ T5607] kill_f2fs_super+0x2dc/0x700 [ 182.969512][ T5607] ? rcu_do_enqueue+0x616/0x870 [ 182.969538][ T5607] ? lockdep_hardirqs_on+0x7b/0x110 [ 182.969566][ T5607] ? __pfx_kill_f2fs_super+0x10/0x10 [ 182.969613][ T5607] ? __pfx_call_rcu+0x10/0x10 [ 182.969653][ T5607] ? shrinker_free+0x2a7/0x3b0 [ 182.969690][ T5607] deactivate_locked_super+0xbe/0x110 [ 182.969730][ T5607] cleanup_mnt+0x204/0x2a0 [ 182.969763][ T5607] task_work_run+0x1d9/0x260 [ 182.969792][ T5607] ? __pfx_task_work_run+0x10/0x10 [ 182.969831][ T5607] exit_to_user_mode_loop+0x204/0x770 [ 182.969860][ T5607] ? rcu_is_watching+0x16/0xb0 [ 182.969897][ T5607] do_syscall_64+0x328/0x520 [ 182.969924][ T5607] ? trace_irq_disable+0x3b/0x140 [ 182.969952][ T5607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.969977][ T5607] ? clear_bhb_loop+0x70/0xc0 [ 182.970008][ T5607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.970046][ T5607] RIP: 0033:0x7f7dec79f517 [ 182.970070][ T5607] Code: a2 c7 05 dc 61 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 182.970090][ T5607] RSP: 002b:00007ffcb4743cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 182.970117][ T5607] RAX: 0000000000000000 RBX: 00007f7dec834ccb RCX: 00007f7dec79f517 [ 182.970134][ T5607] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcb4743db0 [ 182.970149][ T5607] RBP: 00007ffcb4743db0 R08: 00007ffcb4744db0 R09: 00000000ffffffff [ 182.970166][ T5607] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcb4744e40 [ 182.970181][ T5607] R13: 00007f7dec834ccb R14: 000000000002c9e9 R15: 00007ffcb4744e80 [ 182.970223][ T5607] [ 183.141021][ T5607] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 183.315955][ T7174] loop3: detected capacity change from 0 to 128 [ 183.404421][ T7174] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.406063][ T7174] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 183.638496][ T5613] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.128836][ T7172] loop2: detected capacity change from 0 to 32768 [ 184.146188][ T7172] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.391 (7172) [ 184.215399][ T7172] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 184.215441][ T7172] BTRFS info (device loop2): using crc32c checksum algorithm [ 184.417895][ T7172] BTRFS info (device loop2): setting nodatasum [ 184.417928][ T7172] BTRFS info (device loop2): setting nodatacow [ 184.417947][ T7172] BTRFS info (device loop2): disabling tree log [ 184.417965][ T7172] BTRFS info (device loop2): turning on async discard [ 184.417983][ T7172] BTRFS info (device loop2): enabling free space tree [ 184.418002][ T7172] BTRFS info (device loop2): max_inline set to 0 [ 184.689995][ T5610] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 184.774113][ T7204] loop3: detected capacity change from 0 to 764 [ 185.860597][ T7213] ip_tables: iptables: counters copy to user failed while replacing table [ 188.347804][ T7238] loop4: detected capacity change from 0 to 512 [ 188.594390][ T5722] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 188.598245][ T1230] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 188.826994][ T1230] usb 2-1: device descriptor read/64, error -71 [ 189.141158][ T7241] loop3: detected capacity change from 0 to 512 [ 189.155384][ T5722] usb 1-1: New USB device found: idVendor=045e, idProduct=00e3, bcdDevice=0.00 [ 189.186799][ T5722] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 189.186841][ T5722] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1544, setting to 1024 [ 189.186870][ T5722] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.186900][ T5722] usb 1-1: config 0 interface 0 has no altsetting 0 [ 189.186936][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.309668][ T5722] usb 1-1: config 0 descriptor?? [ 189.317090][ T7235] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 189.324888][ T1230] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 189.436272][ T7241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.436431][ T7241] ext4 filesystem being mounted at /78/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.723802][ T5613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.801632][ T5722] usbhid 1-1:0.0: can't add hid device: -71 [ 189.801754][ T5722] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 189.895426][ T5722] usb 1-1: USB disconnect, device number 12 [ 190.587398][ T7251] [ 190.589789][ T7251] ====================================================== [ 190.596820][ T7251] WARNING: possible circular locking dependency detected [ 190.603890][ T7251] syzkaller #0 Not tainted [ 190.608336][ T7251] ------------------------------------------------------ [ 190.615386][ T7251] syz.3.408/7251 is trying to acquire lock: [ 190.621316][ T7251] ffff888067912460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 190.630090][ T7251] [ 190.630090][ T7251] but task is already holding lock: [ 190.637482][ T7251] ffff888076c5c100 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 190.647301][ T7251] [ 190.647301][ T7251] which lock already depends on the new lock. [ 190.647301][ T7251] [ 190.657827][ T7251] [ 190.657827][ T7251] the existing dependency chain (in reverse order) is: [ 190.666885][ T7251] [ 190.666885][ T7251] -> #2 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 190.674763][ T7251] __d_alloc_parallel+0xc32/0x1700 [ 190.680459][ T7251] __lookup_slow+0x82/0x2f0 [ 190.685527][ T7251] lookup_slow+0x59/0x80 [ 190.690330][ T7251] link_path_walk+0xd22/0x1910 [ 190.695677][ T7251] path_openat+0x1b7/0x20f0 [ 190.700743][ T7251] do_file_open+0x258/0x570 [ 190.705801][ T7251] do_sys_openat2+0x115/0x200 [ 190.711124][ T7251] __x64_sys_openat+0x138/0x170 [ 190.716530][ T7251] do_syscall_64+0x166/0x520 [ 190.721672][ T7251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.728108][ T7251] [ 190.728108][ T7251] -> #1 (&type->i_mutex_dir_key#5){++++}-{4:4}: [ 190.736570][ T7251] down_write+0x91/0x200 [ 190.741361][ T7251] lookup_open+0x246/0x1970 [ 190.746423][ T7251] path_openat+0x70c/0x20f0 [ 190.751488][ T7251] do_file_open+0x258/0x570 [ 190.756544][ T7251] do_sys_openat2+0x115/0x200 [ 190.761788][ T7251] __x64_sys_openat+0x138/0x170 [ 190.767192][ T7251] do_syscall_64+0x166/0x520 [ 190.772343][ T7251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.778786][ T7251] [ 190.778786][ T7251] -> #0 (sb_writers#5){.+.+}-{0:0}: [ 190.786212][ T7251] __lock_acquire+0x164c/0x2de0 [ 190.791616][ T7251] lock_acquire+0x115/0x350 [ 190.796661][ T7251] sb_start_write+0x48/0x1c0 [ 190.801797][ T7251] mnt_want_write+0x41/0x90 [ 190.806853][ T7251] ovl_lookup+0xb93/0x1c80 [ 190.811900][ T7251] lookup_open+0x94b/0x1970 [ 190.816950][ T7251] path_openat+0x70c/0x20f0 [ 190.822088][ T7251] do_file_open+0x258/0x570 [ 190.827134][ T7251] do_sys_openat2+0x115/0x200 [ 190.832359][ T7251] __x64_sys_openat+0x138/0x170 [ 190.837757][ T7251] do_syscall_64+0x166/0x520 [ 190.842917][ T7251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.849373][ T7251] [ 190.849373][ T7251] other info that might help us debug this: [ 190.849373][ T7251] [ 190.859717][ T7251] Chain exists of: [ 190.859717][ T7251] sb_writers#5 --> &type->i_mutex_dir_key#5 --> DCACHE_PAR_LOOKUP [ 190.859717][ T7251] [ 190.873504][ T7251] Possible unsafe locking scenario: [ 190.873504][ T7251] [ 190.880974][ T7251] CPU0 CPU1 [ 190.886368][ T7251] ---- ---- [ 190.891767][ T7251] lock(DCACHE_PAR_LOOKUP); [ 190.896381][ T7251] lock(&type->i_mutex_dir_key#5); [ 190.904208][ T7251] lock(DCACHE_PAR_LOOKUP); [ 190.911339][ T7251] rlock(sb_writers#5); [ 190.915608][ T7251] [ 190.915608][ T7251] *** DEADLOCK *** [ 190.915608][ T7251] [ 190.923763][ T7251] locks held by syz.3.408/7251: 2, last CPU#1: [ 190.929929][ T7251] #0: ffff888055c70c50 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: lookup_open+0x221/0x1970 [ 190.940409][ T7251] #1: ffff888076c5c100 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 190.950633][ T7251] [ 190.950633][ T7251] stack backtrace: [ 190.956663][ T7251] CPU: 1 UID: 0 PID: 7251 Comm: syz.3.408 Not tainted syzkaller #0 PREEMPT(full) [ 190.965899][ T7251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 190.976001][ T7251] Call Trace: [ 190.979305][ T7251] [ 190.982260][ T7251] dump_stack_lvl+0xe8/0x150 [ 190.986974][ T7251] print_circular_bug+0x2e2/0x300 [ 190.992031][ T7251] check_noncircular+0x12f/0x150 [ 190.997030][ T7251] __lock_acquire+0x164c/0x2de0 [ 191.001909][ T7251] ? do_raw_spin_unlock+0xf5/0x200 [ 191.007056][ T7251] lock_acquire+0x115/0x350 [ 191.011586][ T7251] ? mnt_want_write+0x41/0x90 [ 191.016382][ T7251] sb_start_write+0x48/0x1c0 [ 191.021102][ T7251] ? mnt_want_write+0x41/0x90 [ 191.025902][ T7251] mnt_want_write+0x41/0x90 [ 191.030433][ T7251] ovl_lookup+0xb93/0x1c80 [ 191.034871][ T7251] ? lock_acquire+0x115/0x350 [ 191.039583][ T7251] ? __pfx_ovl_lookup+0x10/0x10 [ 191.044460][ T7251] ? __pfx___d_alloc_parallel+0x10/0x10 [ 191.050132][ T7251] ? d_lookup+0x1f/0xa0 [ 191.054627][ T7251] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 191.060814][ T7251] ? lockdep_hardirqs_on+0x7b/0x110 [ 191.066043][ T7251] lookup_open+0x94b/0x1970 [ 191.070583][ T7251] path_openat+0x70c/0x20f0 [ 191.075120][ T7251] do_file_open+0x258/0x570 [ 191.079647][ T7251] ? __pfx_do_file_open+0x10/0x10 [ 191.084710][ T7251] ? _raw_spin_unlock+0x28/0x50 [ 191.089582][ T7251] ? alloc_fd+0x6af/0x760 [ 191.093941][ T7251] do_sys_openat2+0x115/0x200 [ 191.098664][ T7251] ? __se_sys_futex+0x3a8/0x450 [ 191.103553][ T7251] ? __pfx_do_sys_openat2+0x10/0x10 [ 191.108803][ T7251] ? rcu_is_watching+0x16/0xb0 [ 191.113603][ T7251] __x64_sys_openat+0x138/0x170 [ 191.118482][ T7251] do_syscall_64+0x166/0x520 [ 191.123094][ T7251] ? trace_irq_disable+0x3b/0x140 [ 191.128144][ T7251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.134248][ T7251] ? clear_bhb_loop+0x70/0xc0 [ 191.138964][ T7251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.144878][ T7251] RIP: 0033:0x7f28e559e2d9 [ 191.149311][ T7251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.168946][ T7251] RSP: 002b:00007f28e6422028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 191.177389][ T7251] RAX: ffffffffffffffda RBX: 00007f28e5825fa0 RCX: 00007f28e559e2d9 [ 191.185382][ T7251] RDX: 0000000000040400 RSI: 0000200000004280 RDI: ffffffffffffff9c [ 191.193393][ T7251] RBP: 00007f28e5635888 R08: 0000000000000000 R09: 0000000000000000 [ 191.201385][ T7251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.209376][ T7251] R13: 00007f28e5826038 R14: 00007f28e5825fa0 R15: 00007ffcd627b2e8 [ 191.217404][ T7251] [ 191.229524][ T7261] loop1: detected capacity change from 0 to 764 [ 191.242017][ T7261] ISOFS: File unit size != 0 for ISO file (1792). [ 191.340164][ T7264] input: syz0 as /devices/virtual/input/input16 [ 194.452543][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.452592][ T1317] ieee802154 phy1 wpan1: encryption failed: -22