last executing test programs: 6m12.488897809s ago: executing program 32 (id=672): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x2, 0x0, 0x0, 0x0, 0x0, 0x1e9]}}, 0x5c) 5m30.168428962s ago: executing program 5 (id=1046): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) 5m29.900017782s ago: executing program 5 (id=1051): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500050001000000050003000100000005008cd1000000000500030080ff000005000300050000000800020003"], 0x50}}, 0x0) 5m29.561328669s ago: executing program 5 (id=1055): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 5m29.058702326s ago: executing program 5 (id=1060): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 5m28.784939335s ago: executing program 5 (id=1062): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) symlinkat(&(0x7f0000000040)='./file0/file0\x00', r0, &(0x7f0000000100)='./file0\x00') 5m28.578773737s ago: executing program 5 (id=1074): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2c, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x1b, &(0x7f0000000040), 0x4) 5m13.443375997s ago: executing program 33 (id=1074): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2c, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x1b, &(0x7f0000000040), 0x4) 3m49.371666067s ago: executing program 6 (id=1983): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) 3m48.380087693s ago: executing program 6 (id=1995): capset(&(0x7f00000004c0)={0x20071026}, &(0x7f0000000100)) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000340)="4b89a74cae5b", 0x0, 0x3, 0x16, 0x0, 0x0}) 3m48.167488684s ago: executing program 6 (id=1998): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000002c0)={0x2, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x1}) 3m47.950617573s ago: executing program 6 (id=2003): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000008c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@discard}, {@sb={'sb', 0x3d, 0x1}}, {@lazytime}, {@noload}, {}, {@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3m47.852959405s ago: executing program 4 (id=2005): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x0, 0x1000, 0x200fff}) 3m47.479836856s ago: executing program 6 (id=2011): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r1, 0x1, 0x0, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x100}, 0x0) 3m46.866079962s ago: executing program 4 (id=2014): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200bdfd28000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0xfdef}], 0x1}, 0x0) 3m46.516822637s ago: executing program 6 (id=2017): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x8) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) 3m46.144841198s ago: executing program 34 (id=2017): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x8) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) 3m46.139834787s ago: executing program 4 (id=2020): bpf$ENABLE_STATS(0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 3m45.892040951s ago: executing program 4 (id=2022): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000008c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@discard}, {@sb={'sb', 0x3d, 0x1}}, {@lazytime}, {@noload}, {}, {@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3m45.385342557s ago: executing program 4 (id=2026): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2200004, &(0x7f0000000100)=ANY=[@ANYBLOB='nls=cp936,decompose,barrier,part=0x000000000000fc47,nodecompose,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00'], 0x1, 0x6b8, &(0x7f0000000a00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000001440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 3m44.168228121s ago: executing program 4 (id=2031): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$FUSE(r0, 0x0, 0x0) 3m43.572530661s ago: executing program 35 (id=2031): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$FUSE(r0, 0x0, 0x0) 3m12.610931422s ago: executing program 7 (id=2283): openat$fb0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$tcp_mem(r0, 0x0, 0xffffffc7) 3m12.376407358s ago: executing program 7 (id=2286): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x8, 0x0, 0x1000, 0xb82, 0x400000, 0x1ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x8, 0x4006, 0x84, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x6, 0x5, 0x40424f, 0x3}}) 3m12.158607118s ago: executing program 7 (id=2288): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x5, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f0000000040)="c00cefdd8bea14a2a41345743669789ce88403cb354893fc98eed683af6ee0911f37589fe65625aac3612be1c4f866e01b0b3ecff60a66fe", &(0x7f0000000100)=""/31}, 0x9) 3m11.916815793s ago: executing program 7 (id=2290): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) 3m11.41631235s ago: executing program 0 (id=2293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000e00)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000010) 3m11.107806183s ago: executing program 7 (id=2295): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x7, 0x0, 0x0, 0x0, "f01881a1debdfbff"}}, 0x38}, 0x300, 0x0, 0x0, 0x8800}, 0x0) 3m10.819180449s ago: executing program 0 (id=2298): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) 3m10.520861274s ago: executing program 0 (id=2302): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb750e42304822a5347abc11fb5664dc79199a73e7d2355a95e3fa7577f5d74363ba0", 0x56}], 0x1}, 0x24000008) 3m10.3894503s ago: executing program 7 (id=2303): r0 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x6) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) 3m10.294588462s ago: executing program 0 (id=2306): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) 3m9.862416012s ago: executing program 36 (id=2303): r0 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x6) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) 3m9.836705217s ago: executing program 0 (id=2309): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3m9.192888118s ago: executing program 0 (id=2319): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0) 3m8.488555987s ago: executing program 37 (id=2319): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0) 4.57350493s ago: executing program 2 (id=4012): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x2808082, &(0x7f0000000280)={[{@uid}, {@part={'part', 0x3d, 0x19}}, {@nls={'nls', 0x3d, 'macgaelic'}}, {@nodecompose}, {}, {@uid}, {@type={'type', 0x3d, "eea74fa7"}}]}, 0x1, 0x6e8, &(0x7f0000001f80)="$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") mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\x8f\x98\xb9\x89Q\xa4Pxy0\x01\x8cC\x1f|\xad\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1a29143, 0x0) mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\x8f\x98\xb9\x89Q\xa4Pxy0\x01\x8cC\x1f|\xad\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1a29143, 0x0) 4.156487512s ago: executing program 2 (id=4019): r0 = io_uring_setup(0x1694, &(0x7f0000000100)={0x0, 0xf757, 0x0, 0x3}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f00000001c0)="8ae3", 0x2) 3.883727041s ago: executing program 8 (id=4024): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='vcan0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2, @local}, 0x10) 3.077623171s ago: executing program 2 (id=4034): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) 2.808380692s ago: executing program 8 (id=4037): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0xf8, 0x0, 0x601, 0x0, 0x9}) 2.665153435s ago: executing program 2 (id=4038): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000403810101400000000000109022400010000000009040000030300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB='@!\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.613798136s ago: executing program 1 (id=4039): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083863090890e0878f0e1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31360d3b6d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f30012f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa3647f17b28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc91ca0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d9779750000495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d42a5071424d7076a122d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833fea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03ecb89ebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000e9f77be500", 0x1000}}, 0x491) 2.442815674s ago: executing program 1 (id=4041): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x4, 0x0, 0x8, 0x3e, 0x9, 0xec, 0xa0, 0x4, 0x3, 0x0, 0x3, 0x6, 0x1}, 0xe) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x70, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 2.345466286s ago: executing program 9 (id=4042): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff000005000300050000000500030080ff000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.2609443s ago: executing program 1 (id=4044): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x22}}, {@noauto_da_alloc}, {@quota}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 2.135418647s ago: executing program 9 (id=4045): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000540)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)=',$:@^@,\x00', r0) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='?', 0x1, r0) 1.836852531s ago: executing program 1 (id=4047): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)={0xf8, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0xac, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x14fa}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 1.836512251s ago: executing program 9 (id=4048): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) 1.812978247s ago: executing program 3 (id=4049): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000fedadf2500000000", @ANYRES32=0x0, @ANYBLOB="5d4705008df70300140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}}, 0x8000002) 1.525229843s ago: executing program 9 (id=4050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a0300ea000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.332813618s ago: executing program 1 (id=4051): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000004a00)='./file0\x00', 0x4000, &(0x7f0000004a80)=ANY=[@ANYBLOB="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"], 0xff, 0x5e5c, &(0x7f0000005d80)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1.246687192s ago: executing program 3 (id=4052): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000840)={0x7, 0x1ff, 0x4, 0x7, 0x1, 0x8, 0x5, 0x9}, 0x0, &(0x7f00000008c0)={0x9, 0x9, 0x401, 0x9, 0x6, 0x8000000000000001, 0xa94f, 0x2}, &(0x7f0000000900), 0x0) 1.160890576s ago: executing program 9 (id=4053): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x1, @local, 0x1}]}, &(0x7f0000000000)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e23, 0x0, @local, 0x1}}, 0x8, 0x3, 0x8001, 0x80038, 0xa}, &(0x7f0000000040)=0x98) 952.741507ms ago: executing program 3 (id=4054): socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x33, &(0x7f0000000200)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @opaque="0b80d010da6a6a3cd6"}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x6, 0x0, @void}}}}}}}, 0x0) 950.185697ms ago: executing program 8 (id=4055): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 808.67936ms ago: executing program 3 (id=4056): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') fchdir(r0) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") 696.51173ms ago: executing program 8 (id=4057): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 442.746793ms ago: executing program 2 (id=4058): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0xfffffffd) 442.146962ms ago: executing program 8 (id=4059): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) read(r0, &(0x7f0000002fc0)=""/4096, 0x1000) 332.792302ms ago: executing program 3 (id=4060): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x20008054, &(0x7f0000000180)={0x11, 0x1, r1, 0x1, 0x28, 0x6, @random="9bf42eef96f2"}, 0x14) 123.544853ms ago: executing program 2 (id=4061): socket$xdp(0x2c, 0x3, 0x0) unshare(0x8040600) pselect6(0x4b, &(0x7f0000000040), &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0) 86.884527ms ago: executing program 9 (id=4062): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000200)={[{@umask={'umask', 0x3d, 0x8}}, {@nodecompose}, {}, {@uid={'uid', 0x3d, 0xee01}}, {@nls={'nls', 0x3d, 'maccyrillic'}}, {@gid={'gid', 0x3d, 0xee01}}, {@part={'part', 0x3d, 0x7}}, {@force}]}, 0x1, 0x6bb, &(0x7f0000001f80)="$eJzs3U+InGcdB/DvO5nMZiIk2zZNowhZGijaYLKboSaC0CgiOQQJ9tLrkmyaJZu0bLaSFjETtQqePEkPHioSDz2JiFBPYj0LghdPuQe8echB3fL+md3Z3clmN392tu3nA++8zzvP8z7P7/3l/TPzTpY3wOfWudezt58i546fv1ku373TW7h7p3dtUE4ykaSVtOtZim5SfJycTT3li+WbTXfFg8Z55d5HRfv9D3v1UruZqvatzdbbYGTLfrJvZWFPkqm6+N8tdNga3V81Vf1cXO3vERUrcZcJOzZIHIzb8gb91cpRh8ZaWz9ugV3rVn3d3GAy2Z/66lp+Dkhzdnj4mWH8Nj039XcuDgAAAHhaRn6XH3bwfu7nZg7sTDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw2VDUzwwsmqk1KE+lGDz/vzP0TP3OmMN9TO9drmbfPzjuQAAAAAAAAADgsRy9n/u5mQOD5eWi+s3/xWrhUPX6hbydG5nLYk7kZmazlKUsZibJ5FBHnZuzS0uLMxvX/FXKNZeXl281a54aueaptXH11wc66n8abGgEAAAAAAAAAJ9bP8651d//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgNyiSPfWsmg4NypNptZPsS9Ipplaad8Ya7BPwl3EHAAAAAE9ft5kfKP5fF5aL6jv/4ep7/768netZynyWspC5XKruBdTf+lv/6PcW7t7pXSunjR1/69/biqPqMfW9h9EjT1ctnl9Z41y+m9dyPFO5kMXM5weZzVLmMpXvVKXZFJls7l5M3r3TzSDWjfGeXbN0YX1sR4fKZXxHqki6uZz5KrYTudgZhN5q2h0ZGu1PnWTdiLfL7BSvNraYo0vNvNyiXzbz3WGy2vK9KxmZbnJfZuOZ4bxvzP0295P1I82ktXIP6tDqKOXi+pEeKef7m3mZ65893Zxv81ba2kz0f1EuDfa+w5vnPPnqP/964Urr+tUrl28c3z270SNav0/0hjLxwpYysVBmov8Ymdj3OPE/OZ0mG/VZdHtnyxerdQ9kPt/Lm7mUuZzOdGZyJtP5Rk6ll1NDeX1+87xWx1pre8fasa80hfKa9POha9OOmXhQRZnXZ4byOnymm6zqht9ZzdKzW8hS0cnoLP1rZCjtLzWFcoyfDF1xxm99JmaGMvHc5pn4zf+Wk9xYuH518crsWxu7PjhqvJeaeXnYvrf23PzbJ7ZR29Nsbrm/PFv+Y6W+bAzvHWXdc4O6dfnqNL+4tJvO1tR1Uh3Pdd3DjtSyp8O3R/VU170wcpReVXdkqG7Np5y8mYWVTyGNHT9IAdiC/S/v73Tvdf/e/aD70+6V7vl93544M/HlTvb+rf3nPb9v/a71zeLlfJAf5cC4IwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM+CG++8e3V2YWFucRcW0nrCHd4eWTVIRf1OZ0Sbo9kF2fh0FCY226P+kPpxTQ9YvfN0I3wto6q6eWA8O1tIewfGmsiIqvMr73ST1ko8Sa7ukgfcAU/DyaVrb5288c67X5u/NvvG3Btz10+dOf3q6d7XZ26dvDy/MDddvzaN22MOFniiVj8GjDsSAAAAAAAAAAAAYKt24s8bRgxb9MewrQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCn07nXs7efIjPTJ6bL5bt3egvlNCivtmwnaSUpfpgUHydnU0+ZHOqueNA4r9z76Ncvvf9hb7Wv9qB9a916f/zP8vI2t6LfTJlKsqeZP9zElvq7ONRff5uB1YqVLSwTdmyQOBi3TwIAAP//Bc4E/Q==") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 756.52µs ago: executing program 1 (id=4063): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x11, 0xd, &(0x7f0000001ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0xd0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe09, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 301.43µs ago: executing program 8 (id=4064): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x80) 0s ago: executing program 3 (id=4065): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000500)={'pcmmio\x00', [0x4f28, 0x4, 0x10000, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cfef, 0xfd, 0xe3d, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x0, 0x1, 0x0, 0x20001e58, 0x3, 0xe64, 0x3, 0x8, 0x3, 0x0, 0xfffffff8]}) kernel console output (not intermixed with test programs): x: probe of 10-1:0.0 failed with error -22 [ 395.559111][T13255] can0 (unregistered): slcan off ptm0. [ 395.581590][T13259] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 395.622570][T13259] EXT4-fs (loop1): orphan cleanup on readonly fs [ 395.724688][T13259] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 395.791329][ T5729] usb 10-1: USB disconnect, device number 8 [ 395.831155][T13259] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 395.871169][T13259] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.3083: Failed to acquire dquot type 1 [ 395.919277][T13259] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3083: bg 0: block 40: padding at end of block bitmap is not set [ 396.003907][T13259] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 396.029710][T13259] EXT4-fs (loop1): 1 truncate cleaned up [ 396.042105][T13259] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 396.111773][T13259] EXT4-fs (loop1): unmounting filesystem. [ 396.302785][T13284] loop1: detected capacity change from 0 to 164 [ 397.147227][T13305] loop1: detected capacity change from 0 to 4096 [ 397.206646][T13305] ntfs3: loop1: ino=3, Correct links count -> 2. [ 397.339919][T13278] loop3: detected capacity change from 0 to 32768 [ 397.354778][T13305] ntfs3: loop1: ino=5, "/" directory corrupted [ 397.370529][ T4317] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 397.401570][T13286] loop2: detected capacity change from 0 to 32768 [ 397.471880][T13278] JBD2: Ignoring recovery information on journal [ 397.558847][ T4317] usb 9-1: Using ep0 maxpacket: 32 [ 397.566229][ T4317] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.604894][ T4317] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.625655][ T4317] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 397.656150][ T4317] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.665489][T13278] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 397.690540][ T4317] usb 9-1: config 0 descriptor?? [ 397.717840][ T4317] hub 9-1:0.0: USB hub found [ 397.873443][ T4283] ocfs2: Unmounting device (7,3) on (node local) [ 397.916512][ T4317] hub 9-1:0.0: 29 ports detected [ 397.925872][ T4317] hub 9-1:0.0: insufficient power available to use all downstream ports [ 397.995122][ T22] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 398.200625][ T22] usb 10-1: Using ep0 maxpacket: 32 [ 398.210818][ T22] usb 10-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 398.249163][ T22] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.267604][ T22] usb 10-1: Product: syz [ 398.297209][T13335] loop1: detected capacity change from 0 to 256 [ 398.297967][ T22] usb 10-1: Manufacturer: syz [ 398.333072][ T4317] usb 9-1: USB disconnect, device number 9 [ 398.363317][ T22] usb 10-1: SerialNumber: syz [ 398.364703][T13335] exfat: Deprecated parameter 'utf8' [ 398.379273][ T22] usb 10-1: config 0 descriptor?? [ 398.417010][T13335] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6efbb19, utbl_chksum : 0xe619d30d) [ 398.438006][ T22] dw2102: su3000_identify_state [ 398.472343][ T22] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 398.498780][ T22] dw2102: su3000_power_ctrl: 1, initialized 0 [ 398.516514][ T22] dvb-usb: bulk message failed: -22 (2/0) [ 398.543380][ T22] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 398.585172][ T22] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 398.629736][T13319] dvb-usb: bulk message failed: -22 (4/0) [ 398.643876][T13319] dw2102: i2c transfer failed. [ 398.660766][ T22] usb 10-1: media controller created [ 398.698841][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 398.718677][ T22] dw2102: i2c transfer failed. [ 398.724548][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 398.748649][ T22] dw2102: i2c transfer failed. [ 398.764639][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 398.808370][ T22] dw2102: i2c transfer failed. [ 398.842049][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 398.858700][ T22] dw2102: i2c transfer failed. [ 398.877279][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 398.908817][ T22] dw2102: i2c transfer failed. [ 398.913670][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 398.969132][ T22] dw2102: i2c transfer failed. [ 398.973957][ T22] dvb-usb: MAC address: 02:02:02:02:02:02 [ 399.044151][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 399.119071][ T22] dvb-usb: bulk message failed: -22 (3/0) [ 399.145256][ T22] dw2102: command 0x0e transfer failed. [ 399.168645][ T22] dvb-usb: bulk message failed: -22 (3/0) [ 399.174438][ T22] dw2102: command 0x0e transfer failed. [ 399.322319][T13366] PKCS8: Unsupported PKCS#8 version [ 399.578870][ T22] dvb-usb: bulk message failed: -22 (3/0) [ 399.584779][ T22] dw2102: command 0x0e transfer failed. [ 399.620821][ T22] dvb-usb: bulk message failed: -22 (3/0) [ 399.661299][ T22] dw2102: command 0x0e transfer failed. [ 399.666915][ T22] dvb-usb: bulk message failed: -22 (1/0) [ 399.708707][ T22] dw2102: command 0x51 transfer failed. [ 400.048889][ T22] DVB: Unable to find symbol ds3000_attach() [ 400.055057][ T22] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 400.143567][T13355] loop1: detected capacity change from 0 to 32768 [ 400.232018][T13355] XFS (loop1): Mounting V5 Filesystem [ 400.386584][T13355] XFS (loop1): Ending clean mount [ 400.468745][ T22] rc_core: IR keymap rc-su3000 not found [ 400.474580][ T22] Registered IR keymap rc-empty [ 400.503563][ T22] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0 [ 400.577850][ T22] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input16 [ 400.621611][ T22] dvb-usb: schedule remote query interval to 150 msecs. [ 400.648789][ T22] dw2102: su3000_power_ctrl: 0, initialized 1 [ 400.666980][ T22] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 400.687056][T13370] loop9: detected capacity change from 0 to 32768 [ 400.725881][T13419] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3137'. [ 400.747087][ T22] usb 10-1: USB disconnect, device number 9 [ 400.772997][T11000] XFS (loop1): Unmounting Filesystem [ 400.818225][ T22] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 400.953932][T13370] XFS (loop9): Mounting V5 Filesystem [ 400.975335][T13429] loop8: detected capacity change from 0 to 512 [ 401.096938][T13370] XFS (loop9): Ending clean mount [ 401.160058][T13429] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 401.185876][T13429] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 401.215575][T13429] EXT4-fs error (device loop8): ext4_acquire_dquot:6835: comm syz.8.3139: Failed to acquire dquot type 0 [ 401.246906][T13429] EXT4-fs (loop8): Remounting filesystem read-only [ 401.266406][T13429] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 401.302893][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 401.355441][T13429] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 401.407823][T13429] EXT4-fs error (device loop8): ext4_acquire_dquot:6835: comm syz.8.3139: Failed to acquire dquot type 0 [ 401.439090][T13429] EXT4-fs (loop8): Remounting filesystem read-only [ 401.495181][T13429] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.3139: bg 0: block 328: padding at end of block bitmap is not set [ 401.533388][T13429] EXT4-fs (loop8): Remounting filesystem read-only [ 401.550834][T10958] XFS (loop9): Unmounting Filesystem [ 401.550903][T13429] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 401.567600][T13429] EXT4-fs (loop8): Remounting filesystem read-only [ 401.580047][T13429] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 401.591530][T13429] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 401.634266][T13429] EXT4-fs error (device loop8): ext4_acquire_dquot:6835: comm syz.8.3139: Failed to acquire dquot type 0 [ 401.672441][T13429] EXT4-fs (loop8): Remounting filesystem read-only [ 401.686997][T13429] EXT4-fs (loop8): 1 orphan inode deleted [ 401.703767][T13429] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 401.720532][T13429] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.763124][T13447] loop3: detected capacity change from 0 to 4096 [ 401.977937][T10081] EXT4-fs (loop8): unmounting filesystem. [ 402.191989][ T26] audit: type=1326 audit(1773242438.811:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13454 comm="syz.1.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0dd9c799 code=0x7ffc0000 [ 402.295309][ T26] audit: type=1326 audit(1773242438.811:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13454 comm="syz.1.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0dd9c799 code=0x7ffc0000 [ 402.405850][ T26] audit: type=1326 audit(1773242438.841:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13454 comm="syz.1.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fce0dd9c799 code=0x7ffc0000 [ 402.528724][ T26] audit: type=1326 audit(1773242438.841:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13454 comm="syz.1.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0dd9c799 code=0x7ffc0000 [ 402.691964][T13471] loop8: detected capacity change from 0 to 2048 [ 402.747375][T13471] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 402.852196][T13479] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 402.862507][ T4675] udevd[4675]: incorrect nilfs2 checksum on /dev/loop8 [ 402.966043][T13476] loop9: detected capacity change from 0 to 4096 [ 403.047615][T13476] ntfs3: loop9: Different NTFS' sector size (1024) and media sector size (512) [ 403.707194][T13463] loop3: detected capacity change from 0 to 32768 [ 403.901796][T13463] XFS (loop3): Mounting V5 Filesystem [ 403.949890][T13463] XFS (loop3): Ending clean mount [ 404.106436][ T4283] XFS (loop3): Unmounting Filesystem [ 404.282534][T13533] loop9: detected capacity change from 0 to 128 [ 404.344303][T13533] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 404.395492][T13533] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 404.785280][T13549] loop2: detected capacity change from 0 to 128 [ 404.861512][T13549] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 404.934144][T13549] hpfs: filesystem error: improperly stopped [ 404.934169][T13549] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 404.934185][T13549] hpfs: You really don't want any checks? You are crazy... [ 404.934477][T13549] hpfs: hpfs_map_sector(): read error [ 405.058678][T13549] hpfs: code page support is disabled [ 405.064231][T13549] hpfs: hpfs_map_4sectors(): unaligned read [ 405.070304][ T4346] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 405.106693][T13549] hpfs: hpfs_map_4sectors(): unaligned read [ 405.132186][T13549] hpfs: filesystem error: unable to find root dir [ 405.252254][ T4346] usb 9-1: Using ep0 maxpacket: 32 [ 405.262946][ T4346] usb 9-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 405.324931][ T4346] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.360872][ T4346] usb 9-1: Product: syz [ 405.399233][ T4346] usb 9-1: Manufacturer: syz [ 405.414171][ T4346] usb 9-1: SerialNumber: syz [ 405.445964][ T4346] usb 9-1: config 0 descriptor?? [ 405.471920][ T4346] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 405.493284][ T4346] dvb-usb: bulk message failed: -22 (2/0) [ 405.529298][ T4346] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 405.568903][ T4346] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 405.618047][ T4346] usb 9-1: media controller created [ 405.658172][T13550] cxusb: i2c wr: len=80 is too big! [ 405.658172][T13550] [ 405.696177][ T4346] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 405.756359][ T4346] usb 9-1: selecting invalid altsetting 7 [ 405.774184][ T4346] cxusb: set interface failed [ 405.787874][ T4346] dvb-usb: bulk message failed: -22 (1/0) [ 405.994144][ T4346] DVB: Unable to find symbol lgdt330x_attach() [ 406.014282][ T4346] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 406.119617][T13562] loop1: detected capacity change from 0 to 32768 [ 406.230442][T13567] loop9: detected capacity change from 0 to 32768 [ 406.357349][T13567] JBD2: Ignoring recovery information on journal [ 406.388305][T13571] loop3: detected capacity change from 0 to 32768 [ 406.389376][ T4346] rc_core: IR keymap rc-dvico-portable not found [ 406.419019][T13571] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.3187 (13571) [ 406.479256][ T4346] Registered IR keymap rc-empty [ 406.516275][ T4346] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 406.569648][T13567] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 406.569973][T13571] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 406.629921][ T4346] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input17 [ 406.660034][T13571] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 406.711916][T13571] BTRFS info (device loop3): allowing degraded mounts [ 406.737331][ T4346] dvb-usb: schedule remote query interval to 100 msecs. [ 406.761738][ T4346] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 406.783384][T13571] BTRFS info (device loop3): enabling auto defrag [ 406.816460][T10958] ocfs2: Unmounting device (7,9) on (node local) [ 406.849242][ T4346] usb 9-1: USB disconnect, device number 10 [ 406.878696][T13571] BTRFS info (device loop3): using free space tree [ 406.987063][T13594] loop2: detected capacity change from 0 to 4096 [ 407.085280][ T4346] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 407.273994][T13594] ntfs3: loop2: ino=21, "bus" fiemap is not supported for compressed file (cp -r) [ 407.286464][T13571] BTRFS info (device loop3): enabling ssd optimizations [ 407.544842][ T4271] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 407.560264][ T4271] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 407.778300][ T4283] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 407.987431][T13634] loop9: detected capacity change from 0 to 1024 [ 408.086954][T13588] loop8: detected capacity change from 0 to 40427 [ 408.134527][T13634] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 408.160580][T13588] F2FS-fs (loop8): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 408.169893][T13588] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 408.180811][T13588] F2FS-fs (loop8): invalid crc value [ 408.200588][T13588] F2FS-fs (loop8): Found nat_bits in checkpoint [ 408.424521][T13588] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 408.431810][T13588] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 408.520324][T13626] loop1: detected capacity change from 0 to 32768 [ 408.608087][T10958] EXT4-fs (loop9): unmounting filesystem. [ 408.708995][T13626] XFS (loop1): Mounting V5 Filesystem [ 408.882183][T13588] syz.8.3191: attempt to access beyond end of device [ 408.882183][T13588] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 408.960518][T13626] XFS (loop1): Ending clean mount [ 408.966129][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 408.966141][ T26] audit: type=1326 audit(1773242445.581:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13658 comm="syz.9.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7079c799 code=0x7ffc0000 [ 409.016837][T13626] XFS (loop1): Quotacheck needed: Please wait. [ 409.086854][ T26] audit: type=1326 audit(1773242445.621:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13658 comm="syz.9.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7079c799 code=0x7ffc0000 [ 409.125226][T13632] loop2: detected capacity change from 0 to 40427 [ 409.163045][T13632] F2FS-fs (loop2): build fault injection attr: rate: 684, type: 0x3ffff [ 409.192182][T13632] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 409.201443][ T26] audit: type=1326 audit(1773242445.621:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13658 comm="syz.9.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f9f7079c799 code=0x7ffc0000 [ 409.243768][T13626] XFS (loop1): Quotacheck: Done. [ 409.290069][T13632] F2FS-fs (loop2): invalid crc value [ 409.333111][T13632] F2FS-fs (loop2): Found nat_bits in checkpoint [ 409.353278][ T26] audit: type=1326 audit(1773242445.621:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13658 comm="syz.9.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7079c799 code=0x7ffc0000 [ 409.462120][ T26] audit: type=1326 audit(1773242445.621:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13658 comm="syz.9.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7079c799 code=0x7ffc0000 [ 409.484478][ C0] vkms_vblank_simulate: vblank timer overrun [ 409.520218][T11000] XFS (loop1): Unmounting Filesystem [ 409.561038][T13632] F2FS-fs (loop2): Start checkpoint disabled! [ 409.638772][T13632] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 410.070249][T11400] kworker/u4:10: attempt to access beyond end of device [ 410.070249][T11400] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 410.839205][T13705] netlink: 79 bytes leftover after parsing attributes in process `syz.2.3212'. [ 410.851908][T13706] usb usb8: usbfs: process 13706 (syz.9.3219) did not claim interface 0 before use [ 410.968453][T13704] loop1: detected capacity change from 0 to 4096 [ 411.142856][T13704] ntfs3: loop1: ino=21, "bus" fiemap is not supported for compressed file (cp -r) [ 411.209856][T13679] loop3: detected capacity change from 0 to 40427 [ 411.298777][T13679] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 411.306565][T13679] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 411.342025][T11000] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 411.369643][T11000] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 411.421373][T13679] F2FS-fs (loop3): Found nat_bits in checkpoint [ 411.629430][T13719] loop8: detected capacity change from 0 to 4096 [ 411.646614][T13679] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 411.674992][T13679] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 411.780593][T13719] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 412.229379][T13719] ntfs3: Cannot use different iocharset when remounting! [ 412.467957][T13715] loop2: detected capacity change from 0 to 32768 [ 412.664757][T13750] loop1: detected capacity change from 0 to 4096 [ 412.691315][T13750] EXT4-fs: Ignoring removed mblk_io_submit option [ 412.755103][T13750] EXT4-fs (loop1): Test dummy encryption mode enabled [ 412.806570][T13750] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 412.928194][T13766] program syz.8.3238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 413.057023][T11000] EXT4-fs (loop1): unmounting filesystem. [ 413.141429][ T22] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 413.242564][T13769] loop8: detected capacity change from 0 to 1024 [ 413.356788][ T22] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.385897][ T4331] hfsplus: b-tree write err: -5, ino 25 [ 413.387522][ T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 413.411200][ T4331] hfsplus: b-tree write err: -5, ino 4 [ 413.421715][ T22] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 413.457407][ T4331] hfsplus: b-tree write err: -5, ino 2 [ 413.467256][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.483567][ T4331] hfsplus: b-tree write err: -5, ino 17 [ 413.554026][ T22] usb 3-1: config 0 descriptor?? [ 413.581830][ T22] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 413.623141][ T22] dvb-usb: bulk message failed: -22 (3/0) [ 413.653692][ T22] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 413.710296][ T22] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 413.728859][ T22] usb 3-1: media controller created [ 413.743003][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 413.793271][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 413.814614][ T22] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 413.838116][T13791] loop3: detected capacity change from 0 to 16 [ 413.871413][ T22] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 413.908072][ T22] dvb-usb: schedule remote query interval to 150 msecs. [ 413.916394][T13791] erofs: (device loop3): mounted with root inode @ nid 36. [ 413.930647][ T22] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 413.985156][ T22] usb 3-1: USB disconnect, device number 22 [ 414.052250][ T22] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 414.158681][ T4317] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 414.378937][ T4317] usb 2-1: Using ep0 maxpacket: 16 [ 414.397427][ T4317] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.444088][ T4317] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.477049][ T4317] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.512250][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.551105][T13785] loop8: detected capacity change from 0 to 32768 [ 414.564283][ T4317] usb 2-1: Product: syz [ 414.586968][T13785] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.3243 (13785) [ 414.591119][ T4317] usb 2-1: Manufacturer: syz [ 414.620919][T13790] loop9: detected capacity change from 0 to 32768 [ 414.636253][ T4317] usb 2-1: SerialNumber: syz [ 414.666949][T13790] JBD2: Ignoring recovery information on journal [ 414.688236][T13785] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 414.708779][T13785] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 414.717796][T13785] BTRFS info (device loop8): enabling auto defrag [ 414.725477][T13785] BTRFS info (device loop8): use no compression [ 414.732054][T13785] BTRFS info (device loop8): force clearing of disk cache [ 414.739351][T13785] BTRFS info (device loop8): max_inline at 4096 [ 414.745838][T13785] BTRFS info (device loop8): disabling free space tree [ 414.788503][T13790] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 414.913789][ T4317] usb 2-1: 0:2 : does not exist [ 414.941173][ T4317] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 415.005792][T13799] loop3: detected capacity change from 0 to 32768 [ 415.049761][T10958] ocfs2: Unmounting device (7,9) on (node local) [ 415.095746][T13799] JBD2: Ignoring recovery information on journal [ 415.100084][ T4317] usb 2-1: USB disconnect, device number 13 [ 415.139792][T13785] BTRFS info (device loop8): enabling ssd optimizations [ 415.163750][T13785] BTRFS info (device loop8): rebuilding free space tree [ 415.245316][T13799] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 415.309272][T13785] BTRFS info (device loop8): disabling free space tree [ 415.324333][T13785] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 415.374882][T13785] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 415.490707][T13825] loop9: detected capacity change from 0 to 128 [ 415.624145][ T4283] ocfs2: Unmounting device (7,3) on (node local) [ 415.804758][T10081] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 415.828919][ T6274] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 416.025259][ T6274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 416.058785][ T6274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.106340][ T6274] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 416.170365][ T6274] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 416.210583][ T6274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.241131][ T6274] usb 3-1: config 0 descriptor?? [ 416.247137][T13838] netlink: 'syz.3.3255': attribute type 11 has an invalid length. [ 416.267694][T13838] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3255'. [ 416.686625][ T6274] plantronics 0003:047F:FFFF.001E: unbalanced collection at end of report description [ 416.709475][ T6274] plantronics 0003:047F:FFFF.001E: parse failed [ 416.715973][ T6274] plantronics: probe of 0003:047F:FFFF.001E failed with error -22 [ 416.888510][ T6274] usb 3-1: USB disconnect, device number 23 [ 417.182734][T13867] usb usb8: usbfs: process 13867 (syz.3.3269) did not claim interface 5 before use [ 417.246048][T13870] usb usb7: usbfs: process 13870 (syz.9.3271) did not claim interface 0 before use [ 417.810100][T13890] loop2: detected capacity change from 0 to 128 [ 417.874679][T13890] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 417.929768][T13895] loop1: detected capacity change from 0 to 256 [ 417.999049][T13890] ext4 filesystem being mounted at /710/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.027001][T13895] FAT-fs (loop1): Directory bread(block 64) failed [ 418.039909][T13895] FAT-fs (loop1): Directory bread(block 65) failed [ 418.060259][ T26] audit: type=1804 audit(1773242454.671:175): pid=13890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3280" name="/newroot/710/file0/bus" dev="loop2" ino=12 res=1 errno=0 [ 418.067638][T13895] FAT-fs (loop1): Directory bread(block 66) failed [ 418.152934][T13895] FAT-fs (loop1): Directory bread(block 67) failed [ 418.165545][ T26] audit: type=1800 audit(1773242454.721:176): pid=13890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3280" name="bus" dev="loop2" ino=12 res=0 errno=0 [ 418.185940][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.202775][T13895] FAT-fs (loop1): Directory bread(block 68) failed [ 418.243682][T13895] FAT-fs (loop1): Directory bread(block 69) failed [ 418.250939][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 418.265740][T13895] FAT-fs (loop1): Directory bread(block 70) failed [ 418.279933][T13895] FAT-fs (loop1): Directory bread(block 71) failed [ 418.378347][T13895] FAT-fs (loop1): Directory bread(block 72) failed [ 418.425381][T13895] FAT-fs (loop1): Directory bread(block 73) failed [ 418.648363][T13913] loop3: detected capacity change from 0 to 128 [ 418.743903][ T26] audit: type=1800 audit(1773242455.361:177): pid=13913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3290" name="file2" dev="loop3" ino=1048852 res=0 errno=0 [ 418.779572][T13913] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 418.788052][T13913] FAT-fs (loop3): Filesystem has been set read-only [ 418.861099][T13919] loop1: detected capacity change from 0 to 64 [ 418.912124][T13913] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 418.972063][T13913] syz.3.3290: attempt to access beyond end of device [ 418.972063][T13913] loop3: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 419.169934][T13928] loop1: detected capacity change from 0 to 128 [ 419.180772][T13929] ucma_write: process 1492 (syz.2.3295) changed security contexts after opening file descriptor, this is not allowed. [ 419.231862][T13928] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 419.303126][T13928] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 419.655413][T13909] loop9: detected capacity change from 0 to 32768 [ 419.857014][T13909] XFS (loop9): Mounting V5 Filesystem [ 420.053329][T13962] loop2: detected capacity change from 0 to 256 [ 420.086573][T13909] XFS (loop9): Ending clean mount [ 420.102275][T13909] XFS (loop9): Quotacheck needed: Please wait. [ 420.159623][T13962] FAT-fs (loop2): Directory bread(block 64) failed [ 420.166236][T13962] FAT-fs (loop2): Directory bread(block 65) failed [ 420.240699][T13962] FAT-fs (loop2): Directory bread(block 66) failed [ 420.247282][T13962] FAT-fs (loop2): Directory bread(block 67) failed [ 420.270676][T13909] XFS (loop9): Quotacheck: Done. [ 420.291548][ T26] audit: type=1800 audit(1773242456.911:178): pid=13909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3287" name="file1" dev="loop9" ino=6150 res=0 errno=0 [ 420.301626][T13966] netlink: 'syz.8.3305': attribute type 2 has an invalid length. [ 420.315743][T13962] FAT-fs (loop2): Directory bread(block 68) failed [ 420.384675][T13962] FAT-fs (loop2): Directory bread(block 69) failed [ 420.407771][T13962] FAT-fs (loop2): Directory bread(block 70) failed [ 420.434445][T13962] FAT-fs (loop2): Directory bread(block 71) failed [ 420.474042][T13962] FAT-fs (loop2): Directory bread(block 72) failed [ 420.504440][T13962] FAT-fs (loop2): Directory bread(block 73) failed [ 420.737300][T10958] XFS (loop9): Unmounting Filesystem [ 420.751966][T13973] loop8: detected capacity change from 0 to 4096 [ 420.894056][T13977] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 421.906533][T13981] loop2: detected capacity change from 0 to 32768 [ 421.973309][T13981] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 422.038923][T13981] JBD2: Ignoring recovery information on journal [ 422.056864][T13979] loop1: detected capacity change from 0 to 32768 [ 422.112321][T13979] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 422.147196][T13979] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 422.201680][T13981] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 422.253819][T13979] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 422.288271][ T4785] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 422.316349][ T4785] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 422.452161][ T4271] ocfs2: Unmounting device (7,2) on (node local) [ 422.570022][ T4785] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 253ms [ 422.658725][ T4785] gfs2: fsid=syz:syz.0: jid=0: Done [ 422.678076][T13979] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 422.691770][T13986] loop8: detected capacity change from 0 to 40427 [ 422.745141][T13986] F2FS-fs (loop8): Invalid SB checksum offset: 0 [ 422.782917][T13986] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 422.817285][T13979] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 422.837472][T13986] F2FS-fs (loop8): invalid crc value [ 422.863019][T13979] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 422.863019][T13979] inode = 12 2341 [ 422.863019][T13979] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 422.888516][T13991] loop3: detected capacity change from 0 to 32768 [ 422.906490][T13986] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 422.998694][ T4785] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 423.007601][T13979] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 423.045998][T13979] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:13979 [syz.1.3310] iterate_dir+0x218/0x560 [ 423.137074][T13979] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 423.166050][T13979] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 423.176826][T13986] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0 [ 423.186764][T13979] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 423.188546][T13986] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 423.221730][ T4785] usb 10-1: unable to get BOS descriptor or descriptor too short [ 423.243454][ T4785] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.268625][T13979] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 423.301492][ T4785] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 423.327427][T13979] gfs2: fsid=syz:syz.0: File system withdrawn [ 423.344445][T13979] CPU: 1 PID: 13979 Comm: syz.1.3310 Not tainted syzkaller #0 [ 423.351972][T13979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 423.362063][T13979] Call Trace: [ 423.365373][T13979] [ 423.368316][T13979] dump_stack_lvl+0x188/0x24e [ 423.373025][T13979] ? kobject_uevent_env+0x35f/0x8a0 [ 423.378340][T13979] ? show_regs_print_info+0x12/0x12 [ 423.383571][T13979] ? load_image+0x400/0x400 [ 423.388104][T13979] ? kobject_uevent_env+0x35f/0x8a0 [ 423.393338][T13979] gfs2_withdraw+0x1398/0x16c0 [ 423.398142][T13979] ? gfs2_lm+0x240/0x240 [ 423.402413][T13979] ? load_image+0x400/0x400 [ 423.406947][T13979] ? gfs2_consist_inode_i+0xf1/0x110 [ 423.412261][T13979] gfs2_dirent_scan+0x525/0x650 [ 423.417143][T13979] ? gfs2_dirent_scan+0x650/0x650 [ 423.422197][T13979] gfs2_dir_read+0x7d1/0x1800 [ 423.426906][T13979] ? inode_dio_wait+0x25a/0x2d0 [ 423.431791][T13979] ? inode_owner_or_capable+0x200/0x200 [ 423.437376][T13979] ? __might_sleep+0xd0/0xd0 [ 423.441999][T13979] ? gfs2_dir_hash_inval+0x70/0x70 [ 423.447148][T13979] ? gfs2_glock_nq+0xcf0/0x14e0 [ 423.452052][T13979] ? gfs2_glock_wait+0x20b/0x2a0 [ 423.457029][T13979] gfs2_readdir+0x169/0x1d0 [ 423.461612][T13979] ? gfs2_fallocate+0x4b0/0x4b0 [ 423.465151][T14023] exfat: Deprecated parameter 'utf8' [ 423.466483][T13979] ? iterate_dir+0x218/0x560 [ 423.476429][T13979] ? iterate_dir+0x10d/0x560 [ 423.481059][T13979] ? down_read_killable+0x1cc/0x340 [ 423.486298][T13979] ? fsnotify_perm+0x248/0x550 [ 423.491101][T13979] iterate_dir+0x218/0x560 [ 423.495543][T13979] ? gfs2_fallocate+0x4b0/0x4b0 [ 423.499518][ T5729] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 423.500500][T13979] __se_sys_getdents64+0xf2/0x270 [ 423.512992][T13979] ? __x64_sys_getdents64+0x80/0x80 [ 423.518217][T13979] ? filldir+0x700/0x700 [ 423.522492][T13979] ? lockdep_hardirqs_on+0x94/0x140 [ 423.527717][T13979] do_syscall_64+0x4c/0xa0 [ 423.529387][T14023] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 423.532138][T13979] ? clear_bhb_loop+0x60/0xb0 [ 423.532167][T13979] ? clear_bhb_loop+0x60/0xb0 [ 423.532197][T13979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 423.532217][T13979] RIP: 0033:0x7fce0dd9c799 [ 423.532251][T13979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.532268][T13979] RSP: 002b:00007fce0ecf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 423.532291][T13979] RAX: ffffffffffffffda RBX: 00007fce0e015fa0 RCX: 00007fce0dd9c799 [ 423.532307][T13979] RDX: 0000000000000029 RSI: 9999999999999999 RDI: 0000000000000004 [ 423.532321][T13979] RBP: 00007fce0de32c99 R08: 0000000000000000 R09: 0000000000000000 [ 423.532335][T13979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.532348][T13979] R13: 00007fce0e016038 R14: 00007fce0e015fa0 R15: 00007ffd6ea84aa8 [ 423.532378][T13979] [ 423.542584][ T4785] usb 10-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 423.742140][ T5729] usb 4-1: Using ep0 maxpacket: 32 [ 423.752148][ T5729] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 423.756607][ T4785] usb 10-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 423.769698][ T4785] usb 10-1: Product: syz [ 423.773981][ T4785] usb 10-1: Manufacturer: syz [ 423.778719][ T4785] usb 10-1: SerialNumber: syz [ 423.798492][ T5729] usb 4-1: config 0 has no interface number 0 [ 423.828992][ T5729] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 423.878682][ T5729] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 423.955093][ T5729] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 423.964610][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.972801][ T5729] usb 4-1: Product: syz [ 423.987236][ T5729] usb 4-1: Manufacturer: syz [ 423.992016][ T5729] usb 4-1: SerialNumber: syz [ 424.008544][ T5729] usb 4-1: config 0 descriptor?? [ 424.085530][ T4785] snd-usb-audio: probe of 10-1:1.0 failed with error -22 [ 424.151508][ T4675] udevd[4675]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 424.179616][ T4785] usb 10-1: USB disconnect, device number 10 [ 424.433533][ T5729] radio-si470x 4-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 424.443929][ T5729] radio-si470x 4-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 424.634595][ T5729] radio-si470x 4-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 424.655930][ T5729] radio-si470x 4-1:0.35: si470x_get_scratch: si470x_get_report returned -71 [ 424.726487][ T5729] radio-si470x: probe of 4-1:0.35 failed with error -5 [ 424.771247][T14033] set_capacity_and_notify: 1 callbacks suppressed [ 424.771264][T14033] loop1: detected capacity change from 0 to 8192 [ 424.789183][ T5729] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 424.817707][ T5729] usb 4-1: USB disconnect, device number 7 [ 424.889898][T14033] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 424.899263][T14026] loop2: detected capacity change from 0 to 32768 [ 424.924122][T14026] (syz.2.3321,14026,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 424.966717][T14033] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 424.976861][T14033] REISERFS (device loop1): using ordered data mode [ 425.007000][T14026] (syz.2.3321,14026,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 425.018694][T14033] reiserfs: using flush barriers [ 425.029073][T14033] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 425.076401][T14033] REISERFS (device loop1): checking transaction log (loop1) [ 425.136832][T14026] JBD2: Ignoring recovery information on journal [ 425.188778][ T6274] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 425.301358][T14026] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 425.354655][T14033] REISERFS (device loop1): Using tea hash to sort names [ 425.385380][ T6274] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.413077][T14033] REISERFS warning (device loop1): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 425.420047][ T6274] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.440489][T14026] syz.2.3321: attempt to access beyond end of device [ 425.440489][T14026] loop2: rw=2051, sector=28680, nr_sectors = 28664 limit=32768 [ 425.477089][T14033] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 425.508019][ T6274] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.551575][T14026] (syz.2.3321,14026,1):ocfs2_trim_group:7510 ERROR: status = -5 [ 425.579094][T14026] (syz.2.3321,14026,1):ocfs2_trim_mainbm:7621 ERROR: status = -5 [ 425.599005][ T6274] usb 10-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 425.608201][ T6274] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.698751][ T6274] usb 10-1: config 0 descriptor?? [ 425.808017][ T4271] ocfs2: Unmounting device (7,2) on (node local) [ 426.112814][ T6274] hid-rmi 0003:0461:4E72.001F: unbalanced collection at end of report description [ 426.154140][ T6274] hid-rmi 0003:0461:4E72.001F: parse failed [ 426.175165][ T6274] hid-rmi: probe of 0003:0461:4E72.001F failed with error -22 [ 426.317166][ T6274] usb 10-1: USB disconnect, device number 11 [ 426.451750][T14056] loop8: detected capacity change from 0 to 32768 [ 426.509128][T14056] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.3330 (14056) [ 426.588909][T14056] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 426.630777][T14056] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 426.648915][T14056] BTRFS info (device loop8): enabling auto defrag [ 426.655415][T14056] BTRFS info (device loop8): use no compression [ 426.678866][T14056] BTRFS info (device loop8): force clearing of disk cache [ 426.687129][T14056] BTRFS info (device loop8): max_inline at 4096 [ 426.709727][T14056] BTRFS info (device loop8): disabling free space tree [ 426.912357][T14060] loop3: detected capacity change from 0 to 40427 [ 426.966128][T14056] BTRFS info (device loop8): enabling ssd optimizations [ 426.984754][T14060] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 427.013495][T14056] BTRFS info (device loop8): rebuilding free space tree [ 427.038549][T14060] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 427.066689][T14105] netlink: 'syz.9.3339': attribute type 16 has an invalid length. [ 427.094396][T14056] BTRFS info (device loop8): disabling free space tree [ 427.115417][T14105] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3339'. [ 427.124856][T14056] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 427.145971][T14060] F2FS-fs (loop3): Found nat_bits in checkpoint [ 427.184112][T14056] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 427.196235][T14071] loop2: detected capacity change from 0 to 32768 [ 427.345218][T14071] XFS (loop2): Mounting V5 Filesystem [ 427.367761][T14060] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 427.388779][T14060] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 427.415235][T14120] loop1: detected capacity change from 0 to 2048 [ 427.502855][T14071] XFS (loop2): Ending clean mount [ 427.551893][T14120] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 427.574420][T10081] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 427.608725][T14120] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.202660][T14131] loop3: detected capacity change from 0 to 256 [ 428.237765][T14114] loop9: detected capacity change from 0 to 32768 [ 428.279186][T14131] FAT-fs (loop3): Directory bread(block 64) failed [ 428.285911][T14131] FAT-fs (loop3): Directory bread(block 65) failed [ 428.309618][ T4271] XFS (loop2): Unmounting Filesystem [ 428.317422][T11000] EXT4-fs (loop1): unmounting filesystem. [ 428.324743][T14131] FAT-fs (loop3): Directory bread(block 66) failed [ 428.362798][T14131] FAT-fs (loop3): Directory bread(block 67) failed [ 428.378459][T14131] FAT-fs (loop3): Directory bread(block 68) failed [ 428.391932][T14131] FAT-fs (loop3): Directory bread(block 69) failed [ 428.407588][T14131] FAT-fs (loop3): Directory bread(block 70) failed [ 428.431986][T14141] loop8: detected capacity change from 0 to 64 [ 428.449458][T14131] FAT-fs (loop3): Directory bread(block 71) failed [ 428.463549][T14114] XFS (loop9): Mounting V5 Filesystem [ 428.490329][T14131] FAT-fs (loop3): Directory bread(block 72) failed [ 428.496923][T14131] FAT-fs (loop3): Directory bread(block 73) failed [ 428.660525][T14114] XFS (loop9): Ending clean mount [ 428.796840][T10958] XFS (loop9): Unmounting Filesystem [ 428.871337][T14152] loop3: detected capacity change from 0 to 64 [ 429.182769][T14158] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3350'. [ 429.451987][T14167] netlink: 'syz.2.3345': attribute type 12 has an invalid length. [ 429.501590][T14167] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3345'. [ 429.805897][T14179] loop2: detected capacity change from 0 to 256 [ 429.850363][T14179] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 429.866150][T14183] loop9: detected capacity change from 0 to 512 [ 429.928963][ T4317] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 429.964393][T14183] EXT4-fs (loop9): 1 truncate cleaned up [ 429.991768][T14183] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 430.140159][ T4317] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.170851][ T4317] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.201481][ T4317] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.236881][ T4317] usb 9-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 430.259190][ T4317] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.293577][ T4317] usb 9-1: config 0 descriptor?? [ 430.300818][T10958] EXT4-fs (loop9): unmounting filesystem. [ 430.771672][ T4317] wacom 0003:056A:0010.0020: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 430.811848][ T4317] wacom 0003:056A:0010.0020: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.8-1/input0 [ 430.834289][ T4317] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:056A:0010.0020/input/input20 [ 430.947123][T14185] loop3: detected capacity change from 0 to 32768 [ 430.991882][ T4317] usb 9-1: USB disconnect, device number 11 [ 431.028475][T14185] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 431.140270][T14185] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 431.235509][T14219] fido_id[14219]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 431.443941][ T4283] ocfs2: Unmounting device (7,3) on (node local) [ 432.161652][T14255] vivid-002: disconnect [ 432.167642][T14254] vivid-002: reconnect [ 432.255738][T14262] loop3: detected capacity change from 0 to 256 [ 432.258161][T14260] loop1: detected capacity change from 0 to 512 [ 432.338179][T14260] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.3388: inode has both inline data and extents flags [ 432.461812][T14260] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3388: couldn't read orphan inode 15 (err -117) [ 432.524121][T14244] loop2: detected capacity change from 0 to 32768 [ 432.554225][T14260] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 432.563711][T14244] (syz.2.3381,14244,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 432.661273][T14244] (syz.2.3381,14244,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 432.734794][T11000] EXT4-fs (loop1): unmounting filesystem. [ 432.761514][T14272] loop3: detected capacity change from 0 to 256 [ 432.792616][T14244] JBD2: Ignoring recovery information on journal [ 432.829804][T14272] exfat: Deprecated parameter 'utf8' [ 432.864431][T14272] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 432.997968][T14244] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 433.033493][T14276] loop1: detected capacity change from 0 to 1024 [ 433.075262][ T9] ocfs2: Finishing quota recovery on device (7,2) for slot 0 [ 433.127091][T14276] hfsplus: bad catalog entry type [ 433.288736][ T4271] ocfs2: Unmounting device (7,2) on (node local) [ 433.371355][ T41] hfsplus: b-tree write err: -5, ino 25 [ 433.377110][ T41] hfsplus: b-tree write err: -5, ino 4 [ 433.414748][ T41] hfsplus: b-tree write err: -5, ino 2 [ 433.647498][T14261] loop9: detected capacity change from 0 to 32768 [ 433.808405][T14304] tipc: Started in network mode [ 433.832948][T14304] tipc: Node identity fe80000000000000000000000000002, cluster identity 4711 [ 433.868841][ T6274] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 433.888486][T14304] tipc: Enabled bearer , priority 9 [ 434.082753][ T6274] usb 4-1: Using ep0 maxpacket: 8 [ 434.087549][T14310] loop8: detected capacity change from 0 to 64 [ 434.112440][ T6274] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.163322][ T6274] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 434.205938][ T6274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.254685][ T6274] usb 4-1: config 0 descriptor?? [ 434.275464][ T6274] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 434.375031][ T41] kworker/u4:2: attempt to access beyond end of device [ 434.375031][ T41] loop8: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 434.437611][ T41] buffer_io_error: 25 callbacks suppressed [ 434.437628][ T41] Buffer I/O error on dev loop8, logical block 134217734, lost async page write [ 434.582882][T14320] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 434.668352][T14320] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 434.698872][T14320] exFAT-fs (loop2): Filesystem has been set read-only [ 434.881969][ T6274] gspca_vc032x: reg_r err -71 [ 434.892080][ T6274] vc032x: probe of 4-1:0.0 failed with error -71 [ 434.934183][ T6274] usb 4-1: USB disconnect, device number 8 [ 434.987371][T14338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3417'. [ 435.010489][ T32] tipc: Node number set to 4269801504 [ 435.225891][T14346] set_capacity_and_notify: 1 callbacks suppressed [ 435.225910][T14346] loop8: detected capacity change from 0 to 1024 [ 435.265586][T14346] hfsplus: bad catalog entry type [ 435.612595][ T56] hfsplus: b-tree write err: -5, ino 25 [ 435.622609][ T56] hfsplus: b-tree write err: -5, ino 4 [ 435.644463][ T56] hfsplus: b-tree write err: -5, ino 2 [ 435.736418][T14333] loop2: detected capacity change from 0 to 32768 [ 435.857698][T14360] device bond_slave_0 entered promiscuous mode [ 435.864561][T14360] device bond_slave_1 entered promiscuous mode [ 435.884821][T14333] XFS (loop2): Mounting V5 Filesystem [ 435.907066][T14360] device macsec1 entered promiscuous mode [ 435.941882][T14360] device bond0 entered promiscuous mode [ 435.980210][T14333] XFS (loop2): Ending clean mount [ 435.994862][T14360] device bond0 left promiscuous mode [ 436.040933][T14360] device bond_slave_0 left promiscuous mode [ 436.046969][T14360] device bond_slave_1 left promiscuous mode [ 436.057997][ T6274] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 436.157082][ T4271] XFS (loop2): Unmounting Filesystem [ 436.258556][ T6274] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 436.283202][ T6274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.321204][ T6274] usb 4-1: Product: syz [ 436.345810][ T6274] usb 4-1: Manufacturer: syz [ 436.361934][ T6274] usb 4-1: SerialNumber: syz [ 436.365108][T14379] loop9: detected capacity change from 0 to 256 [ 436.403635][ T6274] usb 4-1: config 0 descriptor?? [ 436.444773][ T6274] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 436.481555][T14379] FAT-fs (loop9): Directory bread(block 64) failed [ 436.498568][ T6274] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 436.514275][T14379] FAT-fs (loop9): Directory bread(block 65) failed [ 436.545051][ T6274] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 436.569194][T14379] FAT-fs (loop9): Directory bread(block 66) failed [ 436.599953][ T6274] usb 4-1: media controller created [ 436.608959][T14379] FAT-fs (loop9): Directory bread(block 67) failed [ 436.645786][T14387] loop8: detected capacity change from 0 to 256 [ 436.647049][T14379] FAT-fs (loop9): Directory bread(block 68) failed [ 436.694031][ T6274] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 436.699792][T14387] exfat: Deprecated parameter 'utf8' [ 436.722594][T14379] FAT-fs (loop9): Directory bread(block 69) failed [ 436.734336][T14387] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 436.764124][T14379] FAT-fs (loop9): Directory bread(block 70) failed [ 436.797859][T14379] FAT-fs (loop9): Directory bread(block 71) failed [ 436.835402][T14379] FAT-fs (loop9): Directory bread(block 72) failed [ 436.855530][T14379] FAT-fs (loop9): Directory bread(block 73) failed [ 437.073690][ T6274] DVB: Unable to find symbol mt352_attach() [ 437.129207][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 437.383155][ T6274] DVB: Unable to find symbol nxt6000_attach() [ 437.395389][ T6274] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 437.433806][ T6274] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23 [ 437.533940][ T6274] dvb-usb: schedule remote query interval to 1000 msecs. [ 437.577214][ T6274] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 437.624940][ T6274] dvb-usb: bulk message failed: -22 (7/0) [ 437.668149][ T6274] dvb-usb: bulk message failed: -22 (7/0) [ 437.689385][ T26] audit: type=1326 audit(1773242474.311:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14422 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5539c799 code=0x7ffc0000 [ 437.739038][ T6274] usb 4-1: USB disconnect, device number 9 [ 437.785524][ T26] audit: type=1326 audit(1773242474.311:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14422 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5539c799 code=0x7ffc0000 [ 437.871659][ T6274] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 437.958707][ T26] audit: type=1326 audit(1773242474.341:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14422 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f7c5539c799 code=0x7ffc0000 [ 438.079028][ T26] audit: type=1326 audit(1773242474.341:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14422 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5539c799 code=0x7ffc0000 [ 438.150501][ T26] audit: type=1326 audit(1773242474.341:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14422 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5539c799 code=0x7ffc0000 [ 438.224449][ T26] audit: type=1326 audit(1773242474.351:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14422 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f7c5539c799 code=0x7ffc0000 [ 438.332837][ T26] audit: type=1326 audit(1773242474.351:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14422 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5539c799 code=0x7ffc0000 [ 438.380901][T14449] loop8: detected capacity change from 0 to 1024 [ 438.390683][ T26] audit: type=1326 audit(1773242474.351:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14422 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5539c799 code=0x7ffc0000 [ 438.479014][ T6274] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 438.628055][T11400] hfsplus: b-tree write err: -5, ino 25 [ 438.655849][T11400] hfsplus: b-tree write err: -5, ino 4 [ 438.676720][T11400] hfsplus: b-tree write err: -5, ino 2 [ 438.688104][ T6274] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.744504][ T6274] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 438.773873][ T6274] usb 4-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 438.784827][ T6274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.799013][ T5718] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 438.822968][ T6274] usb 4-1: config 0 descriptor?? [ 438.981101][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.010363][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.039715][T14439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.057850][ T5718] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 439.075898][ T5718] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 439.085691][T14439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.105875][ T4288] Bluetooth: hci4: adv larger than maximum supported [ 439.105973][ T4288] Bluetooth: hci4: Malformed LE Event: 0x0d [ 439.106643][ T6274] usb 4-1: string descriptor 0 read error: -71 [ 439.143193][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.183499][ T6274] usb 4-1: USB disconnect, device number 10 [ 439.221356][ T5718] usb 2-1: config 0 descriptor?? [ 439.678044][T14480] loop8: detected capacity change from 0 to 4096 [ 439.684025][ T5718] acrux 0003:1A34:0802.0021: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 439.703037][ T5718] acrux 0003:1A34:0802.0021: no inputs found [ 439.709989][ T5718] acrux 0003:1A34:0802.0021: Failed to enable force feedback support, error: -19 [ 439.884992][ T6274] usb 2-1: USB disconnect, device number 14 [ 439.888685][ T7324] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 440.108806][ T7324] usb 10-1: Using ep0 maxpacket: 8 [ 440.116595][ T7324] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 440.145121][T14488] fido_id[14488]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 440.181607][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.187953][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.193095][ T7324] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 440.234766][ T7324] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 440.296486][ T7324] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 440.307856][T14500] loop8: detected capacity change from 0 to 1024 [ 440.320032][ T7324] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 440.334737][ T7324] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 440.346953][ T7324] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.393637][ T7324] usb 10-1: config 0 descriptor?? [ 440.419013][T14482] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 440.428998][ T4347] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 440.493327][ T1066] hfsplus: b-tree write err: -5, ino 8 [ 440.628922][ T6274] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 440.644101][ T4347] usb 3-1: Using ep0 maxpacket: 32 [ 440.668132][ T4347] usb 3-1: unable to get BOS descriptor or descriptor too short [ 440.695302][ T4347] usb 3-1: config 6 has an invalid interface number: 3 but max is 2 [ 440.709481][ T4286] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 440.716933][ T4286] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 440.723968][ T4286] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 440.731634][ T4286] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 440.739227][ T4347] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 440.749568][ T4347] usb 3-1: config 6 has no interface number 1 [ 440.755693][ T4347] usb 3-1: too many endpoints for config 6 interface 0 altsetting 128: 255, using maximum allowed: 30 [ 440.767547][ T4347] usb 3-1: config 6 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 440.781116][ T4347] usb 3-1: config 6 interface 2 has no altsetting 0 [ 440.787811][ T4347] usb 3-1: config 6 interface 0 has no altsetting 0 [ 440.797093][ T4347] usb 3-1: New USB device found, idVendor=1410, idProduct=a001, bcdDevice=ec.5b [ 440.806403][ T4347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.814756][ T4347] usb 3-1: Product: syz [ 440.819418][ T4347] usb 3-1: Manufacturer: syz [ 440.824034][ T4347] usb 3-1: SerialNumber: syz [ 440.851852][ T6274] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.860484][T14507] loop8: detected capacity change from 0 to 8192 [ 440.866495][ T6274] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 440.878323][ T6274] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 440.889983][ T6274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.911939][ T32] usb 10-1: USB disconnect, device number 12 [ 440.918029][ T4288] Bluetooth: hci0: Opcode 0x0c03 failed: -71 [ 440.924665][ T6274] usb 4-1: config 0 descriptor?? [ 440.953326][ T6274] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 441.008736][ T6274] dvb-usb: bulk message failed: -22 (3/0) [ 441.049504][ T4347] usb 3-1: selecting invalid altsetting 0 [ 441.059250][ T6274] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 441.067998][T14513] netlink: 'syz.1.3475': attribute type 15 has an invalid length. [ 441.098173][ T4347] usb 3-1: Could not set interface, error -22 [ 441.126285][ T6274] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 441.141344][ T4347] usb 3-1: selecting invalid altsetting 1 [ 441.149131][ T6274] usb 4-1: media controller created [ 441.152878][T14503] dvb-usb: bulk message failed: -22 (4/0) [ 441.165469][ T6274] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 441.174483][ T4347] usb 3-1: Could not set interface, error -22 [ 441.207113][ T4347] usb 3-1: USB disconnect, device number 24 [ 441.218809][ T6274] dvb-usb: bulk message failed: -22 (6/0) [ 441.253535][ T6274] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 441.301573][ T6274] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24 [ 441.324720][ T6274] dvb-usb: schedule remote query interval to 150 msecs. [ 441.343311][ T6274] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 441.374651][ T6274] usb 4-1: USB disconnect, device number 11 [ 441.472470][ T6274] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 441.561172][ T32] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 441.768731][ T32] usb 9-1: Using ep0 maxpacket: 32 [ 441.783230][ T32] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 441.820975][ T32] usb 9-1: config 0 has no interface number 0 [ 441.869499][ T32] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 441.894781][ T32] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.918348][ T32] usb 9-1: Product: syz [ 441.919674][T14536] loop1: detected capacity change from 0 to 1024 [ 441.931242][ T32] usb 9-1: Manufacturer: syz [ 441.948704][ T32] usb 9-1: SerialNumber: syz [ 441.953826][T14536] EXT4-fs: Ignoring removed oldalloc option [ 441.971955][ T32] usb 9-1: config 0 descriptor?? [ 441.984249][ T32] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 442.020629][T14536] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 442.128275][T14536] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 442.187982][ T32] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 442.241074][T14529] loop2: detected capacity change from 0 to 32768 [ 442.261566][ T32] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 442.464338][T11000] EXT4-fs (loop1): unmounting filesystem. [ 442.590796][ C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 442.599308][ T32] usb 9-1: USB disconnect, device number 12 [ 442.609544][ T32] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 442.671855][ T32] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 442.717350][ T32] quatech2 9-1:0.51: device disconnected [ 442.757097][T14555] loop1: detected capacity change from 0 to 1024 [ 442.843939][T14555] EXT4-fs: Ignoring removed bh option [ 442.890081][T14555] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 442.990733][T14555] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 443.096652][T14565] loop9: detected capacity change from 0 to 128 [ 443.153079][T14565] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 443.166118][T11000] EXT4-fs (loop1): unmounting filesystem. [ 443.208553][T14565] hpfs: filesystem error: improperly stopped [ 443.285135][T14565] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 443.322777][T14565] hpfs: You really don't want any checks? You are crazy... [ 443.340726][T14565] hpfs: hpfs_map_sector(): read error [ 443.356379][T14565] hpfs: code page support is disabled [ 443.397502][T14565] hpfs: hpfs_map_4sectors(): unaligned read [ 443.416495][T14565] hpfs: hpfs_map_4sectors(): unaligned read [ 443.435287][T14565] hpfs: filesystem error: unable to find root dir [ 443.596628][T14549] loop3: detected capacity change from 0 to 32768 [ 443.654640][T14549] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.3485 (14549) [ 443.776365][T14549] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 443.790558][T14580] netlink: 'syz.9.3496': attribute type 16 has an invalid length. [ 443.819103][T14580] netlink: 'syz.9.3496': attribute type 3 has an invalid length. [ 443.828301][T14549] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 443.850806][T14580] netlink: 64066 bytes leftover after parsing attributes in process `syz.9.3496'. [ 443.866324][T14549] BTRFS info (device loop3): using free space tree [ 444.040006][T14587] loop8: detected capacity change from 0 to 2048 [ 444.086878][T14587] EXT4-fs: Ignoring removed oldalloc option [ 444.157839][T14549] BTRFS info (device loop3): enabling ssd optimizations [ 444.179932][T14587] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c01c, mo2=0002] [ 444.213342][T14587] System zones: 0-7 [ 444.241542][T14587] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 444.285920][T14587] EXT4-fs error (device loop8): ext4_ext_precache:627: inode #2: comm syz.8.3498: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 444.352602][T14610] loop9: detected capacity change from 0 to 1024 [ 444.366610][ T4283] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 444.394574][T14610] EXT4-fs: Ignoring removed mblk_io_submit option [ 444.449457][T14610] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 444.516269][T14610] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 444.637547][T14567] loop2: detected capacity change from 0 to 40427 [ 444.747425][T14567] F2FS-fs (loop2): invalid crc value [ 444.826202][T14567] F2FS-fs (loop2): Found nat_bits in checkpoint [ 444.875514][T14572] XFS (loop1): Mounting V5 Filesystem [ 444.998538][T14572] XFS (loop1): Ending clean mount [ 445.029757][T10958] EXT4-fs (loop9): unmounting filesystem. [ 445.038337][T10081] EXT4-fs (loop8): unmounting filesystem. [ 445.071864][T14572] XFS (loop1): Quotacheck needed: Please wait. [ 445.107005][T14567] F2FS-fs (loop2): Start checkpoint disabled! [ 445.186631][T14567] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 445.276270][T14572] XFS (loop1): Quotacheck: Done. [ 445.569442][T11000] XFS (loop1): Unmounting Filesystem [ 445.597411][T14640] set_capacity_and_notify: 1 callbacks suppressed [ 445.597427][T14640] loop3: detected capacity change from 0 to 1024 [ 445.639434][T14640] EXT4-fs: Ignoring removed orlov option [ 445.668682][ T7324] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 445.702428][T14640] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 445.752745][ T46] kworker/u4:3: attempt to access beyond end of device [ 445.752745][ T46] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 445.879491][ T7324] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 445.907000][ T7324] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.946649][ T7324] usb 10-1: config 0 descriptor?? [ 446.019608][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 446.180860][ T7324] [drm] vendor descriptor length:6 data:06 5f 01 04 50 78 00 00 00 00 00 [ 446.215898][ T7324] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 446.216727][T14663] loop8: detected capacity change from 0 to 256 [ 446.345614][T14663] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 446.381865][ T7324] [drm:udl_init] *ERROR* Selecting channel failed [ 446.393872][T14663] FAT-fs (loop8): Filesystem has been set read-only [ 446.455628][ T7324] [drm] Initialized udl 0.0.1 20120220 for 10-1:0.0 on minor 2 [ 446.461748][T14663] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 446.499580][ T7324] [drm] Initialized udl on minor 2 [ 446.536440][ T7324] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 446.583599][ T7324] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 446.659405][ T7324] usb 10-1: USB disconnect, device number 13 [ 446.701483][ T32] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 446.766290][ T32] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 446.803293][ T32] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 447.152456][ T4785] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 447.295065][T14690] loop8: detected capacity change from 0 to 1024 [ 447.380348][ T4785] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 447.388877][ T4785] usb 4-1: config 0 has no interface number 0 [ 447.395755][ T4785] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 447.405716][ T4785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.421876][ T4785] usb 4-1: config 0 descriptor?? [ 447.450946][ T4785] usb 4-1: selecting invalid altsetting 1 [ 447.456821][ T4785] dvb_ttusb_budget: ttusb_init_controller: error [ 447.477669][ T4785] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 447.753217][ T4785] DVB: Unable to find symbol cx22700_attach() [ 447.856206][T14701] loop8: detected capacity change from 0 to 64 [ 447.903489][T14701] BFS-fs: bfs_fill_super(): loop8 is unclean, continuing [ 448.001952][ T4785] DVB: Unable to find symbol tda10046_attach() [ 448.028686][ T4785] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 448.057543][ T4785] usb 4-1: USB disconnect, device number 12 [ 448.290151][T14687] loop9: detected capacity change from 0 to 32768 [ 448.305197][T14687] [ 448.305197][T14687] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 448.305197][T14687] [ 448.363615][T14687] read_mapping_page failed! [ 448.398274][T14687] ERROR: (device loop9): txCommit: [ 448.398274][T14687] [ 448.511922][T10958] [ 448.511922][T10958] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 448.511922][T10958] [ 448.516128][T10958] [ 448.516128][T10958] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 448.516128][T10958] [ 449.113020][T14729] loop3: detected capacity change from 0 to 4096 [ 449.213388][T14729] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 449.267267][T14729] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 449.362334][T14729] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 449.468332][T14729] ntfs: volume version 3.1. [ 449.933596][ T4283] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 450.184798][T14768] netlink: 'syz.8.3546': attribute type 9 has an invalid length. [ 450.320194][T14740] loop1: detected capacity change from 0 to 32768 [ 450.466556][T14744] loop9: detected capacity change from 0 to 32768 [ 451.454920][T14765] loop2: detected capacity change from 0 to 32768 [ 451.585278][T14765] XFS (loop2): Mounting V5 Filesystem [ 451.693163][T14765] XFS (loop2): Ending clean mount [ 451.704436][T14765] XFS (loop2): Quotacheck needed: Please wait. [ 451.840824][T14765] XFS (loop2): Quotacheck: Done. [ 451.964394][T14780] loop8: detected capacity change from 0 to 32768 [ 452.036771][ T4271] XFS (loop2): Unmounting Filesystem [ 452.329841][T14837] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3565'. [ 452.348861][T14837] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3565'. [ 452.368628][T14792] loop3: detected capacity change from 0 to 40427 [ 452.402469][T14792] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 452.437227][T14792] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 452.485559][T14792] F2FS-fs (loop3): Found nat_bits in checkpoint [ 452.597938][T14792] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 452.621201][T14792] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 452.862863][ T4283] syz-executor: attempt to access beyond end of device [ 452.862863][ T4283] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 453.910123][T14882] loop3: detected capacity change from 0 to 256 [ 454.069543][ T26] audit: type=1326 audit(1773242490.691:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14886 comm="syz.8.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca359c799 code=0x7ffc0000 [ 454.113832][T14890] device veth1_macvtap left promiscuous mode [ 454.196036][T14891] device veth1_macvtap entered promiscuous mode [ 454.241309][T11400] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 454.253196][ T26] audit: type=1326 audit(1773242490.721:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14886 comm="syz.8.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7efca359c799 code=0x7ffc0000 [ 454.309140][T14893] loop1: detected capacity change from 0 to 1024 [ 454.418915][ T26] audit: type=1326 audit(1773242490.721:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14886 comm="syz.8.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca359c799 code=0x7ffc0000 [ 454.552762][ T26] audit: type=1326 audit(1773242490.721:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14886 comm="syz.8.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca359c799 code=0x7ffc0000 [ 454.559085][T14901] loop2: detected capacity change from 0 to 64 [ 454.662907][ T26] audit: type=1326 audit(1773242490.721:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14886 comm="syz.8.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7efca359c799 code=0x7ffc0000 [ 454.696380][T14904] sp0: Synchronizing with TNC [ 454.753545][T14902] [U] è [ 454.815492][ T26] audit: type=1326 audit(1773242490.781:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14886 comm="syz.8.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca359c799 code=0x7ffc0000 [ 454.942311][ T26] audit: type=1326 audit(1773242490.781:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14886 comm="syz.8.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca359c799 code=0x7ffc0000 [ 455.057658][T14914] loop2: detected capacity change from 0 to 1024 [ 455.173357][T14879] loop9: detected capacity change from 0 to 40427 [ 455.196696][T14914] EXT4-fs: Ignoring removed orlov option [ 455.233313][T14879] F2FS-fs (loop9): invalid crc value [ 455.272286][T14879] F2FS-fs (loop9): Found nat_bits in checkpoint [ 455.328043][T14914] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 455.458945][T14879] F2FS-fs (loop9): Start checkpoint disabled! [ 455.507703][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 455.513834][T14879] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 455.676978][T14899] loop8: detected capacity change from 0 to 32768 [ 455.725770][T14899] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 scanned by syz.8.3587 (14899) [ 455.870520][ T4331] kworker/u4:7: attempt to access beyond end of device [ 455.870520][ T4331] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 455.917337][T14899] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 455.991407][T14899] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 456.047824][T14899] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 456.062557][ T26] audit: type=1326 audit(1773242492.681:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14945 comm="syz.2.3603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939499c799 code=0x7ffc0000 [ 456.098993][T14899] BTRFS info (device loop8): use zstd compression, level 3 [ 456.165957][ T26] audit: type=1326 audit(1773242492.721:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14945 comm="syz.2.3603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939499c799 code=0x7ffc0000 [ 456.172262][T14899] BTRFS info (device loop8): using free space tree [ 456.292837][ T26] audit: type=1326 audit(1773242492.721:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14945 comm="syz.2.3603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f939499c799 code=0x7ffc0000 [ 456.468447][T14967] loop3: detected capacity change from 0 to 512 [ 456.476553][T14967] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 456.539119][ T26] audit: type=1326 audit(1773242492.721:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14945 comm="syz.2.3603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939499c799 code=0x7ffc0000 [ 456.570273][T14967] EXT4-fs error (device loop3): ext4_iget_extra_inode:4756: inode #15: comm syz.3.3607: corrupted in-inode xattr [ 456.582443][T14899] BTRFS info (device loop8): enabling ssd optimizations [ 456.600632][T14967] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3607: couldn't read orphan inode 15 (err -117) [ 456.718941][T14967] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 456.757206][T14967] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1111: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 456.930253][T10081] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 456.951902][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 457.710932][T15009] loop3: detected capacity change from 0 to 2048 [ 457.901223][T15017] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 458.134874][T15023] loop1: detected capacity change from 0 to 128 [ 458.213177][T15023] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 458.266596][T15023] hpfs: filesystem error: improperly stopped [ 458.304982][T14990] loop2: detected capacity change from 0 to 32768 [ 458.314670][T15023] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 458.341594][T15023] hpfs: You really don't want any checks? You are crazy... [ 458.359087][T15023] hpfs: hpfs_map_sector(): read error [ 458.379422][T15023] hpfs: code page support is disabled [ 458.422285][T15023] hpfs: hpfs_map_4sectors(): unaligned read [ 458.461091][T14990] XFS (loop2): Mounting V5 Filesystem [ 458.477260][T15023] hpfs: hpfs_map_4sectors(): unaligned read [ 458.542847][T15023] hpfs: filesystem error: unable to find root dir [ 458.620422][T14990] XFS (loop2): Ending clean mount [ 458.679300][T15025] loop9: detected capacity change from 0 to 40427 [ 458.707659][T15025] F2FS-fs (loop9): build fault injection attr: rate: 690, type: 0x3ffff [ 458.778561][T15025] F2FS-fs (loop9): invalid crc value [ 458.825006][T15025] F2FS-fs (loop9): Found nat_bits in checkpoint [ 458.879572][ T4271] XFS (loop2): Unmounting Filesystem [ 459.022666][T15025] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 459.223397][T10958] syz-executor: attempt to access beyond end of device [ 459.223397][T10958] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 459.396121][T15058] loop1: detected capacity change from 0 to 4096 [ 459.433897][T15058] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 460.179519][T15076] loop9: detected capacity change from 0 to 16 [ 460.215054][T15076] erofs: (device loop9): mounted with root inode @ nid 36. [ 460.234768][T15056] loop8: detected capacity change from 0 to 32768 [ 460.292282][T15080] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 460.315134][T15056] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 460.326540][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 320 @ nid 36 [ 460.329054][T15080] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 460.343362][T15080] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 460.350068][T15080] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 460.356781][T15080] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 460.364298][T15080] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 460.370901][T15080] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 460.377606][T15080] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 460.384341][T15080] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 460.387073][T15056] JBD2: Ignoring recovery information on journal [ 460.391415][T15080] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 460.404641][T15080] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 460.411485][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 299 @ nid 36 [ 460.421193][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 298 @ nid 36 [ 460.430496][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 297 @ nid 36 [ 460.439798][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 296 @ nid 36 [ 460.449411][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 288 @ nid 36 [ 460.461048][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 280 @ nid 36 [ 460.474439][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 186 @ nid 36 [ 460.492037][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 185 @ nid 36 [ 460.528790][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 184 @ nid 36 [ 460.574559][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 155 @ nid 36 [ 460.601549][T15056] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 460.636460][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 154 @ nid 36 [ 460.676338][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 460.676352][ T26] audit: type=1800 audit(1773242497.291:203): pid=15056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3631" name="file2" dev="loop8" ino=17058 res=0 errno=0 [ 460.728942][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 153 @ nid 36 [ 460.768744][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 152 @ nid 36 [ 460.815822][T10081] ocfs2: Unmounting device (7,8) on (node local) [ 460.822246][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 139 @ nid 36 [ 460.822326][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 138 @ nid 36 [ 460.822345][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 137 @ nid 36 [ 460.822364][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 136 @ nid 36 [ 460.822433][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 128 @ nid 36 [ 460.822504][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 120 @ nid 36 [ 461.114777][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 461.149346][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 81 @ nid 36 [ 461.178775][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 461.187891][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 461.212061][T15065] loop3: detected capacity change from 0 to 40427 [ 461.263655][T15065] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 461.271261][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 461.289645][T15065] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 461.300772][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 461.325072][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 461.344266][T15065] F2FS-fs (loop3): invalid crc value [ 461.352688][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 461.367538][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 37 @ nid 36 [ 461.393524][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 461.408368][T15065] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 461.442459][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 35 @ nid 36 [ 461.488849][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 461.541766][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 33 @ nid 36 [ 461.584293][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 461.625743][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 461.626733][T15065] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 461.668709][T15076] erofs: (device loop9): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 461.704526][T15076] syz.9.3633: attempt to access beyond end of device [ 461.704526][T15076] loop9: rw=524288, sector=1049272, nr_sectors = 32 limit=16 [ 461.708645][T15065] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 461.753564][T15076] syz.9.3633: attempt to access beyond end of device [ 461.753564][T15076] loop9: rw=524288, sector=376, nr_sectors = 32 limit=16 [ 461.765165][T15117] loop1: detected capacity change from 0 to 512 [ 461.810213][T15076] syz.9.3633: attempt to access beyond end of device [ 461.810213][T15076] loop9: rw=524288, sector=384, nr_sectors = 32 limit=16 [ 461.833041][T15117] EXT4-fs: inline encryption not supported [ 461.888805][T15076] syz.9.3633: attempt to access beyond end of device [ 461.888805][T15076] loop9: rw=524288, sector=720, nr_sectors = 32 limit=16 [ 461.961184][T15117] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.3649: bad orphan inode 15 [ 461.964542][ T4283] syz-executor: attempt to access beyond end of device [ 461.964542][ T4283] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 461.989246][T15117] ext4_test_bit(bit=14, block=5) = 0 [ 461.994606][T15117] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 462.006647][T15076] syz.9.3633: attempt to access beyond end of device [ 462.006647][T15076] loop9: rw=524288, sector=728, nr_sectors = 32 limit=16 [ 462.057895][T15076] syz.9.3633: attempt to access beyond end of device [ 462.057895][T15076] loop9: rw=524288, sector=525144, nr_sectors = 32 limit=16 [ 462.072794][T15117] EXT4-fs error (device loop1): __ext4_new_inode:1075: comm syz.1.3649: reserved inode found cleared - inode=1 [ 462.115201][T15076] syz.9.3633: attempt to access beyond end of device [ 462.115201][T15076] loop9: rw=524288, sector=525152, nr_sectors = 32 limit=16 [ 462.131304][T15127] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1111: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 462.170890][T15076] syz.9.3633: attempt to access beyond end of device [ 462.170890][T15076] loop9: rw=524288, sector=13478624032, nr_sectors = 32 limit=16 [ 462.188236][T15127] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 462.329278][T15133] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3653'. [ 462.330616][T11000] EXT4-fs (loop1): unmounting filesystem. [ 462.816120][T15148] loop1: detected capacity change from 0 to 164 [ 462.917779][T15148] Unable to read rock-ridge attributes [ 462.936880][T15148] Unable to read rock-ridge attributes [ 463.507796][T15177] loop9: detected capacity change from 0 to 2048 [ 463.532577][T15171] loop1: detected capacity change from 0 to 4096 [ 463.561693][T15177] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024) [ 463.652137][T15180] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 464.137375][T15194] loop9: detected capacity change from 0 to 4096 [ 464.155099][T15200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3680'. [ 464.176986][T15194] ntfs: (device loop9): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 464.212833][T15202] loop8: detected capacity change from 0 to 256 [ 464.284781][T15202] exfat: Deprecated parameter 'namecase' [ 464.295130][T15206] loop1: detected capacity change from 0 to 512 [ 464.336971][T15194] ntfs: (device loop9): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 464.354042][T15202] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 464.386481][T15206] EXT4-fs error (device loop1): __ext4_fill_super:5423: inode #2: comm syz.1.3681: casefold flag without casefold feature [ 464.408008][T15194] ntfs: (device loop9): ntfs_read_locked_inode(): $DATA attribute is missing. [ 464.469967][T15206] EXT4-fs (loop1): get root inode failed [ 464.473816][T15194] ntfs: (device loop9): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 464.487230][T15206] EXT4-fs (loop1): mount failed [ 464.584425][T15194] ntfs: (device loop9): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 464.698265][T15194] ntfs: volume version 3.1. [ 464.762844][T15194] ntfs: (device loop9): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 464.903627][T15194] ntfs: (device loop9): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 464.922760][T15216] loop8: detected capacity change from 0 to 4096 [ 464.925654][T15194] ntfs: (device loop9): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 464.993443][T15216] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 465.109016][T15194] ntfs: (device loop9): ntfs_readdir(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 465.195659][T10081] EXT4-fs (loop8): unmounting filesystem. [ 465.708854][ T32] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 465.900299][T15253] loop8: detected capacity change from 0 to 512 [ 465.926276][ T32] usb 10-1: Using ep0 maxpacket: 16 [ 465.935610][ T32] usb 10-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 465.950819][T15253] EXT4-fs: inline encryption not supported [ 465.987260][ T32] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.995773][T15253] EXT4-fs: Ignoring removed i_version option [ 466.029105][ T32] usb 10-1: Product: syz [ 466.033401][ T32] usb 10-1: Manufacturer: syz [ 466.038095][ T32] usb 10-1: SerialNumber: syz [ 466.040331][T15223] loop1: detected capacity change from 0 to 32768 [ 466.099903][T15253] EXT4-fs (loop8): 1 orphan inode deleted [ 466.118843][T15253] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 466.305205][T15223] XFS (loop1): Mounting V5 Filesystem [ 466.462145][T10081] EXT4-fs (loop8): unmounting filesystem. [ 466.482799][T15223] XFS (loop1): Ending clean mount [ 466.496931][ T32] snd-usb-audio: probe of 10-1:222.0 failed with error -71 [ 466.522170][ T32] usb 10-1: USB disconnect, device number 14 [ 466.581537][T15223] XFS (loop1): Quotacheck needed: Please wait. [ 466.588951][T15277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3702'. [ 466.709174][T15223] XFS (loop1): Quotacheck: Done. [ 466.769830][ T6048] udevd[6048]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.793363][T15280] set_capacity_and_notify: 1 callbacks suppressed [ 466.793381][T15280] loop8: detected capacity change from 0 to 1024 [ 466.816335][T11000] XFS (loop1): Unmounting Filesystem [ 466.830651][T15284] loop2: detected capacity change from 0 to 256 [ 466.915927][T15284] exfat: Deprecated parameter 'utf8' [ 466.934226][T15280] hfsplus: bad catalog entry type [ 466.953470][T15284] exfat: Deprecated parameter 'utf8' [ 467.032248][T15284] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 467.048517][ T9] hfsplus: b-tree write err: -5, ino 25 [ 467.066435][ T9] hfsplus: b-tree write err: -5, ino 4 [ 467.132434][ T9] hfsplus: b-tree write err: -5, ino 2 [ 467.187303][T15291] loop9: detected capacity change from 0 to 256 [ 467.216084][T15291] exfat: Deprecated parameter 'utf8' [ 467.275505][T15291] exfat: Deprecated parameter 'utf8' [ 467.286624][T15291] exfat: Deprecated parameter 'utf8' [ 467.342460][T15291] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 468.072493][T15323] loop8: detected capacity change from 0 to 16 [ 468.108047][T15323] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 468.128791][ T5719] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 468.361068][ T5719] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 468.386216][ T5719] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 468.404310][ T5719] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 468.442751][ T5719] usb 4-1: config 220 has no interface number 2 [ 468.489265][ T5719] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 468.497285][T15338] loop8: detected capacity change from 0 to 64 [ 468.579250][ T5719] usb 4-1: config 220 interface 0 has no altsetting 0 [ 468.586091][ T5719] usb 4-1: config 220 interface 76 has no altsetting 0 [ 468.633618][ T5719] usb 4-1: config 220 interface 1 has no altsetting 0 [ 468.670651][ T5719] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 468.709290][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.733907][ T5719] usb 4-1: Product: syz [ 468.758570][ T5719] usb 4-1: Manufacturer: syz [ 468.788767][ T5719] usb 4-1: SerialNumber: syz [ 469.032996][ T5719] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 469.050578][ T5719] usb 4-1: No valid video chain found. [ 469.067224][ T5719] usb 4-1: selecting invalid altsetting 0 [ 469.149964][ T5719] usb 4-1: selecting invalid altsetting 0 [ 469.155997][ T5719] usbtest: probe of 4-1:220.1 failed with error -22 [ 469.186235][ T5719] usb 4-1: USB disconnect, device number 13 [ 469.802895][T15346] loop8: detected capacity change from 0 to 40427 [ 469.870145][T15346] F2FS-fs (loop8): Corrupted extension count (33554469 + 1 > 64) [ 469.883890][T15346] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 469.912111][T15346] F2FS-fs (loop8): invalid crc value [ 469.947596][T15346] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 470.161327][T15346] F2FS-fs (loop8): recover fsync data on readonly fs [ 470.175217][T15346] F2FS-fs (loop8): Try to recover 2th superblock, ret: -30 [ 470.242712][T15346] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 470.375836][T15389] loop9: detected capacity change from 0 to 64 [ 470.402714][T15373] loop3: detected capacity change from 0 to 32768 [ 470.558747][T15373] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.3738 (15373) [ 470.636037][T15373] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 470.752154][T15373] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 470.769020][T15373] BTRFS info (device loop3): force zlib compression, level 3 [ 470.776501][T15373] BTRFS info (device loop3): force clearing of disk cache [ 470.814520][T15373] BTRFS info (device loop3): setting nodatasum [ 470.880405][T15373] BTRFS info (device loop3): allowing degraded mounts [ 470.887280][T15373] BTRFS info (device loop3): enabling disk space caching [ 470.937503][T15373] BTRFS info (device loop3): disk space caching is enabled [ 471.340058][T15373] BTRFS info (device loop3): rebuilding free space tree [ 471.362359][T15380] loop2: detected capacity change from 0 to 40427 [ 471.453068][T15380] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 471.479457][T15373] BTRFS info (device loop3): disabling free space tree [ 471.494329][T15380] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 471.508848][T15373] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 471.535161][T15373] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 471.569085][T15380] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x2 [ 471.605731][T15380] F2FS-fs (loop2): invalid crc value [ 471.701977][T15380] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 471.858904][ T7321] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 471.917214][T15373] BTRFS info (device loop3): balance: start [ 471.967982][T15373] BTRFS info (device loop3): balance: ended with status: 0 [ 472.012312][T15380] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 472.031850][T15380] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 472.086508][ T7321] usb 2-1: Using ep0 maxpacket: 8 [ 472.101505][ T7321] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 472.154832][ T7321] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 472.169280][ T4283] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 472.193563][ T7321] usb 2-1: Product: syz [ 472.201973][ T7321] usb 2-1: Manufacturer: syz [ 472.206936][ T7321] usb 2-1: SerialNumber: syz [ 472.280776][ T7321] usb 2-1: config 0 descriptor?? [ 472.339063][ T7321] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 472.863254][T15467] loop8: detected capacity change from 0 to 2048 [ 472.907835][ T7321] gspca_zc3xx: reg_w_i err -71 [ 472.915092][T15467] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 472.920256][ T7321] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 472.976907][ T7321] usb 2-1: USB disconnect, device number 15 [ 473.053064][T15471] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 474.112823][T15515] loop9: detected capacity change from 0 to 764 [ 474.138070][T15518] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3783'. [ 474.171445][T15515] rock: directory entry would overflow storage [ 474.179853][T15515] rock: sig=0x4654, size=5, remaining=4 [ 474.710541][T15538] loop8: detected capacity change from 0 to 16 [ 474.742277][T15535] loop1: detected capacity change from 0 to 4096 [ 474.749103][T15538] erofs: (device loop8): mounted with root inode @ nid 36. [ 474.775019][T15538] bio_check_eod: 36 callbacks suppressed [ 474.775036][T15538] syz.8.3792: attempt to access beyond end of device [ 474.775036][T15538] loop8: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 474.795073][T15535] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 474.855816][T15538] erofs: (device loop8): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 475.073492][T15546] loop3: detected capacity change from 0 to 1024 [ 475.109971][T15546] EXT4-fs: Ignoring removed bh option [ 475.149249][T15546] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 475.185506][T15550] netlink: 'syz.2.3796': attribute type 3 has an invalid length. [ 475.346624][T15546] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 475.533015][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 475.658446][T15527] loop9: detected capacity change from 0 to 32768 [ 475.853752][T15527] XFS (loop9): Mounting V5 Filesystem [ 475.942343][T15586] loop3: detected capacity change from 0 to 128 [ 475.971895][T15527] XFS (loop9): Ending clean mount [ 476.026984][T15527] XFS (loop9): Quotacheck needed: Please wait. [ 476.036528][T15586] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 476.127006][T15586] ext4 filesystem being mounted at /718/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 476.212745][T15592] loop2: detected capacity change from 0 to 4096 [ 476.236851][T15527] XFS (loop9): Quotacheck: Done. [ 476.386104][T15599] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 476.483491][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 476.501586][T10958] XFS (loop9): Unmounting Filesystem [ 476.699443][T15603] loop8: detected capacity change from 0 to 4096 [ 476.746751][T15603] ntfs3: loop8: Different NTFS' sector size (1024) and media sector size (512) [ 477.125870][T15616] mmap: syz.2.3817 (15616): VmData 49217536 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 477.775629][T15632] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3815'. [ 477.887795][T15609] loop3: detected capacity change from 0 to 32768 [ 477.958044][T15612] loop1: detected capacity change from 0 to 32768 [ 478.019653][T15612] XFS: attr2 mount option is deprecated. [ 478.281132][T15612] XFS (loop1): Mounting V5 Filesystem [ 478.533932][T15612] XFS (loop1): Ending clean mount [ 478.541978][T15612] XFS (loop1): Quotacheck needed: Please wait. [ 478.626887][T15666] loop3: detected capacity change from 0 to 1024 [ 478.699735][T15612] XFS (loop1): Quotacheck: Done. [ 478.907352][T11000] XFS (loop1): Unmounting Filesystem [ 479.713101][T15694] netem: change failed [ 479.782974][T15660] loop8: detected capacity change from 0 to 32768 [ 480.228057][T15715] loop9: detected capacity change from 0 to 2048 [ 480.320699][T15715] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 480.645284][T15727] loop2: detected capacity change from 0 to 4096 [ 480.707524][T15727] EXT4-fs: inline encryption not supported [ 480.787465][T15727] EXT4-fs (loop2): Test dummy encryption mode enabled [ 480.957431][T15744] loop8: detected capacity change from 0 to 2048 [ 481.009895][T15744] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 481.020800][T15727] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 481.043882][T15742] loop3: detected capacity change from 0 to 1024 [ 481.057946][ T26] audit: type=1800 audit(1773242517.671:204): pid=15744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3862" name="file1" dev="loop8" ino=1367 res=0 errno=0 [ 481.156050][ T26] audit: type=1800 audit(1773242517.771:205): pid=15742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3860" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 481.157390][T15742] hfsplus: request for non-existent node 16777216 in B*Tree [ 481.347990][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 481.422593][T15742] hfsplus: request for non-existent node 16777216 in B*Tree [ 481.643685][T15762] genirq: Flags mismatch irq 10. 00000000 (pcl812) vs. 00000080 (virtio2) [ 482.599834][T15765] loop8: detected capacity change from 0 to 131072 [ 482.608197][T15765] F2FS-fs (loop8): invalid crc value [ 482.614348][T15765] F2FS-fs (loop8): invalid crc value [ 482.620211][T15765] F2FS-fs (loop8): Failed to get valid F2FS checkpoint [ 482.783193][T15806] loop9: detected capacity change from 0 to 256 [ 483.162383][T15816] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3881'. [ 483.553664][T15827] loop1: detected capacity change from 0 to 1024 [ 483.627426][T15834] loop9: detected capacity change from 0 to 1024 [ 483.664893][T15827] hfsplus: request for non-existent node 17039360 in B*Tree [ 483.724869][T15827] hfsplus: request for non-existent node 17039360 in B*Tree [ 483.726260][T15834] EXT4-fs: Ignoring removed orlov option [ 483.887829][T15834] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 483.923024][ T46] hfsplus: b-tree write err: -5, ino 8 [ 483.966311][T15839] loop8: detected capacity change from 0 to 2048 [ 484.087164][T15839] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 484.168282][T15847] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 484.182511][T10958] EXT4-fs (loop9): unmounting filesystem. [ 484.255370][T15798] loop3: detected capacity change from 0 to 32768 [ 484.303193][T15853] loop2: detected capacity change from 0 to 64 [ 484.425503][T15798] XFS (loop3): Mounting V5 Filesystem [ 484.634668][T15874] loop9: detected capacity change from 0 to 512 [ 484.644185][T15874] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 484.694413][T15798] XFS (loop3): Ending clean mount [ 484.740897][T15874] EXT4-fs (loop9): orphan cleanup on readonly fs [ 484.810265][T15874] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:3850: comm syz.9.3900: Allocating blocks 41-42 which overlap fs metadata [ 484.914116][T15874] Quota error (device loop9): write_blk: dquota write failed [ 484.959469][T15874] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 485.008792][T15874] EXT4-fs error (device loop9): ext4_acquire_dquot:6835: comm syz.9.3900: Failed to acquire dquot type 0 [ 485.069952][T15874] EXT4-fs (loop9): 1 truncate cleaned up [ 485.103780][T15874] EXT4-fs (loop9): pa ffff888073f30620: logic 1, phys. 41, len 23 [ 485.111815][T15874] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:4890: group 0, free 22, pa_free 23 [ 485.209100][T15874] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 485.218345][T15887] loop1: detected capacity change from 0 to 64 [ 485.285190][ T4283] XFS (loop3): Unmounting Filesystem [ 485.448792][ T5729] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 485.583253][T10958] EXT4-fs (loop9): unmounting filesystem. [ 485.688927][ T5729] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.708065][ T5729] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.735058][ T5729] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 485.755059][ T5729] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.779734][ T5729] usb 9-1: config 0 descriptor?? [ 485.882928][T15900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3908'. [ 486.288931][T15476] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 486.426261][T15902] loop9: detected capacity change from 0 to 32768 [ 486.438977][ T5729] hid-led: probe of 0003:27B8:01ED.0022 failed with error -71 [ 486.462287][ T5729] usb 9-1: USB disconnect, device number 13 [ 486.492797][T15476] usb 2-1: unable to get BOS descriptor or descriptor too short [ 486.499923][T15920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3915'. [ 486.509505][T15476] usb 2-1: not running at top speed; connect to a high speed hub [ 486.521433][T15476] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.573620][T15476] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 486.619202][T15476] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 486.687032][T15476] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 486.704398][T15902] XFS (loop9): Mounting V5 Filesystem [ 486.718085][T15476] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 486.746163][T15476] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.759976][T15476] usb 2-1: Product: syz [ 486.764671][T15476] usb 2-1: Manufacturer: syz [ 486.773535][T15476] usb 2-1: SerialNumber: syz [ 486.845938][T15902] XFS (loop9): Ending clean mount [ 486.940925][T15902] XFS (loop9): Quotacheck needed: Please wait. [ 487.103000][T15902] XFS (loop9): Quotacheck: Done. [ 487.165275][T10958] XFS (loop9): Unmounting Filesystem [ 487.420046][T15476] usb 2-1: 0:2 : does not exist [ 487.461507][T15476] usb 2-1: USB disconnect, device number 16 [ 487.493728][T15950] netlink: 'syz.8.3928': attribute type 1 has an invalid length. [ 487.546609][T15952] loop3: detected capacity change from 0 to 128 [ 487.566069][T15952] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 487.634084][ T4283] sysv_free_block: trying to free block not in datazone [ 487.664778][ T4283] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 487.710974][ T4675] udevd[4675]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 487.794395][T15958] netlink: 'syz.3.3931': attribute type 1 has an invalid length. [ 488.022659][T15964] loop3: detected capacity change from 0 to 512 [ 488.048516][T15964] EXT4-fs: Ignoring removed orlov option [ 488.107417][T15964] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 488.168089][T15964] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 488.169245][T15960] read_mapping_page failed! [ 488.182154][T15960] ERROR: (device loop8): txCommit: [ 488.182154][T15960] [ 488.205517][T15964] EXT4-fs error (device loop3): ext4_iget_extra_inode:4756: inode #15: comm syz.3.3935: corrupted in-inode xattr [ 488.223891][T15964] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3935: couldn't read orphan inode 15 (err -117) [ 488.236378][T15964] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 488.368977][ T7321] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 488.590394][ T7321] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.602247][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 488.635349][ T7321] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 488.650596][T15977] set_capacity_and_notify: 1 callbacks suppressed [ 488.650612][T15977] loop8: detected capacity change from 0 to 1024 [ 488.691539][ T7321] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 488.719551][T15977] EXT4-fs: Ignoring removed bh option [ 488.725485][ T7321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.746241][ T7321] usb 2-1: Product: syz [ 488.758734][ T7321] usb 2-1: Manufacturer: syz [ 488.765041][ T7321] usb 2-1: SerialNumber: syz [ 488.836039][T15977] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 488.857152][T15985] loop2: detected capacity change from 0 to 128 [ 488.933979][T15985] syz.2.3942: attempt to access beyond end of device [ 488.933979][T15985] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 489.092744][T10081] EXT4-fs (loop8): unmounting filesystem. [ 489.199277][ T7321] usb 2-1: 0:2 : does not exist [ 489.411224][ T7321] usb 2-1: USB disconnect, device number 17 [ 490.379177][ T7324] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 490.404176][T16035] loop8: detected capacity change from 0 to 1024 [ 490.434775][T16035] EXT4-fs: Ignoring removed mblk_io_submit option [ 490.459328][T16035] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 490.506174][T16035] EXT4-fs error (device loop8): ext4_ext_check_inode:520: inode #11: comm syz.8.3960: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 490.556698][T16035] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3960: couldn't read orphan inode 11 (err -117) [ 490.613512][ T7324] usb 4-1: not running at top speed; connect to a high speed hub [ 490.632295][ T7324] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 29, changing to 4 [ 490.639389][T16035] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 490.666949][ T7324] usb 4-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 490.715908][ T7324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.717274][T16035] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:477: comm syz.8.3960: Invalid block bitmap block 0 in block_group 0 [ 490.744263][ T7324] usb 4-1: Product: syz [ 490.770411][ T7324] usb 4-1: Manufacturer: syz [ 490.775205][ T7324] usb 4-1: SerialNumber: syz [ 490.825277][T16035] Quota error (device loop8): write_blk: dquota write failed [ 490.843109][T16035] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 490.863266][T16029] loop1: detected capacity change from 0 to 32768 [ 490.882691][T16035] EXT4-fs error (device loop8): ext4_acquire_dquot:6835: comm syz.8.3960: Failed to acquire dquot type 0 [ 490.921719][T16029] JBD2: Ignoring recovery information on journal [ 490.973240][T11400] Quota error (device loop8): do_check_range: Getting block 0 out of range 1-8 [ 491.015571][ T7324] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 491.019494][T11400] EXT4-fs error (device loop8): ext4_release_dquot:6871: comm kworker/u4:10: Failed to release dquot type 0 [ 491.077429][ T7324] usb 4-1: unit 16 not found! [ 491.110757][ T7324] usb 4-1: unable to issue vendor read request (ret = -71) [ 491.127039][T10081] EXT4-fs (loop8): unmounting filesystem. [ 491.129890][T16029] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 491.159351][ T7324] usb 4-1: unable to issue vendor read request (ret = -71) [ 491.187446][T16029] OCFS2: ERROR (device loop1): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 4106 [ 491.224012][ T7324] usb 4-1: unable to issue vendor read request (ret = -71) [ 491.259448][ T7324] usb 4-1: unable to issue vendor read request (ret = -71) [ 491.287824][T16029] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 491.355868][T16029] OCFS2: File system is now read-only. [ 491.365911][ T7324] usb 4-1: USB disconnect, device number 14 [ 491.375254][T16029] (syz.1.3956,16029,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 491.422518][T16029] (syz.1.3956,16029,1):ocfs2_reserve_new_inode:1091 ERROR: status = -30 [ 491.476611][T16029] (syz.1.3956,16029,1):ocfs2_reserve_new_inode:1114 ERROR: status = -30 [ 491.529184][T16029] (syz.1.3956,16029,1):ocfs2_symlink:1871 ERROR: status = -30 [ 491.536731][T16029] (syz.1.3956,16029,1):ocfs2_symlink:2065 ERROR: status = -30 [ 491.659615][ T4675] udevd[4675]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 491.735586][T11000] ocfs2: Unmounting device (7,1) on (node local) [ 491.855969][ T26] audit: type=1326 audit(1773242528.471:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16074 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca359c799 code=0x7ffc0000 [ 491.927705][ T26] audit: type=1326 audit(1773242528.471:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16074 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca359c799 code=0x7ffc0000 [ 492.096772][ T26] audit: type=1326 audit(1773242528.501:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16074 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7efca359c799 code=0x7ffc0000 [ 492.098626][ T4288] Bluetooth: hci5: command 0x0411 tx timeout [ 492.156945][ T26] audit: type=1326 audit(1773242528.501:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16074 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca359c799 code=0x7ffc0000 [ 492.183450][ T26] audit: type=1326 audit(1773242528.501:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16074 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca359c799 code=0x7ffc0000 [ 492.446841][T16091] netlink: 'syz.8.3978': attribute type 4 has an invalid length. [ 492.665335][T16065] loop9: detected capacity change from 0 to 32768 [ 492.814497][T16093] loop2: detected capacity change from 0 to 4096 [ 492.885843][T16093] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 493.034140][T16093] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 493.104397][T16114] device geneve2 entered promiscuous mode [ 493.111444][T16093] ntfs3: loop2: ino=21, "file1" The size of extended attributes must not exceed 64KiB [ 493.422917][T16125] loop8: detected capacity change from 0 to 128 [ 493.506599][T16125] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 493.576122][T16125] System zones: 1-3, 19-19, 35-36 [ 493.648103][T16125] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 493.694544][T16125] ext4 filesystem being mounted at /452/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 493.760430][T16125] EXT4-fs warning (device loop8): ext4_group_extend:1870: can't shrink FS - resize aborted [ 493.910462][T10081] EXT4-fs (loop8): unmounting filesystem. [ 494.167120][T16155] loop3: detected capacity change from 0 to 128 [ 494.247028][T16155] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 494.340859][T16155] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 494.843070][T16179] loop2: detected capacity change from 0 to 1024 [ 495.088721][ T9] hfsplus: b-tree write err: -5, ino 25 [ 495.114834][ T9] hfsplus: b-tree write err: -5, ino 4 [ 495.159725][ T9] hfsplus: b-tree write err: -5, ino 2 [ 495.273430][T16197] loop8: detected capacity change from 0 to 512 [ 495.477259][T16204] loop9: detected capacity change from 0 to 8 [ 495.478164][T16205] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4021'. [ 495.753516][T16213] loop1: detected capacity change from 0 to 4096 [ 495.821215][T16213] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 496.075727][T11000] EXT4-fs (loop1): unmounting filesystem. [ 496.192172][T16233] loop9: detected capacity change from 0 to 1024 [ 496.334689][T16237] sctp: [Deprecated]: syz.2.4034 (pid 16237) Use of int in maxseg socket option. [ 496.334689][T16237] Use struct sctp_assoc_value instead [ 496.359930][ T41] hfsplus: b-tree write err: -5, ino 25 [ 496.379285][ T41] hfsplus: b-tree write err: -5, ino 4 [ 496.404018][ T41] hfsplus: b-tree write err: -5, ino 2 [ 496.444782][ T41] hfsplus: b-tree write err: -5, ino 17 [ 496.979101][T15477] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 497.033065][T16259] loop1: detected capacity change from 0 to 512 [ 497.076425][T16259] EXT4-fs: Ignoring removed oldalloc option [ 497.161499][T16259] EXT4-fs error (device loop1): ext4_xattr_inode_iget:397: comm syz.1.4044: Parent and EA inode have the same ino 15 [ 497.195521][T15477] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.207775][T16259] EXT4-fs (loop1): 1 orphan inode deleted [ 497.213707][T16259] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 497.243226][T16259] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.4044: invalid indirect mapped block 234881024 (level 0) [ 497.266809][T15477] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.332433][T15477] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 497.382220][T15477] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 497.383186][T11000] EXT4-fs (loop1): unmounting filesystem. [ 497.441378][T15477] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.498476][T15477] usb 3-1: config 0 descriptor?? [ 497.557967][T16277] device ipvlan1 entered promiscuous mode [ 497.586447][T16276] device ipvlan1 left promiscuous mode [ 497.625435][T16279] device syz_tun entered promiscuous mode [ 497.633181][T16279] device macvtap1 entered promiscuous mode [ 497.647482][T16279] device syz_tun left promiscuous mode [ 497.653987][T16240] loop8: detected capacity change from 0 to 32768 [ 497.712203][T16240] (syz.8.4037,16240,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 497.791087][T16240] (syz.8.4037,16240,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 497.848217][T16240] JBD2: Ignoring recovery information on journal [ 497.941949][T15477] steelseries_srws1 0003:1038:1410.0023: unknown main item tag 0x0 [ 497.958682][T15477] steelseries_srws1 0003:1038:1410.0023: unknown main item tag 0x0 [ 497.966870][T15477] steelseries_srws1 0003:1038:1410.0023: unknown main item tag 0x0 [ 497.987111][T15477] steelseries_srws1 0003:1038:1410.0023: unknown main item tag 0x0 [ 498.029265][T15477] steelseries_srws1 0003:1038:1410.0023: unknown main item tag 0x0 [ 498.030169][T16240] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 498.037292][T15477] steelseries_srws1 0003:1038:1410.0023: unknown main item tag 0x0 [ 498.037321][T15477] steelseries_srws1 0003:1038:1410.0023: unknown main item tag 0x0 [ 498.147893][T15477] steelseries_srws1 0003:1038:1410.0023: missing HID_OUTPUT_REPORT 0 [ 498.196351][T15477] usb 3-1: USB disconnect, device number 25 [ 498.316033][T10081] ocfs2: Unmounting device (7,8) on (node local) [ 498.629826][T16305] loop3: detected capacity change from 0 to 2048 [ 498.702022][T16305] GPT:first_usable_lbas don't match. [ 498.725092][T16305] GPT:34 != 290 [ 498.739874][T16305] GPT: Use GNU Parted to correct GPT errors. [ 498.756476][T16305] loop3: p1 p2 p3 [ 498.920242][T16289] loop1: detected capacity change from 0 to 32768 [ 498.956610][T16315] hfs: unable to locate alternate MDB [ 498.992453][T16315] hfs: continuing without an alternate MDB [ 499.067868][ T26] audit: type=1800 audit(1773242535.681:211): pid=16315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4059" name="file1" dev="loop8" ino=21 res=0 errno=0 [ 499.239589][ T46] hfs: new node 0 already hashed? [ 499.245810][ T46] ------------[ cut here ]------------ [ 499.251671][ T46] WARNING: CPU: 0 PID: 46 at fs/hfs/bnode.c:520 hfs_bnode_create+0x37a/0x400 [ 499.260550][ T46] Modules linked in: [ 499.264499][ T46] CPU: 0 PID: 46 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 499.271968][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 499.282107][ T46] Workqueue: writeback wb_workfn (flush-7:8) [ 499.288145][ T46] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 499.293873][ T46] Code: ac a2 8a 89 ee e8 26 a9 d6 07 e9 ab fd ff ff e8 1c 4e 37 ff 48 89 df e8 d4 f8 eb 07 48 c7 c7 c0 ac a2 8a 89 ee e8 06 a9 d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 499.297019][T16321] set_capacity_and_notify: 1 callbacks suppressed [ 499.297033][T16321] loop9: detected capacity change from 0 to 1024 [ 499.313505][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.313571][ T46] RSP: 0018:ffffc90000b76e80 EFLAGS: 00010246 [ 499.313648][ T46] RAX: 000000000000001f RBX: ffff88802a0800e0 RCX: d855db0167346000 [ 499.313663][ T46] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 499.313677][ T46] RBP: 0000000000000000 R08: ffffc90000b76b87 R09: 1ffff9200016ed70 [ 499.313690][ T46] R10: dffffc0000000000 R11: fffff5200016ed71 R12: 0000000000000000 [ 499.313705][ T46] R13: ffff88802a080000 R14: ffff8880280da800 R15: dffffc0000000000 [ 499.313720][ T46] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 499.313738][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 499.313751][ T46] CR2: 00007fce0dfeb4b8 CR3: 000000005d281000 CR4: 00000000003506f0 [ 499.313768][ T46] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 499.313780][ T46] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 499.313793][ T46] Call Trace: [ 499.313802][ T46] [ 499.313815][ T46] hfs_bmap_alloc+0x53d/0x5d0 [ 499.313851][ T46] ? hfs_bmap_reserve+0x420/0x420 [ 499.313883][ T46] hfs_btree_inc_height+0xfd/0xac0 [ 499.313915][ T46] ? hfs_brec_insert+0x6f6/0xbd0 [ 499.313943][ T46] ? hfs_brec_insert+0xbd0/0xbd0 [ 499.313971][ T46] ? do_raw_spin_unlock+0x11d/0x230 [ 499.313993][ T46] hfs_brec_insert+0x744/0xbd0 [ 499.314037][ T46] ? hfs_brec_keylen+0x350/0x350 [ 499.314072][ T46] __hfs_ext_write_extent+0x2a1/0x470 [ 499.314103][ T46] hfs_ext_write_extent+0x17b/0x200 [ 499.314128][ T46] ? verify_lock_unused+0x140/0x140 [ 499.314153][ T46] ? hfs_ext_keycmp+0x310/0x310 [ 499.314182][ T46] ? writeback_sb_inodes+0x46b/0x1850 [ 499.314215][ T46] hfs_write_inode+0xd8/0xa20 [ 499.314243][ T46] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 499.314275][ T46] ? __writeback_single_inode+0x4ae/0x1160 [ 499.314303][ T46] ? __lock_acquire+0x7d10/0x7d10 [ 499.314325][ T46] ? do_raw_spin_lock+0x128/0x2f0 [ 499.314347][ T46] ? __rwlock_init+0x140/0x140 [ 499.314376][ T46] __writeback_single_inode+0x75b/0x1160 [ 499.314408][ T46] writeback_sb_inodes+0xb30/0x1850 [ 499.314460][ T46] ? queue_io+0x5a0/0x5a0 [ 499.314500][ T46] ? rcu_is_watching+0x11/0xa0 [ 499.473444][T16321] hfsplus: bad catalog entry type [ 499.475963][ T46] wb_writeback+0x482/0xd50 [ 499.476013][ T46] ? percpu_ref_tryget+0x250/0x250 [ 499.557123][ T46] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 499.563223][ T46] ? _raw_spin_unlock_irq+0x1f/0x40 [ 499.568459][ T46] wb_workfn+0x423/0xee0 [ 499.572803][ T46] ? inode_wait_for_writeback+0x220/0x220 [ 499.578624][ T46] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 499.584678][ T46] ? read_lock_is_recursive+0x10/0x10 [ 499.590148][ T46] ? _raw_spin_unlock_irq+0x1f/0x40 [ 499.595394][ T46] ? process_one_work+0x7b0/0x1160 [ 499.600629][ T46] process_one_work+0x8a2/0x1160 [ 499.605617][ T46] ? worker_detach_from_pool+0x240/0x240 [ 499.611542][ T46] ? _raw_spin_lock_irq+0xb7/0xf0 [ 499.616638][ T46] ? _raw_spin_lock_irqsave+0x100/0x100 [ 499.622285][ T46] ? kthread_data+0x4b/0xc0 [ 499.626836][ T46] worker_thread+0xaa2/0x1270 [ 499.631984][ T46] kthread+0x29d/0x330 [ 499.636085][ T46] ? worker_clr_flags+0x1a0/0x1a0 [ 499.641203][ T46] ? kthread_blkcg+0xd0/0xd0 [ 499.645832][ T46] ret_from_fork+0x1f/0x30 [ 499.650377][ T46] [ 499.653419][ T46] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 499.660713][ T46] CPU: 0 PID: 46 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 499.668106][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 499.678184][ T46] Workqueue: writeback wb_workfn (flush-7:8) [ 499.684200][ T46] Call Trace: [ 499.687490][ T46] [ 499.690432][ T46] dump_stack_lvl+0x188/0x24e [ 499.695132][ T46] ? memcpy+0x3c/0x60 [ 499.699131][ T46] ? show_regs_print_info+0x12/0x12 [ 499.704348][ T46] ? load_image+0x400/0x400 [ 499.708878][ T46] panic+0x2e5/0x730 [ 499.712791][ T46] ? bpf_jit_dump+0xd0/0xd0 [ 499.717326][ T46] ? ret_from_fork+0x1f/0x30 [ 499.721956][ T46] __warn+0x2f8/0x4f0 [ 499.725951][ T46] ? hfs_bnode_create+0x37a/0x400 [ 499.731001][ T46] ? hfs_bnode_create+0x37a/0x400 [ 499.736045][ T46] report_bug+0x2ba/0x4f0 [ 499.740397][ T46] ? hfs_bnode_create+0x37a/0x400 [ 499.745452][ T46] handle_bug+0x3a/0x70 [ 499.749626][ T46] exc_invalid_op+0x16/0x40 [ 499.754150][ T46] asm_exc_invalid_op+0x16/0x20 [ 499.759007][ T46] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 499.764657][ T46] Code: ac a2 8a 89 ee e8 26 a9 d6 07 e9 ab fd ff ff e8 1c 4e 37 ff 48 89 df e8 d4 f8 eb 07 48 c7 c7 c0 ac a2 8a 89 ee e8 06 a9 d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 499.784277][ T46] RSP: 0018:ffffc90000b76e80 EFLAGS: 00010246 [ 499.790369][ T46] RAX: 000000000000001f RBX: ffff88802a0800e0 RCX: d855db0167346000 [ 499.798370][ T46] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 499.806538][ T46] RBP: 0000000000000000 R08: ffffc90000b76b87 R09: 1ffff9200016ed70 [ 499.814542][ T46] R10: dffffc0000000000 R11: fffff5200016ed71 R12: 0000000000000000 [ 499.822533][ T46] R13: ffff88802a080000 R14: ffff8880280da800 R15: dffffc0000000000 [ 499.827712][ T6048] udevd[6048]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 499.836828][ T8265] udevd[8265]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 499.842510][ T4263] udevd[4263]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 499.859647][ T46] hfs_bmap_alloc+0x53d/0x5d0 [ 499.864411][ T46] ? hfs_bmap_reserve+0x420/0x420 [ 499.869472][ T46] hfs_btree_inc_height+0xfd/0xac0 [ 499.874607][ T46] ? hfs_brec_insert+0x6f6/0xbd0 [ 499.879575][ T46] ? hfs_brec_insert+0xbd0/0xbd0 [ 499.884546][ T46] ? do_raw_spin_unlock+0x11d/0x230 [ 499.889779][ T46] hfs_brec_insert+0x744/0xbd0 [ 499.894594][ T46] ? hfs_brec_keylen+0x350/0x350 [ 499.899572][ T46] __hfs_ext_write_extent+0x2a1/0x470 [ 499.904986][ T46] hfs_ext_write_extent+0x17b/0x200 [ 499.910215][ T46] ? verify_lock_unused+0x140/0x140 [ 499.915440][ T46] ? hfs_ext_keycmp+0x310/0x310 [ 499.920316][ T46] ? writeback_sb_inodes+0x46b/0x1850 [ 499.925720][ T46] hfs_write_inode+0xd8/0xa20 [ 499.930432][ T46] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 499.935846][ T46] ? __writeback_single_inode+0x4ae/0x1160 [ 499.941690][ T46] ? __lock_acquire+0x7d10/0x7d10 [ 499.946743][ T46] ? do_raw_spin_lock+0x128/0x2f0 [ 499.951792][ T46] ? __rwlock_init+0x140/0x140 [ 499.956592][ T46] __writeback_single_inode+0x75b/0x1160 [ 499.962261][ T46] writeback_sb_inodes+0xb30/0x1850 [ 499.967509][ T46] ? queue_io+0x5a0/0x5a0 [ 499.971879][ T46] ? rcu_is_watching+0x11/0xa0 [ 499.976674][ T46] wb_writeback+0x482/0xd50 [ 499.981218][ T46] ? percpu_ref_tryget+0x250/0x250 [ 499.986356][ T46] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 499.992457][ T46] ? _raw_spin_unlock_irq+0x1f/0x40 [ 499.997684][ T46] wb_workfn+0x423/0xee0 [ 500.001969][ T46] ? inode_wait_for_writeback+0x220/0x220 [ 500.007727][ T46] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 500.013738][ T46] ? read_lock_is_recursive+0x10/0x10 [ 500.019134][ T46] ? _raw_spin_unlock_irq+0x1f/0x40 [ 500.024354][ T46] ? process_one_work+0x7b0/0x1160 [ 500.029486][ T46] process_one_work+0x8a2/0x1160 [ 500.034463][ T46] ? worker_detach_from_pool+0x240/0x240 [ 500.040130][ T46] ? _raw_spin_lock_irq+0xb7/0xf0 [ 500.045176][ T46] ? _raw_spin_lock_irqsave+0x100/0x100 [ 500.050833][ T46] ? kthread_data+0x4b/0xc0 [ 500.055360][ T46] worker_thread+0xaa2/0x1270 [ 500.060087][ T46] kthread+0x29d/0x330 [ 500.064168][ T46] ? worker_clr_flags+0x1a0/0x1a0 [ 500.069205][ T46] ? kthread_blkcg+0xd0/0xd0 [ 500.073799][ T46] ret_from_fork+0x1f/0x30 [ 500.078234][ T46] [ 500.081610][ T46] Kernel Offset: disabled [ 500.086042][ T46] Rebooting in 86400 seconds..