last executing test programs: 5m8.866614806s ago: executing program 1 (id=1449): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 5m8.419556444s ago: executing program 1 (id=1453): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x8926, 0x0) 5m7.954917662s ago: executing program 1 (id=1456): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_getaddrlabel={0x24, 0x1e, 0x492dfc465ae32a8d, 0xfffffff6, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x4044) 5m7.683974438s ago: executing program 1 (id=1460): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000200)=ANY=[], 0xde, 0x4b1, &(0x7f0000001d00)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000040)='./file1\x00') rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000000100)='./file0/file0\x00') 5m6.930198121s ago: executing program 1 (id=1466): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f00000007c0)) 5m6.554748578s ago: executing program 1 (id=1468): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@creator={'creator', 0x3d, "c9fc1edc"}}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@part={'part', 0x3d, 0x707}}, {}, {@part={'part', 0x3d, 0x20000005}}]}, 0x11, 0x2b6, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/154, 0x9a) 4m51.308808322s ago: executing program 32 (id=1468): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@creator={'creator', 0x3d, "c9fc1edc"}}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@part={'part', 0x3d, 0x707}}, {}, {@part={'part', 0x3d, 0x20000005}}]}, 0x11, 0x2b6, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/154, 0x9a) 3m11.510149587s ago: executing program 3 (id=2397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x0, @loopback={0xff00000000000000}}}, {0x12, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 3m11.191196202s ago: executing program 3 (id=2399): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}}, 0x0) 3m10.840795149s ago: executing program 3 (id=2405): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) 3m10.700233581s ago: executing program 3 (id=2407): syz_mount_image$erofs(&(0x7f0000000280), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000040)=ANY=[], 0x1, 0x1ca, &(0x7f00000008c0)="$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") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') 3m10.376018277s ago: executing program 3 (id=2410): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3m8.732371296s ago: executing program 5 (id=2423): r0 = syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file1\x00', 0x40, &(0x7f0000000000)={[{@pqnoenforce}, {@noquota}, {@quota}, {@pqnoenforce}, {@ikeep}, {@nolargeio}, {@noikeep}]}, 0x1, 0x98d4, &(0x7f0000013140)="$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") fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, r1, &(0x7f0000000d00)={0x0, 0x800000000003, 0xc000, 0x101, 0x8b, 0x3, 0x0, 0x0, 0x4040c405}) 3m6.501508607s ago: executing program 5 (id=2434): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x2, 0x3, 0x0, 0x5, 0x0}) 3m5.614425883s ago: executing program 5 (id=2437): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6}) syz_clone3(&(0x7f00000001c0)={0x42323080, &(0x7f00000000c0), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3m4.619018261s ago: executing program 5 (id=2443): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2008800, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x4, 0x1534, &(0x7f0000001f80)="$eJzs3AucTtX6OPDnWWvtMSbpbZLLsNZ6Nm9yWSZJckmSS5IkSZIkIWmSIwmJIbekIQnJZUguQ0guE5PG/X6/JCRJkyQhuSXr/xH+Tifnf875nTp+/zPP9/PZH+t5137WXvt93sva28x813FQjUY1qzYgIvi34Pl/kgEgFgD6AcA1ABAAQNn4svHn+nNKTP73DsL+WA+lXekZsCuJ65+9cf2zN65/9sb1z964/tkb1z974/pnb1x/xrKzDVMKXMtb9t34/n+24Ltf9mH+/v8vklVq1FerSl3fCSDmn03h+mdvXP//WsE/sxPXP3vj+mdXsVd6Aux/AX7/Zwc5/m4P1z974/ozlp1d6fvP/9qmAOCPHRMi//88BzF/Qs2u8MuPMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxlg2cdJfogDgYvtKz4sxxhhjjDHGGGN/HJ/jSs+AMcYYY4wxxhhjfz4EARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBx6ApPA7N/kf5L0FXeBm6QXdIhh7QE16BXtAb+kBf6AevQn94DQbA65ACA2EQvAGD4U0YAm/BUBgGw+FtGAHvwEgYBaNhDKTCWBgH78J4eA8mwESYBJMhDabAVHgfpsF0mAEfwEz4EGbBbJgDcyEdPoJ5MB8y4GNYAJ9AJiyERbAYlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBp/CdvgMdsBO2AWfw2744l/MP/E3+Z0QEFCgQIUKYzAGYzEW4zAOc2EuzI25MYIRjMd4zIN5MC/mxfyYHxMwAQthITRokJCwMBbGKEaxKBbFYlgMS2AJdOgwEROxNN6MZbAMlsWyWA7LYXmsgBWwElbCylgZq2AVrIpVsRpWwxpYA+/Gu7EH1sbaWAfrYF2se/H2FDbABtgQG2IjbISNsTE2wSbYFJtiM2yGzbE5tsAW2ApbYWtsjW2wDSZhErbFttgO22F7bI8dsAN2xI7YCTtj56yXcgC+jC9jd6wmemBP7Im9MCVHH+yLffFV7I+v4Wv4OqbgQByEb+Ab+CYOweM4FIfhcByOlcU7OBJHIYkxmIqpOA7H4XgcjxNwIk7EyZiGU3AqTsVpOB2n4wc4Ez/ED3E2zsa5mI7pOA/nYwZm4AI8gZm4EBfhYlyCS3EJLscVuBxX4WpchWtxLa7H9bgRN+Jm3IxbcSt+igoAP8OduBNTcDfuxj24B/fiXtyH+zALs3A/7scDeAAP4kE8hIfwMB7Bo3gEj+ExPI4n8CSexNN4Gs/gCwnfNPy0+MoUEOcooUSMiBGxIlbEiTiRS+QSuUVuERERES/iRR6RR+QVeUV+kV8kiARRSBQSRhhBIowBABEVUVFUFBXFRDFRQpQQTjiRKBJFaVFalBFlRFlxqygnbhPlRQXR0lUSlURl0cpVEXeKqqKqqCaqixqipqgpaolaoraoLeqIOqKuqCvqiQdEfdED++BD4lxlGomB2FgMwibiMSEvfII1F0OwhWgpWomnxDAcim1Ec5cknhVtxUhsJ/4iRuHzooMYgx3Fi6KT6Cy6iJdEV9HCdRPdxQTsIXqKydhL9BZ9RF8xDauLD3BmzhridZEiBopB4g0xF98UQ8RbYqgYJoaLt8UI8Y4YKUaJ0WKMSBVjxTjxrhgv3hMTxEQxSUwWaWKKmCreF9PEdDFDfCBmig/FLDFbzBFzRbr4SMwT80WG+FgsEJ+ITLFQLBKLxRKxVCwTy8UKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE5+K7eIzsUPsFLvE52K3+ELsEV+KveIrsU98LbLEN2K/+FYcEN+Jg+J7cUj8IA6LI+Ko+FEcEz+J4+KEOClOidPiZ3FG/CLOCi9AohRSSiUDGSNzyFiZU8bJq2QuGVx4dq+V8fI6mUdeL/PKfDK/LCATZEFZSGpppJUkQ1lYFpFReYMsKm+UxWRxWUKWlE6WkonyJlla3izLyFtkWXmrLCdvk+VlBVlRVpK3y8ryDgmR88eoJqvLGrKmvFsmwz2ytrxX1pH3ybryfllPPiDrywdlA/mQbCgflo3kI7KxfFQ2kY/JpggA8gnZXD4pW8iWspV8SraWT8s28hmZJJ+VbaW/8BJ5XnaQL8iO8kXZSXaWXeQv8qz0spvsLqEHyJ7yFdlL9pZ9ZF/ZT74q+8vX5AD5ukyRA+Ug+YYcLN+UQ+RbcqgcJofLt+UI+Y4cKUfJ0XKMTJVj5Tj5rhwv35MT5EQ5SU6WaXKK7HNhpBlS/sP8dy+TP+DXo6+XG+RGuUlullvkVrlNfiq3y+1yh9whd8ldcrfcLffIPXKv3Cv3yX0yS2bJ/XK/PCAPyIPyoDwkD8nD8og8JX+Ux+RP8rg8IU/IU/K0PC3PXHgOQKESSiqlAhWjcqhYlVPFqatULnW1yq2uURF1rYpX16k86nqVV+VT+VUBlaAKqkJKK6OsIhWqwqqIiqob8MILRpVQJZVTpVSiuulfyVdF1Y2qmCr+m/yL80v+O/Nrppqp5qq5aqFaqFaqlWqtWqs2qo1KUkmqrWqr2ql2qr1qrzqoDqqj6qg6qU6qi+qiuqquqpvqppJVsuqpXlG9VG/VR/VV/dSrqr/qrwaoASpFpahBapAarAarIWqIGqqGquFquBqhRqiRaqQarUarVJWqxqlxarwaryaoCWqSmqTSVJqaqqaqaWqamqFmqJlqppqlZqk5ao5KV+lqnpqnMlSGWqAWqEy1UC1Ui9VitVQtVcvVcrVSrVSr1Wq1Vq1VmWqD2qA2qU1qi9qitqltarvarnaoHWqX2qV2q91qj9qj9qq9ap/ap7JUltqv9qsD6oA6qA6qQ+qQOqwOq6PqqDqmjqnj6rg6qU6q0+q0OqPOqLPq7LllXyACEahABTFBTBAbxAZxQVyQK8gV5A5yB5EgEsQH8UGe4Pogb5AvyB8UCBKCgkGhQAcmsIG4UPRocENQNLgxKBYUD0oEJQMXlAoSg5uC0sHNQZnglqBscGtQLrgtKB9UCCoGlYLbg8rBHUGV4M6ganBXUC2oHtQIagZ3B7WCe4Lawb1BneC+oG5wf1AveCCoHzwYNAgeChoGDweNgkeCxsGjFxevQbM/dHzvj+d70nXT3XWy7qF76ld0L91b99F9dT/9qu6vX9MD9Os6RQ/Ug/QberB+Uw/Rb+mhepgert/WI/Q7eqQepUfrMTpVj9Xj9Lt6vH5PT9AT9SQ9WafpKXqqfl9P09P1DP2Bnqk/1LP0bD1Hz9Xp+iM9T8/XGfpjvUB/ojP1Qr1IL9ZL9FK9TC/XK/RKvUqv1mv0Wr1Or9cb9Ea9SW/WW/RWvU1/qrfrz/QOvVPv0p/r3foLvUd/qffqr/Q+/bXO0t/o/fpbfUB/pw/q7/Uh/YM+rI/oo/pHfUz/pI/rE/qkPqVP65/1Gf2LPqv9ucX9ua93o4wyMSbGxJpYE2fiTC6Ty+Q2uU3EREy8iTd5TB6T1+Q1+U1+k2ASTCFTyJxDhkxhU9hETdQUNUVNMVPMlDAljDPOJJpEU9qUNmVMGVPWlDXlTDlT3pQ3FU1Fc7u53dxh7jB3mjvNXeYuU91UNzVNTVPL1DK1TW1Tx9QxdU1dU8/UM/VNfdPANDANTUPTyDQyjU1j08Q0MU1NU9PMNDPNTXPTwrQwrUwr09q0Nm1MG5Nkkkxb09a0M+1Me9PedDAdTEfT0XQynUwX08V0NV1NN9PNJJtk09P0NL1ML9PH9DH9TD/T3/Q3A8wAk2JSzCAzyAw2g80QM8QMNcPM8HMLVfOOGWlGmdFmjEk1qWacGWfGm/FmgplgJplJJs2kmalmqplmppkZZoaZaWaaWWaWmWPmmHSTbuaZeSbDZJgFZoHJNJlmkVlklpglZplZZlaYFWaVWWXWwBqzzqwzG8wGs8lsMlvMFrPNbDPbzXazw+wwu8wus9vsNnvMHrPX7DX7zD6TZbLMfrPfHDAHzEFz0Bwyh8xhc9gcNUfNMXPMHDfHzUlz0pw2+S58X3oTa3PaOHuVzWWvtrntNfZv4/y2gE2wBW0hq21em+83sbHWFrPFbQlb0jpbyibam34Xl7cVbEVbyd5uK9s7bJXfxbXsPba2vdfWsffZmvbu38R17f22nn3E1kcEsI/ZhvZx28g+YhvbR20T+5htah+3re3Tto19xibZZ21b+9zv4nl2vl1hV9pVdrXdYXfak/aUPWC/s6ftz7ab7W772Vdtf/uaHWBftyl24O/i4fZtO8K+Y0faUXa0HfO7eJKdbNPsFDvVvm+n2em/i9PtR3amzbCz7Gw7x879NT43pwz7sV1gP7GZNoBFdrFdYpfaZXb5/53rYrvWrrPr7Xb7md1kN9stdqvddnEhbHfaXfZzu9t+Yffbb+1e+5XdZw/aLPvNr/G58ztov7eH7A/2sD1ij9of7TH7k7qYfe7cf7S/2LPWWyAkIEmKAoqhHBRLOSmOrqJcdDXlpmsoQtdSPF1Heeh6ykv5KD8VoAQqSIVIkyFLRCEVpiIUpRvo4vRKUElyVIoS6SYqTTdTGbqFytKtVI5uo/JUgSpSJbqdKtMdVIXupKp0F1Wj6lSDatLdVIvuodp0L9Wh+6gu3U/16AGqTw9SA3qIGtLD1Igeocb0KDWhx6gpPU7N6AlqTk9SC2pJregpak1PUxt6hpLoWWpLz1E7+gu1p+epA71AHelF6kSdqQu9RF3pZepG3SmZelBPeoV6UW/qQ32pH71K/ek1GkCvUwoNpEH0Bg2mN2kIvUVDaRgNp7dpBL1DI2kUjaYxlEpjaRy9S+PpPZpAE2kSTaY0mkJT6X2aRtNpBn1AM+lDmkWzaQ7NpXT6iObRfMqgj2kBfUKZtJAW0WJaQktpGS2nFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbfUrb6TPaQTtpF31Ou+kL2kNf0l76ivbR15RF39B++pYO0Hd0kL733ekHOkxH6Cj9SMfoJzpOJ+gknaLT9DOdoV/oLHmCEEMRylCFQRgT5ghjw5xhXHhVmCu8OswZXhNGwmvD+PC6ME94fZg3zBfmDwuECWHBsFCoQxPakMIwLBwWCaPhDWHR8MawWFg8LBGWDF1YKkwMbwpLhzeHZcJbwrLhrWG58LawfFghfOS+SuHtYeXwjrBKeGdYNbwrrBZWD2uENcO7w1rhPWHt8N6wTnhfWCa8P6wXPhDWDx8MG4QPhQ3Dh8NG4SNh4/DRsEn4WNg0fDxsFj4RNg+fDFuELcNW4VNh6/DpsE34TJgUPhu2DZ/7tf/++X+/PznsEfYMXwlfCb2/V86Jzo2mRz+KzovOj2ZEP44uiH4SzYwujC6KLo4uiS6NLosuj66Iroyuiq6Oromuja6Lro96XzMHOHTCSadc4GJcDhfrcro4d5XL5a52ud01LuKudfHuOpfHXe/yunwuvyvgElxBV8hpZ5x15EJX2BVxUXeDK+pudMVccVfClXTOlXKJ7nHXzDVzzd2TroVr6Vq5p9xT7mn3tHvGPeOedW3dc66d+4tr7553HdwL7gX3ouvkOrsu7iXX1Y3Nff49mex6up6ul+vl+rg+rp/r5/q7/m6AG+BSXIob5Aa5wW6wG+KGuKFuqBvuhrsRboQb6Ua60W60S3Wpbpwb58a78W6Cm+AmuUkuzaW5qW6qm+amucrTzx9llpvl5rg5Lt2lu3nu3Joxwy1wC1ymy3SL3CK3xC1xy9wyt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc7/DXnB3W73R63x+11e90+97XLct+4/e5bd8B95w66790h94M77I64o+5Hd8z95I67E+6kO+VOu5/dGfeLO+u8S42MjYyLvBsZH3kvMiEyMTIpMjmSFpkSmRp5PzItMj0yI/JBZGbkw8isyOzInMjcSHrko8i8yPxIRuTjyILIJ5HMyMLIosjiyJLI0oj3BTeFvrAv4qP+Bl/U3+iL+eK+hC/pnS/lE/1NvrS/2Zfxt/iy/lZfzt/my/sKvqJ/1Dfxj/mm/nHfzD/hm/snfQvf0rfyT/nW/mnfxj/jk/yzvq1/zrfzf/Ht/fO+g3/Bd/Qv+k6+s+/iX/Jd/cu+m+/uk30P39O/4nv53r6P7+v7+Vd9f/+aH+Bf9yl+oB/k3/CD/Zt+iH/LD/XD/PCYt/2Ii5fIMMan+rF+nH/Xj/fv+Ql+op/kJ/s0P8VP9e/7aX66n+E/8DP9h36Wn+3n+Lk+3X/k5/n5PsN/7Bf4T3ymX3hxXe6X+eV+hV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/lP/Xb/md/hd/pd/nO/23/h9/gv/V7/ld/nv/ZZ/hu/33/rD/jv/EH/vT/kf/CH/RF/1P/oj/mf/HF/wp/0p/xp/7M/43/xZ/l31hhjjDHG/iljLzXFb3vO387vcZkc8Vc79wSAqzcXyPrr/nMryjV5z7d7i4TWEQB4tnvHhy5u1aolJydf2DdTQlBkNsDF/wk6JwYuxQuhFTwNSdASSl92/r1F59P0D8aP3goQ91c5sXApvjT+lwCYfJnxn3hq+Lxy4cn4/8f4swGKFbmUkxMuxQuh1a/3V1pCmb8z/3zN/8H8c36VCtDir3JywaX40vwT4Ul4DpJ+sydjjDHGGGOMMXZeb1Gx/cXrz4s/8Xm56/MEdSknB1yK/9H1OWOMMcYYY4wxxq685zt3eeaJpKSW7f/1RpX/UdY/3WgMf9bI3Lhsw3uAi48oAPg3BwQ415D/ybPY+B85VsqFt87fdi055QP431HKP6JxuU+L4D/74cQYY4wxxhj7Q11a9P/2cXWlJsQYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjGVDf+JfEbtwBHz+Cp8iY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdsX9nwAAAP//hGT6CA==") mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) 3m3.999910481s ago: executing program 5 (id=2446): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$read(0xb, r1, &(0x7f0000000340)=""/14, 0xe) 3m3.407034813s ago: executing program 5 (id=2453): unshare(0x22020600) r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) fcntl$getflags(r0, 0xb) 3m2.921440381s ago: executing program 33 (id=2453): unshare(0x22020600) r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) fcntl$getflags(r0, 0xb) 3m0.579230143s ago: executing program 3 (id=2456): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6}) syz_clone3(&(0x7f00000001c0)={0x42323080, &(0x7f00000000c0), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3m0.114093382s ago: executing program 34 (id=2456): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6}) syz_clone3(&(0x7f00000001c0)={0x42323080, &(0x7f00000000c0), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 51.557527283s ago: executing program 0 (id=3554): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x44, r1, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}}, 0x0) 51.480736734s ago: executing program 0 (id=3555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "c9"}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x6}]}}}]}]}], {0x14}}, 0x98}}, 0x0) 51.351670886s ago: executing program 0 (id=3556): rseq(&(0x7f0000002d80), 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$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") readlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000001200)=""/4090, 0xffa) 51.098208521s ago: executing program 0 (id=3559): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000140)={[{}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@debug}, {@nogrpid}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x9b, 0x4f2, &(0x7f0000000a40)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304c24, &(0x7f0000000140)='usrjquota=') 50.440281603s ago: executing program 0 (id=3565): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x549, 0x4800003a, r0, 0x0) 49.903112723s ago: executing program 0 (id=3569): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040), 0x4) 49.417770002s ago: executing program 35 (id=3569): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040), 0x4) 3.615516945s ago: executing program 6 (id=3984): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) readv(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) 3.33849463s ago: executing program 6 (id=3987): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x183341, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0xd, 0x7, 0x3, 0x6}) 2.351979918s ago: executing program 6 (id=3996): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 1.973486465s ago: executing program 7 (id=3998): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f00006d8000/0x3000)=nil) ptrace(0x10, 0x1) 1.474691193s ago: executing program 6 (id=4004): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) 1.474568313s ago: executing program 4 (id=4005): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 1.453188924s ago: executing program 7 (id=4006): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.340007886s ago: executing program 4 (id=4007): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='lastblock=00000000000004000226,adinicb,gid=forget,nostrict,unhide,nostrict,dmode=00000000000017777777777,uid=ignore,shortad,volume=00000000000000000006,\x00'], 0x4, 0xc24, &(0x7f0000000d00)="$eJzs3V9oXOl5B+D3myOtJW/TzG42zh/nYmAD2Xqzi2R51yregBwrIgvGa1ZWLhYKGluyO6w0kiW5eEMJLiSUkLa45CKXNWwCvauvWggNuFfbEgKiV6UXxW03Zns3CaQtvViVM/ONNNLalrK2JXn9PMb+nTnznpnvzOrVnDN7zpwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACK+/o2TQ8Npr0cBAOymM5NvDo14/weAJ8o5+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwvRRHfjRTv/qCVptu3OwZON5pXrk6NT9x9scEUKSpRtOvLvwPDR0eOvfLq8dFu3n/5h+0L8cbkuZO1Uwvzi0uzy8uzM7WpZuPCwszsjh/hQZff6kj7BajNv31l5uLF5drRl0c23X21eufA04eqJ0YPj7zVrZ0an5iY7Knp6//Yz/4R6eE9FJ8gT0UR34wU7730QapHRCUevBe2+d3xqA1GX9l/7ZWYGp9or8hco95cKe9MlVzVF1HtWWis2yO70IsPZCziWvnfqRzwkXL1JhfrS/Xzc7O1s/WllcZKY6GZKp3RlutTjUqMpojFiGgVez149pv+KOJYpLjz61Y6HxFFtw9ePDP55tDI9g/QtwuDvMfTVouI1XgMehb2qQNRxF9Gih9OD8WF3Ffttnk/4itlvhZxucxbKa7n26n8BTEa8SvvJ/BY64sifhEpFlIrzXR7v71defpbtdebFxd6arvblY/9/sFusm3CPjYQRZxvb/G30sf/sAsAAAAAAAAAAAAA2B1F/DRS3Jx/IS1G7zmljeal2rn6+bnOUcHdY/9ream1tbW1aupkLedQzrGcZ3NO51zMeS3n9Zw3ct7MeSvnas7bOVs5o5KfP2ct51DOsZxnc07nXMx5Lef1nDdy3sx5K+dqzts5WznDeU8AAAAAAAAAAAAAAAAAAAA8ZINRxESkuPHuH7WvKx3t69J/+sTomfHneq8Z/7ltHqesfTkifho7uyZvf77WeKqUfx7+egHbG4givpOv//cnez0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgX6hEEd+NFD/6TStFioixiOno5O1ir0cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJQGUhGnIsV/fWOgfXs1Ir4YER+ulX8i/ndtq70eMQAAAAAAAAAAAAAAAAAAAHwCpSIuR4ofv9dK1Yi4Wr1z4OlD1ROjh0feKqKIVJb01r8xee5k7dTC/OLS7PLy7Extqtm4sDAzu9OnGzjdaF65OjU+8UhWZluDj3j8gwOnFhbfWWpc+sOVu95/cODk+eWVpfqFu98dg9EXMdQ750h7wFPjE+1BzzXqzfaiqXKPAfZF1Ha6MgAAAAAAAAAAAAAAAAAAAOwbB1MR45Hi+Z8dS93zxvs65/x/qnOrWK/9yR9vfBfA3Jbs6v3+gJ1Mp50O9Ej7xPva1PjExGTP7L7+j5aWY0qpiM9GisN///n2+fApDt713Piy7s8ixej/Hct11cNl3dimqoEjU+MTtTMLzZdOzs0tXKiv1M/PzdYmF+sXdvzFAQAAAAAAAAAAAAAAAAAAAHAfB1MRfx4pjr2+mrrXnc/n//d1bvWc//9aRPey8wNpc65rn9v/u+1z+zvTnz4x+vrR5+81/1Gc/1+OKaUiPowUz/zV59vX0++e/z+0pbas+3Gk+MX3vpTrKk+VdcPd1ek84sXG3OxQWftipPj+2W5ttGtfzbWf2agdLmv/IVI8+weba4/n2uc2ao+WtXcixcSZu9d+dqN2pKwdjBRf/dNat/ZgWfv1XHtoo/blCwtzMzt9eXkylf3/b5Hiy8PfTN2f+Xv2f8/3f1zbkus+0vP3n35Y/V/tmXct9/Va7v/hbfr/cqT4i+tfynWd3jua73+m/e9G/38/UvzepzbXvpJrn92oHd7pasFeKvv/nyLF6u1/Wf+Zz/2fO2ujQ3v7/4t9m7O7XbBX/f9Mz7xqHtfIb/lawJNm+Z1vv12fm5tdMmHChIn1ib3+zQQ8auX2/39Hiq9dLlJ3PzZv//9O59bG/v//fGdj+//Elly3R9v/z/bMO5H3Wvr7IgZW5hf7PxcxsPzOt19qzNcvzV6abY6MjB7//WPDR48P9z/V3bnfmNrxawePu7L/344UP/mbf17/HHvz/v/dP/87uCXX7VH/f6Z3nTbt1+z4pYAnTtn/fx0p/vXGB+v/v+l+n/91P+d74fnNOdgt2qP+f65nXi3/M9oz74Ui4uROnwsAAAAAAAAAAB4TB1MRP4sUf9v6x/Vr3m8+/ie+3K3tPf7vXvbD9f8BgPsr3/8nI8XPD341db9DZifH/89syXV7dPzvoZ55M7t0XvOOX2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiYUhRxIFK8+4NWul2UtzsGTjeaV65OjU/cfbHBFCkqUbTry78Dw0dHjr3y6vHRbt5/+YftC/HG5LmTtVML84tLs8vLszO1qWbjwsLM7I4f4UGX3+pI+wWozb99ZebixeXa0ZdHNt19tXrnwNOHqidGD4+81a2dGp+YmOyp6ev/2M/+EenhPRSfIE9FET+PFO+99EH69yKiEg/eC9v87njUBqOv7L/2SkyNT7RXZK5Rb66Ud6ZKruqLqPYsNNbtkV3oxQcyFnEtIirlgI+Uqze5WF+qn5+brZ2tL600VhoLzVTpjLZcn2pUYjRFLEZEq9jrwbPf9EcRfxcp7vy6lf6jiCi6ffDimck3h0a2f4C+XRjkPZ62WkSsxmPQs7BPHYginosUP5weiv8sOn3Vbpv3I75S5msRl8u8leJ6vp3KXxCjEb/yfgKPtb4o4mykWEit9H6Re7+9XXn6W7XXmxcXemq725WP/f7BbrJtwj42EEX8sr3F30q/9H4OAAAAAAAAAAAAAPtcEV+LFDfnX0jt80PXzyltNC/VztXPz3UO6+8e+1/LS62tra1VUydrOYdyjuU8m3M652LOazmv57yR82bOWzlXc97O2coZlfz8OWs5h3KO5TybczrnYs5rOa/nvJHzZs5bOVdz3s7ZyhmOkwYAAAAAAAAAAAAAAAAA4BGpRBHfixQ/+k0rrRWd68tORydvO88VPtH+PwAA//9mFkcG") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.267578857s ago: executing program 7 (id=4009): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x1840, 0x124, 0x8}, 0x18) 1.267309947s ago: executing program 6 (id=4011): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x43, &(0x7f0000001e40)=ANY=[], 0xff, 0x5ef1, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x24) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000480)={@desc={0x1, 0x0, @desc1}}) 1.12583623s ago: executing program 7 (id=4012): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000340), 0xb, 0x40800) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000440)={0x0, 0x0, 0x98, &(0x7f0000000380)={0x0, 0x10000, 0x2}}) 1.062622561s ago: executing program 2 (id=4013): r0 = fsopen(&(0x7f0000000180)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='source\x00\x00\x00\x80\x00\x00\x00\x00X\xc9\x1c\x89\x95(\xca\xec\xe5\xa3\xaf\x99\xdd\x96\xddE\xd7\xc25chAtr\x8f>\xbc\x0f\x80\xb0\xec\xf8\xaf/p\xbd\xfd\x1b\xb1)qP\xd6\xc0\"f\']DH\x17\x84\xa5\xe5\xe7L~\xa3r{\a\xdb=\x18);\x13#\xbc\x8a\xd6}\'$\x92d\xa1\x80\xd1\x9fM6\xd5\xea\x83\xf9\xf80\xd3\xc7=\xa3\xe0\x9b%O\xf1t)\n.5TGL\xe66\xaa(\x9b\xd7\xcd\xa3`\xec\xa0\x7f\vC\x8bm\x8eG\x87\xb6s\x83\xd0I\x01\xa8<\xc4]|\xc4\xfa\x14\xdb\"{\x92/\x1c\xb3\x99Ypp\x8d\x9d\xfc\xda${*\xa6p\xde\xbc\xd4[\x91\xf5\x85\xb2o\xa4G\t\x85#\x01\xa9y1\x0e=\xb5\x92\xb2\xd2*\x10\x9c\x90\xdd\xc3S\x01\xb0@{C?\x9b\xffU\xfc\x84z!\xa8CSN\xb0wU\xa6&Hk\xe2pg\x90)ee+\xf1\xe5\x9c4\x19(\xb7 C\x83\xf2E\xb7M8\xae\xec', &(0x7f0000000040)='\x00\x00::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 975.500742ms ago: executing program 7 (id=4015): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x5, 0x4, 0xc, 0x2, @vifc_lcl_addr=@rand_addr=0x64010102, @rand_addr=0x64010102}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) 940.500333ms ago: executing program 4 (id=4016): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=@framed={{}, [@printk={@i}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 813.298006ms ago: executing program 2 (id=4017): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000400), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x34, r1, 0x40b, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4020080}, 0x40010) 743.644237ms ago: executing program 8 (id=4018): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001a0001000000ff7f00000000800000000042"], 0x24}}, 0x0) 743.201746ms ago: executing program 4 (id=4019): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r0, &(0x7f0000005880)=[{0x10, 0x0, 0x0, 0xfd, @time={0x1, 0x7}, {}, {0xe}, @control={0x8, 0x5, 0x6}}], 0x1c) 630.999919ms ago: executing program 2 (id=4020): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x5e, &(0x7f0000000380)={@local, @random="cce390677742", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0cbb05", 0x28, 0x3a, 0x0, @remote, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private2, @local}}}}}}, 0x0) 620.623259ms ago: executing program 4 (id=4021): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 567.72738ms ago: executing program 7 (id=4022): openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 567.55604ms ago: executing program 8 (id=4023): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) add_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) 481.630291ms ago: executing program 4 (id=4024): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xf, &(0x7f0000000b40)=ANY=[@ANYBLOB="1802000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000042c0000850000008600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 468.782182ms ago: executing program 8 (id=4025): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000e00)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000380)="27050200590200000600002fb96dbcf706e105000700810000008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x2}], 0x2}, 0x0) 428.834952ms ago: executing program 2 (id=4026): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000012c0), 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) read$eventfd(r1, &(0x7f0000001400), 0x8) 263.693915ms ago: executing program 8 (id=4027): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="780000004a00611400000000001800000a000105"], 0x78}, 0x1, 0x0, 0x0, 0x44000}, 0x840) 254.759625ms ago: executing program 2 (id=4028): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, 0x0, 0x1, 0x0, 0x3}) 164.257507ms ago: executing program 8 (id=4029): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) connect$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}, 0x2}}, 0x10) 7.70936ms ago: executing program 2 (id=4030): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0xc084}, 0x8044) 7.48817ms ago: executing program 6 (id=4031): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x4800, 0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0xc, 0xa, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) 0s ago: executing program 8 (id=4032): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$bt_hci(r0, 0x84, 0x75, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) kernel console output (not intermixed with test programs): 5] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 438.171570][T12678] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 48: comm syz.6.3129: lblock 0 mapped to illegal pblock 48 (length 1) [ 438.193196][T12675] REISERFS (device loop7): using ordered data mode [ 438.200025][T12675] reiserfs: using flush barriers [ 438.222210][T12678] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 438.230513][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3133'. [ 438.241530][T12675] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 438.261655][T12678] EXT4-fs error (device loop6): ext4_acquire_dquot:6802: comm syz.6.3129: Failed to acquire dquot type 0 [ 438.269136][T12675] REISERFS (device loop7): checking transaction log (loop7) [ 438.275550][T12688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3133'. [ 438.295049][T12678] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 438.310071][T12678] EXT4-fs error (device loop6): ext4_evict_inode:279: inode #11: comm syz.6.3129: mark_inode_dirty error [ 438.315856][T12675] REISERFS (device loop7): Using r5 hash to sort names [ 438.322535][T12678] EXT4-fs warning (device loop6): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 438.340372][T12688] netlink: 'syz.4.3133': attribute type 12 has an invalid length. [ 438.348829][T12688] netlink: 'syz.4.3133': attribute type 11 has an invalid length. [ 438.357495][T12678] EXT4-fs (loop6): 1 orphan inode deleted [ 438.369773][T12678] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 438.388403][ T4308] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 438.413661][T12675] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 438.443125][ T4308] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 438.460921][ T4308] EXT4-fs error (device loop6): ext4_release_dquot:6838: comm kworker/u4:6: Failed to release dquot type 0 [ 438.620017][T10829] EXT4-fs (loop6): unmounting filesystem. [ 438.642050][T10829] EXT4-fs error (device loop6): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 438.643405][T12675] REISERFS warning (device loop7): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 438.720022][T10829] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 438.755716][T10829] EXT4-fs error (device loop6): ext4_quota_off:7108: inode #3: comm syz-executor: mark_inode_dirty error [ 438.932520][T12675] REISERFS warning (device loop7): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 438.998661][T12675] REISERFS warning (device loop7): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 439.160889][T12708] loop0: detected capacity change from 0 to 64 [ 439.469655][T12712] loop0: detected capacity change from 0 to 8 [ 439.497529][T12712] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 439.532038][ T4328] udevd[4328]: incorrect cramfs checksum on /dev/loop0 [ 439.548039][T12695] loop4: detected capacity change from 0 to 32768 [ 439.570508][T12712] cramfs: Error -3 while decompressing! [ 439.580461][ T4328] udevd[4328]: incorrect cramfs checksum on /dev/loop0 [ 439.593147][T12712] cramfs: ffffffff96b504f8(16)->ffff8880525aa000(4096) [ 439.610367][T12712] cramfs: Error -3 while decompressing! [ 439.621098][T12712] cramfs: ffffffff96b504f8(16)->ffff8880525aa000(4096) [ 439.628741][ T26] audit: type=1800 audit(1748914132.291:155): pid=12712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3144" name="file0" dev="loop0" ino=244 res=0 errno=0 [ 439.633325][ T14] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 439.826576][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.826628][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.827163][T12658] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 439.857135][ T14] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 439.857166][ T14] usb 3-1: config 0 has no interface number 0 [ 439.857203][ T14] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 439.857230][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.867415][ T14] usb 3-1: config 0 descriptor?? [ 439.870868][ T14] usb 3-1: selecting invalid altsetting 1 [ 439.872264][ T14] dvb_ttusb_budget: ttusb_init_controller: error [ 439.872280][ T14] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 440.014684][T12658] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.014729][T12658] usb 8-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 440.014755][T12658] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.017782][T12658] usb 8-1: config 0 descriptor?? [ 440.161739][ T14] DVB: Unable to find symbol cx22700_attach() [ 440.400575][ T14] DVB: Unable to find symbol tda10046_attach() [ 440.411435][ T14] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 440.431296][T12658] logitech 0003:046D:C287.001C: unbalanced collection at end of report description [ 440.458647][ T14] usb 3-1: USB disconnect, device number 11 [ 440.491364][T12658] logitech 0003:046D:C287.001C: parse failed [ 440.511884][T12658] logitech: probe of 0003:046D:C287.001C failed with error -22 [ 440.644163][T12655] usb 8-1: USB disconnect, device number 3 [ 440.647237][T12727] loop4: detected capacity change from 0 to 8192 [ 440.698191][T12727] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 440.717359][T12727] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 440.736756][T12727] REISERFS (device loop4): using ordered data mode [ 440.749082][T12727] reiserfs: using flush barriers [ 440.773832][T12727] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 440.825662][T12727] REISERFS (device loop4): checking transaction log (loop4) [ 440.873106][T12727] REISERFS (device loop4): Using rupasov hash to sort names [ 440.896513][T12727] REISERFS (device loop4): using 3.5.x disk format [ 440.917247][T12727] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 440.948492][T12727] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 440.982984][T12727] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 441.016815][T12727] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 442.315884][T12761] loop2: detected capacity change from 0 to 8192 [ 442.355553][T12761] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 442.452290][T12761] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 442.510177][T12761] REISERFS (device loop2): using ordered data mode [ 442.562982][T12761] reiserfs: using flush barriers [ 442.569345][T12761] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 442.615026][T12765] loop0: detected capacity change from 0 to 8192 [ 442.724298][T12765] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 442.779912][T12761] REISERFS (device loop2): checking transaction log (loop2) [ 442.855708][T12765] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 442.873542][T12765] REISERFS (device loop0): using ordered data mode [ 442.880493][T12765] reiserfs: using flush barriers [ 442.886082][T12761] REISERFS (device loop2): Using tea hash to sort names [ 442.893898][T12761] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 442.922846][T12761] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 442.960270][T12765] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 443.038950][T12765] REISERFS (device loop0): checking transaction log (loop0) [ 443.153046][T12765] REISERFS (device loop0): Using r5 hash to sort names [ 443.211295][T12765] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 443.357128][T12765] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 443.404624][T12765] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 443.483368][T12765] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 444.045991][ T126] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 444.253246][ T126] usb 8-1: Using ep0 maxpacket: 16 [ 444.270286][ T126] usb 8-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 444.300471][ T126] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.336320][ T126] usb 8-1: Product: syz [ 444.340597][ T126] usb 8-1: Manufacturer: syz [ 444.376455][ T126] usb 8-1: SerialNumber: syz [ 444.391312][T12789] loop2: detected capacity change from 0 to 32768 [ 444.407861][ T126] usb 8-1: config 0 descriptor?? [ 444.429031][ T126] usb-storage 8-1:0.0: USB Mass Storage device detected [ 444.455521][T12789] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.3174 (12789) [ 444.504640][ T126] usb-storage 8-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 444.524926][ T126] usb-storage 8-1:0.0: This device (054c,002e,0500 S 04 P c9) has an unneeded SubClass entry in unusual_devs.h (kernel 6.1.140-syzkaller) [ 444.524926][ T126] Please send a copy of this message to and [ 444.550880][ C0] vkms_vblank_simulate: vblank timer overrun [ 444.573532][T12789] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 444.619349][T12789] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 444.649996][ T126] usb 8-1: USB disconnect, device number 4 [ 444.672216][T12789] BTRFS info (device loop2): force zlib compression, level 3 [ 444.691498][T12789] BTRFS info (device loop2): force clearing of disk cache [ 444.734966][T12789] BTRFS info (device loop2): setting nodatasum [ 444.741196][T12789] BTRFS info (device loop2): allowing degraded mounts [ 444.814989][T12789] BTRFS info (device loop2): enabling disk space caching [ 444.822095][T12789] BTRFS info (device loop2): disk space caching is enabled [ 445.017827][T12826] loop0: detected capacity change from 0 to 164 [ 445.114475][T12789] BTRFS info (device loop2): rebuilding free space tree [ 445.196022][T12789] BTRFS info (device loop2): disabling free space tree [ 445.223799][T12789] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 445.263167][T12789] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 445.333920][T12842] loop6: detected capacity change from 0 to 1024 [ 445.484006][T12789] BTRFS info (device loop2): balance: start -slimit=0..81917,stripes=0..32767 [ 445.545823][T12789] BTRFS info (device loop2): relocating block group 1048576 flags system [ 445.564768][ T9] hfsplus: b-tree write err: -5, ino 4 [ 445.669853][T12789] BTRFS info (device loop2): balance: ended with status: 0 [ 445.809076][ T4254] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 445.965499][T12855] loop6: detected capacity change from 0 to 64 [ 446.183612][T12855] minix_free_block (loop6:21): bit already cleared [ 446.389114][ T26] audit: type=1326 audit(1748914139.051:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12862 comm="syz.7.3202" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5609f8e969 code=0x0 [ 446.955402][T12865] loop4: detected capacity change from 0 to 32768 [ 447.013815][T12865] JBD2: Ignoring recovery information on journal [ 447.217920][T12865] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 447.389456][T12868] loop0: detected capacity change from 0 to 40427 [ 447.448996][T12868] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 447.488067][ T4258] ocfs2: Unmounting device (7,4) on (node local) [ 447.535483][T12868] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 447.583800][T12868] F2FS-fs (loop0): invalid crc value [ 447.705136][T12868] F2FS-fs (loop0): Found nat_bits in checkpoint [ 448.019460][T12868] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 448.043327][T12868] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 448.213047][T12907] loop2: detected capacity change from 0 to 64 [ 448.322043][T12907] Trying to free block not in datazone [ 448.498058][T12909] Trying to free block not in datazone [ 448.560893][T12909] minix_free_inode: bit 3 already cleared [ 448.881202][T12920] loop2: detected capacity change from 0 to 8 [ 449.012067][T12920] SQUASHFS error: Failed to read block 0x1ec: -5 [ 449.020884][T12920] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 449.685979][T12945] loop7: detected capacity change from 0 to 512 [ 449.709190][T12945] EXT4-fs: Ignoring removed oldalloc option [ 449.738361][T12945] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 449.887674][T12945] EXT4-fs error (device loop7): ext4_xattr_inode_iget:400: comm syz.7.3237: Parent and EA inode have the same ino 15 [ 449.914427][T12933] loop0: detected capacity change from 0 to 32768 [ 449.921916][T12933] XFS: noikeep mount option is deprecated. [ 449.936264][T12945] EXT4-fs error (device loop7): ext4_xattr_inode_iget:400: comm syz.7.3237: Parent and EA inode have the same ino 15 [ 449.958341][T12945] EXT4-fs (loop7): 1 orphan inode deleted [ 449.973226][T12945] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 449.991112][T12933] XFS (loop0): Mounting V5 Filesystem [ 450.123106][T12658] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 450.166158][T12933] XFS (loop0): Ending clean mount [ 450.272072][T10877] EXT4-fs (loop7): unmounting filesystem. [ 450.325000][T12658] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.345817][T12658] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 450.402256][T12658] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.442005][T12658] usb 5-1: config 0 descriptor?? [ 450.480185][ T4261] XFS (loop0): Unmounting Filesystem [ 450.713069][ T5003] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 450.883592][T12658] usb 5-1: USB disconnect, device number 16 [ 450.903165][ T5003] usb 3-1: Using ep0 maxpacket: 8 [ 450.918919][ T5003] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 450.964073][T12976] netlink: 'syz.6.3248': attribute type 1 has an invalid length. [ 450.972137][ T5003] usb 3-1: config 0 has no interface number 0 [ 450.992457][T12976] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3248'. [ 450.992793][ T5003] usb 3-1: config 0 interface 1 has no altsetting 0 [ 451.038137][ T5003] usb 3-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 451.052818][ T5003] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.081375][ T5003] usb 3-1: Product: syz [ 451.097028][ T5003] usb 3-1: Manufacturer: syz [ 451.101710][ T5003] usb 3-1: SerialNumber: syz [ 451.150801][ T5003] usb 3-1: config 0 descriptor?? [ 451.364014][ T5003] i2c-cp2615: probe of 3-1:0.1 failed with error -22 [ 451.398248][T12978] loop7: detected capacity change from 0 to 32768 [ 451.530592][T12982] loop4: detected capacity change from 0 to 64 [ 451.586600][T12982] minix_free_block (loop4:21): bit already cleared [ 451.613893][ T5003] usb 3-1: USB disconnect, device number 12 [ 451.664961][T12981] loop6: detected capacity change from 0 to 4096 [ 452.434347][T12989] loop7: detected capacity change from 0 to 4096 [ 452.441733][T12989] ntfs: (device loop7): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 452.865516][T12989] ntfs: (device loop7): parse_options(): NLS character set macgreÿ not found. Using previous one utf8. [ 452.904467][T12989] ntfs: (device loop7): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 452.943176][T12989] ntfs: (device loop7): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 453.020154][T12989] ntfs: volume version 3.1. [ 453.055001][T12989] ntfs: (device loop7): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 453.089202][T12989] ntfs: (device loop7): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 453.168286][T12989] ntfs: (device loop7): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 453.643025][T12995] loop6: detected capacity change from 0 to 32768 [ 453.800059][T12995] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 453.933759][T12995] (syz.6.3256,12995,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 454.001276][T12995] (syz.6.3256,12995,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 454.057916][T12995] (syz.6.3256,12995,1):ocfs2_rename:1483 ERROR: status = -2 [ 454.085993][T12995] (syz.6.3256,12995,1):ocfs2_rename:1687 ERROR: status = -2 [ 454.102627][T13041] loop2: detected capacity change from 0 to 512 [ 454.169221][T13041] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #17: comm syz.2.3277: iget: bogus i_mode (0) [ 454.217246][T10829] ocfs2: Unmounting device (7,6) on (node local) [ 454.264749][T13041] EXT4-fs (loop2): Remounting filesystem read-only [ 454.310639][T13041] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.3277: couldn't read orphan inode 17 (err -117) [ 454.353262][T13041] EXT4-fs (loop2): Remounting filesystem read-only [ 454.359854][T13041] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 454.542430][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 454.677332][T13039] loop0: detected capacity change from 0 to 32768 [ 454.722182][T13039] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop0 scanned by syz.0.3274 (13039) [ 454.811878][T13039] BTRFS info (device loop0): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 454.859866][T13039] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 454.909202][T13039] BTRFS info (device loop0): using free space tree [ 455.188731][T13039] BTRFS info (device loop0): enabling ssd optimizations [ 455.417597][ T4261] BTRFS info (device loop0): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 455.471445][T13084] loop6: detected capacity change from 0 to 4096 [ 455.537526][T13084] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 455.845133][T13092] loop7: detected capacity change from 0 to 4096 [ 455.892563][T13092] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 456.145071][T13100] loop4: detected capacity change from 0 to 1024 [ 456.349477][T13100] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 456.459394][T13109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3300'. [ 456.508636][T13107] netlink: 'syz.2.3298': attribute type 1 has an invalid length. [ 456.509237][T13111] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 456.758999][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 457.054009][T13119] loop0: detected capacity change from 0 to 4096 [ 457.061979][T13119] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 457.082502][ C0] vkms_vblank_simulate: vblank timer overrun [ 457.160100][T13119] ntfs: volume version 3.1. [ 457.270257][T13119] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maciceland. You might want to try to use the mount option nls=utf8. [ 457.295457][T13119] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 457.463194][ T14] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 457.640273][T13136] loop4: detected capacity change from 0 to 1024 [ 457.695876][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.714589][T13136] hfsplus: bad catalog entry type [ 457.730193][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.772811][ T14] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 457.781960][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.841442][ T14] usb 3-1: config 0 descriptor?? [ 457.849138][ T46] hfsplus: b-tree write err: -5, ino 4 [ 457.859030][T13144] loop0: detected capacity change from 0 to 128 [ 457.904394][T13144] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 457.977183][T13144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 458.263528][ T14] nzxt-smart2 0003:1E71:2009.001D: item fetching failed at offset 0/3 [ 458.293113][ T14] nzxt-smart2: probe of 0003:1E71:2009.001D failed with error -22 [ 458.328907][T13155] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 458.337295][T13155] IPv6: NLM_F_CREATE should be set when creating new route [ 458.344650][T13155] IPv6: NLM_F_CREATE should be set when creating new route [ 458.498293][ T14] usb 3-1: USB disconnect, device number 13 [ 458.516628][T13153] loop0: detected capacity change from 0 to 4096 [ 458.561945][T13153] ntfs: volume version 3.1. [ 458.746922][T13161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3323'. [ 458.783753][T13159] loop6: detected capacity change from 0 to 4096 [ 458.830333][T13159] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 458.925778][T13159] ntfs: (device loop6): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 458.980545][T13159] ntfs: (device loop6): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 459.043380][T13159] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 459.093044][T13159] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 459.096373][T13165] mkiss: ax0: crc mode is auto. [ 459.202979][T13159] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 459.212838][T13151] loop7: detected capacity change from 0 to 40427 [ 459.235613][T13159] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 459.256768][T13159] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 459.266135][T13159] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 459.282610][T13151] F2FS-fs (loop7): invalid crc value [ 459.293973][T13159] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 459.325974][T13159] ntfs: volume version 3.1. [ 459.326572][T13151] F2FS-fs (loop7): Found nat_bits in checkpoint [ 459.442835][ T14] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 459.533622][T13151] F2FS-fs (loop7): Start checkpoint disabled! [ 459.573481][T13151] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 459.638980][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.662302][ T14] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.704401][ T14] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.745961][ T14] usb 3-1: config 0 interface 0 has no altsetting 0 [ 459.766816][ T14] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 459.792137][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.833804][ T14] usb 3-1: config 0 descriptor?? [ 459.916530][T13163] loop0: detected capacity change from 0 to 32768 [ 460.023655][T13163] XFS (loop0): Mounting V5 Filesystem [ 460.153609][T13163] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 460.269718][T13163] XFS (loop0): Starting recovery (logdev: internal) [ 460.280886][T13176] loop4: detected capacity change from 0 to 4096 [ 460.314821][T13188] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3331'. [ 460.314849][ T14] kye 0003:0458:5015.001E: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.2-1/input0 [ 460.350410][T13176] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 460.364659][T13176] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 460.372596][T13176] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 460.373638][T13188] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3331'. [ 460.389676][ T14] kye 0003:0458:5015.001E: tablet-enabling feature report not found [ 460.389698][ T14] kye 0003:0458:5015.001E: tablet enabling failed [ 460.405895][T13163] XFS (loop0): Ending recovery (logdev: internal) [ 460.482965][T13176] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 460.490966][T13176] ntfs3: loop4: try to read out of volume at offset 0x3fffffc1c00 [ 460.523018][T13176] ntfs3: loop4: try to read out of volume at offset 0x3fffffc2c00 [ 460.538575][T13176] ntfs3: loop4: try to read out of volume at offset 0x3fffffc4c00 [ 460.568737][ T126] usb 3-1: USB disconnect, device number 14 [ 460.593125][T13176] ntfs3: loop4: try to read out of volume at offset 0x3fffffc8c00 [ 460.617616][T13176] ntfs3: loop4: try to read out of volume at offset 0x3fffffd0c00 [ 460.639120][T13176] ntfs3: loop4: try to read out of volume at offset 0x3fffffe0c00 [ 460.669496][ T4261] XFS (loop0): Unmounting Filesystem [ 460.753247][T12652] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 460.837951][T13191] fido_id[13191]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 460.983307][T12652] usb 8-1: Using ep0 maxpacket: 16 [ 460.994268][T12652] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.023192][T12652] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.039729][T12652] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 461.072761][T12652] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 461.092018][T12652] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.113999][T12652] usb 8-1: config 0 descriptor?? [ 461.536378][T12652] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 461.552947][T12652] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 461.570517][T12652] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 461.581377][T12652] microsoft 0003:045E:07DA.001F: No inputs registered, leaving [ 461.624740][T12652] microsoft 0003:045E:07DA.001F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 461.672733][T12652] microsoft 0003:045E:07DA.001F: no inputs found [ 461.679152][T12652] microsoft 0003:045E:07DA.001F: could not initialize ff, continuing anyway [ 461.753292][T12652] usb 8-1: USB disconnect, device number 5 [ 461.868829][T13196] loop4: detected capacity change from 0 to 32768 [ 462.011458][T13208] fido_id[13208]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 462.377312][T13219] loop4: detected capacity change from 0 to 64 [ 462.654647][T13225] sp0: Synchronizing with TNC [ 462.661710][T13204] loop0: detected capacity change from 0 to 40427 [ 462.720812][T13204] F2FS-fs (loop0): invalid crc value [ 462.769751][T13204] F2FS-fs (loop0): Found nat_bits in checkpoint [ 462.986693][T13204] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 463.128026][T13238] loop4: detected capacity change from 0 to 8192 [ 463.142128][T13238] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 463.162555][T13238] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 463.176170][T13238] REISERFS (device loop4): using ordered data mode [ 463.183214][T13238] reiserfs: using flush barriers [ 463.191023][T13238] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 463.213899][T13238] REISERFS (device loop4): checking transaction log (loop4) [ 463.350242][T13238] REISERFS (device loop4): Using r5 hash to sort names [ 463.400183][T13238] reiserfs: enabling write barrier flush mode [ 463.409476][T13246] loop7: detected capacity change from 0 to 4096 [ 463.450093][T13238] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 463.508351][T13238] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 463.526300][T13246] ntfs: volume version 3.1. [ 463.572535][T13238] REISERFS (device loop4): Remounting filesystem read-only [ 463.612796][T13238] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 463.667834][T13238] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 463.754931][T13238] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 463.796246][T13238] REISERFS error (device loop4): zam-7001 reiserfs_find_entry: io error [ 463.840126][T13238] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 463.899532][T13238] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 463.933880][T13238] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 463.994013][T13238] REISERFS warning (device loop4): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 464.120582][T13237] loop6: detected capacity change from 0 to 32768 [ 464.125635][T13238] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 464.177594][T13254] ubi31: attaching mtd0 [ 464.213716][T13238] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 464.271476][T13238] REISERFS (device loop4): Remounting filesystem read-only [ 464.312307][T13238] REISERFS error (device loop4): zam-7001 reiserfs_find_entry: io error [ 464.625749][T13262] loop2: detected capacity change from 0 to 512 [ 464.740534][T13262] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 464.786791][T13268] loop0: detected capacity change from 0 to 2048 [ 464.796534][T13262] ext4 filesystem being mounted at /716/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 464.865409][T13268] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 464.969192][T13262] __quota_error: 13 callbacks suppressed [ 464.969210][T13262] Quota error (device loop2): do_check_range: Getting dqdh_next_free 327680 out of range 0-7 [ 465.007265][T13273] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3367'. [ 465.053379][T13262] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 465.110940][T13262] EXT4-fs error (device loop2): ext4_acquire_dquot:6802: comm syz.2.3363: Failed to acquire dquot type 1 [ 465.192265][T13248] loop7: detected capacity change from 0 to 32768 [ 465.284013][T13248] XFS (loop7): Mounting V5 Filesystem [ 465.388193][T13291] loop0: detected capacity change from 0 to 64 [ 465.489063][T13291] hfs: hfs: Invalid key length: 94 [ 465.533292][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 465.662117][T13248] XFS (loop7): Ending clean mount [ 465.680520][T13248] XFS (loop7): Quotacheck needed: Please wait. [ 465.778119][ T4261] hfs: node 4:3 still has 1 user(s)! [ 465.894264][T13248] XFS (loop7): Quotacheck: Done. [ 466.121977][T10877] XFS (loop7): Unmounting Filesystem [ 466.144446][T13278] loop4: detected capacity change from 0 to 32768 [ 466.177706][T13278] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 466.198356][T13278] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 466.307638][ T4258] ocfs2: Unmounting device (7,4) on (node local) [ 466.829191][T13325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3386'. [ 466.932525][T13327] loop0: detected capacity change from 0 to 1024 [ 467.492555][T13323] loop4: detected capacity change from 0 to 32768 [ 467.526625][T13323] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.3387 (13323) [ 467.602636][T13323] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 467.648753][T13323] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 467.680429][T13323] BTRFS info (device loop4): enabling auto defrag [ 467.703675][T13323] BTRFS info (device loop4): doing ref verification [ 467.730688][T13323] BTRFS info (device loop4): use no compression [ 467.771213][T13323] BTRFS info (device loop4): force clearing of disk cache [ 467.779770][T13323] BTRFS info (device loop4): setting nodatacow, compression disabled [ 467.827251][T13323] BTRFS info (device loop4): disabling free space tree [ 467.983640][T13357] mkiss: ax0: crc mode is auto. [ 468.060885][T13335] loop2: detected capacity change from 0 to 32768 [ 468.134412][T13323] BTRFS info (device loop4): enabling ssd optimizations [ 468.143915][T13335] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 468.143915][T13335] [ 468.190710][T13323] BTRFS info (device loop4): rebuilding free space tree [ 468.275321][T13323] BTRFS info (device loop4): disabling free space tree [ 468.333663][T13323] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 468.362793][T13323] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 468.413302][T13368] tipc: Enabling of bearer rejected, failed to enable media [ 468.712015][ T4258] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 469.131188][T13380] loop2: detected capacity change from 0 to 2048 [ 469.242570][T13366] loop0: detected capacity change from 0 to 32768 [ 469.623257][T13390] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3409'. [ 469.961847][T13401] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3412'. [ 470.200893][T13407] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3415'. [ 470.293146][T13407] netlink: 'syz.6.3415': attribute type 20 has an invalid length. [ 470.334585][T13407] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3415'. [ 470.606696][T13388] loop2: detected capacity change from 0 to 40427 [ 470.628791][T13388] F2FS-fs (loop2): invalid crc value [ 470.669611][T13388] F2FS-fs (loop2): Found nat_bits in checkpoint [ 470.813254][T13388] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 471.197480][T13435] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3424'. [ 471.223940][T13435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3424'. [ 471.371597][T13437] loop6: detected capacity change from 0 to 1024 [ 471.407091][T13416] loop4: detected capacity change from 0 to 40427 [ 471.427120][T13416] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 471.510300][T13416] F2FS-fs (loop4): invalid crc value [ 471.515402][T13442] loop2: detected capacity change from 0 to 64 [ 471.568268][T13416] F2FS-fs (loop4): Found nat_bits in checkpoint [ 471.736410][T13416] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 471.887377][ T4258] syz-executor: attempt to access beyond end of device [ 471.887377][ T4258] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 472.198767][T13459] loop6: detected capacity change from 0 to 256 [ 472.623974][T13468] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3439'. [ 472.659667][T13468] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3439'. [ 472.988425][T13484] loop4: detected capacity change from 0 to 1024 [ 473.124467][T13484] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #3: block 1: comm syz.4.3444: lblock 1 mapped to illegal pblock 1 (length 1) [ 473.179219][T13484] Quota error (device loop4): write_blk: dquota write failed [ 473.242355][T13484] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 473.282959][T13484] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.3444: Failed to acquire dquot type 0 [ 473.370880][T13484] EXT4-fs error (device loop4): ext4_free_blocks:6210: comm syz.4.3444: Freeing blocks not in datazone - block = 0, count = 4096 [ 473.432028][T13500] loop0: detected capacity change from 0 to 1024 [ 473.439485][T13484] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.3444: Invalid inode bitmap blk 0 in block_group 0 [ 473.461930][ T4308] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 473.490516][T13500] hfsplus: bad catalog entry type [ 473.499359][T13484] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 473.509701][ T4308] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 473.526439][T13504] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3452'. [ 473.535630][ T4308] EXT4-fs error (device loop4): ext4_release_dquot:6838: comm kworker/u4:6: Failed to release dquot type 0 [ 473.581126][T13484] EXT4-fs (loop4): 1 orphan inode deleted [ 473.581937][ T4308] hfsplus: b-tree write err: -5, ino 4 [ 473.603525][T13484] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 473.623293][T13504] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3452'. [ 473.695264][T13484] EXT4-fs (loop4): unmounting filesystem. [ 473.736164][T13506] loop0: detected capacity change from 0 to 256 [ 473.789749][T13506] exfat: Deprecated parameter 'utf8' [ 473.819440][T13506] exfat: Deprecated parameter 'namecase' [ 473.849669][T13506] exfat: Deprecated parameter 'namecase' [ 473.866075][T13506] exfat: Deprecated parameter 'utf8' [ 473.923142][T13506] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 474.024662][T13512] loop4: detected capacity change from 0 to 64 [ 474.449241][T13498] loop2: detected capacity change from 0 to 32768 [ 474.536325][T13527] loop6: detected capacity change from 0 to 4096 [ 474.551991][T13498] XFS (loop2): Mounting V5 Filesystem [ 474.599809][T13527] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 474.721196][T13498] XFS (loop2): Ending clean mount [ 474.724328][T13538] loop7: detected capacity change from 0 to 4096 [ 474.760212][T13498] XFS (loop2): Quotacheck needed: Please wait. [ 474.925710][T13498] XFS (loop2): Quotacheck: Done. [ 474.948802][T13540] loop4: detected capacity change from 0 to 16 [ 475.009036][T13540] erofs: (device loop4): mounted with root inode @ nid 36. [ 475.105425][T13540] xt_hashlimit: max too large, truncated to 1048576 [ 475.131197][T13540] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 475.163410][ T4254] XFS (loop2): Unmounting Filesystem [ 475.195054][T13540] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -59 in[63, 4033] out[1851] [ 475.236493][T13540] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 475.720352][T13556] binder: BINDER_SET_CONTEXT_MGR already set [ 475.742752][T13556] binder: 13555:13556 ioctl 40046207 0 returned -16 [ 475.939214][T13563] loop0: detected capacity change from 0 to 8 [ 476.381970][T13577] loop0: detected capacity change from 0 to 164 [ 476.410048][T13577] Unable to read rock-ridge attributes [ 476.848689][T13569] loop2: detected capacity change from 0 to 32768 [ 477.628015][T13585] loop4: detected capacity change from 0 to 32768 [ 477.658528][T13585] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 477.744285][T13597] loop2: detected capacity change from 0 to 4096 [ 477.762202][T13597] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 477.812338][T12652] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 477.887866][T13601] program syz.4.3496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 477.889287][T13597] ntfs: volume version 3.1. [ 478.021796][ T4328] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 478.035623][T13597] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maciceland. You might want to try to use the mount option nls=utf8. [ 478.122786][T13597] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 478.147639][T13603] loop7: detected capacity change from 0 to 1024 [ 478.155659][T13591] loop6: detected capacity change from 0 to 32768 [ 478.245588][T13591] find_entry called with index = 0 [ 478.280879][T13603] EXT4-fs: Ignoring removed orlov option [ 478.305567][ T4259] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 478.314593][ T4259] Bluetooth: hci4: Injecting HCI hardware error event [ 478.327301][ T4263] Bluetooth: hci4: hardware error 0x00 [ 478.404336][T13603] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 478.453109][T12652] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 478.597068][T10877] EXT4-fs (loop7): unmounting filesystem. [ 478.649421][T12652] usb 5-1: Using ep0 maxpacket: 16 [ 478.659265][T12652] usb 5-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 478.687512][T12652] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.702750][T12652] usb 5-1: Product: syz [ 478.706964][T12652] usb 5-1: Manufacturer: syz [ 478.732841][T12652] usb 5-1: SerialNumber: syz [ 478.749781][T12652] usb 5-1: config 0 descriptor?? [ 478.784885][T12652] usb-storage 5-1:0.0: USB Mass Storage device detected [ 478.814241][T12652] usb-storage 5-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 478.821702][T12652] usb-storage 5-1:0.0: This device (054c,002e,0500 S 04 P c9) has an unneeded SubClass entry in unusual_devs.h (kernel 6.1.140-syzkaller) [ 478.821702][T12652] Please send a copy of this message to and [ 478.864762][T13618] loop7: detected capacity change from 0 to 64 [ 479.012273][T13620] loop2: detected capacity change from 0 to 512 [ 479.033601][T12652] usb 5-1: USB disconnect, device number 17 [ 479.100506][T13620] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 479.159342][T13620] EXT4-fs (loop2): 1 truncate cleaned up [ 479.203278][T13620] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 479.278267][T13620] EXT4-fs (loop2): Online resizing not supported with sparse_super2 [ 479.362135][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 479.542476][T13636] loop6: detected capacity change from 0 to 256 [ 479.625259][T13636] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3510'. [ 479.969266][T13647] loop2: detected capacity change from 0 to 64 [ 480.158694][T13649] loop4: detected capacity change from 0 to 1024 [ 480.463451][ T4263] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 480.538676][T13659] mkiss: ax0: crc mode is auto. [ 480.655755][T13631] loop7: detected capacity change from 0 to 32768 [ 480.754298][T13631] XFS (loop7): Mounting V5 Filesystem [ 480.873171][ T41] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 480.934809][T13670] loop2: detected capacity change from 0 to 2048 [ 480.938236][T13653] loop6: detected capacity change from 0 to 32768 [ 480.946743][T13675] loop0: detected capacity change from 0 to 512 [ 480.981326][T13653] [ 480.981326][T13653] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 480.981326][T13653] [ 481.028650][T13631] XFS (loop7): Ending clean mount [ 481.029560][T13653] ERROR: (device loop6): diWrite: ixpxd invalid [ 481.029560][T13653] [ 481.036629][T13631] XFS (loop7): Quotacheck needed: Please wait. [ 481.084468][ T41] usb 5-1: Using ep0 maxpacket: 32 [ 481.090171][T13653] ERROR: (device loop6): txCommit: [ 481.090171][T13653] [ 481.094064][T13675] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.3526: invalid indirect mapped block 256 (level 2) [ 481.101307][ T41] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 481.119142][ T41] usb 5-1: config 0 has no interface number 0 [ 481.126733][ T41] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.138855][T13677] jfs_create: dtSearch returned -17 [ 481.144176][ T41] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.154463][ T41] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 481.163583][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.184073][ T41] usb 5-1: config 0 descriptor?? [ 481.205700][T13675] EXT4-fs (loop0): 2 truncates cleaned up [ 481.211609][T13675] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 481.285700][ T26] audit: type=1800 audit(1748914173.951:157): pid=13675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3526" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 481.300417][T13675] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.3526: bg 0: block 5: invalid block bitmap [ 481.322132][T13631] XFS (loop7): Quotacheck: Done. [ 481.358426][T10829] [ 481.358426][T10829] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 481.358426][T10829] [ 481.360521][T13675] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 481.408341][T10829] [ 481.408341][T10829] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 481.408341][T10829] [ 481.434282][T13675] EXT4-fs (loop0): This should not happen!! Data will be lost [ 481.434282][T13675] [ 481.444796][T13675] EXT4-fs (loop0): Total free blocks count 0 [ 481.450898][T13675] EXT4-fs (loop0): Free/Dirty block details [ 481.458483][T13675] EXT4-fs (loop0): free_blocks=0 [ 481.466068][T13675] EXT4-fs (loop0): dirty_blocks=2 [ 481.471277][T13675] EXT4-fs (loop0): Block reservation details [ 481.478123][T13675] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 481.629274][ T4261] EXT4-fs (loop0): unmounting filesystem. [ 481.664198][T10877] XFS (loop7): Unmounting Filesystem [ 481.673412][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 481.726818][T13684] loop2: detected capacity change from 0 to 64 [ 481.802387][ T41] uclogic 0003:28BD:0094.0020: failed retrieving string descriptor #100: -71 [ 481.819218][T13684] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 481.842441][ T41] uclogic 0003:28BD:0094.0020: failed retrieving pen parameters: -71 [ 481.889539][ T41] uclogic 0003:28BD:0094.0020: pen probing failed: -71 [ 481.919968][ T41] uclogic 0003:28BD:0094.0020: failed probing parameters: -71 [ 481.936262][ T41] uclogic: probe of 0003:28BD:0094.0020 failed with error -71 [ 481.949536][ T41] usb 5-1: USB disconnect, device number 18 [ 482.392098][T13690] loop2: detected capacity change from 0 to 4096 [ 482.431354][T13690] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 482.463359][T13690] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 482.471365][T13690] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 482.505585][T13690] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 482.528437][T13690] ntfs3: loop2: try to read out of volume at offset 0x3fffffc1c00 [ 482.559465][T13690] ntfs3: loop2: try to read out of volume at offset 0x3fffffc2c00 [ 482.578360][T13690] ntfs3: loop2: try to read out of volume at offset 0x3fffffc4c00 [ 482.597110][T13690] ntfs3: loop2: try to read out of volume at offset 0x3fffffc8c00 [ 482.619101][T13686] loop0: detected capacity change from 0 to 32768 [ 482.630638][T13690] ntfs3: loop2: try to read out of volume at offset 0x3fffffd0c00 [ 482.665792][T13686] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.3529 (13686) [ 482.688466][T13690] ntfs3: loop2: try to read out of volume at offset 0x3fffffe0c00 [ 482.747295][T13686] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 482.747479][T13694] MTD: Couldn't look up 'memory.events': -15 [ 482.768093][T13686] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 482.806516][T13686] BTRFS info (device loop0): setting nodatacow, compression disabled [ 482.826075][T13686] BTRFS info (device loop0): setting datacow [ 482.846307][T13686] BTRFS info (device loop0): doing ref verification [ 482.882753][T13686] BTRFS info (device loop0): force clearing of disk cache [ 482.920492][T13686] BTRFS info (device loop0): turning off barriers [ 482.962982][T13686] BTRFS info (device loop0): turning on flush-on-commit [ 482.969998][T13686] BTRFS info (device loop0): turning on sync discard [ 483.023400][T13686] BTRFS info (device loop0): using free space tree [ 483.099172][T13707] loop4: detected capacity change from 0 to 512 [ 483.164272][T13707] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 483.224207][T13707] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 483.305199][T13686] BTRFS info (device loop0): enabling ssd optimizations [ 483.322220][T13707] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.3537: invalid indirect mapped block 4294967295 (level 1) [ 483.344902][T13686] BTRFS info (device loop0): rebuilding free space tree [ 483.403536][T13707] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.3537: invalid indirect mapped block 4294967295 (level 1) [ 483.418410][ T41] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 483.444108][T13707] EXT4-fs (loop4): 2 truncates cleaned up [ 483.450047][T13707] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 483.566626][ T4261] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 483.578085][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 483.652955][ T41] usb 8-1: Using ep0 maxpacket: 32 [ 483.660336][ T41] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 483.688494][ T41] usb 8-1: config 0 has no interface number 0 [ 483.707215][ T41] usb 8-1: config 0 interface 12 has no altsetting 0 [ 483.777379][ T41] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 483.802591][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.820080][ T41] usb 8-1: Product: syz [ 483.832239][ T41] usb 8-1: Manufacturer: syz [ 483.837745][ T41] usb 8-1: SerialNumber: syz [ 483.861718][ T41] usb 8-1: config 0 descriptor?? [ 484.283397][T12652] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 484.480548][ T41] f81534 8-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71 [ 484.491163][T12652] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.510406][ T41] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 484.520708][T12652] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 484.539145][ T41] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 484.547533][ T41] f81534: probe of 8-1:0.12 failed with error -71 [ 484.555979][T12652] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 484.581618][ T41] usb 8-1: USB disconnect, device number 6 [ 484.587972][T12652] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 484.599902][T12652] usb 5-1: SerialNumber: syz [ 484.837129][T12652] usb 5-1: 0:2 : does not exist [ 484.874191][T12652] usb 5-1: USB disconnect, device number 19 [ 484.991773][T11977] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 485.014998][T13762] loop0: detected capacity change from 0 to 2048 [ 485.090642][T13762] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 485.125327][ T4328] udevd[4328]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.188934][T11977] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 485.199184][ T4261] EXT4-fs (loop0): unmounting filesystem. [ 485.206102][T11977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.238284][T11977] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 485.269771][T11977] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 485.293948][T11977] usb 3-1: Manufacturer: syz [ 485.316048][T11977] usb 3-1: config 0 descriptor?? [ 485.484175][T11977] rc_core: IR keymap rc-hauppauge not found [ 485.490168][T11977] Registered IR keymap rc-empty [ 485.518291][T11977] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 485.542092][T13775] loop0: detected capacity change from 0 to 512 [ 485.567885][T11977] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input30 [ 485.602041][T13775] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 485.644859][T13775] [EXT4 FS bs=4096, gc=1, bpg=42, ipg=32, mo=842c018, mo2=0000] [ 485.672102][T13775] EXT4-fs (loop0): orphan cleanup on readonly fs [ 485.700951][T13775] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 485.711331][T13775] EXT4-fs warning (device loop0): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 485.727261][T13775] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 485.736741][T13775] EXT4-fs (loop0): 1 truncate cleaned up [ 485.742612][T13775] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 485.773922][T13775] EXT4-fs: Cannot specify journal on remount [ 485.825218][ C1] igorplugusb 3-1:0.0: receive overflow, at least 33 lost [ 485.940491][ T4261] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 486.010404][ T4261] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 486.038400][ T41] usb 3-1: USB disconnect, device number 15 [ 486.280806][T13771] loop7: detected capacity change from 0 to 32768 [ 486.321054][T13771] [ 486.321054][T13771] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 486.321054][T13771] [ 486.348146][ T26] audit: type=1800 audit(1748914179.011:158): pid=13771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3560" name="file1" dev="loop7" ino=4 res=0 errno=0 [ 486.402105][ T4261] EXT4-fs (loop0): unmounting filesystem. [ 486.520094][ T75] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.523255][T13771] [ 486.523255][T13771] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 486.523255][T13771] [ 486.619052][ T75] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.627433][T13771] [ 486.627433][T13771] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 486.627433][T13771] [ 486.681096][T13771] [ 486.681096][T13771] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 486.681096][T13771] [ 486.707196][ T26] audit: type=1326 audit(1748914179.371:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.6.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcde558e969 code=0x7fc00000 [ 486.729562][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.782568][T13771] [ 486.782568][T13771] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 486.782568][T13771] [ 486.826878][ T75] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.907800][T10877] [ 486.907800][T10877] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 486.907800][T10877] [ 486.926720][T10877] [ 486.926720][T10877] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 486.926720][T10877] [ 486.928716][ T75] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.408433][ T75] tipc: Disabling bearer [ 487.431575][ T75] tipc: Left network mode [ 487.441534][T13808] loop7: detected capacity change from 0 to 512 [ 487.498734][T13808] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 487.561773][T13808] EXT4-fs error (device loop7): ext4_orphan_get:1426: comm syz.7.3574: bad orphan inode 131083 [ 487.628431][T13808] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 487.771473][T10877] EXT4-fs (loop7): unmounting filesystem. [ 488.029865][ T4259] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 488.038420][ T4259] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 488.047122][ T4259] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 488.074344][ T4259] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 488.090699][ T4266] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 488.091000][ T4266] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 488.109818][T13800] loop4: detected capacity change from 0 to 32768 [ 488.181787][T13800] XFS (loop4): Mounting V5 Filesystem [ 488.245225][T13800] XFS (loop4): Ending clean mount [ 488.254999][T13800] XFS (loop4): Quotacheck needed: Please wait. [ 488.458364][T13800] XFS (loop4): Quotacheck: Done. [ 488.585313][ T4258] XFS (loop4): Unmounting Filesystem [ 488.983274][ T4504] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 489.115983][T13815] chnl_net:caif_netlink_parms(): no params data found [ 489.125108][T13847] loop7: detected capacity change from 0 to 1024 [ 489.187084][ T4504] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 489.205507][ T4504] usb 3-1: config 0 has no interface number 0 [ 489.210510][T13847] hfsplus: bad catalog entry type [ 489.213697][ T4504] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 489.228543][ T4504] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 489.242627][ T4504] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 489.271181][ T4504] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.315194][ T4308] hfsplus: b-tree write err: -5, ino 4 [ 489.315451][ T75] IPVS: stopping backup sync thread 13111 ... [ 489.334650][ T4504] usb 3-1: config 0 descriptor?? [ 489.340258][T13837] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 489.380118][ T4504] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 489.522321][T13851] loop4: detected capacity change from 0 to 4096 [ 489.561944][T13851] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 489.591879][T11977] usb 3-1: USB disconnect, device number 16 [ 489.610666][T13851] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 489.638716][T13851] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 489.679590][T13851] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 489.703232][T13851] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 489.716541][T13851] ntfs: volume version 3.1. [ 489.723610][T13851] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 489.735764][T13851] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 489.749333][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 489.759667][T13851] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 489.789697][T13815] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.820751][T13815] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.841439][T13815] device bridge_slave_0 entered promiscuous mode [ 489.850785][T13815] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.858000][T13815] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.870542][T13815] device bridge_slave_1 entered promiscuous mode [ 489.904455][T13861] loop7: detected capacity change from 0 to 64 [ 490.109013][T13864] loop4: detected capacity change from 0 to 256 [ 490.142852][ T4263] Bluetooth: hci4: command 0x0409 tx timeout [ 490.241627][T13864] FAT-fs (loop4): Directory bread(block 64) failed [ 490.283532][T13864] FAT-fs (loop4): Directory bread(block 65) failed [ 490.298005][T13815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.307580][T13864] FAT-fs (loop4): Directory bread(block 66) failed [ 490.329870][T13864] FAT-fs (loop4): Directory bread(block 67) failed [ 490.346855][T13864] FAT-fs (loop4): Directory bread(block 68) failed [ 490.362806][T13864] FAT-fs (loop4): Directory bread(block 69) failed [ 490.377113][ T75] device hsr_slave_0 left promiscuous mode [ 490.384469][T13864] FAT-fs (loop4): Directory bread(block 70) failed [ 490.391609][T13864] FAT-fs (loop4): Directory bread(block 71) failed [ 490.399344][T13864] FAT-fs (loop4): Directory bread(block 72) failed [ 490.406081][ T75] device hsr_slave_1 left promiscuous mode [ 490.409920][T13864] FAT-fs (loop4): Directory bread(block 73) failed [ 490.425029][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.432520][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.503118][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.510624][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.546649][ T75] device bridge_slave_1 left promiscuous mode [ 490.557156][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.568467][ T75] device bridge_slave_0 left promiscuous mode [ 490.574993][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.640334][ T75] device veth1_macvtap left promiscuous mode [ 490.647289][ T75] device veth0_macvtap left promiscuous mode [ 490.653840][ T75] device veth1_vlan left promiscuous mode [ 490.659903][ T75] device veth0_vlan left promiscuous mode [ 490.772805][T11977] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 490.975360][T11977] usb 8-1: config 0 has an invalid interface number: 151 but max is 2 [ 490.987460][T11977] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 491.012921][T11977] usb 8-1: config 0 has no interface number 0 [ 491.019197][T11977] usb 8-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 491.052871][T11977] usb 8-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 491.103027][T11977] usb 8-1: Dual-Role OTG device on HNP port [ 491.110274][T11977] usb 8-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 491.137421][T11977] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.146350][T11977] usb 8-1: Product: syz [ 491.150750][T11977] usb 8-1: Manufacturer: syz [ 491.155816][T11977] usb 8-1: SerialNumber: syz [ 491.170885][T11977] usb 8-1: config 0 descriptor?? [ 491.469910][T11977] usb 8-1: USB disconnect, device number 7 [ 491.494601][ T4328] udevd[4328]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 491.885433][ T75] team0 (unregistering): Port device team_slave_1 removed [ 491.980702][ T75] team0 (unregistering): Port device team_slave_0 removed [ 492.069598][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.184107][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.242893][ T4263] Bluetooth: hci4: command 0x041b tx timeout [ 492.906396][ T75] bond0 (unregistering): Released all slaves [ 492.991363][T13815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.152496][T13815] team0: Port device team_slave_0 added [ 493.188415][T13815] team0: Port device team_slave_1 added [ 493.297715][T13815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.309497][T13815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.416998][T13815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.471001][T13815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.490042][T13815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.516123][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.547484][T13815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.626042][T13913] loop7: detected capacity change from 0 to 512 [ 493.653951][T13913] EXT4-fs: Ignoring removed mblk_io_submit option [ 493.706934][T13913] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 493.718832][T13815] device hsr_slave_0 entered promiscuous mode [ 493.756208][T13815] device hsr_slave_1 entered promiscuous mode [ 493.763034][T13913] System zones: 1-12 [ 493.804989][T13913] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2195: inode #15: comm syz.7.3618: corrupted in-inode xattr [ 493.824804][T13815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.825379][T13913] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.3618: couldn't read orphan inode 15 (err -117) [ 493.845144][T13913] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 493.854998][T13815] Cannot create hsr debugfs directory [ 493.903686][T10877] EXT4-fs (loop7): unmounting filesystem. [ 494.014713][T13920] loop6: detected capacity change from 0 to 4096 [ 494.053263][T13920] ntfs3: loop6: ino=3, Correct links count -> 2. [ 494.110800][T13923] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3622'. [ 494.148591][T13923] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3622'. [ 494.212256][T13923] netlink: 'syz.7.3622': attribute type 19 has an invalid length. [ 494.234040][T13920] ntfs3: loop6: failed to convert "0080" to cp865 [ 494.249550][T13920] ntfs3: loop6: failed to convert name for inode 1e. [ 494.302908][ T4263] Bluetooth: hci4: command 0x040f tx timeout [ 494.619491][T13933] loop4: detected capacity change from 0 to 1024 [ 494.672054][T13933] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 494.717840][T13933] EXT4-fs error (device loop4): ext4_read_inline_dir:1593: inode #12: block 7: comm syz.4.3627: path /753/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 494.788067][T13815] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 494.819147][T13815] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 494.870303][T13815] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 494.918988][T13815] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 494.956823][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 495.120923][T13815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.150936][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 495.159813][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 495.188312][T13815] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.210153][T13952] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3635'. [ 495.211433][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 495.234677][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 495.252003][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.259171][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.307949][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 495.317615][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 495.331994][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 495.342540][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.349713][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.362963][ T41] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 495.373363][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 495.391006][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 495.404458][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 495.419949][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 495.454815][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 495.484961][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 495.500855][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 495.515739][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 495.537218][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 495.570745][ T41] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 495.579245][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 495.587259][ T41] usb 3-1: config 0 has no interface number 0 [ 495.602783][ T41] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 495.611868][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.621419][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 495.633201][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 495.652388][ T41] usb 3-1: config 0 descriptor?? [ 495.683736][ T41] usb 3-1: selecting invalid altsetting 1 [ 495.690282][ T41] dvb_ttusb_budget: ttusb_init_controller: error [ 495.731422][ T41] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 495.928224][ T41] DVB: Unable to find symbol cx22700_attach() [ 495.965854][T13972] netlink: 'syz.4.3643': attribute type 5 has an invalid length. [ 496.148940][ T41] DVB: Unable to find symbol tda10046_attach() [ 496.163026][ T41] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 496.212454][ T41] usb 3-1: USB disconnect, device number 17 [ 496.248435][T13975] loop7: detected capacity change from 0 to 4096 [ 496.262189][T13975] __ntfs_warning: 8 callbacks suppressed [ 496.262223][T13975] ntfs: (device loop7): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 496.297176][T13975] ntfs: (device loop7): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 496.309214][T13975] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 496.329881][T13975] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 496.371709][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 496.382195][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 496.393048][ T4263] Bluetooth: hci4: command 0x0419 tx timeout [ 496.404106][T13975] ntfs: volume version 3.1. [ 496.432320][T13815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.588882][ T11] ntfs: (device loop7): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 496.620500][ T11] ntfs: (device loop7): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 496.653008][T12655] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 496.662091][T10877] ntfs: (device loop7): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 496.855219][T12655] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.875803][T12655] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 496.910644][T12655] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 496.939222][T12655] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.960994][T12655] usb 5-1: config 0 descriptor?? [ 496.997694][T12655] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 497.014971][T12655] dvb-usb: bulk message failed: -22 (3/0) [ 497.031289][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3652'. [ 497.041720][T12655] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 497.061579][T12655] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 497.091598][T12655] usb 5-1: media controller created [ 497.122287][T12655] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 497.142998][T12655] dvb-usb: bulk message failed: -22 (6/0) [ 497.165301][T12655] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 497.201081][T12655] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input31 [ 497.225032][T12655] dvb-usb: schedule remote query interval to 150 msecs. [ 497.232118][T12655] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 497.263794][T12655] usb 5-1: USB disconnect, device number 20 [ 497.303589][T14000] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3654'. [ 497.314922][T12655] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 497.618347][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 497.629404][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 497.723391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 497.745646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 497.788232][T13815] device veth0_vlan entered promiscuous mode [ 497.801292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 497.810729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 497.819207][T14014] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3660'. [ 497.852099][T13815] device veth1_vlan entered promiscuous mode [ 497.925585][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 497.935692][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 497.956955][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 498.008856][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 498.040274][T13815] device veth0_macvtap entered promiscuous mode [ 498.099420][T13815] device veth1_macvtap entered promiscuous mode [ 498.189934][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.213147][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.224198][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.241849][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.261597][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.280714][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.292231][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.308400][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.322437][T13815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.338408][T14032] netlink: 'syz.7.3667': attribute type 4 has an invalid length. [ 498.359856][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 498.383945][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 498.412125][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 498.446851][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 498.464352][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.518943][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.552903][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.572699][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.582589][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.607278][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.629843][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.645456][T14037] loop6: detected capacity change from 0 to 8192 [ 498.651937][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.673644][T13815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.687551][T13792] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 498.698793][T14037] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 498.739484][T13792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 498.794333][T13815] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.806946][T13815] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.816567][T13815] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.825832][T13815] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.843028][T14037] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 498.858743][T14037] REISERFS (device loop6): using ordered data mode [ 498.871150][T14037] reiserfs: using flush barriers [ 498.885857][T14037] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 498.911401][T14043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3672'. [ 498.967726][T14037] REISERFS (device loop6): checking transaction log (loop6) [ 499.003058][T14037] REISERFS (device loop6): Using r5 hash to sort names [ 499.017833][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.039797][T14037] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 499.040261][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.114070][T14037] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 499.146244][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.158333][T13792] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 499.175669][T14037] REISERFS warning (device loop6): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 499.181407][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.209517][T14037] REISERFS warning (device loop6): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 499.260755][T13792] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 499.267108][T14037] REISERFS warning (device loop6): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 499.900580][T14059] loop7: detected capacity change from 0 to 164 [ 499.987338][T14061] loop2: detected capacity change from 0 to 256 [ 500.037732][T14061] exfat: Deprecated parameter 'utf8' [ 500.074744][T14061] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d) [ 500.158494][ T26] audit: type=1804 audit(1748914192.821:160): pid=14061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3680" name="/newroot/795/file0/bus" dev="loop2" ino=1048977 res=1 errno=0 [ 500.323563][ T26] audit: type=1800 audit(1748914192.881:161): pid=14061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3680" name="bus" dev="loop2" ino=1048977 res=0 errno=0 [ 500.344362][ C0] vkms_vblank_simulate: vblank timer overrun [ 500.465356][T14067] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3683'. [ 500.554100][T14049] loop8: detected capacity change from 0 to 32768 [ 500.619665][T14049] ERROR: (device loop8): diRead: i_ino != di_number [ 500.619665][T14049] [ 500.637417][T14073] netlink: 'syz.6.3687': attribute type 1 has an invalid length. [ 500.665371][T14049] ERROR: (device loop8): remounting filesystem as read-only [ 501.265906][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.272310][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.409951][T14085] loop6: detected capacity change from 0 to 8192 [ 501.477902][T14085] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 501.562368][T14085] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 501.595387][T14085] REISERFS (device loop6): using ordered data mode [ 501.616054][T14085] reiserfs: using flush barriers [ 501.644009][T14085] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 501.688099][T14085] REISERFS (device loop6): checking transaction log (loop6) [ 501.718908][T14085] REISERFS (device loop6): Using r5 hash to sort names [ 502.058798][T14078] loop7: detected capacity change from 0 to 32768 [ 502.157665][T14078] read_mapping_page failed! [ 502.162306][T14078] ERROR: (device loop7): txCommit: [ 502.162306][T14078] [ 502.337924][T10877] ERROR: (device loop7): diFree: numfree > numinos [ 502.337924][T10877] [ 502.466412][T14092] loop2: detected capacity change from 0 to 32768 [ 502.549575][ T4266] Bluetooth: hci0: command 0x0c1a tx timeout [ 502.555859][ T4263] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 502.591742][T14092] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 502.687823][T14087] loop8: detected capacity change from 0 to 32768 [ 502.731017][T14087] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 502.779263][T14087] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 502.976980][T14087] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 502.994519][ T4254] ocfs2: Unmounting device (7,2) on (node local) [ 503.122929][T12659] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 503.130536][T12659] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 503.310423][T14106] loop7: detected capacity change from 0 to 65536 [ 503.440580][T12659] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 310ms [ 503.497805][T12659] gfs2: fsid=syz:syz.0: jid=0: Done [ 503.546271][T14087] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 503.590712][T14106] XFS (loop7): Mounting V5 Filesystem [ 503.677192][T14106] XFS (loop7): Internal error !uuid_equal(&mp->m_sb.sb_uuid, &head->h_fs_uuid) at line 254 of file fs/xfs/xfs_log_recover.c. Caller xlog_header_check_mount+0x8e/0xd0 [ 503.694298][T14106] CPU: 0 PID: 14106 Comm: syz.7.3699 Not tainted 6.1.140-syzkaller #0 [ 503.702512][T14106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 503.712616][T14106] Call Trace: [ 503.715929][T14106] [ 503.718882][T14106] dump_stack_lvl+0x168/0x22e [ 503.723620][T14106] ? __xfs_printk+0x90/0x90 [ 503.728165][T14106] ? show_regs_print_info+0x12/0x12 [ 503.733411][T14106] ? kmem_cache_free+0xf7/0x290 [ 503.738304][T14106] ? xfs_rw_bdev+0x2d2/0x2f0 [ 503.742942][T14106] xfs_corruption_error+0x11e/0x170 [ 503.748181][T14106] ? xlog_header_check_mount+0x8e/0xd0 [ 503.753680][T14106] xlog_header_check_mount+0xbd/0xd0 [ 503.758996][T14106] ? xlog_header_check_mount+0x8e/0xd0 [ 503.764492][T14106] xlog_find_verify_log_record+0x32f/0x550 [ 503.770339][T14106] xlog_find_zeroed+0x379/0x460 [ 503.775234][T14106] xlog_find_head+0x60/0x790 [ 503.779862][T14106] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 503.785802][T14106] ? lockdep_hardirqs_on+0x94/0x140 [ 503.791055][T14106] xlog_find_tail+0x3e/0xa00 [ 503.795675][T14106] ? do_raw_spin_unlock+0x11d/0x230 [ 503.800429][T14102] loop4: detected capacity change from 0 to 32768 [ 503.800912][T14106] ? try_to_wake_up+0x67c/0x1080 [ 503.812321][T14106] xlog_recover+0x48/0x450 [ 503.816755][T14106] xfs_log_mount+0x2ba/0x460 [ 503.821362][T14106] xfs_mountfs+0xc42/0x1d10 [ 503.825877][T14106] ? lockdep_softirqs_off+0x420/0x420 [ 503.831300][T14106] ? xfs_default_resblks+0x70/0x70 [ 503.836427][T14106] ? init_timer_key+0x178/0x320 [ 503.841301][T14106] ? rcu_is_watching+0x11/0xa0 [ 503.846099][T14106] ? trace_xfs_inode_timestamp_range+0xa8/0x250 [ 503.852360][T14106] xfs_fs_fill_super+0x10f0/0x1350 [ 503.857491][T14106] get_tree_bdev+0x3f1/0x610 [ 503.862117][T14106] ? xfs_fs_warn_deprecated+0x190/0x190 [ 503.867796][T14106] vfs_get_tree+0x88/0x270 [ 503.872245][T14106] do_new_mount+0x24a/0xa40 [ 503.876771][T14106] __se_sys_mount+0x2d6/0x3c0 [ 503.881468][T14106] ? __x64_sys_mount+0xc0/0xc0 [ 503.886270][T14106] ? lockdep_hardirqs_on+0x94/0x140 [ 503.891501][T14106] ? __x64_sys_mount+0x1c/0xc0 [ 503.896277][T14106] do_syscall_64+0x4c/0xa0 [ 503.900724][T14106] ? clear_bhb_loop+0x60/0xb0 [ 503.905412][T14106] ? clear_bhb_loop+0x60/0xb0 [ 503.910130][T14106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.916063][T14106] RIP: 0033:0x7f5609f9010a [ 503.920528][T14106] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.940157][T14106] RSP: 002b:00007f560ae0ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 503.948606][T14106] RAX: ffffffffffffffda RBX: 00007f560ae0aef0 RCX: 00007f5609f9010a [ 503.956585][T14106] RDX: 000020000000b840 RSI: 0000200000000240 RDI: 00007f560ae0aeb0 [ 503.964562][T14106] RBP: 000020000000b840 R08: 00007f560ae0aef0 R09: 0000000000000000 [ 503.972537][T14106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000240 [ 503.980511][T14106] R13: 00007f560ae0aeb0 R14: 000000000000b958 R15: 00002000000002c0 [ 503.988503][T14106] [ 503.991604][ C0] vkms_vblank_simulate: vblank timer overrun [ 504.000203][T14106] XFS (loop7): Corruption detected. Unmount and run xfs_repair [ 504.009346][T14106] XFS (loop7): log has mismatched uuid - can't recover [ 504.016357][T14106] XFS (loop7): empty log check failed [ 504.021758][T14106] XFS (loop7): log mount/recovery failed: error -117 [ 504.070441][T14106] XFS (loop7): log mount failed [ 504.601375][T14104] loop6: detected capacity change from 0 to 32768 [ 504.829364][T14122] loop8: detected capacity change from 0 to 4096 [ 504.897368][T14122] ntfs3: loop8: Different NTFS' sector size (1024) and media sector size (512) [ 505.345691][T14128] tipc: Started in network mode [ 505.383392][T14128] tipc: Node identity ac141417, cluster identity 4711 [ 505.465641][T14128] tipc: Enabled bearer , priority 1 [ 505.572370][T14116] loop2: detected capacity change from 0 to 32768 [ 505.733919][T14116] XFS (loop2): Mounting V5 Filesystem [ 506.031968][T14116] XFS (loop2): Ending clean mount [ 506.056181][T14116] XFS (loop2): Quotacheck needed: Please wait. [ 506.121254][T14145] loop4: detected capacity change from 0 to 512 [ 506.205697][T14116] XFS (loop2): Quotacheck: Done. [ 506.225542][T14145] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 506.245590][T14124] loop7: detected capacity change from 0 to 32768 [ 506.316732][T14145] EXT4-fs (loop4): 1 orphan inode deleted [ 506.322522][T14145] EXT4-fs (loop4): 1 truncate cleaned up [ 506.334478][ T26] audit: type=1800 audit(1748914427.945:162): pid=14116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3702" name="bus" dev="loop2" ino=9292 res=0 errno=0 [ 506.373536][T14124] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 506.382211][T14145] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 506.392117][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 506.453832][T14145] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.4.3712: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=56 fake=0 [ 506.495755][T14124] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 506.503016][ T4293] tipc: Node number set to 2886997015 [ 506.518394][ T4254] XFS (loop2): Unmounting Filesystem [ 506.601449][T14145] EXT4-fs error (device loop4) in ext4_delete_inline_entry:1804: Corrupt filesystem [ 506.649405][T14130] loop6: detected capacity change from 0 to 32768 [ 506.709004][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 506.821709][T10877] ocfs2: Unmounting device (7,7) on (node local) [ 506.843119][T14130] XFS (loop6): Mounting V5 Filesystem [ 507.013991][T14130] XFS (loop6): Ending clean mount [ 507.070472][T14130] XFS (loop6): Quotacheck needed: Please wait. [ 507.244847][T14130] XFS (loop6): Quotacheck: Done. [ 507.450868][T10829] XFS (loop6): Unmounting Filesystem [ 507.561316][T14174] loop4: detected capacity change from 0 to 2048 [ 507.592785][T14155] loop8: detected capacity change from 0 to 32768 [ 507.658148][T14174] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 507.669474][T14155] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.3715 (14155) [ 507.758651][T14155] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 507.790771][T14179] loop2: detected capacity change from 0 to 256 [ 507.798100][T14155] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 507.815420][T14155] BTRFS info (device loop8): metadata ratio 2 [ 507.853023][T14155] BTRFS info (device loop8): allowing degraded mounts [ 507.859924][T14155] BTRFS info (device loop8): force zlib compression, level 3 [ 507.883235][T14155] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 507.959383][T14155] BTRFS info (device loop8): use zstd compression, level 3 [ 507.988880][T14155] BTRFS info (device loop8): force clearing of disk cache [ 508.046322][T14155] BTRFS info (device loop8): max_inline at 0 [ 508.077131][T14155] BTRFS info (device loop8): using free space tree [ 508.170554][T14189] loop2: detected capacity change from 0 to 512 [ 508.253258][ T5001] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 508.261708][T14155] BTRFS info (device loop8): enabling ssd optimizations [ 508.270044][T14155] BTRFS info (device loop8): rebuilding free space tree [ 508.274607][T14189] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 508.300357][T14189] ext4 filesystem being mounted at /804/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.442870][ T5001] usb 5-1: Using ep0 maxpacket: 16 [ 508.449842][ T5001] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.502732][ T5001] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.554478][ T5001] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 508.609057][ T5001] usb 5-1: config 0 interface 0 has no altsetting 0 [ 508.635679][ T5001] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 508.658071][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 508.661267][ T5001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.715309][T13815] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 508.719325][ T5001] usb 5-1: config 0 descriptor?? [ 508.896313][T14219] x_tables: duplicate underflow at hook 4 [ 508.902595][ T4340] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop8 scanned by udevd (4340) [ 509.158703][T14224] netlink: 'syz.2.3735': attribute type 3 has an invalid length. [ 509.195683][ T5001] hid-generic 0003:045E:05DA.0021: unbalanced collection at end of report description [ 509.235255][ T5001] hid-generic: probe of 0003:045E:05DA.0021 failed with error -22 [ 509.410410][ T4504] usb 5-1: USB disconnect, device number 21 [ 509.434830][T14227] loop6: detected capacity change from 0 to 2048 [ 509.515818][T14227] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 509.752061][T14215] loop7: detected capacity change from 0 to 32768 [ 509.775147][T14237] loop2: detected capacity change from 0 to 64 [ 510.130814][T14242] loop8: detected capacity change from 0 to 512 [ 510.237045][T14242] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 510.261276][ T26] audit: type=1800 audit(1748914431.915:163): pid=14227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3736" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 510.305301][T14242] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.419962][T10829] EXT4-fs (loop6): unmounting filesystem. [ 510.585285][T13815] EXT4-fs (loop8): unmounting filesystem. [ 510.708985][T14257] loop4: detected capacity change from 0 to 512 [ 510.773902][T14257] EXT4-fs: Ignoring removed nobh option [ 510.816829][T14257] EXT4-fs: Ignoring removed mblk_io_submit option [ 510.839736][T14259] loop8: detected capacity change from 0 to 2048 [ 510.865983][T14257] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 510.869034][T14262] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3749'. [ 510.934284][T14259] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 511.062390][T14259] EXT4-fs (loop8): can't enable nombcache during remount [ 511.095388][T14268] loop7: detected capacity change from 0 to 64 [ 511.130492][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 511.248384][T13815] EXT4-fs (loop8): unmounting filesystem. [ 511.530367][T14276] can0: slcan on ptm0. [ 511.587521][T14279] loop2: detected capacity change from 0 to 256 [ 511.635762][T14279] exfat: Deprecated parameter 'namecase' [ 511.708747][T14275] can0 (unregistered): slcan off ptm0. [ 511.715031][T14279] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 512.036391][T14290] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 512.391955][T14302] loop6: detected capacity change from 0 to 2048 [ 512.431463][T14302] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 512.521066][T14308] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 512.868496][T14319] loop7: detected capacity change from 0 to 512 [ 512.987739][T14319] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 513.098383][T14319] EXT4-fs (loop7): 1 truncate cleaned up [ 513.132719][T14319] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 513.217107][T14319] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 513.298496][T14324] program syz.8.3773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 513.360788][T10877] EXT4-fs (loop7): unmounting filesystem. [ 513.590394][T14317] loop6: detected capacity change from 0 to 32768 [ 513.671385][T14317] [ 513.671385][T14317] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 513.671385][T14317] [ 513.750613][T14317] ERROR: (device loop6): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 0 [ 513.750613][T14317] [ 513.806657][T14317] JFS: Invalid stbl[1] = -128 for inode 2, block = 0 [ 513.897413][T14344] loop8: detected capacity change from 0 to 256 [ 513.978981][T14344] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 514.005646][T14346] loop2: detected capacity change from 0 to 256 [ 514.024106][ T35] [ 514.024106][ T35] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 514.024106][ T35] [ 514.077566][ T35] [ 514.077566][ T35] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 514.077566][ T35] [ 514.153065][T10829] [ 514.153065][T10829] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 514.153065][T10829] [ 514.186832][ T106] [ 514.186832][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 514.186832][ T106] [ 514.232722][T10829] [ 514.232722][T10829] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 514.232722][T10829] [ 514.972777][T12652] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 515.046547][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3798'. [ 515.130523][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3798'. [ 515.172937][T12652] usb 8-1: Using ep0 maxpacket: 16 [ 515.190592][T12652] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.226726][T12652] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.256864][T12652] usb 8-1: config 0 interface 0 has no altsetting 0 [ 515.277326][T12652] usb 8-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 515.297580][T12652] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.310558][T12652] usb 8-1: config 0 descriptor?? [ 515.602575][T14393] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3807'. [ 515.614248][T14393] netlink: 264 bytes leftover after parsing attributes in process `syz.4.3807'. [ 515.624122][T14393] netlink: 'syz.4.3807': attribute type 5 has an invalid length. [ 515.733788][T12652] wacom 0003:056A:00ED.0022: hidraw0: USB HID v20.00 Device [HID 056a:00ed] on usb-dummy_hcd.7-1/input0 [ 515.906594][T14404] loop4: detected capacity change from 0 to 128 [ 515.931383][T11977] usb 8-1: USB disconnect, device number 8 [ 515.971964][T14404] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 516.033401][T14404] ext4 filesystem being mounted at /787/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 516.065435][ C0] vkms_vblank_simulate: vblank timer overrun [ 516.145935][T14404] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 7 (only 1 groups) [ 516.219289][T14406] fido_id[14406]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 516.294280][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 516.633718][T14430] loop7: detected capacity change from 0 to 64 [ 516.672777][T11977] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 516.884941][T11977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.915211][T11977] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 516.952799][T11977] usb 3-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 516.998923][T11977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.030697][T14438] loop8: detected capacity change from 0 to 1024 [ 517.049069][T11977] usb 3-1: config 0 descriptor?? [ 517.109182][T14442] loop4: detected capacity change from 0 to 64 [ 517.130226][T14438] hfsplus: bad catalog entry type [ 517.285148][T13792] hfsplus: b-tree write err: -5, ino 4 [ 517.475325][T11977] logitech 0003:046D:C286.0023: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.2-1/input0 [ 517.507504][T11977] logitech 0003:046D:C286.0023: no inputs found [ 517.587734][T14446] loop4: detected capacity change from 0 to 4096 [ 517.641741][T14446] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 517.675970][T12652] usb 3-1: USB disconnect, device number 18 [ 517.710210][T14434] loop6: detected capacity change from 0 to 32768 [ 517.863875][T14434] XFS (loop6): Mounting V5 Filesystem [ 517.943385][ T4258] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 517.954827][ T4258] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 517.972453][ T4258] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 518.010073][T14434] XFS (loop6): Ending clean mount [ 518.018571][T14449] fido_id[14449]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 518.049901][T14434] XFS (loop6): Quotacheck needed: Please wait. [ 518.107241][T14440] loop7: detected capacity change from 0 to 32768 [ 518.174123][T12658] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 518.245316][T14440] XFS (loop7): Mounting V5 Filesystem [ 518.305774][T14434] XFS (loop6): Quotacheck: Done. [ 518.375117][T12658] usb 9-1: config 0 has an invalid interface number: 248 but max is 0 [ 518.419430][T12658] usb 9-1: config 0 has no interface number 0 [ 518.446364][T12658] usb 9-1: config 0 interface 248 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 518.478371][T12658] usb 9-1: config 0 interface 248 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.506427][T12658] usb 9-1: config 0 interface 248 has no altsetting 0 [ 518.527562][T12658] usb 9-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 518.527598][T12658] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.529466][T12658] usb 9-1: config 0 descriptor?? [ 518.532348][T14440] XFS (loop7): Ending clean mount [ 518.558734][T10829] XFS (loop6): Unmounting Filesystem [ 518.752312][T10877] XFS (loop7): Unmounting Filesystem [ 519.140618][T12652] usb 9-1: USB disconnect, device number 2 [ 519.409157][T14481] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3840'. [ 519.430423][T14483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3843'. [ 519.526720][T14485] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3842'. [ 519.639936][T14479] loop2: detected capacity change from 0 to 32768 [ 519.772252][T14492] netlink: 408 bytes leftover after parsing attributes in process `syz.6.3847'. [ 519.781679][T14492] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3847'. [ 519.922988][T14479] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 520.156157][ T4254] ocfs2: Unmounting device (7,2) on (node local) [ 520.416542][T14517] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3857'. [ 520.448060][T14517] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3857'. [ 520.502922][T14517] netlink: 'syz.4.3857': attribute type 10 has an invalid length. [ 520.701756][T14525] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3861'. [ 520.751658][T14525] nbd: must specify a size in bytes for the device [ 520.913681][T14529] loop7: detected capacity change from 0 to 1024 [ 520.959123][T14532] loop6: detected capacity change from 0 to 256 [ 521.009913][T14532] exFAT-fs (loop6): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 521.140743][ T26] audit: type=1800 audit(1748914442.795:164): pid=14532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3866" name="file1" dev="loop6" ino=1048986 res=0 errno=0 [ 521.161717][ C0] vkms_vblank_simulate: vblank timer overrun [ 521.370967][ T46] hfsplus: b-tree write err: -5, ino 4 [ 521.570801][T14550] loop4: detected capacity change from 0 to 1024 [ 521.629832][T14550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 521.902854][ T4500] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 522.094874][ T4500] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 522.119314][ T4500] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 522.167452][ T4500] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 522.195220][ T4500] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 522.229298][ T4500] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 522.276776][T14551] loop2: detected capacity change from 0 to 32768 [ 522.300830][ T4500] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 522.317282][ T4500] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 522.356569][ T4500] usb 9-1: Product: syz [ 522.360914][ T4500] usb 9-1: Manufacturer: syz [ 522.428304][ T4500] cdc_wdm 9-1:1.0: skipping garbage [ 522.453181][ T4500] cdc_wdm 9-1:1.0: skipping garbage [ 522.524800][ T4500] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 522.530776][ T4500] cdc_wdm 9-1:1.0: Unknown control protocol [ 522.608266][T14573] delete_channel: no stack [ 522.659158][T14572] delete_channel: no stack [ 522.848970][ T26] audit: type=1326 audit(1748914444.505:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14575 comm="syz.7.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5609f8e969 code=0x7ffc0000 [ 522.921234][ T26] audit: type=1326 audit(1748914444.535:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14575 comm="syz.7.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5609f8e969 code=0x7ffc0000 [ 522.977598][T14561] loop6: detected capacity change from 0 to 40427 [ 522.992713][ T26] audit: type=1326 audit(1748914444.545:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14575 comm="syz.7.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5609f8e969 code=0x7ffc0000 [ 523.059399][T14561] F2FS-fs (loop6): invalid crc value [ 523.070895][ T26] audit: type=1326 audit(1748914444.545:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14575 comm="syz.7.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5609f8e969 code=0x7ffc0000 [ 523.094865][ T26] audit: type=1326 audit(1748914444.545:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14575 comm="syz.7.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5609f8e969 code=0x7ffc0000 [ 523.119312][ T26] audit: type=1326 audit(1748914444.545:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14575 comm="syz.7.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f5609f8e969 code=0x7ffc0000 [ 523.150627][T14561] F2FS-fs (loop6): Found nat_bits in checkpoint [ 523.207151][ T26] audit: type=1326 audit(1748914444.545:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14575 comm="syz.7.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5609f8e969 code=0x7ffc0000 [ 523.255400][ T26] audit: type=1326 audit(1748914444.545:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14575 comm="syz.7.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5609f8e969 code=0x7ffc0000 [ 523.284975][T14561] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1 [ 523.310952][T14561] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 523.410315][T10829] syz-executor: attempt to access beyond end of device [ 523.410315][T10829] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 523.472779][T12659] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 523.581939][T14570] loop4: detected capacity change from 0 to 32768 [ 523.639920][ T4340] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 523.663617][T12659] usb 8-1: Using ep0 maxpacket: 32 [ 523.680973][T12659] usb 8-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 523.720611][T12659] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.761856][T12659] usb 8-1: config 0 descriptor?? [ 523.787742][T12659] gspca_main: sq930x-2.14.0 probing 041e:403c [ 523.793526][T14578] loop2: detected capacity change from 0 to 32768 [ 523.822962][T14578] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 524.104865][ T4328] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 524.280433][T14589] [U] ¦ [ 524.307323][T14592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3890'. [ 524.434700][T12659] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 524.440630][T12659] sq930x: probe of 8-1:0.0 failed with error -71 [ 524.479764][T12659] usb 8-1: USB disconnect, device number 9 [ 524.676802][ T4504] usb 9-1: USB disconnect, device number 3 [ 524.820135][T14604] loop8: detected capacity change from 0 to 164 [ 524.857377][T14601] loop4: detected capacity change from 0 to 8192 [ 524.961047][T14601] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 525.019494][T14601] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 525.033206][T14601] REISERFS (device loop4): using ordered data mode [ 525.043791][T14601] reiserfs: using flush barriers [ 525.072473][T14601] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 525.100043][T14601] REISERFS (device loop4): checking transaction log (loop4) [ 525.151480][T14601] REISERFS (device loop4): Using r5 hash to sort names [ 525.163052][T14601] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 525.340261][T14598] loop2: detected capacity change from 0 to 32768 [ 525.377305][T14598] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 525.377305][T14598] [ 525.406754][T14598] ERROR: (device loop2): remounting filesystem as read-only [ 525.527081][T12652] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 525.665469][T14626] loop4: detected capacity change from 0 to 128 [ 525.725470][T12652] usb 8-1: config 0 has an invalid interface number: 117 but max is 0 [ 525.734665][T12652] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.769411][T12652] usb 8-1: config 0 has no interface number 0 [ 525.787854][T12652] usb 8-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 525.806013][T12652] usb 8-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 525.815060][T14611] loop6: detected capacity change from 0 to 40427 [ 525.839569][T12652] usb 8-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 525.854524][T14611] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 525.857739][T12652] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.862489][T14611] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 525.899920][T12652] usb 8-1: Product: syz [ 525.904630][T12652] usb 8-1: Manufacturer: syz [ 525.909268][T12652] usb 8-1: SerialNumber: syz [ 525.912016][T14611] F2FS-fs (loop6): invalid crc value [ 525.931842][T12652] usb 8-1: config 0 descriptor?? [ 525.948987][T14611] F2FS-fs (loop6): Found nat_bits in checkpoint [ 526.069601][T14611] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 526.087285][T14611] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 526.315970][ T4308] kworker/u4:6: attempt to access beyond end of device [ 526.315970][ T4308] loop6: rw=1, sector=45096, nr_sectors = 16 limit=40427 [ 526.419405][T14629] loop4: detected capacity change from 0 to 40427 [ 526.458593][T14629] F2FS-fs (loop4): Found nat_bits in checkpoint [ 526.522874][T14629] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 526.565106][T12652] usb 8-1: USB disconnect, device number 10 [ 526.601482][T14629] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 526.606543][T14648] loop2: detected capacity change from 0 to 512 [ 526.639996][T14648] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 526.657307][T14629] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 526.705200][T14648] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 526.735478][T14648] ext4 filesystem being mounted at /846/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 526.911909][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 527.399996][T14668] loop7: detected capacity change from 0 to 64 [ 527.470124][T14656] loop6: detected capacity change from 0 to 40427 [ 527.515611][T14656] F2FS-fs (loop6): invalid crc value [ 527.545276][T14656] F2FS-fs (loop6): Found nat_bits in checkpoint [ 527.546678][T14654] loop8: detected capacity change from 0 to 32768 [ 527.598685][T14670] loop4: detected capacity change from 0 to 4096 [ 527.620746][T14670] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 527.649098][T14654] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 527.674046][T14654] (syz.8.3915,14654,1):ocfs2_get_suballoc_slot_bit:2716 ERROR: invalid inode 139 requested [ 527.685117][T14656] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 527.740607][T14654] (syz.8.3915,14654,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: status = -22 [ 527.772353][T14670] ntfs3: loop4: ino=1f, "file2" failed to open parent directory r=5 to update [ 527.799706][T14654] (syz.8.3915,14654,1):ocfs2_test_inode_bit:2823 ERROR: get alloc slot and bit failed -22 [ 527.852008][T14654] (syz.8.3915,14654,1):ocfs2_test_inode_bit:2864 ERROR: status = -22 [ 527.874658][T10829] syz-executor: attempt to access beyond end of device [ 527.874658][T10829] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 527.923010][ T4308] ntfs3: loop4: ino=1f, failed to open parent directory r=5 to update [ 527.974344][T13815] ocfs2: Unmounting device (7,8) on (node local) [ 528.020095][T14688] loop7: detected capacity change from 0 to 512 [ 528.039747][T14688] EXT4-fs: Ignoring removed oldalloc option [ 528.049746][T14688] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 528.101146][T14688] EXT4-fs (loop7): 1 truncate cleaned up [ 528.135348][T14688] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 528.312343][T10877] EXT4-fs (loop7): unmounting filesystem. [ 528.700837][T14710] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 528.737646][T14710] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 528.812022][T14713] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3939'. [ 529.658055][T14737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3951'. [ 529.969016][T14743] loop2: detected capacity change from 0 to 8192 [ 530.043992][T14729] orangefs_mount: mount request failed with -4 [ 530.300123][T14755] loop2: detected capacity change from 0 to 16 [ 530.325106][T14755] erofs: (device loop2): mounted with root inode @ nid 36. [ 530.339251][T14757] loop4: detected capacity change from 0 to 512 [ 530.366111][T14757] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 530.427177][T14757] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 530.443019][ T4500] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 530.447735][T14761] loop2: detected capacity change from 0 to 256 [ 530.461506][T14757] ext4 filesystem being mounted at /822/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 530.598476][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 530.638418][ T4500] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 530.663266][ T4500] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.671304][ T4500] usb 9-1: Product: syz [ 530.683726][ T4500] usb 9-1: Manufacturer: syz [ 530.688369][ T4500] usb 9-1: SerialNumber: syz [ 530.715854][ T4500] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 530.959039][ T4500] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 531.077474][T14703] syz.7.3933 (14703): drop_caches: 1 [ 531.270618][T14777] loop7: detected capacity change from 0 to 256 [ 531.310272][T14777] FAT-fs (loop7): Directory bread(block 64) failed [ 531.320764][T14777] FAT-fs (loop7): Directory bread(block 65) failed [ 531.334197][T14777] FAT-fs (loop7): Directory bread(block 66) failed [ 531.340779][T14777] FAT-fs (loop7): Directory bread(block 67) failed [ 531.353071][T14777] FAT-fs (loop7): Directory bread(block 68) failed [ 531.371834][T14777] FAT-fs (loop7): Directory bread(block 69) failed [ 531.402562][T14777] FAT-fs (loop7): Directory bread(block 70) failed [ 531.423110][T14777] FAT-fs (loop7): Directory bread(block 71) failed [ 531.447114][T14777] FAT-fs (loop7): Directory bread(block 72) failed [ 531.454064][T14777] FAT-fs (loop7): Directory bread(block 73) failed [ 531.614166][ T4504] usb 9-1: USB disconnect, device number 4 [ 531.647876][T14773] loop4: detected capacity change from 0 to 32768 [ 531.697681][T14773] ERROR: (device loop4): duplicateIXtree: [ 531.697681][T14773] [ 531.724146][T14773] ERROR: (device loop4): remounting filesystem as read-only [ 531.813373][T14779] loop2: detected capacity change from 0 to 32768 [ 531.830199][T14779] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 532.063161][ T4500] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 532.097810][T14783] loop7: detected capacity change from 0 to 32768 [ 532.110684][ T4500] ath9k_htc: Failed to initialize the device [ 532.133179][ T4504] usb 9-1: ath9k_htc: USB layer deinitialized [ 532.362411][T14788] loop6: detected capacity change from 0 to 4096 [ 532.398869][T14788] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 532.411605][T14788] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 532.428386][T14788] ntfs: (device loop6): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 532.465064][T14788] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 532.491999][T14788] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 532.510685][T14788] ntfs: volume version 3.1. [ 532.518080][T14788] ntfs: (device loop6): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 532.535993][T14788] ntfs: (device loop6): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 532.560170][T14788] ntfs: (device loop6): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 532.584418][T14788] ntfs: (device loop6): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 532.603032][ T5001] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 532.613276][T14788] ntfs: (device loop6): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 532.683069][ T4504] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 532.792790][ T5001] usb 3-1: Using ep0 maxpacket: 32 [ 532.800351][ T5001] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 532.819187][ T5001] usb 3-1: config 4 has no interface number 0 [ 532.829363][ T5001] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.856388][ T5001] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.883076][ T5001] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 532.896100][ T4504] usb 9-1: config 0 has an invalid interface number: 117 but max is 0 [ 532.908091][ T4504] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.918421][ T5001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.938649][ T4504] usb 9-1: config 0 has no interface number 0 [ 532.948260][ T5001] hub 3-1:4.128: USB hub found [ 532.960183][ T4504] usb 9-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 532.985886][ T4504] usb 9-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 533.029061][ T4504] usb 9-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 533.047517][ T4504] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.064586][ T4504] usb 9-1: Product: syz [ 533.073304][ T4504] usb 9-1: Manufacturer: syz [ 533.083043][ T4504] usb 9-1: SerialNumber: syz [ 533.100566][ T4504] usb 9-1: config 0 descriptor?? [ 533.149260][ T5001] hub 3-1:4.128: 2 ports detected [ 533.154602][ T5001] hub 3-1:4.128: Using single TT (err -22) [ 533.292191][T14817] netlink: 'syz.7.3989': attribute type 1 has an invalid length. [ 533.349872][ T5001] hub 3-1:4.128: hub_hub_status failed (err = -71) [ 533.365879][ T5001] hub 3-1:4.128: config failed, can't get hub status (err -71) [ 533.432825][ T5001] usb 3-1: USB disconnect, device number 19 [ 533.698892][T14813] loop6: detected capacity change from 0 to 40427 [ 533.726995][T12658] usb 9-1: USB disconnect, device number 5 [ 533.764884][T14813] F2FS-fs (loop6): Found nat_bits in checkpoint [ 533.884237][T14813] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 534.002372][T14833] loop2: detected capacity change from 0 to 512 [ 534.009751][T10829] syz-executor: attempt to access beyond end of device [ 534.009751][T10829] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 534.101024][T14833] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.3995: bad orphan inode 11862016 [ 534.128851][T14833] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 534.160779][T14833] ext4 filesystem being mounted at /869/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.186224][T14821] loop7: detected capacity change from 0 to 32768 [ 534.569942][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 534.751657][T14849] ptrace attach of "./syz-executor exec"[10877] was attempted by ""[14849] [ 535.180568][T14869] loop4: detected capacity change from 0 to 2048 [ 535.191352][T14865] loop8: detected capacity change from 0 to 2048 [ 535.219706][T14869] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 535.246619][T14869] UDF-fs: Scanning with blocksize 512 failed [ 535.282093][T14869] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 535.425948][T14875] 9pnet_virtio: no channels available for device [ 535.942087][T14871] loop6: detected capacity change from 0 to 32768 [ 536.000492][T14871] ERROR: (device loop6): dbAdjCtl: the maximum free buddy is not the old root [ 536.000492][T14871] [ 536.305047][T10829] BUG: Bad page state in process syz-executor pfn:5c791 [ 536.319797][T10829] page:ffffea000171e440 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x5c791 [ 536.342719][T10829] flags: 0xfff18000002046(referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 536.364005][T10829] raw: 00fff18000002046 ffffea00015f8288 ffffc90003b37960 0000000000000000 [ 536.381749][T10829] raw: 0000000000000004 ffff88807334c7c0 00000000ffffffff 0000000000000000 [ 536.397108][T10829] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 536.398927][T14909] device bridge1 entered promiscuous mode [ 536.410018][T10829] page_owner tracks the page as allocated [ 536.431968][T14909] team0: Port device bridge1 added [ 536.432951][T10829] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 14871, tgid 14870 (syz.6.4011), ts 535997132911, free_ts 535902521657 [ 536.488782][T10829] post_alloc_hook+0x173/0x1a0 [ 536.499336][T10829] get_page_from_freelist+0x1a26/0x1ac0 [ 536.509942][T10829] __alloc_pages+0x1df/0x4e0 [ 536.515973][T10829] folio_alloc+0x1c/0x60 [ 536.520510][T10829] filemap_alloc_folio+0xdb/0x460 [ 536.530777][T10829] do_read_cache_folio+0x1bb/0x760 [ 536.539776][T10829] do_read_cache_page+0x32/0x220 [ 536.554009][T10829] __get_metapage+0x316/0xfa0 [ 536.560424][T10829] dbAllocCtl+0xd4/0x9a0 [ 536.567446][T10829] dbAllocAG+0xb9c/0xf10 [ 536.571922][T10829] dbDiscardAG+0x2ca/0x8e0 [ 536.582286][T10829] jfs_ioc_trim+0x42b/0x660 [ 536.589657][T10829] jfs_ioctl+0x2b6/0x3d0 [ 536.597586][T10829] __se_sys_ioctl+0xfa/0x170 [ 536.602369][T10829] do_syscall_64+0x4c/0xa0 [ 536.609529][T10829] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.618940][T10829] page last free stack trace: [ 536.627311][T10829] free_unref_page_prepare+0x8b4/0x9a0 [ 536.636346][T10829] free_unref_page_list+0xbb/0x8e0 [ 536.641685][T10829] release_pages+0x1f92/0x2200 [ 536.651619][T10829] tlb_flush_mmu+0xff/0x210 [ 536.664204][T10829] tlb_finish_mmu+0xbd/0x1c0 [ 536.670294][T10829] exit_mmap+0x343/0x8e0 [ 536.677007][T10829] __mmput+0x118/0x3c0 [ 536.687234][T10829] exit_mm+0x1e6/0x2c0 [ 536.691492][T10829] do_exit+0x8b9/0x2400 [ 536.698128][T10829] do_group_exit+0x217/0x2d0 [ 536.709663][T10829] get_signal+0x1272/0x1350 [ 536.716603][T10829] arch_do_signal_or_restart+0xb0/0x1230 [ 536.722384][T10829] exit_to_user_mode_loop+0x70/0x110 [ 536.731548][T10829] exit_to_user_mode_prepare+0xb1/0x140 [ 536.739603][T10829] syscall_exit_to_user_mode+0x16/0x40 [ 536.748865][T10829] do_syscall_64+0x58/0xa0 [ 536.758121][T10829] Modules linked in: [ 536.770332][T10829] CPU: 1 PID: 10829 Comm: syz-executor Not tainted 6.1.140-syzkaller #0 [ 536.778716][T10829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 536.788799][T10829] Call Trace: [ 536.792111][T10829] [ 536.795069][T10829] dump_stack_lvl+0x168/0x22e [ 536.799795][T10829] ? show_regs_print_info+0x12/0x12 [ 536.805027][T10829] ? swiotlb_print_info+0x60/0x60 [ 536.810105][T10829] bad_page+0x14b/0x170 [ 536.814289][T10829] free_unref_page_prepare+0x42a/0x9a0 [ 536.819786][T10829] ? percpu_ref_put+0x19/0x180 [ 536.824591][T10829] free_unref_page_list+0xbb/0x8e0 [ 536.829748][T10829] release_pages+0x1f92/0x2200 [ 536.834656][T10829] ? lru_cache_disable+0x30/0x30 [ 536.839655][T10829] ? mlock_page_drain_local+0x75/0x490 [ 536.845150][T10829] ? mlock_page_drain_local+0x75/0x490 [ 536.850632][T10829] ? mlock_page_drain_local+0x289/0x490 [ 536.856192][T10829] __pagevec_release+0x6d/0xe0 [ 536.860966][T10829] truncate_inode_pages_range+0x2f6/0xff0 [ 536.866717][T10829] ? mapping_evict_folio+0x520/0x520 [ 536.872042][T10829] ? jfs_alloc_inode+0x60/0x60 [ 536.876825][T10829] ? evict+0x7da/0x870 [ 536.880916][T10829] ? do_raw_spin_unlock+0x11d/0x230 [ 536.886141][T10829] ? _raw_spin_unlock+0x24/0x40 [ 536.891023][T10829] ? iput+0x768/0x980 [ 536.895041][T10829] dbUnmount+0x105/0x170 [ 536.899316][T10829] jfs_umount+0x1fa/0x360 [ 536.903686][T10829] jfs_put_super+0x88/0x190 [ 536.908216][T10829] ? jfs_free_inode+0x20/0x20 [ 536.912931][T10829] generic_shutdown_super+0x130/0x340 [ 536.918329][T10829] kill_block_super+0x7c/0xe0 [ 536.923024][T10829] deactivate_locked_super+0x93/0xf0 [ 536.928325][T10829] cleanup_mnt+0x463/0x4f0 [ 536.932755][T10829] ? lockdep_hardirqs_on+0x94/0x140 [ 536.937972][T10829] task_work_run+0x1ca/0x250 [ 536.942581][T10829] ? task_work_cancel+0x230/0x230 [ 536.947628][T10829] ? exit_to_user_mode_loop+0x3b/0x110 [ 536.953189][T10829] exit_to_user_mode_loop+0xe6/0x110 [ 536.958490][T10829] exit_to_user_mode_prepare+0xb1/0x140 [ 536.964048][T10829] syscall_exit_to_user_mode+0x16/0x40 [ 536.969518][T10829] do_syscall_64+0x58/0xa0 [ 536.973946][T10829] ? clear_bhb_loop+0x60/0xb0 [ 536.978626][T10829] ? clear_bhb_loop+0x60/0xb0 [ 536.983307][T10829] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.989214][T10829] RIP: 0033:0x7fcde558fc97 [ 536.993633][T10829] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 537.013281][T10829] RSP: 002b:00007ffde0cfe648 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 537.021710][T10829] RAX: 0000000000000000 RBX: 00007fcde561089d RCX: 00007fcde558fc97 [ 537.029689][T10829] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde0cfe700 [ 537.037665][T10829] RBP: 00007ffde0cfe700 R08: 0000000000000000 R09: 0000000000000000 [ 537.045638][T10829] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffde0cff790 [ 537.053612][T10829] R13: 00007fcde561089d R14: 0000000000082e43 R15: 00007ffde0cff7d0 [ 537.061603][T10829] [ 537.072749][T10829] Disabling lock debugging due to kernel taint [ 537.079039][T10829] BUG: Bad page state in process syz-executor pfn:57e0a [ 537.086338][T10829] page:ffffea00015f8280 refcount:0 mapcount:0 mapping:0000000000000000 index:0x3 pfn:0x57e0a [ 537.098248][T10829] flags: 0xfff18000002046(referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 537.109830][T10829] raw: 00fff18000002046 ffffea0000aa6248 ffffc90003b37960 0000000000000000 [ 537.118770][T10829] raw: 0000000000000003 ffff8880585da8b8 00000000ffffffff 0000000000000000 [ 537.127616][T10829] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 537.134928][T10829] page_owner tracks the page as allocated [ 537.140645][T10829] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 14871, tgid 14870 (syz.6.4011), ts 535994215887, free_ts 535902530780 [ 537.159231][T10829] post_alloc_hook+0x173/0x1a0 [ 537.164052][T10829] get_page_from_freelist+0x1a26/0x1ac0 [ 537.169612][T10829] __alloc_pages+0x1df/0x4e0 [ 537.174737][T10829] folio_alloc+0x1c/0x60 [ 537.179009][T10829] filemap_alloc_folio+0xdb/0x460 [ 537.184103][T10829] do_read_cache_folio+0x1bb/0x760 [ 537.189237][T10829] do_read_cache_page+0x32/0x220 [ 537.195754][T10829] __get_metapage+0x316/0xfa0 [ 537.200457][T10829] dbAllocAG+0x3dd/0xf10 [ 537.204747][T10829] dbDiscardAG+0x2ca/0x8e0 [ 537.209193][T10829] jfs_ioc_trim+0x42b/0x660 [ 537.213920][T10829] jfs_ioctl+0x2b6/0x3d0 [ 537.218163][T10829] __se_sys_ioctl+0xfa/0x170 [ 537.222808][T10829] do_syscall_64+0x4c/0xa0 [ 537.227256][T10829] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.233495][T10829] page last free stack trace: [ 537.238166][T10829] free_unref_page_prepare+0x8b4/0x9a0 [ 537.243663][T10829] free_unref_page_list+0xbb/0x8e0 [ 537.248775][T10829] release_pages+0x1f92/0x2200 [ 537.253860][T10829] tlb_flush_mmu+0xff/0x210 [ 537.258406][T10829] tlb_finish_mmu+0xbd/0x1c0 [ 537.263066][T10829] exit_mmap+0x343/0x8e0 [ 537.267327][T10829] __mmput+0x118/0x3c0 [ 537.271394][T10829] exit_mm+0x1e6/0x2c0 [ 537.275698][T10829] do_exit+0x8b9/0x2400 [ 537.279855][T10829] do_group_exit+0x217/0x2d0 [ 537.284577][T10829] get_signal+0x1272/0x1350 [ 537.289082][T10829] arch_do_signal_or_restart+0xb0/0x1230 [ 537.296076][T10829] exit_to_user_mode_loop+0x70/0x110 [ 537.301392][T10829] exit_to_user_mode_prepare+0xb1/0x140 [ 537.307011][T10829] syscall_exit_to_user_mode+0x16/0x40 [ 537.312494][T10829] do_syscall_64+0x58/0xa0 [ 537.317195][T10829] Modules linked in: [ 537.321116][T10829] CPU: 0 PID: 10829 Comm: syz-executor Tainted: G B 6.1.140-syzkaller #0 [ 537.330914][T10829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 537.340965][T10829] Call Trace: [ 537.344238][T10829] [ 537.347163][T10829] dump_stack_lvl+0x168/0x22e [ 537.351842][T10829] ? show_regs_print_info+0x12/0x12 [ 537.357038][T10829] ? swiotlb_print_info+0x60/0x60 [ 537.362072][T10829] bad_page+0x14b/0x170 [ 537.366229][T10829] free_unref_page_prepare+0x42a/0x9a0 [ 537.371687][T10829] ? percpu_ref_put+0x19/0x180 [ 537.376455][T10829] free_unref_page_list+0xbb/0x8e0 [ 537.381572][T10829] release_pages+0x1f92/0x2200 [ 537.386347][T10829] ? lru_cache_disable+0x30/0x30 [ 537.391300][T10829] ? mlock_page_drain_local+0x75/0x490 [ 537.396762][T10829] ? mlock_page_drain_local+0x75/0x490 [ 537.402224][T10829] ? mlock_page_drain_local+0x289/0x490 [ 537.407775][T10829] __pagevec_release+0x6d/0xe0 [ 537.412548][T10829] truncate_inode_pages_range+0x2f6/0xff0 [ 537.418283][T10829] ? mapping_evict_folio+0x520/0x520 [ 537.423580][T10829] ? jfs_alloc_inode+0x60/0x60 [ 537.428348][T10829] ? evict+0x7da/0x870 [ 537.432432][T10829] ? do_raw_spin_unlock+0x11d/0x230 [ 537.437641][T10829] ? _raw_spin_unlock+0x24/0x40 [ 537.442497][T10829] ? iput+0x768/0x980 [ 537.446487][T10829] dbUnmount+0x105/0x170 [ 537.450732][T10829] jfs_umount+0x1fa/0x360 [ 537.455074][T10829] jfs_put_super+0x88/0x190 [ 537.459583][T10829] ? jfs_free_inode+0x20/0x20 [ 537.464263][T10829] generic_shutdown_super+0x130/0x340 [ 537.469639][T10829] kill_block_super+0x7c/0xe0 [ 537.474319][T10829] deactivate_locked_super+0x93/0xf0 [ 537.479610][T10829] cleanup_mnt+0x463/0x4f0 [ 537.484034][T10829] ? lockdep_hardirqs_on+0x94/0x140 [ 537.489242][T10829] task_work_run+0x1ca/0x250 [ 537.493837][T10829] ? task_work_cancel+0x230/0x230 [ 537.498865][T10829] ? exit_to_user_mode_loop+0x3b/0x110 [ 537.504334][T10829] exit_to_user_mode_loop+0xe6/0x110 [ 537.509633][T10829] exit_to_user_mode_prepare+0xb1/0x140 [ 537.515184][T10829] syscall_exit_to_user_mode+0x16/0x40 [ 537.520641][T10829] do_syscall_64+0x58/0xa0 [ 537.525065][T10829] ? clear_bhb_loop+0x60/0xb0 [ 537.529743][T10829] ? clear_bhb_loop+0x60/0xb0 [ 537.534418][T10829] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.540323][T10829] RIP: 0033:0x7fcde558fc97 [ 537.544741][T10829] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 537.564345][T10829] RSP: 002b:00007ffde0cfe648 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 537.572763][T10829] RAX: 0000000000000000 RBX: 00007fcde561089d RCX: 00007fcde558fc97 [ 537.580731][T10829] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde0cfe700 [ 537.588702][T10829] RBP: 00007ffde0cfe700 R08: 0000000000000000 R09: 0000000000000000 [ 537.596760][T10829] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffde0cff790 [ 537.604730][T10829] R13: 00007fcde561089d R14: 0000000000082e43 R15: 00007ffde0cff7d0 [ 537.612710][T10829] [ 537.615775][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.645887][T14913] netlink: 'syz.6.4031': attribute type 10 has an invalid length. [ 538.382820][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 539.192811][ T4259] Bluetooth: hci0: command 0x0406 tx timeout