last executing test programs: 16m42.312911416s ago: executing program 1 (id=392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x101c, 0x0, 0xc, 0x3, 0x0, 0x6}}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$inet(0xa, 0x801, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r7, 0x100) listen(r6, 0x8) listen(0xffffffffffffffff, 0x1) r8 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 16m40.860153055s ago: executing program 1 (id=396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x268}, 0x1, 0x0, 0x0, 0xd5}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) rseq(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r4, 0x0, 0x0, &(0x7f0000000240)=[0x1], 0x0, 0x0) syz_emit_ethernet(0x15a, &(0x7f0000000b80)=ANY=[], 0x0) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r5, &(0x7f00000004c0)=""/57, 0x39) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r6, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendmmsg$inet6(r6, 0x0, 0x0, 0x0) recvfrom$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = fsopen(&(0x7f0000000000)='msdos\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 16m38.28817958s ago: executing program 1 (id=399): pipe2(0x0, 0x4080) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000000100)={0xda, 0x7}) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x8a, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff}, [@call={0x85, 0x0, 0x0, 0x35}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x7, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x6, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r8, 0x1, 0x2, 0x0, 0x48) 16m37.030629848s ago: executing program 1 (id=400): setresgid(0xee00, 0xee01, 0x0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x12, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x4, 0x339, &(0x7f0000000140)="$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") r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x800, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setownex(r3, 0xf, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = open(0x0, 0x236540, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x9, 0x6, 0x1, "cd824187992bd1537ba859afe2d9583b5df1c438ae9ce81105c2145d5412c30b", 0x38416761}) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000840)={[{@noblock_validity}, {@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x8}}, {@init_itable_val={'init_itable', 0x3d, 0x5}}], [{@dont_appraise}]}, 0x1, 0x488, &(0x7f0000000940)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') 16m35.685206966s ago: executing program 1 (id=403): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r4, 0x80045105, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}}, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f0000000140)={{&(0x7f00006a4000/0x800000)=nil, 0x800000}, 0x2}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0xfffffffe, @mcast2}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) 16m33.113644352s ago: executing program 1 (id=408): openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) setreuid(0xee00, 0x0) r3 = inotify_init() chdir(&(0x7f0000000340)='./file2\x00') mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0x5000009) listxattr(&(0x7f0000000200)='./file1\x00', &(0x7f0000000480)=""/85, 0x55) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) memfd_create(&(0x7f0000000840)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842.\x17c`\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10d\x89J\xb3zz\x83\x81\x0f\xbd\xdf\xff9**\xb7\xfa\xa9h;<\xe8\x85\v\x9e\x02\x03\xad\xa4\x11R\x14\xbc\xc8\xb5\x89\xffx\x98%O\xf8n~1G\x89\x96\x1d\xecz\xe8\x04\x86G%\xa0\xd5[\xda\xc9', 0x4) syz_emit_ethernet(0x154, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000081004e0086dd60e66bf7011a21fffe880000000000000000000000000101fc0200000000000000000000000000012f0c010700000000fc00000000000000000000000000000100000000000000000000fffffffffffffe80000000000000000000000000000efc020000000000000000000000000000ff010000000000000000000000000001fc0000000000000000000000000000000800007f000000003200a630660000004e204e220431907830b6405d0e4f207020c54c48a46e6bc62e449ba053bfa9163772f1deafc6950d0c852c729af704512f28aedcfdf2dd0f046bbe00da9144afd095b6cb"], 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r5}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r5, 0x9dffffff}}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x1000, 0xe, 0x3, 0x2000000, 0xb770, 0x3000000}}) 16m30.12740049s ago: executing program 32 (id=408): openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) setreuid(0xee00, 0x0) r3 = inotify_init() chdir(&(0x7f0000000340)='./file2\x00') mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0x5000009) listxattr(&(0x7f0000000200)='./file1\x00', &(0x7f0000000480)=""/85, 0x55) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) memfd_create(&(0x7f0000000840)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842.\x17c`\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10d\x89J\xb3zz\x83\x81\x0f\xbd\xdf\xff9**\xb7\xfa\xa9h;<\xe8\x85\v\x9e\x02\x03\xad\xa4\x11R\x14\xbc\xc8\xb5\x89\xffx\x98%O\xf8n~1G\x89\x96\x1d\xecz\xe8\x04\x86G%\xa0\xd5[\xda\xc9', 0x4) syz_emit_ethernet(0x154, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000081004e0086dd60e66bf7011a21fffe880000000000000000000000000101fc0200000000000000000000000000012f0c010700000000fc00000000000000000000000000000100000000000000000000fffffffffffffe80000000000000000000000000000efc020000000000000000000000000000ff010000000000000000000000000001fc0000000000000000000000000000000800007f000000003200a630660000004e204e220431907830b6405d0e4f207020c54c48a46e6bc62e449ba053bfa9163772f1deafc6950d0c852c729af704512f28aedcfdf2dd0f046bbe00da9144afd095b6cb"], 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r5}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r5, 0x9dffffff}}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x1000, 0xe, 0x3, 0x2000000, 0xb770, 0x3000000}}) 11.971161017s ago: executing program 3 (id=2143): syz_mount_image$minix(&(0x7f0000000540), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000100)=ANY=[], 0x1, 0x1e6, &(0x7f0000000140)="$eJzs20tu00Acx/HfJGkSQ4HyXCCkILGADUmaikqsWs7BqmrTqsIFhNkkQsJcAM7AObgMB4AFO1YY+ZGm9aM1E9y0zfez8Xh+/dvjuu6MolgAFtamHsrIqBnuPGivfLltStU1qx4YgMoFyfZPYMOxqgJwXtR/p3uSFYA/n/EAOCs/X0jfJf349WFb9eyqPsz9SV5rZfNP0v1Gkpu2nPT64qv0eFJvrmTrG/E2zq/mHv/Jo8n5l3VN13VDK7qpW8aXifKdw/p7VmsgAAAWjVH3tLwr1QvSePLOrgqmlrT7LTurTzW1u+8OB6fka4V5K8q722/cnRPOAiBPrdTzX6wePX/9gnRJivLVZL9tO0wAFfBG45Zcd/jOG4WTfNQYv9py/6nhWFWVaZjKjpzfaKZ6go+SDns2bY8c6FiPc/T33PE6sw/exJ/SKB05ZcpryoteWgxjIxuFU8BsN8X4VuXLn5V7XbM1NlTqhzs598K60TqjP/7jjXn/ZwJQtd77g7c9bzR+un+wtTfcG74e9PvP15+tra4PetHKvnfS+h7ARTad9HXk20AAAAAAAAAAAAAAAOAiuaO74Sb92i4AAACAS+i/vTPUUOHrVvO+RgAAAAAAAAAAAAAAAAAALpu/AQAA///U5AZL") truncate(&(0x7f0000000000)='./file2\x00', 0x81bfd) 11.31181055s ago: executing program 3 (id=2149): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 10.590863805s ago: executing program 3 (id=2151): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1124, &(0x7f00000011c0)=ANY=[]) 7.923482642s ago: executing program 3 (id=2162): unshare(0x4a000200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@dellink={0x28, 0x11, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xc0a742c700a80d57, 0x301}, [@IFLA_GROUP={0x8, 0x1b, 0x9}]}, 0x28}}, 0x800) 5.557268966s ago: executing program 4 (id=2169): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831373f00000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 5.556966516s ago: executing program 2 (id=2170): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setrlimit(0xc, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create(0x7) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newsa={0xf8, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0xee00}, {@in=@rand_addr=0x64010101, 0x0, 0x2b}, @in=@rand_addr=0x64010100, {0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1}, {0x7fffffff, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@tfcpad={0x8, 0x16, 0x8}]}, 0xf8}}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB='\f\x00Z'], 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) 4.552100682s ago: executing program 2 (id=2171): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0xda, &(0x7f00000005c0)={[{@nouid32}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 4.538819142s ago: executing program 4 (id=2173): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setrlimit(0xc, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create(0x7) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newsa={0xf8, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0xee00}, {@in=@rand_addr=0x64010101, 0x0, 0x2b}, @in=@rand_addr=0x64010100, {0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1}, {0x7fffffff, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@tfcpad={0x8, 0x16, 0x8}]}, 0xf8}}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r7, @ANYRES32=r8, @ANYBLOB="0c005a960240"], 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) 3.402848679s ago: executing program 4 (id=2175): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x10, 0xfffffff6}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, 0x0, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCMIWAIT(r5, 0x545c, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x80800) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r7, 0xa0044d07, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = dup(0xffffffffffffffff) ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r8, 0x40045542, &(0x7f0000000140)=0x293c) 3.22601474s ago: executing program 0 (id=2176): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001ec0)={&(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000800)="15eee79d7e65b682", 0x8}], 0x1, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4) 3.156151601s ago: executing program 2 (id=2177): bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) socket$inet(0x2, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x10, 0xfffffff6}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, 0x0, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0xa0044d07, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = dup(0xffffffffffffffff) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0x40045542, &(0x7f0000000140)=0x293c) 3.155596491s ago: executing program 0 (id=2178): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000011c0)={[{@acl}, {@barrier}, {@minixdf}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {}, {@debug}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$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") chdir(&(0x7f0000000140)='./file0\x00') link(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.241094016s ago: executing program 2 (id=2179): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x1c0, 0x43, 0xa0, 0x1c0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) 2.189503897s ago: executing program 4 (id=2180): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) 2.110650457s ago: executing program 2 (id=2181): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setrlimit(0xc, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create(0x7) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newsa={0xf8, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0xee00}, {@in=@rand_addr=0x64010101, 0x0, 0x2b}, @in=@rand_addr=0x64010100, {0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1}, {0x7fffffff, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@tfcpad={0x8, 0x16, 0x8}]}, 0xf8}}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r7, @ANYBLOB='\f\x00Z'], 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) 1.837640469s ago: executing program 0 (id=2182): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831373f00000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.837442549s ago: executing program 4 (id=2183): syz_mount_image$bfs(&(0x7f0000000280), &(0x7f0000000180)='./file4\x00', 0xa1c400, &(0x7f0000000140)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xf, 0xaa, &(0x7f0000000000)="$eJzs1zGKwkAYBeB/s7Cb1kYEC2sb7+BRxNI0YqUI3sCbeBWPkN7CIq2II5iIiJ1FBPm+YuDNY+C1sz/t+kUWkTYRadibH9LDYrmaTYr6DL5SFhH/EZFHxKBT5+O47n6avqzW07L6fX38t219LwAA8L4sRs/5kpqLc/MLvIXuvc9b3gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwadcAAAD//xynKEA=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.098335603s ago: executing program 4 (id=2184): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000500)={[{@gquota}, {@noquota}, {@discard}, {@pquota}, {@bsdgroups}, {@dax}, {@gqnoenforce}, {@filestreams}, {@nolazytime}]}, 0x1, 0x975c, &(0x7f000001c600)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) fchownat(r0, &(0x7f0000000200)='./file1\x00', 0xee00, 0xffffffffffffffff, 0x0) 1.053312944s ago: executing program 3 (id=2185): r0 = syz_clone(0x5948000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/150, 0x96}], 0x1, &(0x7f0000000240)=[{&(0x7f0000000540)=""/183, 0xb7}], 0x1, 0x0) 1.052324214s ago: executing program 2 (id=2193): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="600d03000000d2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 880.569425ms ago: executing program 3 (id=2186): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)={[{@acl}, {@nointr}, {@atime_quantum={'atime_quantum', 0x3d, 0x7}}, {@localflocks}, {@localalloc={'localalloc', 0x3d, 0x3}}, {@localflocks}, {@intr}, {@heartbeat_none}]}, 0x1, 0x4430, &(0x7f0000000240)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffc2}], 0x1, 0x7800, 0x0, 0x0) 676.891076ms ago: executing program 0 (id=2187): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f00000000c0)) 573.689837ms ago: executing program 0 (id=2188): syz_mount_image$exfat(&(0x7f0000000540), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB='utf8,utf8,iocharset=cp862,iocharset=cp864,discard,errors=remount-ro,fmask=00000000000000000007777,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c757466382c616c6c6f775f7574696d653d3030303030303030303030303030303030312c616c6c6f775f7574696d653d30303030303030303030303030303030303030333737372c0002e5cc2c3640db32594e71db"], 0x1, 0x1526, &(0x7f0000000780)="$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") unlink(&(0x7f0000000280)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 0s ago: executing program 0 (id=2189): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$eJzs3M1uG0UcAPD/br5I+mEjcUCFgyUQBAFxHQhQhEThyscFeAArSUuF21SNkWjJoSBOnDggbhz6Ahx4gKpCSEi8Ai+AKlUozQFuQWvvOm4cp7Fix2r6+0mjndkdZ/bv3axm1rsTwGOrEhHnI2IiIhYjopSvT/MUN9spq3d/c2N5a3NjOYnt7U/+SSLJ1xV/K8mXJ/LCfBqRfhfxzM3edtev3/ii3misXsvL1eblq9X16zdevXS5fnH14uqV2pvnarWlxbdqrw8t1p+ef+ncxPvnz/z8V+nO0vT0bLa/J/Nt3XEMSyUqne9kt6VhNzZm0+PeAQAADiTN+/6Trf5/KSZaubZSVDfGunMAAADAUGy/my8BAACAYywx9gcAAIBjrngO4P7mxnKRxvg4wpG7915ElHfebd7qxD8ZT+R1pkb4fmslIq6+kJSyFCN6DxkAoNudrP9zdq/+XxpPd9WbiWj1h2aH3H5lV7m3/5PeHXKTD8j6f+9ExFZP/y8tqpQn8tKpVldxKrlwqbF6NiJOR8R8TM1k5do+bXzw7y8f99uWxf97cup0kbL2s+VOjfTu5MyDn1mpN+uHibnbvW8izkzuFX/S6f8mETF3iDYmvr71dr9tD49/tLZvRby45/Hfmbkn2X9+omrrfKgWZ0Wv/7799aN+7Y87/uz4z+0ffznpnq9pffA2bn/+57P9tnWPfwY5/6eTT1v5Ylz2Vb3ZvFaLmE4+7F2/uPPZolzUz+Kff27v///i+pfkc1qdzK8Bg/r+h99eOUj8WcraL8aCRyGLf2Wg4z945o3bf3zWr/2Hx58d//YcYPP5moNc/w66g4f57gAAAOBRkbbuayTpQiefpgsL7fsdT8Vc2lhbb758Ye3LKyvt+x/lmEqLO12lrvuhtfbP6J3y4q7yaxHxZET8WJptlReW1xor4w4eAAAAHhMn+oz/M38f2VMIAAAAwMiVx70DAAAAwMgZ/wMAAMCxdph5/WRkZI5rZtxXJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEfb/wEAAP//Wt22ag==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x650ce4b086bd440d) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000001c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): [ 1069.287149][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 1071.179736][ T5796] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1071.325982][T12941] loop4: detected capacity change from 0 to 512 [ 1071.549028][T12941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1072.249520][T12941] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1073.870814][ T7804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.924521][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1076.664671][T12989] Failed to get privilege flags for destination (handle=0x2:0x0) [ 1076.809547][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1076.913664][ T9] usb 5-1: config 0 has an invalid interface number: 110 but max is 0 [ 1076.922117][ T9] usb 5-1: config 0 has no interface number 0 [ 1076.946535][T12994] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1076.949708][ T9] usb 5-1: config 0 interface 110 has no altsetting 0 [ 1076.972814][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=f6.56 [ 1076.983335][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.017592][ T9] usb 5-1: Product: syz [ 1077.389650][ T9] usb 5-1: Manufacturer: syz [ 1077.485653][ T9] usb 5-1: SerialNumber: syz [ 1077.518811][ T9] usb 5-1: config 0 descriptor?? [ 1077.585406][T12994] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1372'. [ 1077.625364][T12994] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1372'. [ 1077.668605][T12994] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1372'. [ 1077.691232][T12994] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1372'. [ 1080.034097][ T9] usb 5-1: can't set config #0, error -71 [ 1080.042353][ T9] usb 5-1: USB disconnect, device number 10 [ 1080.774689][T13017] loop4: detected capacity change from 0 to 16 [ 1081.910522][T13017] erofs: (device loop4): mounted with root inode @ nid 36. [ 1083.814529][T13027] binder: 13021:13027 ioctl 40182103 200000000300 returned -22 [ 1083.838988][T13027] binder: 13021:13027 unknown command 1143161705 [ 1083.845741][T13027] binder: 13021:13027 ioctl c0306201 2000000002c0 returned -22 [ 1083.860317][T13025] sctp: [Deprecated]: syz.4.1379 (pid 13025) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1083.860317][T13025] Use struct sctp_sack_info instead [ 1086.059542][T13042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1383'. [ 1086.070634][T13042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1383'. [ 1086.923976][T13043] netlink: 'syz.2.1384': attribute type 10 has an invalid length. [ 1086.975862][T13043] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1087.860492][T13049] loop4: detected capacity change from 0 to 128 [ 1087.885776][T13049] msdos filesystem being mounted at /220/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 1088.068702][T13049] syz.4.1385: attempt to access beyond end of device [ 1088.068702][T13049] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 1088.171604][T13052] loop0: detected capacity change from 0 to 512 [ 1088.190572][T13052] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 1092.764192][T13061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1092.984693][T13071] loop3: detected capacity change from 0 to 128 [ 1093.247769][T13071] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1093.365486][T13081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1393'. [ 1093.492785][T13071] ext4 filesystem being mounted at /346/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1094.895109][T13088] serio: Serial port ptm0 [ 1094.907301][ T5787] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1094.945628][T13087] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1394'. [ 1094.954723][T13087] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 1095.021663][T13087] 0ªî{X¹¦: entered allmulticast mode [ 1095.027447][T13087] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1095.050285][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1396'. [ 1095.892929][T13093] netlink: 'syz.2.1396': attribute type 1 has an invalid length. [ 1095.901850][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1396'. [ 1096.781808][T13105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1397'. [ 1096.790920][T13105] netlink: 50 bytes leftover after parsing attributes in process `syz.3.1397'. [ 1097.428669][T13105] netlink: 'syz.3.1397': attribute type 16 has an invalid length. [ 1097.436638][T13105] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1397'. [ 1099.072247][T13112] can0: slcan on ttyS3. [ 1099.698718][T13120] loop3: detected capacity change from 0 to 128 [ 1099.720546][T13112] can0 (unregistered): slcan off ttyS3. [ 1099.747585][T13120] msdos filesystem being mounted at /349/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 1099.863786][T13120] syz.3.1401: attempt to access beyond end of device [ 1099.863786][T13120] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 1100.238391][T13130] loop0: detected capacity change from 0 to 32768 [ 1100.279925][T13130] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1100.302105][T13130] XFS (loop0): Ending clean mount [ 1100.317202][T13130] XFS (loop0): Quotacheck needed: Please wait. [ 1100.474363][T13130] XFS (loop0): Quotacheck: Done. [ 1103.877576][ T5788] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1105.843548][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1410'. [ 1105.852703][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1410'. [ 1105.861735][T13169] netlink: 'syz.4.1410': attribute type 11 has an invalid length. [ 1105.869774][T13169] netlink: 'syz.4.1410': attribute type 13 has an invalid length. [ 1106.634705][T13169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.642029][T13169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.450197][T13189] fuse: Bad value for 'fd' [ 1111.288202][T13226] loop4: detected capacity change from 0 to 1024 [ 1111.320210][T13226] EXT4-fs: Ignoring removed oldalloc option [ 1111.354751][T13226] EXT4-fs: Ignoring removed orlov option [ 1111.382609][T13226] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1111.451539][T13226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1112.192131][T13222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1424'. [ 1112.201583][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1424'. [ 1112.211248][T13222] netlink: 'syz.3.1424': attribute type 11 has an invalid length. [ 1112.219092][T13222] netlink: 'syz.3.1424': attribute type 13 has an invalid length. [ 1112.275361][ T28] audit: type=1800 audit(3909834960.121:419): pid=13226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1423" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1112.833657][T13222] bridge0: entered allmulticast mode [ 1113.810804][T13246] loop0: detected capacity change from 0 to 128 [ 1113.834425][T13246] msdos filesystem being mounted at /372/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 1113.901666][ T7804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1114.004443][T13245] syz.0.1427: attempt to access beyond end of device [ 1114.004443][T13245] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 1116.249772][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.556451][T13265] fuse: Bad value for 'fd' [ 1116.648318][T13268] tipc: Started in network mode [ 1116.653356][T13268] tipc: Node identity ac14140c, cluster identity 4711 [ 1116.661283][T13268] tipc: New replicast peer: 255.255.255.255 [ 1116.668380][T13268] tipc: Enabled bearer , priority 10 [ 1116.676065][T13268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1431'. [ 1117.779585][ T5847] tipc: Node number set to 2886997004 [ 1117.916740][T13274] serio: Serial port ptm0 [ 1117.982754][T13274] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1433'. [ 1118.010487][T13274] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 1118.028196][T13274] 0ªî{X¹¦: entered allmulticast mode [ 1118.034847][T13274] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1120.154182][T13282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1442'. [ 1122.595976][T13294] loop4: detected capacity change from 0 to 32768 [ 1123.700313][T13294] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1123.956976][T13294] XFS (loop4): Ending clean mount [ 1123.970163][T13294] XFS (loop4): Quotacheck needed: Please wait. [ 1124.265853][T13317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1439'. [ 1124.646407][T13294] XFS (loop4): Quotacheck: Done. [ 1125.681865][T13327] loop3: detected capacity change from 0 to 64 [ 1125.689499][T13327] hfs: creator requires a 4 character value [ 1125.695440][T13327] hfs: unable to parse mount options [ 1126.208766][T13333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1441'. [ 1126.229715][T13333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1441'. [ 1126.876755][T13334] loop3: detected capacity change from 0 to 8 [ 1127.430268][T13334] Page size > filesystem block size (0). This is currently not supported! [ 1128.370167][ T7804] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1130.531759][T13354] loop0: detected capacity change from 0 to 4096 [ 1131.549049][T13354] ntfs: volume version 3.1. [ 1132.542251][T13354] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-13. You might want to try to use the mount option nls=utf8. [ 1132.542389][T13371] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1453'. [ 1132.563592][T13354] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 1133.916388][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1455'. [ 1133.938269][T13388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1455'. [ 1135.109951][T13389] lo speed is unknown, defaulting to 1000 [ 1136.620670][T13403] random: crng reseeded on system resumption [ 1137.930616][T13411] netlink: 'syz.2.1459': attribute type 10 has an invalid length. [ 1137.985535][T13416] binder: 13408:13416 ioctl 0 200000000040 returned -22 [ 1138.580870][T13412] slcan: can't register candev [ 1138.602335][T13412] Falling back ldisc for ttyS3. [ 1140.488942][T13429] loop4: detected capacity change from 0 to 4096 [ 1140.565218][T13429] ntfs: volume version 3.1. [ 1140.899845][T13429] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-13. You might want to try to use the mount option nls=utf8. [ 1140.918650][T13429] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 1142.372337][T13450] block device autoloading is deprecated and will be removed. [ 1142.466169][T13448] loop0: detected capacity change from 0 to 1764 [ 1142.536930][T13449] usb usb1: check_ctrlrecip: process 13449 (syz.3.1470) requesting ep 01 but needs 81 [ 1142.546782][T13449] usb usb1: usbfs: process 13449 (syz.3.1470) did not claim interface 0 before use [ 1143.632944][T13458] binder: 13451:13458 ioctl 0 200000000040 returned -22 [ 1145.047930][T13462] can0: slcan on ttyS3. [ 1145.071576][T13461] netlink: 'syz.0.1471': attribute type 10 has an invalid length. [ 1148.710171][T13454] can0 (unregistered): slcan off ttyS3. [ 1148.920977][ C1] sd 0:0:1:0: [sda] tag#6604 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1148.931491][ C1] sd 0:0:1:0: [sda] tag#6604 CDB: Read(6) 08 00 00 00 03 44 [ 1149.747736][T13487] binder: 13483:13487 ioctl 40182103 200000000300 returned -22 [ 1149.783730][T13486] sctp: [Deprecated]: syz.0.1475 (pid 13486) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1149.783730][T13486] Use struct sctp_sack_info instead [ 1149.991693][T13485] bridge_slave_0: left allmulticast mode [ 1149.997566][T13485] bridge_slave_0: left promiscuous mode [ 1150.004340][T13485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.761302][T13485] bridge_slave_1: left allmulticast mode [ 1150.767054][T13485] bridge_slave_1: left promiscuous mode [ 1150.775984][T13491] loop3: detected capacity change from 0 to 4096 [ 1150.811716][T13485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.844205][T13491] ntfs: volume version 3.1. [ 1151.840013][T13485] bond0: (slave bond_slave_0): Releasing backup interface [ 1151.905240][T13485] bond0: (slave bond_slave_1): Releasing backup interface [ 1151.935136][T13491] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-13. You might want to try to use the mount option nls=utf8. [ 1151.964623][T13491] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 1152.065531][T13485] team0: Port device team_slave_0 removed [ 1152.352585][T13485] team0: Port device team_slave_1 removed [ 1152.359757][T13485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1152.367197][T13485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1152.377012][T13485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1152.385388][T13485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1156.069436][T13545] loop4: detected capacity change from 0 to 1024 [ 1156.088662][T13545] hfsplus: unable to parse mount options [ 1156.622538][ T28] audit: type=1326 audit(3909835004.481:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13542 comm="syz.2.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b2b8f6c9 code=0x7ffc0000 [ 1156.669408][T12299] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1156.718517][T13541] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1156.726197][T13541] overlayfs: failed to set xattr on upper [ 1156.732051][T13541] overlayfs: ...falling back to redirect_dir=nofollow. [ 1156.738886][T13541] overlayfs: ...falling back to index=off. [ 1156.744731][T13541] overlayfs: ...falling back to uuid=null. [ 1156.807701][ T28] audit: type=1326 audit(3909835004.481:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13542 comm="syz.2.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b2b8f6c9 code=0x7ffc0000 [ 1156.886147][ T28] audit: type=1326 audit(3909835004.481:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13542 comm="syz.2.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f14b2b8f6c9 code=0x7ffc0000 [ 1157.042919][ T28] audit: type=1326 audit(3909835004.481:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13542 comm="syz.2.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b2b8f6c9 code=0x7ffc0000 [ 1157.215824][ T28] audit: type=1326 audit(3909835004.481:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13542 comm="syz.2.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b2b8f6c9 code=0x7ffc0000 [ 1157.309324][ T28] audit: type=1326 audit(3909835004.481:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13542 comm="syz.2.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f14b2b8f6c9 code=0x7ffc0000 [ 1157.489476][ T28] audit: type=1326 audit(3909835004.481:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13542 comm="syz.2.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b2b8f6c9 code=0x7ffc0000 [ 1157.564036][ T28] audit: type=1326 audit(3909835004.481:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13542 comm="syz.2.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b2b8f6c9 code=0x7ffc0000 [ 1157.612427][ T28] audit: type=1326 audit(3909835004.501:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13542 comm="syz.2.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f14b2b8f6c9 code=0x7ffc0000 [ 1157.748391][ T28] audit: type=1326 audit(3909835004.501:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13542 comm="syz.2.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b2b8f6c9 code=0x7ffc0000 [ 1157.749501][ T28] audit: type=1326 audit(3909835004.501:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13542 comm="syz.2.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b2b8f6c9 code=0x7ffc0000 [ 1157.749539][ T28] audit: type=1326 audit(3909835004.511:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13542 comm="syz.2.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14b2b8f6c9 code=0x7ffc0000 [ 1157.749574][ T28] audit: type=1326 audit(3909835004.511:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13542 comm="syz.2.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b2b8f6c9 code=0x7ffc0000 [ 1158.233496][T13556] random: crng reseeded on system resumption [ 1159.373140][T13565] binder: 13563:13565 ioctl 0 200000000040 returned -22 [ 1161.254955][T13583] loop0: detected capacity change from 0 to 8 [ 1161.267162][T13583] squashfs: Unknown parameter 'sys_enter' [ 1162.565187][T12299] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1162.653208][T13582] loop0: detected capacity change from 0 to 4096 [ 1162.699055][T13582] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1162.723413][T13582] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 1162.733239][T13582] NILFS (loop0): mounting unchecked fs [ 1162.753613][T13582] NILFS (loop0): invalid segment: Checksum error in segment payload [ 1162.761718][T13582] NILFS (loop0): unable to fall back to spare super block [ 1162.768859][T13582] NILFS (loop0): error -22 while searching super root [ 1162.822379][T12299] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1163.225126][T13591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1499'. [ 1164.275931][T13602] fuse: Bad value for 'fd' [ 1164.877296][T13607] loop4: detected capacity change from 0 to 64 [ 1164.884348][T13607] hfs: creator requires a 4 character value [ 1164.890347][T13607] hfs: unable to parse mount options [ 1164.919666][ T5847] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1164.932470][T12299] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1166.319833][T13609] loop4: detected capacity change from 0 to 8 [ 1166.328839][T13609] Page size > filesystem block size (0). This is currently not supported! [ 1166.369555][ T5847] usb 3-1: Using ep0 maxpacket: 8 [ 1166.398401][ T5847] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 1166.578498][ T5847] usb 3-1: config 0 has no interface number 0 [ 1166.609280][ T5847] usb 3-1: config 0 interface 110 has no altsetting 0 [ 1166.658276][ T5847] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=f6.56 [ 1166.815745][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.843264][ T5847] usb 3-1: Product: syz [ 1166.861040][ T5847] usb 3-1: Manufacturer: syz [ 1166.872659][ T5847] usb 3-1: SerialNumber: syz [ 1166.888595][ T5847] usb 3-1: config 0 descriptor?? [ 1167.476987][ T5840] usb 3-1: USB disconnect, device number 7 [ 1168.556646][T13632] loop0: detected capacity change from 0 to 1024 [ 1168.571666][T13632] hfsplus: unable to parse mount options [ 1168.641704][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1506'. [ 1168.658396][T13634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1506'. [ 1168.730468][T13628] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1168.742343][T13628] overlayfs: failed to set xattr on upper [ 1168.748278][T13628] overlayfs: ...falling back to redirect_dir=nofollow. [ 1168.755284][T13628] overlayfs: ...falling back to index=off. [ 1168.761258][T13628] overlayfs: ...falling back to uuid=null. [ 1171.318492][T13644] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1171.325781][T13644] overlayfs: failed to set xattr on upper [ 1171.331596][T13644] overlayfs: ...falling back to redirect_dir=nofollow. [ 1171.338434][T13644] overlayfs: ...falling back to index=off. [ 1171.344313][T13644] overlayfs: ...falling back to uuid=null. [ 1171.467782][T13648] loop3: detected capacity change from 0 to 8 [ 1171.475245][T13648] squashfs: Unknown parameter 'sys_enter' [ 1171.707480][T13648] loop3: detected capacity change from 0 to 4096 [ 1171.739746][T13648] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1171.821124][T13648] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 1171.831114][T13648] NILFS (loop3): mounting unchecked fs [ 1171.864796][T13648] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1171.872986][T13648] NILFS (loop3): unable to fall back to spare super block [ 1171.880423][T13648] NILFS (loop3): error -22 while searching super root [ 1172.247530][T13653] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1512'. [ 1174.133608][T13665] random: crng reseeded on system resumption [ 1176.506448][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1519'. [ 1176.524821][T13690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1519'. [ 1177.812042][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.679534][ T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1179.407981][ T23] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 1179.418085][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.439025][ T23] usb 5-1: Product: syz [ 1179.456661][ T23] usb 5-1: Manufacturer: syz [ 1179.469586][ T23] usb 5-1: SerialNumber: syz [ 1179.606719][ T23] usb 5-1: config 0 descriptor?? [ 1180.173424][ T23] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1180.180780][ T23] dvb_usb_af9035: probe of 5-1:0.0 failed with error -22 [ 1180.190545][ T23] usb 5-1: USB disconnect, device number 11 [ 1181.030621][T13721] loop4: detected capacity change from 0 to 8 [ 1181.045898][T13721] squashfs: Unknown parameter 'sys_enter' [ 1181.300209][T13718] loop4: detected capacity change from 0 to 4096 [ 1181.309825][T13718] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1181.322456][T13718] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 1181.332207][T13718] NILFS (loop4): mounting unchecked fs [ 1181.339555][T13718] NILFS (loop4): invalid segment: Checksum error in segment payload [ 1181.347577][T13718] NILFS (loop4): unable to fall back to spare super block [ 1181.355008][T13718] NILFS (loop4): error -22 while searching super root [ 1181.558267][T12299] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1181.757866][T13723] netlink: 'syz.3.1526': attribute type 10 has an invalid length. [ 1181.852971][T13723] can0: slcan on ttyS3. [ 1181.879347][ T5794] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1182.395502][T13711] can0 (unregistered): slcan off ttyS3. [ 1182.429342][T13732] lo speed is unknown, defaulting to 1000 [ 1182.435876][T13732] lo speed is unknown, defaulting to 1000 [ 1182.546457][T13732] lo speed is unknown, defaulting to 1000 [ 1182.587952][T13732] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1182.659658][ T5794] usb 1-1: Using ep0 maxpacket: 8 [ 1182.672725][ T5794] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1182.731087][ T5794] usb 1-1: config 1 has an invalid interface number: 67 but max is 0 [ 1182.731942][T13732] lo speed is unknown, defaulting to 1000 [ 1182.764530][T13732] lo speed is unknown, defaulting to 1000 [ 1182.777303][ T5794] usb 1-1: config 1 has no interface number 0 [ 1182.796281][T13732] lo speed is unknown, defaulting to 1000 [ 1182.806749][T13732] lo speed is unknown, defaulting to 1000 [ 1182.859364][ T5794] usb 1-1: config 1 interface 67 altsetting 9 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1182.892081][ T5794] usb 1-1: config 1 interface 67 altsetting 9 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1183.639823][ T5794] usb 1-1: config 1 interface 67 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1183.877025][ T5794] usb 1-1: config 1 interface 67 has no altsetting 0 [ 1183.941781][ T5794] usb 1-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=b9.ec [ 1183.966026][ T5794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.005113][ T5794] usb 1-1: Product: syz [ 1184.014541][T13734] random: crng reseeded on system resumption [ 1184.020639][ T5794] usb 1-1: Manufacturer: syz [ 1184.020659][ T5794] usb 1-1: SerialNumber: syz [ 1184.292741][T13745] netlink: 'syz.3.1534': attribute type 6 has an invalid length. [ 1185.143560][ T5794] radio-si470x 1-1:1.67: could not find interrupt in endpoint [ 1185.155690][ T5794] radio-si470x: probe of 1-1:1.67 failed with error -5 [ 1185.173344][ T5794] usbhid 1-1:1.67: couldn't find an input interrupt endpoint [ 1185.194670][ T5794] usb 1-1: USB disconnect, device number 6 [ 1186.770148][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 1186.770164][ T28] audit: type=1326 audit(3909835034.631:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3522f8f6c9 code=0x7ffc0000 [ 1187.502968][ T28] audit: type=1326 audit(3909835034.631:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3522f8f6c9 code=0x7ffc0000 [ 1187.599453][ T28] audit: type=1326 audit(3909835034.661:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f3522f8f6c9 code=0x7ffc0000 [ 1187.639337][ T28] audit: type=1326 audit(3909835034.661:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3522f8f6c9 code=0x7ffc0000 [ 1187.754827][ T28] audit: type=1326 audit(3909835034.661:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3522f8f6c9 code=0x7ffc0000 [ 1187.921669][ T28] audit: type=1326 audit(3909835034.661:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3522f8f6c9 code=0x7ffc0000 [ 1187.944209][ T28] audit: type=1326 audit(3909835035.351:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3522f8f6c9 code=0x7ffc0000 [ 1187.966660][ T28] audit: type=1326 audit(3909835035.351:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3522f8f6c9 code=0x7ffc0000 [ 1188.601051][ T28] audit: type=1326 audit(3909835035.361:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3522f8f6c9 code=0x7ffc0000 [ 1188.767672][ T28] audit: type=1326 audit(3909835035.361:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3522f8f6c9 code=0x7ffc0000 [ 1189.350894][ T5840] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1190.374282][ T5840] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.477082][ T5840] usb 4-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1190.668456][ T5840] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1190.822944][ T5840] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1191.015262][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1191.033702][ T5840] usb 4-1: SerialNumber: syz [ 1191.062642][ T5840] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1191.147971][T13811] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1191.837582][ T9] usb 4-1: USB disconnect, device number 5 [ 1193.365109][T13841] fuse: Bad value for 'fd' [ 1194.465615][T13848] loop3: detected capacity change from 0 to 1024 [ 1194.817537][T13848] hfsplus: gid requires an argument [ 1194.822882][T13848] hfsplus: unable to parse mount options [ 1194.998117][T12299] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1199.772472][T13883] random: crng reseeded on system resumption [ 1201.787319][ C1] sd 0:0:1:0: [sda] tag#6632 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1201.797761][ C1] sd 0:0:1:0: [sda] tag#6632 CDB: Read(6) 08 00 00 00 03 44 [ 1202.339730][T13900] bond0: (slave bond_slave_0): Releasing backup interface [ 1203.105394][T13900] bond0: (slave bond_slave_1): Releasing backup interface [ 1203.518276][T13900] team0: Port device team_slave_0 removed [ 1204.471382][T13900] team0: Port device team_slave_1 removed [ 1204.488486][T13900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1204.497146][T13900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1204.505655][T13900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1206.781626][T13941] lo speed is unknown, defaulting to 1000 [ 1207.529822][T13947] loop3: detected capacity change from 0 to 256 [ 1209.716749][T13971] loop0: detected capacity change from 0 to 128 [ 1209.724938][T13970] loop4: detected capacity change from 0 to 8 [ 1209.737418][T13971] FAT-fs (loop0): bogus number of reserved sectors [ 1209.766527][T13971] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1209.789457][T13970] SQUASHFS error: Failed to read block 0xffffffff: -5 [ 1209.796461][T13970] unable to read xattr id index table [ 1209.808640][T13971] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1209.849435][ T27] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1210.047422][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1210.063179][ T27] usb 3-1: not running at top speed; connect to a high speed hub [ 1210.090587][ T27] usb 3-1: config 249 has an invalid interface number: 198 but max is 0 [ 1210.101359][ T27] usb 3-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.112394][ T27] usb 3-1: config 249 has no interface number 0 [ 1210.118718][ T27] usb 3-1: config 249 interface 198 altsetting 184 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1210.138220][ T27] usb 3-1: config 249 interface 198 altsetting 184 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1210.152739][ T27] usb 3-1: config 249 interface 198 altsetting 184 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1210.163629][ T27] usb 3-1: config 249 interface 198 has no altsetting 0 [ 1210.173808][ T27] usb 3-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice=ad.69 [ 1210.183328][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.191644][ T27] usb 3-1: Product: syz [ 1210.199552][ T27] usb 3-1: Manufacturer: syz [ 1210.205572][T13977] loop4: detected capacity change from 0 to 4096 [ 1210.213411][ T27] usb 3-1: SerialNumber: syz [ 1210.396069][T13977] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 1211.008512][ T27] appletouch 3-1:249.198: Could not find int-in endpoint [ 1211.049538][ T27] appletouch: probe of 3-1:249.198 failed with error -5 [ 1211.062086][ T27] usbhid 3-1:249.198: couldn't find an input interrupt endpoint [ 1211.074072][T13977] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1211.089872][ T27] usb 3-1: USB disconnect, device number 8 [ 1211.096358][T13986] loop3: detected capacity change from 0 to 512 [ 1211.146289][T13986] EXT4-fs: Ignoring removed mblk_io_submit option [ 1211.154175][T13986] EXT4-fs: Conflicting test_dummy_encryption options [ 1211.305756][T12393] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1212.659538][ T5840] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1212.709350][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1212.731446][ T5847] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1212.859529][ T5840] usb 5-1: Using ep0 maxpacket: 8 [ 1212.873016][ T5840] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.885925][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1212.900590][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1212.913912][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1212.920212][ T5840] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1212.931597][ T5847] usb 1-1: Using ep0 maxpacket: 8 [ 1212.938084][ T9] usb 4-1: config 0 has an invalid interface number: 211 but max is 0 [ 1212.949161][ T9] usb 4-1: config 0 has no interface number 0 [ 1212.955613][ T5840] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1212.974042][ T5847] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1212.982066][ T9] usb 4-1: config 0 interface 211 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1212.993779][ T5840] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1213.003041][ T9] usb 4-1: config 0 interface 211 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1213.013492][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.021772][ T9] usb 4-1: config 0 interface 211 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1213.021938][ T5847] usb 1-1: config 8 has an invalid interface number: 174 but max is 0 [ 1213.042269][ T9] usb 4-1: config 0 interface 211 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1213.054953][ T5840] usb 5-1: config 0 descriptor?? [ 1213.060548][ T5847] usb 1-1: config 8 has no interface number 0 [ 1213.077053][ T9] usb 4-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 1213.086556][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.095116][ T5847] usb 1-1: config 8 interface 174 altsetting 168 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1213.106598][ T9] usb 4-1: Product: syz [ 1213.110986][ T5847] usb 1-1: config 8 interface 174 has no altsetting 0 [ 1213.118007][ T9] usb 4-1: Manufacturer: syz [ 1213.122920][ T9] usb 4-1: SerialNumber: syz [ 1213.131003][ T5847] usb 1-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=4d.47 [ 1213.140555][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.148685][ T5847] usb 1-1: Product: syz [ 1213.154229][ T9] usb 4-1: config 0 descriptor?? [ 1213.160837][ T5847] usb 1-1: Manufacturer: syz [ 1213.165653][ T5847] usb 1-1: SerialNumber: syz [ 1213.172762][ T9] option 4-1:0.211: GSM modem (1-port) converter detected [ 1213.286743][ T27] usb 5-1: USB disconnect, device number 12 [ 1213.400032][ T9] usb 4-1: USB disconnect, device number 6 [ 1213.408616][ T9] option 4-1:0.211: device disconnected [ 1213.425337][ T5847] s2255 1-1:8.174: Could not find bulk-in endpoint [ 1213.436879][ T5847] Sensoray 2255 driver load failed: 0xfffffff4 [ 1213.448639][ T5847] s2255: probe of 1-1:8.174 failed with error -12 [ 1213.459324][ T5847] usb 1-1: USB disconnect, device number 7 [ 1214.120217][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1214.371617][ T9] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.484784][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1214.542488][ T5847] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1214.583946][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1214.675976][ T9] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1214.768739][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1214.809428][ T5847] usb 4-1: Using ep0 maxpacket: 16 [ 1214.836918][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.918569][ T5847] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1214.961824][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.986091][ T9] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 1214.995571][ T5847] usb 4-1: Product: syz [ 1215.005486][ T5847] usb 4-1: Manufacturer: syz [ 1215.016108][ T9] usb 5-1: invalid MIDI out EP 0 [ 1215.025327][ T5847] usb 4-1: SerialNumber: syz [ 1215.379675][ T27] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1215.586767][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.627186][ T27] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 1215.653912][ T27] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 1215.675774][ T27] usb 3-1: Product: syz [ 1215.687803][ T27] usb 3-1: SerialNumber: syz [ 1215.753314][ T27] usb 3-1: config 0 descriptor?? [ 1215.827420][ T27] usb 3-1: selecting invalid altsetting 1 [ 1215.863907][ T27] usb 3-1: Can not set alternate setting to 1, error: -22 [ 1215.907530][ T27] synaptics_usb: probe of 3-1:0.0 failed with error -22 [ 1216.089142][ T27] usb 3-1: USB disconnect, device number 9 [ 1216.644141][ T5847] usb 4-1: config 0 descriptor?? [ 1217.473275][ T5847] usb 4-1: can't set config #0, error -71 [ 1217.513536][ T5847] usb 4-1: USB disconnect, device number 7 [ 1217.739852][ T5794] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 1217.776068][ T9] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 1217.787516][ T9] usb 5-1: USB disconnect, device number 13 [ 1217.956267][ T5794] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1217.967602][ T5794] usb 3-1: not running at top speed; connect to a high speed hub [ 1217.981096][ T5794] usb 3-1: config 2 has an invalid interface number: 254 but max is 0 [ 1217.981647][T14031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1217.993293][ T5794] usb 3-1: config 2 has no interface number 0 [ 1218.001587][ T5847] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1218.028248][ T5794] usb 3-1: config 2 interface 254 has no altsetting 0 [ 1218.048599][ T5794] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=20.52 [ 1218.058837][ T5794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.067260][ T5794] usb 3-1: Product: syz [ 1218.078047][ T5794] usb 3-1: Manufacturer: syz [ 1218.084791][ T5794] usb 3-1: SerialNumber: syz [ 1218.324273][ T5794] ims_pcu: probe of 3-1:2.254 failed with error -22 [ 1218.334417][ T5794] usb 3-1: USB disconnect, device number 10 [ 1218.340648][ T5847] usb 4-1: Using ep0 maxpacket: 16 [ 1218.352981][ T5847] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 1218.364241][ T5847] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1218.375754][ T5847] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1218.385465][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.393712][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1218.401570][ T5847] usb 4-1: Product: syz [ 1218.405993][ T5847] usb 4-1: Manufacturer: syz [ 1218.410883][ T5847] usb 4-1: SerialNumber: syz [ 1218.609346][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1218.617697][ T9] usb 5-1: too many configurations: 97, using maximum allowed: 8 [ 1218.642947][ T5847] usb 4-1: 0:2 : does not exist [ 1218.658897][ T5847] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1218.681811][ T5847] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1218.692385][ T9] usb 5-1: string descriptor 0 read error: -71 [ 1218.698888][ T9] usb 5-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 1218.709290][ T9] usb 5-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 1218.724884][ T9] usb 5-1: rejected 8 configurations due to insufficient available bus power [ 1218.734349][ T5847] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1218.742568][ T9] usb 5-1: no configuration chosen from 8 choices [ 1218.756853][ T9] usb 5-1: USB disconnect, device number 14 [ 1218.764975][ T5847] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 1218.801001][ T5847] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1218.817968][ T5847] usb 4-1: USB disconnect, device number 8 [ 1218.861929][T12299] udevd[12299]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1220.269470][ T5847] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1220.483548][T14069] loop3: detected capacity change from 0 to 512 [ 1220.684260][T14069] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1220.807916][T14069] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1220.861481][T14069] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1220.879197][T14069] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1220.936863][T14069] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #16: comm syz.3.1638: inode has both inline data and extents flags [ 1220.951278][T14069] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1638: couldn't read orphan inode 16 (err -117) [ 1220.966683][T14069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1221.064037][ T5847] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 1221.109285][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.119438][ T5847] usb 1-1: Product: syz [ 1221.127947][ T5847] usb 1-1: Manufacturer: syz [ 1221.139099][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1221.151006][ T5847] usb 1-1: SerialNumber: syz [ 1221.158283][ T5847] usb 1-1: config 0 descriptor?? [ 1221.393110][ T5847] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1221.412454][ T5847] dvb_usb_af9035: probe of 1-1:0.0 failed with error -22 [ 1221.452822][ T5847] usb 1-1: USB disconnect, device number 8 [ 1222.411301][T14083] loop4: detected capacity change from 0 to 256 [ 1222.416780][T14085] loop3: detected capacity change from 0 to 1024 [ 1222.488968][T14085] hfsplus: invalid btree flag [ 1222.504002][T14083] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1222.513525][T14085] hfsplus: failed to load catalog file [ 1222.568392][T14083] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 1222.616900][T14083] exfat filesystem being mounted at /275/file2 supports timestamps until 2107-12-31 (0x10391447f) [ 1223.863728][T14099] loop0: detected capacity change from 0 to 1024 [ 1223.873045][T14099] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1223.889089][T14099] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1223.909839][T14099] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1223.926337][T14099] __quota_error: 25 callbacks suppressed [ 1223.926352][T14099] Quota error (device loop0): v2_read_file_info: Block with free entry 1283 out of range (1, 6). [ 1223.944875][T14099] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1223.960460][T14099] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 1223.992876][T14099] EXT4-fs error (device loop0): ext4_free_blocks:6676: comm syz.0.1650: Freeing blocks not in datazone - block = 0, count = 4096 [ 1224.077661][T14099] EXT4-fs (loop0): 1 orphan inode deleted [ 1224.105494][T14099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1224.170255][ T5847] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1224.182408][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1224.400534][ T5847] usb 5-1: Using ep0 maxpacket: 32 [ 1224.414384][ T5847] usb 5-1: config 0 has an invalid interface number: 168 but max is 0 [ 1224.423408][ T5847] usb 5-1: config 0 has no interface number 0 [ 1224.430078][ T5847] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=b0.c6 [ 1224.439782][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.617079][ T5847] usb 5-1: config 0 descriptor?? [ 1224.831973][ T5847] speedtch 5-1:0.168: speedtch_bind: wrong device class 176 [ 1224.839583][ T5847] speedtch 5-1:0.168: usbatm_usb_probe: bind failed: -19! [ 1225.287734][ T5794] usb 5-1: USB disconnect, device number 15 [ 1226.828370][ T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1227.079415][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 1227.158885][T14131] loop0: detected capacity change from 0 to 256 [ 1227.239876][ T5840] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1227.381610][T14131] vfat filesystem being mounted at /429/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1227.490000][ T5840] usb 4-1: Using ep0 maxpacket: 32 [ 1227.582723][ T5840] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1227.715232][ T5840] usb 4-1: config 2 has an invalid interface number: 147 but max is 0 [ 1227.823230][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1227.847637][ T5840] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.849385][ T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 1227.871078][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1227.906264][ T23] usb 3-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c [ 1227.906583][ T5840] usb 4-1: config 2 has no interface number 0 [ 1227.919445][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.931248][T14134] loop4: detected capacity change from 0 to 512 [ 1227.938512][T14134] EXT4-fs: Ignoring removed mblk_io_submit option [ 1227.945467][ T23] usb 3-1: Product: syz [ 1227.949807][ T23] usb 3-1: Manufacturer: syz [ 1227.958224][ T23] usb 3-1: SerialNumber: syz [ 1227.963115][T14134] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1227.969808][ T5840] usb 4-1: config 2 interface 147 has no altsetting 0 [ 1227.972909][ T5840] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=c8.8e [ 1227.993498][ T23] usb 3-1: config 0 descriptor?? [ 1228.008047][ T23] pl2303 3-1:0.0: required endpoints missing [ 1228.011433][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.031714][T14134] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1228.061199][ T5840] usb 4-1: Product: syz [ 1228.073774][ T5840] usb 4-1: Manufacturer: syz [ 1228.076718][T14134] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1228.085672][ T5840] usb 4-1: SerialNumber: syz [ 1228.108040][ T5840] ims_pcu 4-1:2.147: Zero length descriptor [ 1228.116374][ T5840] ims_pcu: probe of 4-1:2.147 failed with error -22 [ 1228.148533][T14134] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4031: comm syz.4.1662: Allocating blocks 41-42 which overlap fs metadata [ 1228.172987][T14134] Quota error (device loop4): write_blk: dquota write failed [ 1228.181152][T14134] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 1228.190505][T14134] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4031: comm syz.4.1662: Allocating blocks 41-42 which overlap fs metadata [ 1228.205066][T14134] Quota error (device loop4): write_blk: dquota write failed [ 1228.214588][T14134] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1228.224690][T14134] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1662: Failed to acquire dquot type 1 [ 1228.237639][T14134] EXT4-fs error (device loop4): mb_free_blocks:1938: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1228.242628][ T5840] usb 3-1: USB disconnect, device number 11 [ 1228.260161][T14134] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #12: comm syz.4.1662: corrupted inode contents [ 1228.285719][T14134] EXT4-fs error (device loop4): ext4_dirty_inode:6120: inode #12: comm syz.4.1662: mark_inode_dirty error [ 1228.298468][T14134] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #12: comm syz.4.1662: corrupted inode contents [ 1228.314432][T14134] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.1662: mark_inode_dirty error [ 1228.320627][ T23] usb 4-1: USB disconnect, device number 9 [ 1228.328545][T14134] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #12: comm syz.4.1662: corrupted inode contents [ 1228.331788][ T27] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 1228.361771][T14134] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 1228.371854][T14134] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #12: comm syz.4.1662: corrupted inode contents [ 1228.384512][T14134] EXT4-fs error (device loop4): ext4_truncate:4294: inode #12: comm syz.4.1662: mark_inode_dirty error [ 1228.396307][T14134] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 1228.406424][T14134] EXT4-fs (loop4): 1 truncate cleaned up [ 1228.413504][T14134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1228.438235][T14134] Quota error (device loop4): write_blk: dquota write failed [ 1228.448489][T14134] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1228.458867][T14134] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1662: Failed to acquire dquot type 1 [ 1228.498964][ T7804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1228.511461][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.521850][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1228.533272][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1228.558190][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1228.585685][ T27] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1228.599792][ T27] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1228.607858][ T27] usb 1-1: Manufacturer: syz [ 1228.622575][ T27] usb 1-1: config 0 descriptor?? [ 1229.454323][ T5847] usb 1-1: USB disconnect, device number 9 [ 1231.209672][ T6457] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1231.218660][ T5794] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1231.429673][ T6457] usb 1-1: Using ep0 maxpacket: 32 [ 1231.449365][ T5794] usb 4-1: Using ep0 maxpacket: 32 [ 1231.528732][ T6457] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1231.541279][ T5794] usb 4-1: config 8 has an invalid interface number: 203 but max is 0 [ 1231.592757][ T5794] usb 4-1: config 8 has no interface number 0 [ 1231.625550][ T6457] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 1231.643586][ T5794] usb 4-1: config 8 interface 203 has no altsetting 0 [ 1231.666137][ T6457] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.715363][ T5794] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 1231.730053][ T8589] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1231.744557][ T6457] usb 1-1: Product: syz [ 1231.763770][ T6457] usb 1-1: Manufacturer: syz [ 1231.773502][ T5794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.794722][ T6457] usb 1-1: SerialNumber: syz [ 1231.812581][ T5794] usb 4-1: Product: syz [ 1231.824681][ T6457] usb 1-1: config 0 descriptor?? [ 1231.839979][ T5794] usb 4-1: Manufacturer: syz [ 1231.855079][ T5794] usb 4-1: SerialNumber: syz [ 1231.979368][ T8589] usb 3-1: Using ep0 maxpacket: 8 [ 1232.498289][ T5847] usb 1-1: USB disconnect, device number 10 [ 1232.733921][ T5794] port100 4-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 1232.743773][ T8589] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1232.765592][ T5794] usb 4-1: USB disconnect, device number 10 [ 1232.771634][ T8589] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1232.788584][ T8589] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1232.801884][ T8589] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1232.817501][ T8589] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.827213][ T8589] usb 3-1: Product: syz [ 1232.832001][ T8589] usb 3-1: Manufacturer: syz [ 1232.836746][ T8589] usb 3-1: SerialNumber: syz [ 1233.190784][ T5840] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1233.489510][ T5840] usb 5-1: Using ep0 maxpacket: 8 [ 1233.520081][ T8589] usb 3-1: 2:1 : sample bitwidth 202 in over sample bytes 1 [ 1233.532927][ T5840] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.611952][ T5840] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1233.746216][ T5840] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1233.789846][ T8589] usb 3-1: 2:1 : invalid channels 0 [ 1233.821145][ T8589] usb 3-1: USB disconnect, device number 12 [ 1233.840253][ T5840] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1233.918874][T12299] udevd[12299]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1233.953038][ T5840] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1233.968757][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.010125][ T5840] usbtmc 5-1:16.0: bulk endpoints not found [ 1234.046095][T14179] loop3: detected capacity change from 0 to 1024 [ 1234.614434][ T8589] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1234.802773][ T59] hfsplus: b-tree write err: -5, ino 4 [ 1234.832507][ T5840] usb 5-1: USB disconnect, device number 16 [ 1235.027261][T14184] loop0: detected capacity change from 0 to 64 [ 1235.081583][T14184] minix filesystem being mounted at /434/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2106-02-07 (0xffffffff) [ 1235.141905][ T8589] usb 3-1: Using ep0 maxpacket: 16 [ 1235.152244][ T8589] usb 3-1: config 50 has an invalid interface number: 87 but max is 1 [ 1235.161328][T14184] Trying to free block not in datazone [ 1235.179961][ T8589] usb 3-1: config 50 has an invalid interface number: 71 but max is 1 [ 1235.197200][ T8589] usb 3-1: config 50 has no interface number 0 [ 1235.209322][ T8589] usb 3-1: config 50 has no interface number 1 [ 1235.215660][ T8589] usb 3-1: config 50 interface 87 has no altsetting 0 [ 1235.240592][ T8589] usb 3-1: config 50 interface 71 has no altsetting 0 [ 1235.256334][ T8589] usb 3-1: New USB device found, idVendor=0602, idProduct=1001, bcdDevice=40.6d [ 1235.274746][ T8589] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.284938][ T8589] usb 3-1: Product: syz [ 1235.289997][ T8589] usb 3-1: Manufacturer: syz [ 1235.306870][ T8589] usb 3-1: SerialNumber: syz [ 1235.486832][T14192] loop4: detected capacity change from 0 to 512 [ 1235.530051][T14192] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1235.634091][ T8589] usb 3-1: bad CDC descriptors [ 1235.653383][ T8589] usb 3-1: bad CDC descriptors [ 1235.667040][ T8589] usb 3-1: USB disconnect, device number 13 [ 1235.869172][T14192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1236.159970][T14192] ext4 filesystem being mounted at /284/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1236.434476][ T7804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1237.413687][T14188] loop3: detected capacity change from 0 to 32768 [ 1237.513395][T14205] loop4: detected capacity change from 0 to 512 [ 1237.541536][T14188] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1237.560083][T14205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1237.573125][T14205] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1237.737440][ T7804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1237.815715][T14188] XFS (loop3): Ending clean mount [ 1238.765425][T14200] loop0: detected capacity change from 0 to 32768 [ 1238.793628][ T5787] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1238.949656][T14200] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1239.014033][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.137297][T14200] XFS (loop0): Ending clean mount [ 1240.233240][T14200] XFS (loop0): Quotacheck needed: Please wait. [ 1240.281955][T14243] loop3: detected capacity change from 0 to 2048 [ 1240.481188][T14243] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1241.446622][T14200] XFS (loop0): Quotacheck: Done. [ 1241.558040][T14254] loop4: detected capacity change from 0 to 512 [ 1241.596295][ T5788] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1241.637875][T14254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1241.658002][T14254] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1241.718948][ T7804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1241.824857][T14263] loop3: detected capacity change from 0 to 64 [ 1241.845847][T14263] hfs: unable to locate alternate MDB [ 1241.867244][T14263] hfs: continuing without an alternate MDB [ 1242.631567][T14268] loop4: detected capacity change from 0 to 64 [ 1243.817046][T14283] loop3: detected capacity change from 0 to 128 [ 1243.945381][T14283] msdos filesystem being mounted at /426/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 1244.164109][T14292] loop4: detected capacity change from 0 to 16 [ 1244.196776][T14292] erofs: (device loop4): mounted with root inode @ nid 36. [ 1244.263544][T14294] loop3: detected capacity change from 0 to 512 [ 1244.348833][T14299] loop4: detected capacity change from 0 to 256 [ 1244.357626][T14299] FAT-fs (loop4): Unrecognized mount option "stname=win95" or missing value [ 1244.393475][T14294] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1713: bg 0: block 393: padding at end of block bitmap is not set [ 1244.423376][T14294] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 1244.443604][T14299] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1244.447992][T14294] EXT4-fs (loop3): 2 truncates cleaned up [ 1244.465674][T14294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1244.524874][T14302] loop0: detected capacity change from 0 to 256 [ 1244.630753][T14302] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x2e76b09e, utbl_chksum : 0xe619d30d) [ 1245.096036][T14302] exfat filesystem being mounted at /439/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 1245.491293][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1245.593767][T14310] loop4: detected capacity change from 0 to 64 [ 1245.662870][T14312] loop3: detected capacity change from 0 to 128 [ 1245.706874][T14312] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1245.740324][T14312] ext4 filesystem being mounted at /428/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1245.757140][T14312] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.1719: No space for directory leaf checksum. Please run e2fsck -D. [ 1245.774374][T14312] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.1719: checksumming directory block 0 [ 1245.977187][ T5787] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1247.735405][T14330] loop0: detected capacity change from 0 to 4096 [ 1247.753430][T14330] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1247.819349][T14333] loop4: detected capacity change from 0 to 256 [ 1247.830480][T14333] exfat: Deprecated parameter 'namecase' [ 1247.863163][T14333] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1247.897084][T14330] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 1247.912184][T14333] exfat filesystem being mounted at /300/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 1247.999433][ T5840] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1248.199671][ T5840] usb 4-1: Using ep0 maxpacket: 32 [ 1248.211838][ T5840] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 1248.316293][ T5840] usb 4-1: config 0 has no interface number 0 [ 1248.422686][ T5840] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=b0.c6 [ 1248.510816][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.830899][ T5840] usb 4-1: config 0 descriptor?? [ 1248.870743][ T5840] speedtch 4-1:0.168: speedtch_bind: wrong device class 176 [ 1248.929416][ T5840] speedtch 4-1:0.168: usbatm_usb_probe: bind failed: -19! [ 1248.947925][T14339] loop4: detected capacity change from 0 to 4096 [ 1249.272269][T14339] ntfs: volume version 3.1. [ 1249.926963][ T5847] usb 4-1: USB disconnect, device number 11 [ 1249.928447][T14339] ntfs: (device loop4): ntfs_nlstoucs(): Name using character set utf8 contains characters that cannot be converted to Unicode. [ 1249.948470][T14339] ntfs: (device loop4): ntfs_lookup(): Failed to convert name to Unicode. [ 1250.206533][T14353] loop4: detected capacity change from 0 to 64 [ 1250.321998][T14353] minix filesystem being mounted at /302/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 1251.130486][T14353] syz.4.1734: attempt to access beyond end of device [ 1251.130486][T14353] loop4: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 1251.172182][T14341] loop0: detected capacity change from 0 to 32768 [ 1251.219460][T14341] JBD2: Ignoring recovery information on journal [ 1251.260708][T14353] Buffer I/O error on dev loop4, logical block 134217734, lost async page write [ 1251.353312][T14341] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1251.602805][T14341] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 1251.646005][T14366] loop3: detected capacity change from 0 to 16 [ 1251.667103][T14341] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1251.695333][T14341] OCFS2: File system is now read-only. [ 1251.705839][T14366] erofs: (device loop3): mounted with root inode @ nid 36. [ 1251.722561][T14341] (syz.0.1730,14341,1):ocfs2_search_chain:1785 ERROR: status = -30 [ 1251.750418][T14341] (syz.0.1730,14341,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 1251.775316][T14341] (syz.0.1730,14341,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 1251.795551][T14341] (syz.0.1730,14341,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 1251.832897][T14366] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 1251.853765][T14341] (syz.0.1730,14341,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 1251.885730][T14341] (syz.0.1730,14341,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 1251.894397][T14366] erofs: (device loop3): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 1251.908909][T14370] loop4: detected capacity change from 0 to 512 [ 1251.913804][T14341] (syz.0.1730,14341,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 1251.915888][T14366] erofs: (device loop3): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 1251.939358][T14341] (syz.0.1730,14341,1):ocfs2_mknod:385 ERROR: status = -30 [ 1251.955954][T14341] (syz.0.1730,14341,1):ocfs2_mknod:502 ERROR: status = -30 [ 1251.969590][T14366] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 1251.994926][ T28] audit: type=1800 audit(3909835099.841:490): pid=14366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1741" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1252.020457][T14341] (syz.0.1730,14341,0):ocfs2_create:676 ERROR: status = -30 [ 1252.031926][T14370] msdos filesystem being mounted at /305/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1252.206414][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 1253.667214][T14385] loop3: detected capacity change from 0 to 4096 [ 1253.685810][T14385] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1253.721287][T14389] netlink: 'syz.2.1751': attribute type 21 has an invalid length. [ 1253.729883][T14389] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1751'. [ 1253.739131][T14389] netlink: 'syz.2.1751': attribute type 5 has an invalid length. [ 1253.747926][T14389] netlink: 'syz.2.1751': attribute type 6 has an invalid length. [ 1253.756364][ T8589] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1253.764177][T14389] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1751'. [ 1253.891620][T14385] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1253.950093][ T8589] usb 1-1: Using ep0 maxpacket: 8 [ 1253.962050][ T8589] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1253.979513][ T8589] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1253.989833][ T8589] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1253.999829][ T8589] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1254.009670][ T8589] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.018187][ T8589] usb 1-1: Product: syz [ 1254.022763][ T8589] usb 1-1: Manufacturer: syz [ 1254.027494][ T8589] usb 1-1: SerialNumber: syz [ 1254.135655][T14397] IPv6: Can't replace route, no match found [ 1254.253109][ T8589] usb 1-1: 2:1 : sample bitwidth 202 in over sample bytes 1 [ 1254.269345][ T8589] usb 1-1: 2:1 : invalid channels 0 [ 1254.555280][ T8589] usb 1-1: USB disconnect, device number 11 [ 1255.125997][T12299] udevd[12299]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1256.260472][T14408] loop3: detected capacity change from 0 to 256 [ 1256.446654][T14408] FAT-fs (loop3): Directory bread(block 64) failed [ 1256.458420][T14408] FAT-fs (loop3): Directory bread(block 65) failed [ 1256.478892][T14408] FAT-fs (loop3): Directory bread(block 66) failed [ 1256.494851][T14408] FAT-fs (loop3): Directory bread(block 67) failed [ 1256.504849][T14408] FAT-fs (loop3): Directory bread(block 68) failed [ 1256.515207][T14408] FAT-fs (loop3): Directory bread(block 69) failed [ 1256.525922][T14408] FAT-fs (loop3): Directory bread(block 70) failed [ 1256.538537][T14408] FAT-fs (loop3): Directory bread(block 71) failed [ 1256.539503][T14401] loop4: detected capacity change from 0 to 32768 [ 1256.547644][T14408] FAT-fs (loop3): Directory bread(block 72) failed [ 1256.554098][T14411] loop0: detected capacity change from 0 to 4096 [ 1256.558577][T14408] FAT-fs (loop3): Directory bread(block 73) failed [ 1256.584516][T14411] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 1256.586329][T14401] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 1256.641389][T14408] vfat filesystem being mounted at /439/bus supports timestamps until 2107-12-31 (0x10391447e) [ 1256.705413][T14411] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 1256.773227][T12299] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 1257.689244][T14423] netlink: 'syz.0.1766': attribute type 9 has an invalid length. [ 1257.770227][T14423] netlink: 'syz.0.1766': attribute type 9 has an invalid length. [ 1259.125252][T14427] loop4: detected capacity change from 0 to 32768 [ 1259.201160][T14427] JBD2: Ignoring recovery information on journal [ 1259.378513][T14427] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1259.570634][T14452] loop3: detected capacity change from 0 to 512 [ 1259.577991][T14452] EXT4-fs: Ignoring removed i_version option [ 1259.584758][T14452] EXT4-fs: Ignoring removed mblk_io_submit option [ 1259.621731][T14427] (syz.4.1767,14427,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=51539607617, rec_len=0, name_len=0 [ 1259.640527][T14452] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1776: inode #13: comm syz.3.1776: iget: illegal inode # [ 1259.748093][T14427] (syz.4.1767,14427,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 1259.776131][T14452] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1776: couldn't read orphan inode 13 (err -117) [ 1259.882858][T14427] (syz.4.1767,14427,0):ocfs2_mknod:298 ERROR: status = -2 [ 1260.036583][T14452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1260.108204][T14427] (syz.4.1767,14427,0):ocfs2_mknod:502 ERROR: status = -2 [ 1260.205495][T14427] (syz.4.1767,14427,0):ocfs2_create:676 ERROR: status = -2 [ 1260.398031][T14452] EXT4-fs error (device loop3): ext4_resize_begin:62: comm syz.3.1776: resize_inode disabled but reserved GDT blocks non-zero [ 1260.574097][ T7804] ocfs2: Unmounting device (7,4) on (node local) [ 1260.689821][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1261.939769][T14484] loop3: detected capacity change from 0 to 512 [ 1261.953815][T14484] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1262.048101][T14484] EXT4-fs (loop3): 1 truncate cleaned up [ 1262.077404][T14484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1262.232854][T14484] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.1786: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 1262.367876][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1262.426439][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1790'. [ 1263.579312][T11462] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1263.784297][T14510] blktrace: Concurrent blktraces are not allowed on sg0 [ 1263.830770][T11462] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 1263.852219][T11462] usb 4-1: config 0 has no interface number 0 [ 1264.683689][T11462] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1264.695182][T11462] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1264.705844][T11462] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1264.716004][T11462] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1264.725183][T11462] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.745441][T11462] usb 4-1: config 0 descriptor?? [ 1264.754714][T11462] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1264.911763][T14524] loop0: detected capacity change from 0 to 2048 [ 1264.947827][T14524] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1265.150944][T11462] spca561: probe of 4-1:0.156 failed with error -22 [ 1265.171893][T11462] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1265.178996][T11462] usb 4-1: MIDIStreaming interface descriptor not found [ 1265.849692][T14535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1808'. [ 1266.039662][T11462] usb 4-1: USB disconnect, device number 12 [ 1266.079596][T14541] loop4: detected capacity change from 0 to 8 [ 1266.102642][T14541] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1266.360625][ T5794] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1266.595424][T12393] udevd[12393]: incorrect cramfs checksum on /dev/loop4 [ 1266.660920][ T5794] usb 3-1: Using ep0 maxpacket: 16 [ 1266.755159][ T5794] usb 3-1: config 0 has no interfaces? [ 1266.909891][ T5794] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1266.982222][T14541] cramfs: Error -3 while decompressing! [ 1267.000229][ T5794] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1267.011658][ T5794] usb 3-1: Manufacturer: syz [ 1267.012231][T14541] cramfs: ffffffff96fe1368(26)->ffff88805895f000(4096) [ 1267.036450][ T5794] usb 3-1: config 0 descriptor?? [ 1267.054079][T14541] cramfs: bad data blocksize 3489655184 [ 1267.063462][T14541] cramfs: Error -3 while decompressing! [ 1267.071079][T14541] cramfs: ffffffff96fe1368(26)->ffff88805895f000(4096) [ 1267.078261][ T28] audit: type=1800 audit(3909835114.931:491): pid=14541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1810" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 1267.127434][T12393] udevd[12393]: incorrect cramfs checksum on /dev/loop4 [ 1267.162962][T14556] loop3: detected capacity change from 0 to 256 [ 1267.193777][T14556] vfat filesystem being mounted at /450/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1267.301505][ T5794] usb 3-1: USB disconnect, device number 14 [ 1270.070896][T14585] netlink: 'syz.3.1826': attribute type 1 has an invalid length. [ 1270.078694][T14585] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1826'. [ 1271.819126][T14616] loop0: detected capacity change from 0 to 2048 [ 1271.871253][T14616] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1271.903685][T14620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1844'. [ 1272.098010][T14626] loop4: detected capacity change from 0 to 256 [ 1272.132726][T14626] exfat: Deprecated parameter 'namecase' [ 1272.146907][T14626] exfat: Deprecated parameter 'namecase' [ 1272.204700][T14626] exfat: Deprecated parameter 'namecase' [ 1273.002430][T14626] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1273.075807][T14626] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 1273.101671][T14635] loop3: detected capacity change from 0 to 64 [ 1273.127230][T14626] exfat filesystem being mounted at /328/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 1273.172998][T14635] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1273.248486][T14635] bfs filesystem being mounted at /460/bus supports timestamps until 2106-02-07 (0xffffffff) [ 1274.215612][T14671] loop0: detected capacity change from 0 to 512 [ 1274.329840][T14671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1274.346637][T14671] ext4 filesystem being mounted at /474/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1274.401768][T14671] EXT4-fs error (device loop0): ext4_xattr_block_get:600: inode #12: comm syz.0.1866: corrupted xattr block 6: invalid header [ 1274.561648][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1274.742085][T14694] loop0: detected capacity change from 0 to 64 [ 1274.789615][T14694] minix filesystem being mounted at /475/bus supports timestamps until 2106-02-07 (0xffffffff) [ 1274.863688][T14694] syz.0.1873: attempt to access beyond end of device [ 1274.863688][T14694] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1274.910872][T14694] Buffer I/O error on dev loop0, logical block 512, async page read [ 1274.941786][T14694] syz.0.1873: attempt to access beyond end of device [ 1274.941786][T14694] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1274.979828][T14694] Buffer I/O error on dev loop0, logical block 56576, async page read [ 1275.123183][T14700] loop3: detected capacity change from 0 to 16 [ 1275.139865][T14700] erofs: (device loop3): mounted with root inode @ nid 36. [ 1275.174040][T14700] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1275.199791][T14700] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[58, 4038] out[1851] [ 1275.218358][T14700] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1275.478873][T14708] loop0: detected capacity change from 0 to 256 [ 1275.560679][T14708] FAT-fs (loop0): Directory bread(block 64) failed [ 1275.669444][T14708] FAT-fs (loop0): Directory bread(block 65) failed [ 1275.690731][T14708] FAT-fs (loop0): Directory bread(block 66) failed [ 1275.697312][T14708] FAT-fs (loop0): Directory bread(block 67) failed [ 1275.762286][T14708] FAT-fs (loop0): Directory bread(block 68) failed [ 1275.768861][T14708] FAT-fs (loop0): Directory bread(block 69) failed [ 1275.775614][T14708] FAT-fs (loop0): Directory bread(block 70) failed [ 1275.790070][T14708] FAT-fs (loop0): Directory bread(block 71) failed [ 1275.796771][T14708] FAT-fs (loop0): Directory bread(block 72) failed [ 1276.446529][T14708] FAT-fs (loop0): Directory bread(block 73) failed [ 1276.654076][T14708] vfat filesystem being mounted at /477/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 1276.795716][ T28] audit: type=1800 audit(3909835124.651:492): pid=14708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1882" name="file1" dev="loop0" ino=1048649 res=0 errno=0 [ 1277.015613][T14735] netlink: 'syz.2.1893': attribute type 3 has an invalid length. [ 1278.167580][T14729] loop4: detected capacity change from 0 to 32768 [ 1278.192393][T14729] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 1278.278806][T14744] loop0: detected capacity change from 0 to 2048 [ 1278.288286][T14727] loop3: detected capacity change from 0 to 32768 [ 1278.342501][T14727] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 1278.369677][T14746] ptrace attach of "./syz-executor exec"[14749] was attempted by "./syz-executor exec"[14746] [ 1278.437780][T12299] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 1278.441983][T14744] loop0: p2 p3 p7 [ 1278.551917][T14752] loop4: detected capacity change from 0 to 64 [ 1278.665176][T14549] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 1280.321318][T12316] udevd[12316]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 1280.335553][T14047] udevd[14047]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 1280.345802][T14767] loop4: detected capacity change from 0 to 512 [ 1280.354350][T14549] udevd[14549]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 1280.474681][T14767] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1280.631462][T14767] msdos filesystem being mounted at /341/. supports timestamps until 2107-12-31 (0x10391447e) [ 1280.905064][T14778] loop4: detected capacity change from 0 to 2048 [ 1281.020561][T14778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1281.091010][T14778] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1281.249443][T14787] netlink: 'syz.2.1912': attribute type 39 has an invalid length. [ 1281.254467][ T7804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1281.274485][T14787] veth0_macvtap: left promiscuous mode [ 1281.640632][T14784] loop3: detected capacity change from 0 to 32768 [ 1282.004901][T14784] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1911 (14784) [ 1282.250384][T14784] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1282.291403][T14784] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1282.339536][T14784] BTRFS info (device loop3): using free space tree [ 1282.376177][T14776] loop0: detected capacity change from 0 to 32768 [ 1282.614133][T14797] loop4: detected capacity change from 0 to 2048 [ 1282.632810][T14776] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1282.647583][T14797] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1282.811816][T14797] NILFS (loop4): mounting unchecked fs [ 1282.917095][T14797] NILFS (loop4): recovery required for readonly filesystem [ 1282.975629][T14797] NILFS (loop4): write access will be enabled during recovery [ 1283.241139][T14797] NILFS (loop4): norecovery option specified, skipping roll-forward recovery [ 1283.301026][T14797] NILFS (loop4): couldn't remount because the filesystem is in an incomplete recovery state [ 1283.362375][T14776] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 1280 [ 1283.433495][T14776] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1283.434122][T14549] udevd[14549]: incorrect nilfs2 checksum on /dev/loop4 [ 1283.461083][T14776] OCFS2: File system is now read-only. [ 1283.477071][T14776] (syz.0.1907,14776,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 1283.479563][T14784] BTRFS info (device loop3): enabling ssd optimizations [ 1283.499794][T14784] BTRFS info (device loop3): auto enabling async discard [ 1283.515126][T14776] (syz.0.1907,14776,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 1283.524728][T14776] (syz.0.1907,14776,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 1283.556082][T14776] (syz.0.1907,14776,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 1283.602548][T14776] (syz.0.1907,14776,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 1283.640469][T14776] (syz.0.1907,14776,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 1283.648678][T14776] (syz.0.1907,14776,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 1283.793772][T14776] (syz.0.1907,14776,1):ocfs2_mknod:385 ERROR: status = -30 [ 1283.914829][T14776] (syz.0.1907,14776,1):ocfs2_mknod:502 ERROR: status = -30 [ 1283.955802][ T5787] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1284.037341][T14776] (syz.0.1907,14776,1):ocfs2_create:676 ERROR: status = -30 [ 1284.667829][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 1286.214293][T14828] loop4: detected capacity change from 0 to 32768 [ 1286.225136][T14843] loop0: detected capacity change from 0 to 256 [ 1286.249595][T14828] jfs filesystem being mounted at /346/file2 supports timestamps until 2106-02-07 (0xffffffff) [ 1286.329453][T14828] read_mapping_page failed! [ 1286.404143][T14843] FAT-fs (loop0): Directory bread(block 64) failed [ 1286.428721][T14843] FAT-fs (loop0): Directory bread(block 65) failed [ 1286.453603][T14843] FAT-fs (loop0): Directory bread(block 66) failed [ 1286.472018][T14843] FAT-fs (loop0): Directory bread(block 67) failed [ 1286.489615][T14843] FAT-fs (loop0): Directory bread(block 68) failed [ 1286.507417][T14843] FAT-fs (loop0): Directory bread(block 69) failed [ 1286.516196][T14843] FAT-fs (loop0): Directory bread(block 70) failed [ 1286.527921][T14843] FAT-fs (loop0): Directory bread(block 71) failed [ 1286.535314][T14843] FAT-fs (loop0): Directory bread(block 72) failed [ 1286.546665][T14843] FAT-fs (loop0): Directory bread(block 73) failed [ 1286.568858][T14843] vfat filesystem being mounted at /484/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 1286.706549][T14845] loop3: detected capacity change from 0 to 8192 [ 1286.742065][T14845] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1286.826967][T14845] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1286.879992][T14845] REISERFS (device loop3): using ordered data mode [ 1286.886554][T14845] reiserfs: using flush barriers [ 1286.914251][T14845] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1286.954610][T14845] REISERFS (device loop3): checking transaction log (loop3) [ 1287.009573][T14845] REISERFS (device loop3): Using rupasov hash to sort names [ 1287.421595][T14856] loop3: detected capacity change from 0 to 64 [ 1287.456064][T14856] minix filesystem being mounted at /479/file2 supports timestamps until 2106-02-07 (0xffffffff) [ 1290.141500][T14883] loop4: detected capacity change from 0 to 32768 [ 1290.183979][T14883] (syz.4.1941,14883,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1290.220636][T14883] (syz.4.1941,14883,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1290.290985][T14882] loop3: detected capacity change from 0 to 32768 [ 1290.296245][T14897] loop0: detected capacity change from 0 to 4096 [ 1290.324626][T14883] (syz.4.1941,14883,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xecaf217e, computed 0x51d812ae. Applying ECC. [ 1290.330852][T14897] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1290.339502][T14882] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1939 (14882) [ 1290.384327][T14883] JBD2: Ignoring recovery information on journal [ 1290.391969][T14882] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1290.409896][T14882] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1290.418589][T14882] BTRFS info (device loop3): enabling auto defrag [ 1290.646732][T14882] BTRFS info (device loop3): turning on sync discard [ 1290.843271][T14882] BTRFS info (device loop3): force zlib compression, level 3 [ 1291.006362][T14882] BTRFS info (device loop3): force clearing of disk cache [ 1291.164398][T14882] BTRFS info (device loop3): max_inline at 0 [ 1291.278841][T14882] BTRFS info (device loop3): disabling free space tree [ 1291.290590][T14883] (syz.4.1941,14883,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xecaf217e, computed 0x51d812ae. Applying ECC. [ 1291.346542][T14883] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1291.511957][T14882] BTRFS info (device loop3): enabling ssd optimizations [ 1291.557235][T14882] BTRFS info (device loop3): rebuilding free space tree [ 1291.628631][T14923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1951'. [ 1291.798149][ T7804] ocfs2: Unmounting device (7,4) on (node local) [ 1291.930477][T14882] BTRFS info (device loop3): disabling free space tree [ 1291.937565][T14882] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1291.983558][T14882] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1292.443205][ T5787] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1292.540962][T14934] loop4: detected capacity change from 0 to 16 [ 1292.561939][T14936] loop0: detected capacity change from 0 to 64 [ 1292.625314][ C0] vkms_vblank_simulate: vblank timer overrun [ 1292.661486][T14934] erofs: (device loop4): mounted with root inode @ nid 36. [ 1292.802405][T14934] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1292.802435][T14934] erofs: (device loop4): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 1292.802462][T14934] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1292.802481][T14934] erofs: (device loop4): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 1292.802506][T14934] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1292.802523][T14934] erofs: (device loop4): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 1292.802568][T14934] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1292.802591][T14934] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1292.802608][T14934] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 1292.802877][ T28] audit: type=1800 audit(3909835140.661:493): pid=14934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1953" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1293.245463][T14943] loop0: detected capacity change from 0 to 4096 [ 1293.256486][T14947] loop3: detected capacity change from 0 to 1024 [ 1293.304033][T14947] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1293.358039][T14943] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1293.358067][T14943] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1293.358496][T14943] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1293.358581][T14943] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1293.358644][T14943] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1293.365743][T14943] ntfs: volume version 3.1. [ 1293.368873][T14943] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1293.490225][T14943] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1293.515164][T14947] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 2: comm syz.3.1956: lblock 2 mapped to illegal pblock 2 (length 1) [ 1293.559955][T14943] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1293.571537][T14943] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1293.611548][T14947] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 48: comm syz.3.1956: lblock 0 mapped to illegal pblock 48 (length 1) [ 1293.659646][T14947] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1956: Failed to acquire dquot type 0 [ 1293.692805][T14947] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 1293.783612][T14947] EXT4-fs error (device loop3): ext4_evict_inode:252: inode #11: comm syz.3.1956: mark_inode_dirty error [ 1293.839501][T14947] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 1293.858042][T14947] EXT4-fs (loop3): 1 orphan inode deleted [ 1293.867139][T14947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1293.879779][ T8652] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 1293.949404][ T8652] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u4:20: Failed to release dquot type 0 [ 1293.990016][T14963] netlink: 'syz.0.1967': attribute type 1 has an invalid length. [ 1293.997829][T14963] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1967'. [ 1294.028557][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1294.074460][ T8652] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 1294.151337][ T8652] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u4:20: Failed to release dquot type 0 [ 1294.174402][ T5787] EXT4-fs error (device loop3): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1294.231361][ T5787] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 1294.249807][ T5787] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 1296.770585][T14982] loop4: detected capacity change from 0 to 32768 [ 1296.785972][T14982] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 1296.851126][T12393] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1296.883880][T14994] loop3: detected capacity change from 0 to 4096 [ 1296.992977][T14994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1297.132315][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1297.191154][T15002] loop4: detected capacity change from 0 to 256 [ 1297.231415][T15002] msdos filesystem being mounted at /358/file0 supports timestamps until 2108-01-01 (0x103919f6e) [ 1298.345799][T15012] loop0: detected capacity change from 0 to 512 [ 1298.396434][T15012] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1298.519162][T15012] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #11: block 1728053262: comm syz.0.1987: lblock 0 mapped to illegal pblock 1728053262 (length 1) [ 1298.609130][T15012] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1298.626320][T15012] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #15: comm syz.0.1987: corrupted inode contents [ 1298.639967][T15012] EXT4-fs error (device loop0): ext4_dirty_inode:6120: inode #15: comm syz.0.1987: mark_inode_dirty error [ 1298.677381][T15012] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #15: comm syz.0.1987: corrupted inode contents [ 1298.696712][T15012] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3017: inode #15: comm syz.0.1987: mark_inode_dirty error [ 1298.814860][T15012] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3020: inode #15: comm syz.0.1987: mark inode dirty (error -117) [ 1298.850620][T15012] EXT4-fs warning (device loop0): ext4_evict_inode:272: xattr delete (err -117) [ 1299.397267][T15012] EXT4-fs (loop0): 1 orphan inode deleted [ 1299.470783][T15012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1299.791254][T15027] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1992'. [ 1299.819352][T15028] loop4: detected capacity change from 0 to 256 [ 1299.887017][T15028] FAT-fs (loop4): Directory bread(block 64) failed [ 1299.903852][T15028] FAT-fs (loop4): Directory bread(block 65) failed [ 1299.918820][T15028] FAT-fs (loop4): Directory bread(block 66) failed [ 1299.927128][T15028] FAT-fs (loop4): Directory bread(block 67) failed [ 1299.927273][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1299.937162][T15028] FAT-fs (loop4): Directory bread(block 68) failed [ 1299.943585][T15027] netlink: 'syz.3.1992': attribute type 1 has an invalid length. [ 1299.965540][T15028] FAT-fs (loop4): Directory bread(block 69) failed [ 1300.028710][T15028] FAT-fs (loop4): Directory bread(block 70) failed [ 1300.056105][T15028] FAT-fs (loop4): Directory bread(block 71) failed [ 1300.105568][T15028] FAT-fs (loop4): Directory bread(block 72) failed [ 1300.129675][T15028] FAT-fs (loop4): Directory bread(block 73) failed [ 1300.154195][T15033] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1300.169554][T15028] vfat filesystem being mounted at /360/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 1300.472181][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.330893][T15045] loop0: detected capacity change from 0 to 256 [ 1301.670576][T15052] loop3: detected capacity change from 0 to 4096 [ 1301.678395][T15052] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1301.876963][T15052] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1301.905234][T15052] ntfs3: loop3: Failed to load $Extend (-22). [ 1301.932719][T15052] ntfs3: loop3: Failed to initialize $Extend. [ 1301.964350][T15055] loop0: detected capacity change from 0 to 4096 [ 1302.140561][T15059] loop4: detected capacity change from 0 to 2048 [ 1302.218200][T15059] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1302.348675][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 1302.348694][ T28] audit: type=1800 audit(3909835150.201:494): pid=15059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2005" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 1303.683347][T15075] loop4: detected capacity change from 0 to 4096 [ 1303.722155][T15075] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 1303.742717][T15082] loop3: detected capacity change from 0 to 1024 [ 1303.889075][T15082] hfsplus: hfsplus: Invalid key length: 29235 [ 1304.753983][T15091] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2017'. [ 1305.279376][T11462] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1305.472869][T11462] usb 4-1: config 0 has no interfaces? [ 1306.970133][T11462] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1306.981241][T11462] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.991922][T11462] usb 4-1: Product: syz [ 1307.007375][T11462] usb 4-1: Manufacturer: syz [ 1307.014388][T11462] usb 4-1: SerialNumber: syz [ 1307.022992][T11462] r8152-cfgselector 4-1: config 0 descriptor?? [ 1307.192727][T15109] netlink: 'syz.2.2026': attribute type 1 has an invalid length. [ 1307.252366][T11462] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 1307.376608][T15115] loop0: detected capacity change from 0 to 128 [ 1307.531555][T11462] usb 4-1: USB disconnect, device number 13 [ 1307.570516][T15115] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 1308.084525][T15115] sysv filesystem being remounted at /513/file1 supports timestamps until 2106-02-07 (0xffffffff) [ 1308.333988][T15107] loop4: detected capacity change from 0 to 32768 [ 1308.359467][ T5788] sysv_free_block: flc_count > flc_size [ 1308.366261][ T5788] sysv_free_block: flc_count > flc_size [ 1308.371106][T15107] (syz.4.2024,15107,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1308.372015][ T5788] sysv_free_block: flc_count > flc_size [ 1308.393031][ T5788] sysv_free_block: flc_count > flc_size [ 1308.398599][ T5788] sysv_free_block: flc_count > flc_size [ 1308.404251][ T5788] sysv_free_block: flc_count > flc_size [ 1308.412964][T15107] (syz.4.2024,15107,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1308.430484][ T5788] sysv_free_block: flc_count > flc_size [ 1308.436099][ T5788] sysv_free_block: flc_count > flc_size [ 1308.446735][ T5788] sysv_free_block: flc_count > flc_size [ 1308.457288][ T5788] sysv_free_block: flc_count > flc_size [ 1308.602206][ T5788] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1309.579392][T15107] (syz.4.2024,15107,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 1309.595525][T15107] (syz.4.2024,15107,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 1309.626398][T15107] JBD2: Ignoring recovery information on journal [ 1309.707737][T15107] (syz.4.2024,15107,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 1309.721987][T15107] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1309.750655][T15107] (syz.4.2024,15107,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 1309.817998][T15107] (syz.4.2024,15107,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 1310.232651][T15107] (syz.4.2024,15107,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 1310.817961][T15107] (syz.4.2024,15107,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 1310.832826][T15107] (syz.4.2024,15107,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 1310.847986][T15107] (syz.4.2024,15107,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1310.857924][T15107] (syz.4.2024,15107,1):ocfs2_quota_read:201 ERROR: status = -5 [ 1310.866611][T15107] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 5 [ 1310.876190][T15107] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1310.886045][T15107] (syz.4.2024,15107,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 1310.898907][T15107] (syz.4.2024,15107,1):ocfs2_mknod:314 ERROR: status = -5 [ 1310.906758][T15107] (syz.4.2024,15107,1):ocfs2_mknod:502 ERROR: status = -5 [ 1311.011760][T15145] loop0: detected capacity change from 0 to 1024 [ 1311.020150][ T7804] ocfs2: Unmounting device (7,4) on (node local) [ 1311.020758][T15145] EXT4-fs: Ignoring removed bh option [ 1311.140860][T15145] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1311.541545][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1314.481986][T15155] loop4: detected capacity change from 0 to 32768 [ 1314.538194][T15155] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/loop4": -EINTR [ 1314.904474][T15190] loop3: detected capacity change from 0 to 256 [ 1315.018752][T15192] loop4: detected capacity change from 0 to 256 [ 1315.068307][T15190] FAT-fs (loop3): Directory bread(block 64) failed [ 1315.097048][T15192] FAT-fs (loop4): Directory bread(block 64) failed [ 1315.105698][T15190] FAT-fs (loop3): Directory bread(block 65) failed [ 1315.109466][T15192] FAT-fs (loop4): Directory bread(block 65) failed [ 1315.142377][T15190] FAT-fs (loop3): Directory bread(block 66) failed [ 1315.149658][T15192] FAT-fs (loop4): Directory bread(block 66) failed [ 1315.166978][T15190] FAT-fs (loop3): Directory bread(block 67) failed [ 1315.169607][T15192] FAT-fs (loop4): Directory bread(block 67) failed [ 1315.207510][T15190] FAT-fs (loop3): Directory bread(block 68) failed [ 1315.223276][T15192] FAT-fs (loop4): Directory bread(block 68) failed [ 1315.227887][T15190] FAT-fs (loop3): Directory bread(block 69) failed [ 1315.248420][T15190] FAT-fs (loop3): Directory bread(block 70) failed [ 1315.259920][T15192] FAT-fs (loop4): Directory bread(block 69) failed [ 1315.266805][T15192] FAT-fs (loop4): Directory bread(block 70) failed [ 1315.268712][T15190] FAT-fs (loop3): Directory bread(block 71) failed [ 1315.299510][T15192] FAT-fs (loop4): Directory bread(block 71) failed [ 1315.305281][T15190] FAT-fs (loop3): Directory bread(block 72) failed [ 1315.307656][T15192] FAT-fs (loop4): Directory bread(block 72) failed [ 1315.323144][T15190] FAT-fs (loop3): Directory bread(block 73) failed [ 1315.359588][T15192] FAT-fs (loop4): Directory bread(block 73) failed [ 1315.377160][T15190] vfat filesystem being mounted at /506/bus supports timestamps until 2107-12-31 (0x10391447e) [ 1315.407175][T15192] vfat filesystem being mounted at /370/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 1315.841627][T15184] loop0: detected capacity change from 0 to 40427 [ 1315.883580][T15184] F2FS-fs (loop0): invalid crc value [ 1315.914647][T15184] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1315.936121][T15200] loop4: detected capacity change from 0 to 2048 [ 1315.977355][T15200] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1316.023143][T15200] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1316.071154][T15184] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1317.360457][T15221] SET target dimension over the limit! [ 1317.404319][T15222] loop3: detected capacity change from 0 to 1024 [ 1317.617928][ T59] hfsplus: b-tree write err: -5, ino 4 [ 1318.043761][T15239] loop0: detected capacity change from 0 to 512 [ 1318.133060][T15239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1318.229597][T15239] ext4 filesystem being mounted at /521/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1318.368222][T15239] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1318.425083][T15239] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1318.585482][T15239] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2073: Failed to acquire dquot type 1 [ 1320.442307][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1320.526738][T15254] loop3: detected capacity change from 0 to 64 [ 1320.552981][T15254] minix filesystem being mounted at /515/file2 supports timestamps until 2106-02-07 (0xffffffff) [ 1320.677635][T15256] loop4: detected capacity change from 0 to 164 [ 1320.766009][T15256] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1323.616249][T15269] loop4: detected capacity change from 0 to 32768 [ 1323.728072][T15269] jfs filesystem being mounted at /379/file2 supports timestamps until 2106-02-07 (0xffffffff) [ 1324.597123][T15269] ERROR: (device loop4): dbAlloc: unable to allocate blocks [ 1324.597123][T15269] [ 1324.645755][T15280] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1324.672972][T15269] ERROR: (device loop4): remounting filesystem as read-only [ 1324.706457][T15269] jfs_create: dtInsert returned -EIO [ 1324.749425][T15269] ERROR: (device loop4): jfs_create: [ 1324.749425][T15269] [ 1324.860822][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2089'. [ 1324.897908][T15287] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2089'. [ 1324.926538][T15287] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 1325.084546][T15289] loop0: detected capacity change from 0 to 4096 [ 1325.107055][T15289] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1325.387235][T15289] ntfs: volume version 3.1. [ 1326.072014][T15302] loop3: detected capacity change from 0 to 128 [ 1326.159997][T15302] msdos filesystem being mounted at /522/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1326.256831][T12393] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1326.378500][T15311] loop4: detected capacity change from 0 to 256 [ 1326.417327][T15311] vfat filesystem being mounted at /383/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 1326.510150][T15313] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.2101'. [ 1326.743276][T15323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2106'. [ 1326.989546][ T5794] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1327.714975][T15328] loop3: detected capacity change from 0 to 4096 [ 1327.780699][T15329] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1327.850782][ T5794] usb 3-1: Using ep0 maxpacket: 16 [ 1327.871149][ T5794] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1327.881301][ T5794] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 1327.899336][ T5794] usb 3-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 1327.908874][ T5794] usb 3-1: Product: syz [ 1327.934155][T15317] loop0: detected capacity change from 0 to 32768 [ 1327.945278][ T5794] usb 3-1: Manufacturer: syz [ 1327.950135][ T5794] usb 3-1: SerialNumber: syz [ 1327.972129][ T5794] usb 3-1: config 0 descriptor?? [ 1327.985756][T15317] jfs filesystem being mounted at /527/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 1328.020371][T15317] ERROR: (device loop0): dtSearch: stack overrun! [ 1328.020371][T15317] [ 1328.087181][T15333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2110'. [ 1328.110872][T15317] ERROR: (device loop0): remounting filesystem as read-only [ 1328.119511][T15317] btstack dump: [ 1328.134629][T15317] bn = 0, index = 4 [ 1328.146456][T15333] ip6erspan0: entered allmulticast mode [ 1328.154878][T15317] bn = 0, index = 4 [ 1328.169566][T15317] bn = 0, index = 4 [ 1328.177541][T15335] loop4: detected capacity change from 0 to 512 [ 1328.188248][T15317] bn = 0, index = 4 [ 1328.198734][T15317] bn = 0, index = 4 [ 1328.216802][T15317] bn = 0, index = 4 [ 1328.233322][T15317] bn = 0, index = 4 [ 1328.240293][T15335] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1328.257313][T15317] bn = 0, index = 0 [ 1328.268316][T15317] jfs_lookup: dtSearch returned -5 [ 1328.316238][ T5794] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 1328.339185][ T5794] usb 3-1: USB disconnect, device number 15 [ 1328.360412][T15335] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1328.416380][T12393] udevd[12393]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1328.458152][T15335] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.2111: bg 0: block 248: padding at end of block bitmap is not set [ 1328.499762][T15335] Quota error (device loop4): write_blk: dquota write failed [ 1328.507163][T15340] loop3: detected capacity change from 0 to 2048 [ 1328.520053][T15340] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1328.535646][T15335] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1328.567204][T15335] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2111: Failed to acquire dquot type 1 [ 1328.589553][T15341] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1328.674897][T15335] EXT4-fs (loop4): 1 truncate cleaned up [ 1328.682036][T15335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1328.683039][T15340] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1328.758507][T15340] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 1328.829518][T15340] Remounting filesystem read-only [ 1328.834681][T15345] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.2114'. [ 1328.844199][T15340] NILFS (loop3): error -5 truncating bmap (ino=16) [ 1328.876361][T15345] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1328.903034][ T5787] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 1328.929306][ T5787] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 1328.937026][ T5787] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1328.969441][ T5787] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1328.978869][ T5787] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1329.002116][ T5787] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 1329.016436][ T7804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1329.056838][ T59] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 1329.097733][ T59] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u4:4: Failed to release dquot type 1 [ 1329.702208][T15352] loop3: detected capacity change from 0 to 512 [ 1329.998101][T15352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1330.119599][T15343] loop0: detected capacity change from 0 to 32768 [ 1330.135846][T15352] ext4 filesystem being mounted at /528/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1330.178042][T15343] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1330.333796][T15352] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz.3.2115: Directory hole found for htree leaf block 0 [ 1330.426834][T15343] XFS (loop0): Ending clean mount [ 1330.467171][T15352] EXT4-fs (loop3): Remounting filesystem read-only [ 1330.485927][T15343] XFS (loop0): Quotacheck needed: Please wait. [ 1330.736574][T15343] XFS (loop0): Quotacheck: Done. [ 1330.746683][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1330.760636][ T2928] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1330.803608][ T2928] Quota error (device loop3): write_blk: dquota write failed [ 1330.842971][ T2928] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 1330.902779][ T2928] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1330.944528][ T5788] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1330.955678][ T2928] Quota error (device loop3): write_blk: dquota write failed [ 1330.988103][ T2928] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 1331.327051][T15375] loop3: detected capacity change from 0 to 64 [ 1331.794455][T15383] usb usb1: usbfs: process 15383 (syz.0.2127) did not claim interface 0 before use [ 1331.799220][T15381] loop3: detected capacity change from 0 to 1024 [ 1331.842606][T15381] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1331.891319][T15385] loop0: detected capacity change from 0 to 2048 [ 1331.915866][T15385] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1331.955113][T15381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1332.063401][T15385] UDF-fs: bad mount option "ÿÿ184467440737095516150xffffffffffffffff18446744073709551615±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(cŸoö—ÈêM ) Çÿÿÿÿÿÿÿÿÿ" or missing value [ 1332.095287][T15381] EXT4-fs error (device loop3): ext4_xattr_inode_iget:444: inode #11: comm syz.3.2126: missing EA_INODE flag [ 1332.162944][T15377] loop4: detected capacity change from 0 to 32768 [ 1332.197652][T15381] EXT4-fs (loop3): Remounting filesystem read-only [ 1332.213176][T15381] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1332.234430][T15377] (syz.4.2125,15377,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1332.280572][T15377] (syz.4.2125,15377,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1332.338703][T15377] JBD2: Ignoring recovery information on journal [ 1332.375991][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1332.445750][T15377] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1333.384242][T15397] loop3: detected capacity change from 0 to 4096 [ 1333.400835][T15397] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1333.438249][ T7804] ocfs2: Unmounting device (7,4) on (node local) [ 1333.919050][T15391] loop0: detected capacity change from 0 to 32768 [ 1333.937407][T15391] (syz.0.2129,15391,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1334.134294][T15407] vlan0: entered promiscuous mode [ 1334.140693][T15391] (syz.0.2129,15391,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1334.628277][T15391] (syz.0.2129,15391,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 1334.814459][T15391] (syz.0.2129,15391,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 1334.845610][T15391] JBD2: Ignoring recovery information on journal [ 1334.994882][T15391] (syz.0.2129,15391,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 1335.018267][T15391] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1335.060713][T15391] (syz.0.2129,15391,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 1335.116658][T15391] (syz.0.2129,15391,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 1336.010993][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 1336.040054][T15427] loop3: detected capacity change from 0 to 64 [ 1336.094149][T15427] minix filesystem being mounted at /536/file2 supports timestamps until 2106-02-07 (0xffffffff) [ 1336.196429][T15427] Trying to free block not in datazone [ 1336.229422][T15427] Trying to free block not in datazone [ 1336.249486][T15432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2142'. [ 1336.263556][T15427] Trying to free block not in datazone [ 1336.290465][T15427] Trying to free block not in datazone [ 1336.295993][T15427] minix_free_block (loop3:6): bit already cleared [ 1336.328752][T15427] Trying to free block not in datazone [ 1336.344402][T15427] Trying to free block not in datazone [ 1337.107872][T15446] loop3: detected capacity change from 0 to 512 [ 1337.119351][ T5794] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1337.148706][T15446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1337.165474][T15446] ext4 filesystem being mounted at /537/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1337.195947][T15446] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz.3.2149: invalid size [ 1337.341143][ T5794] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.353959][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1337.387293][ T5794] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1337.423165][ T5794] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1337.501341][ T5794] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1337.523550][ T5794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.549359][ T5794] usb 5-1: Product: syz [ 1337.554923][ T5794] usb 5-1: Manufacturer: syz [ 1337.584177][ T5794] usb 5-1: SerialNumber: syz [ 1337.620498][ T5794] usb 5-1: config 0 descriptor?? [ 1337.869393][ T6457] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1338.479144][ T5794] usb 5-1: Found UVC 34.00 device syz (8086:0b5b) [ 1338.499802][ T5794] usb 5-1: No valid video chain found. [ 1338.560354][ T5794] usb 5-1: USB disconnect, device number 17 [ 1338.704598][ T6457] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1338.735403][ T6457] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.784452][ T6457] usb 4-1: config 0 descriptor?? [ 1339.145702][T15465] loop0: detected capacity change from 0 to 32768 [ 1339.253545][ T6457] ath6kl: Failed to submit usb control message: -71 [ 1339.280378][ T6457] ath6kl: unable to send the bmi data to the device: -71 [ 1339.295437][T15465] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1339.314041][ T6457] ath6kl: Unable to send get target info: -71 [ 1339.543711][ T6457] ath6kl: Failed to init ath6kl core: -71 [ 1339.728591][ T6457] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 1339.902165][ T6457] usb 4-1: USB disconnect, device number 14 [ 1340.094108][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 1341.218746][T15480] lo speed is unknown, defaulting to 1000 [ 1341.346643][T15494] loop4: detected capacity change from 0 to 764 [ 1341.740562][T15494] Symlink component flag not implemented [ 1341.862713][T15494] Symlink component flag not implemented [ 1341.990988][T15494] Symlink component flag not implemented (129) [ 1342.119577][T15494] Symlink component flag not implemented (6) [ 1342.227958][T15494] rock: directory entry would overflow storage [ 1342.234627][T15494] rock: sig=0x4f50, size=4, remaining=3 [ 1342.240592][T15494] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1342.333559][T15502] loop0: detected capacity change from 0 to 256 [ 1342.460815][T15506] netlink: 'syz.4.2169': attribute type 39 has an invalid length. [ 1342.470830][T15506] veth0_macvtap: left promiscuous mode [ 1342.533639][T15502] FAT-fs (loop0): Directory bread(block 64) failed [ 1342.547282][T15502] FAT-fs (loop0): Directory bread(block 65) failed [ 1342.572335][T15502] FAT-fs (loop0): Directory bread(block 66) failed [ 1342.584040][T15502] FAT-fs (loop0): Directory bread(block 67) failed [ 1342.592482][T15502] FAT-fs (loop0): Directory bread(block 68) failed [ 1342.603362][T15502] FAT-fs (loop0): Directory bread(block 69) failed [ 1342.616328][T15502] FAT-fs (loop0): Directory bread(block 70) failed [ 1342.623654][T15502] FAT-fs (loop0): Directory bread(block 71) failed [ 1342.630996][T15502] FAT-fs (loop0): Directory bread(block 72) failed [ 1342.641060][T15502] FAT-fs (loop0): Directory bread(block 73) failed [ 1342.667540][T15502] vfat filesystem being mounted at /543/bus supports timestamps until 2107-12-31 (0x10391447e) [ 1344.834609][T15525] loop0: detected capacity change from 0 to 1024 [ 1345.727575][T15525] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=802c018, mo2=0002] [ 1345.767134][T15531] xt_connbytes: Forcing CT accounting to be enabled [ 1345.777292][T15525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1345.882805][T15525] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2178: bg 0: block 88: padding at end of block bitmap is not set [ 1346.087375][T15538] loop4: detected capacity change from 0 to 64 [ 1346.108065][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1346.127140][T15538] bfs filesystem being mounted at /402/file4 supports timestamps until 2106-02-07 (0xffffffff) [ 1346.939407][T15543] netlink: 'syz.0.2182': attribute type 39 has an invalid length. [ 1346.958424][T15545] ptrace attach of "./syz-executor exec"[15546] was attempted by "./syz-executor exec"[15545] [ 1347.028705][T15543] veth0_macvtap: left promiscuous mode [ 1347.299534][ T6457] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1347.454736][T15556] loop0: detected capacity change from 0 to 256 [ 1347.476596][T15556] exfat: Deprecated parameter 'utf8' [ 1347.494953][T15556] exfat: Deprecated parameter 'utf8' [ 1347.496708][ T6457] usb 3-1: Using ep0 maxpacket: 32 [ 1347.505213][T15556] exfat: Deprecated parameter 'utf8' [ 1347.528567][ T6457] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1347.561526][ T6457] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.564042][T15556] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 1347.582140][ T6457] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1347.604659][ T6457] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.607651][T15556] exfat filesystem being mounted at /549/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 1347.619575][ T6457] usb 3-1: Product: syz [ 1347.627979][ T6457] usb 3-1: Manufacturer: syz [ 1347.646391][ T6457] usb 3-1: SerialNumber: syz [ 1347.692262][T15548] loop4: detected capacity change from 0 to 32768 [ 1347.743993][T15552] loop3: detected capacity change from 0 to 32768 [ 1347.756663][T15548] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 1347.795707][T15548] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1347.803286][T15552] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1347.838788][T15562] exFAT-fs (loop0): error, exfat_zeroed_cluster: out of range(sect:184 len:8) [ 1347.850368][T15562] exFAT-fs (loop0): Filesystem has been set read-only [ 1347.890819][ T28] audit: type=1800 audit(3909835195.741:495): pid=15552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2186" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 1347.941861][T15552] [ 1347.944246][T15552] ====================================================== [ 1347.951281][T15552] WARNING: possible circular locking dependency detected [ 1347.957114][ T6457] usb 3-1: Not enough endpoints found in device, aborting! [ 1347.958303][T15552] syzkaller #0 Not tainted [ 1347.969962][T15552] ------------------------------------------------------ [ 1347.971000][T15548] XFS (loop4): Ending clean mount [ 1347.976979][T15552] syz.3.2186/15552 is trying to acquire lock: [ 1347.976995][T15552] ffff88805a6f5f58 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 1348.001844][T15552] [ 1348.001844][T15552] but task is already holding lock: [ 1348.009244][T15552] ffff88805a600660 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_dio_wr_get_block+0x8df/0x17a0 [ 1348.020512][T15552] [ 1348.020512][T15552] which lock already depends on the new lock. [ 1348.020512][T15552] [ 1348.031193][T15552] [ 1348.031193][T15552] the existing dependency chain (in reverse order) is: [ 1348.040430][T15552] [ 1348.040430][T15552] -> #5 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 1348.049379][T15552] down_write+0x97/0x1f0 [ 1348.054288][T15552] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 1348.060911][T15552] ocfs2_xattr_set+0x596/0x11f0 [ 1348.066315][T15552] ocfs2_set_acl+0x4e1/0x590 [ 1348.071473][T15552] ocfs2_iop_set_acl+0x1ab/0x2a0 [ 1348.076964][T15552] vfs_remove_acl+0x4e3/0x740 [ 1348.082375][T15552] path_removexattr+0x23b/0x3f0 [ 1348.087800][T15552] __x64_sys_removexattr+0x60/0x70 [ 1348.093637][T15552] do_syscall_64+0x55/0xb0 [ 1348.098702][T15552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1348.105221][T15552] [ 1348.105221][T15552] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 1348.113066][T15552] down_read+0x46/0x2e0 [ 1348.115891][T15548] XFS (loop4): Quotacheck needed: Please wait. [ 1348.117757][T15552] ocfs2_init_acl+0x2fa/0x720 [ 1348.117788][T15552] ocfs2_mknod+0x12e5/0x20f0 [ 1348.134266][T15552] ocfs2_create+0x196/0x410 [ 1348.137508][T15548] XFS (loop4): Quotacheck: Done. [ 1348.139379][T15552] path_openat+0x1277/0x3190 [ 1348.139407][T15552] do_filp_open+0x1c5/0x3d0 [ 1348.139428][T15552] do_sys_openat2+0x12c/0x1c0 [ 1348.139444][T15552] __x64_sys_open+0x11f/0x140 [ 1348.139461][T15552] do_syscall_64+0x55/0xb0 [ 1348.139481][T15552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1348.139499][T15552] [ 1348.139499][T15552] -> #3 (jbd2_handle){++++}-{0:0}: [ 1348.139527][T15552] start_this_handle+0x1e9d/0x20c0 [ 1348.139542][T15552] jbd2__journal_start+0x2bb/0x5b0 [ 1348.139557][T15552] jbd2_journal_start+0x2a/0x40 [ 1348.200391][T15552] ocfs2_start_trans+0x376/0x6c0 [ 1348.205985][T15552] ocfs2_modify_bh+0xe9/0x470 [ 1348.211480][T15552] ocfs2_local_read_info+0x13fd/0x1770 [ 1348.217526][T15552] dquot_load_quota_sb+0x757/0xb80 [ 1348.223201][T15552] dquot_load_quota_inode+0x2dc/0x5d0 [ 1348.229147][T15552] ocfs2_enable_quotas+0x1c7/0x440 [ 1348.234819][T15552] ocfs2_fill_super+0x3f6d/0x4d90 [ 1348.240390][T15552] mount_bdev+0x22b/0x2d0 [ 1348.245438][T15552] legacy_get_tree+0xea/0x180 [ 1348.250741][T15552] vfs_get_tree+0x8c/0x280 [ 1348.255712][T15552] do_new_mount+0x24b/0xa40 [ 1348.260759][T15552] __se_sys_mount+0x2da/0x3c0 [ 1348.265984][T15552] do_syscall_64+0x55/0xb0 [ 1348.271041][T15552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1348.274544][ T6457] usb 3-1: USB disconnect, device number 16 [ 1348.277465][T15552] [ 1348.277465][T15552] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1348.291894][T15552] down_read+0x46/0x2e0 [ 1348.296599][T15552] ocfs2_start_trans+0x36a/0x6c0 [ 1348.302086][T15552] ocfs2_modify_bh+0xe9/0x470 [ 1348.307276][T15552] ocfs2_local_read_info+0x13fd/0x1770 [ 1348.313254][T15552] dquot_load_quota_sb+0x757/0xb80 [ 1348.318875][T15552] dquot_load_quota_inode+0x2dc/0x5d0 [ 1348.324755][T15552] ocfs2_enable_quotas+0x1c7/0x440 [ 1348.330487][T15552] ocfs2_fill_super+0x3f6d/0x4d90 [ 1348.336039][T15552] mount_bdev+0x22b/0x2d0 [ 1348.340890][T15552] legacy_get_tree+0xea/0x180 [ 1348.346173][T15552] vfs_get_tree+0x8c/0x280 [ 1348.351202][T15552] do_new_mount+0x24b/0xa40 [ 1348.356231][T15552] __se_sys_mount+0x2da/0x3c0 [ 1348.361415][T15552] do_syscall_64+0x55/0xb0 [ 1348.366442][T15552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1348.372854][T15552] [ 1348.372854][T15552] -> #1 (sb_internal#5){.+.+}-{0:0}: [ 1348.380314][T15552] ocfs2_start_trans+0x26b/0x6c0 [ 1348.385773][T15552] ocfs2_mknod+0xe47/0x20f0 [ 1348.390800][T15552] ocfs2_create+0x196/0x410 [ 1348.396182][T15552] path_openat+0x1277/0x3190 [ 1348.401303][T15552] do_filp_open+0x1c5/0x3d0 [ 1348.406420][T15552] do_sys_openat2+0x12c/0x1c0 [ 1348.411636][T15552] __x64_sys_openat+0x139/0x160 [ 1348.417133][T15552] do_syscall_64+0x55/0xb0 [ 1348.422080][T15552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1348.428499][T15552] [ 1348.428499][T15552] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 1348.439551][T15552] __lock_acquire+0x2ddb/0x7c80 [ 1348.445553][T15552] lock_acquire+0x197/0x410 [ 1348.450593][T15552] down_write+0x97/0x1f0 [ 1348.455538][T15552] ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 1348.462308][T15552] ocfs2_reserve_clusters_with_limit+0x1bf/0xba0 [ 1348.469265][T15552] ocfs2_lock_allocators+0x2fb/0x5b0 [ 1348.475104][T15552] ocfs2_write_begin_nolock+0x225a/0x4190 [ 1348.481638][T15552] ocfs2_dio_wr_get_block+0xb71/0x17a0 [ 1348.487717][T15552] __blockdev_direct_IO+0x1679/0x3420 [ 1348.494063][T15552] ocfs2_direct_IO+0x240/0x2b0 [ 1348.499657][T15552] generic_file_direct_write+0x1d4/0x3e0 [ 1348.505823][T15552] __generic_file_write_iter+0x11b/0x230 [ 1348.512079][T15552] ocfs2_file_write_iter+0x1582/0x1d00 [ 1348.518167][T15552] do_iter_write+0x79a/0xc70 [ 1348.523410][T15552] do_pwritev+0x205/0x340 [ 1348.528465][T15552] do_syscall_64+0x55/0xb0 [ 1348.533447][T15552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1348.539948][T15552] [ 1348.539948][T15552] other info that might help us debug this: [ 1348.539948][T15552] [ 1348.550191][T15552] Chain exists of: [ 1348.550191][T15552] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 --> &oi->ip_xattr_sem --> &ocfs2_file_ip_alloc_sem_key [ 1348.550191][T15552] [ 1348.568064][T15552] Possible unsafe locking scenario: [ 1348.568064][T15552] [ 1348.575505][T15552] CPU0 CPU1 [ 1348.580854][T15552] ---- ---- [ 1348.586216][T15552] lock(&ocfs2_file_ip_alloc_sem_key); [ 1348.591873][T15552] lock(&oi->ip_xattr_sem); [ 1348.599175][T15552] lock(&ocfs2_file_ip_alloc_sem_key); [ 1348.607325][T15552] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 1348.614945][T15552] [ 1348.614945][T15552] *** DEADLOCK *** [ 1348.614945][T15552] [ 1348.623091][T15552] 3 locks held by syz.3.2186/15552: [ 1348.628389][T15552] #0: ffff88805af6e418 (sb_writers#39){.+.+}-{0:0}, at: do_pwritev+0x1f3/0x340 [ 1348.637838][T15552] #1: ffff88805a6009d8 (&sb->s_type->i_mutex_key#49){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x40b/0x1d00 [ 1348.649498][T15552] #2: ffff88805a600660 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_dio_wr_get_block+0x8df/0x17a0 [ 1348.660993][T15552] [ 1348.660993][T15552] stack backtrace: [ 1348.667549][T15552] CPU: 0 PID: 15552 Comm: syz.3.2186 Not tainted syzkaller #0 [ 1348.675222][T15552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1348.685490][T15552] Call Trace: [ 1348.688851][T15552] [ 1348.691786][T15552] dump_stack_lvl+0x16c/0x230 [ 1348.696462][T15552] ? load_image+0x3b0/0x3b0 [ 1348.701010][T15552] ? show_regs_print_info+0x20/0x20 [ 1348.706201][T15552] ? print_circular_bug+0x12b/0x1a0 [ 1348.711441][T15552] check_noncircular+0x2bd/0x3c0 [ 1348.716373][T15552] ? print_deadlock_bug+0x5d0/0x5d0 [ 1348.721583][T15552] ? lockdep_lock+0xe0/0x220 [ 1348.726205][T15552] ? _find_first_zero_bit+0xd3/0x100 [ 1348.731570][T15552] __lock_acquire+0x2ddb/0x7c80 [ 1348.736420][T15552] ? ocfs2_get_system_file_inode+0x1e3/0x7b0 [ 1348.742393][T15552] ? __lock_acquire+0x7c80/0x7c80 [ 1348.747423][T15552] ? verify_lock_unused+0x140/0x140 [ 1348.752751][T15552] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1348.758479][T15552] ? do_raw_spin_lock+0x121/0x2c0 [ 1348.764058][T15552] ? mutex_unlock+0x10/0x10 [ 1348.768573][T15552] lock_acquire+0x197/0x410 [ 1348.773147][T15552] ? ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 1348.779487][T15552] ? ocfs2_get_system_file_inode+0x1f1/0x7b0 [ 1348.785462][T15552] ? __might_sleep+0xe0/0xe0 [ 1348.790065][T15552] ? read_lock_is_recursive+0x20/0x20 [ 1348.795467][T15552] ? ocfs2_fast_symlink_read_folio+0x530/0x530 [ 1348.801650][T15552] ? lockdep_unlock+0x137/0x2d0 [ 1348.806535][T15552] ? lockdep_lock+0x220/0x220 [ 1348.811245][T15552] down_write+0x97/0x1f0 [ 1348.815524][T15552] ? ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 1348.821847][T15552] ? down_read_killable+0x340/0x340 [ 1348.827133][T15552] ? __lock_acquire+0x2b6b/0x7c80 [ 1348.832162][T15552] ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 1348.838406][T15552] ? stack_trace_save+0x9c/0xe0 [ 1348.843522][T15552] ? verify_lock_unused+0x140/0x140 [ 1348.848726][T15552] ? ocfs2_complete_local_alloc_recovery+0x540/0x540 [ 1348.855402][T15552] ? kasan_set_track+0x5f/0x70 [ 1348.860272][T15552] ? ocfs2_direct_IO+0x240/0x2b0 [ 1348.865244][T15552] ? generic_file_direct_write+0x1d4/0x3e0 [ 1348.871043][T15552] ? __generic_file_write_iter+0x11b/0x230 [ 1348.876841][T15552] ? ocfs2_file_write_iter+0x1582/0x1d00 [ 1348.882756][T15552] ? do_iter_write+0x79a/0xc70 [ 1348.887745][T15552] ? do_syscall_64+0x55/0xb0 [ 1348.892445][T15552] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1348.898522][T15552] ? ocfs2_alloc_should_use_local+0x13e/0x2d0 [ 1348.904770][T15552] ? __lock_acquire+0x7c80/0x7c80 [ 1348.909870][T15552] ? do_raw_spin_lock+0x121/0x2c0 [ 1348.914911][T15552] ? __rwlock_init+0x150/0x150 [ 1348.919764][T15552] ? do_raw_spin_unlock+0x121/0x230 [ 1348.925004][T15552] ? _raw_spin_unlock+0x28/0x40 [ 1348.930141][T15552] ? ocfs2_alloc_should_use_local+0x13e/0x2d0 [ 1348.936429][T15552] ? ocfs2_reserve_clusters_with_limit+0x16c/0xba0 [ 1348.943021][T15552] ocfs2_reserve_clusters_with_limit+0x1bf/0xba0 [ 1348.949351][T15552] ? __stack_depot_save+0x560/0x630 [ 1348.954540][T15552] ? ocfs2_reserve_clusters+0x30/0x30 [ 1348.959916][T15552] ? kasan_set_track+0x5f/0x70 [ 1348.964707][T15552] ? kasan_set_track+0x4e/0x70 [ 1348.969472][T15552] ? __kasan_kmalloc+0x8f/0xa0 [ 1348.974264][T15552] ? ocfs2_write_begin_nolock+0xe64/0x4190 [ 1348.980075][T15552] ? ocfs2_dio_wr_get_block+0xb71/0x17a0 [ 1348.985716][T15552] ? __blockdev_direct_IO+0x1679/0x3420 [ 1348.991370][T15552] ? ocfs2_direct_IO+0x240/0x2b0 [ 1348.996363][T15552] ? rcu_is_watching+0x15/0xb0 [ 1349.001130][T15552] ? ocfs2_num_free_extents+0x2e2/0x5a0 [ 1349.006673][T15552] ? ocfs2_validate_extent_block+0x550/0x550 [ 1349.012693][T15552] ocfs2_lock_allocators+0x2fb/0x5b0 [ 1349.018000][T15552] ? _ocfs2_clear_bit+0x40/0x40 [ 1349.022885][T15552] ? do_raw_spin_lock+0x121/0x2c0 [ 1349.027933][T15552] ? __rwlock_init+0x150/0x150 [ 1349.032718][T15552] ? ocfs2_write_begin_nolock+0xf3a/0x4190 [ 1349.038519][T15552] ocfs2_write_begin_nolock+0x225a/0x4190 [ 1349.044627][T15552] ? ocfs2_size_fits_inline_data+0x90/0x90 [ 1349.050431][T15552] ? ocfs2_zero_extend+0x228a/0x2620 [ 1349.056149][T15552] ? verify_lock_unused+0x140/0x140 [ 1349.061432][T15552] ? ocfs2_initialize_journal_triggers+0x540/0x540 [ 1349.068019][T15552] ? ocfs2_add_inode_data+0x120/0x120 [ 1349.073498][T15552] ? __might_sleep+0xe0/0xe0 [ 1349.078091][T15552] ? read_lock_is_recursive+0x20/0x20 [ 1349.083538][T15552] ? down_write+0x162/0x1f0 [ 1349.088149][T15552] ? down_read_killable+0x340/0x340 [ 1349.093374][T15552] ocfs2_dio_wr_get_block+0xb71/0x17a0 [ 1349.098840][T15552] ? ocfs2_lock_get_block+0x60/0x60 [ 1349.104885][T15552] ? lockdep_init_map_type+0xa1/0x880 [ 1349.111314][T15552] ? lockdep_softirqs_off+0x430/0x430 [ 1349.116967][T15552] ? slab_post_alloc_hook+0x8a/0x4d0 [ 1349.122435][T15552] ? pin_user_pages_fast+0x89/0xe0 [ 1349.128115][T15552] ? iov_iter_extract_pages+0x432/0x790 [ 1349.133702][T15552] ? ocfs2_lock_get_block+0x60/0x60 [ 1349.139399][T15552] __blockdev_direct_IO+0x1679/0x3420 [ 1349.145697][T15552] ? show_vfsstat+0x3a0/0x3a0 [ 1349.150540][T15552] ? ocfs2_lock_get_block+0x60/0x60 [ 1349.156360][T15552] ? filemap_write_and_wait_range+0x160/0x1f0 [ 1349.162877][T15552] ? lock_chain_count+0x20/0x20 [ 1349.168973][T15552] ? __rwlock_init+0x150/0x150 [ 1349.173858][T15552] ? ocfs2_lock_get_block+0x60/0x60 [ 1349.179817][T15552] ocfs2_direct_IO+0x240/0x2b0 [ 1349.184773][T15552] generic_file_direct_write+0x1d4/0x3e0 [ 1349.190528][T15552] __generic_file_write_iter+0x11b/0x230 [ 1349.196404][T15552] ? ocfs2_file_write_iter+0x1559/0x1d00 [ 1349.202066][T15552] ocfs2_file_write_iter+0x1582/0x1d00 [ 1349.207641][T15552] ? ocfs2_file_read_iter+0xa30/0xa30 [ 1349.213279][T15552] ? plist_add+0x3d8/0x490 [ 1349.217784][T15552] ? verify_lock_unused+0x140/0x140 [ 1349.223138][T15552] ? aa_path_link+0xdf0/0xdf0 [ 1349.227921][T15552] ? schedule+0xc7/0x170 [ 1349.232165][T15552] ? end_current_label_crit_section+0x149/0x170 [ 1349.238412][T15552] ? common_file_perm+0x198/0x1f0 [ 1349.243449][T15552] do_iter_write+0x79a/0xc70 [ 1349.248418][T15552] ? vfs_iter_write+0xa0/0xa0 [ 1349.253106][T15552] ? rcu_read_lock_any_held+0xb4/0x120 [ 1349.258573][T15552] do_pwritev+0x205/0x340 [ 1349.262959][T15552] ? do_preadv+0x330/0x330 [ 1349.267471][T15552] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1349.273718][T15552] ? lock_chain_count+0x20/0x20 [ 1349.278647][T15552] ? lockdep_hardirqs_on+0x98/0x150 [ 1349.284013][T15552] ? __x64_sys_pwritev2+0xbe/0x100 [ 1349.289143][T15552] do_syscall_64+0x55/0xb0 [ 1349.293584][T15552] ? clear_bhb_loop+0x40/0x90 [ 1349.298271][T15552] ? clear_bhb_loop+0x40/0x90 [ 1349.302962][T15552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1349.308951][T15552] RIP: 0033:0x7f3522f8f6c9 [ 1349.313361][T15552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1349.332972][T15552] RSP: 002b:00007f3523eb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1349.341827][T15552] RAX: ffffffffffffffda RBX: 00007f35231e5fa0 RCX: 00007f3522f8f6c9 [ 1349.350069][T15552] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 1349.358042][T15552] RBP: 00007f3523011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1349.366008][T15552] R10: 0000000000007800 R11: 0000000000000246 R12: 0000000000000000 [ 1349.374156][T15552] R13: 00007f35231e6038 R14: 00007f35231e5fa0 R15: 00007ffeaa1bb028 [ 1349.382127][T15552] [ 1349.390222][T15552] workqueue: Failed to create a rescuer kthread for wq "dio/loop3": -EINTR [ 1349.390283][T15552] (syz.3.2186,15552,0):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -12 [ 1349.403787][ T7804] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1349.456530][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 1349.476648][T15570] loop0: detected capacity change from 0 to 512 [ 1349.495621][T15570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1349.605253][T15570] fs-verity: sha256 using implementation "sha256-avx2" [ 1349.626747][T15570] EXT4-fs warning (device loop0): ext4_begin_enable_verity:135: inode #15: comm syz.0.2189: verity is only allowed on extent-based files [ 1349.662238][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.