last executing test programs: 14m56.39065639s ago: executing program 32 (id=6533): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a00)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfffff001, 0x7, 0x20000000, 0x8, 0x3856}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 12m52.408350062s ago: executing program 33 (id=7942): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000), 0x4) 12m31.051921235s ago: executing program 34 (id=8102): syz_mount_image$udf(&(0x7f0000000e00), &(0x7f0000000180)='./file0\x00', 0x400007, &(0x7f0000000ec0)={[{@volume={'volume', 0x3d, 0x3f}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@session}, {@uid_forget}, {@undelete}, {}, {@longad}, {@uid_forget}, {@utf8}]}, 0x1, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1e4047c, &(0x7f0000000ec0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) 6m57.576701569s ago: executing program 35 (id=12070): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00') read$FUSE(r0, &(0x7f0000006280)={0x2020}, 0x2020) 6m52.910714659s ago: executing program 5 (id=12122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000206050000000000000000000000000a05000400000000000900020073797a30000000000c00078008000600000000d2050005000000000005000100060000000d000300686173683a6d6163"], 0x54}}, 0x0) 6m52.571264261s ago: executing program 5 (id=12125): r0 = socket(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x0, 0x8, 0x1000}, 0xc) 6m52.201406302s ago: executing program 5 (id=12128): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e40)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x8a}, 0x0, 0x6c}, @in6=@remote, {}, {0x0, 0x0, 0x0, 0x800000000000}, {0x0, 0x5}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8}, @mark={0xc, 0x15, {0x350759, 0x5}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x430}]}, 0x154}}, 0x40000) 6m51.984022802s ago: executing program 5 (id=12130): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000001440)=ANY=[@ANYBLOB="6b6565705f6c6173745f646f74732c666d61736b3d30303030303030303030303030303030303030323030302c757466382c646973636172642c696f636861727365743d6d616363656e746575726f2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303337372c696f636861727365743d63703836392c7379735f747a2c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c004eb7f9ddec9706e8cdb812909b2723bf8675ebf5671d89381632dc04741d8a9d61d44a6e090bc6145942d59a2f9e716caaebf9a0198a7648d9a9a87ed6cf815e3831a93b8632bf5177fbc3cf5c5fdd15723c5c6e10d6f3c721431edf7b2516321ee7aec74e49a06aca8bae8dd1da6427b325068bd232e6912a9ac6352a77187e1c632f0cbc1d945376954dd77d9ec9b389f5296933d86609363e0ec924ea91b49497c322bb8b61ffbe8d626b08"], 0x1, 0x151b, &(0x7f0000002280)="$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") mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) 6m51.184777091s ago: executing program 5 (id=12135): socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'syz_tun\x00', &(0x7f0000000380)=@ethtool_coalesce={0x1, 0x7, 0x80000000, 0x4, 0xad, 0x4, 0x0, 0x63de62a9, 0x10000, 0xfffffffb, 0x101, 0x5, 0x7, 0x5167, 0x0, 0x7, 0x5, 0xfffffff7, 0x3, 0xb, 0x80000000, 0x6, 0xa23}}) 6m47.695201795s ago: executing program 5 (id=12157): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000180)=[0x16, 0x9, 0xf909, 0x899d, 0x80, 0x98a, 0x7, 0x1010, 0xfffffe01, 0x1, 0x4, 0x2, 0x6, 0x4, 0x0], 0x1, 0x4000007}) 6m47.085521884s ago: executing program 36 (id=12157): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000180)=[0x16, 0x9, 0xf909, 0x899d, 0x80, 0x98a, 0x7, 0x1010, 0xfffffe01, 0x1, 0x4, 0x2, 0x6, 0x4, 0x0], 0x1, 0x4000007}) 3m44.355203952s ago: executing program 7 (id=14517): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0x1b, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, 0xffffffffffffffff, 0xb}}, 0x48) 3m44.10864763s ago: executing program 7 (id=14522): syz_mount_image$exfat(&(0x7f0000000240), &(0x7f0000000040)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x150f, &(0x7f0000000e80)="$eJzs3Au0TlX3MPA511qbQy5Pkvuea26e5LJIklCSXJIkCck9IUmSJEkccktCEnI9Se4h93TScb9fck86eSVJEhIS1jeO9Hl737fRe/t/+v5n/sbY46x59p7zmfvM8Zxn7z3GOd92GVqtYfXK9ZgZ/h361wX+8iURABIAYAAAZAeAAADK5CiTI21/Jo2J/9aLiP8h9adf7Q7E1STzT99k/umbzD99k/mnbzL/9E3mn77J/NM3mb8Q6drMvNfKln43ef7//zn1nyTL53+6gL+3Q+b/v43+l46W+advMv/0Teafvsn8058rt2DBVe1DXH3y/k/fZP5CpGv/9WfK689e7Wfasv0LmxBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEII8f/AWX+FAYBf11e7LyGEEEIIIYQQQvz3+PevdgdCCCGEEEIIIYT4n4egQIOBADJARkiATJAZroEskBWyQXaIwbWQA66DnHA95ILckAfyQj7IDwUgBAILDBEUhEIQhxugMNwIRaAoFIPi4KAElISboBTcDKXhFigDt0JZuA3KQflLr5nmTqgEd0FluBuqQFWoBtXhHqgB90JNuA9qwf1QGx6AOvAg1IWHoB7UhwbwMDSER6ARNIYm0BSaQXNo8Qf5Sdn/Uf6L0B1egh7QExKhF/SGl6EP9IV+0B8GwCswEF6FQfAaDIYhMBReh2HwBgyHN2EEjIRR8BaMhjEwFsbBeJgASfA2TIR3YBK8+0hWmAJTYRpMhxkwE96DWTAb5sD7MBfmwXxIyrQQFsFi+ACWwIeQDB/BUvgYUmAZLIcVsBJWwWpYA2thHayHDbARNsFm2AJb4RPYBtthB+yEXbAb9sCnsBc+g33wOaTiF/9i/pnf5kNXBARUqNCgwQyYARMwATNjZsyCWTAbZsMYxjAH5sCcmBNzYS7Mg3kwEfNhASyAhISMjAWxIMYxjoWxMBbBIlgMi6FDhyWxJJbCC9770lgGy2BZLIvlsDyWx9vxdqyIFbESVsLKWBmrYBWshtXwHrwH78WaWBNrYS2sjbWxDtbBulgX62E9bIANsCE2xEbYCJtgE2yGzbAFtsCW2BJbYStsg22wLbbFdtgO22N77IAdsCN2xE7YCTtjZ+yCXbArvoAv4Iv4Ir6EL2FPrKJ6YW/sjX2wD/bD/tgfX8GB+Cq+iq/hYByCQ/F1fB3fwOF4GkfgSByFo7CiGoNjcRyymoBJmIQZYSJOwkk4GafgFJyG03EGzsSZOAtn42x8H+fiPJyHC3ABLsLFuBiX4IeYjMm4FM9gCi7D5bgCV+IqXIlrcC2uwfW4AdfjJtyEW3ALfoKf4HbcjjtxJ+7G3fgpfoqf4Wc4GFMxFffjfjyAB/AgHsRDeAgP42E8gkfwKB7FY3gMj+MJPIkn8BSewtN4Bs8CwDk8h+fxPF7Ei2lvfpXGKKMyqAwqQSWozCqzyqKyqGwqm4qpmMqhcqicKqfKpXKpPCqPyqfyqQKqgCJFilWkCqqCKq7iqrAqrIqoIqqYKqaccqqkKqlKqVKqtCqtyqhbVVl1myqnyqvW7nZ1u6qo2rhK6i5VWVVWVVRVVU1VV9VVDVVD1VQ1VS1VS9VWtVUd9aCqq3phP6yv0ibTUA3BRmooNlFNVTPVXL2Bj6qWaji2Uq1VG/W4GokjsJ1q6dqrp1QHNRY7qmfUOHxWdVYTsIt6XnVVL6hu6kXVXbVyPVRPNRl7qd5qGvZRfVU/1V/NwqoqbWLV1GvqxYxD1FD1ulqEb6jh6k01Qo1Uo9RbarQao8aqcWq8mqCS1NtqonpHTVLvqslqipqqpqnpaoaaqd5Ts9RsNUe9r+aqeRrUArVQLVKL1QdqifpQJauP1FL1sUpRy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pcpaov1H71F3VAfakOqq/UIfW1Oqy+UUfUt+qo+k4dU9+r4+qEOql+UKfUj+q0OqPOqp/UOfWzOq8uqIvKK9Coldba6EBn0Bl1gs6kM+trdBadVWfT2XVMX6tz6Ot0Tn29zqVz6zwmr86n8+sCOtSkrWYd6YK6kI7rG3RhfaMuoovqYrq4drqELqlv0qX0zbq0vkWX0bfqsvo2XU6X1xU86Dt0RX2nrqTv0pX13bqKrqqr6er6Hl1D36tr6vt0LX2/rq0f0HX0g7qufkjX0/V1A/2wbqgf0Y10Y91EN9XNdHPdQj+qW+rHdCvdWrfRj+u2+gndTj+p2+undAf9tO6on9Gd9LO6s35Od9HP6676Bd1NX9AXtdc9dE+dqHvp3vpl3Uf31f10fz1Av6IH6lf1IP2aHqyH6KH6dT1Mv6GH6zf1CD1Sj9Jv6dF6jB6rx+nxeoJO0m/rifodPUm/qyfrKXqqnqan6xm63+VKc/6J/Hf+Qf6gS6++RW/Vn+hterveoXfqXXq33qP36L16r96n9+lUnar36/36gD6gD+qD+pA+pA/rw/qIPqKP6qP6mD6mj+sT+if9gz6lf9Sn9Rl9Rv+kz+lz+vzlnwEYNMpoY0xgMpiMJsFkMpnNNSaLyWqymewmZq41Ocx1Jqe53uQyuU0ek9fkM/lNARMaMtawiUxBU8jEzQ2msLnRFDFFTTFT3DhTwpQ0N/3H+X/UXwvTwrQ0LU0r08q0MW1MW9PWtDPtTHvT3nQwHUxH09F0Mp1MZ9PZdDFdTFfT1XQz3Ux30930MD1Mokk0vc3Lpo/pa/qZ/maAecUMNAPNIDPIDDaDzVAz1Awzw8xwM9yMMCPMKDPKjDajzVgz1ow3402Sz24mmolmkplkJpvJZuqA7Ga6mW5mmplmlpll5pg5Zq6Za+ab+WahWWgWm8VmiVlikk2yWWqWmhSzzCwzK8wKs8qsMmvMGrPOrDMbzAazyWwyKWar2Wq2mW1mh9lhdpldZo/ZY/aavWaf2WdSTarZb/abA+aAOWgOmkPmkDlsDpsj5og5ao6aY+aYOW6Om5PmpDllTpnT5rQ5a86ac+acOW/Om4vmYtplX6ACFZjABBmCDEFCkBBkDjIHWYIsQbYgWxALYkGOIEeQM7g+yBXkDvIEeYN8Qf6gQBAGFNiAgygoGBQK4sENQeHgxqBIUDQoFhQPXFAiKBncFJQKbg5KB7cEZYJbg7LBbUG5oHxQIbg9uCOoGNwZVAruCioHdwdVgqpBtaB6cE9QI7g3qBncF9QK7g9qBw8EdYIHg7rBQ0G9oH7QIHg4aBg8EjQKGgdNgqZBs6B50OK/Wt/707kfcz3CnmFi2CvsHb4c9gn7hv3C/uGA8JVwYPhqOCh8LRwcDgmHhq+Hw8I3wuHhm+GIcGQ4KnwrHB2OCceG48Lx4YQwKXw7nBi+E04K3w0nh1PCqcG0cHo4I5wZvhfOCmeHc8L3w7nhvHB+uCBcGC4K8ZdLYkgOPwqXhh+HKeGycHm4IlwZrgpXh2vCteG6cH24IdwYbioz8JdDw23h9nBHuDPcFe4O94SfhnvDz8J94edhavhFuD/8S3gg/DI8GH4VHgq/Dg+H34RHwm/Do+F34bHw+/B4eCI8Gf4Qngp/DE+HZ8Kz4U/hufDn8Hx4IbwY+rSL+7SPdzJkKANloARKoMyUmbJQFspG2ShGMcpBOSgn5aRclIvyUB7KR/moQMYClIaJqSAVpDjFqTAVpiJUhIpRMXLkqCSVpFJUikpTaSpDZagslaVyVI4qUAW6g+6gO+lOuovuorvpbqpKVak6VacaVINqUk2qRbWoNtWmOlSH6lJdqkf1qAE1oIbUkBpRI2pCTagZNaMW1IJaUktqRa2oDbWhttSW2lE7ak/tqQN1oI7UkTpRJ+pMnakLdaGu1JW6UTfqTt2pB/WgREqk3tSb+lAf6kf9aAANoIE0kAbRIBpMg2koDaVhNIyG03AaQSNpFL1Fo2kMjaVxNJ4mUBIl0USaSJNoEk2myTSVptJ0mk4zaSbNolk0h+bQXJpL82k+LaSFtJgW0xJaQsmUTEtpKaVQCi2n5bSSVtJqWk1raS2tp/W0kTbSZtpMW2krbaNttIN20C7aRXtoD+2lvbSP9lEqpdJ+2k8H6AAdpIN0iA7RYTpMR+gIHaWjdIyO0XE6TifpJJ2iU3SaTtNZOkvn6Gc6TxfoInlKsJlsZnuNzWKz2mw2u/3bOI/Na/PZ/LaADW0um/s3MVlri9iitpgtbp0tYUvam/4uLmfL2wr2dnuHrWjvtJVsOZsJ/jquYe+1Ne19tpa931a39/wmrm0fsHXsI7aubWzr2aa2gW1uG9pHbCPb2DaxTW0z29y2tU/YdvZJ294+ldDBPv3XsU2Ll9gP7Vq7zq63G+xe+5k9a3+yR+y39pz92fawPe0A+4odaF+1g+xrdrAd8tsYwI6yb9nRdowda8fZ8XbC38VT7TQ73c6wM+17dpad/XfxYvuBnWuT7Xy7wC60iy7FaT0l24/sUvuxTbHL7HK7wq60q+xqu+b/9rrCbrKb7Ra7x35qt9ntdofdaXfZ3ZfitPPYZz+3qfYLe9h+Yw/YL+1Be9Qesl9fitPO76j9zh6z39vj9kQvsD/YU/ZHe9qeuXT+aef+g71gL1pvgZEVazYccAbOyAmciTPzNZyFs3I2zs4xvpZz8HWck6/nXJyb83Bezsf5uQCHTGyZOeKCXIjjfAMX5hu5CBflYlycHZfgknwTl+KbuTTfwmX4Vi7Lt3E5Ls8V+Ha+gyvynVyJ7+LKfDdX4apcjavzPVyD7+WafB/X4vu5Nj/AdfhBrssPcT2uzw34YW7Ij3AjbsxNuCk34+bcgh/llvwYt+LW3IYf57b8BLfjJ7k9P8Ud+GnuyM9wJ36WO/Nz3IWf5678AnfjF7k7v8Q9uCcnci/uzS9zH+7L/bg/D+BXeCC/yoP4NR7MQ3gov87D+A0ezm/yCB7Jo/gtHs1jeCyP4/E8gZP4bZ7I7/Akfpcn8xSeytN4Os/gmfwez+LZPIff57k8j+fzAl7Ii3gxf8BL+ENO5o94KX/MKbyMl/MKXsmreDWv4bW8jtfzBt7Im3gzb+Gt/Alv4+28g3fyLt7Ne/hT3suf8T7+nFP5C97Pf+ED/CUf5K/4EH/Nh/kbPsLf8lH+jo/x93ycT/BJ/oFP8Y98ms/wWf6Jz/HPfJ4v8EX2DBFGKtKRiYIoQ5QxSogyRZmja6IsUdYoW5Q9ikXXRjmi66Kc0fVRrih3lCfKG+WL8kcFojCiyEYcRVHBqFAUj26ICkc3RkWiolGxqHjkohJRyeimqFR0c1Q6uiUqE90alY1ui8pF5aMK0e3RHVHF6M6oUnRXVDm6O6oSVY2qRdWje6Ia0b1Rzei+qFZ0f1Q6eiCqEz0Y1Y0eiupF9aMG0cNRw+iRqFHUOGoSNY2aRc2jFtGjUcvosahV1DpqEz0etY2eiNpFT0bto6eiDtHTV/YXDX75NP2b/YlRr0hffkJ2n14YXxRfHP8gviT+YTw5/lF8afzjeEp8WXx5fEV8ZXxVfHV8TXxtfF18fXxDfGN8U3xzfEvc++oZwWHajTAYF7gMLqNLcJlcZneNy+Kyumwuu4u5a10Od53L6a53uVxul8fldflcflfAhY6cdewiV9AVcnF3gyvsbnRFXFFXzBV3zpVwJV1z18K1cC3dY66Va+3auMfd4+4J94R7MuFy466je8Z1cs+6zu4595x73nV1L7hu7kXX3b3kerieLtElut6ut+vj+rh+rp8b4Aa4gW6gG+QGucFusBvqhrphbpgb7oa7EW6EG+VGudFutBvrxrrxbrxLckluopvoJrlJbrKb7Ka6qW66m+5muplulpvl5rg5bq6b6+a7+W6hW+gWu8VuiVvikl2yW+qWuhSX4pa75W6lW+lWu9VurVvr1rv1bqPb6Da7zW6r2+q2uW1uh9vhdrldbo/b4/a6vW6f2+dSXarb7/a7A+6AO+i+cofc1+6w+8Ydcd+6o+47d8x97467E+6k8/qU+9GddmfcWfeTO+d+dufdBXfReZcUezs2MfZObFLs3djk2JTY1Ni02PTYjNjM2HuxWbHZsTmx92NzY/Ni82MLYgtji2KLYx/ElsQ+jCXHPootjX0cS4ktiy2PrYitjK2KeZ9/W+QL+kI+7m/whf2Nvogv6ov54t75Er6kv8mX8jf70v4WX8bf6sv623w5X95X8I19E9/UN/PNfQv/qG/pH/OtfGvfxj/u2/onfDv/pG/vn/Id/NO+o3/Gd/LP+s7+Od/FPz/v8pR9d/+S7+F7+kTfy/f2L/s+vq/v5/v7Af4VP9C/6gf51/xgP8QP9a/7Yf4NP9y/6Uf4kX6Uf8uP9mP8WD/Oj/cTfJJ/20/07/hJ/l0/2U/xU/00P93P8DP9e36Wn+3n+Pf9XD/Pz/cL/EK/yC/2H/gl/kOf7D/yS/3HPsUv88v9Cr/Sr/Kr/Rq/1q/z6/0Gv9Fv8pv9Fr/Vf+K3+e1+h9/pd/ndfo//1O/1n/l9/nOf6r/w+/1f/AH/pT/ov/KH/Nf+sP/GH/Hf+qP+O3/Mf++P+xP+pP/Bn/I/+tP+jD/rf/Ln/M/+vL/gL8rfrAkhhBBC/FP0H+zv9Q++py5vaXoDQNbteQ/9bc2NuX5Z91V7O8QA4KmeXepf3jJA/cTExMvHpmgICi0AgNiV/AxwJV4GbeAJaA+todQ/7K+vqnDpuu+v6tev/zf147cCZAbI9GtO2u3Rr/GV+jf/Tv3GH/Dv1l8GKRohvgCgSKErOWmFf42v1C/9O/V3t/39+pf6z/RlEkCrv8rJAlfiK/VLwmPwNLT/zZFCCCGEEEIIIcQv+qpzXf/g/vPS/Xk+89u8X+M/uj//A5X+0/6FEEIIIYQQQgjxx559oduTj7Zv37rT/+ZFxj9HG3+CBQLAn6ANWfz5F1f7N5MQQgghhBDiv+3KRf/V7kQIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhEi//v3/EKb+6YOv9jkKIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQV9v/CQAA///tMlSc") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) 3m43.72189914s ago: executing program 7 (id=14527): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffbffffffff, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) 3m43.425362493s ago: executing program 7 (id=14531): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000001600)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}, {@userxattr}], [], 0x2c}) 3m42.852148251s ago: executing program 7 (id=14538): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000002ec0)={0x1, @win={{0x5683a662, 0x6b, 0x47425247, 0x400040}, 0x8, 0x2, 0x0, 0x7, 0x0, 0xe}}) 3m41.313161164s ago: executing program 7 (id=14553): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0xe000}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 3m40.643897623s ago: executing program 37 (id=14553): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0xe000}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 3m35.264792989s ago: executing program 4 (id=14601): r0 = syz_io_uring_setup(0x1da9, &(0x7f0000005b80)={0x0, 0xe874, 0x40, 0x2000000, 0x2d4}, &(0x7f0000000140), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0, 0x0, 0x1002}]}, 0x1}, 0x1) 3m35.069451235s ago: executing program 4 (id=14603): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006030f07059acb"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000002440)={0x14, 0x0, &(0x7f0000002380)={0x0, 0x3, 0x11, @string={0x11, 0x3, "323889f5817e4c65cef628e9d905d6"}}}, 0x0) 3m32.89864733s ago: executing program 4 (id=14630): r0 = memfd_create(&(0x7f0000000000)='F\x1d\x1ax&|\x16\xee@c\xb0[\xdb\x90:\xdd\x8c\x11\xd5{\x1d\xbcF\xcf;\x1f\xd9\xd4\x8c\x84\'\xac\x86\x91&<\xd0\x1e5\x85>&sV', 0xa) fchown(r0, 0x0, 0xffffffffffffffff) 3m32.647162535s ago: executing program 4 (id=14633): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000500)={0x0, 0x0, 0x8, 0x0, 0x1}) 3m32.281940494s ago: executing program 4 (id=14637): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x2) 3m32.113451637s ago: executing program 4 (id=14638): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) 3m17.632636156s ago: executing program 38 (id=14638): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) 1m58.821579207s ago: executing program 8 (id=15591): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, 0x0) 1m58.485576963s ago: executing program 8 (id=15596): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000002b00)={0x2, 0x15, 0x0, 0x0, 0x2}, 0x10}}, 0x40046) 1m58.193523923s ago: executing program 8 (id=15599): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) rt_sigsuspend(0x0, 0x0) 1m57.817363183s ago: executing program 8 (id=15605): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x3, 0x1510, &(0x7f0000003640)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOInA9xMENkBduhHyQHwpAQYiHQlAYNBiwQBBCESgKUbgJisHNUBxKQEkoBQ5KQwLcAmXgVigLt0E5uB3Kwx1QASpCJagMd0IVuAuqwt1QDe6B6lADakItuBdqw31QB+6HuvAA1IMHoT48BA3gYWgIj0AjeBQaw2PQBB6HptAMmkMLaPnfyn8JesDL0BN6QRL0hj7wCvSFftAfBsBAeBUGwWswGF6HZBgCQ+ENGAZvwnB4C0bASBgFb8NoeAfGwFgYB+MhBSbARHgXJsF7MBmmwFSYBqkwHWbA+zATZsFs+ADmwIcwF+bBfFgAafARLIRFkA4fw2L4BDJgCSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBbvhU9gDn8Fe+Bz2wRf/Yv6Zf8jvioCAAgUqVBiDMRiLsZgLc2FuzI15MA9GMIJxGId5MS/mw3xYAAtgPMZjYSyMBg0SEhbBIhjFKBbDYlgci2NJLIkOHSZgApbBW7EslsVyWA7LY3msgBWxIlbGylgFq2BVrIrVsBpWx+pYE2vivXgv9sY6WAfrYl2sh/Uu357ChtgQG2EjbIyNsQk2wabYFJtjc2yJLbEVtsLW2BrbYltsh+2wPbbHREzEDtgBO2JH7ISdsDN2xi7YBbtiN+yGL+UAfBlfxl5YXfTGPtgH+2Jyjv44AAfgqzgIX8PX8HVMxiE4FN/AN/BNHI6ncQSOxFE4CquId3AMjkUS4zEFU3AiTsRJOAkn4xScgtMwFafjDJyBM3EWzsIPcA5+iB/iPJyHCzAN03AhLsJ0TMfFeAYzcAkuxWW4HFfgclyFq3EVrsV1uBY34AbchJtwC27BbbgNd+AO3IUKAD/Fz/AzTMZ9uA/34348gAfwIB7ETMzEQ3gID+NhPIJH8CgexWN4HE/gcTyFp/A0nsGzeBbP43m8gC/Ef9NoV4k1ySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFMVFMFBfFRUlRUjjhRIJIEGVEGVFWlBXlxO2ivLhDVBAVRRtXWVQWVURbV1XcLaqJaqK6qCFqilqilqgtaos6oo6oK+qKeqKeqC8eEg1Eb+yPj4isyjQWQ7CJGIpNRTMhL32DtRLDsbVoI9qKp8RIHIHtRSuXKJ4VHcQY7Cj+Jsbi86KzGI9dxIuiq+gmuouXRA/R2vUUvcRk7C36iGnYV/QT/cUAMRNriA9wTs6a4nWRLIaIoeINsQDfFMPFW2KEGClGibfFaPGOGCPGinFivEgRE8RE8a6YJN4Tk8UUMVVME6liupgh3hczxSwxW3wg5ogPxVwxT8wXC0Sa+EgsFItEuvhYLBafiAyxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFD7BS7xG7xqdgjPhN7xedin/hC7BdfigPiK3FQfC0yxTfikPhWHBbfiSPie3FU/CCOiePihDgpTokfxWlxRpwV58R58ZO4IH4WF4UXIFEKKaWSgYyROWSszClzyWtkbhlcenWvl3HyBplX3ijzyfyygCwo42UhWVhqaaSVJENZRBaVUXmTLCZvlsVlCVlSlpJOlpYJ8hZZRt4qy8rbZDl5uywv75AVZEVZSVaWd8oq8i4JkV+PUV3WkDVlLXmvrC3vk3Xk/bKufEDWkw/K+vIh2UA+LBvKR2Qj+ahsLB+TTeTjsqlsJpvLFrKlfEK2kk/K1rKNbCufku3k07K9fEYmymdlB+kvvUWel53lC7KLfFF2ld1kd/mzvCi97Cl7SYDeso98RfaV/WR/OUAOlK/KQfI1OVi+LpPlEDlUviGHyTflcPmWHCFHylHybTlaviPHyLFynBwvU+QEOVG+KyfJ9+RkOUVOldNkqpwu+18aabaU/zT/3T/IH/zL0TfJzXKL3Cq3ye1yh9wpd8ndcrfcI/fIvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxRnpZn5Bl5Tp6X5+WFS68BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqouomvPSGUSVVKeVUaZWgbvlX8lUxdbMqrkr8Jv/y/JL+ZH4tVUvVSrVSrVVr1Va1Ve1UO9VetVeJKlF1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VZJKUn3UK6qv6qf6qwFqoHpVDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUKfUKXVanVZn1Vl1Xp1XF9QFdVFdzFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuFT0a3BQUC24OigclgpJBqcAFpYOE4JagTHBrUDa4LSgX3B6UD+4IKgQVg0pB5eDOoEpwV1A1uDuoFtwTVA9qBDWDWsG9Qe3gvqBOcH9QN3ggqBc8GNQPHgoaBA8HDYNHgkbBo0Hj4LGgSfB40DRoFjQPWgQt/9LxvT+d/0nXU/fSSbq37qNf0X11P91fD9AD9at6kH5ND9av62Q9RA/Vb+hh+k09XL+lR+iRepR+W4/W7+gxeqwep8frFD1BT9Tv6kn6PT1ZT9FT9TSdqqfrGfp9PVPP0rP1B3qO/lDP1fP0fL1Ap+mP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/qPfozvVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/ok/qU/lGf1mf0WX1On9c/6Qv6Z31R+6zFfdbPu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDPFTHFT3JQ0JY0zziSYBFPGlDFlTVlTzpQz5U15U8FUMJVMJXOnudPcZe4yd5u7zT3mHlPD1DC1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj09g0Nk1ME9PUNDXNTXPT0rQ0rUwr09q0Nm1NW9POtDPtTXuTaBJNB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySZJNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap5x4wxY804M96kmBQz0Uw0k8wkM9lMNlPNVJNqUs0MM8PMNDPNbDPbzDFzzFwz18w3802aSTMLzUKTbtLNYrPYZJgMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTSZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm/yXfi+9ibU5bS57jc1tr7V57HX2H+MCtqCNt4VsYattPpv/N7Gx1ha3JWxJW8o6W9om2Ft+F1ewFW0lW9neaavYu2zV38W17X22jr3f1rUP2Fr23t/E9eyDtr59zDZABLDNbCPbwja2j9km9nHb1DazzW0L284+bdvbZ2yifdZ2sM/9Ll5oF9nVdo1da9fZPfYze9aes4ftd/a8/cn2tL3sQPuqHWRfs4Pt6zbZDvldPMq+bUfbd+wYO9aOs+N/F0+102yqnW5n2PftTDvrd3Ga/cjOsel2rp1n59sFv8RZc0q3H9vF9hObYZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+6ndarfZ7XaH3Wl3/RJnncde+7ndZ7+wh+y39oD9yh60R2ym/eaXOOv8jtjv7VH7gz1mj9sT9qQ9ZX+0p+2ZX84/69xP2p/tRestEBKQJEUBxVAOiqWclIuuodx0LeWh6yhC11Mc3UB56UbKR/mpABWkeCpEhUmTIUtEIRWhohSlm+jyOr0klSJHpSmBbqEydCuVpduoHN1O5ekOqkAVqRJVpjupCt1FVeluqkb3UHWqQTWpFt1Ltek+qkP3U116gOrRg1SfHqIG9DA1pEeoET1KjekxakKPU1NqRs2pBbWkJ6gVPUmtqQ21paeoHT1N7ekZSqRnqQM9Rx3pb9SJnqfO9AJ1oRepK3Wj7vQS9aCXqSf1oiTqTX3oFepL/ag/DaCB9CoNotdoML1OyTSEhtIbNIzepOH0Fo2gkTSK3qbR9A6NobE0jsZTCk2gifQuTaL3aDJNoak0jVJpOs2g92kmzaLZ9AHNoQ9pLs2j+bSA0ugjWkiLKJ0+psX0CWXQElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoJ20i3bTp7SHPqO99Dntoy9oP31JB+grOkhfUyZ9Q4foWzpM39ER+t73oh/oGB2nE3SSTtGPdJrO0Fk6R+fpJ7pAP9NF8gQhhiKUoQqDMCbMEcaGOcNc4TVh7vDaME94XRgJrw/jwhvCvOGNYb4wf1ggLBjGh4XCwqEOTWhDCsOwSFg0jIY3hcXCm8PiYYmwZFgqdGHpMCG8JSwT3hqWDW8Ly4W3h+XDO8IKYcXwsQcqh3eGVcK7wqrh3WG18J6welgjrBnWCu8Na4f3hXXC+8O64QNh2fDBsH74UNggfDhsGD4SNgofDRuHj4VNwsfDpmGzsHnYImwZPhG2Cp8MW4dtwrbhU2G78OmwffhMmBg+G3YIn/ul/8FFf96fFPYO+4SvhK+E3t8v50cXRNOiH0UXRhdF06MfRxdHP4lmRJdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vlQMcOuGkUy5wMS6Hi3U5XS53jcvtrnV53HUu4q53ce4Gl9fd6PK5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd5Mr5m52xV0JV9KVcs6VdgmuhWvpWrpW7knX2rVxbd1T7in3tHvaPeOecc+6Du4519H9zXVyz7vO7gX3gnvRdXXdXHf3kuvhJuT59TOZ5Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJdshvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLcSluopvoJrlJbrKb7Ka6qS7VpboZboab6Wa6KrN+PcpcN9fNd/NdmktzC13WmjHdLXaLXYbLcEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8db8O6va5/W6/O+AOuIPua5fpvnGH3LfusPvOHXHfu6PuB3fMHXcn3El3yv3oTrsz7qw75867n9wF97O76LxLiUyITIy8G5kUeS8yOTIlMjUyLZIamR6ZEXk/MjMyKzI78kFkTuTDyNzIvMj8yIJIWuSjyMLIokh65OPI4sgnkYzIksjSyLLI8siKiPeFtoa+iC/qo/4mX8zf7Iv7Er6kL+WdL+0T/C2+jL/Vl/W3+XL+dl/e3+Er+Iq+kn/cN/XNfHPfwrf0T/hW/knf2rfxbf1Tvp1/2rf3z/hE/6zv4J/zHf3ffCf/vO/sX/Bd/Iu+q+/mu/uXfA//su/pe/kk39v38a/4vr6f7+8H+IH+VT/Iv+YH+9d9sh/ih/o3/DD/ph/u3/Ij/Eg/KuZtP/ryJTKM9yl+gp/o3/WT/Ht+sp/ip/ppPtVP9zP8+36mn+Vn+w/8HP+hn+vn+fl+gU/zH/mFfpFP9x/7xf4Tn+GXXL6p7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//U7/Gf+b3+c7/Pf+H3+y/9Af+VP+i/9pn+G3/If+sP++/8Ef+9P+p/8Mf8cX/Cn/Sn/I/+tD/jz/pz/rz/yV/wP/uL/G/WGGOMMcb+SyZcaYo/6u/9B8+Jv9u5DwBcu61g5t/3Z60o1+f7td1PxLeLAMCzvbo8cnmrXj0pKenSvhkSgqLzAC7/SVCWGLgSL4G28DQkQhso84fz7ye6nad/Mn70doBcf5cTC1fiK+N/+SfjP/HUqIXlw7Nx/4/x5wEUL3olJydciZdAW5X12AbK/sn4+Vv9k/nn/CoFoPXf5eSGK/GV+SfAk/AcJP5mT8YYY4wxxhhj7Ff9RKVOl68/L/+Nzz+6Po9XV3JywJX4n12fM8YYY4wxxhhj7Op7vlv3Z55ITGzT6V9vVP1vZXHjf2rDe4DLzygA+DcHBPiPn8WW/8ixki99dP6xa/k5H8D/jFL+FY2r/MXEGGOMMcYY+8tdWfT/9nl1tSbEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ/+J/07sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//geYOMQ==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 1m57.450603358s ago: executing program 8 (id=15610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000004580)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000004500)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}}, 0x0) 1m56.629246428s ago: executing program 8 (id=15619): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x102, 0x0) sendfile(r0, r0, 0x0, 0x4) 1m55.943875994s ago: executing program 39 (id=15619): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x102, 0x0) sendfile(r0, r0, 0x0, 0x4) 7.719013599s ago: executing program 6 (id=16561): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0x3, 0x10000000003, 0x4, 0x5}) 6.703866211s ago: executing program 6 (id=16566): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 3.831243783s ago: executing program 6 (id=16591): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000004400000020"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000700), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000000140)=""/83, &(0x7f0000000080), &(0x7f0000000080), 0x6, r0}, 0x38) 3.701520422s ago: executing program 9 (id=16592): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffe, 0x6, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000440)="45d3fb080000", 0x0, 0xfffffffb, 0x1c4ba80ff697ec1, 0x3, 0x0}) 3.396781405s ago: executing program 9 (id=16597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x14, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.0850486s ago: executing program 9 (id=16602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.751336345s ago: executing program 9 (id=16608): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) 2.131806447s ago: executing program 3 (id=16612): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x10, 0x0, 0x1300) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000240)=@in6={0xa, 0x4e26, 0x7, @dev={0xfe, 0x80, '\x00', 0x37}, 0x3}, 0x80, 0x0}, 0x2400488c) 2.122304083s ago: executing program 6 (id=16613): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 2.009344017s ago: executing program 2 (id=16614): r0 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000100000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 1.867369142s ago: executing program 6 (id=16616): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x800003fc, 0x1, 0x12, 0x4, 0x20}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.831198994s ago: executing program 3 (id=16617): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x40, r1, 0x403, 0x2070bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x100}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) 1.657907789s ago: executing program 1 (id=16618): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x10) 1.575097199s ago: executing program 6 (id=16619): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x4018, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00221c"], 0x0}, 0x0) 1.433249421s ago: executing program 3 (id=16621): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='1\x00'/12, @ANYRES32, @ANYBLOB="b03dad33deb23f1a56e9a3d3aa8c041088"], 0x20) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 1.43295889s ago: executing program 1 (id=16622): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) 1.385828431s ago: executing program 2 (id=16623): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000c80)={{0x5, 0x1, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffd, 0x6, 0x213, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe8eb, 0x2, 0x0, 0x8000000000000000, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0xb, 0xc9f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1cb600000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x61928afd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5, 0xf, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4000000000]}) 1.256694109s ago: executing program 0 (id=16624): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x4) close(0x3) 1.25038815s ago: executing program 1 (id=16625): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x400, 0x600}, 0x20) 1.221717296s ago: executing program 3 (id=16626): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 1.140156274s ago: executing program 2 (id=16627): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000640)="053c8100", 0x5dc, 0xb00, &(0x7f0000000080)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @local}, 0x14) 1.022680381s ago: executing program 1 (id=16628): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x0, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0xe, 0xfffffc02, 0xfffffffb, 0x8, 0x4, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x1002ca, 0x5, 0x76, 0xc, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x6, 0x7fff, 0x4000000, 0x7, 0x60, 0xe, 0x7, 0x1, 0x2001, 0x7, 0xf, 0x7, 0x10001, 0x9, 0x5, 0x8, 0x6, 0xb, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x5, 0x80000001, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0xfffffffd, 0x6], [0xffffffd2, 0x7ffffffe, 0xfffc, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x804, 0x6c368000, 0x4, 0x7, 0x0, 0xe, 0x5, 0x8, 0x8001, 0x4, 0x7fff, 0x7, 0x0, 0x484f, 0x4, 0x3, 0x8, 0x40, 0xc0c, 0x80000001, 0x3, 0x9, 0x7, 0x7, 0xf, 0x8, 0x7, 0x4, 0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x0, 0x1, 0x6, 0x1, 0x0, 0x206, 0x8, 0x8, 0x6, 0x68], [0x3, 0x201, 0x0, 0xfffffffc, 0x4000, 0x7fff, 0x401, 0xfffffff7, 0x2, 0x1000, 0x7, 0x2, 0xd, 0x7, 0x6, 0xe, 0x5, 0x4, 0x5, 0x5, 0x0, 0x30000000, 0x644, 0x2, 0x7, 0x8000, 0x5, 0x1ff, 0x7fb, 0xd, 0x400, 0xd, 0x41, 0x2c000, 0xc99, 0x25a, 0x2, 0x0, 0x4, 0x5d9fffa, 0x3ff, 0x1ff, 0x40, 0xb, 0x10000, 0xe7, 0x200, 0x7af5, 0x210, 0xb, 0x0, 0xfffd, 0x7, 0x0, 0x2, 0x81, 0x800, 0x2, 0x7, 0x10100, 0x8, 0x0, 0x6, 0x1], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62e, 0x4, 0x8, 0x2, 0x5, 0x8, 0x8, 0x8000, 0x8, 0x5, 0x80000800, 0x5, 0x3, 0x200, 0xfff, 0x3, 0x1, 0xfffffff3, 0x7, 0x8000006, 0xe6, 0xffffffff, 0x1, 0x2, 0x7, 0x1, 0x7, 0x9, 0x8, 0x0, 0xf, 0x9, 0x17ce, 0x1000, 0x3, 0x6fe, 0xe, 0xd1, 0x13a, 0x7, 0x0, 0xb756, 0x2, 0xb9, 0x4, 0x50, 0x8c1, 0x5, 0x1, 0x3, 0xf, 0x100, 0xf30b, 0x8, 0x6, 0xff, 0x1, 0xc, 0x2]}, 0x45c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) 983.754474ms ago: executing program 0 (id=16629): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c7ffffc826a8", 0x0, 0x3a, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 775.840986ms ago: executing program 1 (id=16630): unshare(0x2c020400) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x609002, 0x0) fcntl$getflags(r0, 0x3) 775.294064ms ago: executing program 2 (id=16631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 633.488092ms ago: executing program 1 (id=16632): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x1807, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x10, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000002c0)={0x0, 0x11, 0x5, {0x5, 0x23, "ff7dbd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 633.237272ms ago: executing program 0 (id=16633): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x2, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0xfffffffffffffffd, &(0x7f0000000000)) 513.701176ms ago: executing program 2 (id=16634): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x541b, 0x0) 470.313723ms ago: executing program 3 (id=16635): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0x1006) 465.339924ms ago: executing program 9 (id=16636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) 446.07059ms ago: executing program 0 (id=16637): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 299.130468ms ago: executing program 2 (id=16638): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x145f, 0x212, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="400c1f"], 0x0, 0x0, 0x0, 0x0}, 0x0) 217.453405ms ago: executing program 0 (id=16639): r0 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) 193.943539ms ago: executing program 9 (id=16640): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f27, 0x4, 0x3, 0x2, 0x5, 0xcc9, 0xf, 0x7, 0x5, 0x2000000, 0xefb, 0x1, 0x6, 0x1, 0x6, 0x101, 0x1000, 0x1a449, 0x3, 0x40000007, 0x9d, 0xcaa7, 0x4, 0x20001e58, 0x4, 0xe69, 0x3c, 0x8, 0x5, 0x0, 0xfffffff8]}) 69.880663ms ago: executing program 0 (id=16641): r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) poll(&(0x7f00000000c0)=[{r0, 0x14a0}], 0x1, 0x0) 0s ago: executing program 3 (id=16642): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200810, &(0x7f0000000240)={[{@ssd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@nodatasum}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) lseek(r0, 0x2000, 0x4) kernel console output (not intermixed with test programs): aves [ 1560.706302][ T1164] _ÐZ`Ô€@ÿÃ: left promiscuous mode [ 1560.722633][ T10] usb 10-1: USB disconnect, device number 8 [ 1560.966530][T19906] loop0: detected capacity change from 0 to 1024 [ 1560.978674][T19906] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1560.995022][ T5975] Bluetooth: hci0: command tx timeout [ 1561.078236][T19906] EXT4-fs (loop0): group descriptors corrupted! [ 1561.816593][T19675] chnl_net:caif_netlink_parms(): no params data found [ 1562.070300][T20043] loop6: detected capacity change from 0 to 64 [ 1562.386802][T20066] loop6: detected capacity change from 0 to 512 [ 1562.596846][T20066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1562.660191][T20066] EXT4-fs error (device loop6): ext4_generic_delete_entry:2668: inode #12: block 32: comm syz.6.15684: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 1562.709936][ T1164] hsr_slave_0: left promiscuous mode [ 1562.745450][ T1164] hsr_slave_1: left promiscuous mode [ 1562.757096][T20066] EXT4-fs error (device loop6) in ext4_delete_entry:2739: Corrupt filesystem [ 1562.776259][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1562.783684][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1562.886952][T20029] loop3: detected capacity change from 0 to 32768 [ 1562.942902][ T1164] veth1_macvtap: left promiscuous mode [ 1562.949839][T20092] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 1562.961452][ T1164] veth0_macvtap: left promiscuous mode [ 1562.967587][ T5975] Bluetooth: hci0: command tx timeout [ 1562.973385][T20029] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 1562.989345][ T1164] veth1_vlan: left promiscuous mode [ 1562.999669][T20092] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1563.008669][ T1164] veth0_vlan: left promiscuous mode [ 1563.047730][T14163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1563.057317][T20029] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1563.085236][T20092] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1563.133968][T20092] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1563.169147][T20092] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1563.210213][T20092] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1563.240035][T20092] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1563.283308][T20092] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1563.316932][T20092] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1563.342338][T15415] ocfs2: Unmounting device (7,3) on (node local) [ 1563.357618][T20092] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1563.467130][T20092] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1563.518208][T20092] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1563.524714][T20092] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1564.039037][T20093] loop2: detected capacity change from 0 to 32768 [ 1564.167271][T20093] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1564.470311][ T6059] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1564.656727][ T6059] usb 10-1: Using ep0 maxpacket: 16 [ 1564.682890][ T6059] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1564.692011][ T4201] ocfs2: Unmounting device (7,2) on (node local) [ 1564.699160][ T6059] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1564.737959][ T6059] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1564.779480][ T6059] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1564.806115][ T6059] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.823300][T20164] loop6: detected capacity change from 0 to 512 [ 1564.855348][ T6059] usb 10-1: Product: syz [ 1564.860920][ T6059] usb 10-1: Manufacturer: syz [ 1564.875745][ T6059] usb 10-1: SerialNumber: syz [ 1564.902822][T20164] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 1564.938626][T20164] System zones: 0-2, 18-18, 34-34 [ 1564.981408][T20164] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.15709: bg 0: block 248: padding at end of block bitmap is not set [ 1565.064598][T20164] Quota error (device loop6): write_blk: dquota write failed [ 1565.072963][T20164] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1565.087557][T20164] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.15709: Failed to acquire dquot type 1 [ 1565.114541][T20141] netlink: 36 bytes leftover after parsing attributes in process `syz.9.15703'. [ 1565.140463][ T6059] usb 10-1: 0:2 : does not exist [ 1565.168729][T20164] EXT4-fs (loop6): 1 truncate cleaned up [ 1565.184822][T20164] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1565.240186][ T6059] usb 10-1: USB disconnect, device number 9 [ 1565.295830][T12550] udevd[12550]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1565.379647][T14163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1565.793622][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 1565.860282][ T1164] team0 (unregistering): Port device team_slave_0 removed [ 1565.862016][ T6032] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 1566.068027][ T6032] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1566.078676][ T6032] usb 7-1: config 179 has no interface number 0 [ 1566.092548][ T6032] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1566.112701][ T6032] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 1566.126439][ T6032] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1566.138050][ T6032] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 1566.151505][ T6032] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1566.164856][ T6032] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1566.175538][ T6032] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.196378][T20203] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1566.203842][T20203] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1566.499589][ T6032] usb 7-1: USB disconnect, device number 7 [ 1566.499656][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1566.499706][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1566.937351][T20167] macvtap0: refused to change device tx_queue_len [ 1567.156344][T20231] loop2: detected capacity change from 0 to 1024 [ 1567.346935][ T65] hfsplus: b-tree write err: -5, ino 8 [ 1567.388768][T19675] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.442104][T19675] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.466418][T19675] bridge_slave_0: entered allmulticast mode [ 1567.522975][T19675] bridge_slave_0: entered promiscuous mode [ 1567.595489][T19675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.602711][T19675] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.619077][T20284] loop3: detected capacity change from 0 to 512 [ 1567.694664][T20284] EXT4-fs: Ignoring removed orlov option [ 1567.713568][T20290] loop6: detected capacity change from 0 to 256 [ 1567.720300][T19675] bridge_slave_1: entered allmulticast mode [ 1567.789063][T19675] bridge_slave_1: entered promiscuous mode [ 1567.795099][T20284] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1567.805998][T20290] exfat: Deprecated parameter 'utf8' [ 1567.904337][T20284] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.15721: corrupted in-inode xattr: e_value size too large [ 1567.931768][T20284] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.15721: couldn't read orphan inode 15 (err -117) [ 1568.032470][T20290] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1568.106308][T20284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1568.132504][T20311] lo speed is unknown, defaulting to 1000 [ 1568.136544][T19675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1568.211981][T19675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1568.307448][ T30] audit: type=1800 audit(1636.772:467): pid=20284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.15721" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 1568.375326][T20311] lo speed is unknown, defaulting to 1000 [ 1568.513433][T15415] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1568.526270][T20311] lo speed is unknown, defaulting to 1000 [ 1568.537441][T19675] team0: Port device team_slave_0 added [ 1568.559779][T20363] loop6: detected capacity change from 0 to 1024 [ 1568.612061][T19675] team0: Port device team_slave_1 added [ 1568.764397][T20386] loop3: detected capacity change from 0 to 256 [ 1568.983202][T19675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1569.001056][T19675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1569.103982][T19675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1569.125165][T19675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1569.137905][T19675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1569.207231][T19675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1569.603246][T20431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15735'. [ 1569.792698][T20311] infiniband syz2: set active [ 1569.814558][T20311] infiniband syz2: added lo [ 1569.820948][T20311] syz2: rxe_create_cq: returned err = -12 [ 1569.838380][T20311] infiniband syz2: Couldn't create ib_mad CQ [ 1569.856539][T20311] infiniband syz2: Couldn't open port 1 [ 1569.881542][ T975] lo speed is unknown, defaulting to 1000 [ 1569.932410][T19675] hsr_slave_0: entered promiscuous mode [ 1569.965117][T19675] hsr_slave_1: entered promiscuous mode [ 1569.975950][T20311] RDS/IB: syz2: added [ 1569.985668][ T4900] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1570.005170][T20311] smc: adding ib device syz2 with port count 1 [ 1570.006026][T19675] debugfs: 'hsr0' already exists in 'hsr' [ 1570.011338][T20311] smc: ib device syz2 port 1 has pnetid [ 1570.031901][T19675] Cannot create hsr debugfs directory [ 1570.060883][ T975] lo speed is unknown, defaulting to 1000 [ 1570.104800][T20411] loop2: detected capacity change from 0 to 32768 [ 1570.114409][T20311] lo speed is unknown, defaulting to 1000 [ 1570.146745][T20411] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.15731 (20411) [ 1570.193553][ T4900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1570.211552][T20411] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1570.236274][ T4900] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1570.262289][T20411] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 1570.280175][ T4900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.299250][T20411] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1570.326775][ T4900] usb 4-1: config 0 descriptor?? [ 1570.533417][T20411] BTRFS info (device loop2): rebuilding free space tree [ 1570.560927][T20535] loop6: detected capacity change from 0 to 1024 [ 1570.640590][T20411] BTRFS info (device loop2): disabling free space tree [ 1570.658851][T20535] hfsplus: bad catalog entry type [ 1570.662928][T20411] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1570.726165][T20411] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1570.754061][ T4900] prodikeys 0003:041E:2801.0002: item fetching failed at offset 3/7 [ 1570.790199][ T4900] prodikeys 0003:041E:2801.0002: hid parse failed [ 1570.819877][ T4900] prodikeys 0003:041E:2801.0002: probe with driver prodikeys failed with error -22 [ 1570.826554][T20411] BTRFS info (device loop2): enabling ssd optimizations [ 1570.872069][T20411] BTRFS info (device loop2): turning off barriers [ 1570.872547][T18391] hfsplus: b-tree write err: -5, ino 4 [ 1570.878516][T20411] BTRFS info (device loop2): disabling tree log [ 1570.878546][T20411] BTRFS info (device loop2): turning on flush-on-commit [ 1570.878568][T20411] BTRFS info (device loop2): enabling disk space caching [ 1570.933794][ T4900] usb 4-1: USB disconnect, device number 106 [ 1570.967229][T32696] Bluetooth: hci3: command tx timeout [ 1570.989932][T20411] BTRFS info (device loop2): force clearing of disk cache [ 1571.024609][T20411] BTRFS info (device loop2): doing ref verification [ 1571.032639][T20411] BTRFS info (device loop2): use lzo compression, level 0 [ 1571.213386][T20593] netlink: 'syz.0.15741': attribute type 10 has an invalid length. [ 1571.632975][ T4201] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1571.664189][T20606] loop6: detected capacity change from 0 to 512 [ 1571.760734][T20606] EXT4-fs error (device loop6): ext4_orphan_get:1392: comm syz.6.15743: inode #13: comm syz.6.15743: iget: illegal inode # [ 1571.785680][T20606] EXT4-fs (loop6): Remounting filesystem read-only [ 1571.876075][T20606] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1571.939071][T20311] lo speed is unknown, defaulting to 1000 [ 1572.249584][T14163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1572.529473][T20637] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15748'. [ 1572.586378][T20637] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15748'. [ 1572.694275][T20646] loop0: detected capacity change from 0 to 512 [ 1572.751063][T20646] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1572.861402][T20646] EXT4-fs (loop0): 1 truncate cleaned up [ 1572.916570][T20646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1572.944933][T20646] EXT4-fs (loop0): Online resizing not supported with sparse_super2 [ 1572.953393][ T5975] Bluetooth: hci3: command 0x0406 tx timeout [ 1573.231624][ T5968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1573.450674][T20311] lo speed is unknown, defaulting to 1000 [ 1573.678333][T20692] loop9: detected capacity change from 0 to 7 [ 1573.697023][T19675] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1573.747487][T20692] Dev loop9: unable to read RDB block 7 [ 1573.762628][T20692] loop9: unable to read partition table [ 1573.769974][T20692] loop9: partition table beyond EOD, truncated [ 1573.776481][T20692] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1573.822872][T19675] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1573.932809][T19675] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1573.991477][T19675] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1573.997105][T20709] loop6: detected capacity change from 0 to 512 [ 1574.136556][T20709] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 1574.219196][T20709] System zones: 0-2, 18-18, 34-34 [ 1574.263092][T20709] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.15763: bg 0: block 248: padding at end of block bitmap is not set [ 1574.367091][T20709] Quota error (device loop6): write_blk: dquota write failed [ 1574.422540][T20709] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1574.427713][T19675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1574.499587][T20739] loop0: detected capacity change from 0 to 16 [ 1574.506056][T20709] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.15763: Failed to acquire dquot type 1 [ 1574.551964][T19675] 8021q: adding VLAN 0 to HW filter on device team0 [ 1574.568788][T20739] erofs (device loop0): mounted with root inode @ nid 36. [ 1574.602279][T20709] EXT4-fs (loop6): 1 truncate cleaned up [ 1574.603765][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 1574.615232][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1574.642730][T20709] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1574.688536][ T30] audit: type=1800 audit(1643.459:468): pid=20739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.15768" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 1574.784890][T20739] syz.0.15768: attempt to access beyond end of device [ 1574.784890][T20739] loop0: rw=34816, sector=34359738360, nr_sectors = 2408 limit=16 [ 1574.802040][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.809205][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1574.865919][T20311] lo speed is unknown, defaulting to 1000 [ 1574.966504][T14163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1575.048339][T19675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1575.929743][T20311] lo speed is unknown, defaulting to 1000 [ 1575.962218][T20742] loop3: detected capacity change from 0 to 32768 [ 1575.979146][T19675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1576.036949][T20742] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.15769 (20742) [ 1576.159451][T20742] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1576.183263][T20750] loop2: detected capacity change from 0 to 32768 [ 1576.192469][T19675] veth0_vlan: entered promiscuous mode [ 1576.206350][T20742] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 1576.240080][T19675] veth1_vlan: entered promiscuous mode [ 1576.255006][T20750] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.15770 (20750) [ 1576.358661][T20750] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1576.406393][T20750] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 1576.452658][T19675] veth0_macvtap: entered promiscuous mode [ 1576.552139][T20742] BTRFS info (device loop3): rebuilding free space tree [ 1576.597649][T19675] veth1_macvtap: entered promiscuous mode [ 1576.636850][T19675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1576.712352][T19675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1576.747068][T20742] BTRFS info (device loop3): allowing degraded mounts [ 1576.783008][T20750] BTRFS info (device loop2): enabling ssd optimizations [ 1576.787606][T20742] BTRFS info (device loop3): enabling ssd optimizations [ 1576.837929][T20750] BTRFS info (device loop2): enabling free space tree [ 1576.847975][T20742] BTRFS info (device loop3): enabling free space tree [ 1576.879073][T18391] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.908137][T18391] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.917173][T20742] BTRFS info (device loop3): force clearing of disk cache [ 1576.954620][T20742] BTRFS info (device loop3): use zstd compression, level 3 [ 1577.016296][T20742] BTRFS info (device loop3): max_inline set to 0 [ 1577.031914][T18391] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.111137][T18391] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.121273][T20768] loop6: detected capacity change from 0 to 32768 [ 1577.182922][ T30] audit: type=1800 audit(1646.084:469): pid=20742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.15769" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 1577.218624][ T4201] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1577.371844][T20768] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 1577.409212][T15415] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1577.682485][T20311] lo speed is unknown, defaulting to 1000 [ 1577.726445][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1577.735267][T14163] ocfs2: Unmounting device (7,6) on (node local) [ 1577.774561][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1578.027777][ T5147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1578.041345][T20871] comedi comedi3: pcl726: I/O port conflict (0x4f27,16) [ 1578.073123][ T5147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1578.479328][T20885] overlayfs: missing 'lowerdir' [ 1578.899423][T20904] loop1: detected capacity change from 0 to 512 [ 1579.162720][T20904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1579.208711][T20920] loop0: detected capacity change from 0 to 512 [ 1579.217820][T20920] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1579.262225][T20920] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1579.304705][T20920] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 1579.369420][T20920] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1579.375879][T20920] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 1579.473653][T20920] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1579.540746][T20920] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1579.588008][T20920] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.15793: bg 0: block 40: padding at end of block bitmap is not set [ 1579.660345][T20920] EXT4-fs (loop0): Remounting filesystem read-only [ 1579.731072][T20920] EXT4-fs (loop0): 1 truncate cleaned up [ 1579.792780][T19675] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1579.821961][T20920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1580.131965][ T5968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1581.271016][T20941] loop3: detected capacity change from 0 to 32768 [ 1581.410997][T20941] [ 1581.410997][T20941] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1581.410997][T20941] [ 1581.590040][T21009] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15813'. [ 1581.607651][T15415] [ 1581.607651][T15415] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1581.607651][T15415] [ 1581.684130][T15415] [ 1581.684130][T15415] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1581.684130][T15415] [ 1582.302713][T20985] loop2: detected capacity change from 0 to 32768 [ 1582.362972][T20985] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 1582.371795][T20982] loop1: detected capacity change from 0 to 32768 [ 1582.420194][T20985] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1582.506775][ T30] audit: type=1326 audit(1651.668:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21049 comm="syz.3.15815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27918ebe9 code=0x7ffc0000 [ 1582.539745][ T59] (kworker/u8:4,59,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 1582.637813][ T30] audit: type=1326 audit(1651.668:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21049 comm="syz.3.15815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27918ebe9 code=0x7ffc0000 [ 1582.744979][ T30] audit: type=1326 audit(1651.742:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21049 comm="syz.3.15815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fe27918ebe9 code=0x7ffc0000 [ 1582.776373][ T30] audit: type=1326 audit(1651.742:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21049 comm="syz.3.15815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27918ebe9 code=0x7ffc0000 [ 1582.810265][ T30] audit: type=1326 audit(1651.742:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21049 comm="syz.3.15815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27918ebe9 code=0x7ffc0000 [ 1582.941010][ T4201] ocfs2: Unmounting device (7,2) on (node local) [ 1582.947354][ T30] audit: type=1326 audit(1651.742:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21049 comm="syz.3.15815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fe27918ebe9 code=0x7ffc0000 [ 1582.947414][ T30] audit: type=1326 audit(1651.752:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21049 comm="syz.3.15815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27918ebe9 code=0x7ffc0000 [ 1582.947467][ T30] audit: type=1326 audit(1651.752:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21049 comm="syz.3.15815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27918ebe9 code=0x7ffc0000 [ 1583.387113][T21085] loop6: detected capacity change from 0 to 512 [ 1583.541607][T21085] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1583.867721][T14163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1584.099654][T21115] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1584.190668][T21122] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1584.247085][T21131] IPv6: NLM_F_CREATE should be specified when creating new route [ 1584.299426][T21131] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1584.306730][T21131] IPv6: NLM_F_CREATE should be set when creating new route [ 1584.314011][T21131] IPv6: NLM_F_CREATE should be set when creating new route [ 1584.321208][T21131] IPv6: NLM_F_CREATE should be set when creating new route [ 1584.336357][T21135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1584.649967][T21151] loop3: detected capacity change from 0 to 256 [ 1584.696151][T21153] netlink: 'syz.9.15848': attribute type 1 has an invalid length. [ 1584.715496][T21151] exfat: Deprecated parameter 'utf8' [ 1584.779108][T21151] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1584.813029][T21160] loop1: detected capacity change from 0 to 1024 [ 1584.868593][T21160] hfsplus: Unknown parameter 'ï{Ü [ 1584.868593][T21160] OB·ìº­è¯—r4´|¡K™¿¦!B‘¸Z"EÂk(–Œañ«Ç3.<8' [ 1584.979166][ T6032] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1585.166735][ T6032] usb 7-1: Using ep0 maxpacket: 16 [ 1585.195472][ T6032] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1585.242180][ T6032] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1585.274609][ T7180] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1585.283823][ T6032] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1585.344508][ T6032] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1585.374222][ T6032] usb 7-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1585.417552][ T6032] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.474904][ T7180] usb 10-1: Using ep0 maxpacket: 8 [ 1585.478457][ T6032] usb 7-1: config 0 descriptor?? [ 1585.515601][ T7180] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1585.517305][T21192] loop0: detected capacity change from 0 to 4096 [ 1585.540155][ T7180] usb 10-1: config 4 has an invalid interface number: 30 but max is 0 [ 1585.568445][ T7180] usb 10-1: config 4 has no interface number 0 [ 1585.585231][ T7180] usb 10-1: config 4 interface 30 has no altsetting 0 [ 1585.630210][ T7180] usb 10-1: string descriptor 0 read error: -22 [ 1585.662197][ T7180] usb 10-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 1585.684628][T21192] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 1585.720582][ T7180] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.739197][T21192] ntfs3(loop0): ino=1e, "file1" attr_set_size [ 1585.814157][T21188] ntfs3(loop0): ino=1e, "file1" attr_set_size [ 1585.826461][ T7180] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1585.881778][ T7180] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1585.920150][ T7180] dvb-usb: bulk message failed: -22 (2/0) [ 1585.927929][ T6032] hid-generic 0003:045E:05DA.0003: ignoring exceeding usage max [ 1585.944970][ T7180] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1586.004844][ T7180] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 1586.052876][ T6032] hid-generic 0003:045E:05DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.6-1/input0 [ 1586.054283][ T7180] usb 10-1: media controller created [ 1586.175275][ T7180] dvb-usb: bulk message failed: -22 (6/0) [ 1586.200050][ T6032] usb 7-1: USB disconnect, device number 8 [ 1586.212275][ T7180] dw2102: i2c transfer failed. [ 1586.217318][ T7180] dvb-usb: bulk message failed: -22 (6/0) [ 1586.307942][ T7180] dw2102: i2c transfer failed. [ 1586.312750][ T7180] dvb-usb: bulk message failed: -22 (6/0) [ 1586.319165][T21244] loop0: detected capacity change from 0 to 64 [ 1586.379568][ T7180] dw2102: i2c transfer failed. [ 1586.413747][ T7180] dvb-usb: bulk message failed: -22 (6/0) [ 1586.450034][ T7180] dw2102: i2c transfer failed. [ 1586.454822][ T7180] dvb-usb: bulk message failed: -22 (6/0) [ 1586.512503][ T7180] dw2102: i2c transfer failed. [ 1586.541156][ T7180] dvb-usb: bulk message failed: -22 (6/0) [ 1586.565405][T21171] loop2: detected capacity change from 0 to 32768 [ 1586.584079][T21171] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.15851 (21171) [ 1586.610175][ T7180] dw2102: i2c transfer failed. [ 1586.630002][ T7180] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1586.649776][T21230] fido_id[21230]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1586.721825][T21171] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1586.767414][ T7180] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1586.811726][T21171] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 1586.967864][ T7180] dvb-usb: bulk message failed: -22 (3/0) [ 1587.013963][ T7180] dw2102: command 0x0e transfer failed. [ 1587.032962][ T7180] dvb-usb: bulk message failed: -22 (3/0) [ 1587.038858][ T7180] dw2102: command 0x0e transfer failed. [ 1587.129686][T21171] BTRFS info (device loop2): enabling ssd optimizations [ 1587.166680][T21171] BTRFS info (device loop2): enabling free space tree [ 1587.350770][ T7180] dvb-usb: bulk message failed: -22 (3/0) [ 1587.350812][ T7180] dw2102: command 0x0e transfer failed. [ 1587.350854][ T7180] dvb-usb: bulk message failed: -22 (3/0) [ 1587.350871][ T7180] dw2102: command 0x0e transfer failed. [ 1587.350884][ T7180] dvb-usb: bulk message failed: -22 (1/0) [ 1587.350901][ T7180] dw2102: command 0x51 transfer failed. [ 1587.350913][ T7180] dvb-usb: bulk message failed: -22 (5/0) [ 1587.350931][ T7180] dw2102: i2c probe for address 0x68 failed. [ 1587.350945][ T7180] dvb-usb: bulk message failed: -22 (5/0) [ 1587.350963][ T7180] dw2102: i2c probe for address 0x69 failed. [ 1587.350977][ T7180] dvb-usb: bulk message failed: -22 (5/0) [ 1587.350995][ T7180] dw2102: i2c probe for address 0x6a failed. [ 1587.351009][ T7180] dw2102: probing for demodulator failed. Is the external power switched on? [ 1587.351023][ T7180] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 1587.423254][ T4201] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1587.669131][ T7180] rc_core: IR keymap rc-tt-1500 not found [ 1587.669152][ T7180] Registered IR keymap rc-empty [ 1587.671095][ T7180] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0 [ 1587.696923][ T7180] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input97 [ 1587.732826][ T7180] dvb-usb: schedule remote query interval to 250 msecs. [ 1587.732851][ T7180] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1587.732869][ T7180] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 1587.763871][ T7180] usb 10-1: USB disconnect, device number 10 [ 1587.965954][T21326] virt_wifi0 speed is unknown, defaulting to 1000 [ 1587.966065][T21326] virt_wifi0 speed is unknown, defaulting to 1000 [ 1587.969622][T21326] virt_wifi0 speed is unknown, defaulting to 1000 [ 1588.146149][T21326] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1588.241224][ T7180] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 1588.300249][T21326] virt_wifi0 speed is unknown, defaulting to 1000 [ 1588.372124][T21326] virt_wifi0 speed is unknown, defaulting to 1000 [ 1588.447969][T21326] virt_wifi0 speed is unknown, defaulting to 1000 [ 1588.535982][T21326] virt_wifi0 speed is unknown, defaulting to 1000 [ 1588.601747][T21326] virt_wifi0 speed is unknown, defaulting to 1000 [ 1588.655947][T21326] virt_wifi0 speed is unknown, defaulting to 1000 [ 1589.141693][ T6032] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1589.327279][ T6032] usb 7-1: Using ep0 maxpacket: 8 [ 1589.376465][ T6032] usb 7-1: config 12 has an invalid interface number: 212 but max is 0 [ 1589.415449][ T6032] usb 7-1: config 12 has no interface number 0 [ 1589.437505][ T6032] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=30.0c [ 1589.479268][ T6032] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.523801][ T6032] usb 7-1: Product: syz [ 1589.527982][ T6032] usb 7-1: Manufacturer: syz [ 1589.553861][ T6032] usb 7-1: SerialNumber: syz [ 1589.586993][ T6032] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 1589.646957][ T6032] dvb-usb: bulk message failed: -22 (2/0) [ 1589.706754][ T6032] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1589.755870][ T6032] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)) [ 1589.799364][ T6032] usb 7-1: media controller created [ 1589.946348][ T6032] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1590.028176][ T7180] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1590.051131][T21438] loop3: detected capacity change from 0 to 1024 [ 1590.111699][T21438] hfsplus: bad catalog entry type [ 1590.115466][ T6032] cxusb: set interface failed [ 1590.131744][ T6032] dvb-usb: bulk message failed: -22 (1/0) [ 1590.151999][T21448] siw: device registration error -23 [ 1590.167383][ T6032] dvb-usb: bulk message failed: -22 (3/0) [ 1590.203162][ T7180] usb 3-1: Using ep0 maxpacket: 8 [ 1590.218134][ T6032] usb 7-1: bluebird_gpio_write failed. [ 1590.229444][ T7180] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1590.265181][ T6032] dvb-usb: bulk message failed: -22 (3/0) [ 1590.267363][ T7180] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 166, setting to 64 [ 1590.283105][ T6032] usb 7-1: bluebird_gpio_write failed. [ 1590.292097][ T5147] hfsplus: b-tree write err: -5, ino 4 [ 1590.328062][T21443] loop9: detected capacity change from 0 to 4096 [ 1590.361204][ T7180] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1590.396122][ T7180] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1590.440065][T21443] ntfs3(loop9): ino=3, Correct links count -> 2. [ 1590.466051][ T7180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.474052][ T7180] usb 3-1: Product: syz [ 1590.533572][ T7180] usb 3-1: Manufacturer: syz [ 1590.551678][ T6032] DVB: Unable to find symbol dib7000p_attach() [ 1590.570457][ T7180] usb 3-1: SerialNumber: syz [ 1590.580978][ T7180] usb 3-1: config 0 descriptor?? [ 1590.589043][ T7180] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 1590.590390][T21462] loop0: detected capacity change from 0 to 1024 [ 1590.591562][ T6032] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' [ 1590.823103][ T7180] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 1590.877835][ T7180] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1590.913565][ T6032] rc_core: IR keymap rc-dvico-mce not found [ 1590.952439][ T6032] Registered IR keymap rc-empty [ 1590.981590][ T6032] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 1590.992161][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1591.073620][ T7180] usb 3-1: USB disconnect, device number 105 [ 1591.096681][ T6032] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input98 [ 1591.219370][ T6032] dvb-usb: schedule remote query interval to 100 msecs. [ 1591.267933][ T6032] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected. [ 1591.342926][ T6032] usb 7-1: USB disconnect, device number 9 [ 1591.466210][ T10] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 1591.525725][T21513] sp0: Synchronizing with TNC [ 1591.658480][T21531] loop0: detected capacity change from 0 to 1024 [ 1591.688235][ T6032] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected. [ 1591.691885][ T10] usb 10-1: config index 0 descriptor too short (expected 19492, got 36) [ 1591.765597][ T10] usb 10-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 1591.786301][T21531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1591.827640][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 1591.916675][T21519] mkiss: ax0: crc mode is auto. [ 1591.926521][ T5968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1591.946025][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1592.018808][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1592.082409][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1592.166978][ T10] usb 10-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 1592.218851][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.279588][ T10] usb 10-1: config 0 descriptor?? [ 1592.742125][ T10] lg-g15 0003:046D:C225.0004: item fetching failed at offset 1/5 [ 1592.804367][ T10] lg-g15 0003:046D:C225.0004: probe with driver lg-g15 failed with error -22 [ 1592.940835][ T10] usb 10-1: USB disconnect, device number 11 [ 1593.245638][T21622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15930'. [ 1593.272388][T21623] loop1: detected capacity change from 0 to 512 [ 1593.280373][T21548] loop2: detected capacity change from 0 to 32768 [ 1593.311916][T21623] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1593.339736][T21548] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.15914 (21548) [ 1593.381098][T21623] EXT4-fs (loop1): 1 truncate cleaned up [ 1593.436555][T21548] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1593.464007][T21623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1593.526890][T21548] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 1593.608320][T21649] netlink: 100 bytes leftover after parsing attributes in process `syz.9.15934'. [ 1593.729249][T19675] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1593.866049][T21548] BTRFS info (device loop2): enabling ssd optimizations [ 1593.905076][T21548] BTRFS info (device loop2): enabling free space tree [ 1593.917970][T21548] BTRFS info (device loop2): use lzo compression, level 0 [ 1594.083272][T21675] overlayfs: conflicting options: userxattr,metacopy=on [ 1594.285526][ T5975] Bluetooth: hci6: command 0x0406 tx timeout [ 1594.298121][ T4201] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1594.958613][T21714] netlink: 'syz.6.15949': attribute type 24 has an invalid length. [ 1594.977575][T21715] loop3: detected capacity change from 0 to 256 [ 1595.093287][T21715] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x08fbab18, utbl_chksum : 0xe619d30d) [ 1595.636560][T21726] loop6: detected capacity change from 0 to 4096 [ 1595.694133][T21726] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1595.941329][T21747] loop0: detected capacity change from 0 to 512 [ 1596.116970][T21747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1596.142749][T21707] loop9: detected capacity change from 0 to 32768 [ 1596.209729][T21707] (syz.9.15948,21707,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1596.269379][T21707] (syz.9.15948,21707,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1596.396206][T21707] JBD2: Ignoring recovery information on journal [ 1596.428771][ T5975] Bluetooth: hci0: command 0x0405 tx timeout [ 1596.586331][ T5968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1596.636776][T21707] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1596.790632][T21779] loop3: detected capacity change from 0 to 1024 [ 1596.899579][T21779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1597.084280][ T3594] ocfs2: Unmounting device (7,9) on (node local) [ 1597.202303][T15415] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1597.458642][T21807] netlink: 176 bytes leftover after parsing attributes in process `syz.2.15972'. [ 1597.683049][T21814] loop0: detected capacity change from 0 to 512 [ 1597.801066][T21814] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1597.933585][T21814] EXT4-fs (loop0): 1 truncate cleaned up [ 1597.964062][T21814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1598.009509][T21835] CUSE: DEVNAME unspecified [ 1598.086441][ T10] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1598.166082][T21844] loop3: detected capacity change from 0 to 256 [ 1598.197189][T21844] vfat: Deprecated parameter 'posix' [ 1598.248814][T21844] FAT-fs: "posix" option is obsolete, not supported now [ 1598.260138][ T5968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1598.295094][ T10] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1598.323973][ T10] usb 3-1: config 0 has no interface number 0 [ 1598.410518][ T10] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1598.468534][ T10] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1598.512293][ T10] usb 3-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 1598.561001][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1598.579679][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.649801][ T10] usb 3-1: config 0 descriptor?? [ 1598.695207][T21862] tipc: Enabling of bearer rejected, failed to enable media [ 1598.712963][T21791] loop6: detected capacity change from 0 to 32768 [ 1598.806110][T21791] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1598.999026][T21791] XFS (loop6): Ending clean mount [ 1599.079440][ T30] audit: type=1800 audit(1669.074:478): pid=21791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.15967" name="file1" dev="loop6" ino=9286 res=0 errno=0 [ 1599.106217][ T10] uclogic 0003:28BD:0905.0005: Interface probing failed: -22 [ 1599.134446][ T10] uclogic 0003:28BD:0905.0005: interface is invalid, ignoring [ 1599.238055][T14163] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1599.281264][ T10] usb 3-1: USB disconnect, device number 106 [ 1599.440749][T21891] loop3: detected capacity change from 0 to 2048 [ 1599.550030][T21843] loop9: detected capacity change from 0 to 32768 [ 1599.583071][T21891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1599.665748][T21843] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1599.690652][T21891] EXT4-fs error (device loop3): __ext4_new_inode:1279: comm syz.3.15986: failed to insert inode 13: doubly allocated? [ 1599.895240][T21843] XFS (loop9): Ending clean mount [ 1599.912849][T15415] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1600.187813][T21945] loop1: detected capacity change from 0 to 128 [ 1600.232867][ T3594] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1600.404161][ T6032] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1600.417119][T21955] loop6: detected capacity change from 0 to 512 [ 1600.520444][T21955] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1600.606229][ T6032] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1600.643673][T21969] loop1: detected capacity change from 0 to 8 [ 1600.664758][ T6032] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1600.744322][ T6032] usb 3-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 1600.781514][T14163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1600.789310][ T6032] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.870035][ T6032] usb 3-1: config 0 descriptor?? [ 1601.309080][ T6032] a4tech 0003:09DA:000A.0006: unknown main item tag 0x0 [ 1601.352173][ T6032] a4tech 0003:09DA:000A.0006: unknown main item tag 0x0 [ 1601.367047][T22004] loop6: detected capacity change from 0 to 256 [ 1601.372658][ T6032] a4tech 0003:09DA:000A.0006: unknown main item tag 0x0 [ 1601.382425][ T6032] a4tech 0003:09DA:000A.0006: unknown main item tag 0x0 [ 1601.392775][ T6032] a4tech 0003:09DA:000A.0006: unknown main item tag 0x0 [ 1601.399748][ T6032] a4tech 0003:09DA:000A.0006: unknown main item tag 0x0 [ 1601.468638][ T6032] a4tech 0003:09DA:000A.0006: unknown main item tag 0x0 [ 1601.499365][T22004] FAT-fs (loop6): Directory bread(block 64) failed [ 1601.505943][T22004] FAT-fs (loop6): Directory bread(block 65) failed [ 1601.522839][ T6032] a4tech 0003:09DA:000A.0006: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.2-1/input0 [ 1601.558625][T22012] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 1601.571760][T22004] FAT-fs (loop6): Directory bread(block 66) failed [ 1601.610060][T22004] FAT-fs (loop6): Directory bread(block 67) failed [ 1601.617226][ T6032] usb 3-1: USB disconnect, device number 107 [ 1601.677690][T22004] FAT-fs (loop6): Directory bread(block 68) failed [ 1601.712690][T22004] FAT-fs (loop6): Directory bread(block 69) failed [ 1601.748894][T22004] FAT-fs (loop6): Directory bread(block 70) failed [ 1601.819028][T22004] FAT-fs (loop6): Directory bread(block 71) failed [ 1601.858826][T22004] FAT-fs (loop6): Directory bread(block 72) failed [ 1601.869012][T22004] FAT-fs (loop6): Directory bread(block 73) failed [ 1601.876637][T22022] fido_id[22022]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1602.015753][T22046] loop0: detected capacity change from 0 to 512 [ 1602.069180][T22046] EXT4-fs: Ignoring removed orlov option [ 1602.163564][T22046] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1602.207245][T22046] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 1602.226564][T22046] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.16010: corrupted in-inode xattr: e_value size too large [ 1602.391393][T22046] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.16010: couldn't read orphan inode 15 (err -117) [ 1602.426453][T22046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1602.506187][ T10] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1602.618261][ T5968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1602.696869][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1602.721722][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1602.787728][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1602.865410][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1602.926619][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1602.940642][T22087] loop2: detected capacity change from 0 to 2048 [ 1602.987978][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1602.990700][T22087] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1603.045960][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.094095][ T10] usb 4-1: config 0 descriptor?? [ 1603.103388][T22087] syz.2.16018: attempt to access beyond end of device [ 1603.103388][T22087] loop2: rw=524288, sector=65534, nr_sectors = 2 limit=2048 [ 1603.119242][T22097] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1603.147134][T12550] udevd[12550]: incorrect nilfs2 checksum on /dev/loop2 [ 1603.173430][T22095] loop0: detected capacity change from 0 to 1024 [ 1603.410938][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1603.513119][T22044] loop9: detected capacity change from 0 to 32768 [ 1603.526438][ T10] hid (null): unknown global tag 0x9f [ 1603.561958][ T10] hid (null): unknown global tag 0xc [ 1603.616604][ T10] redragon 0003:0C45:760B.0007: unexpected long global item [ 1603.660608][T22044] XFS (loop9): DAX unsupported by block device. Turning off DAX. [ 1603.694546][ T10] redragon 0003:0C45:760B.0007: probe with driver redragon failed with error -22 [ 1603.710342][T22044] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1603.757920][ T10] usb 4-1: USB disconnect, device number 107 [ 1603.951648][T22044] XFS (loop9): Ending clean mount [ 1604.016448][T22044] XFS (loop9): Quotacheck needed: Please wait. [ 1604.213214][T22044] XFS (loop9): Quotacheck: Done. [ 1604.307242][T22150] netlink: 92 bytes leftover after parsing attributes in process `syz.2.16026'. [ 1604.318690][T22070] loop6: detected capacity change from 0 to 32768 [ 1604.344837][T22150] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16026'. [ 1604.406378][T22070] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.16014 (22070) [ 1604.448914][ T3594] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1604.482349][T22070] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1604.532992][T22070] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 1604.582508][T22162] netlink: 'syz.3.16028': attribute type 1 has an invalid length. [ 1604.642636][T22162] netlink: 208 bytes leftover after parsing attributes in process `syz.3.16028'. [ 1604.697884][T22162] netlink: 'syz.3.16028': attribute type 1 has an invalid length. [ 1604.799615][T22162] netlink: 'syz.3.16028': attribute type 2 has an invalid length. [ 1604.962698][T22104] loop1: detected capacity change from 0 to 32768 [ 1604.998928][T22070] BTRFS info (device loop6): setting nodatasum [ 1605.030602][T22070] BTRFS info (device loop6): setting nodatacow [ 1605.036771][T22070] BTRFS info (device loop6): enabling free space tree [ 1605.088936][T22070] BTRFS info (device loop6): max_inline set to 0 [ 1605.180246][T22104] find_entry called with index = 0 [ 1605.244194][T22104] find_entry called with index = 0 [ 1605.335879][T22104] read_mapping_page failed! [ 1605.340419][T22104] ERROR: (device loop1): txCommit: [ 1605.340419][T22104] [ 1605.430998][T22104] ERROR: (device loop1): remounting filesystem as read-only [ 1605.485067][T14163] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1605.576379][T22209] netlink: 'syz.0.16035': attribute type 29 has an invalid length. [ 1605.677427][T22209] netlink: 'syz.0.16035': attribute type 29 has an invalid length. [ 1606.041945][T22229] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 1606.837044][T22267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16051'. [ 1607.236841][T22274] loop6: detected capacity change from 0 to 4096 [ 1607.310005][T22282] loop3: detected capacity change from 0 to 256 [ 1607.401172][T22274] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1607.410379][T22290] sock: sock_timestamping_bind_phc: sock not bind to device [ 1607.495890][T22282] FAT-fs (loop3): Directory bread(block 64) failed [ 1607.514007][T22274] ntfs3(loop6): Failed to load $Extend (-22). [ 1607.544657][T22274] ntfs3(loop6): Failed to initialize $Extend. [ 1607.546404][T22282] FAT-fs (loop3): Directory bread(block 65) failed [ 1607.632962][T22282] FAT-fs (loop3): Directory bread(block 66) failed [ 1607.639522][T22282] FAT-fs (loop3): Directory bread(block 67) failed [ 1607.715617][T22282] FAT-fs (loop3): Directory bread(block 68) failed [ 1607.775559][T22282] FAT-fs (loop3): Directory bread(block 69) failed [ 1607.782217][T22282] FAT-fs (loop3): Directory bread(block 70) failed [ 1607.827153][T22234] loop2: detected capacity change from 0 to 32768 [ 1607.874663][T22282] FAT-fs (loop3): Directory bread(block 71) failed [ 1607.879903][T22234] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.16041 (22234) [ 1607.932607][T22282] FAT-fs (loop3): Directory bread(block 72) failed [ 1607.964666][T22282] FAT-fs (loop3): Directory bread(block 73) failed [ 1608.010745][T22234] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1608.113248][T22234] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 1608.347957][T22234] BTRFS info (device loop2): rebuilding free space tree [ 1608.374273][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1608.455719][T22234] BTRFS info (device loop2): enabling ssd optimizations [ 1608.507437][T22234] BTRFS info (device loop2): using spread ssd allocation scheme [ 1608.552411][T22263] loop1: detected capacity change from 0 to 32768 [ 1608.559089][T22234] BTRFS info (device loop2): enabling free space tree [ 1608.565142][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1608.597629][T22234] BTRFS info (device loop2): force clearing of disk cache [ 1608.601554][ T10] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 1608.678144][ T10] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1608.717089][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.771029][ T10] usb 7-1: Product: syz [ 1608.790499][ T10] usb 7-1: Manufacturer: syz [ 1608.814753][ T10] usb 7-1: SerialNumber: syz [ 1608.870731][ T10] usb 7-1: config 0 descriptor?? [ 1608.919987][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1608.955250][ T10] usb 7-1: setting power ON [ 1608.991905][ T4201] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1609.009425][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 1609.051628][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1609.146617][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1609.193242][ T10] usb 7-1: media controller created [ 1609.373687][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1609.461559][T22300] loop0: detected capacity change from 0 to 32768 [ 1609.512538][ T10] usb 7-1: selecting invalid altsetting 6 [ 1609.545052][ T10] usb 7-1: digital interface selection failed (-22) [ 1609.606361][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1609.684757][ T10] usb 7-1: setting power OFF [ 1609.715718][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 1609.783780][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1609.847788][ T10] (NULL device *): no alternate interface [ 1610.008228][T22394] loop2: detected capacity change from 0 to 2048 [ 1610.117018][T22394] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1610.152951][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1610.246434][T22405] netlink: 216 bytes leftover after parsing attributes in process `syz.3.16075'. [ 1610.259290][ T10] usb 7-1: USB disconnect, device number 10 [ 1610.298323][T22412] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1610.352948][T22405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16075'. [ 1610.422981][T22405] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16075'. [ 1610.718035][T22429] loop6: detected capacity change from 0 to 64 [ 1610.992512][T22429] syz.6.16079: attempt to access beyond end of device [ 1610.992512][T22429] loop6: rw=2049, sector=73, nr_sectors = 89 limit=64 [ 1611.080556][T22444] netlink: 'syz.1.16083': attribute type 3 has an invalid length. [ 1611.660212][T22373] loop9: detected capacity change from 0 to 32768 [ 1611.870550][T22479] loop1: detected capacity change from 0 to 512 [ 1611.951895][T22373] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1612.001663][T22479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1612.265586][T22373] XFS (loop9): Ending clean mount [ 1612.392643][ T3594] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1612.430001][T19675] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1612.747207][T22537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16104'. [ 1612.821961][T22539] __vm_enough_memory: pid: 22539, comm: syz.2.16105, bytes: 21199688065024 not enough memory for the allocation [ 1613.023131][T22548] Bluetooth: MGMT ver 1.23 [ 1613.133193][ T4899] kernel write not supported for file /comedi3 (pid: 4899 comm: kworker/1:0) [ 1613.575338][T22570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16113'. [ 1613.763272][T22511] loop3: detected capacity change from 0 to 32768 [ 1613.872908][T22511] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.16097 (22511) [ 1613.994811][T22511] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1614.061271][T22511] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 1614.175381][ T4899] usb 3-1: new low-speed USB device number 108 using dummy_hcd [ 1614.314036][T22511] BTRFS info (device loop3): enabling ssd optimizations [ 1614.356175][T22511] BTRFS info (device loop3): enabling free space tree [ 1614.492520][ T4899] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1614.535039][ T4899] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1614.544846][T22625] netlink: 112 bytes leftover after parsing attributes in process `syz.6.16125'. [ 1614.580776][ T4899] usb 3-1: can't read configurations, error -71 [ 1614.595374][T22625] tipc: Enabling of bearer rejected, failed to enable media [ 1614.771921][T18391] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 1614.882185][T15415] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1615.658745][T22669] input: syz1 as /devices/virtual/input/input99 [ 1615.752621][T22676] netlink: 20 bytes leftover after parsing attributes in process `syz.6.16136'. [ 1615.866700][T22602] loop9: detected capacity change from 0 to 32768 [ 1617.697965][T22746] mkiss: ax0: crc mode is auto. [ 1617.813435][T22752] loop6: detected capacity change from 0 to 2048 [ 1617.872013][T22752] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1618.309779][T22779] loop0: detected capacity change from 0 to 512 [ 1618.332798][T22703] loop1: detected capacity change from 0 to 32768 [ 1618.444787][T22796] netlink: 16 bytes leftover after parsing attributes in process `syz.9.16162'. [ 1618.468660][T22779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1618.819596][ T5968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1618.856187][ T30] audit: type=1326 audit(1689.839:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22811 comm="syz.2.16167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002af8ebe9 code=0x7ffc0000 [ 1618.938399][ T30] audit: type=1326 audit(1689.839:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22811 comm="syz.2.16167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002af8ebe9 code=0x7ffc0000 [ 1618.998544][T22817] xt_limit: Overflow, try lower: 604147548/4200216962 [ 1619.000059][ T30] audit: type=1326 audit(1689.839:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22811 comm="syz.2.16167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f002af8ebe9 code=0x7ffc0000 [ 1619.066615][ T30] audit: type=1326 audit(1689.839:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22811 comm="syz.2.16167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002af8ebe9 code=0x7ffc0000 [ 1619.099023][T22821] Bluetooth: MGMT ver 1.23 [ 1619.147549][ T30] audit: type=1326 audit(1689.839:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22811 comm="syz.2.16167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002af8ebe9 code=0x7ffc0000 [ 1619.220009][T22825] loop0: detected capacity change from 0 to 128 [ 1619.351915][T22825] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 1619.956723][ T10] kernel write not supported for file [eventfd] (pid: 10 comm: kworker/0:1) [ 1620.215394][T22872] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16183'. [ 1620.409223][T22876] loop6: detected capacity change from 0 to 64 [ 1620.550131][T22829] loop1: detected capacity change from 0 to 32768 [ 1620.616088][T22829] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.16166 (22829) [ 1620.702309][T22829] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1620.773713][T22829] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 1620.996997][T22926] netlink: 44 bytes leftover after parsing attributes in process `syz.0.16195'. [ 1621.006326][T22926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16195'. [ 1621.086379][T22898] loop3: detected capacity change from 0 to 4096 [ 1621.187367][T22829] BTRFS info (device loop1): setting nodatasum [ 1621.250347][T22829] BTRFS info (device loop1): enabling ssd optimizations [ 1621.317890][T22829] BTRFS info (device loop1): disabling tree log [ 1621.331358][T22944] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1621.388017][T22829] BTRFS info (device loop1): enabling free space tree [ 1621.394890][T22829] BTRFS info (device loop1): enabling auto defrag [ 1621.820414][T19675] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1621.866880][T22961] bond_slave_0: entered promiscuous mode [ 1621.872975][T22961] bond_slave_1: entered promiscuous mode [ 1621.878650][T22961] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode [ 1622.002501][T22961] macvtap1: entered allmulticast mode [ 1622.068706][T22961] bond0: entered allmulticast mode [ 1622.124584][T22961] bond_slave_0: entered allmulticast mode [ 1622.158161][T22961] bond_slave_1: entered allmulticast mode [ 1622.196763][T22961] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 1622.296860][T22961] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1622.360186][T22961] bond0: left allmulticast mode [ 1622.371481][T22961] bond_slave_0: left allmulticast mode [ 1622.387271][T22961] bond_slave_1: left allmulticast mode [ 1622.410143][T22961] mac80211_hwsim hwsim41 wlan1: left allmulticast mode [ 1622.458828][T22961] bond_slave_0: left promiscuous mode [ 1622.464323][T22961] bond_slave_1: left promiscuous mode [ 1622.469873][T22961] mac80211_hwsim hwsim41 wlan1: left promiscuous mode [ 1622.590109][T23001] overlayfs: workdir and upperdir must be separate subtrees [ 1622.672804][T22981] netlink: 'syz.3.16206': attribute type 6 has an invalid length. [ 1623.043734][T23014] loop3: detected capacity change from 0 to 512 [ 1623.062015][T23015] loop6: detected capacity change from 0 to 256 [ 1623.103499][T23014] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.16214: corrupted in-inode xattr: invalid ea_ino [ 1623.247765][T23026] loop0: detected capacity change from 0 to 128 [ 1623.254802][T23014] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.16214: couldn't read orphan inode 15 (err -117) [ 1623.417489][T23014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1623.590787][T22992] loop2: detected capacity change from 0 to 32768 [ 1623.649774][T15415] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1623.657485][T23046] CIFS: VFS: Malformed UNC in devname [ 1623.687283][T22992] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 1623.832277][T23058] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16224'. [ 1623.861424][T23058] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16224'. [ 1623.890456][T22992] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1624.232495][ T4201] ocfs2: Unmounting device (7,2) on (node local) [ 1624.363325][T23081] loop1: detected capacity change from 0 to 8 [ 1624.372397][T23078] loop6: detected capacity change from 0 to 512 [ 1624.427654][T23078] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1625.053957][ T4899] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1625.215735][ T4899] usb 4-1: Using ep0 maxpacket: 8 [ 1625.236648][ T4899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1625.286413][ T4899] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1625.332826][ T4899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.371583][ T4899] usb 4-1: config 0 descriptor?? [ 1625.475747][T23068] loop0: detected capacity change from 0 to 32768 [ 1625.542551][T23068] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 1625.601695][T23068] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1625.616641][ T4899] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1625.823194][T23068] XFS (loop0): Ending clean mount [ 1625.899097][T23068] XFS (loop0): Quotacheck needed: Please wait. [ 1625.948079][T23161] loop2: detected capacity change from 0 to 1024 [ 1626.097068][T23068] XFS (loop0): Quotacheck: Done. [ 1626.242627][T23102] loop1: detected capacity change from 0 to 32768 [ 1626.336665][T23102] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.16235 (23102) [ 1626.426733][T23102] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1626.446111][ T5968] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1626.511271][T23102] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1626.840924][T23212] sg_write: process 1346 (syz.2.16255) changed security contexts after opening file descriptor, this is not allowed. [ 1626.944063][T23102] BTRFS info (device loop1): enabling ssd optimizations [ 1626.984723][T23102] BTRFS info (device loop1): enabling free space tree [ 1627.063343][T23102] BTRFS info (device loop1): use zstd compression, level 3 [ 1627.270987][ T30] audit: type=1800 audit(1698.668:484): pid=23102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.16235" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 1627.376907][T23228] netlink: 20 bytes leftover after parsing attributes in process `syz.6.16259'. [ 1627.638558][T23238] loop0: detected capacity change from 0 to 128 [ 1627.650038][T19675] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1627.727040][T23238] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1627.813470][ T4899] usb 4-1: USB disconnect, device number 108 [ 1628.094717][ T5968] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1628.499714][T23284] lo: entered promiscuous mode [ 1628.517623][T23282] loop0: detected capacity change from 0 to 2048 [ 1628.540883][T23284] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1628.673222][T23294] netlink: 'syz.3.16272': attribute type 1 has an invalid length. [ 1628.687347][T23295] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1628.735877][T23294] netlink: 216 bytes leftover after parsing attributes in process `syz.3.16272'. [ 1629.059719][T23307] loop9: detected capacity change from 0 to 512 [ 1629.136788][T23307] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1629.186949][T23307] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c018, mo2=0082] [ 1629.196399][T23235] loop2: detected capacity change from 0 to 32768 [ 1629.236689][T23307] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1629.329950][T23307] EXT4-fs error (device loop9): ext4_quota_enable:7128: inode #15: comm syz.9.16275: iget: bad i_size value: 360287970189639690 [ 1629.335863][T23235] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.16261 (23235) [ 1629.383154][T23301] loop6: detected capacity change from 0 to 4096 [ 1629.430007][T23235] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1629.435928][T23307] EXT4-fs error (device loop9): ext4_quota_enable:7131: comm syz.9.16275: Bad quota inode: 15, type: 2 [ 1629.502558][T23235] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 1629.562818][T23330] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1629.596846][T23307] EXT4-fs warning (device loop9): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 1629.637791][T23307] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 1629.764570][T23307] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1630.030597][T23235] BTRFS info (device loop2): enabling ssd optimizations [ 1630.111842][T23235] BTRFS info (device loop2): enabling free space tree [ 1630.208988][ T3594] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1630.273638][ T30] audit: type=1800 audit(1701.817:485): pid=23235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.16261" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 1630.350283][ T6128] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1630.475216][ T4201] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1630.546417][ T6128] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1630.561696][T23383] loop6: detected capacity change from 0 to 512 [ 1630.596233][ T6128] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1630.602530][T23383] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1630.685925][ T6128] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1630.720117][T23383] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 1630.728135][ T6128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1630.828032][ T6128] usb 4-1: SerialNumber: syz [ 1630.895203][T23383] System zones: 1-12 [ 1630.899371][T23383] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1630.942473][T23383] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.16288: invalid indirect mapped block 12 (level 1) [ 1631.052572][T23383] EXT4-fs (loop6): Remounting filesystem read-only [ 1631.109537][T23383] EXT4-fs (loop6): 1 truncate cleaned up [ 1631.133036][T23383] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1631.165029][ T6128] usb 4-1: 0:2 : does not exist [ 1631.196624][ T6128] usb 4-1: unit 255 not found! [ 1631.290452][T23414] comedi comedi3: pcl730: I/O port conflict (0x4f27,4) [ 1631.344154][ T6128] usb 4-1: USB disconnect, device number 109 [ 1631.370744][T23383] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16288'. [ 1631.477135][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1631.536134][T23434] comedi comedi3: pcl812: I/O port conflict (0x4f27,16) [ 1631.620820][T14163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1632.179284][T23458] loop3: detected capacity change from 0 to 8 [ 1632.233106][T23462] loop0: detected capacity change from 0 to 64 [ 1632.274755][T23458] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1632.300294][T23458] SQUASHFS error: Failed to read block 0x4ef: -5 [ 1632.346953][T23458] SQUASHFS error: Unable to read metadata cache entry [4ed] [ 1632.403285][T23478] SQUASHFS error: Unable to read metadata cache entry [4ed] [ 1632.422117][T23462] syz.0.16302: attempt to access beyond end of device [ 1632.422117][T23462] loop0: rw=2049, sector=73, nr_sectors = 89 limit=64 [ 1632.483498][T23458] SQUASHFS error: Unable to read inode 0x50087 [ 1632.547661][T23478] SQUASHFS error: Unable to read inode 0x500a7 [ 1632.933508][ T10] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 1632.992255][T23406] loop2: detected capacity change from 0 to 32768 [ 1633.115841][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1633.150773][T23406] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 1633.198548][ T10] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1633.245490][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.300388][ T10] usb 10-1: Product: syz [ 1633.330815][ T10] usb 10-1: Manufacturer: syz [ 1633.359577][ T10] usb 10-1: SerialNumber: syz [ 1633.442680][ T10] usb 10-1: config 0 descriptor?? [ 1633.509203][ T4201] ocfs2: Unmounting device (7,2) on (node local) [ 1633.764275][T23541] loop0: detected capacity change from 0 to 2048 [ 1633.810979][T23541] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1633.887240][T23541] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1633.935820][T23541] UDF-fs: Scanning with blocksize 512 failed [ 1633.993912][ T10] usb 10-1: USB disconnect, device number 12 [ 1634.009639][T23568] comedi comedi3: pcl812: I/O port conflict (0x4f27,16) [ 1634.055055][T23541] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1634.421135][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1634.458558][T23601] loop2: detected capacity change from 0 to 64 [ 1634.504714][T23599] loop6: detected capacity change from 0 to 512 [ 1634.679629][T23599] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1634.745543][T23599] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1634.856908][T23599] Quota error (device loop6): find_block_dqentry: Quota for id 0 referenced but not present [ 1634.902973][T23599] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1634.966997][T23599] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.16325: Failed to acquire dquot type 1 [ 1635.031974][T23624] loop2: detected capacity change from 0 to 256 [ 1635.071532][T23599] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.16325: bg 0: block 40: padding at end of block bitmap is not set [ 1635.120143][T23631] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.16329'. [ 1635.153625][T23627] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.16329'. [ 1635.158100][T23599] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1635.173274][T23624] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 1635.236380][T23599] EXT4-fs (loop6): 1 truncate cleaned up [ 1635.270599][T23599] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1635.357468][T23635] loop1: detected capacity change from 0 to 512 [ 1635.450641][T23599] EXT4-fs error (device loop6): ext4_get_link:106: inode #16: comm syz.6.16325: bad symlink. [ 1635.513614][T23643] netlink: 104 bytes leftover after parsing attributes in process `syz.3.16335'. [ 1635.529266][T23647] EXT4-fs error (device loop6): ext4_get_link:106: inode #16: comm syz.6.16325: bad symlink. [ 1635.529836][T23635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1635.699841][T14163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1636.073069][T19675] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1636.323910][T23673] loop2: detected capacity change from 0 to 4096 [ 1636.376094][T23673] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 1636.610092][T23673] ntfs3(loop2): ino=1d, mi_enum_attr [ 1636.615798][T23673] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1636.658974][T23673] ntfs3(loop2): ino=1d, mi_enum_attr [ 1636.741597][T23673] ntfs3(loop2): ino=1d, mi_enum_attr [ 1636.751722][T23623] loop9: detected capacity change from 0 to 32768 [ 1636.812323][T23623] ERROR: (device loop9): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 1636.812323][T23623] [ 1636.871425][T23623] ERROR: (device loop9): remounting filesystem as read-only [ 1636.950864][ T10] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1637.172719][ T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1637.214302][ T10] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1637.294150][ T10] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1637.353726][ T10] usb 2-1: config 220 has no interface number 2 [ 1637.416706][T23727] loop0: detected capacity change from 0 to 64 [ 1637.417903][ T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1637.505429][ T10] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1637.560972][ T10] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1637.606716][ T10] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1637.621198][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1637.695122][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.703130][ T10] usb 2-1: Product: syz [ 1637.768292][ T10] usb 2-1: Manufacturer: syz [ 1637.800080][ T10] usb 2-1: SerialNumber: syz [ 1637.908466][T23664] loop6: detected capacity change from 0 to 32768 [ 1638.031954][T23664] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1638.082244][ T10] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1638.144308][ T10] usb 2-1: No valid video chain found. [ 1638.145209][T23664] XFS (loop6): Ending clean mount [ 1638.149844][ T10] usb 2-1: selecting invalid altsetting 0 [ 1638.200401][ T10] usb 2-1: selecting invalid altsetting 0 [ 1638.206257][ T10] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1638.255363][ T10] usb 2-1: USB disconnect, device number 125 [ 1638.314974][T23664] XFS (loop6): Quotacheck needed: Please wait. [ 1638.508978][T23664] XFS (loop6): Quotacheck: Done. [ 1638.799369][T14163] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1639.048807][T23726] loop3: detected capacity change from 0 to 32768 [ 1639.098090][T23726] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.16353 (23726) [ 1639.228927][ T30] audit: type=1326 audit(1711.224:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23806 comm="syz.9.16366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2353b8ebe9 code=0x0 [ 1639.230109][T23726] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1639.399362][T23726] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1639.530142][T23738] loop2: detected capacity change from 0 to 32768 [ 1639.638327][T23738] (syz.2.16356,23738,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1639.713145][T23738] (syz.2.16356,23738,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1639.794026][T23726] BTRFS info (device loop3): enabling ssd optimizations [ 1639.795189][T23738] (syz.2.16356,23738,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 1639.807830][T23726] BTRFS info (device loop3): enabling free space tree [ 1639.822725][T23726] BTRFS info (device loop3): use zstd compression, level 3 [ 1639.969922][T23842] loop6: detected capacity change from 0 to 256 [ 1639.987119][T23738] JBD2: Ignoring recovery information on journal [ 1640.021976][T23842] exfat: Deprecated parameter 'namecase' [ 1640.074256][T23797] warn_alloc: 1 callbacks suppressed [ 1640.074278][T23797] syz.1.16365: vmalloc error: size 26542080, failed to allocated page array size 51840, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 1640.186763][T23842] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1640.212297][T23797] ,cpuset=/,mems_allowed=0-1 [ 1640.247152][T23738] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1640.294627][T23797] CPU: 0 UID: 0 PID: 23797 Comm: syz.1.16365 Not tainted syzkaller #0 PREEMPT(full) [ 1640.294662][T23797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1640.294678][T23797] Call Trace: [ 1640.294688][T23797] [ 1640.294700][T23797] dump_stack_lvl+0x189/0x250 [ 1640.294740][T23797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1640.294771][T23797] ? __pfx__printk+0x10/0x10 [ 1640.294808][T23797] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1640.294838][T23797] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1640.294869][T23797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1640.294898][T23797] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1640.294932][T23797] warn_alloc+0x214/0x310 [ 1640.294979][T23797] ? __pfx_warn_alloc+0x10/0x10 [ 1640.295026][T23797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1640.295056][T23797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1640.295084][T23797] ? __get_vm_area_node+0x28f/0x300 [ 1640.295120][T23797] ? vb2_vmalloc_alloc+0xef/0x340 [ 1640.295149][T23797] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1640.295223][T23797] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1640.295267][T23797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1640.295294][T23797] ? __kasan_kmalloc+0x93/0xb0 [ 1640.295332][T23797] vmalloc_user_noprof+0xad/0xf0 [ 1640.295370][T23797] ? vb2_vmalloc_alloc+0xef/0x340 [ 1640.295398][T23797] vb2_vmalloc_alloc+0xef/0x340 [ 1640.295424][T23797] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1640.295451][T23797] __vb2_queue_alloc+0x9c2/0x15a0 [ 1640.295523][T23797] vb2_core_reqbufs+0xc31/0x1420 [ 1640.295568][T23797] ? kfree+0x18e/0x440 [ 1640.295622][T23797] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1640.295674][T23797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1640.295703][T23797] ? vb2_verify_memory_type+0x1fc/0x570 [ 1640.295746][T23797] vb2_ioctl_reqbufs+0x4c0/0x830 [ 1640.295803][T23797] __video_do_ioctl+0xc9b/0xdb0 [ 1640.295844][T23797] ? __pfx___video_do_ioctl+0x10/0x10 [ 1640.295888][T23797] video_usercopy+0x871/0x14f0 [ 1640.295929][T23797] ? __pfx___video_do_ioctl+0x10/0x10 [ 1640.295955][T23797] ? __pfx_video_usercopy+0x10/0x10 [ 1640.295996][T23797] ? __fget_files+0x2a/0x420 [ 1640.296039][T23797] ? __fget_files+0x2a/0x420 [ 1640.296077][T23797] ? __fget_files+0x3a0/0x420 [ 1640.296121][T23797] v4l2_ioctl+0x18d/0x1e0 [ 1640.296147][T23797] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1640.296172][T23797] __se_sys_ioctl+0xfc/0x170 [ 1640.296208][T23797] do_syscall_64+0xfa/0x3b0 [ 1640.296247][T23797] ? lockdep_hardirqs_on+0x9c/0x150 [ 1640.296283][T23797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.296308][T23797] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1640.296337][T23797] ? exc_page_fault+0x9f/0xf0 [ 1640.296376][T23797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.296401][T23797] RIP: 0033:0x7fcf70b8ebe9 [ 1640.296424][T23797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1640.296445][T23797] RSP: 002b:00007fcf71a9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1640.296473][T23797] RAX: ffffffffffffffda RBX: 00007fcf70db5fa0 RCX: 00007fcf70b8ebe9 [ 1640.296493][T23797] RDX: 0000200000000040 RSI: 00000000c0145608 RDI: 0000000000000003 [ 1640.296511][T23797] RBP: 00007fcf70c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1640.296528][T23797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1640.296557][T23797] R13: 00007fcf70db6038 R14: 00007fcf70db5fa0 R15: 00007ffff1566bc8 [ 1640.296597][T23797] [ 1640.296608][T23797] Mem-Info: [ 1640.316414][T15415] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1640.729861][T23857] loop0: detected capacity change from 0 to 2048 [ 1640.780693][T23797] active_anon:18431 inactive_anon:1 isolated_anon:0 [ 1640.780693][T23797] active_file:8432 inactive_file:48385 isolated_file:0 [ 1640.780693][T23797] unevictable:768 dirty:348 writeback:0 [ 1640.780693][T23797] slab_reclaimable:11786 slab_unreclaimable:109351 [ 1640.780693][T23797] mapped:36279 shmem:10035 pagetables:2053 [ 1640.780693][T23797] sec_pagetables:0 bounce:0 [ 1640.780693][T23797] kernel_misc_reclaimable:0 [ 1640.780693][T23797] free:1248300 free_pcp:16983 free_cma:0 [ 1640.951744][T23857] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1641.049192][ T4201] ocfs2: Unmounting device (7,2) on (node local) [ 1641.075914][T23797] Node 0 active_anon:73424kB inactive_anon:4kB active_file:33728kB inactive_file:193340kB unevictable:2236kB isolated(anon):0kB isolated(file):0kB mapped:145316kB dirty:1392kB writeback:0kB shmem:38604kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13600kB pagetables:7852kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1641.237701][T23797] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1641.398719][T23797] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1641.513277][T23797] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 1641.529224][T23797] Node 0 DMA32 free:1084052kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:72148kB inactive_anon:4kB active_file:33728kB inactive_file:191228kB unevictable:1732kB writepending:1468kB present:3129332kB managed:2557452kB mlocked:196kB bounce:0kB free_pcp:46212kB local_pcp:17724kB free_cma:0kB [ 1641.626870][T23890] (unnamed net_device) (uninitialized): (slave wg2): Device is not bonding slave [ 1641.648754][T23797] lowmem_reserve[]: 0 0 1 1 1 [ 1641.653522][T23797] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1641.692177][T23890] (unnamed net_device) (uninitialized): option active_slave: invalid value (wg2) [ 1641.751721][T23797] lowmem_reserve[]: 0 0 0 0 0 [ 1641.796048][T23797] Node 1 Normal free:3888420kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:26268kB local_pcp:7512kB free_cma:0kB [ 1641.931292][T23797] lowmem_reserve[]: 0 0 0 0 0 [ 1641.971108][T23797] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1642.047593][T23797] Node 0 DMA32: 1307*4kB (UM) 632*8kB (ME) 250*16kB (ME) 9*32kB (UME) 3*64kB (UE) 92*128kB (UME) 24*256kB (M) 231*512kB (UME) 127*1024kB (UM) 3*2048kB (U) 198*4096kB (M) = 1098156kB [ 1642.132977][T23797] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1642.183227][T23797] Node 1 Normal: 189*4kB (UE) 60*8kB (UME) 49*16kB (UME) 218*32kB (UME) 62*64kB (UME) 11*128kB (UE) 7*256kB (UME) 5*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 943*4096kB (UM) = 3888420kB [ 1642.287983][T23797] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1642.363610][T23797] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1642.402882][T23797] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1642.456395][T23908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16382'. [ 1642.522030][T23797] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1642.542993][T23914] sg_write: data in/out 16514940/4 bytes for SCSI command 0x1c-- guessing data in; [ 1642.542993][T23914] program syz.6.16383 not setting count and/or reply_len properly [ 1642.602794][T23797] 57934 total pagecache pages [ 1642.602855][T23797] 1 pages in swap cache [ 1642.602867][T23797] Free swap = 124992kB [ 1642.602879][T23797] Total swap = 124996kB [ 1642.602893][T23797] 2097051 pages RAM [ 1642.602905][T23797] 0 pages HighMem/MovableOnly [ 1642.602917][T23797] 425662 pages reserved [ 1642.602928][T23797] 0 pages cma reserved [ 1642.814197][T23923] loop2: detected capacity change from 0 to 512 [ 1642.826485][T23923] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1642.826510][T23923] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1642.858271][T23923] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.16385: bad orphan inode 131083 [ 1642.915818][T23923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1643.091879][T23939] loop3: detected capacity change from 0 to 2048 [ 1643.118987][T23939] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1643.143989][T23939] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16389'. [ 1643.185625][ T4201] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1643.508004][T23915] tty tty38: ldisc open failed (-12), clearing slot 37 [ 1644.573360][ T30] audit: type=1326 audit(1716.840:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23998 comm="syz.6.16405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79bf8ebe9 code=0x7ffc0000 [ 1644.611802][T24004] loop9: detected capacity change from 0 to 512 [ 1644.695465][ T30] audit: type=1326 audit(1716.840:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23998 comm="syz.6.16405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79bf8ebe9 code=0x7ffc0000 [ 1644.777201][T24004] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.16406: bg 0: block 248: padding at end of block bitmap is not set [ 1644.819830][ T30] audit: type=1326 audit(1716.851:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23998 comm="syz.6.16405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd79bf8ebe9 code=0x7ffc0000 [ 1644.842305][ T30] audit: type=1326 audit(1716.851:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23998 comm="syz.6.16405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79bf8ebe9 code=0x7ffc0000 [ 1644.865184][ T30] audit: type=1326 audit(1716.851:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23998 comm="syz.6.16405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79bf8ebe9 code=0x7ffc0000 [ 1644.887331][ T30] audit: type=1326 audit(1716.851:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23998 comm="syz.6.16405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fd79bf8ebe9 code=0x7ffc0000 [ 1644.928575][T24011] loop1: detected capacity change from 0 to 64 [ 1644.959887][T24011] Non-string source [ 1644.965306][ T30] audit: type=1326 audit(1716.851:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23998 comm="syz.6.16405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79bf8ebe9 code=0x7ffc0000 [ 1644.981219][T24004] Quota error (device loop9): write_blk: dquota write failed [ 1644.988739][ T30] audit: type=1326 audit(1716.851:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23998 comm="syz.6.16405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79bf8ebe9 code=0x7ffc0000 [ 1645.119091][T24004] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1645.223487][T24004] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.16406: Failed to acquire dquot type 1 [ 1645.351617][T24004] EXT4-fs (loop9): 1 truncate cleaned up [ 1645.396989][T24004] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1645.477478][T24026] ALSA: mixer_oss: invalid OSS volume '' [ 1645.621287][T24004] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.16406: Failed to acquire dquot type 1 [ 1645.722858][T23965] loop0: detected capacity change from 0 to 32768 [ 1645.790055][T23965] [ 1645.790055][T23965] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1645.790055][T23965] [ 1645.877567][ T3594] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1645.889700][T24039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16413'. [ 1645.908900][T23965] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 1645.908900][T23965] [ 1646.049220][T23993] loop2: detected capacity change from 0 to 32768 [ 1646.109120][T23993] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.16403 (23993) [ 1646.229879][T23993] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1646.290833][T23993] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 1646.327676][ T13] [ 1646.327676][ T13] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1646.327676][ T13] [ 1646.382575][ T13] [ 1646.382575][ T13] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1646.382575][ T13] [ 1646.455276][ T5968] [ 1646.455276][ T5968] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1646.455276][ T5968] [ 1646.507978][ T111] [ 1646.507978][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1646.507978][ T111] [ 1646.606206][ T5968] [ 1646.606206][ T5968] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1646.606206][ T5968] [ 1646.744725][T23993] BTRFS info (device loop2): enabling ssd optimizations [ 1646.751718][T23993] BTRFS info (device loop2): enabling free space tree [ 1646.801620][T23993] BTRFS info (device loop2): use zstd compression, level 3 [ 1647.117528][T24097] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.16423'. [ 1647.184961][ T4201] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1647.782927][T24120] netlink: 20 bytes leftover after parsing attributes in process `syz.6.16429'. [ 1647.960854][T24126] loop0: detected capacity change from 0 to 64 [ 1648.203346][T24053] loop9: detected capacity change from 0 to 32768 [ 1648.263176][T24053] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.16414 (24053) [ 1648.383019][T24053] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1648.445469][T24053] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm [ 1648.900170][T24053] BTRFS info (device loop9): rebuilding free space tree [ 1648.978592][T24053] BTRFS info (device loop9): enabling ssd optimizations [ 1649.028127][T24053] BTRFS info (device loop9): turning on async discard [ 1649.048836][T24053] BTRFS info (device loop9): enabling free space tree [ 1649.088444][T24053] BTRFS info (device loop9): force clearing of disk cache [ 1649.113905][T24053] BTRFS info (device loop9): enabling auto defrag [ 1649.113937][T24053] BTRFS info (device loop9): force zlib compression, level 3 [ 1649.113964][T24053] BTRFS info (device loop9): max_inline set to 5 [ 1649.345678][ T3594] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1649.464244][T24118] loop3: detected capacity change from 0 to 32768 [ 1649.573248][T24118] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 865646dc-9362-4adb-82b0-0f28c122dc60 [ 1649.584264][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1649.584284][ T30] audit: type=1326 audit(1722.079:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24192 comm="syz.2.16440" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f002af8ebe9 code=0x0 [ 1649.659362][T24118] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.16428 (24118) [ 1649.824663][T24118] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1649.892905][T24118] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 1650.003177][T24212] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16441'. [ 1650.235812][T24118] BTRFS info (device loop3): rebuilding free space tree [ 1650.268460][T24235] ptrace attach of "./syz-executor exec"[19675] was attempted by ""[24235] [ 1650.308649][T24118] BTRFS info (device loop3): disabling free space tree [ 1650.346718][T24118] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1650.396380][T24118] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1650.498283][T24118] BTRFS info (device loop3): setting nodatasum [ 1650.506516][T24118] BTRFS info (device loop3): setting nodatacow [ 1650.512698][T24118] BTRFS info (device loop3): force clearing of disk cache [ 1650.531156][T24237] pimreg: entered allmulticast mode [ 1650.598068][T24118] BTRFS info (device loop3): doing ref verification [ 1650.656310][T24237] pimreg: left allmulticast mode [ 1650.960775][T15415] BTRFS info (device loop3): last unmount of filesystem 865646dc-9362-4adb-82b0-0f28c122dc60 [ 1651.023160][T24262] loop6: detected capacity change from 0 to 256 [ 1651.368835][T24262] FAT-fs (loop6): Directory bread(block 64) failed [ 1651.384513][T24262] FAT-fs (loop6): Directory bread(block 65) failed [ 1651.391235][T24262] FAT-fs (loop6): Directory bread(block 66) failed [ 1651.473660][T24285] loop9: detected capacity change from 0 to 256 [ 1651.482690][T24262] FAT-fs (loop6): Directory bread(block 67) failed [ 1651.544505][T24262] FAT-fs (loop6): Directory bread(block 68) failed [ 1651.611186][T24262] FAT-fs (loop6): Directory bread(block 69) failed [ 1651.617859][T24262] FAT-fs (loop6): Directory bread(block 70) failed [ 1651.686691][T24285] FAT-fs (loop9): Directory bread(block 64) failed [ 1651.694679][T24285] FAT-fs (loop9): Directory bread(block 65) failed [ 1651.716049][T24262] FAT-fs (loop6): Directory bread(block 71) failed [ 1651.722725][T24262] FAT-fs (loop6): Directory bread(block 72) failed [ 1651.745362][T24285] FAT-fs (loop9): Directory bread(block 66) failed [ 1651.751956][T24285] FAT-fs (loop9): Directory bread(block 67) failed [ 1651.791985][T24262] FAT-fs (loop6): Directory bread(block 73) failed [ 1651.821502][T24285] FAT-fs (loop9): Directory bread(block 68) failed [ 1651.828090][T24285] FAT-fs (loop9): Directory bread(block 69) failed [ 1651.872821][T24285] FAT-fs (loop9): Directory bread(block 70) failed [ 1651.914725][T24285] FAT-fs (loop9): Directory bread(block 71) failed [ 1651.954822][T24285] FAT-fs (loop9): Directory bread(block 72) failed [ 1651.961394][T24285] FAT-fs (loop9): Directory bread(block 73) failed [ 1653.485438][T24368] usb usb8: usbfs: process 24368 (syz.6.16477) did not claim interface 0 before use [ 1653.521022][ T6128] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1653.721217][ T6128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1653.772689][ T6128] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1653.778659][T24302] loop3: detected capacity change from 0 to 40427 [ 1653.814985][ T6128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.851186][ T6128] usb 3-1: config 0 descriptor?? [ 1653.870706][T24356] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1653.903782][T24302] F2FS-fs: heap/no_heap options were deprecated [ 1653.942579][T24302] F2FS-fs (loop3): build fault injection rate: 19 [ 1653.994657][T24302] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 1654.047176][T24302] F2FS-fs (loop3): invalid crc value [ 1654.090780][T24302] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 1654.129350][T24398] netlink: 16 bytes leftover after parsing attributes in process `syz.9.16483'. [ 1654.355629][T24302] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0 [ 1654.358387][ T6128] ryos 0003:1E7D:3138.0008: unknown main item tag 0x0 [ 1654.421353][ T6128] ryos 0003:1E7D:3138.0008: unknown main item tag 0x1 [ 1654.428177][ T6128] ryos 0003:1E7D:3138.0008: unknown main item tag 0x0 [ 1654.466479][T24302] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1654.486030][T24415] loop6: detected capacity change from 0 to 128 [ 1654.488135][T32696] Bluetooth: hci0: command 0x0405 tx timeout [ 1654.511588][ T6128] ryos 0003:1E7D:3138.0008: hidraw0: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.2-1/input0 [ 1654.556634][T24415] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1654.571532][T24302] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1654.581889][ T6128] usb 3-1: USB disconnect, device number 110 [ 1654.601433][T24421] loop1: detected capacity change from 0 to 128 [ 1654.617038][T24415] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1654.747003][T24421] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1654.789832][T24444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16489'. [ 1655.079899][T19675] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1655.155254][ T65] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1655.209221][T24447] fido_id[24447]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1656.063029][T24493] xt_policy: too many policy elements [ 1656.572109][T24518] loop3: detected capacity change from 0 to 512 [ 1656.685139][T24518] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1656.837901][T24518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1656.883097][T24542] netlink: 24 bytes leftover after parsing attributes in process `syz.9.16514'. [ 1656.918986][T24544] IPVS: sync thread started: state = MASTER, mcast_ifn = ipvlan1, syncid = 4, id = 0 [ 1657.086048][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1657.104963][T15415] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1657.540189][T24568] loop0: detected capacity change from 0 to 64 [ 1657.815415][T24583] loop9: detected capacity change from 0 to 2048 [ 1657.939077][T24597] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1658.220958][T24597] NILFS (loop9): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1658.292129][T24597] NILFS error (device loop9): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1658.483048][T24597] Remounting filesystem read-only [ 1658.548953][ T3594] NILFS (loop9): disposed unprocessed dirty file(s) when stopping log writer [ 1659.091372][T24628] loop0: detected capacity change from 0 to 4096 [ 1659.177694][T24628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1659.322138][T24628] fs-verity (loop0, inode 16): Unknown hash algorithm number: 0 [ 1659.504932][ T5968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1659.579991][T24578] loop3: detected capacity change from 0 to 32768 [ 1659.692132][T24588] loop2: detected capacity change from 0 to 32768 [ 1659.915575][T24588] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1660.013154][T24588] (syz.2.16528,24588,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 1660.097852][T24588] (syz.2.16528,24588,0):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2 [ 1660.207467][T24588] (syz.2.16528,24588,1):ocfs2_mknod:301 ERROR: status = -2 [ 1660.226028][T24588] (syz.2.16528,24588,1):ocfs2_mknod:505 ERROR: status = -2 [ 1660.257865][T24588] (syz.2.16528,24588,1):ocfs2_create:678 ERROR: status = -2 [ 1660.470485][ T4201] ocfs2: Unmounting device (7,2) on (node local) [ 1660.851549][T24650] loop1: detected capacity change from 0 to 40427 [ 1660.889480][T24650] F2FS-fs: heap/no_heap options were deprecated [ 1660.966838][T24650] F2FS-fs (loop1): invalid crc value [ 1661.108838][ T4900] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1661.300491][ T4900] usb 10-1: Using ep0 maxpacket: 8 [ 1661.337237][ T4900] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1661.379000][ T4900] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1661.397850][T24650] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1661.424055][T24710] loop3: detected capacity change from 0 to 4096 [ 1661.424245][ T4900] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.475070][T24650] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1661.490767][ T4900] usb 10-1: config 0 descriptor?? [ 1661.519419][T24710] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1661.552111][T24710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1661.624480][T24726] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 232: padding at end of block bitmap is not set [ 1661.696412][T24669] loop0: detected capacity change from 0 to 40427 [ 1661.741314][T24669] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 1661.767661][T24669] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1661.789910][T19675] syz-executor: attempt to access beyond end of device [ 1661.789910][T19675] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1661.830068][T24669] F2FS-fs (loop0): build fault injection rate: 17008 [ 1661.856316][T19675] CPU: 0 UID: 0 PID: 19675 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1661.856350][T19675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1661.856366][T19675] Call Trace: [ 1661.856376][T19675] [ 1661.856387][T19675] dump_stack_lvl+0x189/0x250 [ 1661.856428][T19675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1661.856459][T19675] ? __pfx_queue_work_on+0x10/0x10 [ 1661.856484][T19675] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1661.856520][T19675] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1661.856568][T19675] f2fs_handle_critical_error+0x37c/0x540 [ 1661.856615][T19675] f2fs_write_end_io+0x886/0xb60 [ 1661.856662][T19675] __submit_merged_bio+0x27a/0x6a0 [ 1661.856706][T19675] __submit_merged_write_cond+0x255/0x530 [ 1661.856750][T19675] f2fs_write_data_pages+0x261d/0x3000 [ 1661.856836][T19675] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1661.856928][T19675] ? __mod_zone_page_state+0xd7/0x140 [ 1661.856976][T19675] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1661.857004][T19675] ? folios_put_refs+0x560/0x640 [ 1661.857047][T19675] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1661.857075][T19675] ? __lock_acquire+0xab9/0xd20 [ 1661.857122][T19675] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1661.857151][T19675] ? do_raw_spin_lock+0x121/0x290 [ 1661.857189][T19675] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1661.857222][T19675] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1661.857250][T19675] ? do_raw_spin_unlock+0x122/0x240 [ 1661.857283][T19675] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1661.857324][T19675] do_writepages+0x32e/0x550 [ 1661.857364][T19675] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1661.857398][T19675] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1661.857426][T19675] ? do_raw_spin_unlock+0x122/0x240 [ 1661.857464][T19675] filemap_fdatawrite+0x199/0x240 [ 1661.857499][T19675] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1661.857584][T19675] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1661.857619][T19675] ? do_raw_spin_unlock+0x122/0x240 [ 1661.857656][T19675] f2fs_sync_dirty_inodes+0x31f/0x830 [ 1661.857701][T19675] f2fs_write_checkpoint+0x95a/0x1df0 [ 1661.857758][T19675] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1661.857842][T19675] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 1661.857868][T19675] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1661.857895][T19675] ? kfree+0x18e/0x440 [ 1661.857928][T19675] ? kill_f2fs_super+0x298/0x6c0 [ 1661.857961][T19675] kill_f2fs_super+0x2c3/0x6c0 [ 1661.857995][T19675] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1661.858018][T19675] ? radix_tree_delete_item+0x2b6/0x400 [ 1661.858062][T19675] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1661.858090][T19675] ? shrinker_free+0x2ce/0x3e0 [ 1661.858122][T19675] deactivate_locked_super+0xbc/0x130 [ 1661.858155][T19675] cleanup_mnt+0x425/0x4c0 [ 1661.858183][T19675] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1661.858210][T19675] ? lockdep_hardirqs_on+0x9c/0x150 [ 1661.858250][T19675] task_work_run+0x1d4/0x260 [ 1661.858289][T19675] ? __pfx_task_work_run+0x10/0x10 [ 1661.858320][T19675] ? __x64_sys_umount+0x122/0x160 [ 1661.858361][T19675] ? exit_to_user_mode_loop+0x40/0x110 [ 1661.858404][T19675] exit_to_user_mode_loop+0xec/0x110 [ 1661.858441][T19675] do_syscall_64+0x2bd/0x3b0 [ 1661.858478][T19675] ? lockdep_hardirqs_on+0x9c/0x150 [ 1661.858514][T19675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1661.858537][T19675] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1661.858565][T19675] ? exc_page_fault+0x9f/0xf0 [ 1661.858603][T19675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1661.858627][T19675] RIP: 0033:0x7fcf70b8ff17 [ 1661.858649][T19675] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1661.858671][T19675] RSP: 002b:00007ffff1565e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1661.858697][T19675] RAX: 0000000000000000 RBX: 00007fcf70c11c05 RCX: 00007fcf70b8ff17 [ 1661.858715][T19675] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffff1565f10 [ 1661.858732][T19675] RBP: 00007ffff1565f10 R08: 0000000000000000 R09: 0000000000000000 [ 1661.858748][T19675] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffff1566fa0 [ 1661.858766][T19675] R13: 00007fcf70c11c05 R14: 00000000001a7823 R15: 00007ffff1566fe0 [ 1661.858811][T19675] [ 1661.858822][T19675] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1661.902600][T24732] loop6: detected capacity change from 0 to 1024 [ 1661.918156][T24669] F2FS-fs (loop0): build fault injection type: 0x7 [ 1661.941281][ T4900] kone 0003:1E7D:2CED.0009: item fetching failed at offset 0/2 [ 1661.950105][T24669] F2FS-fs (loop0): invalid crc value [ 1662.005378][ T4900] kone 0003:1E7D:2CED.0009: parse failed [ 1662.014856][T24732] EXT4-fs: inline encryption not supported [ 1662.030591][T15415] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1662.032316][T24732] EXT4-fs: Ignoring removed i_version option [ 1662.110764][ T4900] kone 0003:1E7D:2CED.0009: probe with driver kone failed with error -22 [ 1662.460829][T24732] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1662.462227][ T4900] usb 10-1: USB disconnect, device number 13 [ 1662.502405][T24669] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1662.587792][T24669] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1662.604145][T24669] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1662.621609][T14163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1662.859722][ T5968] syz-executor: attempt to access beyond end of device [ 1662.859722][ T5968] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1662.883962][ T6128] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1662.931718][ T5968] CPU: 0 UID: 0 PID: 5968 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1662.931748][ T5968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1662.931763][ T5968] Call Trace: [ 1662.931773][ T5968] [ 1662.931783][ T5968] dump_stack_lvl+0x189/0x250 [ 1662.931827][ T5968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1662.931858][ T5968] ? __pfx_queue_work_on+0x10/0x10 [ 1662.931883][ T5968] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1662.931918][ T5968] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1662.931965][ T5968] f2fs_handle_critical_error+0x37c/0x540 [ 1662.932011][ T5968] f2fs_write_end_io+0x886/0xb60 [ 1662.932057][ T5968] __submit_merged_bio+0x27a/0x6a0 [ 1662.932100][ T5968] __submit_merged_write_cond+0x255/0x530 [ 1662.932143][ T5968] f2fs_write_data_pages+0x261d/0x3000 [ 1662.932180][ T5968] ? __lock_acquire+0xab9/0xd20 [ 1662.932256][ T5968] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1662.932293][ T5968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1662.932376][ T5968] ? __pfx_stack_trace_save+0x10/0x10 [ 1662.932411][ T5968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1662.932460][ T5968] ? kthread_stop+0x194/0x5c0 [ 1662.932487][ T5968] ? kill_f2fs_super+0x137/0x6c0 [ 1662.932509][ T5968] ? deactivate_locked_super+0xbc/0x130 [ 1662.932549][ T5968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1662.932576][ T5968] ? __lock_acquire+0xab9/0xd20 [ 1662.932631][ T5968] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1662.932672][ T5968] do_writepages+0x32e/0x550 [ 1662.932712][ T5968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1662.932744][ T5968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1662.932772][ T5968] ? do_raw_spin_unlock+0x122/0x240 [ 1662.932813][ T5968] filemap_fdatawrite+0x199/0x240 [ 1662.932849][ T5968] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1662.932932][ T5968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1662.932966][ T5968] ? do_raw_spin_unlock+0x122/0x240 [ 1662.933002][ T5968] f2fs_sync_dirty_inodes+0x31f/0x830 [ 1662.933047][ T5968] f2fs_write_checkpoint+0x95a/0x1df0 [ 1662.933102][ T5968] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1662.933184][ T5968] ? kill_f2fs_super+0x298/0x6c0 [ 1662.933216][ T5968] kill_f2fs_super+0x2c3/0x6c0 [ 1662.933249][ T5968] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1662.933271][ T5968] ? radix_tree_delete_item+0x2b6/0x400 [ 1662.933314][ T5968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1662.933342][ T5968] ? shrinker_free+0x2ce/0x3e0 [ 1662.933372][ T5968] deactivate_locked_super+0xbc/0x130 [ 1662.933405][ T5968] cleanup_mnt+0x425/0x4c0 [ 1662.933431][ T5968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1662.933458][ T5968] ? lockdep_hardirqs_on+0x9c/0x150 [ 1662.933498][ T5968] task_work_run+0x1d4/0x260 [ 1662.933535][ T5968] ? __pfx_task_work_run+0x10/0x10 [ 1662.933566][ T5968] ? __x64_sys_umount+0x122/0x160 [ 1662.933605][ T5968] ? exit_to_user_mode_loop+0x40/0x110 [ 1662.933646][ T5968] exit_to_user_mode_loop+0xec/0x110 [ 1662.933683][ T5968] do_syscall_64+0x2bd/0x3b0 [ 1662.933719][ T5968] ? lockdep_hardirqs_on+0x9c/0x150 [ 1662.933753][ T5968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1662.933777][ T5968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1662.933808][ T5968] ? exc_page_fault+0x9f/0xf0 [ 1662.933845][ T5968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1662.933870][ T5968] RIP: 0033:0x7fe19518ff17 [ 1662.933891][ T5968] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1662.933912][ T5968] RSP: 002b:00007ffde0129958 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1662.933937][ T5968] RAX: 0000000000000000 RBX: 00007fe195211c05 RCX: 00007fe19518ff17 [ 1662.933954][ T5968] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde0129a10 [ 1662.933971][ T5968] RBP: 00007ffde0129a10 R08: 0000000000000000 R09: 0000000000000000 [ 1662.933987][ T5968] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffde012aaa0 [ 1662.934004][ T5968] R13: 00007fe195211c05 R14: 00000000001a7d0f R15: 00007ffde012aae0 [ 1662.934044][ T5968] [ 1662.934054][ T5968] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1663.061519][ T6128] usb 4-1: Using ep0 maxpacket: 32 [ 1663.357829][ T6128] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1663.366920][ T6128] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1663.376427][ T6128] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1663.386195][ T6128] usb 4-1: config 1 has no interface number 0 [ 1663.396638][ T6128] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1663.416840][ T6128] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 18008, setting to 1024 [ 1663.428900][ T6128] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1663.443104][ T6128] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1663.453045][ T6128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.502178][T24761] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1663.522403][ T6128] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1663.712051][T24761] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1663.739119][ T6128] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1663.926300][ T6128] usb 4-1: USB disconnect, device number 110 [ 1663.945349][ T6128] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1664.103772][T24771] loop2: detected capacity change from 0 to 32768 [ 1664.158998][T24771] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 1664.216793][T24771] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1664.375816][ T4201] ocfs2: Unmounting device (7,2) on (node local) [ 1664.513648][T24772] loop6: detected capacity change from 0 to 40427 [ 1664.571883][T24772] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1664.611121][T24772] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1664.629761][T24826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16577'. [ 1664.684100][T24772] F2FS-fs (loop6): invalid crc value [ 1665.071506][T24772] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1665.150516][T24772] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1665.176449][T24772] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1665.375054][T24861] loop1: detected capacity change from 0 to 8 [ 1665.462251][T24861] SQUASHFS error: zstd decompression error: 10 [ 1665.514020][T24861] SQUASHFS error: zstd decompression failed, data probably corrupt [ 1665.555079][T24861] SQUASHFS error: Failed to read block 0x60: -5 [ 1665.606628][T24861] SQUASHFS error: zstd decompression error: 10 [ 1665.612818][T24861] SQUASHFS error: zstd decompression failed, data probably corrupt [ 1665.678441][T24861] SQUASHFS error: Failed to read block 0x60: -5 [ 1665.849555][T24880] /dev/nullb0: Can't open blockdev [ 1666.304719][T24905] loop1: detected capacity change from 0 to 512 [ 1666.382002][T24905] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1666.485675][T24905] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 1666.520152][T24905] System zones: 0-2, 18-18, 34-34 [ 1666.541544][T24905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1666.585085][T24924] loop2: detected capacity change from 0 to 4096 [ 1666.618665][T24924] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 1666.829275][T24924] ntfs3(loop2): Failed to load $Extend (-22). [ 1666.857396][T24924] ntfs3(loop2): Failed to initialize $Extend. [ 1666.905705][T19675] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1667.475451][T24962] loop2: detected capacity change from 0 to 512 [ 1667.544919][T24962] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 1667.577606][T24962] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1667.598298][T24962] EXT4-fs (loop2): mount failed [ 1668.176290][ T6025] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1668.352918][T25008] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 1668.385399][ T6025] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1668.413811][ T6025] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1668.473632][ T6025] usb 7-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 1668.518969][ T6025] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.626972][ T6025] usb 7-1: config 0 descriptor?? [ 1668.981564][ T10] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1669.074318][ T6025] kye 0003:0458:4018.000A: unknown main item tag 0x0 [ 1669.093697][ T6025] kye 0003:0458:4018.000A: unknown main item tag 0x0 [ 1669.103645][ T6025] kye 0003:0458:4018.000A: unknown main item tag 0x0 [ 1669.127114][ T6025] kye 0003:0458:4018.000A: unknown main item tag 0x0 [ 1669.137935][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1669.149081][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1669.156869][ T6025] kye 0003:0458:4018.000A: unknown main item tag 0x0 [ 1669.168765][ T10] usb 2-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 1669.197895][ T6025] kye 0003:0458:4018.000A: unknown main item tag 0x0 [ 1669.213977][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.227993][ T6025] kye 0003:0458:4018.000A: unknown main item tag 0x0 [ 1669.252137][T25056] comedi comedi3: pcl818: I/O port conflict (0x4f27,16) [ 1669.258784][ T10] usb 2-1: config 0 descriptor?? [ 1669.267722][ T6025] kye 0003:0458:4018.000A: hidraw0: USB HID v0.00 Device [HID 0458:4018] on usb-dummy_hcd.6-1/input0 [ 1669.310295][T25056] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN NOPTI [ 1669.322402][T25056] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 1669.330817][T25056] CPU: 0 UID: 0 PID: 25056 Comm: syz.9.16640 Not tainted syzkaller #0 PREEMPT(full) [ 1669.340269][T25056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1669.350322][T25056] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 1669.355869][T25056] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 a9 1b 36 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 88 1b 36 f9 4d 8b 24 24 48 83 c3 [ 1669.375475][T25056] RSP: 0018:ffffc9000425f9f8 EFLAGS: 00010216 [ 1669.381550][T25056] RAX: 0000000000000005 RBX: ffff888056aa8400 RCX: 0000000000080000 [ 1669.389522][T25056] RDX: ffffc9000ee4a000 RSI: 00000000000036e4 RDI: 00000000000036e5 [ 1669.397663][T25056] RBP: 0000000000000001 R08: ffff88814c3f512f R09: 1ffff1102987ea25 [ 1669.405627][T25056] R10: dffffc0000000000 R11: ffffffff88ecd870 R12: 0000000000000028 [ 1669.413593][T25056] R13: dffffc0000000000 R14: ffff88814c3f5000 R15: dffffc0000000000 [ 1669.421561][T25056] FS: 00007f2354aa96c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 1669.430485][T25056] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1669.437063][T25056] CR2: 000055fe8535a860 CR3: 0000000080b91000 CR4: 0000000000350ef0 [ 1669.445030][T25056] Call Trace: [ 1669.448297][T25056] [ 1669.451215][T25056] pcl818_detach+0x66/0xd0 [ 1669.455641][T25056] comedi_device_detach_locked+0x178/0x750 [ 1669.461456][T25056] comedi_device_attach+0x5d4/0x720 [ 1669.466660][T25056] comedi_unlocked_ioctl+0x5ff/0x1020 [ 1669.472029][T25056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1669.477667][T25056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1669.483302][T25056] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1669.489124][T25056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1669.494753][T25056] ? __lock_acquire+0xab9/0xd20 [ 1669.499625][T25056] ? __fget_files+0x2a/0x420 [ 1669.504219][T25056] ? __fget_files+0x2a/0x420 [ 1669.508817][T25056] ? __fget_files+0x3a0/0x420 [ 1669.513500][T25056] ? __fget_files+0x2a/0x420 [ 1669.518093][T25056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1669.523721][T25056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1669.529353][T25056] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1669.535157][T25056] __se_sys_ioctl+0xfc/0x170 [ 1669.539746][T25056] do_syscall_64+0xfa/0x3b0 [ 1669.544270][T25056] ? lockdep_hardirqs_on+0x9c/0x150 [ 1669.549477][T25056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1669.555535][T25056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1669.561165][T25056] ? exc_page_fault+0x9f/0xf0 [ 1669.565847][T25056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1669.571734][T25056] RIP: 0033:0x7f2353b8ebe9 [ 1669.576144][T25056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1669.595752][T25056] RSP: 002b:00007f2354aa9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1669.604174][T25056] RAX: ffffffffffffffda RBX: 00007f2353db5fa0 RCX: 00007f2353b8ebe9 [ 1669.612141][T25056] RDX: 0000200000000180 RSI: 0000000040946400 RDI: 0000000000000003 [ 1669.620109][T25056] RBP: 00007f2353c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1669.628075][T25056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1669.636039][T25056] R13: 00007f2353db6038 R14: 00007f2353db5fa0 R15: 00007ffc26c01a58 [ 1669.644019][T25056] [ 1669.647033][T25056] Modules linked in: [ 1669.652404][T25056] ---[ end trace 0000000000000000 ]--- [ 1669.660871][ T6059] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1669.708548][ T6025] usb 7-1: USB disconnect, device number 11 [ 1669.746196][T25056] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 1669.754130][T25056] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 a9 1b 36 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 88 1b 36 f9 4d 8b 24 24 48 83 c3 [ 1669.784426][T25056] RSP: 0018:ffffc9000425f9f8 EFLAGS: 00010216 [ 1669.792483][T25056] RAX: 0000000000000005 RBX: ffff888056aa8400 RCX: 0000000000080000 [ 1669.803304][T25056] RDX: ffffc9000ee4a000 RSI: 00000000000036e4 RDI: 00000000000036e5 [ 1669.813391][T25056] RBP: 0000000000000001 R08: ffff88814c3f512f R09: 1ffff1102987ea25 [ 1669.842107][T25056] R10: dffffc0000000000 R11: ffffffff88ecd870 R12: 0000000000000028 [ 1669.850584][T25065] fido_id[25065]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1669.869502][T25056] R13: dffffc0000000000 R14: ffff88814c3f5000 R15: dffffc0000000000 [ 1669.874360][ T6059] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1669.879011][T25056] FS: 00007f2354aa96c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 1669.903306][T25056] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1669.910259][T25056] CR2: 000055fe85395c78 CR3: 0000000080b91000 CR4: 0000000000350ef0 [ 1669.917041][ T6059] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1669.918305][T25056] Kernel panic - not syncing: Fatal exception [ 1669.928179][T25056] Kernel Offset: disabled