last executing test programs: 4m10.188559035s ago: executing program 0 (id=109): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt(r0, 0x1, 0x10, &(0x7f0000000000)=""/16, &(0x7f0000000040)=0x10) 4m10.067170677s ago: executing program 0 (id=110): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x67f, &(0x7f0000001340)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) 4m9.715320541s ago: executing program 0 (id=113): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x4}}}}], 0x20}, 0x0) 4m9.568810236s ago: executing program 0 (id=116): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x414, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="4b57e847ca97fe4b6468d5e3b1c8af6e644d82834f7f6415192ea618955c73aa164df482345e086f4d3eeab8150027a48e918d4fd9625eb5bbbda3abcbfb81f62a9f0bae4cdf14f1c7e660836a0ff1efeefa49a8eb3e395e0b9b42eaccbae5f0ee105aad7dee86f62c9ac34d9c489aeccbdcc43e382876a434a4a8099a697b7c86c89ef92d75b2882a9a01bf753884e7da7774a4d679a40f14baa67f2d7a6a2d0b44ae0c7a0fa9c53168755777b5237011e10adc830aedcc6714b8af1c083a8f77221e0488737fc02a13fa91c152", @ANYRES16], 0x1, 0x2ab, &(0x7f0000000440)="$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") mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) 4m9.176688344s ago: executing program 0 (id=121): r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000c80)={0x0, [[0x8, 0x80, 0x6, 0x0, 0x4], [0x1, 0x100001, 0x587c5f32], [0x4000091, 0x0, 0x0, 0x8, 0x4000, 0x0, 0x4]], '\x00', [{0x400000, 0xfffffffe}, {}, {}, {}, {0x0, 0xfffffffc}, {0x3fec7e55, 0xfffffffd}, {}, {}, {0xfffffffc}, {}, {0x6}, {0xcbe, 0x3}], '\x00', 0x1300}) 4m8.703353801s ago: executing program 0 (id=126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 4m8.369162904s ago: executing program 32 (id=126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 3m22.563461752s ago: executing program 2 (id=800): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f00000003c0)='./bus\x00', 0x8, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}, 0x7, 0x0, 0x0) 3m22.445967544s ago: executing program 2 (id=802): syz_mount_image$cramfs(&(0x7f0000000240), &(0x7f00000006c0)='./file1\x00', 0x8080, &(0x7f0000000c40)=ANY=[@ANYRES32=0x0, @ANYBLOB="961335493e171b87c5049661bc7a9dea85b0b96318f3a46c58525ebc3d0eb9ce96ac44b1d9a749f3ab7e759eff20dc0185dafc139ec785c31ae931023ad12b85c435475f8f724c4ee1329bd7bb7bb9e041f690b5cc745f75f91812f706841d08affa58f76342d7042588429261122e77ffb7828fa3d7ff668389ecdf6b9325ad15bc18a8f91df650262caa1ba865c2c41df8ea0ebfa761195cac8427b2bb312c0fa051cda8c0dd0328b36624744332fe1c7211f5565e2068fd28b30a36962cb2dec9ae6c9bed13a01ed3d029661f9550fabf581952c0b5c28f26c0fa94ac0bb7eed7642f514ce5c6b7c71813fd", @ANYBLOB="fe1ada65afa23873f6b1d264d0a41052a0b1adfb945a2e79e60d5adcc631bee7fa7f63238c179ed99ae9429d2504d554becb32bc443a12cb158ada646b32913e77819f6b0b90a91234544c3cc7fe1eb9c28edb042cad85eeb904a30bd10b4b5251a4c84a6257921ec77bc123c520c2e14694d391ee75b030a2d8255638dc6c79feadd778a2d8f9c17167d93acb3865d77d644d05f44440f26525edb97f28ed874c261a7cd969dee98a8ecef3cf9d055d3de028348f437953c239575f8686350df4ed4f3c755f9a56c5c265e7cdab9fd0c947b0d04bb1a808101ab7a0cd28b10cf85c159c737089612787ed1c780ac5a27274676baf7e62c08c736fe2805df052083cf9cb9a2891fc4d26d45c3c2ad59b0963cfe15114ae87f3c53fa0a361b5b3ad1724a859f592f788e10e8dabfc65c5e47eea2d2dba3363a0bc4007a9cbb6d252b4f27053c5cee819feed89673a66530a52b97724b28642966b294f17e574dfa28bd1314addb49a32e2fa29330b0eaca75413aa0aba3166b834d535f5f2d4d8046c16164c0e21369a8f25f5fa09fd80561530d4857a42adf60ef8fee530eb945d035e1543a06571423c51dd205a82fea11acb9e144f865e6092da4d0f9ced507ab7248a9098bd55c4db2bc1a4eb43e996fb6ef9f4ef3c931c2435c636c9048e1b4527262fdc20ab1cac3c636b1ccc41533744d627968d6124332a280d763891e47603b3d86a38f75389167223338d9a78ae3eeda3c0966ee94847fc72dfff8fe47efe74039fa4b911bf55df0f51f70b55f09584ce8d0aa5e51c8b45a29fae7f92325e6b6951cb0a248946e0099f288ede3f15992ef2b54539ad19e3e3835a656ee4b8691a5c257cf468d0f9f3283715914f87658c79579ba78dbfc15af2f2092c0b789fc1a994cb4ffbd1fa39cb4692a436285a505ed936c074f491288b487401f5813c652e8d7702434bc0fd03eaae2339078ac3c88e1e75e64722e86bacd3a36a652ef6a66e4dd921b5a06dd27d34e44e48120041c9602eea31639d106541966d7410d2edb1aefaf65f01ff9ba182f3694b1c6b6fcf85d00966bb8c58a418686eb41e40057f17eff226fac612d475720daa92f751bdfa31aae99df859418187c7eab44c3e175b314e3014a711b0c9d6954e4a25aba7b4d4c85f2308c05eef676b8d08f558ef322dd2380450674121f3fa9e0de9cc12577d936cc73efaf230cbd80bb0c2c0ef026b0d09560db91e64c93ec6097dc8e419423309735ba9dbe52cb6f7e05b1e71df7cb61b6abebfb7d6871639a65af40c358790027ac6ef9d984796a77b1f1e46f335aefe5ccb8fdf52c7bb6da6efeb7123e22b9263a671e38c39f46b52687863c101700f7b2df7185428b71470e8270d2781ae56ab9241aa82a0fb649421227763f053e02b6c9a91bb57c742f98b159ba7bdf3f54431ea30fe85517e8fbcd0e011c221e686160f574533330dc86ec663dfa9ca3f3696b3634e2c96983b2bb4a782d55c6b8d883b42d77cf6c0dea389d13380671467deaca0cb0ffebc7e274656c361102cca3fd401b226ac42b59e82ba136557fb467b88f92697f6ae767821c365e1940690facb946ade0ac5af70582fd84bb20a7c360d4803e2c8b3c9a92182f5d8971318c452b531d6c13bc66e65c456fb08fbbd0a6c3e4a09e582a3f825fe31bfce700c1aee7e7cd85c2fd56ed5637fa04e91e1e026f44e367f2487021467658bb225868bde8675dbc059f7ccc0140a4fc031696d2000445fa157d6197df35d2253a99076d9d44eb8c955b5f2fb5838d8e4e408b7b40f92b1d904a728188c9dea08b3f2481b9853388ddc42584bef56f70a44cff1c3e3fab09862046fdd133d015f6bad0814e7489d75a9987df415d66d07bf099eed7cd945f00793cc5537cb2ae06813027f2e93345a1b27edf6cc26cdc7ccb823e4ed6920dacb82ba1e99a9068c52c1594ffd6b334288a5c8361cf410ca31fee93b4c1c31c8be12ed88b460277cc7b18ee6d71f993112d87550d656be38bb1cd822421d9c63c9301f5d98f129340d4b254c8d3144a7f36b6f0a7d7cc52b95ae060c1e4a54e40df2955dd7cf8daaa59f9aff8bbd8cfd89a150e72ea9999426812f66c4b22bd3a1b5163d9f91c06a2aef2925f7885a9947b1cb26b27bed25ce6f8014721be5604575d439ee8ee6d641b0979607d74d1f7ff393993b6fc97d6b5a642ca7d148a3e045bbbb0df0c6068572c60a170bb1c5094b2c7d0495ec580afdeeb3968843020acabaf55705294d322ca42fa9d4a087e992a868fdf4bf1f259afe337eb4e4b3e9d8f8ce078e48b44ee3c77a29209d2ea33a491efe437445c2e975bc9e2a01cb7eb45a6fb9f2517c58ba3a2b12c812f2a7629bbebc35c83ce3a55e2eb2e61e56af391fcc143767ea03faf0dad569cade1868b3d971fd49247a88d41f722428f21e6b8d336f5e10cbbb907a9b76fc541a937d4ac43623829726dbace3026d8640c733c3d3dc0741adadebd4e4979a7467990f1adb949b99bc28345c676f006edc3c3fd6ca5771495e31e85dff904b781535b34a37b88fdd78b821d68ce53e5772a68208faffc722ee03f638eaa18392a29bac05cfc65cb1f870f392c74e77ad089b22c81fda27e995e981d7c3014f5299b7fdc5132d2fea0e56eae1b3c25bada52f12aa3506e7fd73116db59687b642c1f64124e725ff988c8340a6aa75dab9003212175c5c00a2dff2cbfd5c043b9fab64fba86f4526f91085f7a8b70458b9198574b7d38ae615314fe6248dc1e7403a7d9d2febf3e1ff34a227dfde44f5449661d3874d8377899ce6d4d7d18aa567b198e6a1aa287f2842caa4cbc6b7a7c5122c8106ff255d9f4949b4c283029c9f98193d8399299a3ffcc9860e160234fd3d97b86cb2ccbecfa6084e81e999b4a86148ac4a53461c9ddf0d38f47b49c52f8507cb1122074539821752206249723be114f76936a4995c486f325dfc9dcd563357b2eaa56086c7dbe799188a4fa911f4b966487b9ac84cb704699549dfe6af970e8b36b4a214052bbeed81e88b107a2c99c2abe6a4d06568cd759a5d68cf5a2206b1fd31d8ec061efe4a4abeb6279fc24b5e8f1cf24858addde17e94e5483daa751ef0ff746f742c3d2926518ba5dfa3ac2eddb4c84a053bcb4e19a242a69b2a12766c37793b954d176aa209fee224e7d0aaf28590f7bc4c855b9075fc8c71e565f2565a9c79fb81fc05cfde8fca996d75c840c234ee9982efa7e2746a21f24fd2380998d0918543f7ba61e380cc1316a64b91ddb016e24a2edc6df30ec1a7c7cdd6dfb9b257e8596f87d46a789dffc3035190484589dd5f5ec43623d0d0b20314d7ca453de64709344317f5961134ef43728d7f40f943f0104301888bbe854d349031a0ede4277e9f6268269458fbe54b58c3ee437f8cbd4d95796626e28221aea1bdabadc6be685f06603ce0fb71f5cf0c80c38e89e476119111983663303be5137e6a43dbde412fb4a580e337e1f5a73b321e2f5e7dca161edde9ad384a0eb55663e39cc5bd17a881e4a1598467916c375e923612c8198ebe1517e3b7e257fae8074e8533d7af1882b895b19c37d5e10d629b81968a8178a4bcd43648e41fe12c9ccba84a1fe9681335a45caa5b70ed0223fd79d0c6276ad698a6d9c46275ea2d9815543ab2c81f06aef89975733fae6e800739da99b3fd3b4e8c113db02c440951b5a5e4d22614204838c06f69cb409870f4e07de31090425a1a29944fcca8af25593d10a04c3e912d9a3d341fcef97ee378bd8ac335b794deb20bc4dd03b05d7aca347c02a3106df7c3d862c4971817d86145090f2e9bbd02fd09372ec8a8bab1e1495665cc102a1b61424758e9a22e8f19339093e3abc5fe846793cff081ddefd432358a3cb8970768f92765e4d1613c08b4012e8b8d43de4d71b3a66e436969367e3c30c763d87ccc3e827a2db58a05fa97dee1b49197179ddeef46adf4d10dd60bf5c2c7aa9ff6487916ec904dbfe16415ad85ea3782b6774af7d56ee75a399d390f1edd920cdf9788fdac331fdcb2290c11863724b07baa840a5bd83104c91d81355c96b8cd19dd56abab26f584cc85a33f66c2cef694b25ab2bf3b034930418665c0dbcbf126dbe63dabf5183a8dd570205bce29ac853b5ce4fbeca4d93895cfa5e333bd8bfe564f0b87e15441a5c05411dc60674691c7948b65d86ee35d15478c134372b3b2990f3e27723a3539f1da8d46761011b3a61fc8948c7ad3ce7cfd5a0e334513eb93dc63781a4944cc3354bff3d7d132fe2d4b7c4813868e0deacf726a8e91ed7fbf48e2a9757ac42cf7bf62b342587571b22f6ebe5f4134f448d5751f10693617fad5c0e4ede926f03d3588c0d9e68888a381c425a1e6b1a37e29d2c52e6b1c2310fbb28941a545ec70af0129ac9ca824c34f6b54a71c272a385de3c19fbadc452c46bce03ce693a04ab30bb6d43b75a250263aca8c52914f74d0c329ced5039bf15db523ac3e2747aa124c8d2bb16497ff9f49b29523b04fe20f22e97ad5d7a41fb1cf23a95b24e071706958e16e0b1710940037cceba6f74ba42737f080af7f5137fd56a570dfd73e932b9da386cdcddc2e5e0acf225f8e77027bd985083dabf0da3f968e0b5e4b8b07c190c5c723c5f758ba662978c40f00b056620345c9f5d6900f13612b5eef52f4dea1064b93ea89f677ab512f2ba5764e252ec36c73d7b3f98758608ed14d28d86958cad567bb7f8da5b065cbd9fb2272c0c57871edf181cbe6a9f60323b95780575d52714a6994c3a220ccaa0e7b6aade0c88d8418746246c9990a312121c1163e985236d179241c8d6ad40ef46aab3f76d2617332bd1b6612cb184c34f5652255ae60518c7be5e832230a0678c480ba302a203791fb1ffc4c7dd272d6da5cf3965a0d2a508229290da754ae244161a6cd0011af88e96dbc3f262c50b72b9b8b0ae906e71561d904f6395aefa1215da453066894aca8b419da54220aaf35ff975d4a02318d7908d4d62c3a6743f41b31ebf44d51c67a1502df9cbb6a1d8463128cb6ca4ad7918962f5e88244897437de072214b9fe2df9c71ee9e686691d8003959b3fd41f1af77b8e14d3335c4d4b83e79c9edec1fb97e206bff9aa970c4fe2659797aa6f1a3cfe13fa2f84100d89caeae6ef3ff10ab1776d189b90d6063bcd60222003f6cba3d10429da3f266af737364f01894ecc4fe4007a54fbfe31a034004fb8e9fbd63ee08bb4b1c9efb31e37e7841a7d749c77987173c94ff3e87481e3dcc6c85b544a8b51f499f99c0e3740b53514e9707dc9e60a498ee84e6ef56d5ca13b8651d80fa887cc79bda02cfc5eb4d9bf098206bf8f28a37781374c33a9317fb7cc2cab48fdcb6f77d35991442281d81fdad6ac2ad7f77f875f48b565848acd625968d70e163aab87616169288a4a7d377aca28c887b99b58611bc707627baba8e186da5b58d1ed0b4615e020fbdd1aa47c800ff537121c20317fe8550c13ad63c2a4b85351492f38bdba98bda64469dd60a046ab4c1174258d746301676bf031822a7a002822bf48c7354c5460fb238e94daa9c52b2a64b7ac8c4f42619000256944cd5af49466452df621a460f978c1a5da7da1258982b7d5834633769539f664e6096019b93d1ed7cb5d95544a7161de3cbe9a14245c26bb1b5e2576d8086be66394995650de578253faae6b3fbe146e436d3f21739f18aeb3054f510c152a4b8568eff1b332aaef46b70664d352b649c84ca8957a9ee14eaeb685da7c8e036f5cffd6387f", @ANYRESDEC, @ANYRESDEC], 0xfe, 0x14f, &(0x7f0000000ac0)="$eJzszjFLclEcx/Hf4d5HfSqToMCCTGjokph2w5qiNBKE7ELh0lJgNxIUI6Gcwoi2hqDVwQqaxLdgWYulEPYmWpwdi+M1Imhp/32Wy/mec/7nri42NXiBExe6VrKZg0MzlzN3vRtGPLr5Xq2GZbcB6PzYt87fh4F9+VWB9ikg86MT2EulzZlkNi3X7TCgAYj0Y1n2oGxDQJ9sw9bZWVj3tUmgNmI1/Zc212tjKhBxWU3O+7gGpuQ8O4BU2rRbv4d80VcpP6836jH/9N24gvOYb+Jfb++re8wLPTp6O+BWkDCfbhAR8t5boO5/DVTKrWYjvmYsAdD1eQEUgqGW8dKIhQqXULftR8CWAAS+37HB7VETDpwJ4Ko7q/0gnABqpY6RGVwo9d53HCteQOSLyR1Frv8DigYBIiIiIiIiIiIiIiIiIiKiv/oMAAD//2BhXwk=") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 3m22.255325893s ago: executing program 2 (id=819): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xa0, 0x85, 0x54, 0x20, 0x856, 0xac29, 0xa83c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0xba, 0x0, 0x0, 0x5f, 0x8e, 0xcd}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x9, 0x1, "95"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m21.460090531s ago: executing program 1 (id=823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) 3m21.391357938s ago: executing program 1 (id=824): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x3fe, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40}}, {{0xa, 0x4e24, 0x20000000, @mcast1, 0xfffff801}}}, 0x108) syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960400000001030200010006000609240305050306058109240306010104050507240405"], 0x0) 3m20.169812738s ago: executing program 2 (id=842): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x414, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="4b57e847ca97fe4b6468d5e3b1c8af6e644d82834f7f6415192ea618955c73aa164df482345e086f4d3eeab8150027a48e918d4fd9625eb5bbbda3abcbfb81f62a9f0bae4cdf14f1c7e660836a0ff1efeefa49a8eb3e395e0b9b42eaccbae5f0ee105aad7dee86f62c9ac34d9c489aeccbdcc43e382876a434a4a8099a697b7c86c89ef92d75b2882a9a01bf753884e7da7774a4d679a40f14baa67f2d7a6a2d0b44ae0c7a0fa9c53168755777b5237011e10adc830aedcc6714b8af1c083a8f77221e0488737fc02a13fa91c152", @ANYRES16], 0x1, 0x2ab, &(0x7f0000000440)="$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") mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) 3m19.971750597s ago: executing program 2 (id=843): r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r0, 0x5, &(0x7f00000008c0)={0x1, 0x0, 0x6d6e, 0xfffffffffffffffa}) 3m19.566311557s ago: executing program 1 (id=849): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x181005) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000080)=0x8000) 3m19.468810457s ago: executing program 2 (id=863): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x3fe, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40}}, {{0xa, 0x4e24, 0x20000000, @mcast1, 0xfffff801}}}, 0x108) syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960400000001030200010006000609240305050306058109240306010104050507240405"], 0x0) 3m19.319275051s ago: executing program 33 (id=863): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x3fe, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40}}, {{0xa, 0x4e24, 0x20000000, @mcast1, 0xfffff801}}}, 0x108) syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960400000001030200010006000609240305050306058109240306010104050507240405"], 0x0) 3m19.300189833s ago: executing program 1 (id=856): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x414, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="4b57e847ca97fe4b6468d5e3b1c8af6e644d82834f7f6415192ea618955c73aa164df482345e086f4d3eeab8150027a48e918d4fd9625eb5bbbda3abcbfb81f62a9f0bae4cdf14f1c7e660836a0ff1efeefa49a8eb3e395e0b9b42eaccbae5f0ee105aad7dee86f62c9ac34d9c489aeccbdcc43e382876a434a4a8099a697b7c86c89ef92d75b2882a9a01bf753884e7da7774a4d679a40f14baa67f2d7a6a2d0b44ae0c7a0fa9c53168755777b5237011e10adc830aedcc6714b8af1c083a8f77221e0488737fc02a13fa91c152", @ANYRES16], 0x1, 0x2ab, &(0x7f0000000440)="$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") mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) 3m19.065349997s ago: executing program 1 (id=858): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100000000020000000008000000", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="0d002b80080002"], 0x30}], 0x1}, 0x0) 3m18.22088066s ago: executing program 1 (id=859): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m18.21978552s ago: executing program 4 (id=869): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d000a117ea60809000af32c6e020075f800250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd7000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3m17.964992005s ago: executing program 34 (id=859): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m17.366867684s ago: executing program 4 (id=862): syz_mount_image$udf(&(0x7f0000000f40), &(0x7f0000000f80)='./file1\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYBLOB="010000006e6963622c73657373696f6e08003030303030303030303030303030303030ff352c00"], 0x1, 0xc58, &(0x7f00000000c0)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20000, 0x0, 0x0, 0x0, &(0x7f0000000100)) 3m17.066225993s ago: executing program 4 (id=866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) 3m16.865283123s ago: executing program 4 (id=868): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x414, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="4b57e847ca97fe4b6468d5e3b1c8af6e644d82834f7f6415192ea618955c73aa164df482345e086f4d3eeab8150027a48e918d4fd9625eb5bbbda3abcbfb81f62a9f0bae4cdf14f1c7e660836a0ff1efeefa49a8eb3e395e0b9b42eaccbae5f0ee105aad7dee86f62c9ac34d9c489aeccbdcc43e382876a434a4a8099a697b7c86c89ef92d75b2882a9a01bf753884e7da7774a4d679a40f14baa67f2d7a6a2d0b44ae0c7a0fa9c53168755777b5237011e10adc830aedcc6714b8af1c083a8f77221e0488737fc02a13fa91c152", @ANYRES16], 0x1, 0x2ab, &(0x7f0000000440)="$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") mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) 3m16.534899086s ago: executing program 4 (id=871): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 3m15.730782785s ago: executing program 4 (id=879): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xb, 0x2b2, &(0x7f0000000700)="$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") rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m15.492016098s ago: executing program 35 (id=879): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xb, 0x2b2, &(0x7f0000000700)="$eJzs3c9OE10Yx/HfmRYoL4R3BIyJcWFQEuPCCG6MG43pRbgyIq0JscEEMAob0bXxAtx7C16EK+MNuNKVF9CVY86ZUzqFmWmBtkfw+0lapu05M8+ZP53naUKOAPyzHta/f7rz0z6MVFFF0j0pUqKaVJV0UZdqLzd3NnZazUbZiiqyPezDKO1pjrQxauZ1tf1cDy+2r6qarQ1hfChXS6am/eLkcfsmqTfDjwrj5q7+nIs2kqb81VnRRJjYRmE/dACBmbbaeq250HEAAMLy9/8ozeQ161OBKJKWfYru8oPzkpO3QwcQWOb+7yqvxNjj+7/7qFvvuWzQfh51qsSTbMsVFpE/gQ4C6FdVulii6Wcbreat9RetRqR3uu9lmi2650Z66nb4aN3J+vboqpdyatMSJx/7jBvDhB3DakH8C8Vb/O/4GxyA+WK+mscm1kc1DvK/amLsYXJHKj50pNL4bxev0Y0yTlsVjPKC28jl3iKzz36tpWH89mVm9qNJv85qNtS4X5yu13zPTw2d0a306bWQ22u1t+Xa4V6Lh3sdnM0/7MtW8UZHyHwwj8ySfumz6pn8P7J7clmDXJm2jWsZTUzbPW6vzsKWVdcyzr61fyW3ZTTAOzg1/9X3Xk91V3Pbu3uTa61Wc2t7d+85C+UL/psoGfm2qiMeTudc+Cv26mkXFDe32kmShI7nwVUNd4X2HhJuOAG/ojA23YMeOhIEYrMsk9Z/M7Vuvu/yBPsUl+TpSe/Lo2VVpgJa6dYGytYG8+653k3kb75K/5bUBjPFFdygNde1G9L1zJt9qpHYx3lOmLq+6Qm//wMAAAAAAAAAAAAAAAAAAJw14/h3gtBjBAAAAAAAAAAAAAAAAAAAAADgrCua/1cl8//mTssyyPy/65vHmv+3d/IcAMP2JwAA//8BU4sn") rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.486750727s ago: executing program 7 (id=3626): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newtaction={0x4c, 0x1c, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x1300}, [{0x4}, {0x34, 0x1, [@m_skbedit={0x30, 0xe, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4014}, 0x0) 3.303178515s ago: executing program 7 (id=3629): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000f400010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000240000000001800038014000100626f6e64300000000000000000000000080001400000000048000000180a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c000380140001"], 0xe8}}, 0x0) 2.995740825s ago: executing program 7 (id=3635): r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$describe(0x1d, r1, &(0x7f0000000480)=""/123, 0x7b) 2.837841501s ago: executing program 7 (id=3640): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x1, &(0x7f0000000080)=[0x0]) read$msr(r0, &(0x7f0000000d40)=""/43, 0x2b) 2.688968915s ago: executing program 7 (id=3644): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000200), &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000043c0)=@IORING_OP_TEE={0x21, 0x14, 0x0, @fd_index, 0x0, 0x0, 0x0, 0xa7d1e6053012f704}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 2.592245195s ago: executing program 7 (id=3648): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) syz_usb_connect(0x0, 0x38, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0xcf, 0xc, 0x95, 0x8, 0x421, 0x302, 0x7786, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x8c, 0x2d, 0x0, 0x3, [{{0x9, 0x4, 0x29, 0x0, 0x2, 0x2, 0x2, 0xff, 0xf9, [], [{{0x9, 0x5, 0x6, 0xc, 0x39e, 0x90, 0x4, 0x1c, [@generic={0x2, 0x30}]}}, {{0x9, 0x5, 0xa, 0xc, 0x10, 0x6, 0x1, 0x6}}]}}]}}]}}, 0x0) 2.496974124s ago: executing program 5 (id=3651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000900)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x0, 0x4, [@local, @remote, @empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}]}) 2.196498094s ago: executing program 5 (id=3655): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x4c80, &(0x7f0000000140)={[{@nobarrier}, {@gid}, {}, {@force}, {@force}, {@force}, {@nls={'nls', 0x3d, 'default'}}]}, 0x44, 0x6f7, &(0x7f000000dcc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2) fsync(r0) 2.007183062s ago: executing program 3 (id=3658): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) syz_read_part_table(0x5ac, &(0x7f00000005c0)="$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") 1.874087926s ago: executing program 5 (id=3660): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="fdd29530b28b6106e71b53769a88", 0x0, 0x3400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.62497841s ago: executing program 3 (id=3664): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1.494332683s ago: executing program 5 (id=3666): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, 0x0) 1.472611075s ago: executing program 3 (id=3667): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x8ed}, {0x20, 0x0, 0x2, 0xfffff034}, {0x6, 0xfc, 0x0, 0x4}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xfdef) 1.366182745s ago: executing program 5 (id=3670): syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x4, @loopback={0xfec0ffffffffffff}, 0x3}], 0x1c) 1.326335059s ago: executing program 3 (id=3672): mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000000a00)={0x0, 0x14, 0x20000}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="b702000007000000bfa300000000000007030000f0ffffff7a0af0ff0020000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26ffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000005b46001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a55b000000c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2d90addedc28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000801989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c1f860d050d694cc7806d294d3665016a7b29da0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d40887c58559b7dcb98a6273b8c651e57f727041c62cea5b7bd24d9f679e4fbe948dfb4cc4a389469608241630459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b83720eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb89872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df0104000099d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebed161980f2fde4f9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e4bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802c8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e661a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b7c4e93da3d51de647c10dd49944dc87c92332af0be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99e85b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5359dbdfbf31a562395020becaf3fd1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4b28288e78980c1184d8223edbc4bf9258b7374e79a8f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b5524642c248aa813edaa626f0000000000000000000000000000000003ba5bac34b611569a451564d3a5400f9097ffe7a37e765bc652be71ee24250d6d9cf19878dd62c53062d6000c40bde6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89ad07963acbd4dd4dc5b4552591edde7a22ad06f7567e6fec2f65011b579bf609d61a3ff4d6f490824bb035995449fc34106ae6889f036d67b6aaee784f855ebc746ac871b5d2031ac0a252ac1f86e93e245f3793cea80b6de773899d49d11d3b1ed79163b111c976cf840a2ef6214a43338fba8c9edb6be26e68fcc5d47ed74a66ce8aba726ab955b9b32ab1890e84a5e2d7476252af25e5c95c5a8b2b1b5c8a2645b01b823c0f169d6ab529cc889bb07889d9e155114cf3e26a50c527ec6d4021cd2cacfea6d7e41e39e26b3967cad65c648b170f12ea9cc69dcee64be0c27b1f4f7f5ce3e62c35602c9d2921326891901661c85b988494f094abb91ed813b42828aa93105896e0aee851a8087e169a1d69e841257d9053d0cdc3a6ac4f12084cc6470abebe8b344b1f56690a2687b428686c854c21831da277e8b8a21b7b91a46d22ba083eca7b1f8268048cde7d6f237dca42035881b29ca9c8c2937971821b613894297ff6f7796053a4de1fd77e180cc22b205d43bb4a1b59962c1f605ea1b74585cf5e8d579f157cb45561c357f9976cec6a43388b3049a0d9c171ff6145266ba119d00000000001ef3794a930eb12f3a6215c510bf0bca70c127e9c70cc7bef921249a7f18a0034ce3264a9e96656b47233e2ed7c76520e649c3fd550bdafd77c5cd72b4446d3e157ddd97e7622a6891fb739acd3b2cdaf65ac78490f0641be6e8c6f55bf3d228786895ff5fd5970faacd8a5025aca0aa1931f477ba06aa60051298c8bf7f3b399194f98dc3f4e8513ad06da09dc393c1284515986b8c70ac69512f6c0c04f42edb3a097a11f2ab480e3e391abffae097752300576337c6dd24c4a98280684aa1fe8c7b43ee8bce05fe979b34da18cdb44dbb030b8009cd3b3b44fd8e7b534acd3f1839cb54817668ab446d3d47848429ea831a57f222c714870582a8832c2a326c5d1e406c8b05dedddceb24483f8f998b05c3ddf85c3799c9000000000000000000000000001e57cf839eb3150d6a076fb7b86fae98dbb46014f483aecb4ec4f0877371bcae8912c78aff857c669760f0e55041563c5c3e8ee4a0eef885fd43fe34a1febc82370d1d07fdfe705ada47288e41e7e6ee82d66b99ae4b0889fe949e7342ca97c1a64dcc7f6a0c0da07de8c808b4caec54820f856889fc5f1af3d675206e3257f974d6e45ff1e905c2f0fc0173ac6714acaaca2397bee23630ecaa2c1c6ddc3085689a033d6d41a1a7ac59baec299158faa52308856805f2130863f4668e27b8bbef4f4cd43a2fd294b5b0bf2b0e4afbe570c54aa214579ca0caf54231d00a94eda2be6f037e2befdd03bf152f696ca1d1ea86eb7ee1f021062ad71246dae1580c4f959a320912032ed468a8ed9f27a2258ddf465de77a51b4713bc6b789a0e8b203f0f592ddb27aa90989a9e0cb624bc34e7d6ebf156ea251e3a2f83ada9f0b70035e8ed200a52b00"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 1.229425379s ago: executing program 3 (id=3674): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f0000000140)='2', 0x1}], 0x2, 0x0, 0x0) 1.161445016s ago: executing program 3 (id=3676): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000240)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.126750879s ago: executing program 8 (id=3677): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x440, 0x0, 0x13, 0x100, 0x9, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x1fe, 0xe2df, 0xaa14, 0x1, 0x4, 0x8, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) 1.077558324s ago: executing program 8 (id=3678): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7100ffdbdf251b000000070021"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x48080) 1.067232625s ago: executing program 5 (id=3679): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="20160b"], 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000b40)={0x1c, &(0x7f00000005c0)={0x0, 0xf}, 0x0, 0x0}) 431.299547ms ago: executing program 6 (id=3680): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x1}) r0 = syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x3, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000540)="1b2311725494", 0x0, 0x0, 0x0, 0x0, 0x0}) 431.229007ms ago: executing program 8 (id=3681): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x41, 0x2, 0x0) 374.301183ms ago: executing program 6 (id=3682): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x28) 340.576356ms ago: executing program 8 (id=3683): r0 = timerfd_create(0x0, 0x80000) read(r0, &(0x7f0000000080)=""/149, 0x95) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000240)=0x10008004) 278.448193ms ago: executing program 6 (id=3684): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000900)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x0, 0x4, [@local, @remote, @empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}]}) 222.041018ms ago: executing program 8 (id=3685): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 166.849973ms ago: executing program 6 (id=3686): unshare(0x2a000400) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, 0x0}, 0x20) 121.039888ms ago: executing program 8 (id=3687): syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000880)='./file0\x00', 0xc10, &(0x7f0000000180)=ANY=[], 0x2, 0x308, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) 67.406864ms ago: executing program 6 (id=3688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0x88}}, 0x0) 0s ago: executing program 6 (id=3689): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00f97fd614b6139bbf23a747e378ea7a4fe5f1ac4e040000000000000084a50873679039c1882f4e40ea14874edb049baa5de0a890d93901d64499c084e0aa5f13e9848a8edc4f610d8eab0f40dd7e168083c10d016a288e37d3417985ceb88d1e08fcac1f9cf6b649406ac652ee7299567077ea4905fae8bf354eb73a78631e7c2065e2e6fc61c50f81f16ddb03e655f1f00aa397c2c606e1c0dc9a477f609470c4dcecd9a97d3a9f5ac20567e07fe5173e90764f0e9ffd27a5bf0ae4000000000000000000"], 0x1, 0x1cf, &(0x7f00000002c0)="$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") r0 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1100000000000000000000000100000000000000000000001c000000000000000000000007000000440c07"], 0x38}, 0x0) kernel console output (not intermixed with test programs): x batch 225, max commit age 30, max trans age 30 [ 262.124210][T11649] BTRFS info (device loop3): using free space tree [ 262.163588][T11649] BTRFS info (device loop3): has skinny extents [ 262.171106][T11614] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 262.173786][T11656] REISERFS (device loop5): checking transaction log (loop5) [ 262.205405][T11614] EXT4-fs error (device loop7): ext4_fill_super:4841: inode #2: comm syz.7.2777: casefold flag without casefold feature [ 262.221604][ T9552] tipc: Node number set to 11578026 [ 262.254963][T11614] EXT4-fs (loop7): get root inode failed [ 262.261037][T11614] EXT4-fs (loop7): mount failed [ 262.377806][ T9552] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 262.414514][ T4670] usb 8-1: USB disconnect, device number 10 [ 262.486430][T11649] BTRFS info (device loop3): enabling ssd optimizations [ 262.491813][T11656] REISERFS (device loop5): Using tea hash to sort names [ 262.502188][T11656] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 262.664060][ T9552] usb 9-1: Using ep0 maxpacket: 8 [ 262.832364][ T9552] usb 9-1: unable to get BOS descriptor or descriptor too short [ 262.874219][ T23] usb 7-1: reset high-speed USB device number 11 using dummy_hcd [ 262.924277][ T9552] usb 9-1: config 4 interface 0 has no altsetting 0 [ 263.078160][T11686] loop7: detected capacity change from 0 to 2048 [ 263.179423][T11689] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 263.202515][ T9552] usb 9-1: string descriptor 0 read error: -22 [ 263.209100][ T9552] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 263.218415][ T9552] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.265577][ T4251] Bluetooth: hci3: command 0x0406 tx timeout [ 263.296988][ T9552] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 263.337572][ T9552] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 263.349364][T11690] CPU: 0 PID: 11690 Comm: syz.7.2800 Not tainted syzkaller #0 [ 263.357599][T11690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 263.368067][T11690] Call Trace: [ 263.371365][T11690] [ 263.374311][T11690] dump_stack_lvl+0x168/0x230 [ 263.379107][T11690] ? nilfs_btree_alloc_path+0x4c/0x600 [ 263.384800][T11690] ? show_regs_print_info+0x20/0x20 [ 263.390365][T11690] ? memset+0x1e/0x40 [ 263.394590][T11690] ? nilfs_btree_alloc_path+0x5e5/0x600 [ 263.400564][T11690] nilfs_btree_last_key+0x485/0x610 [ 263.406104][T11690] nilfs_bmap_last_key+0x70/0x120 [ 263.411461][T11690] nilfs_truncate_bmap+0xfb/0x340 [ 263.416817][T11690] ? nilfs_update_inode+0x1d0/0x1d0 [ 263.422331][T11690] ? nilfs_transaction_begin+0x527/0x710 [ 263.428228][T11690] ? rwsem_write_trylock+0x12f/0x1b0 [ 263.433664][T11690] nilfs_truncate+0x263/0x4c0 [ 263.438391][T11690] ? nilfs_write_failed+0x90/0x90 [ 263.443474][T11690] nilfs_setattr+0x20d/0x2a0 [ 263.448206][T11690] ? nilfs_clear_inode+0x280/0x280 [ 263.453637][T11690] ? is_bad_inode+0x9/0x40 [ 263.458254][T11690] ? __might_sleep+0xf0/0xf0 [ 263.463061][T11690] ? preempt_count_add+0x8d/0x190 [ 263.468218][T11690] ? bpf_lsm_inode_setattr+0x5/0x10 [ 263.473577][T11690] ? try_break_deleg+0x79/0x120 [ 263.478538][T11690] ? nilfs_clear_inode+0x280/0x280 [ 263.483670][T11690] notify_change+0xbcd/0xee0 [ 263.488383][T11690] do_truncate+0x197/0x220 [ 263.493130][T11690] ? aa_get_task_label+0x21c/0x2c0 [ 263.498305][T11690] ? rcu_lock_release+0x20/0x20 [ 263.503384][T11690] ? ima_bprm_check+0x1f0/0x1f0 [ 263.508476][T11690] ? bpf_lsm_path_truncate+0x5/0x10 [ 263.513741][T11690] path_openat+0x28af/0x2f30 [ 263.518550][T11690] ? __kasan_slab_alloc+0xb3/0xd0 [ 263.523601][T11690] ? __kasan_slab_alloc+0x9c/0xd0 [ 263.528928][T11690] ? verify_lock_unused+0x140/0x140 [ 263.534334][T11690] ? do_filp_open+0x3e0/0x3e0 [ 263.539305][T11690] do_filp_open+0x1b3/0x3e0 [ 263.543854][T11690] ? vfs_tmpfile+0x300/0x300 [ 263.545349][T11695] loop5: detected capacity change from 0 to 4096 [ 263.548711][T11690] ? _raw_spin_unlock+0x24/0x40 [ 263.560305][T11690] ? alloc_fd+0x598/0x630 [ 263.564088][ T23] usb 7-1: unable to get BOS descriptor or descriptor too short [ 263.564906][T11690] do_sys_openat2+0x142/0x4a0 [ 263.577998][T11690] ? do_sys_open+0xe0/0xe0 [ 263.582745][T11690] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 263.588882][T11690] ? lock_chain_count+0x20/0x20 [ 263.593775][T11690] ? vtime_user_exit+0x2dc/0x400 [ 263.599023][T11690] __x64_sys_creat+0x8c/0xb0 [ 263.603762][T11690] do_syscall_64+0x4c/0xa0 [ 263.608529][T11690] ? clear_bhb_loop+0x30/0x80 [ 263.613573][T11690] ? clear_bhb_loop+0x30/0x80 [ 263.618395][T11690] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 263.624418][T11690] RIP: 0033:0x7f5464474fc9 [ 263.628948][T11690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.648848][T11690] RSP: 002b:00007f54626bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 263.657299][T11690] RAX: ffffffffffffffda RBX: 00007f54646cc090 RCX: 00007f5464474fc9 [ 263.665436][T11690] RDX: 0000000000000000 RSI: 0000000000000124 RDI: 0000200000000080 [ 263.673527][T11690] RBP: 00007f54644f7f91 R08: 0000000000000000 R09: 0000000000000000 [ 263.681537][T11690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.689831][T11690] R13: 00007f54646cc128 R14: 00007f54646cc090 R15: 00007fffeaa3d098 [ 263.697852][T11690] [ 263.709596][ T9552] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 263.731889][ T9552] usb 9-1: media controller created [ 263.742217][T11690] NILFS (loop7): btree level mismatch (ino=16): 1 != 3 [ 263.763206][ T9552] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 263.765200][T11696] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 263.814236][ T23] usb 7-1: device firmware changed [ 263.854399][ T23] usb 7-1: USB disconnect, device number 11 [ 263.892965][ T9552] zl10353_read_register: readreg error (reg=127, ret==0) [ 263.960630][ T9552] usb 9-1: USB disconnect, device number 15 [ 263.979585][T11690] NILFS error (device loop7): nilfs_bmap_last_key: broken bmap (inode number=16) [ 264.123333][T11690] Remounting filesystem read-only [ 264.123477][T11702] device vlan0 entered promiscuous mode [ 264.134471][T11690] NILFS (loop7): error -5 truncating bmap (ino=16) [ 264.260258][T11704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.271566][ T6519] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 264.397682][T11713] loop7: detected capacity change from 0 to 512 [ 264.432046][T11708] loop6: detected capacity change from 0 to 4096 [ 264.476119][T11708] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 264.506050][T11713] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.2808: invalid indirect mapped block 256 (level 2) [ 264.548091][T11719] loop8: detected capacity change from 0 to 164 [ 264.630175][T11713] EXT4-fs (loop7): 2 truncates cleaned up [ 264.643256][T11713] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 264.740470][ T4656] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm kworker/u4:7: bg 0: block 5: invalid block bitmap [ 264.769692][ T4656] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 264.797321][ T4656] EXT4-fs (loop7): This should not happen!! Data will be lost [ 264.797321][ T4656] [ 264.814003][ T4656] EXT4-fs (loop7): Total free blocks count 0 [ 264.850673][ T4656] EXT4-fs (loop7): Free/Dirty block details [ 264.857194][ T4656] EXT4-fs (loop7): free_blocks=0 [ 264.874402][ T4232] usb 9-1: new low-speed USB device number 16 using dummy_hcd [ 264.886507][ T4656] EXT4-fs (loop7): dirty_blocks=1 [ 264.903954][ T4656] EXT4-fs (loop7): Block reservation details [ 264.920523][ T4656] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 264.983357][T11727] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2816'. [ 265.087238][T11731] loop6: detected capacity change from 0 to 16 [ 265.151967][T11731] erofs: (device loop6): mounted with root inode @ nid 36. [ 265.209503][T11737] loop3: detected capacity change from 0 to 256 [ 265.223001][T11731] Invalid ELF header len 10 [ 265.284725][T11737] exfat: Deprecated parameter 'utf8' [ 265.304404][ T4232] usb 9-1: config 0 has an invalid interface number: 198 but max is 0 [ 265.326557][T11737] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 265.337860][ T4232] usb 9-1: config 0 has no interface number 0 [ 265.370977][ T4232] usb 9-1: config 0 interface 198 altsetting 8 endpoint 0x4 has invalid maxpacket 64, setting to 8 [ 265.433488][ T4232] usb 9-1: config 0 interface 198 altsetting 8 endpoint 0x86 is Bulk; changing to Interrupt [ 265.484009][ T4232] usb 9-1: config 0 interface 198 has no altsetting 0 [ 265.510699][ T4232] usb 9-1: New USB device found, idVendor=1b3d, idProduct=0138, bcdDevice=74.e6 [ 265.549324][ T4232] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.609309][ T4232] usb 9-1: config 0 descriptor?? [ 265.617943][T11757] netlink: 'syz.5.2830': attribute type 5 has an invalid length. [ 265.644377][T11719] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 265.651965][T11719] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 265.691243][T11761] loop3: detected capacity change from 0 to 256 [ 265.725631][T11761] exfat: Deprecated parameter 'utf8' [ 265.730998][T11761] exfat: Deprecated parameter 'utf8' [ 265.774552][T11761] exfat: Deprecated parameter 'utf8' [ 265.837864][T11761] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 265.946526][ T4232] usb 9-1: string descriptor 0 read error: -71 [ 265.964837][ T4232] ftdi_sio 9-1:0.198: FTDI USB Serial Device converter detected [ 265.973372][ T4232] usb 9-1: Detected FT-X [ 266.054337][ T4232] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 266.084548][ T4232] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 266.125842][ T4232] ftdi_sio 9-1:0.198: GPIO initialisation failed: -71 [ 266.205783][ T4232] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 266.230610][T11784] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2843'. [ 266.262055][ T4232] usb 9-1: USB disconnect, device number 16 [ 266.345550][ T4232] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 266.366080][T11790] loop3: detected capacity change from 0 to 64 [ 266.396999][ T4232] ftdi_sio 9-1:0.198: device disconnected [ 266.493629][T11794] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2847'. [ 266.630962][T11797] sp0: Synchronizing with TNC [ 266.783262][T11804] hugetlbfs: Bad value for 'nr_inodes' [ 266.838531][T11806] loop6: detected capacity change from 0 to 1024 [ 267.011231][T11806] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,. Quota mode: none. [ 267.212314][T11823] netlink: 'syz.7.2860': attribute type 1 has an invalid length. [ 267.244134][T11806] EXT4-fs error (device loop6): ext4_empty_dir:3166: inode #11: block 623: comm syz.6.2853: Attempting to read directory block (623) that is past i_size (638464) [ 267.319789][T11806] EXT4-fs (loop6): Remounting filesystem read-only [ 267.823983][T11847] loop8: detected capacity change from 0 to 256 [ 267.915038][T11847] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 268.238794][T11828] loop3: detected capacity change from 0 to 32768 [ 268.246772][T11869] loop7: detected capacity change from 0 to 128 [ 268.307314][T11872] netlink: 'syz.6.2883': attribute type 3 has an invalid length. [ 268.323568][T11869] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 268.330045][T11873] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2884'. [ 268.356671][T11873] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2884'. [ 268.400017][T11873] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2884'. [ 268.428351][T11828] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 268.642901][T11884] tipc: Started in network mode [ 268.699609][T11884] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 268.743319][ T4188] ocfs2: Unmounting device (7,3) on (node local) [ 268.774418][T11884] tipc: Enabling of bearer rejected, failed to enable media [ 268.988356][T11896] loop3: detected capacity change from 0 to 4096 [ 269.071899][T11896] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 269.119561][T11896] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 269.149961][T11912] loop5: detected capacity change from 0 to 64 [ 269.165966][T11896] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 269.186877][T11896] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 269.207882][T11896] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 269.242700][T11896] ntfs: volume version 3.1. [ 269.252792][T11910] loop7: detected capacity change from 0 to 8192 [ 269.262235][T11896] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 269.292690][T11896] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 269.342162][T11910] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 269.344371][ T4292] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 269.364074][T11896] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 269.376409][T11896] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 269.390600][T11896] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 269.408417][T11910] REISERFS (device loop7): using ordered data mode [ 269.416306][T11910] reiserfs: using flush barriers [ 269.484489][T11910] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 269.564827][T11910] REISERFS (device loop7): checking transaction log (loop7) [ 269.667850][T11910] REISERFS (device loop7): Using r5 hash to sort names [ 269.743887][T11910] reiserfs: enabling write barrier flush mode [ 269.764238][ T4292] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.792999][ T4292] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 269.829125][T11910] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 269.859244][ T4292] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 269.900006][ T4292] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.917719][T11910] REISERFS error (device loop7): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 269.956499][ T4292] usb 7-1: config 0 descriptor?? [ 269.967783][T11910] REISERFS (device loop7): Remounting filesystem read-only [ 269.999969][T11910] REISERFS error (device loop7): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 270.018516][ T4292] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 270.037667][ T4292] dvb-usb: bulk message failed: -22 (3/0) [ 270.064507][ T4292] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 270.084597][T11910] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 270.109455][T11910] REISERFS error (device loop7): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 270.124288][ T4292] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 270.139624][ T4292] usb 7-1: media controller created [ 270.163956][T11910] REISERFS error (device loop7): zam-7001 reiserfs_find_entry: io error [ 270.166948][ T4292] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 270.190384][T11910] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 270.221112][T11907] dvb-usb: bulk message failed: -22 (4/0) [ 270.221208][T11910] REISERFS error (device loop7): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 270.273188][ T4292] dvb-usb: bulk message failed: -22 (6/0) [ 270.292940][ T4292] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 270.301729][T11910] REISERFS error (device loop7): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 270.336912][T11910] REISERFS warning (device loop7): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 270.349653][ T4292] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input17 [ 270.414451][ T4292] dvb-usb: schedule remote query interval to 150 msecs. [ 270.430809][ T4292] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 270.453993][T11910] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 270.462170][ T4292] usb 7-1: USB disconnect, device number 12 [ 270.494257][T11910] REISERFS error (device loop7): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 270.534129][T11910] REISERFS (device loop7): Remounting filesystem read-only [ 270.582430][T11919] loop3: detected capacity change from 0 to 32768 [ 270.590376][T11910] REISERFS error (device loop7): zam-7001 reiserfs_find_entry: io error [ 270.619951][ T4292] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 270.723230][T11919] XFS (loop3): Mounting V5 Filesystem [ 270.850915][T11930] loop5: detected capacity change from 0 to 40427 [ 270.876166][T11942] loop8: detected capacity change from 0 to 256 [ 270.901130][T11919] XFS (loop3): Ending clean mount [ 270.947547][T11930] F2FS-fs (loop5): invalid crc value [ 271.006571][T11930] F2FS-fs (loop5): Found nat_bits in checkpoint [ 271.100550][T11947] loop7: detected capacity change from 0 to 2048 [ 271.105722][ T4188] XFS (loop3): Unmounting Filesystem [ 271.207632][T11930] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 271.230943][T11947] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 271.302053][T11954] loop8: detected capacity change from 0 to 512 [ 271.365446][T11955] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 271.406789][ T4597] attempt to access beyond end of device [ 271.406789][ T4597] loop5: rw=2049, want=45104, limit=40427 [ 271.467533][T11954] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 271.597650][T11954] ext4 filesystem being mounted at /401/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.753717][T11954] EXT4-fs error (device loop8): ext4_get_first_dir_block:3619: inode #12: comm syz.8.2914: directory missing '..' [ 272.510631][T11978] loop8: detected capacity change from 0 to 8 [ 273.186039][ T5497] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 273.248596][T12021] loop3: detected capacity change from 0 to 512 [ 273.256998][T12018] loop8: detected capacity change from 0 to 1024 [ 273.325623][T12021] EXT4-fs (loop3): orphan cleanup on readonly fs [ 273.336793][T12021] EXT4-fs warning (device loop3): ext4_xattr_inode_get:509: inode #11: comm syz.3.2944: EA inode hash validation failed [ 273.350216][T12021] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 273.365141][T12021] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1001: inode #11: comm syz.3.2944: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 273.394287][ T23] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 273.405199][T12021] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1190: inode #11: comm syz.3.2944: ea_inode dec ref err=-117 [ 273.419036][T12021] EXT4-fs (loop3): 1 orphan inode deleted [ 273.425247][T12021] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000003,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 273.484335][ T5497] usb 7-1: Using ep0 maxpacket: 32 [ 273.560255][T12029] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2947'. [ 273.647256][ T5497] usb 7-1: config 0 has an invalid interface number: 16 but max is 0 [ 273.674421][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 273.689904][ T5497] usb 7-1: config 0 has no interface number 0 [ 273.704707][ T5497] usb 7-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 273.725868][ T5497] usb 7-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 273.744141][ T5497] usb 7-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 273.804315][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.827110][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.867661][ T23] usb 6-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 273.878034][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.913790][ T23] usb 6-1: config 0 descriptor?? [ 273.954820][ T5497] usb 7-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 273.965986][ T5497] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.995640][ T5497] usb 7-1: Product: syz [ 274.000046][ T5497] usb 7-1: Manufacturer: syz [ 274.024247][ T5497] usb 7-1: SerialNumber: syz [ 274.042263][ T5497] usb 7-1: config 0 descriptor?? [ 274.074149][T12002] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 274.186362][ T5497] snd-usb-audio: probe of 7-1:0.16 failed with error -12 [ 274.240780][ T4462] udevd[4462]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.347048][ T5497] usb 7-1: USB disconnect, device number 13 [ 274.359489][T12056] loop3: detected capacity change from 0 to 64 [ 274.400230][T12052] loop8: detected capacity change from 0 to 8192 [ 274.429450][ T23] hid_mf 0003:0079:1801.0003: hidraw0: USB HID v0.00 Device [HID 0079:1801] on usb-dummy_hcd.5-1/input0 [ 274.460875][T12052] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal [ 274.492059][T12052] REISERFS (device loop8): using ordered data mode [ 274.506361][ T23] hid_mf 0003:0079:1801.0003: Invalid report, this should never happen! [ 274.508881][T12052] reiserfs: using flush barriers [ 274.553316][ T23] hid_mf 0003:0079:1801.0003: Force feedback init failed. [ 274.567522][T12052] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 274.581846][T12062] loop3: detected capacity change from 0 to 2048 [ 274.604138][T12052] REISERFS (device loop8): checking transaction log (loop8) [ 274.651597][ T4337] loop3: p1 < > p3 [ 274.707795][T12052] REISERFS (device loop8): Using r5 hash to sort names [ 274.724935][ T4337] loop3: p3 size 134217728 extends beyond EOD, truncated [ 274.740551][T12052] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 274.744233][ T23] usb 6-1: USB disconnect, device number 19 [ 274.774622][T12068] loop7: detected capacity change from 0 to 1024 [ 274.781356][T12052] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 274.852293][T12052] REISERFS warning (device loop8): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 274.878713][T12062] loop3: p1 < > p3 [ 274.902173][T12062] loop3: p3 size 134217728 extends beyond EOD, truncated [ 274.949970][T12052] REISERFS warning (device loop8): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 274.991808][T12052] REISERFS warning (device loop8): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 275.011896][T12072] loop6: detected capacity change from 0 to 256 [ 275.031120][ T3562] loop3: p1 < > p3 [ 275.047429][T12070] fido_id[12070]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 275.073626][ T3562] loop3: p3 size 134217728 extends beyond EOD, truncated [ 275.134828][T12072] exfat: Deprecated parameter 'utf8' [ 275.140313][T12072] exfat: Deprecated parameter 'namecase' [ 275.159571][T12072] exfat: Deprecated parameter 'namecase' [ 275.172130][T12072] exfat: Deprecated parameter 'utf8' [ 275.258156][T12072] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 275.339865][T12084] loop5: detected capacity change from 0 to 128 [ 275.411792][T12087] loop7: detected capacity change from 0 to 512 [ 275.443080][T12084] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 275.458933][T12084] hpfs: filesystem error: improperly stopped [ 275.466247][T12084] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 275.475399][T12084] hpfs: You really don't want any checks? You are crazy... [ 275.486812][T12084] hpfs: hpfs_map_sector(): read error [ 275.492653][T12084] hpfs: code page support is disabled [ 275.498954][ T4294] udevd[4294]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 275.510123][T12087] EXT4-fs (loop7): Ignoring removed oldalloc option [ 275.529576][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 275.565442][T12084] hpfs: hpfs_map_4sectors(): unaligned read [ 275.587886][T12087] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2229: inode #15: comm syz.7.2974: corrupted in-inode xattr [ 275.601130][T12084] hpfs: hpfs_map_4sectors(): unaligned read [ 275.644434][T12084] hpfs: filesystem error: unable to find root dir [ 275.714046][T12087] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.2974: couldn't read orphan inode 15 (err -117) [ 275.772545][ T4465] udevd[4465]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 275.775837][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 275.871922][T12087] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrjquota=,abort,nombcache,noload,noblock_validity,grpjquota=,oldalloc,nouid32,bsdgroups,barrier=0x0000000000000053,,errors=continue. Quota mode: none. [ 275.986052][ T4294] udevd[4294]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 276.001390][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 276.181533][T12117] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 276.257918][T12119] loop7: detected capacity change from 0 to 1024 [ 276.481480][ T154] hfsplus: b-tree write err: -5, ino 4 [ 276.745541][T12137] loop5: detected capacity change from 0 to 1024 [ 276.963525][T12145] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2999'. [ 277.010116][ T3045] hfsplus: b-tree write err: -5, ino 4 [ 277.154579][T12149] loop3: detected capacity change from 0 to 4096 [ 277.197041][T12149] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 277.311336][T12149] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 277.400259][T12167] tipc: Started in network mode [ 277.407244][T12166] loop7: detected capacity change from 0 to 512 [ 277.420639][T12167] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 277.429078][T12167] tipc: Enabled bearer , priority 10 [ 277.480034][T12118] loop6: detected capacity change from 0 to 40427 [ 277.519459][T12166] FAT-fs (loop7): invalid media value (0xe0) [ 277.546705][T12166] FAT-fs (loop7): Can't find a valid FAT filesystem [ 277.562736][T12118] F2FS-fs (loop6): invalid crc value [ 277.602398][T12118] F2FS-fs (loop6): Found nat_bits in checkpoint [ 277.763062][T12172] loop5: detected capacity change from 0 to 4096 [ 277.790871][T12118] F2FS-fs (loop6): Start checkpoint disabled! [ 277.810170][T12118] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 277.880808][T12172] EXT4-fs (loop5): Ignoring removed bh option [ 277.882510][T12176] loop3: detected capacity change from 0 to 4096 [ 277.891226][T12172] EXT4-fs (loop5): Test dummy encryption mode enabled [ 277.933825][T12172] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 277.942454][T12172] System zones: 0-5 [ 277.954043][ T23] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 277.954175][T12176] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 277.986765][T12172] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,delalloc,bh,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 278.035924][T12172] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 278.139335][T12176] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 278.374258][ T23] usb 8-1: config 4 has an invalid interface number: 9 but max is 0 [ 278.385013][ T23] usb 8-1: config 4 has an invalid descriptor of length 158, skipping remainder of the config [ 278.428470][T12195] loop6: detected capacity change from 0 to 256 [ 278.442438][ T4188] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 278.445225][ T23] usb 8-1: config 4 has no interface number 0 [ 278.487566][ T23] usb 8-1: config 4 interface 9 altsetting 2 endpoint 0x4 has an invalid bInterval 255, changing to 4 [ 278.514063][ T5498] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 278.542895][ T23] usb 8-1: config 4 interface 9 altsetting 2 endpoint 0x4 has invalid maxpacket 63940, setting to 1023 [ 278.564586][ T23] usb 8-1: config 4 interface 9 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.634024][ T23] usb 8-1: config 4 interface 9 has no altsetting 0 [ 278.654782][ T5497] tipc: Node number set to 10398378 [ 278.804257][ T5498] usb 9-1: Using ep0 maxpacket: 32 [ 278.865085][ T23] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 278.906973][ T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.936056][ T23] usb 8-1: Product: syz [ 278.940827][ T23] usb 8-1: Manufacturer: syz [ 278.947249][ T5498] usb 9-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 278.980137][ T5498] usb 9-1: config 0 interface 0 has no altsetting 0 [ 279.013966][ T23] usb 8-1: SerialNumber: syz [ 279.023764][ T5498] usb 9-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 279.055515][ T5498] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.085186][ T5498] usb 9-1: config 0 descriptor?? [ 279.121757][ T23] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 279.303786][ T5497] usb 8-1: USB disconnect, device number 11 [ 279.314793][ T4656] usb 8-1: Failed to submit usb control message: -71 [ 279.322864][ T4656] usb 8-1: unable to send the bmi data to the device: -71 [ 279.363643][ T4656] usb 8-1: unable to get target info from device [ 279.385848][ T4656] usb 8-1: could not get target info (-71) [ 279.406383][T12225] loop3: detected capacity change from 0 to 128 [ 279.421655][ T4656] usb 8-1: could not probe fw (-71) [ 279.428866][T12202] loop5: detected capacity change from 0 to 40427 [ 279.523810][T12202] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 279.532258][ T23] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 279.547261][T12202] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 279.576263][ T5498] monterey 0003:0566:3004.0004: unknown main item tag 0x0 [ 279.583288][T12202] F2FS-fs (loop5): invalid crc value [ 279.583455][ T5498] monterey 0003:0566:3004.0004: unknown main item tag 0x0 [ 279.601281][ T5498] monterey 0003:0566:3004.0004: unknown main item tag 0x0 [ 279.611179][ T5498] monterey 0003:0566:3004.0004: unknown main item tag 0x0 [ 279.618643][ T5498] monterey 0003:0566:3004.0004: unknown main item tag 0x0 [ 279.634123][T12202] F2FS-fs (loop5): Found nat_bits in checkpoint [ 279.641007][ T5498] monterey 0003:0566:3004.0004: hidraw0: USB HID v1.6c Device [HID 0566:3004] on usb-dummy_hcd.8-1/input0 [ 279.687110][T12230] netlink: 'syz.3.3033': attribute type 1 has an invalid length. [ 279.781432][T12202] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 279.794138][T12202] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 279.824154][ T23] usb 7-1: Using ep0 maxpacket: 32 [ 279.825800][ T9537] usb 9-1: USB disconnect, device number 17 [ 279.959890][ T23] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.991421][ T23] usb 7-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 280.007078][T12238] loop7: detected capacity change from 0 to 512 [ 280.013421][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.057288][T12238] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 280.071458][ T23] usb 7-1: config 0 descriptor?? [ 280.077808][T12238] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 280.087690][T12238] EXT4-fs (loop7): 1 truncate cleaned up [ 280.093885][T12238] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota="errors=continue,noload,nombcache,usrjquota="errors=continue,errors=remount-ro,barrier,. Quota mode: writeback. [ 280.124118][ T4292] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 280.129101][ T23] dw2102: su3000_identify_state [ 280.141177][ T23] dvb-usb: found a 'TeVii S662' in warm state. [ 280.152311][T12238] EXT4-fs error (device loop7): ext4_map_blocks:629: inode #2: block 4: comm syz.7.3036: lblock 0 mapped to illegal pblock 4 (length 1) [ 280.175051][ T23] dw2102: su3000_power_ctrl: 1, initialized 0 [ 280.183118][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 280.224189][T12238] EXT4-fs (loop7): Remounting filesystem read-only [ 280.271772][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 280.314403][ T23] dvbdev: DVB: registering new adapter (TeVii S662) [ 280.322377][ T23] usb 7-1: media controller created [ 280.333240][T12221] dvb-usb: bulk message failed: -22 (4/0) [ 280.404146][T12221] dw2102: i2c transfer failed. [ 280.429364][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 280.444683][ T23] dw2102: i2c transfer failed. [ 280.474310][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 280.493029][ T23] dw2102: i2c transfer failed. [ 280.494554][ T4292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.503194][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 280.528097][ T4292] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 280.549790][ T23] dw2102: i2c transfer failed. [ 280.569415][ T4292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.576684][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 280.603773][ T23] dw2102: i2c transfer failed. [ 280.609226][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 280.610860][ T4292] usb 4-1: config 0 descriptor?? [ 280.620613][ T23] dw2102: i2c transfer failed. [ 280.625818][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 280.629282][T12252] loop5: detected capacity change from 0 to 64 [ 280.631878][ T23] dw2102: i2c transfer failed. [ 280.644273][ T23] dvb-usb: MAC address: 02:02:02:02:02:02 [ 280.668056][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 280.696944][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 280.713967][ T23] dw2102: command 0x0e transfer failed. [ 280.731964][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 280.763581][ T23] dw2102: command 0x0e transfer failed. [ 281.042363][T12264] loop6: detected capacity change from 0 to 1024 [ 281.093532][T12269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3050'. [ 281.114403][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 281.124263][ T23] dw2102: command 0x0e transfer failed. [ 281.127501][ T4292] hid-generic 0003:057E:200E.0005: unbalanced delimiter at end of report description [ 281.130446][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 281.175250][T12264] hfsplus: bad catalog entry type [ 281.180366][ T4292] hid-generic: probe of 0003:057E:200E.0005 failed with error -22 [ 281.224005][ T23] dw2102: command 0x0e transfer failed. [ 281.229790][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 281.266555][ T23] dw2102: command 0x51 transfer failed. [ 281.302658][ T23] dvb-usb: bulk message failed: -22 (5/0) [ 281.320590][ T23] dw2102: i2c probe for address 0x68 failed. [ 281.331675][T12275] netlink: 'syz.8.3053': attribute type 29 has an invalid length. [ 281.341504][ T23] dvb-usb: bulk message failed: -22 (5/0) [ 281.347980][ T23] dw2102: i2c probe for address 0x69 failed. [ 281.354970][T12275] netlink: 'syz.8.3053': attribute type 29 has an invalid length. [ 281.363052][ T23] dvb-usb: bulk message failed: -22 (5/0) [ 281.372022][T12275] netlink: 'syz.8.3053': attribute type 29 has an invalid length. [ 281.388278][ T23] dw2102: i2c probe for address 0x6a failed. [ 281.395888][ T23] dw2102: probing for demodulator failed. Is the external power switched on? [ 281.413296][ T9552] usb 4-1: USB disconnect, device number 13 [ 281.424091][ T23] dvb-usb: no frontend was attached by 'TeVii S662' [ 281.459112][ T154] hfsplus: b-tree write err: -5, ino 4 [ 281.694151][ T23] rc_core: IR keymap rc-tt-1500 not found [ 281.700166][ T23] Registered IR keymap rc-empty [ 281.743517][ T23] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 281.771932][ T23] input: TeVii S662 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input19 [ 281.808816][T12294] loop7: detected capacity change from 0 to 128 [ 281.819149][ T23] dvb-usb: schedule remote query interval to 250 msecs. [ 281.834399][ T23] dw2102: su3000_power_ctrl: 0, initialized 1 [ 281.850771][ T23] dvb-usb: TeVii S662 successfully initialized and connected. [ 281.853167][T12293] loop5: detected capacity change from 0 to 512 [ 281.869365][ T23] usb 7-1: USB disconnect, device number 14 [ 281.916861][T12294] VFS: Found a Xenix FS (block size = 512) on device loop7 [ 281.999168][T12293] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 282.025509][T12293] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 282.041209][ T6519] sysv_free_block: trying to free block not in datazone [ 282.062337][ T23] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 282.081346][T12293] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.3063: Corrupt directory, running e2fsck is recommended [ 282.118571][ T6519] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 282.157539][T12293] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 282.186850][T12293] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2229: inode #15: comm syz.5.3063: corrupted in-inode xattr [ 282.247903][T12293] EXT4-fs (loop5): Remounting filesystem read-only [ 282.267817][T12293] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.3063: couldn't read orphan inode 15 (err -117) [ 282.329158][T12293] EXT4-fs (loop5): Remounting filesystem read-only [ 282.343535][T12293] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.mb_optimize_scan=0x0000000000000000,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 282.443516][T12304] netlink: 'syz.7.3066': attribute type 11 has an invalid length. [ 282.539599][ T23] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 282.729665][T12300] loop3: detected capacity change from 0 to 40427 [ 282.830653][T12300] F2FS-fs (loop3): invalid crc value [ 282.892330][T12300] F2FS-fs (loop3): Found nat_bits in checkpoint [ 282.901062][T12296] loop8: detected capacity change from 0 to 40427 [ 282.949778][T12296] F2FS-fs (loop8): build fault injection attr: rate: 771, type: 0x1ffff [ 282.974248][ T23] usb 7-1: too many endpoints for config 0 interface 0 altsetting 2: 255, using maximum allowed: 30 [ 283.006016][ T23] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.017221][T12296] F2FS-fs (loop8): invalid crc value [ 283.036299][ T23] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 283.058205][T12296] F2FS-fs (loop8): Found nat_bits in checkpoint [ 283.094054][ T23] usb 7-1: config 0 interface 0 has no altsetting 0 [ 283.117939][ T23] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 283.138141][T12300] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 283.143974][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.193751][ T23] usb 7-1: config 0 descriptor?? [ 283.231078][T12296] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 283.282237][ T4188] attempt to access beyond end of device [ 283.282237][ T4188] loop3: rw=2049, want=45104, limit=40427 [ 283.364999][ T6581] attempt to access beyond end of device [ 283.364999][ T6581] loop8: rw=2049, want=45104, limit=40427 [ 283.494324][T12308] loop7: detected capacity change from 0 to 32768 [ 283.610703][T12308] XFS (loop7): Mounting V5 Filesystem [ 283.688333][T12308] XFS (loop7): Ending clean mount [ 283.735569][T12317] loop5: detected capacity change from 0 to 32768 [ 283.744213][T12308] XFS (loop7): Quotacheck needed: Please wait. [ 283.763069][T12317] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.3071 (12317) [ 283.838912][T12317] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 283.858619][ T23] uclogic 0003:28BD:0071.0006: interface is invalid, ignoring [ 283.884209][T12317] BTRFS info (device loop5): force zlib compression, level 3 [ 283.926274][T12317] BTRFS info (device loop5): force clearing of disk cache [ 283.933665][T12317] BTRFS info (device loop5): setting nodatasum [ 283.986954][T12317] BTRFS info (device loop5): allowing degraded mounts [ 283.993883][T12317] BTRFS info (device loop5): enabling disk space caching [ 284.007360][T12308] XFS (loop7): Quotacheck: Done. [ 284.034290][T12317] BTRFS info (device loop5): disk space caching is enabled [ 284.074642][T12317] BTRFS info (device loop5): has skinny extents [ 284.174384][ T23] usb 7-1: USB disconnect, device number 15 [ 284.335417][T12317] BTRFS info (device loop5): clearing free space tree [ 284.364095][T12317] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 284.390316][ T6519] XFS (loop7): Unmounting Filesystem [ 284.404041][T12317] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 284.694227][ T4293] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 285.119895][ T4293] usb 9-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 285.139665][ T4293] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.171783][ T4293] usb 9-1: config 0 descriptor?? [ 285.226312][ T4293] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 285.436276][T12352] loop3: detected capacity change from 0 to 40427 [ 285.464328][ T4293] gspca_sn9c2028: read1 error -32 [ 285.487667][T12375] loop6: detected capacity change from 0 to 1024 [ 285.506900][T12352] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 285.532809][T12352] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 285.572412][T12352] F2FS-fs (loop3): Found nat_bits in checkpoint [ 285.694569][T12352] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 285.734101][ T4293] gspca_sn9c2028: read1 error -71 [ 285.739751][ T4293] sn9c2028: probe of 9-1:0.0 failed with error -71 [ 285.767833][ T4293] usb 9-1: USB disconnect, device number 18 [ 285.782604][T12352] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 285.797809][T12352] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 285.981568][T12352] F2FS-fs (loop3): Found FS corruption, run fsck to fix. [ 285.994410][T12393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3090'. [ 286.235456][T12399] loop5: detected capacity change from 0 to 128 [ 286.305384][T12399] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000006,,errors=continue. Quota mode: none. [ 286.334320][T12399] ext4 filesystem being mounted at /535/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.559542][T12411] loop3: detected capacity change from 0 to 16 [ 286.668790][T12411] erofs: (device loop3): mounted with root inode @ nid 36. [ 286.678551][T12409] loop6: detected capacity change from 0 to 4096 [ 286.734130][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 286.734144][ T26] audit: type=1800 audit(1761105120.881:7): pid=12411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3098" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 286.765864][T12409] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 286.804639][T12409] ntfs: (device loop6): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 286.882544][T12409] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 286.915711][T12409] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 286.982901][ T4580] kernel write not supported for file /sg0 (pid: 4580 comm: kworker/0:7) [ 286.993024][T12409] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 286.993084][T12409] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 286.993142][T12409] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 286.993174][T12409] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 286.993226][T12409] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 286.998197][T12409] ntfs: volume version 3.1. [ 287.133552][T12389] loop7: detected capacity change from 0 to 32768 [ 287.571807][T12437] binder: 12436:12437 ioctl c0306201 2000000001c0 returned -22 [ 287.927425][T12454] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3118'. [ 287.978890][T12454] tipc: Enabled bearer , priority 10 [ 288.117077][T12466] loop8: detected capacity change from 0 to 64 [ 288.211011][T12428] loop3: detected capacity change from 0 to 32768 [ 288.400757][T12428] XFS (loop3): Mounting V5 Filesystem [ 288.676361][T12503] loop5: detected capacity change from 0 to 164 [ 288.689624][T12428] XFS (loop3): Ending clean mount [ 288.785601][T12509] loop7: detected capacity change from 0 to 64 [ 288.794705][ T4188] XFS (loop3): Unmounting Filesystem [ 289.304877][T12525] loop7: detected capacity change from 0 to 512 [ 289.404459][ T23] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 289.451083][T12525] EXT4-fs (loop7): 1 orphan inode deleted [ 289.486109][T12525] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 289.587238][T12525] ext4 filesystem being mounted at /504/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.686469][T12540] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 289.687859][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 289.714359][T12540] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 289.720962][T12540] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 289.730849][T12525] EXT4-fs (loop7): resizing filesystem from 64 to 1 blocks [ 289.744896][T12525] EXT4-fs warning (device loop7): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 289.756717][T12540] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 289.763528][T12540] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 289.774147][T12540] comedi comedi3: 8255: I/O port conflict (0xe,4) [ 289.793818][T12540] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 289.854419][ T23] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 289.890538][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.926225][ T23] usb 6-1: config 0 descriptor?? [ 289.959045][T12544] loop3: detected capacity change from 0 to 256 [ 289.976292][ T23] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 289.999088][T12521] loop6: detected capacity change from 0 to 32768 [ 290.036801][T12521] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.3144 (12521) [ 290.150136][T12521] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 290.174029][T12521] BTRFS info (device loop6): using free space tree [ 290.180695][T12521] BTRFS info (device loop6): has skinny extents [ 290.370437][T12538] loop8: detected capacity change from 0 to 32768 [ 290.457710][T12538] XFS (loop8): Mounting V5 Filesystem [ 290.472276][T12521] BTRFS info (device loop6): enabling ssd optimizations [ 290.544633][ T4293] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 290.635632][ T23] gspca_sonixj: reg_w1 err -71 [ 290.640513][ T23] sonixj: probe of 6-1:0.0 failed with error -71 [ 290.684259][ T23] usb 6-1: USB disconnect, device number 20 [ 290.867849][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.954432][ T4293] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 290.968065][T12538] XFS (loop8): Ending clean mount [ 291.011945][ T4293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.081337][ T4293] usb 4-1: config 0 descriptor?? [ 291.139611][ T4293] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 291.223495][T12638] netlink: 'syz.5.3158': attribute type 5 has an invalid length. [ 291.322393][ T6581] XFS (loop8): Unmounting Filesystem [ 291.344247][ T4293] gspca_sn9c2028: read1 error -32 [ 291.624318][ T4293] gspca_sn9c2028: read1 error -71 [ 291.629460][ T4293] sn9c2028: probe of 4-1:0.0 failed with error -71 [ 291.654158][ T4232] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 291.654361][ T4293] usb 4-1: USB disconnect, device number 14 [ 291.754234][ T9537] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 291.829800][T12645] loop7: detected capacity change from 0 to 32768 [ 291.915238][ T4232] usb 6-1: Using ep0 maxpacket: 32 [ 291.938923][T12645] XFS (loop7): Mounting V5 Filesystem [ 291.999913][T12645] XFS (loop7): Ending clean mount [ 292.004022][ T9537] usb 7-1: Using ep0 maxpacket: 32 [ 292.054093][ T4232] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 292.073004][ T4232] usb 6-1: config 0 has no interface number 0 [ 292.079360][ T4232] usb 6-1: config 0 interface 184 has no altsetting 0 [ 292.121744][ T6519] XFS (loop7): Unmounting Filesystem [ 292.134175][ T9537] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.161705][T12650] loop8: detected capacity change from 0 to 32768 [ 292.172475][ T9537] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 292.196243][ T9537] usb 7-1: config 0 interface 0 has no altsetting 0 [ 292.216855][ T9537] usb 7-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 292.237000][ T9537] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.254386][ T4232] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 292.265447][ T9537] usb 7-1: config 0 descriptor?? [ 292.313498][ T4232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.334236][ T4232] usb 6-1: Product: syz [ 292.338463][ T4232] usb 6-1: Manufacturer: syz [ 292.360820][ T4232] usb 6-1: SerialNumber: syz [ 292.386744][ T4232] usb 6-1: config 0 descriptor?? [ 292.459728][ T4232] smsc75xx v1.0.0 [ 292.569188][T12664] loop3: detected capacity change from 0 to 16 [ 292.680103][T12664] erofs: (device loop3): mounted with root inode @ nid 36. [ 292.717410][T12664] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 292.758980][ T9537] aureal 0003:0755:2626.0007: item fetching failed at offset 3/5 [ 292.782710][T12670] loop7: detected capacity change from 0 to 1024 [ 292.784802][ T9537] aureal: probe of 0003:0755:2626.0007 failed with error -22 [ 292.831731][T12670] EXT4-fs (loop7): inline encryption not supported [ 292.891146][T12670] EXT4-fs error (device loop7): ext4_map_blocks:629: inode #3: block 2: comm syz.7.3163: lblock 2 mapped to illegal pblock 2 (length 1) [ 292.912137][T12670] __quota_error: 10 callbacks suppressed [ 292.912155][T12670] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 292.948606][T12670] EXT4-fs error (device loop7): ext4_map_blocks:629: inode #3: block 48: comm syz.7.3163: lblock 0 mapped to illegal pblock 48 (length 1) [ 292.994061][T12670] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 293.007341][T12670] EXT4-fs error (device loop7): ext4_acquire_dquot:6209: comm syz.7.3163: Failed to acquire dquot type 0 [ 293.024932][T12670] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5842: Corrupt filesystem [ 293.029178][ T9537] usb 7-1: USB disconnect, device number 16 [ 293.059140][T12670] EXT4-fs error (device loop7): ext4_evict_inode:282: inode #11: comm syz.7.3163: mark_inode_dirty error [ 293.094586][T12670] EXT4-fs warning (device loop7): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 293.113757][T12670] EXT4-fs (loop7): 1 orphan inode deleted [ 293.120198][T12670] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,i_version,,errors=continue. Quota mode: none. [ 293.143347][T12681] loop8: detected capacity change from 0 to 1024 [ 293.150141][T12636] EXT4-fs error (device loop7): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:68: lblock 1 mapped to illegal pblock 1 (length 1) [ 293.166622][ T4232] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 293.183132][ T4232] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 293.193474][ T4232] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 293.214112][ T4232] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 293.224093][ T4292] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 293.241728][ T4232] usb 6-1: USB disconnect, device number 21 [ 293.248054][T12636] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 293.269231][T12670] EXT4-fs error (device loop7): __ext4_get_inode_loc:4327: comm syz.7.3163: Invalid inode table block 1 in block_group 0 [ 293.281405][T12636] EXT4-fs error (device loop7): ext4_release_dquot:6245: comm kworker/u4:68: Failed to release dquot type 0 [ 293.346278][T12670] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5842: Corrupt filesystem [ 293.402267][ T6519] EXT4-fs error (device loop7): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 293.439527][ T6519] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5842: Corrupt filesystem [ 293.458705][ T6519] EXT4-fs error (device loop7): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 293.486308][ T4292] usb 4-1: Using ep0 maxpacket: 16 [ 293.580327][T12687] netlink: 'syz.7.3176': attribute type 5 has an invalid length. [ 293.604351][ T4292] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 293.624636][ T4292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.666059][ T4292] usb 4-1: config 0 descriptor?? [ 293.706258][ T4292] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 293.767262][T12697] loop8: detected capacity change from 0 to 64 [ 293.896222][T12701] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3184'. [ 294.052088][T12707] hugetlbfs: Bad value for 'nr_inodes' [ 294.139107][T12711] loop8: detected capacity change from 0 to 1024 [ 294.159636][T12709] loop5: detected capacity change from 0 to 1024 [ 294.249115][T12711] EXT4-fs (loop8): inline encryption not supported [ 294.316642][T12691] loop6: detected capacity change from 0 to 32768 [ 294.330869][T12711] EXT4-fs error (device loop8): ext4_map_blocks:629: inode #3: block 2: comm syz.8.3187: lblock 2 mapped to illegal pblock 2 (length 1) [ 294.364276][ T4292] gspca_sonixj: reg_w1 err -71 [ 294.369715][ T4292] sonixj: probe of 4-1:0.0 failed with error -71 [ 294.385635][ T4292] usb 4-1: USB disconnect, device number 15 [ 294.397432][T12711] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 294.406610][T12711] EXT4-fs error (device loop8): ext4_map_blocks:629: inode #3: block 48: comm syz.8.3187: lblock 0 mapped to illegal pblock 48 (length 1) [ 294.448731][T12711] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 294.465338][T12711] EXT4-fs error (device loop8): ext4_acquire_dquot:6209: comm syz.8.3187: Failed to acquire dquot type 0 [ 294.477839][T12721] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 294.534049][T12711] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5842: Corrupt filesystem [ 294.554475][T12721] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 294.561306][T12721] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 294.598384][T12721] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 294.605485][T12721] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 294.607557][T12711] EXT4-fs error (device loop8): ext4_evict_inode:282: inode #11: comm syz.8.3187: mark_inode_dirty error [ 294.612619][T12721] comedi comedi3: 8255: I/O port conflict (0xe,4) [ 294.634221][T12711] EXT4-fs warning (device loop8): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 294.635499][T12721] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 294.654697][T12711] EXT4-fs (loop8): 1 orphan inode deleted [ 294.660312][T12636] EXT4-fs error (device loop8): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:68: lblock 1 mapped to illegal pblock 1 (length 1) [ 294.671336][T12636] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 294.694048][T12711] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,i_version,,errors=continue. Quota mode: none. [ 294.705518][T12636] EXT4-fs error (device loop8): ext4_release_dquot:6245: comm kworker/u4:68: Failed to release dquot type 0 [ 294.776395][T12711] EXT4-fs error (device loop8): __ext4_get_inode_loc:4327: comm syz.8.3187: Invalid inode table block 1 in block_group 0 [ 294.797366][T12711] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5842: Corrupt filesystem [ 294.841727][ T6581] EXT4-fs error (device loop8): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 294.886182][ T6581] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5842: Corrupt filesystem [ 294.930588][T12728] loop5: detected capacity change from 0 to 64 [ 294.938769][ T6581] EXT4-fs error (device loop8): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 295.274038][ T9537] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 295.598634][T12744] loop5: detected capacity change from 0 to 32768 [ 295.654128][ T9537] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 295.689947][ T9537] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.713831][ T9537] usb 4-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 295.744075][ T9537] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.771167][ T9537] usb 4-1: config 0 descriptor?? [ 295.987335][T12765] loop8: detected capacity change from 0 to 8 [ 296.110440][T12765] SQUASHFS error: Unable to read directory block [2c0:35] [ 296.150213][T12769] loop5: detected capacity change from 0 to 512 [ 296.222329][T12769] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 296.261059][ T9537] wacom 0003:056A:00ED.0008: hidraw0: USB HID v0.00 Device [HID 056a:00ed] on usb-dummy_hcd.3-1/input0 [ 296.284355][T12769] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.3216: bad orphan inode 15 [ 296.300577][T12769] ext4_test_bit(bit=14, block=18) = 1 [ 296.306917][T12769] is_bad_inode(inode)=0 [ 296.311261][T12769] NEXT_ORPHAN(inode)=1023 [ 296.320169][T12769] max_ino=32 [ 296.323666][T12769] i_nlink=0 [ 296.335035][T12769] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2942: inode #15: comm syz.5.3216: corrupted xattr block 19 [ 296.352552][T12769] EXT4-fs warning (device loop5): ext4_evict_inode:302: xattr delete (err -117) [ 296.367465][T12769] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 296.459756][ T9537] usb 4-1: USB disconnect, device number 16 [ 296.516568][T12777] loop8: detected capacity change from 0 to 1024 [ 296.530331][T12779] fido_id[12779]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 296.637597][T12777] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,. Quota mode: none. [ 296.741949][T12777] EXT4-fs error (device loop8): ext4_empty_dir:3166: inode #11: block 623: comm syz.8.3219: Attempting to read directory block (623) that is past i_size (638464) [ 296.802742][T12777] EXT4-fs (loop8): Remounting filesystem read-only [ 296.933385][T12789] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3224'. [ 297.091214][T12775] loop6: detected capacity change from 0 to 32768 [ 297.134893][T12798] loop8: detected capacity change from 0 to 256 [ 297.174724][T12798] exfat: Deprecated parameter 'utf8' [ 297.180274][T12798] exfat: Deprecated parameter 'utf8' [ 297.190539][T12775] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 297.196483][T12798] exfat: Deprecated parameter 'utf8' [ 297.238203][T12798] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 297.365203][T12811] netlink: 'syz.5.3230': attribute type 1 has an invalid length. [ 297.435946][ T6472] ocfs2: Unmounting device (7,6) on (node local) [ 297.693587][T12827] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3235'. [ 297.734054][T12827] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3235'. [ 297.735931][T12829] loop5: detected capacity change from 0 to 8 [ 297.755521][T12826] loop6: detected capacity change from 0 to 256 [ 297.774746][T12827] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3235'. [ 297.839150][T12833] netlink: 'syz.8.3241': attribute type 3 has an invalid length. [ 297.857699][T12826] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 297.882458][T12829] SQUASHFS error: Unable to read directory block [2c0:35] [ 298.159782][T12849] loop6: detected capacity change from 0 to 128 [ 298.202662][T12849] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 298.504427][T12858] loop5: detected capacity change from 0 to 4096 [ 298.537866][T12858] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 298.537896][T12858] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 298.538468][T12858] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 298.538498][T12858] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 298.538555][T12858] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 298.539921][T12858] ntfs: volume version 3.1. [ 298.546463][T12858] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 298.547065][T12858] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 298.549976][T12858] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 298.550007][T12858] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 298.550025][T12858] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 298.681725][T12868] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3257'. [ 298.695643][T12866] loop6: detected capacity change from 0 to 1764 [ 298.897371][T12870] loop5: detected capacity change from 0 to 2048 [ 299.036014][T12878] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 299.118383][T12870] CPU: 0 PID: 12870 Comm: syz.5.3258 Not tainted syzkaller #0 [ 299.118507][T12870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 299.118522][T12870] Call Trace: [ 299.118530][T12870] [ 299.118540][T12870] dump_stack_lvl+0x168/0x230 [ 299.118577][T12870] ? show_regs_print_info+0x20/0x20 [ 299.118622][T12870] nilfs_btree_do_lookup+0x96f/0xaf0 [ 299.118659][T12870] ? nilfs_btree_alloc_path+0x4c/0x600 [ 299.118692][T12870] ? nilfs_btree_alloc_path+0x600/0x600 [ 299.118720][T12870] ? nilfs_btree_alloc_path+0x5e5/0x600 [ 299.118756][T12870] nilfs_btree_lookup_contig+0xfa/0xc00 [ 299.118797][T12870] ? __might_sleep+0xf0/0xf0 [ 299.118817][T12870] ? read_lock_is_recursive+0x10/0x10 [ 299.118844][T12870] ? __might_sleep+0xf0/0xf0 [ 299.118860][T12870] ? __lock_acquire+0x12d9/0x7c60 [ 299.118886][T12870] ? nilfs_btree_lookup+0x70/0x70 [ 299.118926][T12870] ? down_read+0x1aa/0x2e0 [ 299.118954][T12870] nilfs_bmap_lookup_contig+0x87/0x160 [ 299.118984][T12870] nilfs_get_block+0x1f8/0x8f0 [ 299.119015][T12870] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 299.119039][T12870] ? __lock_acquire+0x12d9/0x7c60 [ 299.119077][T12870] do_mpage_readpage+0x820/0x1e30 [ 299.119127][T12870] ? mpage_readahead+0x8a0/0x8a0 [ 299.119156][T12870] ? xa_load+0x286/0x2a0 [ 299.119187][T12870] mpage_readahead+0x3a6/0x8a0 [ 299.119220][T12870] ? dio_await_one+0x390/0x390 [ 299.119263][T12870] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 299.119290][T12870] ? local_lock_release+0x97/0x170 [ 299.119322][T12870] read_pages+0x165/0x920 [ 299.119352][T12870] ? page_cache_ra_unbounded+0x930/0x930 [ 299.119384][T12870] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 299.119418][T12870] page_cache_ra_unbounded+0x830/0x930 [ 299.119457][T12870] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 299.119493][T12870] filemap_read+0x589/0x2480 [ 299.119516][T12870] ? rcu_lock_release+0x5/0x20 [ 299.119557][T12870] ? 0xffffffffa00a8000 [ 299.119576][T12870] ? find_get_pages_range_tag+0x450/0x450 [ 299.119599][T12870] ? __kernel_text_address+0x9a/0x100 [ 299.119624][T12870] ? unwind_get_return_address+0x49/0x80 [ 299.119669][T12870] ? generic_file_read_iter+0x96/0x490 [ 299.119688][T12870] ? memset+0x1e/0x40 [ 299.119712][T12870] ? iov_iter_kvec+0xb4/0x170 [ 299.119739][T12870] __kernel_read+0x4eb/0x910 [ 299.119759][T12870] ? __kasan_kmalloc+0xcc/0xf0 [ 299.119791][T12870] ? rw_verify_area+0x1b0/0x1b0 [ 299.119839][T12870] integrity_kernel_read+0x86/0xd0 [ 299.119863][T12870] ? integrity_inode_free+0x170/0x170 [ 299.119909][T12870] ima_calc_file_hash+0x1546/0x18e0 [ 299.119941][T12870] ? __lock_acquire+0x13ad/0x7c60 [ 299.119974][T12870] ? 0xffffffffa00a8000 [ 299.119997][T12870] ? ima_alloc_tfm+0x2f0/0x2f0 [ 299.120080][T12870] ? __mutex_trylock_common+0x14f/0x250 [ 299.120108][T12870] ? rcu_lock_release+0x20/0x20 [ 299.120138][T12870] ? process_measurement+0x65b/0x1a10 [ 299.120167][T12870] ima_collect_measurement+0x2ef/0x760 [ 299.120202][T12870] ? ima_get_action+0xa0/0xa0 [ 299.120242][T12870] ? preempt_count_add+0x8d/0x190 [ 299.120275][T12870] process_measurement+0xfb9/0x1a10 [ 299.120316][T12870] ? ima_file_mmap+0x150/0x150 [ 299.120339][T12870] ? tomoyo_check_path_number_acl+0x280/0x280 [ 299.120409][T12870] ? aa_get_task_label+0x21c/0x2c0 [ 299.120443][T12870] ima_file_check+0xc1/0x100 [ 299.120466][T12870] ? ima_bprm_check+0x1f0/0x1f0 [ 299.120501][T12870] path_openat+0x2735/0x2f30 [ 299.120561][T12870] ? do_filp_open+0x3e0/0x3e0 [ 299.120605][T12870] do_filp_open+0x1b3/0x3e0 [ 299.120632][T12870] ? vfs_tmpfile+0x300/0x300 [ 299.120678][T12870] ? _raw_spin_unlock+0x24/0x40 [ 299.120699][T12870] ? alloc_fd+0x598/0x630 [ 299.120734][T12870] do_sys_openat2+0x142/0x4a0 [ 299.120760][T12870] ? __lock_acquire+0x7c60/0x7c60 [ 299.120789][T12870] ? do_sys_open+0xe0/0xe0 [ 299.120815][T12870] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 299.120843][T12870] ? lock_chain_count+0x20/0x20 [ 299.120868][T12870] ? vtime_user_exit+0x2dc/0x400 [ 299.120894][T12870] __x64_sys_openat+0x135/0x160 [ 299.120935][T12870] do_syscall_64+0x4c/0xa0 [ 299.120957][T12870] ? clear_bhb_loop+0x30/0x80 [ 299.120978][T12870] ? clear_bhb_loop+0x30/0x80 [ 299.121002][T12870] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 299.121024][T12870] RIP: 0033:0x7f9ce9f7cfc9 [ 299.121046][T12870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.121065][T12870] RSP: 002b:00007f9ce81e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 299.121091][T12870] RAX: ffffffffffffffda RBX: 00007f9cea1d3fa0 RCX: 00007f9ce9f7cfc9 [ 299.121108][T12870] RDX: 000000000014b442 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 299.121124][T12870] RBP: 00007f9ce9ffff91 R08: 0000000000000000 R09: 0000000000000000 [ 299.121139][T12870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.121164][T12870] R13: 00007f9cea1d4038 R14: 00007f9cea1d3fa0 R15: 00007ffc71760b28 [ 299.121198][T12870] [ 299.121208][T12870] NILFS (loop5): btree level mismatch (ino=16): 1 != 3 [ 299.121254][T12870] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 299.131191][T12882] loop3: detected capacity change from 0 to 64 [ 299.149374][T12884] loop6: detected capacity change from 0 to 512 [ 299.153506][T12870] Remounting filesystem read-only [ 299.188420][T12883] CPU: 0 PID: 12883 Comm: syz.5.3258 Not tainted syzkaller #0 [ 299.188453][T12883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 299.188466][T12883] Call Trace: [ 299.188474][T12883] [ 299.188484][T12883] dump_stack_lvl+0x168/0x230 [ 299.188516][T12883] ? nilfs_btree_alloc_path+0x4c/0x600 [ 299.188546][T12883] ? show_regs_print_info+0x20/0x20 [ 299.188575][T12883] ? memset+0x1e/0x40 [ 299.188600][T12883] ? nilfs_btree_alloc_path+0x5e5/0x600 [ 299.188635][T12883] nilfs_btree_last_key+0x485/0x610 [ 299.188670][T12883] nilfs_bmap_last_key+0x70/0x120 [ 299.188704][T12883] nilfs_truncate_bmap+0xfb/0x340 [ 299.188729][T12883] ? nilfs_update_inode+0x1d0/0x1d0 [ 299.188755][T12883] ? nilfs_transaction_begin+0x527/0x710 [ 299.188777][T12883] ? rwsem_write_trylock+0x12f/0x1b0 [ 299.188805][T12883] nilfs_truncate+0x263/0x4c0 [ 299.188833][T12883] ? nilfs_write_failed+0x90/0x90 [ 299.188879][T12883] nilfs_setattr+0x20d/0x2a0 [ 299.188904][T12883] ? nilfs_clear_inode+0x280/0x280 [ 299.188926][T12883] ? is_bad_inode+0x9/0x40 [ 299.188951][T12883] ? __might_sleep+0xf0/0xf0 [ 299.188970][T12883] ? preempt_count_add+0x8d/0x190 [ 299.188993][T12883] ? bpf_lsm_inode_setattr+0x5/0x10 [ 299.189013][T12883] ? try_break_deleg+0x79/0x120 [ 299.189034][T12883] ? nilfs_clear_inode+0x280/0x280 [ 299.189058][T12883] notify_change+0xbcd/0xee0 [ 299.189093][T12883] do_truncate+0x197/0x220 [ 299.189114][T12883] ? aa_get_task_label+0x21c/0x2c0 [ 299.189141][T12883] ? rcu_lock_release+0x20/0x20 [ 299.189170][T12883] ? ima_bprm_check+0x1f0/0x1f0 [ 299.189198][T12883] ? bpf_lsm_path_truncate+0x5/0x10 [ 299.189222][T12883] path_openat+0x28af/0x2f30 [ 299.189267][T12883] ? __kasan_slab_alloc+0xb3/0xd0 [ 299.189288][T12883] ? __kasan_slab_alloc+0x9c/0xd0 [ 299.189312][T12883] ? verify_lock_unused+0x140/0x140 [ 299.189342][T12883] ? do_filp_open+0x3e0/0x3e0 [ 299.189385][T12883] do_filp_open+0x1b3/0x3e0 [ 299.189427][T12883] ? vfs_tmpfile+0x300/0x300 [ 299.189472][T12883] ? _raw_spin_unlock+0x24/0x40 [ 299.189492][T12883] ? alloc_fd+0x598/0x630 [ 299.189524][T12883] do_sys_openat2+0x142/0x4a0 [ 299.189555][T12883] ? do_sys_open+0xe0/0xe0 [ 299.189577][T12883] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 299.189605][T12883] ? lock_chain_count+0x20/0x20 [ 299.189628][T12883] ? vtime_user_exit+0x2dc/0x400 [ 299.189656][T12883] __x64_sys_creat+0x8c/0xb0 [ 299.189684][T12883] do_syscall_64+0x4c/0xa0 [ 299.189703][T12883] ? clear_bhb_loop+0x30/0x80 [ 299.189724][T12883] ? clear_bhb_loop+0x30/0x80 [ 299.189747][T12883] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 299.189769][T12883] RIP: 0033:0x7f9ce9f7cfc9 [ 299.189790][T12883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.189809][T12883] RSP: 002b:00007f9ce81c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 299.189833][T12883] RAX: ffffffffffffffda RBX: 00007f9cea1d4090 RCX: 00007f9ce9f7cfc9 [ 299.189850][T12883] RDX: 0000000000000000 RSI: 0000000000000124 RDI: 0000200000000080 [ 299.189874][T12883] RBP: 00007f9ce9ffff91 R08: 0000000000000000 R09: 0000000000000000 [ 299.189888][T12883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.189901][T12883] R13: 00007f9cea1d4128 R14: 00007f9cea1d4090 R15: 00007ffc71760b28 [ 299.189935][T12883] [ 299.199569][T12883] NILFS (loop5): btree level mismatch (ino=16): 1 != 3 [ 299.199620][T12883] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 299.199676][T12883] NILFS (loop5): error -5 truncating bmap (ino=16) [ 299.200415][T12884] EXT4-fs (loop6): Ignoring removed nobh option [ 299.200532][T12884] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 299.268778][T12870] syz.5.3258 (12870) used greatest stack depth: 18960 bytes left [ 299.272460][T12884] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 299.273113][T12884] EXT4-fs (loop6): 1 truncate cleaned up [ 299.273139][T12884] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 299.400381][ T4597] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 299.692136][T12896] loop5: detected capacity change from 0 to 256 [ 299.730170][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3266'. [ 299.864138][T12899] netlink: 6 bytes leftover after parsing attributes in process `syz.7.3269'. [ 299.930981][T12901] loop6: detected capacity change from 0 to 512 [ 300.222999][T12888] loop3: detected capacity change from 0 to 40427 [ 300.587830][T12916] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3277'. [ 300.845973][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3277'. [ 300.846125][T12916] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3277'. [ 300.846143][T12916] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3277'. [ 300.846159][T12916] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3277'. [ 300.889101][T12888] F2FS-fs (loop3): invalid crc value [ 300.924675][T12901] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 300.964288][T12901] ext4 filesystem being mounted at /432/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.981047][T12888] F2FS-fs (loop3): Found nat_bits in checkpoint [ 301.079691][T12901] EXT4-fs error (device loop6): ext4_get_first_dir_block:3619: inode #12: comm syz.6.3270: directory missing '..' [ 301.251299][T12888] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 301.480500][ T4188] attempt to access beyond end of device [ 301.480500][ T4188] loop3: rw=2049, want=45104, limit=40427 [ 301.839438][T12954] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3292'. [ 302.049793][T12960] loop8: detected capacity change from 0 to 512 [ 302.059420][T12962] loop7: detected capacity change from 0 to 512 [ 302.168239][T12960] EXT4-fs (loop8): orphan cleanup on readonly fs [ 302.177501][T12960] EXT4-fs warning (device loop8): ext4_xattr_inode_get:509: inode #11: comm syz.8.3296: EA inode hash validation failed [ 302.190975][T12960] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 302.207876][T12960] EXT4-fs error (device loop8): ext4_xattr_inode_update_ref:1001: inode #11: comm syz.8.3296: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 302.227136][T12960] EXT4-fs warning (device loop8): ext4_xattr_inode_dec_ref_all:1190: inode #11: comm syz.8.3296: ea_inode dec ref err=-117 [ 302.240718][T12960] EXT4-fs (loop8): 1 orphan inode deleted [ 302.246877][T12960] EXT4-fs (loop8): mounted filesystem without journal. Opts: stripe=0x0000000000000003,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 302.287969][T12962] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 302.309638][T12962] ext4 filesystem being mounted at /535/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.347072][T12962] EXT4-fs error (device loop7): ext4_get_first_dir_block:3619: inode #12: comm syz.7.3295: directory missing '..' [ 302.752671][T12985] loop8: detected capacity change from 0 to 1024 [ 302.991067][T12992] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3306'. [ 303.009216][T12992] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3306'. [ 303.024278][T12990] loop5: detected capacity change from 0 to 1764 [ 303.125556][T12971] loop6: detected capacity change from 0 to 40427 [ 303.218359][T12971] F2FS-fs (loop6): invalid crc value [ 303.267028][T12971] F2FS-fs (loop6): Found nat_bits in checkpoint [ 303.444344][T12971] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 303.569661][T13016] loop7: detected capacity change from 0 to 64 [ 303.725312][ T6472] attempt to access beyond end of device [ 303.725312][ T6472] loop6: rw=2049, want=45104, limit=40427 [ 303.856197][T13022] loop7: detected capacity change from 0 to 2048 [ 303.931379][T13022] loop7: p1 < > p3 [ 303.944125][ T9533] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 303.952292][T13022] loop7: p3 size 134217728 extends beyond EOD, truncated [ 304.304335][ T9533] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 304.337723][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 304.364058][ T9533] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.374783][ T4294] udevd[4294]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 304.417259][ T9533] usb 4-1: config 0 descriptor?? [ 304.428875][T13032] loop5: detected capacity change from 0 to 256 [ 304.458096][ T4294] udevd[4294]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 304.475236][ T4465] udevd[4465]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 304.509556][T13020] loop8: detected capacity change from 0 to 32768 [ 304.554655][T13032] exfat: Deprecated parameter 'utf8' [ 304.560514][T13032] exfat: Deprecated parameter 'namecase' [ 304.578411][T13032] exfat: Deprecated parameter 'namecase' [ 304.625071][T13032] exfat: Deprecated parameter 'utf8' [ 304.694243][T13032] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 304.764382][ T9533] usb 4-1: Cannot read MAC address [ 304.769679][ T9533] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 304.775597][T13046] loop6: detected capacity change from 0 to 512 [ 304.851967][ T9533] usb 4-1: USB disconnect, device number 17 [ 305.235688][T13062] tipc: Started in network mode [ 305.241046][T13062] tipc: Node identity aaaaaaaaaa34, cluster identity 6 [ 305.316958][T13062] tipc: Enabled bearer , priority 10 [ 305.441779][T13058] loop7: detected capacity change from 0 to 8192 [ 305.504194][ T4232] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 305.557215][T13058] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 305.587962][T13076] loop3: detected capacity change from 0 to 256 [ 305.605671][T13058] REISERFS (device loop7): using ordered data mode [ 305.612238][T13058] reiserfs: using flush barriers [ 305.624848][T13076] exfat: Deprecated parameter 'utf8' [ 305.630793][T13076] exfat: Deprecated parameter 'namecase' [ 305.646769][T13076] exfat: Deprecated parameter 'namecase' [ 305.661694][T13076] exfat: Deprecated parameter 'utf8' [ 305.669761][T13075] loop6: detected capacity change from 0 to 4096 [ 305.694634][T13076] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 305.694905][T13058] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 305.768061][T13075] EXT4-fs (loop6): Ignoring removed bh option [ 305.790888][T13075] EXT4-fs (loop6): Test dummy encryption mode enabled [ 305.863419][T13075] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 305.905809][T13075] System zones: 0-5 [ 305.914382][ T4232] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 305.935263][ T4232] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.945618][T13075] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,delalloc,bh,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 306.003203][T13084] __nla_validate_parse: 3 callbacks suppressed [ 306.003222][T13084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3347'. [ 306.004381][T13058] REISERFS (device loop7): checking transaction log (loop7) [ 306.060400][ T4232] usb 6-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 306.087030][T13058] REISERFS (device loop7): Using r5 hash to sort names [ 306.110933][T13075] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: writeback. [ 306.120486][T13058] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 306.155895][ T4232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.170097][T13058] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 306.204704][ T4232] usb 6-1: config 0 descriptor?? [ 306.344015][ T4670] tipc: Node number set to 10398378 [ 306.658976][T13068] loop8: detected capacity change from 0 to 40427 [ 306.709226][T13068] F2FS-fs (loop8): invalid crc value [ 306.730359][T13068] F2FS-fs (loop8): Found nat_bits in checkpoint [ 306.732575][ T4232] wacom 0003:056A:00ED.0009: hidraw0: USB HID v0.00 Device [HID 056a:00ed] on usb-dummy_hcd.5-1/input0 [ 306.949256][T13068] F2FS-fs (loop8): Start checkpoint disabled! [ 306.955654][ T4232] usb 6-1: USB disconnect, device number 22 [ 306.997500][T13111] fido_id[13111]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 307.030834][T13068] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 307.079231][T13116] tipc: Started in network mode [ 307.126669][T13116] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 307.150214][T13116] tipc: Enabled bearer , priority 10 [ 307.430129][T13124] loop6: detected capacity change from 0 to 1024 [ 307.520057][T13124] EXT4-fs (loop6): Ignoring removed nobh option [ 307.554183][T13124] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 307.629119][T13124] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,grpid,barrier=0x0000000000000001,bsdgroups,nouid32,max_dir_size_kb=0x00000000004007b0,abort,nodelalloc,nobh,noinit_itable,dioread_lock,dioread_nolock,,errors=continue. Quota mode: none. [ 307.712133][T13140] loop3: detected capacity change from 0 to 1024 [ 307.749225][T13142] nbd: illegal input index 65537 [ 307.877055][T12599] hfsplus: b-tree write err: -5, ino 4 [ 308.265554][ T4292] tipc: Node number set to 10398378 [ 308.419191][T13146] loop8: detected capacity change from 0 to 32768 [ 308.544205][ T4292] Bluetooth: hci3: command 0x0405 tx timeout [ 308.701182][T13178] loop8: detected capacity change from 0 to 4096 [ 308.764108][T13178] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 308.822527][T13178] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 309.464199][ T4660] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 309.594535][ T4670] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 309.701846][T13221] loop6: detected capacity change from 0 to 4096 [ 309.764432][T13221] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 309.815149][T13221] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 309.854388][ T4660] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 309.869145][ T4660] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.880579][ T4660] usb 9-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 309.891580][ T4660] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.924795][ T4660] usb 9-1: config 0 descriptor?? [ 309.940668][T13223] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3393'. [ 310.004409][ T4670] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 310.013597][ T4670] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.073858][ T4670] usb 6-1: config 0 descriptor?? [ 310.079375][T13226] binder: 13225:13226 ioctl c018620c 200000000240 returned -22 [ 310.168322][T13231] loop6: detected capacity change from 0 to 512 [ 310.243627][T13231] EXT4-fs (loop6): inline encryption not supported [ 310.261352][T13231] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 310.271017][T13235] loop3: detected capacity change from 0 to 1024 [ 310.272537][T13231] EXT4-fs (loop6): Test dummy encryption mode enabled [ 310.288319][T13231] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 310.328024][T13231] EXT4-fs (loop6): orphan cleanup on readonly fs [ 310.336731][T13231] EXT4-fs error (device loop6): ext4_orphan_get:1401: comm syz.6.3397: inode #13: comm syz.6.3397: iget: illegal inode # [ 310.353266][T13235] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 310.378886][T13231] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.3397: couldn't read orphan inode 13 (err -117) [ 310.402123][T13235] ext4 filesystem being mounted at /695/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.412790][T13231] EXT4-fs (loop6): mounted filesystem without journal. Opts: lazytime,inlinecrypt,noblock_validity,abort,mblk_io_submit,dioread_nolock,max_dir_size_kb=0x000000000000222a,nouid32,test_dummy_encryption,bsdgroups,,errors=continue. Quota mode: none. [ 310.448319][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3400'. [ 310.462309][T13231] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.3397: bg 0: block 426: padding at end of block bitmap is not set [ 310.477814][ T4670] usb 6-1: Cannot read MAC address [ 310.483198][ T4670] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 [ 310.505062][ T4660] wacom 0003:056A:00ED.000A: hidraw0: USB HID v0.00 Device [HID 056a:00ed] on usb-dummy_hcd.8-1/input0 [ 310.529402][ T4670] usb 6-1: USB disconnect, device number 23 [ 310.560851][T13244] loop7: detected capacity change from 0 to 512 [ 310.611825][T13235] EXT4-fs error (device loop3): ext4_free_blocks:6218: comm syz.3.3399: Freeing blocks not in datazone - block = 0, count = 16 [ 310.696786][ T4292] usb 9-1: USB disconnect, device number 19 [ 310.949830][T13246] fido_id[13246]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 310.982644][T13255] loop3: detected capacity change from 0 to 1024 [ 311.054935][T13255] EXT4-fs (loop3): Ignoring removed nobh option [ 311.061627][T13255] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 311.171492][T13255] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,grpid,barrier=0x0000000000000001,bsdgroups,nouid32,max_dir_size_kb=0x00000000004007b0,abort,nodelalloc,nobh,noinit_itable,dioread_lock,dioread_nolock,,errors=continue. Quota mode: none. [ 311.525414][T13261] loop5: detected capacity change from 0 to 32768 [ 311.546186][T13267] loop8: detected capacity change from 0 to 4096 [ 311.874903][T13267] ntfs3: loop8: ino=5, "/" directory corrupted [ 311.904154][T13267] ntfs3: loop8: ino=5, "/" directory corrupted [ 312.012965][T13286] loop3: detected capacity change from 0 to 128 [ 312.133279][T13286] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 312.167257][T13292] loop5: detected capacity change from 0 to 128 [ 312.214467][ T4188] sysv_free_block: trying to free block not in datazone [ 312.235394][T13292] hpfs: bad mount options. [ 312.244924][ T4188] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 312.375347][ T7] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 312.741297][T13316] delete_channel: no stack [ 312.780023][ T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 312.806344][ T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.839319][ T7] usb 7-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 312.864018][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.900541][ T7] usb 7-1: config 0 descriptor?? [ 312.961947][T13323] loop8: detected capacity change from 0 to 512 [ 312.970063][T13328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3439'. [ 313.065856][T13323] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 313.129893][T13339] loop3: detected capacity change from 0 to 164 [ 313.159154][T13323] EXT4-fs (loop8): re-mounted. Opts: (null). Quota mode: writeback. [ 313.195273][T13339] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 313.211503][T13323] EXT4-fs (loop8): re-mounted. Opts: . Quota mode: writeback. [ 313.222107][T13339] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 313.240180][T13339] rock: directory entry would overflow storage [ 313.254003][T13339] rock: sig=0x4f50, size=4, remaining=3 [ 313.259725][T13339] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 313.405078][ T7] wacom 0003:056A:00ED.000B: hidraw0: USB HID v0.00 Device [HID 056a:00ed] on usb-dummy_hcd.6-1/input0 [ 313.415684][T13344] loop5: detected capacity change from 0 to 8192 [ 313.518284][T13344] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 313.533709][T13344] REISERFS (device loop5): using ordered data mode [ 313.541868][T13344] reiserfs: using flush barriers [ 313.565278][T13344] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 313.591865][T13344] REISERFS (device loop5): checking transaction log (loop5) [ 313.621872][ T4232] usb 7-1: USB disconnect, device number 17 [ 313.628482][T13344] REISERFS (device loop5): Using r5 hash to sort names [ 313.665747][T13344] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 313.700270][T13344] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 313.736538][T13344] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 313.760186][T13344] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 313.802374][T13352] loop8: detected capacity change from 0 to 512 [ 313.830322][T13352] EXT4-fs (loop8): inline encryption not supported [ 313.838023][T13352] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 313.850710][T13352] EXT4-fs (loop8): Test dummy encryption mode enabled [ 313.868724][T13352] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 313.884211][T13352] EXT4-fs (loop8): orphan cleanup on readonly fs [ 313.890723][T13352] EXT4-fs error (device loop8): ext4_orphan_get:1401: comm syz.8.3448: inode #13: comm syz.8.3448: iget: illegal inode # [ 313.906541][T13352] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.3448: couldn't read orphan inode 13 (err -117) [ 313.919708][T13352] EXT4-fs (loop8): mounted filesystem without journal. Opts: lazytime,inlinecrypt,noblock_validity,abort,mblk_io_submit,dioread_nolock,max_dir_size_kb=0x000000000000222a,nouid32,test_dummy_encryption,bsdgroups,,errors=continue. Quota mode: none. [ 313.969331][T13352] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.3448: bg 0: block 426: padding at end of block bitmap is not set [ 314.193252][T13360] loop6: detected capacity change from 0 to 16 [ 314.211464][T13362] loop8: detected capacity change from 0 to 128 [ 314.282257][T13360] erofs: (device loop6): mounted with root inode @ nid 36. [ 314.315776][T13367] IPVS: Error joining to the multicast group [ 314.337739][T13362] EXT4-fs (loop8): mounted filesystem without journal. Opts: resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000006,,errors=continue. Quota mode: none. [ 314.368963][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 314.368978][ T26] audit: type=1800 audit(1761105148.521:9): pid=13360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3451" name="file3" dev="loop6" ino=89 res=0 errno=0 [ 314.395288][T13362] ext4 filesystem being mounted at /515/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.482543][T13375] loop3: detected capacity change from 0 to 128 [ 314.613137][T13375] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000006,,errors=continue. Quota mode: none. [ 314.765190][T13375] ext4 filesystem being mounted at /714/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.784070][ T7] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 315.034113][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 315.154683][ T7] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.180583][ T7] usb 6-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 315.196587][T13407] loop7: detected capacity change from 0 to 512 [ 315.221071][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.252486][T13411] IPVS: Error joining to the multicast group [ 315.282063][T13407] EXT4-fs (loop7): inline encryption not supported [ 315.289241][T13406] loop8: detected capacity change from 0 to 4096 [ 315.296101][T13407] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 315.304669][ T7] usb 6-1: config 0 descriptor?? [ 315.335782][T13407] EXT4-fs (loop7): Test dummy encryption mode enabled [ 315.350030][ T7] dw2102: su3000_identify_state [ 315.362088][ T7] dvb-usb: found a 'TeVii S662' in warm state. [ 315.371177][ T7] dw2102: su3000_power_ctrl: 1, initialized 0 [ 315.379917][T13406] ntfs: (device loop8): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 315.385869][ T7] dvb-usb: bulk message failed: -22 (2/0) [ 315.408165][T13407] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 315.473454][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 315.489945][T13415] loop6: detected capacity change from 0 to 164 [ 315.498448][T13407] EXT4-fs (loop7): orphan cleanup on readonly fs [ 315.505315][T13407] EXT4-fs error (device loop7): ext4_orphan_get:1401: comm syz.7.3468: inode #13: comm syz.7.3468: iget: illegal inode # [ 315.521443][T13406] ntfs: (device loop8): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 315.541918][T13415] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 315.546924][T13407] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.3468: couldn't read orphan inode 13 (err -117) [ 315.556748][T13377] dvb-usb: bulk message failed: -22 (4/0) [ 315.566002][T13407] EXT4-fs (loop7): mounted filesystem without journal. Opts: lazytime,inlinecrypt,noblock_validity,abort,mblk_io_submit,dioread_nolock,max_dir_size_kb=0x000000000000222a,nouid32,test_dummy_encryption,bsdgroups,,errors=continue. Quota mode: none. [ 315.636005][ T7] dvbdev: DVB: registering new adapter (TeVii S662) [ 315.650615][T13377] dw2102: i2c transfer failed. [ 315.653815][T13406] ntfs: (device loop8): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 315.671165][ T7] usb 6-1: media controller created [ 315.678370][T13415] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 315.679351][T13406] ntfs: (device loop8): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 315.688426][T13407] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.3468: bg 0: block 426: padding at end of block bitmap is not set [ 315.709138][T13406] ntfs: (device loop8): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 315.735951][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 315.749477][T13415] rock: directory entry would overflow storage [ 315.759998][ T7] dw2102: i2c transfer failed. [ 315.772053][T13406] ntfs: (device loop8): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 315.774435][T13415] rock: sig=0x4f50, size=4, remaining=3 [ 315.798740][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 315.808816][ T7] dw2102: i2c transfer failed. [ 315.818960][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 315.842103][ T7] dw2102: i2c transfer failed. [ 315.854032][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 315.861440][T13415] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 315.867704][ T7] dw2102: i2c transfer failed. [ 315.876884][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 315.884540][ T7] dw2102: i2c transfer failed. [ 315.892402][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 315.898428][T13406] ntfs: (device loop8): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 315.898470][T13406] ntfs: (device loop8): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 315.898528][T13406] ntfs: (device loop8): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 315.901497][T13406] ntfs: volume version 3.1. [ 315.914317][ T7] dw2102: i2c transfer failed. [ 315.962695][ T7] dvb-usb: MAC address: 02:02:02:02:02:02 [ 316.034716][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 316.123045][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 316.140798][ T7] dw2102: command 0x0e transfer failed. [ 316.179217][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 316.202852][ T7] dw2102: command 0x0e transfer failed. [ 316.380756][T13440] loop5: detected capacity change from 0 to 1024 [ 316.491713][T13440] EXT4-fs (loop5): Test dummy encryption mode enabled [ 316.515257][T13440] EXT4-fs (loop5): Ignoring removed orlov option [ 316.520103][T13446] loop6: detected capacity change from 0 to 1024 [ 316.522976][T13447] loop8: detected capacity change from 0 to 164 [ 316.544226][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 316.550551][ T7] dw2102: command 0x0e transfer failed. [ 316.567857][T13440] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 316.600027][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 316.620677][ T7] dw2102: command 0x0e transfer failed. [ 316.633413][T13447] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 316.676204][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 316.700200][ T7] dw2102: command 0x51 transfer failed. [ 316.719312][T13447] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 316.748138][ T7] dvb-usb: bulk message failed: -22 (5/0) [ 316.756279][T13447] rock: directory entry would overflow storage [ 316.773839][ T7] dw2102: i2c probe for address 0x68 failed. [ 316.775824][T13447] rock: sig=0x4f50, size=4, remaining=3 [ 316.808037][T13447] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 316.810064][ T7] dvb-usb: bulk message failed: -22 (5/0) [ 316.842817][ T7] dw2102: i2c probe for address 0x69 failed. [ 316.859493][ T7] dvb-usb: bulk message failed: -22 (5/0) [ 316.881087][ T7] dw2102: i2c probe for address 0x6a failed. [ 316.904295][ T7] dw2102: probing for demodulator failed. Is the external power switched on? [ 316.948504][ T7] dvb-usb: no frontend was attached by 'TeVii S662' [ 317.154041][ T7] rc_core: IR keymap rc-tt-1500 not found [ 317.159822][ T7] Registered IR keymap rc-empty [ 317.212852][ T7] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 317.221853][T13463] loop8: detected capacity change from 0 to 512 [ 317.243028][ T7] input: TeVii S662 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input32 [ 317.268016][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.300662][ T7] dvb-usb: schedule remote query interval to 250 msecs. [ 317.317925][ T7] dw2102: su3000_power_ctrl: 0, initialized 1 [ 317.337394][ T7] dvb-usb: TeVii S662 successfully initialized and connected. [ 317.345667][T13463] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 317.378945][ T7] usb 6-1: USB disconnect, device number 24 [ 317.555240][T13463] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 317.580817][T13463] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.3495: invalid indirect mapped block 2683928664 (level 1) [ 317.598997][ T7] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 317.675683][T13463] EXT4-fs (loop8): Remounting filesystem read-only [ 317.704518][T13463] EXT4-fs (loop8): 1 truncate cleaned up [ 317.742395][T13463] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 317.953147][T13494] netlink: 364 bytes leftover after parsing attributes in process `syz.3.3509'. [ 317.973978][ T4670] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 317.978721][T13494] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 318.263984][ T4670] usb 7-1: Using ep0 maxpacket: 32 [ 318.390132][ T4670] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.432733][ T4670] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.443039][ T4670] usb 7-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 318.453725][ T4670] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.493546][ T4670] usb 7-1: config 0 descriptor?? [ 318.629219][T13510] loop3: detected capacity change from 0 to 4096 [ 318.703175][T13489] loop5: detected capacity change from 0 to 32768 [ 318.722179][T13518] binder: 13517:13518 ioctl 4018620d 0 returned -22 [ 318.729607][T13518] binder: 13517:13518 ioctl c0046209 0 returned -22 [ 318.855233][T13524] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 318.878564][T13489] XFS (loop5): Mounting V5 Filesystem [ 318.896664][T13526] loop7: detected capacity change from 0 to 1024 [ 318.940315][T13526] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 318.998688][ T4670] hid_mf 0003:0079:1801.000C: hidraw0: USB HID v0.00 Device [HID 0079:1801] on usb-dummy_hcd.6-1/input0 [ 319.021300][ T4670] hid_mf 0003:0079:1801.000C: Invalid report, this should never happen! [ 319.037348][ T4670] hid_mf 0003:0079:1801.000C: Force feedback init failed. [ 319.061717][T13526] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 319.120180][T13489] XFS (loop5): Ending clean mount [ 319.132650][T13526] EXT4-fs error (device loop7): ext4_get_journal_inode:5160: inode #5: comm syz.7.3521: unexpected bad inode w/o EXT4_IGET_BAD [ 319.191911][T13526] EXT4-fs (loop7): no journal found [ 319.216223][T13526] EXT4-fs (loop7): can't get journal size [ 319.231931][T13489] XFS (loop5): Quotacheck needed: Please wait. [ 319.241348][ T4670] usb 7-1: USB disconnect, device number 18 [ 319.251579][T13526] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8800e11c, mo2=0102] [ 319.276997][T13526] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,debug,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 319.412653][T13489] XFS (loop5): Quotacheck: Done. [ 319.539005][T13545] loop3: detected capacity change from 0 to 128 [ 319.582568][ T4597] XFS (loop5): Unmounting Filesystem [ 319.651735][T13545] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 319.672350][T13539] loop7: detected capacity change from 0 to 8192 [ 319.898820][T13539] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 319.958699][T13539] REISERFS (device loop7): using ordered data mode [ 319.978415][T13539] reiserfs: using flush barriers [ 319.996167][T13552] netlink: 364 bytes leftover after parsing attributes in process `syz.6.3542'. [ 320.034264][T13539] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 320.090083][T13552] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 320.104445][T13539] REISERFS (device loop7): checking transaction log (loop7) [ 320.126764][T13556] loop8: detected capacity change from 0 to 512 [ 320.172346][T13556] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 320.182710][T13539] REISERFS (device loop7): Using r5 hash to sort names [ 320.215023][T13539] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 320.251207][T13556] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002] [ 320.268225][T13539] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 320.288039][T13539] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 320.288403][T13556] EXT4-fs (loop8): orphan cleanup on readonly fs [ 320.303543][T13539] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 320.395025][T13556] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.3534: bg 0: block 361: padding at end of block bitmap is not set [ 320.419394][T13561] loop6: detected capacity change from 0 to 1024 [ 320.452383][T13556] EXT4-fs (loop8): Remounting filesystem read-only [ 320.463996][T13556] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 320.525102][T13556] EXT4-fs (loop8): Remounting filesystem read-only [ 320.545061][T13556] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #11: comm syz.8.3534: attempt to clear invalid blocks 33619980 len 1 [ 320.577518][T13561] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000001,usrjquota=,. Quota mode: none. [ 320.585977][T13556] EXT4-fs (loop8): Remounting filesystem read-only [ 320.605368][T13556] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.3534: invalid indirect mapped block 1811939328 (level 0) [ 320.699238][T13556] EXT4-fs (loop8): Remounting filesystem read-only [ 320.709604][T13556] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.3534: invalid indirect mapped block 2185560079 (level 1) [ 320.723398][T13567] loop3: detected capacity change from 0 to 4096 [ 320.725173][T13561] EXT4-fs error (device loop6): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.6.3536: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 320.734641][T13556] EXT4-fs (loop8): Remounting filesystem read-only [ 320.759860][T13556] EXT4-fs (loop8): 1 truncate cleaned up [ 320.766437][T13561] EXT4-fs (loop6): Remounting filesystem read-only [ 320.773718][T13556] EXT4-fs (loop8): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000000000000. Quota mode: none. [ 320.808487][T13567] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 320.822279][T13561] EXT4-fs error (device loop6) in ext4_delete_inline_entry:1790: Corrupt filesystem [ 320.854166][T13561] EXT4-fs (loop6): Remounting filesystem read-only [ 320.932565][T13567] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 320.934094][T13574] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3539'. [ 320.999842][T13574] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3539'. [ 321.040062][T13574] netlink: 'syz.7.3539': attribute type 14 has an invalid length. [ 321.544719][T13594] loop3: detected capacity change from 0 to 1024 [ 321.849365][T13598] loop8: detected capacity change from 0 to 1024 [ 321.955980][T13576] loop5: detected capacity change from 0 to 32768 [ 322.029917][T13598] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000001,usrjquota=,. Quota mode: none. [ 322.053253][T13578] loop6: detected capacity change from 0 to 32768 [ 322.053253][T13603] loop3: detected capacity change from 0 to 256 [ 322.081117][T13598] EXT4-fs error (device loop8): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.8.3553: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 322.141613][T13598] EXT4-fs (loop8): Remounting filesystem read-only [ 322.168991][T13598] EXT4-fs error (device loop8) in ext4_delete_inline_entry:1790: Corrupt filesystem [ 322.180171][T13598] EXT4-fs (loop8): Remounting filesystem read-only [ 322.255781][T13576] XFS (loop5): Mounting V5 Filesystem [ 322.270307][T13590] loop7: detected capacity change from 0 to 40427 [ 322.322734][T13603] FAT-fs (loop3): Directory bread(block 64) failed [ 322.325167][T13590] F2FS-fs (loop7): invalid crc value [ 322.350020][T13578] XFS (loop6): Mounting V5 Filesystem [ 322.354143][T13603] FAT-fs (loop3): Directory bread(block 65) failed [ 322.376968][T13576] XFS (loop5): Ending clean mount [ 322.456936][T13590] F2FS-fs (loop7): Found nat_bits in checkpoint [ 322.477916][T13603] FAT-fs (loop3): Directory bread(block 66) failed [ 322.524236][T13590] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 322.534071][T13603] FAT-fs (loop3): Directory bread(block 67) failed [ 322.594736][T13603] FAT-fs (loop3): Directory bread(block 68) failed [ 322.622443][T13578] XFS (loop6): Ending clean mount [ 322.638790][T13603] FAT-fs (loop3): Directory bread(block 69) failed [ 322.646244][T13603] FAT-fs (loop3): Directory bread(block 70) failed [ 322.654463][T13603] FAT-fs (loop3): Directory bread(block 71) failed [ 322.661869][T13578] XFS (loop6): Quotacheck needed: Please wait. [ 322.686574][T13603] FAT-fs (loop3): Directory bread(block 72) failed [ 322.737536][T13603] FAT-fs (loop3): Directory bread(block 73) failed [ 322.778862][ T6519] attempt to access beyond end of device [ 322.778862][ T6519] loop7: rw=2049, want=45104, limit=40427 [ 322.820424][T13578] XFS (loop6): Quotacheck: Done. [ 322.823772][ T4597] XFS (loop5): Unmounting Filesystem [ 323.112412][ T6472] XFS (loop6): Unmounting Filesystem [ 323.253767][T13639] netlink: 2868 bytes leftover after parsing attributes in process `syz.3.3563'. [ 323.468686][T13645] loop3: detected capacity change from 0 to 1024 [ 323.560346][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 323.560363][ T26] audit: type=1326 audit(1761105157.711:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.7.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5464474fc9 code=0x7ffc0000 [ 323.571844][T13647] loop7: detected capacity change from 0 to 512 [ 323.627470][ T26] audit: type=1326 audit(1761105157.711:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.7.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5464474fc9 code=0x7ffc0000 [ 323.662518][ T26] audit: type=1326 audit(1761105157.711:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.7.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5464475003 code=0x7ffc0000 [ 323.686266][T13645] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000001,usrjquota=,. Quota mode: none. [ 323.726574][ T26] audit: type=1326 audit(1761105157.721:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.7.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5464473a7f code=0x7ffc0000 [ 323.728311][T13647] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 323.749210][T13645] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.3.3566: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 323.781593][ T26] audit: type=1326 audit(1761105157.721:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.7.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5464475057 code=0x7ffc0000 [ 323.804823][ T26] audit: type=1326 audit(1761105157.721:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.7.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5464473810 code=0x7ffc0000 [ 323.827721][T13645] EXT4-fs (loop3): Remounting filesystem read-only [ 323.837516][T13645] EXT4-fs error (device loop3) in ext4_delete_inline_entry:1790: Corrupt filesystem [ 323.847787][ T26] audit: type=1326 audit(1761105157.721:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.7.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5464474bcb code=0x7ffc0000 [ 323.870542][T13645] EXT4-fs (loop3): Remounting filesystem read-only [ 323.877687][ T26] audit: type=1326 audit(1761105157.791:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.7.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5464473c2a code=0x7ffc0000 [ 323.937490][ T26] audit: type=1326 audit(1761105157.791:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.7.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5464473c2a code=0x7ffc0000 [ 323.942782][T13647] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 323.984195][ T26] audit: type=1326 audit(1761105157.871:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.7.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5464473717 code=0x7ffc0000 [ 324.025945][T13647] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.3558: invalid indirect mapped block 2683928664 (level 1) [ 324.041436][T13647] EXT4-fs (loop7): Remounting filesystem read-only [ 324.048528][T13647] EXT4-fs (loop7): 1 truncate cleaned up [ 324.054442][T13647] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 324.221651][T13665] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3574'. [ 324.287372][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3574'. [ 324.329794][T13665] netlink: 'syz.5.3574': attribute type 14 has an invalid length. [ 324.589641][T13679] loop3: detected capacity change from 0 to 2048 [ 324.684972][T13679] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=18576, location=18576 [ 324.717012][T13682] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3562'. [ 324.726510][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3562'. [ 324.751998][T13679] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.085405][T13695] program syz.6.3587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.367753][T13703] loop6: detected capacity change from 0 to 256 [ 325.413611][T13705] netlink: 2868 bytes leftover after parsing attributes in process `syz.5.3592'. [ 325.483770][T13703] FAT-fs (loop6): Directory bread(block 64) failed [ 325.490237][T13692] loop8: detected capacity change from 0 to 40427 [ 325.507588][T13703] FAT-fs (loop6): Directory bread(block 65) failed [ 325.528285][T13703] FAT-fs (loop6): Directory bread(block 66) failed [ 325.538077][T13703] FAT-fs (loop6): Directory bread(block 67) failed [ 325.564165][T13692] F2FS-fs (loop8): invalid crc value [ 325.569127][T13703] FAT-fs (loop6): Directory bread(block 68) failed [ 325.584808][T13703] FAT-fs (loop6): Directory bread(block 69) failed [ 325.598098][T13692] F2FS-fs (loop8): Found nat_bits in checkpoint [ 325.598741][T13703] FAT-fs (loop6): Directory bread(block 70) failed [ 325.618415][T13707] loop5: detected capacity change from 0 to 2048 [ 325.635283][T13703] FAT-fs (loop6): Directory bread(block 71) failed [ 325.643653][T13707] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=18576, location=18576 [ 325.656557][T13703] FAT-fs (loop6): Directory bread(block 72) failed [ 325.663325][T13703] FAT-fs (loop6): Directory bread(block 73) failed [ 325.691399][T13707] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.763518][T13703] attempt to access beyond end of device [ 325.763518][T13703] loop6: rw=524288, want=1164, limit=256 [ 325.774163][T13692] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 325.777747][T13703] attempt to access beyond end of device [ 325.777747][T13703] loop6: rw=0, want=1164, limit=256 [ 326.070729][ T6581] attempt to access beyond end of device [ 326.070729][ T6581] loop8: rw=2049, want=45104, limit=40427 [ 326.222648][T13724] loop5: detected capacity change from 0 to 256 [ 326.281302][T13724] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 326.919930][ T5498] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 327.147930][T13749] loop3: detected capacity change from 0 to 40427 [ 327.175218][ T5498] usb 6-1: Using ep0 maxpacket: 8 [ 327.196982][T13749] F2FS-fs (loop3): invalid crc value [ 327.228468][T13749] F2FS-fs (loop3): Found nat_bits in checkpoint [ 327.305427][ T5498] usb 6-1: config 140 has an invalid interface number: 41 but max is 0 [ 327.324007][ T5498] usb 6-1: config 140 has no interface number 0 [ 327.343201][ T5498] usb 6-1: config 140 interface 41 altsetting 0 endpoint 0x6 has invalid maxpacket 926, setting to 64 [ 327.367379][T13760] loop8: detected capacity change from 0 to 2048 [ 327.406864][T13749] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 327.529910][T13760] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 327.579986][ T5498] usb 6-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=77.86 [ 327.592941][ T4188] attempt to access beyond end of device [ 327.592941][ T4188] loop3: rw=2049, want=45104, limit=40427 [ 327.619988][ T5498] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.653330][ T5498] usb 6-1: Product: syz [ 327.666853][ T5498] usb 6-1: Manufacturer: syz [ 327.698833][ T5498] usb 6-1: SerialNumber: syz [ 328.104153][ T5498] rndis_wlan 6-1:140.41: invalid descriptor buffer length [ 328.111375][ T5498] usb 6-1: bad CDC descriptors [ 328.182976][ T5498] rndis_host 6-1:140.41: invalid descriptor buffer length [ 328.213957][ T5498] usb 6-1: bad CDC descriptors [ 328.219211][ T5498] cdc_acm 6-1:140.41: invalid descriptor buffer length [ 328.303441][ T5498] usb 6-1: USB disconnect, device number 25 [ 328.311310][T13790] netlink: 'syz.7.3629': attribute type 1 has an invalid length. [ 328.380742][T13790] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3629'. [ 328.760279][T13813] loop6: detected capacity change from 0 to 2048 [ 329.105234][T13837] netlink: 'syz.6.3647': attribute type 1 has an invalid length. [ 329.172810][T13837] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3647'. [ 329.382500][T13845] loop5: detected capacity change from 0 to 1024 [ 329.490427][T13849] loop8: detected capacity change from 0 to 4096 [ 329.613349][T13854] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 329.636297][T13853] loop3: detected capacity change from 0 to 2048 [ 329.643437][T12581] hfsplus: b-tree write err: -5, ino 4 [ 329.650688][ T26] kauditd_printk_skb: 70 callbacks suppressed [ 329.650703][ T26] audit: type=1800 audit(1761105163.811:112): pid=13849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3657" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 330.483174][T13895] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3678'. [ 330.634191][ T4582] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 330.754042][ T4293] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 330.874010][ T4582] usb 4-1: Using ep0 maxpacket: 8 [ 330.994254][ T4293] usb 6-1: Using ep0 maxpacket: 8 [ 331.130165][ T4293] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 331.174397][ T4582] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 331.188344][ T4582] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 331.200118][ T4582] usb 4-1: Product: syz [ 331.205381][ T4582] usb 4-1: Manufacturer: syz [ 331.210243][ T4582] usb 4-1: SerialNumber: syz [ 331.217562][ T4582] usb 4-1: config 0 descriptor?? [ 331.279525][ T4582] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 331.324698][ T4293] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 331.338371][ T4293] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 331.363946][ T4293] usb 6-1: Product: syz [ 331.373546][ T4293] usb 6-1: Manufacturer: syz [ 331.379093][ T4293] usb 6-1: SerialNumber: syz [ 331.398005][T13913] loop8: detected capacity change from 0 to 64 [ 331.521781][T13913] [ 331.524283][T13913] ====================================================== [ 331.533061][T13913] WARNING: possible circular locking dependency detected [ 331.538906][T13918] loop6: detected capacity change from 0 to 8 [ 331.541654][T13913] syzkaller #0 Not tainted [ 331.552813][T13913] ------------------------------------------------------ [ 331.560407][T13913] syz.8.3687/13913 is trying to acquire lock: [ 331.563851][T13918] unable to read id index table [ 331.567533][T13913] ffff88805ef441f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xd7/0x1280 [ 331.584261][T13913] [ 331.584261][T13913] but task is already holding lock: [ 331.592357][T13913] ffff888061e060b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 331.602133][T13913] [ 331.602133][T13913] which lock already depends on the new lock. [ 331.602133][T13913] [ 331.613320][T13913] [ 331.613320][T13913] the existing dependency chain (in reverse order) is: [ 331.623083][T13913] [ 331.623083][T13913] -> #1 (&tree->tree_lock#2/1){+.+.}-{3:3}: [ 331.631290][T13913] __mutex_lock_common+0x1eb/0x2390 [ 331.637077][T13913] mutex_lock_nested+0x17/0x20 [ 331.642983][T13913] hfs_find_init+0x15b/0x1d0 [ 331.649359][T13913] hfs_extend_file+0x2eb/0x1280 [ 331.655655][T13913] hfs_bmap_reserve+0x103/0x420 [ 331.661693][T13913] hfs_cat_move+0x18a/0xc80 [ 331.667123][T13913] hfs_rename+0x22c/0x320 [ 331.673420][T13913] vfs_rename+0xbbf/0x10d0 [ 331.679138][T13913] do_renameat2+0xa83/0xf70 [ 331.684387][T13913] __x64_sys_rename+0x82/0x90 [ 331.690236][T13913] do_syscall_64+0x4c/0xa0 [ 331.695369][T13913] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 331.701983][T13913] [ 331.701983][T13913] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 331.711753][T13913] __lock_acquire+0x2c33/0x7c60 [ 331.717403][T13913] lock_acquire+0x197/0x3f0 [ 331.722536][T13913] __mutex_lock_common+0x1eb/0x2390 [ 331.728360][T13913] mutex_lock_nested+0x17/0x20 [ 331.733933][T13913] hfs_extend_file+0xd7/0x1280 [ 331.739260][T13913] hfs_bmap_reserve+0x103/0x420 [ 331.744755][T13913] __hfs_ext_write_extent+0x1fa/0x470 [ 331.750878][T13913] hfs_ext_write_extent+0x15e/0x1e0 [ 331.756875][T13913] hfs_write_inode+0x8e/0x970 [ 331.762282][T13913] __writeback_single_inode+0x6c3/0xda0 [ 331.768497][T13913] writeback_single_inode+0x221/0x8b0 [ 331.775407][T13913] write_inode_now+0x217/0x280 [ 331.780723][T13913] hfs_file_fsync+0xa3/0x140 [ 331.785964][T13913] generic_file_write_iter+0x157/0x1b0 [ 331.792090][T13913] vfs_write+0x712/0xd00 [ 331.796972][T13913] ksys_write+0x14d/0x250 [ 331.802949][T13913] do_syscall_64+0x4c/0xa0 [ 331.808105][T13913] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 331.815571][T13913] [ 331.815571][T13913] other info that might help us debug this: [ 331.815571][T13913] [ 331.843152][T13913] Possible unsafe locking scenario: [ 331.843152][T13913] [ 331.851569][T13913] CPU0 CPU1 [ 331.857310][T13913] ---- ---- [ 331.863060][T13913] lock(&tree->tree_lock#2/1); [ 331.867964][T13913] lock(&HFS_I(tree->inode)->extents_lock); [ 331.876487][T13913] lock(&tree->tree_lock#2/1); [ 331.884805][T13913] lock(&HFS_I(tree->inode)->extents_lock); [ 331.891134][T13913] [ 331.891134][T13913] *** DEADLOCK *** [ 331.891134][T13913] [ 331.900377][T13913] 4 locks held by syz.8.3687/13913: [ 331.905748][T13913] #0: ffff88807784d270 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 331.915260][T13913] #1: ffff888077d14460 (sb_writers#24){.+.+}-{0:0}, at: vfs_write+0x28a/0xd00 [ 331.924427][T13913] #2: ffff88805ef45728 (&sb->s_type->i_mutex_key#38){+.+.}-{3:3}, at: hfs_file_fsync+0x99/0x140 [ 331.935163][T13913] #3: ffff888061e060b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 331.945311][T13913] [ 331.945311][T13913] stack backtrace: [ 331.951564][T13913] CPU: 1 PID: 13913 Comm: syz.8.3687 Not tainted syzkaller #0 [ 331.960239][T13913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 331.970334][T13913] Call Trace: [ 331.973629][T13913] [ 331.976664][T13913] dump_stack_lvl+0x168/0x230 [ 331.981356][T13913] ? load_image+0x3b0/0x3b0 [ 331.985958][T13913] ? show_regs_print_info+0x20/0x20 [ 331.991642][T13913] ? print_circular_bug+0x12b/0x1a0 [ 331.997423][T13913] check_noncircular+0x274/0x310 [ 332.002482][T13913] ? add_chain_block+0x940/0x940 [ 332.007564][T13913] ? lockdep_lock+0xdc/0x1e0 [ 332.012173][T13913] ? __lock_acquire+0x7c60/0x7c60 [ 332.017271][T13913] ? mark_lock+0x94/0x320 [ 332.021613][T13913] __lock_acquire+0x2c33/0x7c60 [ 332.026477][T13913] ? unwind_get_return_address+0x49/0x80 [ 332.032118][T13913] ? verify_lock_unused+0x140/0x140 [ 332.037322][T13913] ? stack_trace_save+0x98/0xe0 [ 332.042193][T13913] ? stack_trace_snprint+0xf0/0xf0 [ 332.047401][T13913] ? check_noncircular+0x16f/0x310 [ 332.052596][T13913] ? add_chain_block+0x940/0x940 [ 332.057770][T13913] lock_acquire+0x197/0x3f0 [ 332.062292][T13913] ? hfs_extend_file+0xd7/0x1280 [ 332.067320][T13913] ? __might_sleep+0xf0/0xf0 [ 332.071917][T13913] ? read_lock_is_recursive+0x10/0x10 [ 332.077431][T13913] ? hfs_extend_file+0xd7/0x1280 [ 332.082649][T13913] __mutex_lock_common+0x1eb/0x2390 [ 332.087875][T13913] ? hfs_extend_file+0xd7/0x1280 [ 332.092825][T13913] ? verify_lock_unused+0x140/0x140 [ 332.098034][T13913] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 332.104132][T13913] ? __rwlock_init+0x140/0x140 [ 332.108920][T13913] ? mutex_lock_io_nested+0x60/0x60 [ 332.114403][T13913] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 332.120316][T13913] mutex_lock_nested+0x17/0x20 [ 332.125106][T13913] hfs_extend_file+0xd7/0x1280 [ 332.130497][T13913] ? __mutex_trylock_common+0x14f/0x250 [ 332.136163][T13913] ? hfs_get_block+0xbd0/0xbd0 [ 332.141028][T13913] ? writeback_single_inode+0x221/0x8b0 [ 332.146691][T13913] ? hfs_file_fsync+0xa3/0x140 [ 332.151473][T13913] ? generic_file_write_iter+0x157/0x1b0 [ 332.157380][T13913] ? vfs_write+0x712/0xd00 [ 332.161949][T13913] ? hfs_find_init+0x15b/0x1d0 [ 332.166737][T13913] ? hfs_find_init+0x15b/0x1d0 [ 332.171645][T13913] ? hfs_find_init+0x15b/0x1d0 [ 332.176456][T13913] ? __mutex_lock_common+0x431/0x2390 [ 332.181844][T13913] ? hfs_brec_find+0x18b/0x500 [ 332.186718][T13913] hfs_bmap_reserve+0x103/0x420 [ 332.191592][T13913] __hfs_ext_write_extent+0x1fa/0x470 [ 332.196987][T13913] hfs_ext_write_extent+0x15e/0x1e0 [ 332.202231][T13913] ? verify_lock_unused+0x140/0x140 [ 332.207584][T13913] ? hfs_ext_keycmp+0x310/0x310 [ 332.212643][T13913] ? hfs_free_extents+0x430/0x430 [ 332.217884][T13913] ? __lock_acquire+0x7c60/0x7c60 [ 332.223037][T13913] hfs_write_inode+0x8e/0x970 [ 332.227735][T13913] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 332.233206][T13913] ? __writeback_single_inode+0x471/0xda0 [ 332.238933][T13913] ? __lock_acquire+0x7c60/0x7c60 [ 332.243965][T13913] ? do_raw_spin_lock+0x11d/0x280 [ 332.249090][T13913] ? __rwlock_init+0x140/0x140 [ 332.254297][T13913] ? __lock_acquire+0x7c60/0x7c60 [ 332.259390][T13913] __writeback_single_inode+0x6c3/0xda0 [ 332.265037][T13913] writeback_single_inode+0x221/0x8b0 [ 332.271580][T13913] ? write_inode_now+0x280/0x280 [ 332.276778][T13913] write_inode_now+0x217/0x280 [ 332.281569][T13913] ? bdi_split_work_to_wbs+0x820/0x820 [ 332.287049][T13913] ? rwsem_write_trylock+0x12f/0x1b0 [ 332.292457][T13913] ? clear_nonspinnable+0x60/0x60 [ 332.297584][T13913] hfs_file_fsync+0xa3/0x140 [ 332.302302][T13913] generic_file_write_iter+0x157/0x1b0 [ 332.307866][T13913] vfs_write+0x712/0xd00 [ 332.312158][T13913] ? file_end_write+0x250/0x250 [ 332.317030][T13913] ? __fget_files+0x40f/0x480 [ 332.321809][T13913] ? mutex_lock_nested+0x17/0x20 [ 332.326994][T13913] ? __fdget_pos+0x2bf/0x370 [ 332.331694][T13913] ? ksys_write+0x71/0x250 [ 332.336301][T13913] ksys_write+0x14d/0x250 [ 332.341513][T13913] ? __ia32_sys_read+0x80/0x80 [ 332.346577][T13913] ? lockdep_hardirqs_on+0x94/0x140 [ 332.352209][T13913] do_syscall_64+0x4c/0xa0 [ 332.356827][T13913] ? clear_bhb_loop+0x30/0x80 [ 332.361620][T13913] ? clear_bhb_loop+0x30/0x80 [ 332.366689][T13913] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 332.372909][T13913] RIP: 0033:0x7fc18e497fc9 [ 332.377436][T13913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.397665][T13913] RSP: 002b:00007fc18c6ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 332.406091][T13913] RAX: ffffffffffffffda RBX: 00007fc18e6eefa0 RCX: 00007fc18e497fc9 [ 332.414069][T13913] RDX: 0000000000000e09 RSI: 0000200000000040 RDI: 0000000000000004 [ 332.422040][T13913] RBP: 00007fc18e51af91 R08: 0000000000000000 R09: 0000000000000000 [ 332.430011][T13913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.437990][T13913] R13: 00007fc18e6ef038 R14: 00007fc18e6eefa0 R15: 00007fff98c2b2e8 [ 332.446067][T13913] [ 332.449177][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.516369][ T6581] hfs: node 4:3 still has 1 user(s)! [ 332.546401][ T4293] usb 6-1: palm_os_3_probe - error -110 getting connection information [ 332.574079][ T4293] visor: probe of 6-1:1.0 failed with error -110 [ 332.673994][ T4582] gspca_zc3xx: reg_w_i err -71 [ 332.678843][ T4582] gspca_zc3xx: probe of 4-1:0.0 failed with error -71 [ 332.687860][ T4582] usb 4-1: USB disconnect, device number 18 [ 333.488883][ T4232] usb 6-1: USB disconnect, device number 26