last executing test programs: 3m54.768728593s ago: executing program 3 (id=1260): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000034c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000003500)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4000084) 3m54.631470545s ago: executing program 3 (id=1261): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10400, &(0x7f00000000c0)={[{@norecovery}, {@grpquota}, {@debug}, {@nombcache}]}, 0xee, 0x4b6, &(0x7f0000000980)="$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") setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 3m54.020723524s ago: executing program 3 (id=1266): r0 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x27, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1}, 0x0, 0x40, 0x1, {0x3}}) io_uring_enter(r0, 0x47f6, 0x810002, 0x4, 0x0, 0x0) 3m53.70011145s ago: executing program 3 (id=1269): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0], 0xfd, 0x49b, &(0x7f0000000f00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 3m52.992699061s ago: executing program 3 (id=1275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x401054d6, 0x0) 3m52.38058345s ago: executing program 3 (id=1282): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf00a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0x8, "dbe6ba49"}]}}, 0x0}, 0x0) 3m52.045093955s ago: executing program 32 (id=1282): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf00a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0x8, "dbe6ba49"}]}}, 0x0}, 0x0) 2m32.651644023s ago: executing program 0 (id=2069): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="174fc0f350e6"}, 0x10) 2m32.2245538s ago: executing program 0 (id=2072): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000000c0)={0x5, 0xffffffff, 0x7, 0x3, 0x8801be, 0x0}) 2m32.085378382s ago: executing program 0 (id=2073): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') pread64(r0, &(0x7f0000000280)=""/70, 0x46, 0xbbf9) 2m31.834506405s ago: executing program 0 (id=2076): rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0xc808100, 0x0, 0x0, 0x0, 0x0, 0x0) 2m31.400716912s ago: executing program 0 (id=2081): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m30.31790753s ago: executing program 0 (id=2094): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fmask=00000000000000000000343,sys_immutable,usefree,tz=UTC,check=n\x00\x00\x00\x00\x00\x00\x00'], 0x2, 0x1de, &(0x7f0000000dc0)="$eJzs3E9LFGEcB/BHs7QC8RTUpYe61GVKzx2KMIgWinKjPxCMONay2644c9iNDnvu1OuIoEu3IHoDvoYu3SQQT56a0E1NMSFEN+3zueyP/TLD75kHHoZnhlm89vZlfTZPZtMiDI4MhMHroRtWBsJYGAzruuHyh0fLbx48fnLnRqUyeX/1v6nxiRjj6PnPT1+/v/ClOP3w4+in4bAw9mxxaeLbwpmFs4s/pl7U8ljLY7NVxDROt1pFOt3I4kwtrycx3mtkaZ7FWjPP5rfks43W3Fwnps2Z4RBClucxbXZiPevEohWL+U5Mn6e1ZkySJI4E9qT6bqUsw1JZluVwN5Rl+bcnGNifvjgoe5x/DrmNRT2urqbfu+1qu9r77eW3blcmr8Y1Y5tHLbfb1WMb+Xgvj1vz4+HUr3xix/xEuHSxl69mN+9WtuUnw8z+Dx8AAAAAAI6kJG7YcX8/Sf6U96rfng9s278fCueGDmwYAAAAwC7yzqt62mhk84e3uPI1hD63Efp+EQ51sf4e+b/Sj2JtUgAAgKNl86a/350AAAAAAAAAAAAAAAAAAADA/+sgPifW7zECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzmZwAAAP//rzlqaw==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ocfs2={0xc, 0x1, {0x2, 0x8, 0xfffffffc}}, 0x0) 2m25.723656521s ago: executing program 4 (id=2141): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ioctl$KDMKTONE(r0, 0x4b30, 0x7ffffffffffffffe) 2m25.580588094s ago: executing program 4 (id=2143): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582020000000000090503"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2m24.072368107s ago: executing program 4 (id=2160): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f0000001980)=[{0x50, 0x1801, 0x0, 0x0}], 0x1}) 2m22.484641353s ago: executing program 4 (id=2179): r0 = memfd_create(&(0x7f0000000580)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa7\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6\x00\x00\x00\x00\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00~\x80\xd5=\xcev\x1fS}\x9f\xa8\x84\x1c=\\\x88\xe5\xb0yYM\xf4\xcf\x98m\xd24\xa6;\x84\xf78P.\x00\xf63:\xadd\x05X\xc9\xbe\xabk\x82k\x99\xc9\xac\xab\x83e\xf2L\xd2y\xd1D\x91\x84QlkPe[8\nC\xea]\xaf\xfc\xd3\x91\x91\x8fv\xb6@\xef\x9e\xb2>\xe4\x80\xb8\xe9\xbf\aX\xa5\n\xb4J\xf3P\xb5\xc3d\xfe0\xe2\xdcD\xdcVJ\x03\xaa\x9f\xc79Z\x1a\xda\xac\x1c\x9f\xc8b\xa2\x1ak', 0x7) fallocate(r0, 0x0, 0xfc9f, 0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7fa5f35fffff, 0x13, r0, 0x0) 2m22.406133403s ago: executing program 4 (id=2180): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) 2m22.232619056s ago: executing program 4 (id=2183): r0 = syz_io_uring_setup(0x83a, &(0x7f0000000180)={0x0, 0x2b9a, 0x1000, 0x0, 0x3cf}, &(0x7f0000000300)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x1a, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x1000}) io_uring_enter(r0, 0x3516, 0x8000000, 0x0, 0x0, 0x0) 2m15.064258169s ago: executing program 33 (id=2094): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fmask=00000000000000000000343,sys_immutable,usefree,tz=UTC,check=n\x00\x00\x00\x00\x00\x00\x00'], 0x2, 0x1de, &(0x7f0000000dc0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ocfs2={0xc, 0x1, {0x2, 0x8, 0xfffffffc}}, 0x0) 2m7.165303403s ago: executing program 34 (id=2183): r0 = syz_io_uring_setup(0x83a, &(0x7f0000000180)={0x0, 0x2b9a, 0x1000, 0x0, 0x3cf}, &(0x7f0000000300)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x1a, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x1000}) io_uring_enter(r0, 0x3516, 0x8000000, 0x0, 0x0, 0x0) 4.256643464s ago: executing program 5 (id=3366): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, 0x0) 4.137120296s ago: executing program 1 (id=3369): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f00000002c0)={[{@prjquota}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@nomblk_io_submit}, {@noinit_itable}, {@nojournal_checksum}, {@minixdf}, {@noload}, {@discard}, {@nobh}, {@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000180)={0xdc, 0x0, 0x77f}) 3.568064034s ago: executing program 1 (id=3375): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000020c0)={r2}, &(0x7f0000002100)=0x8) 3.284961109s ago: executing program 1 (id=3379): sendmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0x0, 0x0, &(0x7f0000009100)=[{&(0x7f0000008dc0)='Y', 0x1}], 0x1, 0x0, 0x10}}], 0x1, 0x4008004) r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) 2.956755554s ago: executing program 1 (id=3382): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x5ac, &(0x7f0000000240)={0x0, 0xf6d6, 0x2, 0x1, 0x1fc}, &(0x7f0000000000), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000008c0)={0x67, 0x0, &(0x7f00000007c0)=[{0x0}], 0x0, 0x1}, 0x20) 2.822999036s ago: executing program 1 (id=3383): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) connect$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, @local}, 0x10) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 2.732660068s ago: executing program 7 (id=3384): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg(r1, &(0x7f0000002400)=[{{&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x7600, @private0={0xfc, 0x0, '\x00', 0x9}, 0x32, 0x2}, 0x80, 0x0}}], 0x1, 0x40000) 2.59931076s ago: executing program 5 (id=3385): bpf$MAP_CREATE(0x8001000000000000, &(0x7f0000000840)=@base={0x1, 0x7, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x4e22, 0x7fff, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.199017066s ago: executing program 2 (id=3388): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000001000010027bd7000fbdbdfa500000000", @ANYRES32=r2, @ANYBLOB="184e0600016201003c001280110001006272696467655f736c617665000000002400058005001d000100000006001f000100000008002200", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) 1.996620589s ago: executing program 2 (id=3390): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.793669102s ago: executing program 6 (id=3391): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x208840, &(0x7f0000000080), 0xc1, 0x7b7, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) preadv2(r0, &(0x7f0000000600)=[{&(0x7f0000000f80)=""/4096, 0x1000}], 0x1, 0x92, 0xc959, 0x10) 1.419689868s ago: executing program 5 (id=3392): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001440)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}], 0x1, 0x931766f6319eed44) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) 1.368738609s ago: executing program 7 (id=3393): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.280854241s ago: executing program 7 (id=3394): r0 = syz_io_uring_setup(0x2b06, &(0x7f0000000040), &(0x7f0000ffd000), &(0x7f0000ffe000)) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0xfffffffffffffff5, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0xffffffff, 0x3, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x90) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x14, &(0x7f00000003c0), 0x2) 1.191390042s ago: executing program 5 (id=3395): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f00000001c0)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fda", 0x1b, 0x48000, 0x0, 0x0) 1.104619593s ago: executing program 6 (id=3396): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000003c0)=@buf) 1.087842103s ago: executing program 7 (id=3397): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 1.077527064s ago: executing program 5 (id=3398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}}, 0x0) 900.624986ms ago: executing program 2 (id=3399): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010000304000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a00001d000000060001000000000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x20) 786.678598ms ago: executing program 5 (id=3400): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c6d6f64653d61646170746976652c616c6c6f635f6d6f64653d64656661756c742c636865636b706f696e743d656e61626c652c6163746976655f6c6f67733d362c6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6e6f61636c2c6d6f64653d61646170746976652c6e6f696e6c696e655f78617474722c6e6f657874656e745f63616368652c6e6f757365725f78617474722c6a71666d743d7666736f6c642c66617374626f6f742c67727071756f74613d2f6465762f75686964002c61636c2c0032f4ee2f6560cdca2b9483944e9645733866c506b49c56b50344a658491dfe1afc3bb0de511c48132c86a775315723c53de2957513b9e639dfab8b7e4f4097c16f12b630a63e3ee7aa89cfa87acb9e9436e3d4feae3c1c3fedb8759e622019ece82c31d9fe60c2e3300afffbbda9aa8515e815ffc77756449aee7d4dc8354a136775201fe90e0663c422eb5a7e10e72601606e640c6714946801fccf68f802ff1c466e968c229e988c70dbe2c74169c0e96f9117a800ef78cef7bea512401010266195fc419fabbb4304582cd727de0f01694c0e22f6bca0650e3f3e4c4aefef27a417b89a0ce12bce1898cc08bbacc339f2655241746a085213fe4d6edc276928e230d4663583ccad22e450718285ed6a84bad0c7d117de297a02d83173a5a3d62192e8b6882f1a34b2200fdb7de25a9c0657778fdf670dfbd28483194c7b288bd257fa84f4a9564651ee61761f4a364803b5aea822e4c5b52b5676bdba4d9bdcbf1b7ddda716f223a1bc6d1c5a150fa64e72f580f7bf672ce6c6d30f8bcf091186a89ff219d2272ff5f2c0b4f63cb92f4708d6d81bc1935a791bd1c3670ba93b4a4db772e29f150122528cbe24284f0d1064ba237debaa65d481756e427ad570171d1e9445fe5c06dd6335167686a2cf8f226eb57ebe530d4e72"], 0x1, 0x5505, &(0x7f0000002480)="$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") mkdir(&(0x7f0000000280)='./file0\x00', 0x100) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 766.794359ms ago: executing program 2 (id=3401): r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f0000000240)=[{0x0, 0x8001}], 0x1) semop(r0, &(0x7f0000000100)=[{0x0, 0xd5db}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 704.442709ms ago: executing program 7 (id=3402): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) splice(r0, 0x0, r2, 0x0, 0x2000, 0x0) 704.088789ms ago: executing program 6 (id=3403): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 633.347761ms ago: executing program 7 (id=3404): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x6b2f, &(0x7f0000000200), &(0x7f00000000c0), 0x0) r0 = syz_mount_image$xfs(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x2218a5d, &(0x7f0000000140), 0x0, 0x96a4, &(0x7f0000002080)="$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") ioctl$FS_IOC_GETFSMAP(r0, 0xc0205867, &(0x7f00000000c0)=ANY=[]) 511.094842ms ago: executing program 6 (id=3405): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000017c0)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xb, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 348.095265ms ago: executing program 2 (id=3406): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000180)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'GPL\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}, 0x1, 0x14db, &(0x7f0000002ac0)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x400000)=nil, 0x400023, &(0x7f00000012c0)=""/91) 347.792935ms ago: executing program 6 (id=3407): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r1 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000016}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0xf0f046, 0x4000000}) 76.663259ms ago: executing program 2 (id=3408): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000001840)=""/251) 23.34914ms ago: executing program 1 (id=3409): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000190000404f045db600000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000280)={0x60, 0x15}, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 6 (id=3410): syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000840)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x126b, &(0x7f0000001bc0)="$eJzs3U9rI2UcB/Bf+r9Z21RdV1cQH/SiCHHbgxe9FNkFsaBUu6CCMGtTDU2T0oRCRNx68iT4MkQ9ehPEN9CLF8+CINKLBw97EEfaRG02adfdNq0sn89lHuZ5vvM8MxMGJjwPs/fS5xvra83yWtaKkULhxd83x2PsVooUIzEaHTvx7PUff3rijbfefnVxaenqckrXFt+cfyGlNPvkd+989PVT37cuXP9m9tvJ2J17d++3hZ93L+1e3vvzq6g2U7WZ6o1WytKNRqOV3ahV0mq1uV5O6fVaJWtWUrXerGz11K/VGpub7ZTVV2eKm1uVZjNl9XZar7RTq5BaW+2UvZ9V66lcLqeZYnASK1/eyvM8Is/HYyLyPM+noxgX4oGYidkoxVw8GA/Fw3ExHolL8Wg8FpcPWp33uAEAAAAAAAAAAAAAAAAAAOD+cof1/wXr/wEAAAAAAAAAAAAAAAAAAGD4bl//Pxbh+/8AAAAAAAAAAAAAAAAAAABwxu7w/f/b1v8/Z/0/AAAAAAAAAAAAAAAAAAAADMNUZ7Oc0lTExqfbK9srnW1n/+JaVKMWlbgSpfgjDlb/d3TK115ZunolHZiL5zdudvM3t1dGe/Pz46WYKwzMz3fyqTc/GcXD+YUoxcXB/S8MzE/FM0/v5z/p5MtRih/ei0bUYjWi0D37g/zH8ym9/NrSdG/+8f12Rxod8m0BAACA01RO/+h/f9/pNhpY36nqvp+nbsvCMf8P9Lyfj53XCdOj2f5wPavVKlv3WJg4+jgTJztyX6EQEVkc3jNb/GV5v/NT6+JeC6MniM/E3abGj29zgnsaY/+Di3kKv8NfvzhUNRVnO56R7lCy2v7z87+lYifPh3t9BlVNHpc6+plRGPIzibPz700/75EAAAAAAAAAAABwNwbO/puOiL75gB/07fl7enhvvP/IR/f+2RmcIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgqAAD//9ZjzUU=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x41, 0x4800003e, r0, 0x0) kernel console output (not intermixed with test programs): BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 330.976227][T11318] BTRFS info (device loop2): force clearing of disk cache [ 330.986791][T11318] BTRFS info (device loop2): enabling auto defrag [ 330.993283][T11318] BTRFS info (device loop2): max_inline at 0 [ 331.049526][T11318] BTRFS info (device loop2): enabling disk space caching [ 331.120576][T11318] BTRFS info (device loop2): disk space caching is enabled [ 331.503420][T11318] BTRFS info (device loop2): enabling ssd optimizations [ 331.511447][T11318] BTRFS info (device loop2): rebuilding free space tree [ 331.543189][T11364] loop5: detected capacity change from 0 to 1764 [ 331.626563][T11318] BTRFS info (device loop2): disabling free space tree [ 331.679223][T11318] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 331.724026][T11318] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 331.849964][T11379] program syz.6.2443 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 332.076712][ T75] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 332.257931][ T4275] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 332.582838][T11393] loop6: detected capacity change from 0 to 4096 [ 332.624745][T11393] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 333.232837][T11381] loop5: detected capacity change from 0 to 32768 [ 333.385879][ T127] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 333.479515][T11381] XFS (loop5): Mounting V5 Filesystem [ 333.483734][T11429] loop2: detected capacity change from 0 to 512 [ 333.575930][T11429] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 333.616916][ T127] usb 2-1: Using ep0 maxpacket: 16 [ 333.623783][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.665210][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.686707][T11429] EXT4-fs (loop2): 1 truncate cleaned up [ 333.692395][T11429] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 333.712638][T11428] loop6: detected capacity change from 0 to 4096 [ 333.741723][ T127] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 333.828201][ T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.883060][T11422] loop7: detected capacity change from 0 to 32768 [ 333.904723][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 333.908479][ T127] usb 2-1: config 0 descriptor?? [ 333.982740][T11381] XFS (loop5): Ending clean mount [ 334.035567][ T26] audit: type=1800 audit(1752808716.968:158): pid=11428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2458" name="file0" dev="loop6" ino=0 res=0 errno=0 [ 334.093330][T11422] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 334.232338][ T7881] XFS (loop5): Unmounting Filesystem [ 334.371362][ T127] savu 0003:1E7D:2D5A.001A: unknown main item tag 0x0 [ 334.388967][ T127] savu 0003:1E7D:2D5A.001A: unknown main item tag 0x0 [ 334.406347][T10849] ocfs2: Unmounting device (7,7) on (node local) [ 334.420278][ T127] savu 0003:1E7D:2D5A.001A: unknown main item tag 0x0 [ 334.446029][ T127] savu 0003:1E7D:2D5A.001A: unknown main item tag 0x0 [ 334.485881][ T127] savu 0003:1E7D:2D5A.001A: unknown main item tag 0x0 [ 334.506339][ T127] savu 0003:1E7D:2D5A.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 334.594632][ T127] usb 2-1: USB disconnect, device number 13 [ 334.871097][T11445] loop6: detected capacity change from 0 to 8192 [ 334.932747][T11449] fido_id[11449]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 335.552793][T11474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 336.855705][ C1] sched: RT throttling activated [ 336.897362][T11472] loop2: detected capacity change from 0 to 32768 [ 336.994176][T11472] XFS (loop2): Mounting V5 Filesystem [ 337.070759][T11472] XFS (loop2): Ending clean mount [ 337.107187][T11472] XFS (loop2): Quotacheck needed: Please wait. [ 337.170371][T11481] loop1: detected capacity change from 0 to 32768 [ 337.251511][T11472] XFS (loop2): Quotacheck: Done. [ 337.302512][T11481] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 337.396828][ T4356] (kworker/u4:6,4356,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 337.715396][T11483] loop5: detected capacity change from 0 to 262144 [ 337.718645][ T4275] XFS (loop2): Unmounting Filesystem [ 337.774338][ T4268] (syz-executor,4268,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 70 [ 337.804183][ T4268] (syz-executor,4268,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 337.839025][T11483] F2FS-fs (loop5): Found nat_bits in checkpoint [ 337.911204][T11483] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 337.957522][ T4268] ocfs2: Unmounting device (7,1) on (node local) [ 338.457049][T11502] loop7: detected capacity change from 0 to 32768 [ 338.491668][T11502] XFS: ikeep mount option is deprecated. [ 338.507755][T11528] loop1: detected capacity change from 0 to 1764 [ 338.532496][T11524] loop6: detected capacity change from 0 to 4096 [ 338.570345][T11524] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 338.622448][T11533] loop5: detected capacity change from 0 to 1024 [ 338.637506][T11533] EXT4-fs: Ignoring removed bh option [ 338.644925][T11533] EXT4-fs: inline encryption not supported [ 338.677327][T11502] XFS (loop7): Mounting V5 Filesystem [ 338.712112][T11533] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 338.800692][T11502] XFS (loop7): Ending clean mount [ 338.809255][T11533] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 2: comm syz.5.2490: lblock 2 mapped to illegal pblock 2 (length 1) [ 338.828133][T11502] XFS (loop7): Quotacheck needed: Please wait. [ 338.867032][T11533] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 338.876832][T11533] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 48: comm syz.5.2490: lblock 0 mapped to illegal pblock 48 (length 1) [ 338.906479][T11533] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 338.924235][T11533] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.2490: Failed to acquire dquot type 0 [ 338.936748][T11533] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 338.951077][T11533] EXT4-fs error (device loop5): ext4_evict_inode:279: inode #11: comm syz.5.2490: mark_inode_dirty error [ 338.973311][T11533] EXT4-fs warning (device loop5): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 339.010020][T11502] XFS (loop7): Quotacheck: Done. [ 339.021564][T11533] EXT4-fs (loop5): 1 orphan inode deleted [ 339.046202][ T41] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 339.077959][T11533] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 339.080714][T11547] loop1: detected capacity change from 0 to 128 [ 339.121652][ T41] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 339.127429][T11548] loop6: detected capacity change from 0 to 512 [ 339.174015][T11547] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 339.184571][ T41] EXT4-fs error (device loop5): ext4_release_dquot:6850: comm kworker/u4:2: Failed to release dquot type 0 [ 339.210627][T11547] ext4 filesystem being mounted at /538/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 339.235043][T11548] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.2492: corrupted in-inode xattr [ 339.292257][T10849] XFS (loop7): Unmounting Filesystem [ 339.395956][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 339.461827][T11548] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.2492: couldn't read orphan inode 15 (err -117) [ 339.482184][T11552] loop2: detected capacity change from 0 to 512 [ 339.508639][ T7881] EXT4-fs (loop5): unmounting filesystem. [ 339.517355][ T7881] EXT4-fs error (device loop5): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 339.561376][T11552] EXT4-fs (loop2): Test dummy encryption mode enabled [ 339.595725][ T7881] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 339.607919][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 339.613804][T11552] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 339.624761][T11548] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 339.637679][ T7881] EXT4-fs error (device loop5): ext4_quota_off:7120: inode #3: comm syz-executor: mark_inode_dirty error [ 339.686082][T11552] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.2494: bad orphan inode 131083 [ 339.712287][T11552] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 339.768484][T11548] EXT4-fs warning (device loop6): dx_probe:893: inode #2: comm syz.6.2492: dx entry: limit 0 != root limit 125 [ 339.788425][T11548] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.2492: Corrupt directory, running e2fsck is recommended [ 340.007199][T10692] EXT4-fs (loop6): unmounting filesystem. [ 340.038359][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 340.207612][T11563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2498'. [ 340.451582][T11574] loop2: detected capacity change from 0 to 512 [ 340.533860][T11574] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 340.638635][T11574] EXT4-fs (loop2): 1 truncate cleaned up [ 340.686382][T11574] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 340.760609][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 341.356474][T11607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2514'. [ 341.734283][T11615] loop2: detected capacity change from 0 to 4096 [ 341.809139][T11615] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 341.907617][T11615] ntfs3: loop2: Failed to load $Extend. [ 341.916844][T11630] loop6: detected capacity change from 0 to 512 [ 341.950787][T11615] ntfs3: loop2: MFT: r=b, expect seq=0 instead of b! [ 341.972174][T11630] EXT4-fs (loop6): Test dummy encryption mode enabled [ 342.107897][T11630] EXT4-fs error (device loop6): __ext4_iget:5077: inode #11: block 1: comm syz.6.2524: invalid block [ 342.216251][T11630] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.2524: couldn't read orphan inode 11 (err -117) [ 342.266596][T11630] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 342.353803][T11640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2528'. [ 342.524541][T10692] EXT4-fs (loop6): unmounting filesystem. [ 342.739516][T11609] loop7: detected capacity change from 0 to 40427 [ 342.825575][T11609] F2FS-fs (loop7): invalid crc value [ 342.933264][T11609] F2FS-fs (loop7): Found nat_bits in checkpoint [ 342.989216][T11668] loop1: detected capacity change from 0 to 8 [ 343.176909][T11609] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 343.528710][T10849] syz-executor: attempt to access beyond end of device [ 343.528710][T10849] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 343.622315][T11683] loop2: detected capacity change from 0 to 1024 [ 343.731249][T11683] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 343.931809][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 344.487416][T11706] loop5: detected capacity change from 0 to 1024 [ 344.602222][T11703] loop2: detected capacity change from 0 to 32768 [ 344.637899][T11703] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 344.646438][T11703] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 344.659855][T11703] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 344.672484][ T4327] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 344.689057][ T4327] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 344.732843][ T4327] kworker/0:4: attempt to access beyond end of device [ 344.732843][ T4327] loop2: rw=0, sector=402653184, nr_sectors = 8 limit=32768 [ 344.803763][ T4327] gfs2: fsid=syz:syz.0: jid=0: Failed [ 344.866765][T11703] gfs2: fsid=syz:syz.0: error recovering journal 0: -5 [ 344.958256][T11695] loop6: detected capacity change from 0 to 32768 [ 345.081916][T11695] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 345.118531][T11722] loop7: detected capacity change from 0 to 164 [ 345.153148][T11722] Unable to read rock-ridge attributes [ 345.185002][T11722] Unable to read rock-ridge attributes [ 345.216495][T11722] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 345.260998][T11728] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2560'. [ 345.293721][T10692] ocfs2: Unmounting device (7,6) on (node local) [ 345.309147][T11728] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2560'. [ 345.389291][T11725] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2560'. [ 346.210315][T11755] loop6: detected capacity change from 0 to 2048 [ 346.215421][T11757] loop1: detected capacity change from 0 to 2048 [ 346.291614][T11755] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 346.734214][T11764] loop6: detected capacity change from 0 to 4096 [ 346.782260][T11764] ntfs: (device loop6): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 346.885943][T11764] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 3) do not match. Run ntfsfix or chkdsk. [ 346.922651][T11775] loop7: detected capacity change from 0 to 256 [ 346.932464][T11764] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 346.950206][T11744] loop5: detected capacity change from 0 to 40427 [ 346.969833][T11769] loop1: detected capacity change from 0 to 4096 [ 346.979403][T11764] ntfs: volume version 3.1. [ 347.007377][T11769] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 347.026815][T11744] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff [ 347.039382][T11775] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 347.057800][T11764] ntfs: (device loop6): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp855. You might want to try to use the mount option nls=utf8. [ 347.083556][T11744] F2FS-fs (loop5): invalid crc value [ 347.140291][T11744] F2FS-fs (loop5): Found nat_bits in checkpoint [ 347.161457][T11764] ntfs: (device loop6): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 347.176919][T11769] ntfs3: loop1: failed to convert "c46c" to iso8859-13 [ 347.381944][T11744] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 347.674749][ T7881] syz-executor: attempt to access beyond end of device [ 347.674749][ T7881] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 348.363955][ T26] audit: type=1326 audit(1752808731.298:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11814 comm="syz.7.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9910d8e9a9 code=0x7ffc0000 [ 348.410313][ T26] audit: type=1326 audit(1752808731.328:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11814 comm="syz.7.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9910d8e9a9 code=0x7ffc0000 [ 348.429976][ T4327] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 348.433741][ T26] audit: type=1326 audit(1752808731.328:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11814 comm="syz.7.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9910d8e9a9 code=0x7ffc0000 [ 348.463897][ T26] audit: type=1326 audit(1752808731.338:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11814 comm="syz.7.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f9910d8e9a9 code=0x7ffc0000 [ 348.522165][ T26] audit: type=1326 audit(1752808731.398:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11814 comm="syz.7.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9910d8e9a9 code=0x7ffc0000 [ 348.642686][ T4327] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 348.661751][ T4327] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 348.685770][ T4327] usb 3-1: config 0 has no interface number 0 [ 348.691892][ T4327] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 348.713645][ T4327] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 348.735791][ T4327] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 348.744858][ T4327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.774831][ T4327] usb 3-1: config 0 descriptor?? [ 348.882124][T11826] loop5: detected capacity change from 0 to 256 [ 348.937479][T11826] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x467a0815, utbl_chksum : 0xe619d30d) [ 348.958002][T11826] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 349.108271][T11822] loop7: detected capacity change from 0 to 32768 [ 349.189941][T11822] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 349.256338][ T1200] (kworker/u4:5,1200,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 349.419074][ T4327] usb 3-1: USB disconnect, device number 16 [ 349.477985][T10849] (syz-executor,10849,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 70 [ 349.559474][T10849] (syz-executor,10849,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 349.649210][T10849] ocfs2: Unmounting device (7,7) on (node local) [ 349.688899][T11842] loop5: detected capacity change from 0 to 1024 [ 349.846261][T11847] netlink: 'syz.7.2601': attribute type 8 has an invalid length. [ 349.874926][T11823] loop1: detected capacity change from 0 to 32768 [ 350.324563][T11858] netlink: 'syz.1.2609': attribute type 10 has an invalid length. [ 350.374167][T11858] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.383006][T11858] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.452661][T11856] loop2: detected capacity change from 0 to 4096 [ 350.504474][T11858] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.513575][T11858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.522200][T11858] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.529370][T11858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.617887][T11862] loop7: detected capacity change from 0 to 32768 [ 350.633206][T11858] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 350.646144][T11862] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.2610 (11862) [ 350.647189][ T5280] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 350.670557][T11863] device bridge_slave_1 left promiscuous mode [ 350.685152][T11863] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.709610][T11863] device bridge_slave_0 left promiscuous mode [ 350.728473][T11856] ntfs: volume version 3.1. [ 350.751693][T11863] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.768763][T11862] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 350.779029][T11862] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 350.787908][T11862] BTRFS info (device loop7): force clearing of disk cache [ 350.795051][T11862] BTRFS info (device loop7): turning on sync discard [ 350.802137][T11862] BTRFS info (device loop7): max_inline at 0 [ 350.808247][T11862] BTRFS info (device loop7): metadata ratio 4 [ 350.814503][T11862] BTRFS info (device loop7): max_inline at 0 [ 350.820596][T11862] BTRFS info (device loop7): enabling disk space caching [ 350.827936][T11862] BTRFS info (device loop7): disk space caching is enabled [ 350.956429][T11862] BTRFS info (device loop7): enabling ssd optimizations [ 350.965386][T11862] BTRFS info (device loop7): rebuilding free space tree [ 350.983231][ T5280] usb 6-1: Using ep0 maxpacket: 32 [ 350.986841][T11848] loop6: detected capacity change from 0 to 32768 [ 350.998767][ T5280] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 351.020170][T11862] BTRFS info (device loop7): disabling free space tree [ 351.027604][T11862] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 351.037584][T11862] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 351.057038][T11862] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 351.073719][T11848] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 351.114743][ T5280] usb 6-1: config 0 has no interface number 0 [ 351.163648][ T5280] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 351.229729][ T5280] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.268338][ T5280] usb 6-1: Product: syz [ 351.272559][ T5280] usb 6-1: Manufacturer: syz [ 351.326149][ T5280] usb 6-1: SerialNumber: syz [ 351.336168][ T4833] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop7 scanned by udevd (4833) [ 351.365376][ T5280] usb 6-1: config 0 descriptor?? [ 351.379749][ T5280] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 351.417870][ T5280] usb 6-1: selecting invalid altsetting 1 [ 351.449596][ T5280] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 351.476764][T11863] bond0: (slave bridge0): Releasing backup interface [ 351.488847][T10692] ocfs2: Unmounting device (7,6) on (node local) [ 351.498647][ T5280] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 351.568663][ T5280] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 351.624984][ T5280] usb 6-1: media controller created [ 351.690778][ T5280] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 351.786848][ T5280] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 351.794835][T11896] netlink: 'syz.7.2616': attribute type 2 has an invalid length. [ 351.805824][ T5280] zl10353_read_register: readreg error (reg=127, ret==-71) [ 351.836895][ T5280] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 351.972119][ T5280] usb 6-1: USB disconnect, device number 6 [ 352.585955][T11920] netlink: 'syz.2.2626': attribute type 2 has an invalid length. [ 352.649982][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 352.649996][ T26] audit: type=1326 audit(1752808735.588:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11922 comm="syz.7.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9910d8e9a9 code=0x7ffc0000 [ 352.766420][ T26] audit: type=1326 audit(1752808735.618:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11922 comm="syz.7.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9910d8e9a9 code=0x7ffc0000 [ 352.876551][ T26] audit: type=1326 audit(1752808735.638:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11922 comm="syz.7.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9910d8e9a9 code=0x7ffc0000 [ 352.990139][ T26] audit: type=1326 audit(1752808735.638:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11922 comm="syz.7.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9910d8e9e3 code=0x7ffc0000 [ 352.991552][T11937] support for cryptoloop has been removed. Use dm-crypt instead. [ 353.078986][ T26] audit: type=1326 audit(1752808735.638:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11922 comm="syz.7.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9910d8e9a9 code=0x7ffc0000 [ 353.148116][T11941] loop2: detected capacity change from 0 to 256 [ 353.161282][ T26] audit: type=1326 audit(1752808735.638:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11922 comm="syz.7.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9910d8e9a9 code=0x7ffc0000 [ 353.212778][T11941] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 353.281660][ T4848] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 353.289756][ T26] audit: type=1326 audit(1752808735.658:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11922 comm="syz.7.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9910d8e9a9 code=0x7ffc0000 [ 353.361361][ T26] audit: type=1326 audit(1752808735.658:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11922 comm="syz.7.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9910d8e9a9 code=0x7ffc0000 [ 353.468163][ T26] audit: type=1326 audit(1752808735.658:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11922 comm="syz.7.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9910d8e9a9 code=0x7ffc0000 [ 353.535903][ T4848] usb 2-1: Using ep0 maxpacket: 16 [ 353.552854][ T4848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.588230][T11912] loop6: detected capacity change from 0 to 32768 [ 353.593588][ T4848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.613340][ T26] audit: type=1326 audit(1752808735.658:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11922 comm="syz.7.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9910d8e9a9 code=0x7ffc0000 [ 353.660879][ T4848] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 353.662930][T11912] [ 353.662930][T11912] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 353.662930][T11912] [ 353.686251][ T4848] usb 2-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 353.741040][ T4848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.797754][ T4848] usb 2-1: config 0 descriptor?? [ 353.809079][T11912] [ 353.809079][T11912] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 353.809079][T11912] [ 353.860317][T11957] loop2: detected capacity change from 0 to 256 [ 353.878325][T11912] [ 353.878325][T11912] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 353.878325][T11912] [ 353.897495][T11912] [ 353.897495][T11912] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 353.897495][T11912] [ 353.910525][T11957] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 353.929787][T11957] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 353.952147][ T107] [ 353.952147][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 353.952147][ T107] [ 353.994586][T11957] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 354.022333][ T4319] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 354.130487][T10692] [ 354.130487][T10692] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 354.130487][T10692] [ 354.158757][T11959] loop7: detected capacity change from 0 to 8192 [ 354.175839][T10692] [ 354.175839][T10692] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 354.175839][T10692] [ 354.185228][T11959] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 354.201119][T11959] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 354.218996][T11959] REISERFS (device loop7): using ordered data mode [ 354.227375][ T4319] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 354.238520][ T4319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.241701][ T4848] elecom 0003:056E:010C.001B: unknown main item tag 0x0 [ 354.262512][ T4319] usb 6-1: config 0 descriptor?? [ 354.267649][T11959] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 354.268108][T11959] REISERFS (device loop7): checking transaction log (loop7) [ 354.352808][ T4848] elecom 0003:056E:010C.001B: unknown main item tag 0x0 [ 354.404189][ T4848] elecom 0003:056E:010C.001B: unknown main item tag 0x0 [ 354.430910][T11959] REISERFS (device loop7): Using r5 hash to sort names [ 354.431766][ T4848] elecom 0003:056E:010C.001B: unknown main item tag 0x0 [ 354.450871][T11959] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 354.488428][ T4848] elecom 0003:056E:010C.001B: unknown main item tag 0x0 [ 354.509553][ T4848] elecom 0003:056E:010C.001B: hidraw0: USB HID vff.fc Device [HID 056e:010c] on usb-dummy_hcd.1-1/input0 [ 354.525733][T11959] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 354.592153][ T4848] usb 2-1: USB disconnect, device number 14 [ 354.684500][T11970] loop2: detected capacity change from 0 to 512 [ 354.699870][ T4319] elan 0003:04F3:0755.001C: unknown main item tag 0x0 [ 354.726012][ T4319] elan 0003:04F3:0755.001C: item fetching failed at offset 3/5 [ 354.754943][ T4319] elan 0003:04F3:0755.001C: Hid Parse failed [ 354.765108][T11970] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 354.799551][ T4319] elan: probe of 0003:04F3:0755.001C failed with error -22 [ 354.845041][T11970] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 354.898709][ T4319] usb 6-1: USB disconnect, device number 7 [ 354.929772][T11970] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2644: invalid indirect mapped block 4294967295 (level 1) [ 354.961912][T11971] fido_id[11971]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 354.987010][T11970] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2644: invalid indirect mapped block 4294967295 (level 1) [ 355.046736][T11970] EXT4-fs (loop2): 2 truncates cleaned up [ 355.104828][T11970] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 355.347944][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 356.547598][ T4319] kernel write not supported for file /sg0 (pid: 4319 comm: kworker/1:4) [ 356.720109][T12042] loop7: detected capacity change from 0 to 256 [ 356.779014][T12042] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 356.866704][T12042] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 356.950746][T12042] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 356.961611][T12048] loop6: detected capacity change from 0 to 512 [ 357.025143][T12048] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 357.103641][T12048] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 357.231932][T12048] EXT4-fs (loop6): orphan cleanup on readonly fs [ 357.251756][T12048] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.2672: bad orphan inode 267 [ 357.325802][T12048] EXT4-fs (loop6): Remounting filesystem read-only [ 357.340709][T12048] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 357.426764][T12048] EXT4-fs warning (device loop6): dx_probe:893: inode #2: comm syz.6.2672: dx entry: limit 0 != root limit 125 [ 357.457357][T12048] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.2672: Corrupt directory, running e2fsck is recommended [ 357.498015][T12060] EXT4-fs warning (device loop6): dx_probe:893: inode #2: comm syz.6.2672: dx entry: limit 0 != root limit 125 [ 357.551529][T12060] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.2672: Corrupt directory, running e2fsck is recommended [ 357.674475][T12038] loop1: detected capacity change from 0 to 32768 [ 357.731607][T12051] loop2: detected capacity change from 0 to 32768 [ 357.857077][T10692] EXT4-fs (loop6): unmounting filesystem. [ 358.011694][T12063] loop5: detected capacity change from 0 to 32768 [ 358.038115][T12063] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 358.046598][T12063] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 358.062207][T12063] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 358.077113][ T5280] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 358.084079][ T5280] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 358.177931][ T5280] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 93ms [ 358.231875][ T5280] gfs2: fsid=syz:syz.0: jid=0: Done [ 358.268051][T12063] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 358.282116][T12063] syz.5.2675: attempt to access beyond end of device [ 358.282116][T12063] loop5: rw=12288, sector=9007199254757616, nr_sectors = 8 limit=32768 [ 358.297204][T12063] gfs2: fsid=syz:syz.0: can't lock local "qc" file: -5 [ 358.674021][T12079] netlink: 'syz.7.2680': attribute type 61 has an invalid length. [ 358.805784][ T127] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 358.862207][T12082] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2681'. [ 359.007996][ T127] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.038139][ T127] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 359.107617][ T127] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 359.155277][ T127] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 359.209669][ T127] usb 7-1: SerialNumber: syz [ 359.357407][T12096] loop7: detected capacity change from 0 to 2048 [ 359.403023][T12096] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 359.442064][ T127] usb 7-1: 0:2 : does not exist [ 359.509208][ T127] usb 7-1: USB disconnect, device number 2 [ 359.545202][T12101] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 359.603466][ T4383] udevd[4383]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.224629][T12112] loop1: detected capacity change from 0 to 32768 [ 360.247154][T12112] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 360.255366][T12112] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 360.315841][T12112] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 360.366189][ T4856] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 360.373007][ T4856] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 360.517127][ T4856] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 144ms [ 360.541306][ T4856] gfs2: fsid=syz:syz.0: jid=0: Done [ 360.561491][T12112] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 360.571425][T12112] syz.1.2692: attempt to access beyond end of device [ 360.571425][T12112] loop1: rw=12288, sector=9007199254757616, nr_sectors = 8 limit=32768 [ 360.587371][T12112] gfs2: fsid=syz:syz.0: can't lock local "qc" file: -5 [ 360.671454][T12103] loop5: detected capacity change from 0 to 32768 [ 360.689493][T12103] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2689 (12103) [ 360.712103][T12103] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 360.763450][T12103] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 360.802553][T12103] BTRFS info (device loop5): metadata ratio 2 [ 360.832879][T12103] BTRFS info (device loop5): allowing degraded mounts [ 360.855020][T12103] BTRFS info (device loop5): force zlib compression, level 3 [ 360.897919][T12103] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 360.938628][T12103] BTRFS info (device loop5): use zstd compression, level 3 [ 360.969297][T12103] BTRFS info (device loop5): force clearing of disk cache [ 361.006955][T12103] BTRFS info (device loop5): allowing degraded mounts [ 361.076672][T12103] BTRFS info (device loop5): max_inline at 0 [ 361.083236][T12103] BTRFS info (device loop5): using free space tree [ 361.361644][T12103] BTRFS info (device loop5): enabling ssd optimizations [ 361.394330][T12103] BTRFS info (device loop5): rebuilding free space tree [ 361.560483][T12149] loop6: detected capacity change from 0 to 32768 [ 361.649259][T12149] XFS (loop6): Mounting V5 Filesystem [ 361.687579][T12149] XFS (loop6): Internal error !uuid_equal(&mp->m_sb.sb_uuid, &head->h_fs_uuid) at line 254 of file fs/xfs/xfs_log_recover.c. Caller xlog_header_check_mount+0x8e/0xd0 [ 361.687636][T12149] CPU: 0 PID: 12149 Comm: syz.6.2702 Not tainted 6.1.146-syzkaller #0 [ 361.687655][T12149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 361.687667][T12149] Call Trace: [ 361.687674][T12149] [ 361.687682][T12149] dump_stack_lvl+0x168/0x22e [ 361.687704][T12149] ? __xfs_printk+0x90/0x90 [ 361.687732][T12149] ? show_regs_print_info+0x12/0x12 [ 361.687752][T12149] ? kmem_cache_free+0xf7/0x290 [ 361.687776][T12149] ? xfs_rw_bdev+0x2d2/0x2f0 [ 361.687803][T12149] xfs_corruption_error+0x11e/0x170 [ 361.687831][T12149] ? xlog_header_check_mount+0x8e/0xd0 [ 361.687863][T12149] xlog_header_check_mount+0xbd/0xd0 [ 361.687891][T12149] ? xlog_header_check_mount+0x8e/0xd0 [ 361.687921][T12149] xlog_find_verify_log_record+0x32f/0x550 [ 361.687957][T12149] xlog_find_zeroed+0x379/0x460 [ 361.687990][T12149] xlog_find_head+0x60/0x790 [ 361.688016][T12149] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 361.688043][T12149] ? lockdep_hardirqs_on+0x94/0x140 [ 361.688072][T12149] xlog_find_tail+0x3e/0xa00 [ 361.688099][T12149] ? do_raw_spin_unlock+0x11d/0x230 [ 361.688133][T12149] ? try_to_wake_up+0x67c/0x1080 [ 361.688160][T12149] xlog_recover+0x48/0x450 [ 361.688192][T12149] xfs_log_mount+0x2ba/0x460 [ 361.688222][T12149] xfs_mountfs+0xc42/0x1d10 [ 361.688240][T12149] ? lockdep_softirqs_off+0x420/0x420 [ 361.688276][T12149] ? xfs_default_resblks+0x70/0x70 [ 361.688294][T12149] ? init_timer_key+0x178/0x320 [ 361.688330][T12149] ? rcu_is_watching+0x11/0xa0 [ 361.688357][T12149] ? trace_xfs_inode_timestamp_range+0xa8/0x250 [ 361.688384][T12149] xfs_fs_fill_super+0x10f0/0x1350 [ 361.688415][T12149] get_tree_bdev+0x3f1/0x610 [ 361.688437][T12149] ? xfs_fs_warn_deprecated+0x190/0x190 [ 361.688462][T12149] vfs_get_tree+0x88/0x270 [ 361.688483][T12149] do_new_mount+0x24a/0xa40 [ 361.688508][T12149] __se_sys_mount+0x2d6/0x3c0 [ 361.688532][T12149] ? __x64_sys_mount+0xc0/0xc0 [ 361.688554][T12149] ? lockdep_hardirqs_on+0x94/0x140 [ 361.688577][T12149] ? __x64_sys_mount+0x1c/0xc0 [ 361.688598][T12149] do_syscall_64+0x4c/0xa0 [ 361.688615][T12149] ? clear_bhb_loop+0x60/0xb0 [ 361.688632][T12149] ? clear_bhb_loop+0x60/0xb0 [ 361.688651][T12149] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.688679][T12149] RIP: 0033:0x7fe85419014a [ 361.688697][T12149] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.688713][T12149] RSP: 002b:00007fe8550c9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 361.688742][T12149] RAX: ffffffffffffffda RBX: 00007fe8550c9ef0 RCX: 00007fe85419014a [ 361.688758][T12149] RDX: 0000200000009600 RSI: 0000200000000000 RDI: 00007fe8550c9eb0 [ 361.688771][T12149] RBP: 0000200000009600 R08: 00007fe8550c9ef0 R09: 0000000000a00c40 [ 361.688785][T12149] R10: 0000000000a00c40 R11: 0000000000000246 R12: 0000200000000000 [ 361.688798][T12149] R13: 00007fe8550c9eb0 R14: 00000000000096b9 R15: 0000200000000040 [ 361.688826][T12149] [ 361.688833][T12149] XFS (loop6): Corruption detected. Unmount and run xfs_repair [ 361.688846][T12149] XFS (loop6): log has mismatched uuid - can't recover [ 361.689031][T12149] XFS (loop6): empty log check failed [ 361.689042][T12149] XFS (loop6): log mount/recovery failed: error -117 [ 361.692125][ T7881] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 361.735821][T12149] XFS (loop6): log mount failed [ 362.111027][T12130] loop2: detected capacity change from 0 to 32768 [ 362.447690][T12183] loop6: detected capacity change from 0 to 2364 [ 363.582611][T12220] device batadv0 entered promiscuous mode [ 363.603123][T12219] device batadv0 left promiscuous mode [ 363.686063][ T4858] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 363.791045][T12228] loop2: detected capacity change from 0 to 512 [ 363.815952][ T4849] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 363.837816][T12228] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 363.875964][ T4858] usb 2-1: Using ep0 maxpacket: 16 [ 363.884181][ T4858] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.904869][ T4858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.906768][T12230] loop7: detected capacity change from 0 to 2048 [ 363.921047][ T4858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.932623][T12228] EXT4-fs (loop2): 1 truncate cleaned up [ 363.958610][T12209] loop5: detected capacity change from 0 to 32768 [ 363.963312][T12230] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 363.975738][T12228] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 363.991446][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 363.991458][ T26] audit: type=1800 audit(1752808746.928:176): pid=12228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2720" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 364.025509][T12209] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 364.031397][ T4858] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 364.039615][T12209] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 364.054747][ T4849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.086135][ T4849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.100900][ T4858] usb 2-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 364.110786][ T4849] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 364.119938][ T4858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.128039][ T4849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.138628][ T4858] usb 2-1: config 0 descriptor?? [ 364.159740][ T4849] usb 7-1: config 0 descriptor?? [ 364.281781][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 364.337462][ T7881] ocfs2: Unmounting device (7,5) on (node local) [ 364.561174][ T4858] wacom 0003:056A:0317.001D: unbalanced delimiter at end of report description [ 364.587604][ T4849] nzxt-smart2 0003:1E71:2009.001E: item fetching failed at offset 0/3 [ 364.596529][ T4858] wacom 0003:056A:0317.001D: parse failed [ 364.602294][ T4858] wacom: probe of 0003:056A:0317.001D failed with error -22 [ 364.616576][ T4849] nzxt-smart2: probe of 0003:1E71:2009.001E failed with error -22 [ 364.774587][ T4858] usb 2-1: USB disconnect, device number 15 [ 364.794404][ T4415] usb 7-1: USB disconnect, device number 3 [ 364.800936][ T4849] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 364.996008][ T4849] usb 6-1: Using ep0 maxpacket: 8 [ 365.003275][ T4849] usb 6-1: config 0 has an invalid interface number: 56 but max is 0 [ 365.017069][ T4849] usb 6-1: config 0 has no interface number 0 [ 365.075588][T12257] delete_channel: no stack [ 365.076700][ T4849] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 365.095311][T12256] delete_channel: no stack [ 365.115232][ T4849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.124234][ T4849] usb 6-1: Product: syz [ 365.128844][ T4849] usb 6-1: Manufacturer: syz [ 365.134518][ T4849] usb 6-1: SerialNumber: syz [ 365.150200][ T4849] usb 6-1: config 0 descriptor?? [ 365.364515][ T4849] peak_usb 6-1:0.56: PEAK-System PCAN-USB X6 v224 fw v207.0.0 (2 channels) [ 365.736161][T12271] loop6: detected capacity change from 0 to 32768 [ 365.745531][T12271] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 11 [ 365.760669][ T4849] peak_usb 6-1:0.56 can0: unable to request usb[type=2 value=5] err=-71 [ 365.769650][ T4849] peak_usb 6-1:0.56: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 365.806068][T10311] I/O error, dev loop6, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 366.151252][T12280] loop7: detected capacity change from 0 to 32768 [ 366.177956][ T4849] peak_usb: probe of 6-1:0.56 failed with error -71 [ 366.196318][ T4849] usb 6-1: USB disconnect, device number 8 [ 366.284016][T12280] XFS (loop7): Mounting V5 Filesystem [ 366.457557][T12280] XFS (loop7): Internal error hlen <= 0 || hlen > bufsize at line 2932 of file fs/xfs/xfs_log_recover.c. Caller xlog_valid_rec_header+0x232/0x370 [ 366.472732][T12280] CPU: 0 PID: 12280 Comm: syz.7.2744 Not tainted 6.1.146-syzkaller #0 [ 366.480920][T12280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 366.490997][T12280] Call Trace: [ 366.494302][T12280] [ 366.497253][T12280] dump_stack_lvl+0x168/0x22e [ 366.501964][T12280] ? show_regs_print_info+0x12/0x12 [ 366.507194][T12280] ? kmem_cache_free+0xf7/0x290 [ 366.512078][T12280] xfs_corruption_error+0x11e/0x170 [ 366.517310][T12280] ? xlog_valid_rec_header+0x232/0x370 [ 366.522819][T12280] xlog_valid_rec_header+0x2b9/0x370 [ 366.528234][T12280] ? xlog_valid_rec_header+0x232/0x370 [ 366.533736][T12280] xlog_do_recovery_pass+0x7d9/0xc50 [ 366.539073][T12280] ? xlog_do_io+0x350/0x350 [ 366.543624][T12280] ? xlog_verify_head+0xf3/0x440 [ 366.548604][T12280] ? __kmem_cache_free+0xb6/0x1f0 [ 366.553684][T12280] xlog_verify_head+0x137/0x440 [ 366.558600][T12280] xlog_find_tail+0x6c4/0xa00 [ 366.563343][T12280] xlog_recover+0x48/0x450 [ 366.567817][T12280] xfs_log_mount+0x2ba/0x460 [ 366.572469][T12280] xfs_mountfs+0xc42/0x1d10 [ 366.577008][T12280] ? lockdep_softirqs_off+0x420/0x420 [ 366.582437][T12280] ? xfs_default_resblks+0x70/0x70 [ 366.587620][T12280] ? init_timer_key+0x178/0x320 [ 366.592525][T12280] ? rcu_is_watching+0x11/0xa0 [ 366.597328][T12280] ? trace_xfs_inode_timestamp_range+0xa8/0x250 [ 366.603605][T12280] xfs_fs_fill_super+0x10f0/0x1350 [ 366.608774][T12280] get_tree_bdev+0x3f1/0x610 [ 366.613390][T12280] ? xfs_fs_warn_deprecated+0x190/0x190 [ 366.618974][T12280] vfs_get_tree+0x88/0x270 [ 366.623445][T12280] do_new_mount+0x24a/0xa40 [ 366.627988][T12280] __se_sys_mount+0x2d6/0x3c0 [ 366.632707][T12280] ? __x64_sys_mount+0xc0/0xc0 [ 366.637507][T12280] ? lockdep_hardirqs_on+0x94/0x140 [ 366.642739][T12280] ? __x64_sys_mount+0x1c/0xc0 [ 366.647535][T12280] do_syscall_64+0x4c/0xa0 [ 366.652008][T12280] ? clear_bhb_loop+0x60/0xb0 [ 366.656720][T12280] ? clear_bhb_loop+0x60/0xb0 [ 366.661452][T12280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.667424][T12280] RIP: 0033:0x7f9910d9014a [ 366.671897][T12280] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.691525][T12280] RSP: 002b:00007f9911bffe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 366.699968][T12280] RAX: ffffffffffffffda RBX: 00007f9911bffef0 RCX: 00007f9910d9014a [ 366.707967][T12280] RDX: 0000200000000000 RSI: 0000200000000580 RDI: 00007f9911bffeb0 [ 366.715960][T12280] RBP: 0000200000000000 R08: 00007f9911bffef0 R09: 0000000002200808 [ 366.723950][T12280] R10: 0000000002200808 R11: 0000000000000246 R12: 0000200000000580 [ 366.731945][T12280] R13: 00007f9911bffeb0 R14: 00000000000098e5 R15: 0000200000000140 [ 366.739947][T12280] [ 366.744384][T12280] XFS (loop7): Corruption detected. Unmount and run xfs_repair [ 366.752809][T12280] XFS (loop7): Torn write (CRC failure) detected at log block 0x10. Truncating head block from 0x30. [ 366.786137][T12280] XFS (loop7): Corruption warning: Metadata has LSN (1:48) ahead of current LSN (1:16). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 366.801691][T12280] XFS (loop7): log mount/recovery failed: error -22 [ 366.849734][T12280] XFS (loop7): log mount failed [ 366.897399][T12306] netlink: 'syz.1.2751': attribute type 10 has an invalid length. [ 366.938313][T12308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2752'. [ 367.002642][T12311] loop5: detected capacity change from 0 to 1024 [ 367.121353][T12313] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2755'. [ 367.421545][T12322] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2758'. [ 367.461795][T12322] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2758'. [ 367.517317][T12325] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2761'. [ 367.732461][T12331] loop1: detected capacity change from 0 to 256 [ 367.791847][T12331] FAT-fs (loop1): Directory bread(block 64) failed [ 367.815769][T12331] FAT-fs (loop1): Directory bread(block 65) failed [ 367.858328][T12331] FAT-fs (loop1): Directory bread(block 66) failed [ 367.864915][T12331] FAT-fs (loop1): Directory bread(block 67) failed [ 367.899879][T12309] loop6: detected capacity change from 0 to 32768 [ 367.912237][T12331] FAT-fs (loop1): Directory bread(block 68) failed [ 367.940156][T12331] FAT-fs (loop1): Directory bread(block 69) failed [ 367.970625][T12331] FAT-fs (loop1): Directory bread(block 70) failed [ 367.988246][T12331] FAT-fs (loop1): Directory bread(block 71) failed [ 368.030628][T12331] FAT-fs (loop1): Directory bread(block 72) failed [ 368.057367][T12327] loop2: detected capacity change from 0 to 8192 [ 368.071502][T12331] FAT-fs (loop1): Directory bread(block 73) failed [ 368.137521][T12327] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 368.187732][T12327] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 368.203354][T12327] REISERFS (device loop2): using ordered data mode [ 368.210823][T12327] reiserfs: using flush barriers [ 368.255152][T12327] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 368.281366][T12327] REISERFS (device loop2): checking transaction log (loop2) [ 368.360115][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2772'. [ 368.363870][T12327] REISERFS (device loop2): Using r5 hash to sort names [ 368.420243][T12327] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 368.874058][T12344] loop5: detected capacity change from 0 to 40427 [ 368.907490][T12344] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 368.918741][T12344] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 369.012639][T12344] F2FS-fs (loop5): Found nat_bits in checkpoint [ 369.121699][T12344] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 369.139565][T12344] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 369.450909][T12369] mkiss: ax0: crc mode is auto. [ 369.654788][T12371] tipc: Enabling of bearer <}dp:s> rejected, media not registered [ 369.740672][T12354] loop2: detected capacity change from 0 to 32768 [ 369.859568][T12354] XFS (loop2): Mounting V5 Filesystem [ 370.001571][T12354] XFS (loop2): Ending clean mount [ 370.004570][T12354] XFS (loop2): Quotacheck needed: Please wait. [ 370.090106][T12354] XFS (loop2): Quotacheck: Done. [ 370.212051][ T4275] XFS (loop2): Unmounting Filesystem [ 370.339256][T12392] netlink: 'syz.1.2786': attribute type 10 has an invalid length. [ 370.661610][T12400] sp0: Synchronizing with TNC [ 370.964333][T12389] loop7: detected capacity change from 0 to 40427 [ 371.002063][T12389] F2FS-fs (loop7): invalid crc value [ 371.041522][T12389] F2FS-fs (loop7): Found nat_bits in checkpoint [ 371.150543][T12389] F2FS-fs (loop7): Cannot turn on quotas: -2 on 1 [ 371.179087][T12389] F2FS-fs (loop7): Cannot turn on quotas: -2 on 2 [ 371.223732][T12411] loop6: detected capacity change from 0 to 4096 [ 371.245131][T12389] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 371.263670][T12415] loop5: detected capacity change from 0 to 64 [ 371.302043][T12416] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 371.410053][T12389] F2FS-fs (loop7): project quota file already specified [ 372.195630][T12442] loop6: detected capacity change from 0 to 2048 [ 372.262938][T12442] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 372.805811][ T5280] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 372.862620][T12440] loop2: detected capacity change from 0 to 32768 [ 372.931290][T12440] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 372.964497][T12440] (syz.2.2805,12440,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 373.016126][ T5280] usb 6-1: Using ep0 maxpacket: 16 [ 373.022881][ T5280] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.034343][ T5280] usb 6-1: config 0 interface 0 has no altsetting 0 [ 373.042376][ T5280] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 373.051816][ T5280] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.061437][ T5280] usb 6-1: config 0 descriptor?? [ 373.211346][ T4275] ocfs2: Unmounting device (7,2) on (node local) [ 373.372131][T12446] loop7: detected capacity change from 0 to 32768 [ 373.435215][T12446] XFS (loop7): DAX unsupported by block device. Turning off DAX. [ 373.446049][ T4319] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 373.474593][ T5280] nzxt-smart2 0003:1E71:2009.001F: unknown main item tag 0x0 [ 373.497275][ T5280] nzxt-smart2 0003:1E71:2009.001F: unknown main item tag 0x0 [ 373.519360][ T5280] nzxt-smart2 0003:1E71:2009.001F: unknown main item tag 0x0 [ 373.527770][ T5280] nzxt-smart2 0003:1E71:2009.001F: unknown main item tag 0x0 [ 373.536242][ T5280] nzxt-smart2 0003:1E71:2009.001F: unknown main item tag 0x0 [ 373.551113][ T5280] nzxt-smart2 0003:1E71:2009.001F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 373.567791][T12446] XFS (loop7): Mounting V5 Filesystem [ 373.651085][T12446] XFS (loop7): Ending clean mount [ 373.666224][ T4319] usb 2-1: Using ep0 maxpacket: 32 [ 373.677710][ T5280] usb 6-1: USB disconnect, device number 9 [ 373.678902][T12446] XFS (loop7): Quotacheck needed: Please wait. [ 373.688794][ T4319] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.700805][ T4319] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 373.717196][ T4319] usb 2-1: config 0 interface 0 has no altsetting 0 [ 373.723934][ T4319] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 373.733892][ T127] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 373.754526][ T4319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.783261][ T4319] usb 2-1: config 0 descriptor?? [ 373.855768][T12446] XFS (loop7): Quotacheck: Done. [ 373.910611][T12488] fido_id[12488]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 373.937543][ T127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.958085][ T127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.971651][T10849] XFS (loop7): Unmounting Filesystem [ 373.991790][ T127] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 374.044041][ T127] usb 3-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 374.077174][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.099831][ T127] usb 3-1: config 0 descriptor?? [ 374.185793][ T4849] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 374.227806][ T4319] vrc2 0003:07C0:1125.0020: fixing up VRC-2 report descriptor [ 374.248565][ T4319] input: HID 07c0:1125 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:07C0:1125.0020/input/input10 [ 374.380445][ T4849] usb 7-1: Using ep0 maxpacket: 8 [ 374.399854][ T4849] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.416724][ T4319] vrc2 0003:07C0:1125.0020: input,hidraw0: USB HID v0.00 Joystick [HID 07c0:1125] on usb-dummy_hcd.1-1/input0 [ 374.423372][ T4849] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 374.451013][ T4849] usb 7-1: config 0 interface 0 has no altsetting 0 [ 374.459149][ T4849] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 374.473549][ T4849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.496272][ T4319] usb 2-1: USB disconnect, device number 16 [ 374.513535][ T4849] usb 7-1: config 0 descriptor?? [ 374.514158][ T127] betop 0003:11C0:5506.0021: hidraw1: USB HID v0.00 Device [HID 11c0:5506] on usb-dummy_hcd.2-1/input0 [ 374.578363][ T127] betop 0003:11C0:5506.0021: no inputs found [ 374.714780][ T127] usb 3-1: USB disconnect, device number 17 [ 374.717548][T12502] fido_id[12502]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 374.852804][T12503] fido_id[12503]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 374.895598][T12505] loop7: detected capacity change from 0 to 512 [ 374.953170][ T4849] aquacomputer_d5next 0003:0C70:F00E.0022: hidraw0: USB HID v0.00 Device [HID 0c70:f00e] on usb-dummy_hcd.6-1/input0 [ 375.015870][T12505] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 375.046843][T12505] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.089494][T12499] loop5: detected capacity change from 0 to 32768 [ 375.109815][T12510] sp0: Synchronizing with TNC [ 375.158607][ T4319] usb 7-1: USB disconnect, device number 4 [ 375.242775][T10849] EXT4-fs (loop7): unmounting filesystem. [ 375.444337][T12512] fido_id[12512]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 375.503452][T12516] loop2: detected capacity change from 0 to 2048 [ 375.585536][T12516] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 376.045071][T12534] netlink: 'syz.7.2842': attribute type 10 has an invalid length. [ 376.109560][T12537] loop5: detected capacity change from 0 to 256 [ 376.117690][T12534] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.128169][T12534] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.265198][T12534] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.272478][T12534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.279970][T12534] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.287113][T12534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.400990][T12534] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 376.439825][T12536] device bridge_slave_1 left promiscuous mode [ 376.471677][T12536] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.533907][T12536] device bridge_slave_0 left promiscuous mode [ 376.544893][T12543] loop5: detected capacity change from 0 to 2048 [ 376.551684][T12536] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.618319][T12543] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 376.669669][T12536] bond0: (slave bridge0): Releasing backup interface [ 376.730010][T12530] loop2: detected capacity change from 0 to 40427 [ 376.768645][T12530] F2FS-fs (loop2): Invalid segment count (1) [ 376.774964][T12530] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 376.814287][T12530] F2FS-fs (loop2): invalid crc value [ 376.836080][ T127] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 376.854836][T12530] F2FS-fs (loop2): Found nat_bits in checkpoint [ 376.945507][T12528] loop6: detected capacity change from 0 to 32768 [ 377.032564][T12530] F2FS-fs (loop2): recover fsync data on readonly fs [ 377.039793][T12530] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 377.049420][ T127] usb 2-1: unable to get BOS descriptor or descriptor too short [ 377.054230][T12530] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 377.096966][ T127] usb 2-1: config 6 has an invalid interface number: 96 but max is 0 [ 377.105077][ T127] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 377.116057][ T127] usb 2-1: config 6 has no interface number 0 [ 377.122190][ T127] usb 2-1: config 6 interface 96 has no altsetting 0 [ 377.132785][ T127] usb 2-1: string descriptor 0 read error: -22 [ 377.139472][ T127] usb 2-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=4f.2b [ 377.148981][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.174522][T12528] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 377.183600][T12528] XFS (loop6): Mounting V5 Filesystem [ 377.376537][T12528] XFS (loop6): Ending clean mount [ 377.384389][T12528] XFS (loop6): Quotacheck needed: Please wait. [ 377.430339][T12565] loop5: detected capacity change from 0 to 512 [ 377.461753][T12565] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 377.530884][T12528] XFS (loop6): Quotacheck: Done. [ 377.577926][ T26] audit: type=1800 audit(1752808760.518:177): pid=12528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2840" name="file1" dev="loop6" ino=4422 res=0 errno=0 [ 377.585163][T12565] EXT4-fs (loop5): 1 truncate cleaned up [ 377.620991][T12569] loop2: detected capacity change from 0 to 256 [ 377.695799][T12565] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 377.717446][ T127] dvb-usb: found a 'DiBcom TFE7790P reference design' in cold state, will try to load a firmware [ 377.787236][ T127] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 377.815791][ T127] dib0700: firmware download failed at 28 with -71 [ 377.831457][ T127] usb 2-1: USB disconnect, device number 17 [ 377.837697][T12571] loop7: detected capacity change from 0 to 4096 [ 377.879190][ T26] audit: type=1800 audit(1752808760.818:178): pid=12565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2855" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 377.879331][T10692] XFS (loop6): Unmounting Filesystem [ 377.914438][T12571] ntfs: (device loop7): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 377.964122][T12571] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 378.038290][ T7881] EXT4-fs (loop5): unmounting filesystem. [ 378.047249][T12571] ntfs: (device loop7): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 378.089435][T12571] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 378.129455][T12571] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 378.185805][ T4415] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 378.188803][T12571] ntfs: volume version 3.1. [ 378.238360][T12571] ntfs: (device loop7): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 378.289394][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.296659][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.306912][T12571] ntfs: (device loop7): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 378.335780][T12571] ntfs: (device loop7): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 378.385732][ T4415] usb 3-1: Using ep0 maxpacket: 8 [ 378.397548][ T4415] usb 3-1: unable to get BOS descriptor or descriptor too short [ 378.432275][ T4415] usb 3-1: config 4 interface 0 has no altsetting 0 [ 378.484056][ T4415] usb 3-1: string descriptor 0 read error: -22 [ 378.500922][ T4415] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 378.531367][T12579] loop5: detected capacity change from 0 to 512 [ 378.543790][ T4415] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.581610][ T4415] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 378.598639][T12579] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.2860: bad orphan inode 13 [ 378.628293][T12579] ext4_test_bit(bit=12, block=4) = 1 [ 378.646826][ T4415] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 378.685230][T12579] is_bad_inode(inode)=0 [ 378.715826][T12579] NEXT_ORPHAN(inode)=0 [ 378.719923][T12579] max_ino=32 [ 378.723113][T12579] i_nlink=1 [ 378.727026][ T4415] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 378.734184][ T4415] usb 3-1: media controller created [ 378.758492][T12579] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 378.800086][T12574] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 378.835133][T12579] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.2860: Unrecognised inode hash code 20 [ 378.852531][ T4415] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 378.894316][T12579] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.2860: Corrupt directory, running e2fsck is recommended [ 378.914962][T12592] netlink: 'syz.6.2862': attribute type 10 has an invalid length. [ 378.942840][ T4415] zl10353_read_register: readreg error (reg=127, ret==0) [ 378.955247][T12592] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.962750][T12592] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.974826][T12591] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.2860: Unrecognised inode hash code 20 [ 379.006898][T12591] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.2860: Corrupt directory, running e2fsck is recommended [ 379.042380][T12592] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.049592][T12592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.057018][T12592] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.064176][T12592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.090920][ T4415] usb 3-1: USB disconnect, device number 18 [ 379.120692][T12589] loop7: detected capacity change from 0 to 8192 [ 379.124056][T12592] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 379.172896][T12593] device bridge_slave_1 left promiscuous mode [ 379.207230][T12593] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.216355][ T7881] EXT4-fs (loop5): unmounting filesystem. [ 379.237939][T12593] device bridge_slave_0 left promiscuous mode [ 379.254506][T12593] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.367730][T12593] bond0: (slave bridge0): Releasing backup interface [ 379.415897][T12597] loop1: detected capacity change from 0 to 4096 [ 379.506008][T12597] ntfs: volume version 3.1. [ 379.605812][ T4858] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 379.752475][T12608] loop6: detected capacity change from 0 to 1024 [ 379.774778][T12608] EXT4-fs: Ignoring removed nobh option [ 379.805763][ T4858] usb 6-1: Using ep0 maxpacket: 32 [ 379.812600][ T4858] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 379.821104][T12608] EXT4-fs: Ignoring removed bh option [ 379.872827][T12608] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 379.873912][ T4858] usb 6-1: config 0 interface 0 has no altsetting 0 [ 379.967431][T12608] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 379.981795][ T4858] usb 6-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 379.981820][ T4858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.993758][ T4858] usb 6-1: config 0 descriptor?? [ 380.218187][T12625] block nbd1: NBD_DISCONNECT [ 380.285558][T10692] EXT4-fs (loop6): unmounting filesystem. [ 380.473668][ T4858] hid-retrode 0003:0403:97C1.0023: hidraw0: USB HID v0.02 Device [HID 0403:97c1] on usb-dummy_hcd.5-1/input0 [ 380.508689][ T4858] kernel write not supported for file /input/mouse0 (pid: 4858 comm: kworker/0:15) [ 380.673162][ T4415] usb 6-1: USB disconnect, device number 10 [ 380.691235][T12635] loop1: detected capacity change from 0 to 4096 [ 380.811178][T12635] ntfs3: loop1: failed to convert "0080" to macinuit [ 380.834194][T12635] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 380.883731][T12635] ntfs3: loop1: failed to convert name for inode 1e. [ 381.521210][T12647] loop2: detected capacity change from 0 to 40427 [ 381.538827][T12647] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (4285726721, 24) [ 381.567875][T12647] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 381.605870][T12647] F2FS-fs (loop2): invalid crc value [ 381.631016][T12647] F2FS-fs (loop2): Found nat_bits in checkpoint [ 381.767528][T12647] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 381.780691][T12647] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 381.796240][T12669] loop5: detected capacity change from 0 to 64 [ 381.860007][T12669] hfs: request for non-existent node -129 in B*Tree [ 381.872443][T12647] F2FS-fs (loop2): Corrupted max_depth of 3: 127 [ 381.884977][T12669] hfs: request for non-existent node -129 in B*Tree [ 382.574098][T12670] loop6: detected capacity change from 0 to 40427 [ 382.590805][T12670] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 382.616561][T12670] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 382.660703][T12670] F2FS-fs (loop6): Found nat_bits in checkpoint [ 382.766752][T12685] loop2: detected capacity change from 0 to 8 [ 382.779253][T12670] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 382.824719][T12670] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 382.909398][T10692] syz-executor: attempt to access beyond end of device [ 382.909398][T10692] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 383.014372][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 383.014387][ T26] audit: type=1326 audit(1752808765.948:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12675 comm="syz.1.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688a78e9a9 code=0x7fc00000 [ 383.078994][ T26] audit: type=1326 audit(1752808765.948:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12675 comm="syz.1.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f688a78e9a9 code=0x7fc00000 [ 383.152185][ T26] audit: type=1326 audit(1752808765.948:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12675 comm="syz.1.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688a78e9a9 code=0x7fc00000 [ 383.291073][ T26] audit: type=1326 audit(1752808765.948:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12675 comm="syz.1.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688a78e9a9 code=0x7fc00000 [ 383.388071][ T26] audit: type=1326 audit(1752808765.948:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12675 comm="syz.1.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688a78e9a9 code=0x7fc00000 [ 383.441198][T12690] loop1: detected capacity change from 0 to 4096 [ 383.467957][ T26] audit: type=1326 audit(1752808765.948:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12675 comm="syz.1.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688a78e9a9 code=0x7fc00000 [ 383.497213][T12690] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 383.586621][ T26] audit: type=1326 audit(1752808765.948:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12675 comm="syz.1.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688a78e9a9 code=0x7fc00000 [ 383.588316][T12697] loop5: detected capacity change from 0 to 1024 [ 383.611884][T12690] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 383.627392][T12699] loop6: detected capacity change from 0 to 64 [ 383.644610][ T26] audit: type=1326 audit(1752808765.948:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12675 comm="syz.1.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688a78e9a9 code=0x7fc00000 [ 383.757301][ T26] audit: type=1326 audit(1752808765.948:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12675 comm="syz.1.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688a78e9a9 code=0x7fc00000 [ 383.811520][T12697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 383.896133][ T26] audit: type=1326 audit(1752808765.948:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12675 comm="syz.1.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688a78e9a9 code=0x7fc00000 [ 384.176604][ T5261] kernel write not supported for file /259/oom_adj (pid: 5261 comm: kworker/1:16) [ 384.368564][T12703] loop1: detected capacity change from 0 to 8192 [ 384.392934][T12703] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 384.476667][T12703] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 384.494560][T12703] REISERFS (device loop1): using ordered data mode [ 384.516480][T12703] reiserfs: using flush barriers [ 384.523168][T12703] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 384.530769][T12687] loop2: detected capacity change from 0 to 40427 [ 384.541595][T12703] REISERFS (device loop1): checking transaction log (loop1) [ 384.594204][T12687] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 384.643503][T12687] F2FS-fs (loop2): invalid crc value [ 384.656479][T12703] REISERFS (device loop1): Using tea hash to sort names [ 384.663941][T12703] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 384.677364][T12687] F2FS-fs (loop2): Found nat_bits in checkpoint [ 384.704684][T12703] REISERFS warning (device loop1): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=12, len=4 - odd [ 384.796038][T12687] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 385.047551][ T4275] syz-executor: attempt to access beyond end of device [ 385.047551][ T4275] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 385.263783][T12728] loop5: detected capacity change from 0 to 4096 [ 385.320888][T12728] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 385.363473][ T4848] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 385.545938][ T4848] usb 7-1: Using ep0 maxpacket: 16 [ 385.553168][ T4848] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.575381][ T4848] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.589756][ T4848] usb 7-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 385.599037][ T4848] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.609407][ T4848] usb 7-1: config 0 descriptor?? [ 386.026600][ T4848] saitek 0003:06A3:0CCB.0024: item fetching failed at offset 0/2 [ 386.049819][ T4848] saitek 0003:06A3:0CCB.0024: parse failed [ 386.071788][ T4848] saitek: probe of 0003:06A3:0CCB.0024 failed with error -22 [ 386.228038][ T4848] usb 7-1: USB disconnect, device number 5 [ 386.413926][T12734] loop7: detected capacity change from 0 to 32768 [ 386.459105][T12734] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.2926 (12734) [ 386.462805][T12758] loop5: detected capacity change from 0 to 1024 [ 386.490183][T12734] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 386.509424][T12758] EXT4-fs: Ignoring removed bh option [ 386.515641][T12734] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 386.526318][T12734] BTRFS info (device loop7): using free space tree [ 386.578419][T12758] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 386.719058][T12779] mkiss: ax0: crc mode is auto. [ 386.762050][ T7881] EXT4-fs (loop5): unmounting filesystem. [ 386.932253][T12734] BTRFS info (device loop7): enabling ssd optimizations [ 387.090554][T10849] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 387.524870][T12803] loop6: detected capacity change from 0 to 16 [ 387.571583][T12803] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 387.610159][T10311] udevd[10311]: incorrect cramfs checksum on /dev/loop6 [ 388.522603][T12833] loop1: detected capacity change from 0 to 64 [ 389.181721][ T4858] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 389.362603][T12841] loop2: detected capacity change from 0 to 32768 [ 389.381024][ T4858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.406649][ T4858] usb 2-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 389.418366][T12841] JBD2: Ignoring recovery information on journal [ 389.421678][ T4858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.465721][ T4858] usb 2-1: config 0 descriptor?? [ 389.476778][T12841] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 389.600371][ T4275] ocfs2: Unmounting device (7,2) on (node local) [ 389.896133][ T4858] wacom 0003:056A:032B.0025: hidraw0: USB HID v0.04 Device [HID 056a:032b] on usb-dummy_hcd.1-1/input0 [ 389.953940][T12855] loop6: detected capacity change from 0 to 1024 [ 390.020410][T12860] loop5: detected capacity change from 0 to 8 [ 390.044116][T12855] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 390.081149][ T5261] usb 2-1: USB disconnect, device number 18 [ 390.146006][T12855] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.250607][T10692] EXT4-fs (loop6): unmounting filesystem. [ 390.361452][T12857] fido_id[12857]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 390.876977][T12870] loop5: detected capacity change from 0 to 32768 [ 390.901476][T12870] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2978 (12870) [ 390.946224][T12870] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 390.966306][T12870] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 390.995767][T12870] BTRFS info (device loop5): setting nodatacow, compression disabled [ 391.003934][T12870] BTRFS info (device loop5): max_inline at 0 [ 391.054352][T12870] BTRFS info (device loop5): enabling disk space caching [ 391.071820][T12870] BTRFS info (device loop5): turning off barriers [ 391.087649][T12870] BTRFS info (device loop5): turning on flush-on-commit [ 391.129648][T12870] BTRFS info (device loop5): doing ref verification [ 391.143269][T12870] BTRFS info (device loop5): force clearing of disk cache [ 391.150733][T12870] BTRFS info (device loop5): enabling ssd optimizations [ 391.164621][T12870] BTRFS info (device loop5): max_inline at 4096 [ 391.192333][T12870] BTRFS info (device loop5): disk space caching is enabled [ 391.454792][T12870] BTRFS info (device loop5): rebuilding free space tree [ 391.504266][T12870] BTRFS info (device loop5): disabling free space tree [ 391.513635][T12914] loop1: detected capacity change from 0 to 64 [ 391.524943][T12870] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 391.545055][T12870] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 391.607315][ T26] kauditd_printk_skb: 41 callbacks suppressed [ 391.607330][ T26] audit: type=1800 audit(1752808774.548:230): pid=12914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2991" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 391.640072][T12912] loop6: detected capacity change from 0 to 8192 [ 391.700848][T12912] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 391.753963][T12912] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 391.763623][T12912] REISERFS (device loop6): using ordered data mode [ 391.770937][T12912] reiserfs: using flush barriers [ 391.790208][ T7881] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 391.792918][T12912] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 391.819233][T12912] REISERFS (device loop6): checking transaction log (loop6) [ 391.924308][T12912] REISERFS (device loop6): Using tea hash to sort names [ 391.995471][T12912] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 392.158740][T10311] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop5 scanned by udevd (10311) [ 392.316948][T12929] loop7: detected capacity change from 0 to 1024 [ 392.490816][T12931] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2993'. [ 392.626424][ T4356] hfsplus: b-tree write err: -5, ino 4 [ 392.787931][T12942] loop6: detected capacity change from 0 to 256 [ 393.027630][ T4857] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 393.242183][ T4857] usb 2-1: Using ep0 maxpacket: 32 [ 393.249761][ T4857] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.289389][ T4857] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 393.325281][ T4857] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 393.357823][ T4857] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 393.381164][ T4857] usb 2-1: Product: syz [ 393.385362][ T4857] usb 2-1: Manufacturer: syz [ 393.406035][ T4857] usb 2-1: SerialNumber: syz [ 393.432133][ T4857] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input14 [ 393.661618][ T4857] usb 2-1: USB disconnect, device number 19 [ 393.661644][ C1] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 393.688688][ T4857] appletouch 2-1:1.0: input: appletouch disconnected [ 393.919693][T12945] loop7: detected capacity change from 0 to 40427 [ 393.978320][T12945] F2FS-fs (loop7): Found nat_bits in checkpoint [ 394.053014][T12945] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 394.117042][T10849] syz-executor: attempt to access beyond end of device [ 394.117042][T10849] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 394.118916][ T26] audit: type=1326 audit(1752808777.058:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12971 comm="syz.6.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85418e9a9 code=0x7ffc0000 [ 394.152447][ T26] audit: type=1326 audit(1752808777.088:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12971 comm="syz.6.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe85418e9a9 code=0x7ffc0000 [ 394.152695][ T26] audit: type=1326 audit(1752808777.088:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12971 comm="syz.6.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85418e9a9 code=0x7ffc0000 [ 394.152884][ T26] audit: type=1326 audit(1752808777.088:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12971 comm="syz.6.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85418e9a9 code=0x7ffc0000 [ 394.154377][ T26] audit: type=1326 audit(1752808777.088:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12971 comm="syz.6.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fe85418e9a9 code=0x7ffc0000 [ 394.154613][ T26] audit: type=1326 audit(1752808777.088:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12971 comm="syz.6.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85418e9a9 code=0x7ffc0000 [ 394.154812][ T26] audit: type=1326 audit(1752808777.088:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12971 comm="syz.6.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85418e9a9 code=0x7ffc0000 [ 394.164764][T12957] loop5: detected capacity change from 0 to 32768 [ 394.238440][T12957] syz.5.3011: attempt to access beyond end of device [ 394.238440][T12957] loop5: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 394.238546][T12957] metapage_write_end_io: I/O error [ 394.240472][ T107] blkno = 8ed2c, nblocks = 1 [ 394.240487][ T107] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 394.240487][ T107] [ 394.241436][ T107] ERROR: (device loop5): remounting filesystem as read-only [ 394.247976][T12957] blkno = 8ed2c, nblocks = 1 [ 394.247992][T12957] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 394.247992][T12957] [ 394.249401][T12957] ERROR: (device loop5): dtSearch: DT_GETPAGE: dtree page corrupt [ 394.249401][T12957] [ 394.249477][T12957] jfs_mkdir: dtSearch returned -5 [ 394.379059][T12974] lo speed is unknown, defaulting to 1000 [ 394.382200][T12974] lo speed is unknown, defaulting to 1000 [ 394.382727][T12974] lo speed is unknown, defaulting to 1000 [ 394.393781][T12974] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 394.396668][ T7881] syz-executor: attempt to access beyond end of device [ 394.396668][ T7881] loop5: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 394.396735][ T7881] metapage_write_end_io: I/O error [ 394.396886][ T7881] JFS: metapage_get_blocks failed [ 394.396968][ T7881] JFS: metapage_get_blocks failed [ 394.396989][ T7881] JFS: metapage_get_blocks failed [ 394.397010][ T7881] JFS: metapage_get_blocks failed [ 394.447496][T12974] lo speed is unknown, defaulting to 1000 [ 394.454534][T12974] lo speed is unknown, defaulting to 1000 [ 394.455977][T12974] lo speed is unknown, defaulting to 1000 [ 394.461872][T12974] lo speed is unknown, defaulting to 1000 [ 394.463229][T12974] lo speed is unknown, defaulting to 1000 [ 394.487112][T12974] lo speed is unknown, defaulting to 1000 [ 395.138094][T12991] program syz.5.3024 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 395.401962][T12982] loop6: detected capacity change from 0 to 32768 [ 396.016175][T13022] use of bytesused == 0 is deprecated and will be removed in the future, [ 396.058012][T13022] use the actual size instead. [ 396.757750][T13025] loop2: detected capacity change from 0 to 32768 [ 396.827131][T13025] XFS (loop2): Mounting V5 Filesystem [ 396.897091][T13025] XFS (loop2): Ending clean mount [ 396.924067][T13025] XFS (loop2): Quotacheck needed: Please wait. [ 396.975129][T13041] loop1: detected capacity change from 0 to 32768 [ 397.040351][T13041] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 397.054520][T13025] XFS (loop2): Quotacheck: Done. [ 397.186614][ T4268] ocfs2: Unmounting device (7,1) on (node local) [ 397.207924][ T4275] XFS (loop2): Unmounting Filesystem [ 397.426840][T13043] loop6: detected capacity change from 0 to 32768 [ 397.878752][T13063] loop5: detected capacity change from 0 to 4096 [ 397.927277][T13063] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 397.964727][T13063] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 397.973870][T13063] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 397.996030][T13063] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 398.003894][T13063] ntfs3: loop5: try to read out of volume at offset 0x3fffffc1c00 [ 398.036091][T13063] ntfs3: loop5: try to read out of volume at offset 0x3fffffc2c00 [ 398.043954][T13063] ntfs3: loop5: try to read out of volume at offset 0x3fffffc4c00 [ 398.065720][T13063] ntfs3: loop5: try to read out of volume at offset 0x3fffffc8c00 [ 398.073588][T13063] ntfs3: loop5: try to read out of volume at offset 0x3fffffd0c00 [ 398.151543][T13063] ntfs3: loop5: try to read out of volume at offset 0x3fffffe0c00 [ 398.601961][T13065] loop1: detected capacity change from 0 to 32768 [ 398.657180][T13069] loop7: detected capacity change from 0 to 64 [ 398.683607][T13065] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3055 (13065) [ 398.887451][T13067] loop6: detected capacity change from 0 to 131072 [ 398.933461][T13065] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 398.951209][T13067] F2FS-fs (loop6): Invalid log sectors per block(570425347) log sectorsize(9) [ 398.960198][T13067] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 398.992705][T13067] F2FS-fs (loop6): invalid crc value [ 399.015303][T13067] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 399.065898][T13065] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 399.073498][T13067] F2FS-fs (loop6): recover fsync data on readonly fs [ 399.083006][T13067] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 399.115935][T13065] BTRFS info (device loop1): using free space tree [ 399.172654][T13067] F2FS-fs (loop6): Bad quota inode 2:50331648 [ 399.178860][T13067] F2FS-fs (loop6): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 399.190335][T13067] F2FS-fs (loop6): Cannot turn on quota_ino: -22 [ 399.197775][T13067] F2FS-fs (loop6): Try to recover 2th superblock, ret: -30 [ 399.205016][T13067] F2FS-fs (loop6): Mounted with checkpoint version = 753bd00b [ 399.545868][T13065] BTRFS info (device loop1): enabling ssd optimizations [ 399.708256][ T4268] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 400.193307][ T4383] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (4383) [ 400.775563][T13094] loop7: detected capacity change from 0 to 32768 [ 400.867602][T13094] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 400.930658][T13094] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 401.007725][T13104] loop2: detected capacity change from 0 to 40427 [ 401.047294][T13104] F2FS-fs (loop2): invalid crc value [ 401.089694][T13104] F2FS-fs (loop2): Found nat_bits in checkpoint [ 401.107899][T13102] loop6: detected capacity change from 0 to 32768 [ 401.250494][T13102] XFS (loop6): Mounting V5 Filesystem [ 401.321722][T13107] loop1: detected capacity change from 0 to 32768 [ 401.358187][T10849] ocfs2: Unmounting device (7,7) on (node local) [ 401.372954][T13104] F2FS-fs (loop2): Start checkpoint disabled! [ 401.419157][T13104] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 401.424933][T13100] loop5: detected capacity change from 0 to 32768 [ 401.483337][T13102] XFS (loop6): Ending clean mount [ 401.492000][T13100] XFS: noikeep mount option is deprecated. [ 401.502368][T13107] XFS (loop1): Mounting V5 Filesystem [ 401.571239][T13107] XFS (loop1): Ending clean mount [ 401.639893][T13100] XFS (loop5): Mounting V5 Filesystem [ 401.818092][ T4268] XFS (loop1): Unmounting Filesystem [ 401.848478][T10692] XFS (loop6): Unmounting Filesystem [ 401.893911][T13100] XFS (loop5): Ending clean mount [ 401.931765][T13100] XFS (loop5): Quotacheck needed: Please wait. [ 402.126816][T13100] XFS (loop5): Quotacheck: Done. [ 402.278492][ T7881] XFS (loop5): Unmounting Filesystem [ 403.692734][T13173] loop1: detected capacity change from 0 to 1024 [ 403.844018][T13154] loop6: detected capacity change from 0 to 32768 [ 403.854262][ T4356] hfsplus: b-tree write err: -5, ino 4 [ 404.357305][ T3639] udevd[3639]: worker [10311] terminated by signal 33 (Unknown signal 33) [ 404.377247][ T3639] udevd[3639]: worker [10311] failed while handling '/devices/virtual/block/loop6' [ 404.587884][T13168] loop7: detected capacity change from 0 to 40427 [ 404.628768][T13168] F2FS-fs (loop7): invalid crc value [ 404.634140][T13168] F2FS-fs (loop7): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 404.700845][T13168] F2FS-fs (loop7): Found nat_bits in checkpoint [ 404.777879][T13202] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 404.816148][T13202] syzkaller1: linktype set to 780 [ 404.828867][T13168] F2FS-fs (loop7): recover fsync data on readonly fs [ 404.868058][T13168] F2FS-fs (loop7): Cannot turn on quotas: -2 on 0 [ 404.884938][T13168] F2FS-fs (loop7): Cannot turn on quotas: -2 on 1 [ 404.899099][T13168] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 404.981135][T13208] loop5: detected capacity change from 0 to 64 [ 405.032286][ T26] audit: type=1800 audit(1752808787.968:238): pid=13208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3097" name="file1" dev="loop5" ino=18 res=0 errno=0 [ 405.123383][T13210] loop1: detected capacity change from 0 to 512 [ 405.280554][T13210] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 405.386346][T13210] EXT4-fs (loop1): shut down requested (2) [ 405.519770][T13218] loop6: detected capacity change from 0 to 4096 [ 405.527829][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 405.547374][T13218] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 405.617071][T13218] ntfs: volume version 3.1. [ 406.029315][T13206] loop2: detected capacity change from 0 to 32768 [ 406.488150][T13245] loop6: detected capacity change from 0 to 256 [ 406.551945][T13245] FAT-fs (loop6): Directory bread(block 64) failed [ 406.616380][T13245] FAT-fs (loop6): Directory bread(block 65) failed [ 406.648203][T13245] FAT-fs (loop6): Directory bread(block 66) failed [ 406.666763][T13245] FAT-fs (loop6): Directory bread(block 67) failed [ 406.673411][T13245] FAT-fs (loop6): Directory bread(block 68) failed [ 406.721723][T13245] FAT-fs (loop6): Directory bread(block 69) failed [ 406.728642][T13245] FAT-fs (loop6): Directory bread(block 70) failed [ 406.753513][T13245] FAT-fs (loop6): Directory bread(block 71) failed [ 406.778556][T13245] FAT-fs (loop6): Directory bread(block 72) failed [ 406.785186][T13245] FAT-fs (loop6): Directory bread(block 73) failed [ 406.915366][ T26] audit: type=1800 audit(1752808789.848:239): pid=13245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3114" name=D2A62E dev="loop6" ino=1048831 res=0 errno=0 [ 406.970006][T13230] loop1: detected capacity change from 0 to 32768 [ 407.034525][T13230] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 407.051780][T13255] loop5: detected capacity change from 0 to 1024 [ 407.112014][T13255] EXT4-fs: Ignoring removed nomblk_io_submit option [ 407.173993][T13255] EXT4-fs: Ignoring removed nomblk_io_submit option [ 407.295495][T13255] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 407.404942][ T4833] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 407.619413][T13258] loop7: detected capacity change from 0 to 8192 [ 407.841872][T13266] loop2: detected capacity change from 0 to 8192 [ 407.868150][ T7881] EXT4-fs (loop5): unmounting filesystem. [ 407.956705][T13266] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 408.062386][T13266] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 408.152521][T13266] REISERFS (device loop2): using ordered data mode [ 408.183448][T13266] reiserfs: using flush barriers [ 408.252297][T13266] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 408.351150][T13267] loop6: detected capacity change from 0 to 131072 [ 408.360176][T13266] REISERFS (device loop2): checking transaction log (loop2) [ 408.403319][T13267] XFS (loop6): Mounting V5 Filesystem [ 408.624960][T13267] XFS (loop6): Starting recovery (logdev: internal) [ 408.664667][T13267] XFS (loop6): Ending recovery (logdev: internal) [ 408.764248][T13292] netlink: 'syz.1.3127': attribute type 10 has an invalid length. [ 408.819024][T13292] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3127'. [ 408.826683][T13266] REISERFS (device loop2): Using tea hash to sort names [ 408.835416][T10692] XFS (loop6): Unmounting Filesystem [ 408.857286][T13266] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 409.986674][T13328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3146'. [ 409.989474][T13326] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3145'. [ 410.018015][T13332] loop6: detected capacity change from 0 to 64 [ 410.047202][T13332] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 410.294796][T13338] loop5: detected capacity change from 0 to 16 [ 410.321236][T13331] loop7: detected capacity change from 0 to 8192 [ 410.361928][T13331] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 410.393928][T13338] erofs: (device loop5): mounted with root inode @ nid 36. [ 410.409444][T13331] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 410.423333][ T26] audit: type=1800 audit(1752808793.358:240): pid=13338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3151" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 410.487236][T13331] REISERFS (device loop7): using ordered data mode [ 410.493784][T13331] reiserfs: using flush barriers [ 410.551939][T13331] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 410.638006][T13349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3154'. [ 410.680861][T13331] REISERFS (device loop7): checking transaction log (loop7) [ 411.034956][T13331] REISERFS (device loop7): Using tea hash to sort names [ 411.080614][T13331] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 411.124854][T13359] sp0: Synchronizing with TNC [ 412.783246][T13404] netlink: 'syz.6.3176': attribute type 2 has an invalid length. [ 412.811515][T13404] netlink: 10 bytes leftover after parsing attributes in process `syz.6.3176'. [ 412.953736][T13409] loop7: detected capacity change from 0 to 2048 [ 412.975854][ T5280] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 413.039564][T13409] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=3932051, location=3932051 [ 413.105988][T13409] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 413.186009][ T5280] usb 6-1: Using ep0 maxpacket: 16 [ 413.194023][ T5280] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.236154][ T5280] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 413.286123][ T5280] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.317363][ T5280] usb 6-1: config 0 descriptor?? [ 413.703986][T13431] loop7: detected capacity change from 0 to 1024 [ 413.739294][ T5280] mcp2221 0003:04D8:00DD.0026: unknown main item tag 0x0 [ 413.753445][ T5280] mcp2221 0003:04D8:00DD.0026: unknown main item tag 0x0 [ 413.782412][T13431] hfsplus: bad catalog entry type [ 413.792634][ T5280] mcp2221 0003:04D8:00DD.0026: item fetching failed at offset 2/5 [ 413.821329][ T5280] mcp2221 0003:04D8:00DD.0026: can't parse reports [ 413.864078][ T5280] mcp2221: probe of 0003:04D8:00DD.0026 failed with error -22 [ 413.946579][ T5280] usb 6-1: USB disconnect, device number 11 [ 414.004036][ T11] hfsplus: b-tree write err: -5, ino 4 [ 414.512877][T13462] loop2: detected capacity change from 0 to 256 [ 414.910305][T13477] loop1: detected capacity change from 0 to 64 [ 415.048516][T13477] MTD: Couldn't look up './file0': -15 [ 415.285088][T13491] device veth0_to_bond entered promiscuous mode [ 415.291692][ T1180] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 415.491411][ T1180] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 415.512536][ T1180] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 415.530936][ T1180] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 415.542100][ T1180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 415.567560][ T1180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 415.585517][ T1180] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 415.597160][ T1180] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 415.605255][ T1180] usb 3-1: Product: syz [ 415.610020][ T1180] usb 3-1: Manufacturer: syz [ 415.619135][ T1180] cdc_wdm 3-1:1.0: skipping garbage [ 415.624372][ T1180] cdc_wdm 3-1:1.0: skipping garbage [ 415.637213][ T1180] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 415.643267][ T1180] cdc_wdm 3-1:1.0: Unknown control protocol [ 416.015348][T13513] loop5: detected capacity change from 0 to 256 [ 416.046533][ C0] cdc_wdm 3-1:1.0: Unexpected error -71 [ 416.054506][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 416.061371][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 416.068203][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 416.074852][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 416.085733][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 416.092364][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 416.099057][ T1180] usb 3-1: USB disconnect, device number 19 [ 416.150683][T13513] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 416.346643][T13518] loop7: detected capacity change from 0 to 1024 [ 416.402967][T13518] hfsplus: bad catalog entry type [ 416.546981][ T75] hfsplus: b-tree write err: -5, ino 4 [ 416.869334][T13533] loop6: detected capacity change from 0 to 8192 [ 416.909217][T13533] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 417.265806][ T127] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 417.455719][ T127] usb 3-1: Using ep0 maxpacket: 8 [ 417.462787][ T127] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 417.481708][ T127] usb 3-1: config 179 has no interface number 0 [ 417.495246][ T127] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 417.520571][ T127] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 417.546207][ T127] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 417.557998][ T127] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 417.572978][ T127] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 417.599172][ T127] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 417.608724][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.625466][T13539] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 417.786134][ T5280] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 417.889046][ T5261] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input16 [ 417.954189][T13569] loop5: detected capacity change from 0 to 2048 [ 417.975889][ T5280] usb 2-1: Using ep0 maxpacket: 16 [ 417.992805][ T5280] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.063895][T13569] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 418.083299][ T5280] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 418.105879][T13569] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry where CRC length (255) does not match entry length (44) [ 418.132075][ T5280] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 418.170247][T13572] loop7: detected capacity change from 0 to 64 [ 418.183108][T13573] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry where CRC length (255) does not match entry length (44) [ 418.196783][ T5280] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 418.302493][ T5280] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 418.345407][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 418.366846][ T5280] usb 2-1: SerialNumber: syz [ 418.385859][T13558] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 418.397884][T13558] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 418.408211][ T1180] usb 3-1: USB disconnect, device number 20 [ 418.409667][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 418.431821][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 418.449643][ T5280] hub 2-1:1.0: bad descriptor, ignoring hub [ 418.455625][ T5280] hub: probe of 2-1:1.0 failed with error -5 [ 418.456611][ T1180] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 418.536860][T13580] netlink: 'syz.5.3234': attribute type 4 has an invalid length. [ 418.549775][ T4857] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 418.652427][T13558] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 418.670953][T13558] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 418.746241][ T4857] usb 7-1: Using ep0 maxpacket: 32 [ 418.753211][ T4857] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.784224][ T4857] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 418.820240][ T4857] usb 7-1: config 0 interface 0 has no altsetting 0 [ 418.844465][ T4857] usb 7-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 418.862243][ T4857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.910162][ T4857] usb 7-1: config 0 descriptor?? [ 419.101541][ T5280] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 419.356404][ T4857] vrc2 0003:07C0:1125.0027: fixing up VRC-2 report descriptor [ 419.394650][ T4857] input: HID 07c0:1125 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:07C0:1125.0027/input/input17 [ 419.416523][ T5280] usb 2-1: USB disconnect, device number 20 [ 419.424605][ T5280] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 419.503644][ T4857] vrc2 0003:07C0:1125.0027: input,hidraw0: USB HID v0.00 Joystick [HID 07c0:1125] on usb-dummy_hcd.6-1/input0 [ 419.579623][ T127] usb 7-1: USB disconnect, device number 6 [ 419.862691][T13612] fido_id[13612]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 420.049359][T13619] loop5: detected capacity change from 0 to 4096 [ 420.123738][T13619] ntfs: volume version 3.1. [ 420.245195][T13630] loop1: detected capacity change from 0 to 128 [ 420.301789][T13630] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 420.352938][T13630] sysv_count_free_blocks: >flc_size entries in free-list block [ 420.441678][T13619] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 420.482924][T13630] sysv_count_free_inodes: unable to read inode table [ 420.503906][T13619] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 420.557941][T13630] sysv_count_free_blocks: >flc_size entries in free-list block [ 420.570561][T13619] ntfs: (device loop5): ntfs_cluster_alloc(): Failed to map page. [ 420.592534][T13619] ntfs: (device loop5): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 420.606338][T13630] sysv_count_free_inodes: unable to read inode table [ 420.641963][T13619] ntfs: (device loop5): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -5. [ 420.680377][T13619] ntfs: (device loop5): ntfs_prepare_file_for_write(): Cannot perform write to inode 0x43, attribute type 0x80, because extending the allocation failed (error 5). [ 420.706568][ T4268] sysv_free_block: flc_count > flc_size [ 420.713812][ T4268] sysv_free_block: flc_count > flc_size [ 420.734965][ T4268] sysv_free_block: flc_count > flc_size [ 420.745034][ T4268] sysv_free_block: flc_count > flc_size [ 420.755151][ T4268] sysv_free_block: flc_count > flc_size [ 420.765751][ T4268] sysv_free_block: flc_count > flc_size [ 420.783419][ T4268] sysv_free_block: flc_count > flc_size [ 420.803687][ T4268] sysv_free_block: flc_count > flc_size [ 420.825830][ T4268] sysv_free_block: flc_count > flc_size [ 420.855266][ T4268] sysv_free_block: flc_count > flc_size [ 420.888741][ T4268] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 421.266038][ T127] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 421.465950][ T127] usb 2-1: Using ep0 maxpacket: 8 [ 421.472765][ T127] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.499616][ T127] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 421.530349][ T127] usb 2-1: config 0 interface 0 has no altsetting 0 [ 421.538660][ T127] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 421.553113][ T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.573420][ T127] usb 2-1: config 0 descriptor?? [ 421.855747][ T26] audit: type=1326 audit(1752808804.788:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.5.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e70b8e9a9 code=0x7fc00000 [ 421.889767][T13682] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3267'. [ 421.945823][T13682] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 421.994546][ T127] aquacomputer_d5next 0003:0C70:F00E.0028: hidraw0: USB HID v0.00 Device [HID 0c70:f00e] on usb-dummy_hcd.1-1/input0 [ 422.213152][ T5261] usb 2-1: USB disconnect, device number 21 [ 422.287612][T13697] loop6: detected capacity change from 0 to 512 [ 422.374138][T13691] fido_id[13691]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 422.741960][T13694] loop2: detected capacity change from 0 to 32768 [ 423.041487][T13715] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 423.185575][T13718] loop7: detected capacity change from 0 to 128 [ 423.210097][T13718] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 423.246987][T13718] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 423.287641][ T4341] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 423.487119][ T4341] usb 2-1: Using ep0 maxpacket: 8 [ 423.494514][ T4341] usb 2-1: unable to get BOS descriptor or descriptor too short [ 423.542339][ T4341] usb 2-1: config 4 interface 0 has no altsetting 0 [ 423.570269][ T4341] usb 2-1: string descriptor 0 read error: -22 [ 423.587958][ T4341] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 423.606213][T13722] loop2: detected capacity change from 0 to 8192 [ 423.614047][ T4341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.657359][T13722] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 423.697909][ T4341] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 423.743887][T13722] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 423.785318][ T4341] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 423.829614][T13722] REISERFS (device loop2): using ordered data mode [ 423.867491][T13722] reiserfs: using flush barriers [ 423.873845][ T4341] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 423.893362][T13716] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 423.917378][ T4341] usb 2-1: media controller created [ 423.936239][T13722] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 424.005471][ T4341] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 424.057763][T13722] REISERFS (device loop2): checking transaction log (loop2) [ 424.094296][ T4341] zl10353_read_register: readreg error (reg=127, ret==0) [ 424.244499][ T4341] usb 2-1: USB disconnect, device number 22 [ 424.342836][T13722] REISERFS (device loop2): Using tea hash to sort names [ 424.367764][T13722] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 424.521114][T13722] REISERFS warning (device loop2): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=12, len=4 - odd [ 425.069571][T13774] user requested TSC rate below hardware speed [ 425.354120][T13783] loop5: detected capacity change from 0 to 256 [ 425.546823][ T5280] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 425.757534][ T5280] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 425.773827][T13792] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 425.778148][ T5280] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 425.823114][ T5280] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 425.853693][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.904462][T13794] loop6: detected capacity change from 0 to 512 [ 425.969029][T13794] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.3317: bad orphan inode 11 [ 425.983951][T13800] misc userio: No port type given on /dev/userio [ 426.001769][T13794] ext4_test_bit(bit=10, block=4) = 1 [ 426.008950][T13794] is_bad_inode(inode)=0 [ 426.013126][T13794] NEXT_ORPHAN(inode)=2080374784 [ 426.034432][T13794] max_ino=32 [ 426.055766][T13794] i_nlink=0 [ 426.059015][T13794] EXT4-fs (loop6): 1 truncate cleaned up [ 426.077630][ T5280] usb 3-1: USB disconnect, device number 21 [ 426.112431][T13794] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 426.254855][T10692] EXT4-fs (loop6): unmounting filesystem. [ 426.507998][T13802] loop1: detected capacity change from 0 to 32768 [ 426.570752][T13802] XFS (loop1): Mounting V5 Filesystem [ 426.743514][T13819] loop2: detected capacity change from 0 to 64 [ 426.774296][T13802] XFS (loop1): Ending clean mount [ 426.796776][T13802] XFS (loop1): Quotacheck needed: Please wait. [ 426.890457][T13802] XFS (loop1): Quotacheck: Done. [ 426.977452][T13806] loop6: detected capacity change from 0 to 32768 [ 426.988677][T13806] XFS: ikeep mount option is deprecated. [ 426.994347][T13806] XFS: ikeep mount option is deprecated. [ 427.053340][T13806] XFS: noikeep mount option is deprecated. [ 427.095507][ T4268] XFS (loop1): Unmounting Filesystem [ 427.206228][T13806] XFS (loop6): Mounting V5 Filesystem [ 427.386958][T13806] XFS (loop6): Ending clean mount [ 427.439898][T13806] XFS: ikeep mount option is deprecated. [ 427.476945][T13806] XFS: ikeep mount option is deprecated. [ 427.629783][T10692] XFS (loop6): Unmounting Filesystem [ 427.894771][T13845] loop2: detected capacity change from 0 to 256 [ 427.972018][T13845] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 428.249301][T13855] loop6: detected capacity change from 0 to 128 [ 428.296490][T13855] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 428.376350][T13855] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 428.442076][T13839] loop5: detected capacity change from 0 to 32768 [ 428.637959][T13839] XFS (loop5): Mounting V5 Filesystem [ 428.733771][T13839] XFS (loop5): Ending clean mount [ 428.743668][T13839] XFS (loop5): Quotacheck needed: Please wait. [ 428.797074][T13867] Falling back ldisc for ttyS3. [ 428.849074][T13839] XFS (loop5): Quotacheck: Done. [ 429.016849][ T7881] XFS (loop5): Unmounting Filesystem [ 429.058310][T13881] loop6: detected capacity change from 0 to 128 [ 429.094742][T13879] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3343'. [ 429.122887][ T4857] kernel write not supported for file /input/mice (pid: 4857 comm: kworker/0:14) [ 429.311954][T13887] netlink: 'syz.7.3348': attribute type 1 has an invalid length. [ 429.573773][T13895] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3351'. [ 429.576793][ T4857] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 429.651741][T13877] loop2: detected capacity change from 0 to 32768 [ 429.731626][T13877] XFS (loop2): Mounting V5 Filesystem [ 429.788091][ T4857] usb 2-1: config 0 has an invalid interface number: 205 but max is 0 [ 429.796750][T13877] XFS (loop2): Ending clean mount [ 429.806284][ T4857] usb 2-1: config 0 has no interface number 0 [ 429.812686][ T1180] kernel write not supported for file /378/loginuid (pid: 1180 comm: kworker/0:3) [ 429.842813][T13909] loop6: detected capacity change from 0 to 128 [ 429.844646][ T4857] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=cd.e9 [ 429.864538][T13909] EXT4-fs: Ignoring removed nobh option [ 429.895700][ T4857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.903717][ T4857] usb 2-1: Product: syz [ 429.935400][ T4857] usb 2-1: Manufacturer: syz [ 429.942018][T13909] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 429.943402][ T4857] usb 2-1: SerialNumber: syz [ 429.960737][ T4275] XFS (loop2): Unmounting Filesystem [ 429.967864][ T4857] usb 2-1: config 0 descriptor?? [ 429.978120][ T4857] usb_ehset_test: probe of 2-1:0.205 failed with error -32 [ 430.000826][T13909] ext4 filesystem being mounted at /217/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 430.118960][T13909] fscrypt (loop6, inode 12): Unsupported encryption flags (0x08) [ 430.193698][ T4857] usb 2-1: USB disconnect, device number 23 [ 430.341121][T10692] EXT4-fs (loop6): unmounting filesystem. [ 430.432950][T13920] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3360'. [ 430.513182][T13922] loop6: detected capacity change from 0 to 512 [ 430.623695][T13922] EXT4-fs error (device loop6): ext4_do_update_inode:5254: inode #16: comm syz.6.3359: corrupted inode contents [ 430.641895][T13922] EXT4-fs error (device loop6): ext4_dirty_inode:6119: inode #16: comm syz.6.3359: mark_inode_dirty error [ 430.654075][T13922] EXT4-fs error (device loop6): ext4_do_update_inode:5254: inode #16: comm syz.6.3359: corrupted inode contents [ 430.676857][T13922] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #16: comm syz.6.3359: mark_inode_dirty error [ 430.694791][T13922] EXT4-fs error (device loop6): ext4_do_update_inode:5254: inode #16: comm syz.6.3359: corrupted inode contents [ 430.722678][T13922] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 430.766367][T13922] EXT4-fs error (device loop6): ext4_do_update_inode:5254: inode #16: comm syz.6.3359: corrupted inode contents [ 430.796379][T13922] EXT4-fs error (device loop6): ext4_truncate:4312: inode #16: comm syz.6.3359: mark_inode_dirty error [ 430.852890][T13922] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 430.883366][T13922] EXT4-fs (loop6): 1 truncate cleaned up [ 430.916021][T13922] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 430.924972][T13922] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.956078][ T11] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 430.966259][ T11] EXT4-fs error (device loop6): ext4_release_dquot:6850: comm kworker/u4:1: Failed to release dquot type 1 [ 431.198731][T10692] EXT4-fs (loop6): unmounting filesystem. [ 431.205613][T13945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3368'. [ 431.372719][T13953] loop1: detected capacity change from 0 to 128 [ 431.381176][T13950] lo speed is unknown, defaulting to 1000 [ 431.400697][T13953] EXT4-fs: Ignoring removed nomblk_io_submit option [ 431.426028][T13953] EXT4-fs: Ignoring removed nomblk_io_submit option [ 431.455788][T13953] EXT4-fs: Ignoring removed nobh option [ 431.481975][T13953] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 431.532724][ T4383] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 431.692891][T13954] loop6: detected capacity change from 0 to 4096 [ 431.760247][T13954] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 431.977743][T10692] EXT4-fs (loop6): unmounting filesystem. [ 432.154976][T13941] loop5: detected capacity change from 0 to 40427 [ 432.164171][ T26] audit: type=1326 audit(1752808815.098:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13971 comm="syz.6.3378" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe85418e9a9 code=0x0 [ 432.234410][T13941] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 432.290814][T13977] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3380'. [ 432.302131][T13941] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 432.328657][T13977] netlink: 'syz.7.3380': attribute type 21 has an invalid length. [ 432.393957][T13941] F2FS-fs (loop5): Found nat_bits in checkpoint [ 432.464004][T13978] lo speed is unknown, defaulting to 1000 [ 432.543864][T13941] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 432.559279][T13941] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 433.176813][T14000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3388'. [ 433.345427][T14005] netlink: 'syz.6.3389': attribute type 11 has an invalid length. [ 433.604964][T14009] loop6: detected capacity change from 0 to 2048 [ 433.658176][T14009] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 433.795215][T14009] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 433.847382][T14009] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 433.907523][T14009] EXT4-fs (loop6): This should not happen!! Data will be lost [ 433.907523][T14009] [ 433.935537][T14009] EXT4-fs (loop6): Total free blocks count 0 [ 433.952144][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3393'. [ 433.961550][T14009] EXT4-fs (loop6): Free/Dirty block details [ 433.980115][T14009] EXT4-fs (loop6): free_blocks=2415919104 [ 434.003763][T14009] EXT4-fs (loop6): dirty_blocks=32 [ 434.022430][T14009] EXT4-fs (loop6): Block reservation details [ 434.054569][T14009] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 434.251373][ T75] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 435.004593][T14045] loop2: detected capacity change from 0 to 256 [ 435.036489][T14045] exfat: Unknown parameter 'smackfstransmute' [ 435.242127][ T27] INFO: task syz-executor:4267 blocked for more than 143 seconds. [ 435.262126][ T27] Not tainted 6.1.146-syzkaller #0 [ 435.296369][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 435.328619][ T27] task:syz-executor state:D stack:22464 pid:4267 ppid:1 flags:0x00004004 [ 435.352282][T14039] loop7: detected capacity change from 0 to 32768 [ 435.358807][ T27] Call Trace: [ 435.365952][ T27] [ 435.368920][ T27] __schedule+0x10e9/0x40d0 [ 435.402237][ T27] ? release_firmware_map_entry+0x18a/0x18a [ 435.424547][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 435.443437][ T27] ? lock_chain_count+0x20/0x20 [ 435.449705][T14039] XFS (loop7): Mounting V5 Filesystem [ 435.484652][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 435.494933][T14031] loop5: detected capacity change from 0 to 40427 [ 435.512581][T14031] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3ffff [ 435.525391][T14031] F2FS-fs (loop5): invalid crc value [ 435.533486][T14031] F2FS-fs (loop5): Found nat_bits in checkpoint [ 435.544419][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 435.581647][T14031] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 435.588761][ T27] schedule+0xb9/0x180 [ 435.608397][ T27] io_schedule+0x7c/0xd0 [ 435.612774][ T27] folio_wait_bit_common+0x6e1/0xf60 [ 435.629577][T14039] XFS (loop7): Ending clean mount [ 435.665774][ T5251] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 435.678438][ T27] ? folio_wait_bit+0x30/0x30 [ 435.683297][ T27] ? migration_entry_wait_on_locked+0xe50/0xe50 [ 435.719223][T14031] F2FS-fs (loop5) : inject dquot initialize in f2fs_dquot_initialize of f2fs_evict_inode+0x505/0x17c0 [ 435.725675][ T27] ? __lock_acquire+0x7c50/0x7c50 [ 435.745433][ T27] ? __filemap_get_folio+0xf0/0xdd0 [ 435.762184][ T27] __filemap_get_folio+0x406/0xdd0 [ 435.773047][ T27] ? __filemap_get_folio+0xf0/0xdd0 [ 435.778492][T14056] loop6: detected capacity change from 0 to 8192 [ 435.791993][T14056] FAT-fs (loop6): Directory bread(block 22913) failed [ 435.808276][ T27] ? page_cache_prev_miss+0x350/0x350 [ 435.820718][T14056] FAT-fs (loop6): Directory bread(block 22914) failed [ 435.838597][T14056] FAT-fs (loop6): Directory bread(block 22915) failed [ 435.848356][T14056] FAT-fs (loop6): Directory bread(block 22916) failed [ 435.855286][T14056] FAT-fs (loop6): Directory bread(block 22917) failed [ 435.855365][ T27] ? mlock_page_drain_local+0x75/0x490 [ 435.870483][T14056] FAT-fs (loop6): Directory bread(block 22918) failed [ 435.891244][T14056] FAT-fs (loop6): Directory bread(block 22919) failed [ 435.903166][ T27] ? mlock_page_drain_local+0x289/0x490 [ 435.910881][T14056] FAT-fs (loop6): Directory bread(block 22920) failed [ 435.918868][ T5251] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.928910][T14056] FAT-fs (loop6): Directory bread(block 22921) failed [ 435.944818][ T7881] syz-executor: attempt to access beyond end of device [ 435.944818][ T7881] loop5: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 435.949870][ T5251] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.966640][T14056] FAT-fs (loop6): Directory bread(block 22922) failed [ 435.969805][ T27] truncate_inode_pages_range+0x3a6/0xff0 [ 435.990408][ T7881] syz-executor: attempt to access beyond end of device [ 435.990408][ T7881] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 435.995680][ T27] ? mapping_evict_folio+0x520/0x520 [ 436.031749][ T5251] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 436.041894][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 436.055671][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 436.060939][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 436.066510][ T5251] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.088436][ T5251] usb 2-1: config 0 descriptor?? [ 436.094140][ T27] evict+0x498/0x870 [ 436.111975][ T27] ? proc_nr_inodes+0x2f0/0x2f0 [ 436.120981][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 436.151857][ T27] ? _raw_spin_unlock+0x24/0x40 [ 436.157739][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 436.162997][ T27] evict_inodes+0x604/0x690 [ 436.174628][ T27] ? clear_inode+0x150/0x150 [ 436.179344][ T27] ? dput+0x1c9/0x1d0 [ 436.183519][ T27] ? sync_filesystem+0x103/0x220 [ 436.194074][ T27] generic_shutdown_super+0x93/0x340 [ 436.199519][ T27] kill_block_super+0x7c/0xe0 [ 436.204288][ T27] deactivate_locked_super+0x93/0xf0 [ 436.209831][ T27] cleanup_mnt+0x463/0x4f0 [ 436.214339][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 436.219875][ T27] task_work_run+0x1ca/0x250 [ 436.224500][ T27] ? task_work_cancel+0x230/0x230 [ 436.229608][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 436.235180][ T27] exit_to_user_mode_loop+0xe6/0x110 [ 436.240522][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 436.246483][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 436.252056][ T27] do_syscall_64+0x58/0xa0 [ 436.256649][ T27] ? clear_bhb_loop+0x60/0xb0 [ 436.261432][ T27] ? clear_bhb_loop+0x60/0xb0 [ 436.266196][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 436.272140][ T27] RIP: 0033:0x7fa59df8fcd7 [ 436.277152][ T27] RSP: 002b:00007ffc068ac7c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 436.285621][ T27] RAX: 0000000000000000 RBX: 00007fa59e010a8d RCX: 00007fa59df8fcd7 [ 436.293814][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc068ac880 [ 436.305552][ T27] RBP: 00007ffc068ac880 R08: 0000000000000000 R09: 0000000000000000 [ 436.314097][ T27] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc068ad910 [ 436.322310][ T27] R13: 00007fa59e010a8d R14: 00000000000458b7 R15: 00007ffc068ad950 [ 436.330554][ T27] [ 436.333779][ T27] [ 436.333779][ T27] Showing all locks held in the system: [ 436.342161][T10849] XFS (loop7): Unmounting Filesystem [ 436.396047][ T27] 1 lock held by rcu_tasks_kthre/12: [ 436.401405][ T27] #0: ffffffff8cb2b7b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 436.463856][ T4396] kworker/u4:8: attempt to access beyond end of device [ 436.463856][ T4396] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 436.468200][ T27] 1 lock held by rcu_tasks_trace/13: [ 436.487782][ T27] #0: ffffffff8cb2bfd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 436.498966][ T27] 1 lock held by khungtaskd/27: [ 436.504003][ T27] #0: ffffffff8cb2ae20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 436.518268][ T5251] hid-thrustmaster 0003:044F:B65D.0029: unknown main item tag 0x0 [ 436.534221][ T5251] hid-thrustmaster 0003:044F:B65D.0029: unknown main item tag 0x0 [ 436.542340][ T27] 3 locks held by kworker/0:3/1180: [ 436.548230][ T5251] hid-thrustmaster 0003:044F:B65D.0029: unknown main item tag 0x0 [ 436.556129][ T27] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 436.566768][ T5251] hid-thrustmaster 0003:044F:B65D.0029: unknown main item tag 0x0 [ 436.574586][ T5251] hid-thrustmaster 0003:044F:B65D.0029: unknown main item tag 0x0 [ 436.576745][ T27] #1: [ 436.582981][ T5251] hid-thrustmaster 0003:044F:B65D.0029: unknown main item tag 0x0 [ 436.588146][ T27] ffffc9000536fd00 [ 436.593793][ T5251] hid-thrustmaster 0003:044F:B65D.0029: unknown main item tag 0x0 [ 436.594615][ T27] ( [ 436.599747][ T5251] hid-thrustmaster 0003:044F:B65D.0029: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 436.617478][ T27] (work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 436.621886][ T5251] hid-thrustmaster 0003:044F:B65D.0029: Wrong number of endpoints? [ 436.631792][ T27] #2: ffffffff8cb30af8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x346/0x830 [ 436.650434][ T27] 2 locks held by getty/4038: [ 436.668582][ T27] #0: ffff88814d55f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 436.689163][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 436.703648][ T27] 1 lock held by syz-executor/4267: [ 436.710929][ T27] #0: ffff888063bd40e0 (&type->s_umount_key#121){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 436.734625][ T27] 2 locks held by kworker/u4:8/4396: [ 436.734767][ C1] hid-thrustmaster 0003:044F:B65D.0029: Unknown packet type 0x0, unable to proceed further with wheel init [ 436.742939][ T27] #0: ffff8880b8e3aa98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 436.773314][ T27] #1: ffff8880b8e27848 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x398/0x6d0 [ 436.791418][ T27] 2 locks held by kworker/0:14/4857: [ 436.797197][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 436.811959][ T27] #1: ffffc9000683fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 436.823566][ T27] 2 locks held by kworker/0:18/5025: [ 436.829085][ T27] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 436.841168][ T27] #1: ffffc9000ccffd00 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 436.851531][ T27] 1 lock held by syz-executor/7881: [ 436.856856][ T27] #0: ffff8880267ba0e0 (&type->s_umount_key#84){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 436.867463][ T27] 2 locks held by syz-executor/10849: [ 436.872846][ T27] #0: ffff8880792e00e0 (&type->s_umount_key#52){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 436.883099][ T27] #1: ffffffff8cb30af8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x455/0x830 [ 436.895808][ T27] [ 436.898248][ T27] ============================================= [ 436.898248][ T27] [ 436.907022][ T27] NMI backtrace for cpu 1 [ 436.911365][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.146-syzkaller #0 [ 436.919267][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 436.929320][ T27] Call Trace: [ 436.932603][ T27] [ 436.935535][ T27] dump_stack_lvl+0x168/0x22e [ 436.940225][ T27] ? irq_work_queue+0xb8/0x140 [ 436.944999][ T27] ? show_regs_print_info+0x12/0x12 [ 436.950200][ T27] ? load_image+0x3b0/0x3b0 [ 436.954737][ T27] ? vprintk_emit+0x571/0x680 [ 436.959427][ T27] ? printk_sprint+0x460/0x460 [ 436.964201][ T27] nmi_cpu_backtrace+0x3f4/0x470 [ 436.969145][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 436.975294][ T27] ? _printk+0xcc/0x110 [ 436.979550][ T27] ? load_image+0x3b0/0x3b0 [ 436.984150][ T27] ? load_image+0x3b0/0x3b0 [ 436.988668][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 436.994765][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 437.000748][ T27] watchdog+0xeee/0xf30 [ 437.004907][ T27] ? watchdog+0x1ed/0xf30 [ 437.009238][ T27] kthread+0x29d/0x330 [ 437.013313][ T27] ? hungtask_pm_notify+0x40/0x40 [ 437.018347][ T27] ? kthread_blkcg+0xd0/0xd0 [ 437.022953][ T27] ret_from_fork+0x1f/0x30 [ 437.027391][ T27] [ 437.031051][ T27] Sending NMI from CPU 1 to CPUs 0: [ 437.036326][ C0] NMI backtrace for cpu 0 [ 437.036336][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.146-syzkaller #0 [ 437.036351][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 437.036360][ C0] RIP: 0010:check_preemption_disabled+0x6/0x110 [ 437.036387][ C0] Code: 89 f6 e8 ed da 17 fa e9 6e ff ff ff 00 00 cc cc 00 00 cc cc 48 c7 c7 00 f2 de 8a 48 c7 c6 40 f2 de 8a eb 00 55 41 57 41 56 53 <48> 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 65 8b 05 f1 [ 437.036401][ C0] RSP: 0018:ffffffff8c807d28 EFLAGS: 00000046 [ 437.036414][ C0] RAX: bfde68607da34900 RBX: 0000000000000005 RCX: bfde68607da34900 [ 437.036425][ C0] RDX: dffffc0000000000 RSI: ffffffff8adef240 RDI: ffffffff8adef200 [ 437.036437][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1c3e91e [ 437.036448][ C0] R10: fffffbfff1c3e91e R11: 1ffffffff1c3e91d R12: 0000000000000000 [ 437.036459][ C0] R13: dffffc0000000000 R14: ffffffff8c8bc680 R15: 1ffffffff1c3e95e [ 437.036471][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 437.036484][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 437.036495][ C0] CR2: 000000110c4409a7 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 437.036509][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 437.036518][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 437.036527][ C0] Call Trace: [ 437.036532][ C0] [ 437.036538][ C0] ct_kernel_exit+0xf/0x190 [ 437.036559][ C0] ct_idle_enter+0x33/0x60 [ 437.036578][ C0] default_idle_call+0x70/0xc0 [ 437.036605][ C0] do_idle+0x1fc/0x570 [ 437.036629][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 437.036650][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 437.036667][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 437.036689][ C0] ? _raw_spin_unlock+0x40/0x40 [ 437.036713][ C0] cpu_startup_entry+0x3f/0x60 [ 437.036734][ C0] rest_init+0x2dc/0x300 [ 437.036753][ C0] ? time_init+0x33/0x33 [ 437.036774][ C0] arch_call_rest_init+0xa/0xa [ 437.036798][ C0] start_kernel+0x490/0x539 [ 437.036822][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 437.036849][ C0] [ 437.259730][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 437.266644][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.146-syzkaller #0 [ 437.274588][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 437.284670][ T27] Call Trace: [ 437.287970][ T27] [ 437.290936][ T27] dump_stack_lvl+0x168/0x22e [ 437.295644][ T27] ? memcpy+0x3c/0x60 [ 437.299664][ T27] ? show_regs_print_info+0x12/0x12 [ 437.301216][ T1180] usb 2-1: USB disconnect, device number 24 [ 437.310765][ T27] ? load_image+0x3b0/0x3b0 [ 437.315283][ T27] panic+0x2c9/0x710 [ 437.319182][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 437.324823][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 437.329328][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 437.334878][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 437.341030][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 437.347184][ T27] watchdog+0xf2d/0xf30 [ 437.351354][ T27] ? watchdog+0x1ed/0xf30 [ 437.355710][ T27] kthread+0x29d/0x330 [ 437.359806][ T27] ? hungtask_pm_notify+0x40/0x40 [ 437.364846][ T27] ? kthread_blkcg+0xd0/0xd0 [ 437.369451][ T27] ret_from_fork+0x1f/0x30 [ 437.373879][ T27] [ 437.377230][ T27] Kernel Offset: disabled [ 437.381554][ T27] Rebooting in 86400 seconds..