last executing test programs: 8.7240054s ago: executing program 0 (id=1029): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x4, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x0) 8.203145952s ago: executing program 0 (id=1045): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() 6.666590207s ago: executing program 2 (id=1042): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000280)='./file2\x00', 0x3200c00, &(0x7f0000000340)=ANY=[], 0x2, 0xab4, &(0x7f0000000400)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0x0, 0x0, 0x2401}) 5.945824478s ago: executing program 4 (id=1051): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$netlink(r0, &(0x7f0000005d80)={&(0x7f0000000440)=@kern={0x1d, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005cc0)=[{&(0x7f0000001f40)={0x218, 0x29, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@generic="96d5ca4ec94685d95d02fccda06116c423d3b58b840614f40d8101799566ba8464c489e4a3dbc83f68f0b28329cbf13d4c93f169197e12a996a5c644121dfa7dd2805cc13b4ad5b84c9cdf07f9d0effd1372e12940", @generic="e77bef1fd3d83bd72f4247750a75beafd891e81ac47308521fb3fef4a6cc58d644aa093743e2f5042e64ec55ba1eb4cf23319d4cd440746e61d6bf8ad177358bbf0e29026fb7c78db08b8f4d1a592db0f9abc1daada3221ac7375e24f4e29d06b6714f2cbb4d139291f558e8c19a7f082361c5a42eb8b2cf30cefaac2da61e3a35751ca34eedad720c99b5ef07ae56ba5a3d8ee9c9e727b96339c74a692e8fdab3166eb092d63730a88feed54720808e440f233f4a3641b647b3c514a7000182235473bf39b3b4d8", @nested={0xe5, 0x125, 0x0, 0x1, [@generic="875b5b7bbbac75018120d98241b28822f70a4dc56f2880f60f58193e3dee0259883547a2b12d558c57731bae34b81cc58bce9865cb0ea90a0ea8fe941c7ed56911e969963804af86a49f74e7671bb3c3817fddc01149d23f2838d846d8985136cf81d5289176b68b489ef7ea73c492deedfcfd6353c17a5b423a01f1f9f9cf3d26b95dac2b71140a93493d97c8323cdf5ee61f7a04ba568518c7e32373c4af02f373b3bf5cfde40157e547c470c4956124dd43e70534cbf752c2c6573eb7b7832da544e7fc64a32672", @typed={0xa, 0xbe, 0x0, 0x0, @str='/,W\\%\x00'}, @nested={0x4, 0xf0}, @nested={0x4, 0x46}, @nested={0x4, 0x130}]}]}, 0x218}, {&(0x7f0000004540)={0x1cc, 0x37, 0x1, 0x70bd26, 0x25dfdbfe, "", [@generic="fbb58747a83c3f4f21536bc0082d6e2653d94aae67c9c176725914eecb2d0ffe519dc120aacb94665f574baf67d8e55c94e48e231285ba4dcff618558f4c328d3052bc3a426bf9f2583a791c10aa9164f16189d647e2694e87acb8c62b4973a7831c9f545047748c5852baa5e0ef820a8e7caec980a2c822d114217bacc75a485d9ba8ebc0a0b9fe9e0a1720e00d85fd304011ccd8", @generic="8503c3cf35c1b9da5aac537fbed816bcad3846b3e9f21dba6890e49f13bcee327b706250ffdaab07aa5101b35c67ea18201453f835d9011133720f6235bcb3b65fcc61b32ab24c00936b89c7f78915debc371432d5c4228c36915fb5aec7cbef3ebfc41df75890eda2bd51c2a79acaa6e9a518f07b94b7c2d8194caa2619f3ecd0d319d3b1306a84b0ebbae2abec4d16b24fcb93f1e1cedbd6dcb31777a7b83df23b2217ecd7095689d45c4e64827c526f6a3ba0b81a516bb3b0ef690b9eb27f72d7ed0b8c", @nested={0x8, 0xec, 0x0, 0x1, [@nested={0x4, 0x24}]}, @typed={0x8, 0xf6, 0x0, 0x0, @uid}, @generic="fd57eaabc453f25452ef57006cc8e52741e52fde82a193", @nested={0x35, 0x33, 0x0, 0x1, [@nested={0x4, 0xa0}, @nested={0x4, 0xeb}, @generic="67ff172d2e5e6d8970e6658c503f8085b8e9b43039e9ec980e722e1b3ff6835146e08e1ef917a1b662"]}]}, 0x1cc}, {&(0x7f0000000780)={0xd4, 0x42, 0x300, 0x70bd27, 0x25dfdbfe, "", [@generic="0fe9dd82312b0b0bbe4f1082758180bac7", @typed={0x8, 0xe9, 0x0, 0x0, @uid}, @generic="c0a846330416858d7c62415ba676a363047facd88c2f5b5c5ebcec2a763789db9e19f0e268c2ae4238c12f5f673c902dfc4fc2f42cd2e1c21a3170db6fa9e3c7dc3bf5e620b010996a671cbb166415e7183e398fbaf922fe6ca75821cce0ef4182d466769877845bdb78b6857f682bf42f4c969bb2ec967c8270d1c50e16a7cde6722b9a4d5563c913af7e754f1c9e8dc97cf72430ad30bdc74e02edb187fb20df63d2f17e001dce"]}, 0xd4}], 0x3, 0x0, 0x0, 0x44011}, 0x0) 5.528089825s ago: executing program 5 (id=1054): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f02b, 0x1}) 5.526480387s ago: executing program 2 (id=1066): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000340)=[{r0, 0x4619}], 0x1, 0x1) 5.425334252s ago: executing program 4 (id=1055): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x7ffd, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xd, 0x1, 0x1, 0x0, 0x7}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0xfffffffd, 0x4005, 0x1, {0x1, @win={{}, 0x0, 0xfffffff8, 0x0, 0x0, 0x0}}}) 5.422219906s ago: executing program 0 (id=1056): r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000001180)={{0x0, 0x0, 0x0, 0x0, 0x9c, 0x3}, 0x6, 0x6, 0x4, 0x6a, 0xffffffffffffffff, 0x7}) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000001340)=""/4096) 3.852860383s ago: executing program 2 (id=1058): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x4, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 3.852651667s ago: executing program 3 (id=1059): r0 = syz_mount_image$nilfs2(&(0x7f00000008c0), &(0x7f0000000e00)='./file0\x00', 0x10000, &(0x7f0000000940)=ANY=[], 0x0, 0xdab, &(0x7f0000000e80)="$eJzs3ctvXNX9APBzx544L36x8wuNm6ZJSkigj9iQumklNkaii1KE1CVLmgaa1gmP0AUoi5RFV0i1hPgDipDIpuqi6oJNFbGiG1Sp+wqx6iaVkLJAUcCV7XPG429mdGcc2+PxfD7SnTP3fs+955x53LlzXycBI6ux8jg3N12l9N5H7z7zr7O/+NvylJOtHKdWHsfz2HxKqdmaL6XJsLz5idX0qy+uX2xPv85plc6nKlWt6en52615D6SUbqRT6VaaTE+9cOfeh4vPPrc4debm0Xc+vbs1rV9TbXUBAACwA3z58w9e+8djP70+dfcvJ+bTRGt62T6fz+MH83b/fN5QLtvL5X9A1ZZWHban94R843lohHxjHfK1l9MM+ca7lL8nLLfZJd9ETfljbdM6tRuG2dr/+Koxs2680ZiZWf1PvuyzsT3VzNXLCy9dG1BFgU1352TexWcwGEZuWDo06DUQwKp43PA+Nzb3SF1raeO9lX/76Ubn+WETbPfnX/nDVf4Hv7fGYfPs1k9TaVf5Hh3M4/E4wniYr9/vf1lePB7R7LGe3Y4jDMvxhW71HNvmemxUt/rHz8Vu9e2cltfhRIi3f3/iezos7zHQ2Zf2/xsMIzssDXoFBOxY8by5pazE43l9MT5RE99bE99XE99fEz9QE4dR9tc3/pgWq7X/+fE/fb/7w8p+tody+n991ifuj+y3/Hjeb78etPx4PjHsZL8898mf7/zu1j/j+f9fh/P/T+ff0sm8gij7C+N+9da5/+HC4EaXfIdDfR7qkH/l+ZH1+aoja8tJbeuZ++oxvX6+Q93yHV+fbzLk25+3RfaG+sbtk/1hvrL9Udar5fUaD+1thnbsCfUo78xUTveG9kx1a1fYkb0n5Gvm4f9Du46Edj0c5vtGaFc1vb5dcf95qc/RMD0eJyn5wtt23+9SfC/idRmP5PTtnL6f049z+nmHckdR+Tx2O/+/fD6nU7N66fLCpSfyePmcfjLWnFie/uQ21xt4cL1e/zOd1l//c7A1vdloXy8cWpteta8XJsP0812m/zCPl9+zX4/tW5k+c/GVhV9tduNhxF17863fvriwcOl1TzzxxJPWk0GvmYCtNvvGlVdnr7351rnLV158+dLLl65e+MmPzj8x9+MLF2ZXNutn2zfugV1l7Ud/0DUBAAAAAAAAAAAAelbt6zw5p3X3ty3Xk5fr0+P18QyH8r6VT0O5j0G5/rPbfV3K9ZtT21BHNt92XE406DYCnf3X/X8NhpEdlpbcxR/YGQbd/1+572FJr/79Z3uXh5Lt9tPr15fx/oXwIHZ6/3PK3139/7X6v+p5/Rd6zJrcWLlX7j16s63YdKzX8mP7y31gj/RX/tVcfmnN2dRb+Ut/CuXHG5X26JVQ/v4ey7+v/cc3Vv6rufzysj1+utfyV2tcNdbXI+43LvcBjPuNi9dC+8u9/fpu/wY7ans9lw+jbFj6mezXsPT/2U1ZblkP5tVz6zhduf927O+g3/qX+36X34GHw/Krmt83/X8Ot7r+P8vnb1b/n7DrfOb4n8EwssPS0tJAuz4Z1X5XdopBv/6D3oYcdPmDfv3rxP4/4/+l2P9njMf+P2M89v8Z47F/rRiP/X/G1zP2/xnjR8NyY/+g0zXxb9bEj9XEv1UTP14Tj//fYvxUTfxETfxkTfxwTfyRmvjpmvijNfEzNfHHauKP18R3u+/kdFTbD6Ms9hvp+w+joxz/6fb9P1ITB4ZX7Nc5fr/P1sSB4VXO8/D9hhFUdb5jR9zfXvbjvp3T93P6cU4/37IKsh2+m9Pv5fT7Of1BTs/ldCansznVNeRw+8N/jp1YrNbO8zsU4r2eTxqvB4j3iXmyx/rE43P9ns96tMdytqr8DV4OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0GiuPc3PTVUrvffTuM/8+95vDy1NOtnKcWnkcz2PzKaVmSqnK4+NheTcmVtOvvrh+sVNapfMrj2U8PX+7Ne+B5fnTqXQrTaanXrhz78PFZ59bnDpz8+g7n97dmtavqba6AAAAABig/wUAAP//vrPsgA==") r1 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x80186e82, &(0x7f00000002c0)={@id={0x20000000, 0xefffffff, @auto="660000002800a73e1baeff79da3b89f5"}}) 3.852480364s ago: executing program 4 (id=1060): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.852400104s ago: executing program 5 (id=1061): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000001080017"], 0x44}}, 0x0) 3.851256914s ago: executing program 0 (id=1062): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002e40)={0x14, 0x4a, 0x201, 0x0, 0x0, {0xa, 0x0, 0x300}}, 0x14}}, 0x0) 3.605378866s ago: executing program 5 (id=1063): unshare(0x2040400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000200)=0x33) 3.552561015s ago: executing program 0 (id=1064): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000380)='./file1\x00', 0x1010000, &(0x7f0000000a80)=ANY=[@ANYBLOB='utf8=1,uni_xlate=1,uni_xlate=0,check=strict,utf8=0,uni_xlate=0,rodir,codepage=949,uni_xlate=1,shortname=winnt,shortname=mixed,shortname=win95,shortname=win95,iocharset=iso8859-13,shortname=mixed,nonumtail=0,discard,nonumtail=0,incharset=macturkish,\x00'], 0x1, 0x369, &(0x7f0000000700)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, 0x0) 3.458517965s ago: executing program 1 (id=1065): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000280)='./file2\x00', 0x3200c00, &(0x7f0000000340)=ANY=[], 0x2, 0xab4, &(0x7f0000000400)="$eJzs3U2MG1cBAOBn73qTTVLilIQuSWkTftry091ms4SfCJqqERJRU3GrVHGJ0rREpOEnlaBVJZJc6I1WVbhCEaciUQFCai8o6olLJRqJS0+FAweiIFXiAKWJ0drveccvdsfOZtf2+vukt88zbzzvzezMeP7eewGYWNXm36WluUoIF994+cg/7/nH7PKYB9tT1Jt/p9NgJYRaK+ocH7071Yqvvff8iW5xJSw2/6bh8OjV9ne3hhDOhb3hUqiH3Rcvv/TW4iPHzh+9sO/tVw9dWZOFBwCACfOtS4eWdv3tL3t2vP/aXYfDpvb4dH5ej8PbQuu8/3A88U/n/9XQOVwphKKZbLrpGKrZdFNdpivmU8umm+6R/0w231o7fU/HdJtK8p8qjOu23DDO0nZcDzNhvmO4Wp2fb12Th+Z1/Uxl/syp00+eHVJBgVvu33eHEPYKg4ZGo/GT5gocgbIIws2GxvZhH4EAWvLnhTc4l99ZWJ323Kb7y//qQ9Xu34dbYL23f/mPV/6/Pu+Iw62zUbemtFxpP9oWh/PnCPn7S4Pu/2l++fOIWp/l7PUcYVyeL/Qq59Q6l+Nm9Sp/vl1sVF+LT8rSevh6ll7cf/L/6bj8j4Hu/rNe9/9fmR36vc7lsHd987utvaLXMp+1nv8goTbGZZ/A0BjKUQcYByvvzbU0opSev9eXp28qSd9ckj5bkr6lJH1rSTpMsj8887PwYmXlOj+/ph/0fli6z5ZOfD8yYHny+5GD5p+/9zuo1eafv08Mo+z144+d/PITj19uvf9faW//1+P2ni7R6nHfuhQnSPcL8/vq7Xf/6535VHtMd3tWnttumL7RynFn53SVnSvzCYXjzA3lmCt+6wc3lKc93Z2d869n083GsDkrb35+siX7Xjr/SMfVtL6ms+WtZcsxk5UjHVd2xDgvB9yMtD3WQ6Xa7f3/tH3OhVrlyVOnTz4Qh9N2+uep2qbl8fuLM/3N+pQdWJ2V/b37/p9+v+ZCZ/2fbe3xtWrxuLB9ZXyleFyoZ+MXW4Ptx+Rp/IE4nH7nvjM12xw/f+J7p5+41QsPE+7ss8999/jp0yd/uGE+HA6rnM/sWKyWdOQclfL08+GDxkgUw4d+PpQdOTbqm4MwORaeefr7C2effe7+U08ff+rkUyfPHDh48MDi4sGvHFhaaJ7XLxTP7oGNZOVHf9glAQAAAAAAAAAAAPr1o6NHLv/1zS+906r/v1L/L9X/T2/+pvr/L2T1//N68qlWQKoHuKNLerPfvdc7yzGTTVeL4aNZeXdm+ezKvvexGLf78Yv1/1N9+7xd11SeO7Lxefu9abq5bHzeXspM1gZJu7/AWGH/k3H4Qox/FWCIKrPdR8f4Q9u3/u0L7elT+xTapRhP6f+WtobUjkmq/92rXad0/N+xDmXk1luP6oTDXkagu3+NfP+fhTPx3tNNDb+codEYfhlWHz58PQsbLDQaevEARsOw+/9M9z1TfOZP39y8HNJkVx/qPF7m7ZfCaox6/5Py31j9f7b7v+vr+NeldfWOdp77713hv7+48k4h27C73+NvvvypHeid5XkWvR/zT8t/b+gv/8YrWf75A6E+/S/Lf0uf+d+w/HeW5dS9J8MPYv5ptd33qX7zb5W4Uu0sR37fOD3/y+8bJ9ey5U9tew68/DfZUeP1mD9Mst79zPbbg+1o6tb/7/QI9v/bS/4exhfjcDoQpvcc8l/kQcuf3q9IvwO7svlXSn7fxqWf4l4mvf/fr8a4bH9I/f+m7bHeZbhaGK51Wbfjvq3ARvPuyD//G7NwbgTKMGj46QiUYSLCaPSBXQyNRmOoDXmXZ75lXcoxqYbdivuwnz4PO/9hr/8yef+/+Tl83v9vNbuAyPv/zb+f9/+bp+f96+Xpef+/+frM+//N0+/I5pvfwZ4rSf94SfrukvQ9K+mzWfo3iuXs9f1PlKTvK0m/qyT97pL020vSp0rSP12S/pmS9HtK0u8rSf9sSfpG16yPUtipJm35YZLl9fPs/zA50vOfXvv/zpJ0YHz9/LX9Dz/++2/XW/X/Z9rXa+k53uE4XIvXzj+Ow/lz71AYXk57Mw7/PUsf9fsdMEny9jPy3/d7S9KB8ZXe87J/wwSqdG+xJ3/e1qvdql7n+YyXz8X48zH+Qozvj/F8jBdivD/Gi+tUPtbGw7/746EXKyvX+9uz9H7fJ8/rA+XtRB3oszz5/YFB32fP2/Eb1Grzv8nqYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAENTbf5dWpqrhHDxjZePPHbs1MLymAfbU9Sbf6cLQ7X290J4IMZTMf5l/HDtvedPFOPrMa6ExVAJlfb48OjVdk5bQwjnwt5wKdTD7ouXX3pr8ZFj549e2Pf2q4eurN0aAAAAgI3v/wEAAP//hC8Z4A==") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0x0, 0x0, 0x2401}) 3.458246753s ago: executing program 2 (id=1067): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00080000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) time(0x0) 3.152964108s ago: executing program 5 (id=1068): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$netlink(r0, &(0x7f0000005d80)={&(0x7f0000000440)=@kern={0x1d, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005cc0)=[{&(0x7f0000001f40)={0x218, 0x29, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@generic="96d5ca4ec94685d95d02fccda06116c423d3b58b840614f40d8101799566ba8464c489e4a3dbc83f68f0b28329cbf13d4c93f169197e12a996a5c644121dfa7dd2805cc13b4ad5b84c9cdf07f9d0effd1372e12940", @generic="e77bef1fd3d83bd72f4247750a75beafd891e81ac47308521fb3fef4a6cc58d644aa093743e2f5042e64ec55ba1eb4cf23319d4cd440746e61d6bf8ad177358bbf0e29026fb7c78db08b8f4d1a592db0f9abc1daada3221ac7375e24f4e29d06b6714f2cbb4d139291f558e8c19a7f082361c5a42eb8b2cf30cefaac2da61e3a35751ca34eedad720c99b5ef07ae56ba5a3d8ee9c9e727b96339c74a692e8fdab3166eb092d63730a88feed54720808e440f233f4a3641b647b3c514a7000182235473bf39b3b4d8", @nested={0xe5, 0x125, 0x0, 0x1, [@generic="875b5b7bbbac75018120d98241b28822f70a4dc56f2880f60f58193e3dee0259883547a2b12d558c57731bae34b81cc58bce9865cb0ea90a0ea8fe941c7ed56911e969963804af86a49f74e7671bb3c3817fddc01149d23f2838d846d8985136cf81d5289176b68b489ef7ea73c492deedfcfd6353c17a5b423a01f1f9f9cf3d26b95dac2b71140a93493d97c8323cdf5ee61f7a04ba568518c7e32373c4af02f373b3bf5cfde40157e547c470c4956124dd43e70534cbf752c2c6573eb7b7832da544e7fc64a32672", @typed={0xa, 0xbe, 0x0, 0x0, @str='/,W\\%\x00'}, @nested={0x4, 0xf0}, @nested={0x4, 0x46}, @nested={0x4, 0x130}]}]}, 0x218}, {&(0x7f0000004540)={0x1cc, 0x37, 0x1, 0x70bd26, 0x25dfdbfe, "", [@generic="fbb58747a83c3f4f21536bc0082d6e2653d94aae67c9c176725914eecb2d0ffe519dc120aacb94665f574baf67d8e55c94e48e231285ba4dcff618558f4c328d3052bc3a426bf9f2583a791c10aa9164f16189d647e2694e87acb8c62b4973a7831c9f545047748c5852baa5e0ef820a8e7caec980a2c822d114217bacc75a485d9ba8ebc0a0b9fe9e0a1720e00d85fd304011ccd8", @generic="8503c3cf35c1b9da5aac537fbed816bcad3846b3e9f21dba6890e49f13bcee327b706250ffdaab07aa5101b35c67ea18201453f835d9011133720f6235bcb3b65fcc61b32ab24c00936b89c7f78915debc371432d5c4228c36915fb5aec7cbef3ebfc41df75890eda2bd51c2a79acaa6e9a518f07b94b7c2d8194caa2619f3ecd0d319d3b1306a84b0ebbae2abec4d16b24fcb93f1e1cedbd6dcb31777a7b83df23b2217ecd7095689d45c4e64827c526f6a3ba0b81a516bb3b0ef690b9eb27f72d7ed0b8c", @nested={0x8, 0xec, 0x0, 0x1, [@nested={0x4, 0x24}]}, @typed={0x8, 0xf6, 0x0, 0x0, @uid}, @generic="fd57eaabc453f25452ef57006cc8e52741e52fde82a193", @nested={0x35, 0x33, 0x0, 0x1, [@nested={0x4, 0xa0}, @nested={0x4, 0xeb}, @generic="67ff172d2e5e6d8970e6658c503f8085b8e9b43039e9ec980e722e1b3ff6835146e08e1ef917a1b662"]}]}, 0x1cc}, {&(0x7f0000000780)={0xd4, 0x42, 0x300, 0x70bd27, 0x25dfdbfe, "", [@generic="0fe9dd82312b0b0bbe4f1082758180bac7", @typed={0x8, 0xe9, 0x0, 0x0, @uid}, @generic="c0a846330416858d7c62415ba676a363047facd88c2f5b5c5ebcec2a763789db9e19f0e268c2ae4238c12f5f673c902dfc4fc2f42cd2e1c21a3170db6fa9e3c7dc3bf5e620b010996a671cbb166415e7183e398fbaf922fe6ca75821cce0ef4182d466769877845bdb78b6857f682bf42f4c969bb2ec967c8270d1c50e16a7cde6722b9a4d5563c913af7e754f1c9e8dc97cf72430ad30bdc74e02edb187fb20df63d2f17e001dce"]}, 0xd4}], 0x3, 0x0, 0x0, 0x44011}, 0x0) 3.123157226s ago: executing program 4 (id=1069): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000080)={0x20, 0xa, 0x7, {0x7, 0x0, '\x00\x00\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.954206263s ago: executing program 3 (id=1070): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x7ffd, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xd, 0x1, 0x1, 0x0, 0x7}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0xfffffffd, 0x4005, 0x1, {0x1, @win={{}, 0x0, 0xfffffff8, 0x0, 0x0, 0x0}}}) 2.950595935s ago: executing program 2 (id=1071): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() 2.370045707s ago: executing program 0 (id=1072): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.369729441s ago: executing program 1 (id=1073): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f02b, 0x1}) 2.369611011s ago: executing program 5 (id=1074): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000340)=[{r0, 0x4619}], 0x1, 0x1) 1.972552569s ago: executing program 1 (id=1075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)={0x80, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x50, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x24, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0xe}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x0, 0x3, @c}]}, 0x80}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 1.548624488s ago: executing program 1 (id=1076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000001080017"], 0x44}}, 0x0) 1.310439853s ago: executing program 3 (id=1077): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002e40)={0x14, 0x4a, 0x201, 0x0, 0x0, {0xa, 0x0, 0x300}}, 0x14}}, 0x0) 1.214779026s ago: executing program 1 (id=1078): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x210008, &(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="00f1a237b74e94ef44a4259084fe556e41c1dd02d20f538cf049a95303c43d387107327bb57dc92017455d196b5d00e5473d8634be851b3ca9fb338f9f63409bdcd30a2ac10255dea55a3574318f1e72b5d4d8b7d2534c0a9d69207dca132a7f541e482b746dec60e107edc9da309f6826edcf59bd8520f5217a4406786150de1da1b7903dc12fdf03ecd1e11c4c04a13d3971e45e2eea15e779b5254ec1dd8700039a17777c565d188d3393ac4579d76242b2b3635abf42f08614bae64eb04002df42c6b7d26e7fb40f53b54f6a5d8772d36f4a4c30ee700e19a401ab958f6af195a562fecda4bf92a916faa46071aaa3ef1a0e8d", @ANYRES8], 0xff, 0xc3d, &(0x7f0000000f40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file1\x00') 889.013357ms ago: executing program 4 (id=1079): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 888.231635ms ago: executing program 3 (id=1080): unshare(0x2040400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000200)=0x33) 394.05432ms ago: executing program 5 (id=1081): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 371.81225ms ago: executing program 3 (id=1082): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00080000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) time(0x0) 200.48088ms ago: executing program 1 (id=1083): r0 = syz_mount_image$nilfs2(&(0x7f00000008c0), &(0x7f0000000e00)='./file0\x00', 0x10000, &(0x7f0000000940)=ANY=[], 0x0, 0xdab, &(0x7f0000000e80)="$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") r1 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x80186e82, &(0x7f00000002c0)={@id={0x20000000, 0xefffffff, @auto="660000002800a73e1baeff79da3b89f5"}}) 200.136757ms ago: executing program 2 (id=1084): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$netlink(r0, &(0x7f0000005d80)={&(0x7f0000000440)=@kern={0x1d, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005cc0)=[{&(0x7f0000001f40)={0x218, 0x29, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@generic="96d5ca4ec94685d95d02fccda06116c423d3b58b840614f40d8101799566ba8464c489e4a3dbc83f68f0b28329cbf13d4c93f169197e12a996a5c644121dfa7dd2805cc13b4ad5b84c9cdf07f9d0effd1372e12940", @generic="e77bef1fd3d83bd72f4247750a75beafd891e81ac47308521fb3fef4a6cc58d644aa093743e2f5042e64ec55ba1eb4cf23319d4cd440746e61d6bf8ad177358bbf0e29026fb7c78db08b8f4d1a592db0f9abc1daada3221ac7375e24f4e29d06b6714f2cbb4d139291f558e8c19a7f082361c5a42eb8b2cf30cefaac2da61e3a35751ca34eedad720c99b5ef07ae56ba5a3d8ee9c9e727b96339c74a692e8fdab3166eb092d63730a88feed54720808e440f233f4a3641b647b3c514a7000182235473bf39b3b4d8", @nested={0xe5, 0x125, 0x0, 0x1, [@generic="875b5b7bbbac75018120d98241b28822f70a4dc56f2880f60f58193e3dee0259883547a2b12d558c57731bae34b81cc58bce9865cb0ea90a0ea8fe941c7ed56911e969963804af86a49f74e7671bb3c3817fddc01149d23f2838d846d8985136cf81d5289176b68b489ef7ea73c492deedfcfd6353c17a5b423a01f1f9f9cf3d26b95dac2b71140a93493d97c8323cdf5ee61f7a04ba568518c7e32373c4af02f373b3bf5cfde40157e547c470c4956124dd43e70534cbf752c2c6573eb7b7832da544e7fc64a32672", @typed={0xa, 0xbe, 0x0, 0x0, @str='/,W\\%\x00'}, @nested={0x4, 0xf0}, @nested={0x4, 0x46}, @nested={0x4, 0x130}]}]}, 0x218}, {&(0x7f0000004540)={0x1cc, 0x37, 0x1, 0x70bd26, 0x25dfdbfe, "", [@generic="fbb58747a83c3f4f21536bc0082d6e2653d94aae67c9c176725914eecb2d0ffe519dc120aacb94665f574baf67d8e55c94e48e231285ba4dcff618558f4c328d3052bc3a426bf9f2583a791c10aa9164f16189d647e2694e87acb8c62b4973a7831c9f545047748c5852baa5e0ef820a8e7caec980a2c822d114217bacc75a485d9ba8ebc0a0b9fe9e0a1720e00d85fd304011ccd8", @generic="8503c3cf35c1b9da5aac537fbed816bcad3846b3e9f21dba6890e49f13bcee327b706250ffdaab07aa5101b35c67ea18201453f835d9011133720f6235bcb3b65fcc61b32ab24c00936b89c7f78915debc371432d5c4228c36915fb5aec7cbef3ebfc41df75890eda2bd51c2a79acaa6e9a518f07b94b7c2d8194caa2619f3ecd0d319d3b1306a84b0ebbae2abec4d16b24fcb93f1e1cedbd6dcb31777a7b83df23b2217ecd7095689d45c4e64827c526f6a3ba0b81a516bb3b0ef690b9eb27f72d7ed0b8c", @nested={0x8, 0xec, 0x0, 0x1, [@nested={0x4, 0x24}]}, @typed={0x8, 0xf6, 0x0, 0x0, @uid}, @generic="fd57eaabc453f25452ef57006cc8e52741e52fde82a193", @nested={0x35, 0x33, 0x0, 0x1, [@nested={0x4, 0xa0}, @nested={0x4, 0xeb}, @generic="67ff172d2e5e6d8970e6658c503f8085b8e9b43039e9ec980e722e1b3ff6835146e08e1ef917a1b662"]}]}, 0x1cc}, {&(0x7f0000000780)={0xd4, 0x42, 0x300, 0x70bd27, 0x25dfdbfe, "", [@generic="0fe9dd82312b0b0bbe4f1082758180bac7", @typed={0x8, 0xe9, 0x0, 0x0, @uid}, @generic="c0a846330416858d7c62415ba676a363047facd88c2f5b5c5ebcec2a763789db9e19f0e268c2ae4238c12f5f673c902dfc4fc2f42cd2e1c21a3170db6fa9e3c7dc3bf5e620b010996a671cbb166415e7183e398fbaf922fe6ca75821cce0ef4182d466769877845bdb78b6857f682bf42f4c969bb2ec967c8270d1c50e16a7cde6722b9a4d5563c913af7e754f1c9e8dc97cf72430ad30bdc74e02edb187fb20df63d2f17e001dce"]}, 0xd4}], 0x3, 0x0, 0x0, 0x44011}, 0x0) 42.865658ms ago: executing program 3 (id=1085): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000380)='./file1\x00', 0x1010000, &(0x7f0000000a80)=ANY=[@ANYBLOB='utf8=1,uni_xlate=1,uni_xlate=0,check=strict,utf8=0,uni_xlate=0,rodir,codepage=949,uni_xlate=1,shortname=winnt,shortname=mixed,shortname=win95,shortname=win95,iocharset=iso8859-13,shortname=mixed,nonumtail=0,discard,nonumtail=0,incharset=macturkish,\x00'], 0x1, 0x369, &(0x7f0000000700)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, 0x0) 0s ago: executing program 4 (id=1086): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) kernel console output (not intermixed with test programs): sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44f8e929 code=0x7ffc0000 [ 146.658396][ T6392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.752768][ T30] audit: type=1326 audit(1749903838.431:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44f8e929 code=0x7ffc0000 [ 146.825665][ T6392] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #16: comm syz.3.167: invalid indirect mapped block 3973251072 (level 0) [ 146.828572][ T5843] syz-executor: attempt to access beyond end of device [ 146.828572][ T5843] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 146.870519][ T30] audit: type=1326 audit(1749903838.491:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5d44f8e929 code=0x7ffc0000 [ 146.923830][ T30] audit: type=1326 audit(1749903838.491:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44f8e929 code=0x7ffc0000 [ 146.985491][ T5843] CPU: 0 UID: 0 PID: 5843 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 146.985549][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.985572][ T5843] Call Trace: [ 146.985584][ T5843] [ 146.985598][ T5843] dump_stack_lvl+0x16c/0x1f0 [ 146.985667][ T5843] f2fs_handle_critical_error+0x621/0x9f0 [ 146.985717][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.985804][ T5843] ? f2fs_build_fault_attr+0x53/0x1f0 [ 146.985917][ T5843] f2fs_write_end_io+0x785/0xc20 [ 146.986041][ T5843] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 146.986205][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.986309][ T5843] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 146.986427][ T5843] bio_endio+0x70d/0x850 [ 146.986546][ T5843] submit_bio_noacct+0x56d/0x1eb0 [ 146.986684][ T5843] __submit_merged_bio+0x33c/0x770 [ 146.986839][ T5843] __submit_merged_write_cond+0x319/0x3f0 [ 146.987007][ T5843] f2fs_write_cache_pages+0x2067/0x2570 [ 146.987232][ T5843] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 146.987409][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.987505][ T5843] ? __lock_acquire+0x622/0x1c90 [ 146.987692][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.987922][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.988164][ T5843] ? check_path.constprop.0+0x24/0x50 [ 146.988284][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.988435][ T5843] f2fs_write_data_pages+0x4ad/0xd90 [ 146.988635][ T5843] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 146.988762][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.988864][ T5843] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 146.989015][ T5843] do_writepages+0x27a/0x600 [ 146.989190][ T5843] ? __pfx_do_writepages+0x10/0x10 [ 146.989323][ T5843] ? do_raw_spin_unlock+0x172/0x230 [ 146.989425][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.989541][ T5843] ? _raw_spin_unlock+0x28/0x50 [ 146.989656][ T5843] filemap_fdatawrite_wbc+0x104/0x160 [ 146.989788][ T5843] ? __pfx_stack_trace_save+0x10/0x10 [ 146.989896][ T5843] __filemap_fdatawrite_range+0xb2/0xf0 [ 146.990012][ T5843] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 146.990099][ T5843] ? check_path.constprop.0+0x24/0x50 [ 146.990378][ T5843] ? find_held_lock+0x2b/0x80 [ 146.990474][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.990585][ T5843] ? do_raw_spin_unlock+0x172/0x230 [ 146.990674][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.990802][ T5843] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 146.991021][ T5843] block_operations+0x2a3/0xfd0 [ 146.991224][ T5843] ? __pfx_block_operations+0x10/0x10 [ 146.991375][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.991650][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.991750][ T5843] ? down_write+0x14d/0x200 [ 146.991862][ T5843] ? __pfx_down_write+0x10/0x10 [ 146.991960][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.992062][ T5843] ? rcu_is_watching+0x12/0xc0 [ 146.992188][ T5843] f2fs_write_checkpoint+0x2b8/0x4c60 [ 146.992384][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.992482][ T5843] ? kfree+0x2b4/0x4d0 [ 146.992638][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.992768][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.992849][ T5843] ? rcu_is_watching+0x12/0xc0 [ 146.992943][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.993031][ T5843] ? kthread_stop+0x273/0x650 [ 146.993189][ T5843] kill_f2fs_super+0x3c2/0x470 [ 146.993324][ T5843] ? __pfx_kill_f2fs_super+0x10/0x10 [ 146.993462][ T5843] ? lockdep_hardirqs_on+0x7c/0x110 [ 146.993652][ T5843] deactivate_locked_super+0xc1/0x1a0 [ 146.993739][ T5843] deactivate_super+0xde/0x100 [ 146.993810][ T5843] cleanup_mnt+0x225/0x450 [ 146.993938][ T5843] task_work_run+0x150/0x240 [ 146.994037][ T5843] ? __pfx_task_work_run+0x10/0x10 [ 146.994116][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.994215][ T5843] ? __pfx___x64_sys_umount+0x10/0x10 [ 146.994341][ T5843] exit_to_user_mode_loop+0xeb/0x110 [ 146.994462][ T5843] do_syscall_64+0x3f6/0x4c0 [ 146.994566][ T5843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.994621][ T5843] RIP: 0033:0x7fb476b8fc57 [ 146.994685][ T5843] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 146.994780][ T5843] RSP: 002b:00007ffe77278478 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 146.994878][ T5843] RAX: 0000000000000000 RBX: 00007fb476c10925 RCX: 00007fb476b8fc57 [ 146.994941][ T5843] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe77278530 [ 146.994994][ T5843] RBP: 00007ffe77278530 R08: 0000000000000000 R09: 0000000000000000 [ 146.995038][ T5843] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe772795c0 [ 146.995069][ T5843] R13: 00007fb476c10925 R14: 0000000000023cf6 R15: 00007ffe77279600 [ 146.995211][ T5843] [ 147.475442][ T30] audit: type=1326 audit(1749903838.511:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5d44f8e929 code=0x7ffc0000 [ 147.497815][ T30] audit: type=1326 audit(1749903838.511:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44f8e929 code=0x7ffc0000 [ 147.522201][ T30] audit: type=1326 audit(1749903838.511:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44f8e929 code=0x7ffc0000 [ 147.590159][ T6371] loop5: detected capacity change from 0 to 40427 [ 147.647048][ T5843] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 147.722734][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.740243][ T6371] F2FS-fs (loop5): build fault injection rate: 771 [ 147.767916][ T30] audit: type=1326 audit(1749903839.531:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.4.172" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d44f8e929 code=0x0 [ 147.805981][ T6371] F2FS-fs (loop5): invalid crc value [ 147.865423][ T6410] loop1: detected capacity change from 0 to 1024 [ 147.883247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 147.960069][ T6371] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-4) [ 148.070077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 148.085278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 148.118590][ T6418] loop3: detected capacity change from 0 to 256 [ 148.175016][ T6410] hfsplus: invalid xattr key length: 0 [ 148.196990][ T6418] exfat: Deprecated parameter 'utf8' [ 148.343838][ T6418] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 148.747524][ T6426] veth1_macvtap: left promiscuous mode [ 148.779975][ T6426] macsec0: entered promiscuous mode [ 149.129299][ T6429] loop4: detected capacity change from 0 to 4096 [ 149.202509][ T6429] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 149.413766][ T6438] mmap: syz.0.186 (6438) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 149.573530][ T6429] Invalid source name [ 149.915643][ T6453] loop0: detected capacity change from 0 to 512 [ 149.948941][ T6454] Bluetooth: MGMT ver 1.23 [ 150.011230][ T6453] EXT4-fs: Ignoring removed nobh option [ 150.029947][ T6453] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 150.060918][ T6456] loop1: detected capacity change from 0 to 1024 [ 150.160320][ T6453] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.189: iget: bad i_size value: 38620345925642 [ 150.202717][ T6459] loop4: detected capacity change from 0 to 64 [ 150.259066][ T6456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.325809][ T6453] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.189: couldn't read orphan inode 15 (err -117) [ 150.368061][ T6453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.398759][ T6456] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 150.500218][ T6456] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 150.615713][ T6456] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 150.633983][ T6453] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #16: comm syz.0.189: invalid indirect mapped block 3973251072 (level 0) [ 150.683193][ T6456] EXT4-fs (loop1): This should not happen!! Data will be lost [ 150.683193][ T6456] [ 150.730784][ T6456] EXT4-fs (loop1): Total free blocks count 0 [ 150.809549][ T6456] EXT4-fs (loop1): Free/Dirty block details [ 150.838439][ T6456] EXT4-fs (loop1): free_blocks=20480 [ 150.871513][ T6456] EXT4-fs (loop1): dirty_blocks=32 [ 150.876710][ T6456] EXT4-fs (loop1): Block reservation details [ 150.924682][ T6456] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 151.021568][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.107384][ T59] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 151.134100][ T6482] loop3: detected capacity change from 0 to 512 [ 151.141718][ T6482] EXT4-fs: Ignoring removed nobh option [ 151.147310][ T6482] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.229398][ T6482] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 151.370321][ T6482] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 151.378648][ T6482] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #13: comm syz.3.206: casefold flag without casefold feature [ 151.475403][ T6482] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.206: couldn't read orphan inode 13 (err -117) [ 151.489568][ T6488] loop0: detected capacity change from 0 to 512 [ 151.511511][ T6487] loop4: detected capacity change from 0 to 256 [ 151.562954][ T6488] EXT4-fs: Ignoring removed nobh option [ 151.582158][ T6482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.620893][ T6488] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.204: iget: bad i_size value: 38620345925642 [ 151.685117][ T6487] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 151.766757][ T6488] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.204: couldn't read orphan inode 15 (err -117) [ 151.830133][ T6488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.032082][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.231781][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.350231][ T6506] loop1: detected capacity change from 0 to 1024 [ 152.369597][ T6506] EXT4-fs: Ignoring removed orlov option [ 152.385440][ T6506] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 152.471487][ T6506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.528045][ T6514] loop5: detected capacity change from 0 to 64 [ 152.631102][ T5941] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 152.652997][ T6516] loop4: detected capacity change from 0 to 512 [ 152.666708][ T6506] EXT4-fs error (device loop1): ext4_read_inline_dir:1501: inode #12: block 7: comm syz.1.215: path /39/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 152.703667][ T6516] EXT4-fs: Ignoring removed nobh option [ 152.750056][ T6516] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 152.819955][ T5941] usb 4-1: Using ep0 maxpacket: 32 [ 152.835966][ T6516] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.217: iget: bad i_size value: 38620345925642 [ 152.921264][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 195, changing to 11 [ 152.979837][ T5941] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 152.999891][ T6516] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.217: couldn't read orphan inode 15 (err -117) [ 153.033971][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.109575][ T5941] usb 4-1: config 0 descriptor?? [ 153.126788][ T6516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.169233][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.294149][ T6527] netlink: 'syz.5.223': attribute type 27 has an invalid length. [ 153.312948][ T6516] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #16: comm syz.4.217: invalid indirect mapped block 3973251072 (level 0) [ 153.387597][ T6529] loop0: detected capacity change from 0 to 64 [ 153.560960][ T6535] IPVS: stopping backup sync thread 6534 ... [ 153.567667][ T6534] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 153.596237][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.604763][ T5941] uclogic 0003:28BD:0042.0003: interface is invalid, ignoring [ 153.819926][ T5813] usb 4-1: USB disconnect, device number 2 [ 153.946103][ T6541] loop2: detected capacity change from 0 to 1024 [ 154.028247][ T6546] loop5: detected capacity change from 0 to 512 [ 154.176419][ T6546] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 154.313866][ T6546] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.356471][ T6547] loop0: detected capacity change from 0 to 4096 [ 154.370569][ T6546] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.420305][ T6547] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 154.446884][ T1137] hfsplus: b-tree write err: -5, ino 8 [ 154.673651][ T6557] netlink: 'syz.1.238': attribute type 25 has an invalid length. [ 154.699022][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.710365][ T6547] ntfs3(loop0): Failed to load $Extend (-22). [ 154.716507][ T6547] ntfs3(loop0): Failed to initialize $Extend. [ 154.734719][ T6557] Zero length message leads to an empty skb [ 154.790925][ T6560] loop3: detected capacity change from 0 to 1024 [ 154.798602][ T6560] EXT4-fs: inline encryption not supported [ 154.849839][ T6560] EXT4-fs: Ignoring removed i_version option [ 154.871333][ T6560] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 155.024265][ T6560] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.239: lblock 2 mapped to illegal pblock 2 (length 1) [ 155.101777][ T6560] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 155.139855][ T6560] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm syz.3.239: lblock 0 mapped to illegal pblock 48 (length 1) [ 155.220859][ T6560] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 155.279245][ T6560] EXT4-fs error (device loop3): ext4_acquire_dquot:6931: comm syz.3.239: Failed to acquire dquot type 0 [ 155.376156][ T6560] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 155.456852][ T6560] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.239: mark_inode_dirty error [ 155.540679][ T6560] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 155.576904][ T6560] EXT4-fs (loop3): 1 orphan inode deleted [ 155.593738][ T13] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 155.626934][ T6579] loop1: detected capacity change from 0 to 256 [ 155.711325][ T6560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.726508][ T13] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 155.747093][ T6579] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 155.756440][ T13] EXT4-fs error (device loop3): ext4_release_dquot:6967: comm kworker/u8:1: Failed to release dquot type 0 [ 155.903328][ T6560] EXT4-fs error (device loop3): __ext4_get_inode_loc:4791: comm syz.3.239: Invalid inode table block 1 in block_group 0 [ 155.969638][ T6560] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 156.155340][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.238487][ T5833] EXT4-fs error (device loop3): __ext4_get_inode_loc:4791: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 156.318886][ T5833] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 156.398320][ T5833] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 156.799684][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.260'. [ 156.929855][ T921] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 157.140364][ T921] usb 4-1: Using ep0 maxpacket: 16 [ 157.165563][ T921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.201974][ T921] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 157.225864][ T921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.234641][ T6622] loop0: detected capacity change from 0 to 256 [ 157.267586][ T921] usb 4-1: config 0 descriptor?? [ 157.326154][ T6623] loop1: detected capacity change from 0 to 2048 [ 157.470430][ T6622] FAT-fs (loop0): Directory bread(block 64) failed [ 157.486182][ T6625] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.513374][ T6622] FAT-fs (loop0): Directory bread(block 65) failed [ 157.520454][ T6622] FAT-fs (loop0): Directory bread(block 66) failed [ 157.527316][ T6622] FAT-fs (loop0): Directory bread(block 67) failed [ 157.536009][ T6622] FAT-fs (loop0): Directory bread(block 68) failed [ 157.543176][ T6622] FAT-fs (loop0): Directory bread(block 69) failed [ 157.553969][ T6622] FAT-fs (loop0): Directory bread(block 70) failed [ 157.560847][ T6622] FAT-fs (loop0): Directory bread(block 71) failed [ 157.567631][ T6622] FAT-fs (loop0): Directory bread(block 72) failed [ 157.574623][ T6622] FAT-fs (loop0): Directory bread(block 73) failed [ 157.643285][ T6623] NILFS (loop1): unable to set label with more than 80 bytes [ 157.707254][ T921] hkems 0003:2006:0118.0004: unknown main item tag 0x0 [ 157.759912][ T921] hkems 0003:2006:0118.0004: item fetching failed at offset 5/7 [ 157.768396][ T921] hkems 0003:2006:0118.0004: parse failed [ 157.816879][ T921] hkems 0003:2006:0118.0004: probe with driver hkems failed with error -22 [ 157.909139][ T5898] usb 4-1: USB disconnect, device number 3 [ 158.217159][ T6631] loop4: detected capacity change from 0 to 4096 [ 158.530225][ T6631] ntfs3(loop4): ino=1e, mi_enum_attr [ 158.535987][ T6631] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 158.547930][ T6642] loop1: detected capacity change from 0 to 512 [ 158.584610][ T6642] EXT4-fs: Ignoring removed bh option [ 158.685675][ T6642] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 158.815323][ T6642] EXT4-fs (loop1): 1 truncate cleaned up [ 158.877372][ T6642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.909894][ T5898] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 159.120598][ T5898] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 159.161904][ T5898] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 159.215974][ T5898] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 159.263710][ T5898] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 159.301399][ T5898] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 159.319232][ T5898] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 159.353321][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 159.384373][ T6661] loop5: detected capacity change from 0 to 128 [ 159.405990][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.425419][ T5898] usb 1-1: Product: syz [ 159.429636][ T5898] usb 1-1: Manufacturer: syz [ 159.451628][ T6661] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 159.534662][ T5898] cdc_wdm 1-1:1.0: skipping garbage [ 159.543362][ T6661] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 159.559798][ T5898] cdc_wdm 1-1:1.0: skipping garbage [ 159.573248][ T6661] FAT-fs (loop5): Filesystem has been set read-only [ 159.600928][ T5898] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 159.619145][ T6661] syz.5.285: attempt to access beyond end of device [ 159.619145][ T6661] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 159.637880][ T5898] cdc_wdm 1-1:1.0: Unknown control protocol [ 159.688961][ T6661] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 159.722817][ T6661] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 159.750223][ T5941] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 159.758678][ T6661] syz.5.285: attempt to access beyond end of device [ 159.758678][ T6661] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 159.811868][ T30] audit: type=1800 audit(1749903851.621:12): pid=6661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.285" name="file2" dev="loop5" ino=1048632 res=0 errno=0 [ 159.945754][ T5941] usb 5-1: Using ep0 maxpacket: 16 [ 159.971986][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.999827][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.030896][ T5941] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 160.069892][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.105167][ T5941] usb 5-1: config 0 descriptor?? [ 160.418984][ T6682] loop2: detected capacity change from 0 to 512 [ 160.446334][ T6682] EXT4-fs: Ignoring removed bh option [ 160.481082][ T6682] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 160.524039][ T6682] EXT4-fs (loop2): 1 truncate cleaned up [ 160.530186][ T921] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 160.573316][ T6682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.593532][ T5941] konepure 0003:1E7D:2DB4.0005: unknown main item tag 0x4 [ 160.650458][ T5941] konepure 0003:1E7D:2DB4.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.4-1/input0 [ 160.720031][ T921] usb 6-1: Using ep0 maxpacket: 32 [ 160.757189][ T921] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 160.792437][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.802808][ T921] usb 6-1: config 0 has no interface number 0 [ 160.808974][ T921] usb 6-1: config 0 interface 12 has no altsetting 0 [ 160.822803][ T5941] usb 5-1: USB disconnect, device number 3 [ 160.835128][ T5813] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 160.861452][ T6686] fido_id[6686]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 160.864694][ T921] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 160.894357][ T921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.904157][ T921] usb 6-1: Product: syz [ 160.912247][ T921] usb 6-1: Manufacturer: syz [ 160.916980][ T921] usb 6-1: SerialNumber: syz [ 160.935585][ T921] usb 6-1: config 0 descriptor?? [ 161.020440][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 161.041690][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 161.062102][ T5813] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 161.077947][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.099959][ T5813] usb 2-1: config 0 descriptor?? [ 161.107135][ T6681] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 161.212566][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.231972][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.246111][ T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 161.256136][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.271349][ T24] usb 4-1: config 0 descriptor?? [ 161.555608][ T6694] loop4: detected capacity change from 0 to 256 [ 161.575263][ T6694] exfat: Deprecated parameter 'utf8' [ 161.588117][ T5813] hid-retrode 0003:0403:97C1.0006: unknown main item tag 0x0 [ 161.611376][ T921] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 161.620009][ T5813] hid-retrode 0003:0403:97C1.0006: unknown main item tag 0x0 [ 161.627471][ T5813] hid-retrode 0003:0403:97C1.0006: unknown main item tag 0x0 [ 161.640678][ T6694] exfat: Deprecated parameter 'utf8' [ 161.649279][ T921] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 161.661637][ T6694] exfat: Deprecated parameter 'utf8' [ 161.664059][ T5898] usb 1-1: USB disconnect, device number 3 [ 161.672827][ T921] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 161.672979][ T921] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 161.692310][ T921] usb 6-1: USB disconnect, device number 3 [ 161.706924][ T5813] hid-retrode 0003:0403:97C1.0006: unknown main item tag 0x0 [ 161.752335][ T5813] hid-retrode 0003:0403:97C1.0006: unknown main item tag 0x0 [ 161.765473][ T24] pyra 0003:1E7D:2CF6.0007: item fetching failed at offset 5/7 [ 161.819303][ T24] pyra 0003:1E7D:2CF6.0007: parse failed [ 161.837834][ T5813] hid-retrode 0003:0403:97C1.0006: hidraw0: USB HID v1.01 Device [HID 0403:97c1] on usb-dummy_hcd.1-1/input0 [ 161.862655][ T24] pyra 0003:1E7D:2CF6.0007: probe with driver pyra failed with error -22 [ 161.890664][ T6694] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 161.930137][ T5813] usb 2-1: USB disconnect, device number 2 [ 161.950416][ T24] usb 4-1: USB disconnect, device number 4 [ 162.212749][ T6701] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 162.257523][ T6697] fido_id[6697]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 162.697023][ T6713] loop1: detected capacity change from 0 to 256 [ 163.573320][ T6724] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 164.006157][ T6729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.315'. [ 164.300674][ T6719] loop0: detected capacity change from 0 to 131072 [ 164.393290][ T6719] XFS (loop0): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 164.529050][ T6744] loop5: detected capacity change from 0 to 256 [ 164.657653][ T6719] XFS (loop0): Starting recovery (logdev: internal) [ 164.678672][ T6744] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 164.832500][ T6719] XFS (loop0): Ending recovery (logdev: internal) [ 164.962167][ T5839] XFS (loop0): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 165.096802][ T6751] sg_write: process 103 (syz.3.321) changed security contexts after opening file descriptor, this is not allowed. [ 165.163814][ T6711] loop2: detected capacity change from 0 to 32768 [ 165.353098][ T6711] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 165.514170][ T6711] XFS (loop2): Ending clean mount [ 165.743632][ T5843] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 165.974401][ T6780] loop3: detected capacity change from 0 to 128 [ 166.075909][ T6775] loop4: detected capacity change from 0 to 4096 [ 166.139946][ T975] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 166.210142][ T6775] NILFS (loop4): invalid segment: Checksum error in segment payload [ 166.264046][ T6775] NILFS (loop4): trying rollback from an earlier position [ 166.317261][ T6775] NILFS (loop4): recovery complete [ 166.342911][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.366379][ T6782] loop0: detected capacity change from 0 to 512 [ 166.367700][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.395676][ T6784] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.426125][ T975] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.455658][ T975] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 166.489908][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.549486][ T975] usb 2-1: config 0 descriptor?? [ 166.648583][ T6782] EXT4-fs (loop0): 1 orphan inode deleted [ 166.660768][ T59] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 166.755931][ T6782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.789878][ T59] EXT4-fs error (device loop0): ext4_release_dquot:6967: comm kworker/u8:4: Failed to release dquot type 1 [ 166.823588][ T6782] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.056652][ T975] hid-udraw 0003:20D6:CB17.0008: item fetching failed at offset 5/7 [ 167.116327][ T975] hid-udraw 0003:20D6:CB17.0008: parse failed [ 167.144575][ T975] hid-udraw 0003:20D6:CB17.0008: probe with driver hid-udraw failed with error -22 [ 167.204296][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.225564][ T24] usb 2-1: USB disconnect, device number 3 [ 167.537134][ T6802] loop2: detected capacity change from 0 to 4096 [ 167.580542][ T6802] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 167.703328][ T6802] ntfs3(loop2): ino=19, mi_enum_attr [ 167.708710][ T6802] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 167.742282][ T6811] loop4: detected capacity change from 0 to 2048 [ 167.880175][ T6811] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 100: 0xeb != 0x00 [ 167.888504][ T30] audit: type=1800 audit(1749903859.681:13): pid=6802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.340" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 168.003278][ T6811] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.234675][ T6820] loop5: detected capacity change from 0 to 256 [ 168.273237][ T6816] loop0: detected capacity change from 0 to 2048 [ 168.340586][ T6816] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 168.368302][ T6819] loop3: detected capacity change from 0 to 4096 [ 168.425927][ T6816] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.428207][ T6819] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 168.529471][ T6819] ntfs3(loop3): It is recommened to use chkdsk. [ 168.944594][ T6826] mkiss: ax0: crc mode is auto. [ 169.597854][ T6841] loop5: detected capacity change from 0 to 1024 [ 169.739816][ T30] audit: type=1800 audit(1749903861.541:14): pid=6841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.358" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 169.834300][ T5813] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 170.059959][ T5813] usb 5-1: Using ep0 maxpacket: 16 [ 170.081700][ T5813] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.121169][ T5813] usb 5-1: config 0 interface 0 has no altsetting 0 [ 170.128120][ T6855] netlink: 256 bytes leftover after parsing attributes in process `syz.3.364'. [ 170.159968][ T5813] usb 5-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 170.194598][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.237256][ T5813] usb 5-1: config 0 descriptor?? [ 170.437343][ T30] audit: type=1326 audit(1749903862.241:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.5.368" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82f398e929 code=0x0 [ 170.470001][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 170.640387][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 170.650074][ T921] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 170.675753][ T5813] holtek_mouse 0003:04D9:A04A.0009: unbalanced collection at end of report description [ 170.699981][ T24] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 170.712110][ T5813] holtek_mouse 0003:04D9:A04A.0009: hid parse failed: -22 [ 170.719425][ T24] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 170.727844][ T5813] holtek_mouse 0003:04D9:A04A.0009: probe with driver holtek_mouse failed with error -22 [ 170.738079][ T24] usb 1-1: Product: syz [ 170.742447][ T24] usb 1-1: Manufacturer: syz [ 170.747154][ T24] usb 1-1: SerialNumber: syz [ 170.773597][ T24] usb 1-1: config 0 descriptor?? [ 170.832371][ T6852] loop1: detected capacity change from 0 to 32768 [ 170.842499][ T921] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 170.863279][ T6852] XFS: noikeep mount option is deprecated. [ 170.865875][ T921] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 170.950772][ T24] usb 5-1: USB disconnect, device number 4 [ 170.951729][ T6852] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 170.988261][ T921] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 171.012624][ T5898] usb 1-1: USB disconnect, device number 4 [ 171.012670][ T921] usb 4-1: config 220 has no interface number 2 [ 171.026177][ T921] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 171.041469][ T921] usb 4-1: config 220 interface 0 has no altsetting 0 [ 171.048444][ T921] usb 4-1: config 220 interface 76 has no altsetting 0 [ 171.058016][ T921] usb 4-1: config 220 interface 1 has no altsetting 0 [ 171.072720][ T921] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 171.084453][ T921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.092963][ T921] usb 4-1: Product: syz [ 171.097175][ T921] usb 4-1: Manufacturer: syz [ 171.101994][ T921] usb 4-1: SerialNumber: syz [ 171.132265][ T6852] XFS (loop1): Ending clean mount [ 171.200780][ T6803] udevd[6803]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.214495][ T6852] XFS (loop1): Quotacheck needed: Please wait. [ 171.351920][ T6852] XFS (loop1): Quotacheck: Done. [ 171.414479][ T921] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 171.455362][ T921] usb 4-1: No valid video chain found. [ 171.486937][ T921] usb 4-1: selecting invalid altsetting 0 [ 171.522993][ T921] usb 4-1: selecting invalid altsetting 0 [ 171.528989][ T921] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 171.545994][ T921] usb 4-1: USB disconnect, device number 5 [ 171.632904][ T5829] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 171.979993][ T5906] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 172.198166][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 172.214864][ T5906] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 172.233653][ T6893] loop5: detected capacity change from 0 to 64 [ 172.262911][ T5906] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 172.310060][ T6890] loop3: detected capacity change from 0 to 2048 [ 172.316615][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.357615][ T5906] usb 5-1: Product: syz [ 172.377742][ T5906] usb 5-1: Manufacturer: syz [ 172.398242][ T5906] usb 5-1: SerialNumber: syz [ 172.417116][ T6894] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.449294][ T5906] usb 5-1: config 0 descriptor?? [ 172.468812][ T6881] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 172.515895][ T5906] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 172.828019][ T5906] usb 5-1: USB disconnect, device number 5 [ 172.926060][ T6902] netlink: 24 bytes leftover after parsing attributes in process `syz.0.383'. [ 172.993294][ T6908] loop3: detected capacity change from 0 to 128 [ 173.062251][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.114876][ T6908] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 173.134359][ T6908] System zones: 1-3, 19-19, 35-36 [ 173.195570][ T6908] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.283657][ T6908] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 173.459550][ T6920] loop5: detected capacity change from 0 to 1024 [ 173.505196][ T6920] EXT4-fs: Ignoring removed orlov option [ 173.619235][ T6920] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 173.666676][ T5833] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.681381][ T24] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 173.705960][ T6920] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.892337][ T24] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 173.927151][ T24] usb 3-1: config 0 has no interface number 0 [ 173.950278][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.959453][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 173.976813][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 173.999364][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 174.054715][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 174.109837][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 174.155163][ T24] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 174.244086][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 174.276263][ T6936] tipc: Enabling not permitted [ 174.278175][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.309948][ T6936] tipc: Enabling of bearer rejected, failed to enable media [ 174.403538][ T24] usb 3-1: config 0 descriptor?? [ 174.420506][ T6921] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 174.425534][ T6942] loop3: detected capacity change from 0 to 1024 [ 174.429655][ T6921] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 174.525838][ T24] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 174.537018][ T6944] loop0: detected capacity change from 0 to 2048 [ 174.620778][ T6945] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.730237][ T6942] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.814508][ T5813] usb 3-1: USB disconnect, device number 2 [ 174.870779][ T5813] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 175.044948][ T6945] NILFS (loop0): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 175.112578][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 175.114684][ T6945] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=2) [ 175.147590][ T6953] loop4: detected capacity change from 0 to 1024 [ 175.171283][ T6953] EXT4-fs: Ignoring removed oldalloc option [ 175.177261][ T6953] EXT4-fs: Ignoring removed bh option [ 175.203747][ T6945] Remounting filesystem read-only [ 175.225980][ T5839] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 175.317353][ T6953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.435557][ T6953] EXT4-fs warning (device loop4): ext4_resize_begin:71: won't resize using backup superblock at 1 [ 175.519394][ T6961] loop3: detected capacity change from 0 to 1024 [ 175.521845][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.588126][ T6961] EXT4-fs: Ignoring removed nobh option [ 175.588164][ T6961] EXT4-fs: inline encryption not supported [ 175.588190][ T6961] EXT4-fs: Ignoring removed bh option [ 175.665897][ T6961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.693994][ T6963] netlink: 68 bytes leftover after parsing attributes in process `syz.1.407'. [ 175.817876][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.408'. [ 175.901691][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.028514][ T6938] loop5: detected capacity change from 0 to 32768 [ 176.552841][ T6985] loop2: detected capacity change from 0 to 64 [ 176.708806][ T6985] syz.2.417: attempt to access beyond end of device [ 176.708806][ T6985] loop2: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 176.770578][ T6985] Buffer I/O error on dev loop2, logical block 134217734, async page read [ 177.077823][ T6986] Trying to free block not in datazone [ 177.610754][ T7000] loop3: detected capacity change from 0 to 2048 [ 177.656350][ T7000] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 177.661250][ T7004] netlink: 'syz.2.426': attribute type 2 has an invalid length. [ 177.812496][ T7007] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.251194][ T6977] loop4: detected capacity change from 0 to 32768 [ 178.376565][ T6977] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 178.534427][ T5840] Bluetooth: hci5: link tx timeout [ 178.542578][ T5840] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.587279][ T6977] XFS (loop4): Ending clean mount [ 178.668348][ T6977] XFS (loop4): Quotacheck needed: Please wait. [ 178.857776][ T6977] XFS (loop4): Quotacheck: Done. [ 179.201377][ T7048] netlink: 56 bytes leftover after parsing attributes in process `syz.2.443'. [ 179.236763][ T5831] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 179.341707][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'. [ 179.352001][ T7053] loop3: detected capacity change from 0 to 64 [ 179.368681][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'. [ 179.754267][ T7056] loop4: detected capacity change from 0 to 2048 [ 179.921117][ T7061] loop1: detected capacity change from 0 to 1024 [ 179.942896][ T7063] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.009699][ T7061] hfsplus: request for non-existent node 134217728 in B*Tree [ 180.021651][ T7059] loop5: detected capacity change from 0 to 4096 [ 180.024364][ T7061] hfsplus: request for non-existent node 134217728 in B*Tree [ 180.599989][ T5149] Bluetooth: hci5: command 0x0406 tx timeout [ 180.720245][ T7072] loop4: detected capacity change from 0 to 512 [ 180.771957][ T7072] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 180.839328][ T7074] loop1: detected capacity change from 0 to 64 [ 180.856645][ T7072] EXT4-fs (loop4): 1 truncate cleaned up [ 180.917948][ T7072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.944161][ T30] audit: type=1800 audit(1749903872.751:16): pid=7074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.456" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 181.041425][ T7079] loop5: detected capacity change from 0 to 1024 [ 181.087387][ T7041] loop0: detected capacity change from 0 to 40427 [ 181.116547][ T7079] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 181.186325][ T7041] F2FS-fs (loop0): build fault injection rate: 690 [ 181.199880][ T7079] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 181.238205][ T7041] F2FS-fs (loop0): invalid crc value [ 181.247208][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.269559][ T7079] JBD2: no valid journal superblock found [ 181.300178][ T7079] EXT4-fs (loop5): Could not load journal inode [ 181.321778][ T5840] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 181.330393][ T5840] Bluetooth: hci3: Injecting HCI hardware error event [ 181.338980][ T5840] Bluetooth: hci3: hardware error 0x00 [ 181.451049][ T7080] loop3: detected capacity change from 0 to 4096 [ 181.780491][ T7080] ntfs3(loop3): ino=5, "/" indx_read [ 181.803781][ T7080] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 181.809922][ T7090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.461'. [ 181.890919][ T7080] ntfs3(loop3): ino=5, ntfs_readdir [ 182.349460][ T7096] loop2: detected capacity change from 0 to 4096 [ 182.359047][ T7105] loop1: detected capacity change from 0 to 1024 [ 182.456192][ T7105] hfsplus: bad catalog entry type [ 182.559486][ T7108] loop5: detected capacity change from 0 to 512 [ 182.565099][ T7096] ntfs3(loop2): ino=1a, mi_enum_attr [ 182.585610][ T7096] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 182.660633][ T7108] EXT4-fs: Ignoring removed oldalloc option [ 182.698246][ T7108] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 182.721524][ T30] audit: type=1800 audit(1749903874.501:17): pid=7096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.464" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 182.830216][ T7108] EXT4-fs (loop5): 1 truncate cleaned up [ 182.879664][ T7112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.887006][ T7108] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.942313][ T61] hfsplus: b-tree write err: -5, ino 4 [ 183.008586][ T7108] EXT4-fs error (device loop5): mb_free_blocks:1945: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 183.026039][ T7113] EXT4-fs error (device loop5): ext4_get_verity_descriptor_location:298: inode #15: comm syz.5.470: verity file has no extents [ 183.133610][ T7108] EXT4-fs (loop5): Remounting filesystem read-only [ 183.236676][ T7113] fs-verity (loop5, inode 15): Error -117 getting verity descriptor size [ 183.357263][ T7116] loop3: detected capacity change from 0 to 1024 [ 183.365934][ T7119] loop1: detected capacity change from 0 to 512 [ 183.404496][ T7119] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 183.423345][ T7121] loop4: detected capacity change from 0 to 512 [ 183.459079][ T7119] System zones: 0-2, 18-18, 34-35 [ 183.467106][ T7119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 183.492839][ T7121] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 183.519373][ T7121] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 183.544724][ T7121] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 183.567824][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.590261][ T7121] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 183.632008][ T7121] System zones: 0-2, 18-18, 34-34 [ 183.650244][ T5840] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 183.695665][ T7121] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.476: iget: bad i_size value: 360287970189639680 [ 183.788278][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.798535][ T7121] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.476: couldn't read orphan inode 15 (err -117) [ 183.886089][ T7121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.974657][ T13] hfsplus: b-tree write err: -5, ino 4 [ 184.216715][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.302173][ T7141] vlan2: entered allmulticast mode [ 184.351252][ T7141] macsec0: entered allmulticast mode [ 184.391069][ T7141] veth1_macvtap: entered allmulticast mode [ 184.504772][ T5813] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 184.699158][ T5813] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.743623][ T5813] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 184.799917][ T5813] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 184.808439][ T7149] netlink: 212364 bytes leftover after parsing attributes in process `syz.3.488'. [ 184.828242][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.871436][ T7149] openvswitch: netlink: Message has 5 unknown bytes. [ 184.897716][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.489'. [ 184.911068][ T5813] usb 1-1: config 0 descriptor?? [ 185.281892][ T5840] Bluetooth: hci4: unexpected cc 0x0c5b length: 5 > 1 [ 185.341214][ T5813] Bluetooth: Can't get state to change to load configuration err [ 185.390551][ T5813] Bluetooth: Loading sysconfig file failed [ 185.422825][ T5813] ath3k 1-1:0.0: probe with driver ath3k failed with error -16 [ 185.468425][ T5813] usb 1-1: USB disconnect, device number 5 [ 185.637292][ T7169] loop5: detected capacity change from 0 to 64 [ 185.646762][ T7172] loop3: detected capacity change from 0 to 64 [ 185.684023][ T7133] loop1: detected capacity change from 0 to 32768 [ 185.743485][ T7133] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 185.858608][ T7133] XFS (loop1): Ending clean mount [ 186.208246][ T5829] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 186.506227][ T7185] loop0: detected capacity change from 0 to 4096 [ 186.559834][ T7185] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 186.779440][ T7185] ntfs3(loop0): ino=19, mi_enum_attr [ 186.779487][ T7185] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 186.959209][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 186.959254][ T7203] tipc: Enabling of bearer rejected, media not registered [ 187.420267][ T7213] loop2: detected capacity change from 0 to 64 [ 187.473794][ T30] audit: type=1800 audit(1749903879.271:18): pid=7213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.512" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 187.938177][ T7226] loop2: detected capacity change from 0 to 512 [ 187.985993][ T7226] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 188.064399][ T7226] EXT4-fs (loop2): 1 truncate cleaned up [ 188.094820][ T7226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.324026][ T7236] macsec1: entered promiscuous mode [ 188.346670][ T7236] macsec1: entered allmulticast mode [ 188.384430][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.141091][ T7259] loop5: detected capacity change from 0 to 512 [ 189.180144][ T7259] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.213621][ T7259] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.255774][ T7261] loop0: detected capacity change from 0 to 16 [ 189.259809][ T7259] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 189.312977][ T7261] erofs (device loop0): mounted with root inode @ nid 36. [ 189.350913][ T7259] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c11c, mo2=0002] [ 189.358987][ T7259] System zones: 1-12 [ 189.400371][ T7259] EXT4-fs error (device loop5): ext4_iget_extra_inode:5034: inode #15: comm syz.5.534: corrupted in-inode xattr: e_value size too large [ 189.513253][ T7259] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.534: couldn't read orphan inode 15 (err -117) [ 189.593535][ T7259] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.807796][ T7272] loop4: detected capacity change from 0 to 1764 [ 189.897937][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.923958][ T7274] loop2: detected capacity change from 0 to 512 [ 190.072021][ T7274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.132334][ T7282] loop1: detected capacity change from 0 to 128 [ 190.147805][ T7282] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 190.157860][ T7274] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.465982][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.048667][ T7301] netlink: 32 bytes leftover after parsing attributes in process `syz.4.551'. [ 191.155049][ T7303] Bluetooth: MGMT ver 1.23 [ 191.179063][ T7305] loop0: detected capacity change from 0 to 64 [ 191.521433][ T7313] binder: 7312:7313 ioctl c0306201 2000000003c0 returned -22 [ 192.288397][ T7334] Invalid logical block size (2050) [ 192.608677][ T7338] loop2: detected capacity change from 0 to 1024 [ 192.644483][ T7338] EXT4-fs: Ignoring removed nobh option [ 192.666210][ T7338] EXT4-fs: Ignoring removed bh option [ 192.746531][ T7338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.909052][ T7338] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.570: inode #1027213879: comm syz.2.570: iget: illegal inode # [ 192.990651][ T7338] EXT4-fs (loop2): Remounting filesystem read-only [ 193.025289][ T7338] EXT4-fs warning (device loop2): ext4_xattr_inode_inc_ref_all:1128: inode #18: comm syz.2.570: cleanup dec ref error -30 [ 193.042533][ T7354] loop0: detected capacity change from 0 to 256 [ 193.107078][ T7338] EXT4-fs warning (device loop2): ext4_xattr_block_set:2189: inode #18: comm syz.2.570: dec ref error=-30 [ 193.135770][ T7354] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 193.341101][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.175476][ T7374] loop2: detected capacity change from 0 to 2048 [ 194.199498][ T7374] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 194.310818][ T7374] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.545252][ T7384] loop1: detected capacity change from 0 to 1764 [ 194.646357][ T7384] netlink: 'syz.1.590': attribute type 1 has an invalid length. [ 194.689854][ T7384] netlink: 'syz.1.590': attribute type 2 has an invalid length. [ 194.837363][ T7390] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.593'. [ 195.073056][ T7356] loop5: detected capacity change from 0 to 32768 [ 195.119397][ T7356] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.578 (7356) [ 195.226917][ T7356] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 195.284170][ T7356] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 195.315196][ T7356] BTRFS info (device loop5): using free-space-tree [ 195.456137][ T7411] loop4: detected capacity change from 0 to 256 [ 195.490070][ T975] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 195.680263][ T975] usb 3-1: Using ep0 maxpacket: 16 [ 195.697572][ T975] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.742046][ T975] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.817421][ T975] usb 3-1: config 0 interface 0 has no altsetting 0 [ 195.829000][ T5844] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 195.867468][ T975] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 195.888710][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.951869][ T975] usb 3-1: config 0 descriptor?? [ 196.110182][ T5906] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 196.307874][ T7392] loop0: detected capacity change from 0 to 32768 [ 196.318371][ T5906] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 196.350124][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.399346][ T7392] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 196.433779][ T975] mcp2200 0003:04D8:00DF.000A: unknown main item tag 0x2 [ 196.449677][ T5906] usb 2-1: Product: syz [ 196.475343][ T7392] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 196.489858][ T5906] usb 2-1: Manufacturer: syz [ 196.494939][ T5906] usb 2-1: SerialNumber: syz [ 196.502104][ T975] mcp2200 0003:04D8:00DF.000A: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.2-1/input0 [ 196.556209][ T5906] usb 2-1: config 0 descriptor?? [ 196.590841][ T5906] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 196.673198][ T975] usb 3-1: USB disconnect, device number 3 [ 196.941423][ T5839] ocfs2: Unmounting device (7,0) on (node local) [ 197.220127][ T5906] gspca_sunplus: reg_r err -71 [ 197.225050][ T5906] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 197.278692][ T5906] usb 2-1: USB disconnect, device number 4 [ 197.493806][ T7447] netlink: 24 bytes leftover after parsing attributes in process `syz.3.612'. [ 198.061948][ T7459] netlink: 212404 bytes leftover after parsing attributes in process `syz.1.618'. [ 198.765547][ T7463] loop3: detected capacity change from 0 to 32768 [ 198.884810][ T7463] gfs2: fsid=\]+_.)!]^\: Trying to join cluster "lock_nolock", "\]+_.)!]^\" [ 198.893589][ T7463] gfs2: fsid=\]+_.)!]^\: Now mounting FS (format 0)... [ 198.907586][ T7463] gfs2: not a GFS2 filesystem [ 198.912358][ T7463] gfs2: fsid=\]+_.)!]^\: can't read superblock [ 198.919982][ T7463] gfs2: fsid=\]+_.)!]^\: can't read superblock: -22 [ 199.216513][ T7473] loop2: detected capacity change from 0 to 1024 [ 199.362781][ T7477] : entered promiscuous mode [ 199.699527][ T7453] loop4: detected capacity change from 0 to 32768 [ 199.783313][ T7451] loop0: detected capacity change from 0 to 32768 [ 199.894838][ T7451] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 199.936804][ T7453] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 200.142111][ T7453] OCFS2: ERROR (device loop4): ocfs2_reserve_suballoc_bits: Invalid chain allocator 74 [ 200.189927][ T975] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 200.201317][ T7453] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 200.241020][ T7453] OCFS2: Returning error to the calling process. [ 200.275143][ T7453] (syz.4.615,7453,0):ocfs2_reserve_suballoc_bits:856 ERROR: status = -5 [ 200.304866][ T7451] XFS (loop0): Ending clean mount [ 200.325647][ T7453] (syz.4.615,7453,0):ocfs2_reserve_new_inode:1097 ERROR: status = -5 [ 200.342512][ T7451] XFS (loop0): Quotacheck needed: Please wait. [ 200.361144][ T7453] (syz.4.615,7453,0):ocfs2_reserve_new_inode:1120 ERROR: status = -5 [ 200.399888][ T975] usb 3-1: Using ep0 maxpacket: 32 [ 200.423774][ T7453] (syz.4.615,7453,0):ocfs2_mknod:306 ERROR: status = -5 [ 200.467918][ T975] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 200.480295][ T7453] (syz.4.615,7453,1):ocfs2_mknod:502 ERROR: status = -5 [ 200.495942][ T975] usb 3-1: config 0 has no interface number 0 [ 200.514882][ T7453] (syz.4.615,7453,1):ocfs2_create:675 ERROR: status = -5 [ 200.521556][ T975] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 200.598990][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.614441][ T7451] XFS (loop0): Quotacheck: Done. [ 200.631047][ T975] usb 3-1: Product: syz [ 200.647575][ T975] usb 3-1: Manufacturer: syz [ 200.689599][ T975] usb 3-1: SerialNumber: syz [ 200.700293][ T5831] ocfs2: Unmounting device (7,4) on (node local) [ 200.763577][ T975] usb 3-1: config 0 descriptor?? [ 200.803244][ T975] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 200.874608][ T5839] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 200.913197][ T7508] loop5: detected capacity change from 0 to 512 [ 201.079903][ T7508] EXT4-fs error (device loop5): ext4_iget_extra_inode:5034: inode #15: comm syz.5.634: corrupted in-inode xattr: invalid ea_ino [ 201.238189][ T7508] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.634: couldn't read orphan inode 15 (err -117) [ 201.389414][ T7508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.420552][ T975] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 201.560698][ T975] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 201.606673][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 201.640409][ T975] usb 3-1: USB disconnect, device number 4 [ 201.701489][ T975] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 201.791388][ T975] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 201.846336][ T975] quatech2 3-1:0.51: device disconnected [ 201.968934][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.081412][ T7525] process 'syz.0.637' launched '/dev/fd/3' with NULL argv: empty string added [ 202.450204][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'. [ 202.450238][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 202.450280][ T7531] netlink: 'syz.0.647': attribute type 13 has an invalid length. [ 202.450343][ T7531] netlink: 'syz.0.647': attribute type 11 has an invalid length. [ 202.512189][ T7535] netlink: 'syz.2.646': attribute type 1 has an invalid length. [ 202.512224][ T7535] netlink: 216 bytes leftover after parsing attributes in process `syz.2.646'. [ 202.704383][ T7538] loop4: detected capacity change from 0 to 64 [ 203.284407][ T7545] netlink: 16 bytes leftover after parsing attributes in process `syz.4.651'. [ 203.385703][ T7545] netlink: 16 bytes leftover after parsing attributes in process `syz.4.651'. [ 203.556030][ T7550] loop0: detected capacity change from 0 to 1024 [ 203.593706][ T7521] loop3: detected capacity change from 0 to 32768 [ 203.596704][ T7547] loop1: detected capacity change from 0 to 4096 [ 203.663057][ T7521] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 203.837728][ T7521] XFS (loop3): Ending clean mount [ 203.962714][ T13] hfsplus: b-tree write err: -5, ino 4 [ 204.224460][ T5833] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 204.306556][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.658'. [ 204.465171][ T7567] erspan0: entered promiscuous mode [ 204.519870][ T5926] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 204.704617][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.729911][ T7576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.662'. [ 204.777502][ T7578] loop3: detected capacity change from 0 to 47 [ 204.779888][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.869801][ T5926] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 204.878970][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.016102][ T5926] usb 1-1: config 0 descriptor?? [ 205.070108][ T7583] loop2: detected capacity change from 0 to 256 [ 205.104195][ T7583] exfat: Deprecated parameter 'utf8' [ 205.192427][ T7583] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 205.552309][ T5926] razer 0003:1532:010E.000B: item fetching failed at offset 3/5 [ 205.580632][ T5926] razer 0003:1532:010E.000B: probe with driver razer failed with error -22 [ 205.633605][ T5837] udevd[5837]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 205.685192][ T5926] usb 1-1: USB disconnect, device number 6 [ 205.815423][ T6909] udevd[6909]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 206.047308][ T7601] loop4: detected capacity change from 0 to 64 [ 206.054754][ T5813] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 206.190425][ T7605] can0: slcan on ptm0. [ 206.219893][ T5813] usb 3-1: Using ep0 maxpacket: 8 [ 206.236179][ T5813] usb 3-1: config 0 has no interfaces? [ 206.248110][ T5813] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 206.278767][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.307851][ T5813] usb 3-1: config 0 descriptor?? [ 206.710257][ T7602] can0 (unregistered): slcan off ptm0. [ 207.121281][ T5813] usb 3-1: USB disconnect, device number 5 [ 207.304906][ T7628] pim6reg: entered allmulticast mode [ 207.327151][ T7628] pim6reg: left allmulticast mode [ 207.744670][ T7604] loop3: detected capacity change from 0 to 32768 [ 207.783327][ T7604] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.675 (7604) [ 207.829248][ T7637] loop0: detected capacity change from 0 to 1024 [ 207.887540][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.894012][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.969941][ T7604] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 207.994625][ T7604] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 208.030114][ T30] audit: type=1800 audit(1749903899.841:19): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.686" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 208.494132][ T7604] BTRFS info (device loop3): rebuilding free space tree [ 208.615164][ T7669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.691'. [ 208.736345][ T7604] BTRFS info (device loop3): disabling free space tree [ 208.806150][ T7604] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 208.890051][ T7604] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 209.375550][ T5833] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 209.460106][ T5813] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 209.539981][ T7684] loop1: detected capacity change from 0 to 256 [ 209.664565][ T5813] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 209.677575][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 209.729895][ T5813] usb 1-1: SerialNumber: syz [ 209.801003][ T5813] usb 1-1: config 0 descriptor?? [ 209.922915][ T7691] netlink: 'syz.2.701': attribute type 2 has an invalid length. [ 210.075501][ T7688] loop5: detected capacity change from 0 to 2048 [ 210.153825][ T7660] loop4: detected capacity change from 0 to 32768 [ 210.229891][ T5813] hackrf 1-1:0.0: Board ID: 00 [ 210.234725][ T5813] hackrf 1-1:0.0: Firmware version: [ 210.345039][ T5813] hackrf 1-1:0.0: Registered as swradio24 [ 210.385664][ T5813] videodev: could not get a free minor [ 210.461500][ T5813] hackrf 1-1:0.0: Failed to register as video device (-23) [ 210.502186][ T5813] hackrf 1-1:0.0: probe with driver hackrf failed with error -23 [ 210.539961][ T5813] usb 1-1: USB disconnect, device number 7 [ 210.559350][ T7700] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.691909][ T7702] loop3: detected capacity change from 0 to 16 [ 210.776564][ T7702] erofs (device loop3): mounted with root inode @ nid 36. [ 211.494211][ T7719] loop2: detected capacity change from 0 to 1024 [ 211.546549][ T7719] EXT4-fs: Ignoring removed bh option [ 211.571277][ T7719] EXT4-fs: inline encryption not supported [ 211.603746][ T7706] orangefs_mount: mount request failed with -4 [ 211.629088][ T7719] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 211.724500][ T7719] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 211.770157][ T7727] loop0: detected capacity change from 0 to 256 [ 211.813451][ T7719] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.708: lblock 2 mapped to illegal pblock 2 (length 1) [ 211.942114][ T7719] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 211.971072][ T7719] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.708: lblock 0 mapped to illegal pblock 48 (length 1) [ 212.004912][ T7719] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 212.066417][ T7719] EXT4-fs error (device loop2): ext4_acquire_dquot:6931: comm syz.2.708: Failed to acquire dquot type 0 [ 212.151170][ T7719] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 212.190149][ T7719] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.708: mark_inode_dirty error [ 212.266783][ T7719] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 212.302068][ T7719] EXT4-fs (loop2): 1 orphan inode deleted [ 212.344382][ T61] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 212.373297][ T7719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.418186][ T61] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 212.485236][ T61] EXT4-fs error (device loop2): ext4_release_dquot:6967: comm kworker/u8:5: Failed to release dquot type 0 [ 212.630228][ T7741] Bluetooth: MGMT ver 1.23 [ 212.785523][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.842219][ T5843] EXT4-fs error (device loop2): __ext4_get_inode_loc:4791: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 212.937170][ T5843] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 212.989640][ T5843] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 213.274426][ T7762] loop2: detected capacity change from 0 to 512 [ 213.308779][ T7758] loop4: detected capacity change from 0 to 2048 [ 213.347124][ T7762] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 213.386173][ T7758] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.448295][ T7762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.493723][ T7757] UDF-fs: warning (device loop4): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 0 lbcount: 512 extent 56+512 [ 213.518787][ T7762] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 213.818468][ T7771] loop1: detected capacity change from 0 to 2048 [ 213.864323][ T7771] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 213.911555][ T7774] loop0: detected capacity change from 0 to 512 [ 213.925152][ T7774] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 213.952351][ T7774] EXT4-fs (loop0): 1 truncate cleaned up [ 213.962202][ T7774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.989220][ T7778] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 214.181405][ T5997] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 214.272124][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.362030][ T5997] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.396009][ T5997] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 214.423366][ T5997] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 214.451064][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.473368][ T5997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.601014][ T5997] usb 4-1: config 0 descriptor?? [ 214.650582][ T5997] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 214.684098][ T5997] dvb-usb: bulk message failed: -22 (3/0) [ 214.794440][ T5997] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 214.852929][ T5997] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 214.880306][ T5997] usb 4-1: media controller created [ 214.948310][ T5997] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 215.051672][ T5997] dvb-usb: bulk message failed: -22 (6/0) [ 215.073270][ T5997] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 215.093688][ T5906] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 215.127527][ T5997] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 215.205610][ T5997] dvb-usb: schedule remote query interval to 150 msecs. [ 215.225091][ T5997] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 215.238874][ T5997] usb 4-1: USB disconnect, device number 6 [ 215.258059][ T7798] loop4: detected capacity change from 0 to 4096 [ 215.268455][ T7802] loop1: detected capacity change from 0 to 256 [ 215.287631][ T7802] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 215.317999][ T5906] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 4 [ 215.337123][ T7802] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 215.347724][ T5906] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.369526][ T5906] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 215.391722][ T5906] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 215.437859][ T7802] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 215.474191][ T5997] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 215.522642][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.587411][ T5906] usb 6-1: config 0 descriptor?? [ 215.654639][ T5906] usb-storage 6-1:0.0: USB Mass Storage device detected [ 215.762737][ T5906] usb-storage 6-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 215.952524][ T5906] usb 6-1: USB disconnect, device number 4 [ 216.061033][ T7812] loop1: detected capacity change from 0 to 1024 [ 216.081708][ T975] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 216.222580][ T7812] hfsplus: bad catalog entry type [ 216.249861][ T975] usb 3-1: Using ep0 maxpacket: 16 [ 216.292232][ T975] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 216.341501][ T975] usb 3-1: config 0 has no interface number 0 [ 216.347693][ T975] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 216.416136][ T975] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 216.485673][ T7820] loop4: detected capacity change from 0 to 256 [ 216.503932][ T59] hfsplus: b-tree write err: -5, ino 4 [ 216.504764][ T975] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 216.553846][ T975] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 216.584276][ T7820] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 216.594791][ T975] usb 3-1: Product: syz [ 216.599099][ T975] usb 3-1: SerialNumber: syz [ 216.641111][ T7820] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 216.680920][ T975] usb 3-1: config 0 descriptor?? [ 216.705711][ T7820] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 216.714259][ T975] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 216.845022][ T975] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input8 [ 216.989938][ T5997] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 217.000839][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 217.009374][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 217.018164][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 217.026823][ T921] usb 3-1: USB disconnect, device number 6 [ 217.027100][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 217.039598][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 217.118915][ T921] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 217.196768][ T5997] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.262245][ T5997] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 217.313425][ T5997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.354342][ T5997] usb 4-1: config 0 descriptor?? [ 217.478292][ T7840] netlink: 'syz.4.758': attribute type 10 has an invalid length. [ 217.662987][ T7840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.784023][ T7840] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 217.904756][ T5997] lenovo 0003:17EF:6047.000C: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 217.989869][ T7850] sock: sock_set_timeout: `syz.5.764' (pid 7850) tries to set negative timeout [ 218.100717][ T5997] lenovo 0003:17EF:6047.000C: Failed to switch F7/9/11 mode: -71 [ 218.139979][ T5997] lenovo 0003:17EF:6047.000C: Failed to switch middle button: -71 [ 218.160005][ T5997] lenovo 0003:17EF:6047.000C: Fn-lock setting failed: -71 [ 218.172535][ T5997] lenovo 0003:17EF:6047.000C: Sensitivity setting failed: -71 [ 218.210551][ T5997] usb 4-1: USB disconnect, device number 7 [ 218.354801][ T7851] fido_id[7851]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 218.623562][ T7865] netlink: 'syz.4.771': attribute type 1 has an invalid length. [ 218.909998][ T5997] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 219.091514][ T5997] usb 3-1: Using ep0 maxpacket: 16 [ 219.113629][ T5997] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.143992][ T5997] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.163062][ T5926] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 219.164890][ T5997] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 219.228838][ T5997] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 219.254663][ T5997] usb 3-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 219.290312][ T5997] usb 3-1: config 7 interface 0 has no altsetting 0 [ 219.308327][ T5997] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 219.327675][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 219.330980][ T5997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.346274][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.384732][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.406692][ T5926] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 219.459980][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.505657][ T5926] usb 4-1: config 0 descriptor?? [ 219.611622][ T7892] loop0: detected capacity change from 0 to 256 [ 219.908557][ T5997] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.0/0003:0458:5010.000D/input/input9 [ 219.953331][ T7894] netlink: 20 bytes leftover after parsing attributes in process `syz.4.785'. [ 219.994200][ T5926] gt683r_led 0003:1770:FF00.000E: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.3-1/input0 [ 220.192301][ T7901] loop1: detected capacity change from 0 to 128 [ 220.206837][ T5926] usb 4-1: USB disconnect, device number 8 [ 220.214659][ T7901] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 220.248839][ T5906] gt683r_led 0003:1770:FF00.000E: failed to send set report request: -19 [ 220.306106][ T7901] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512) [ 220.346282][ T7901] FAT-fs (loop1): Filesystem has been set read-only [ 220.350787][ T5997] kye 0003:0458:5010.000D: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 220.434021][ T5997] usb 3-1: USB disconnect, device number 7 [ 220.553455][ T7902] fido_id[7902]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 220.710071][ T7905] loop4: detected capacity change from 0 to 4096 [ 220.760263][ T7905] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 220.892305][ T7905] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 220.925726][ T7905] ntfs3(loop4): Failed to load $Extend (-22). [ 220.948140][ T7905] ntfs3(loop4): Failed to initialize $Extend. [ 220.989430][ T7915] loop2: detected capacity change from 0 to 64 [ 221.071239][ T5926] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 221.247857][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 221.295867][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 221.361466][ T7917] fido_id[7917]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 221.392725][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 221.450612][ T5926] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 221.486627][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.536646][ T5926] usb 2-1: config 0 descriptor?? [ 221.602056][ T7911] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 221.692029][ T7922] loop4: detected capacity change from 0 to 1024 [ 221.744863][ T7922] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.865058][ T7899] loop0: detected capacity change from 0 to 32768 [ 221.935248][ T7922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.038435][ T5926] aureal 0003:0755:2626.000F: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 222.083442][ T7899] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 222.107286][ T5926] aureal 0003:0755:2626.000F: unknown main item tag 0x6 [ 222.146154][ T5926] aureal 0003:0755:2626.000F: report_id 29495 is invalid [ 222.190945][ T7899] (syz.0.786,7899,0):ocfs2_check_dir_entry:321 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 222.221939][ T5926] aureal 0003:0755:2626.000F: item 0 2 1 8 parsing failed [ 222.238282][ T7935] loop5: detected capacity change from 0 to 2048 [ 222.257349][ T5926] aureal 0003:0755:2626.000F: probe with driver aureal failed with error -22 [ 222.333281][ T5926] usb 2-1: USB disconnect, device number 5 [ 222.361348][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.406241][ T7935] EXT4-fs (loop5): failed to initialize system zone (-117) [ 222.471041][ T7935] EXT4-fs (loop5): mount failed [ 222.632343][ T5839] ocfs2: Unmounting device (7,0) on (node local) [ 223.224940][ T7953] syz.4.807 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 223.765125][ T7964] loop4: detected capacity change from 0 to 1024 [ 223.812356][ T7964] EXT4-fs: Ignoring removed nobh option [ 223.855254][ T7964] EXT4-fs: Ignoring removed bh option [ 223.922566][ T7964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.049582][ T7969] loop3: detected capacity change from 0 to 4096 [ 224.059529][ T7969] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 224.070224][ T975] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 224.115050][ T7964] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4112: comm syz.4.811: Allocating blocks 257-513 which overlap fs metadata [ 224.240039][ T975] usb 6-1: Using ep0 maxpacket: 32 [ 224.281348][ T975] usb 6-1: unable to get BOS descriptor or descriptor too short [ 224.294871][ T975] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 224.341543][ T975] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 224.403711][ T975] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 224.439517][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.448853][ T975] usb 6-1: config 128 has no interface number 0 [ 224.481641][ T975] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 224.551158][ T975] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.611504][ T975] usb 6-1: config 128 interface 127 has no altsetting 0 [ 224.647702][ T975] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 224.672769][ T7978] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 224.702716][ T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.772194][ T7980] loop0: detected capacity change from 0 to 64 [ 224.781149][ T975] usb 6-1: Product: syz [ 224.785370][ T975] usb 6-1: Manufacturer: syz [ 224.817571][ T975] usb 6-1: SerialNumber: syz [ 224.916986][ T7980] hfs: unable to locate alternate MDB [ 224.968057][ T7980] hfs: continuing without an alternate MDB [ 225.311797][ T975] usb 6-1: USB disconnect, device number 5 [ 225.472899][ T7597] udevd[7597]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.828530][ T7995] loop0: detected capacity change from 0 to 64 [ 225.920895][ T5997] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 226.109844][ T5997] usb 3-1: Using ep0 maxpacket: 32 [ 226.136626][ T5997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.200022][ T5997] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.267212][ T5997] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.338311][ T5997] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 226.381235][ T8001] loop1: detected capacity change from 0 to 32768 [ 226.449389][ T5997] usb 3-1: config 0 interface 0 has no altsetting 0 [ 226.488563][ T5997] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 226.503644][ T8001] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 226.503697][ T8001] allowing incompatible features above 0.0: (unknown version) [ 226.503719][ T8001] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 226.548150][ T5997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.553943][ T8001] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 226.570359][ T8001] bcachefs (loop1): initializing new filesystem [ 226.592469][ T8001] bcachefs (loop1): going read-write [ 226.683614][ T5997] usb 3-1: config 0 descriptor?? [ 226.787564][ T8001] bcachefs (loop1): marking superblocks [ 226.818100][ T8001] bcachefs (loop1): initializing freespace [ 226.834952][ T8001] bcachefs (loop1): done initializing freespace [ 226.847343][ T8001] bcachefs (loop1): reading snapshots table [ 226.853799][ T8001] bcachefs (loop1): reading snapshots done [ 226.915693][ T8001] bcachefs (loop1): done starting filesystem [ 227.142116][ T5997] hid-thrustmaster 0003:044F:B65D.0010: item fetching failed at offset 1/5 [ 227.158982][ T5997] hid-thrustmaster 0003:044F:B65D.0010: parse failed with error -22 [ 227.168249][ T5997] hid-thrustmaster 0003:044F:B65D.0010: probe with driver hid-thrustmaster failed with error -22 [ 227.328760][ T5829] bcachefs (loop1): shutting down [ 227.348398][ T5829] bcachefs (loop1): going read-only [ 227.357241][ T24] usb 3-1: USB disconnect, device number 8 [ 227.377816][ T5829] bcachefs (loop1): finished waiting for writes to stop [ 227.548657][ T5829] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 227.750773][ T5829] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 227.820862][ T5829] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 227.844073][ T5829] bcachefs (loop1): marking filesystem clean [ 228.308367][ T5829] bcachefs (loop1): shutdown complete [ 228.476808][ T8049] loop5: detected capacity change from 0 to 164 [ 228.556979][ T8049] rock: directory entry would overflow storage [ 228.577524][ T8049] rock: sig=0x66, size=4, remaining=3 [ 228.711152][ T8046] loop0: detected capacity change from 0 to 4096 [ 228.922186][ T8046] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 229.552975][ T8069] loop4: detected capacity change from 0 to 1024 [ 229.568632][ T8069] EXT4-fs: Ignoring removed orlov option [ 229.651903][ T8069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.032645][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.056813][ T8078] loop2: detected capacity change from 0 to 1024 [ 230.087831][ T8078] EXT4-fs: Ignoring removed orlov option [ 230.176814][ T8078] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.340605][ T8078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.446419][ T8086] loop4: detected capacity change from 0 to 1024 [ 230.563551][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.591189][ T8086] hfsplus: bad catalog entry type [ 230.865244][ T13] hfsplus: b-tree write err: -5, ino 4 [ 230.949618][ T8066] loop5: detected capacity change from 0 to 32768 [ 231.279161][ T8099] mkiss: ax0: crc mode is auto. [ 231.457153][ T8105] usb usb8: usbfs: process 8105 (syz.0.871) did not claim interface 0 before use [ 231.856162][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.873'. [ 231.865881][ T8108] loop3: detected capacity change from 0 to 64 [ 232.740197][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 232.876210][ T8127] netlink: 24 bytes leftover after parsing attributes in process `syz.1.837'. [ 232.897124][ T8103] loop2: detected capacity change from 0 to 32768 [ 232.948018][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 232.973501][ T24] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 233.031540][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.056721][ T24] usb 4-1: Product: syz [ 233.092025][ T24] usb 4-1: Manufacturer: syz [ 233.096736][ T8103] [ 233.096736][ T8103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.096736][ T8103] [ 233.122205][ T24] usb 4-1: SerialNumber: syz [ 233.151939][ T24] usb 4-1: config 0 descriptor?? [ 233.200566][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 233.235402][ T30] audit: type=1800 audit(1749903925.021:20): pid=8103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.870" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 233.274867][ T24] usb 4-1: setting power ON [ 233.302182][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 233.355006][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 233.358525][ T8103] [ 233.358525][ T8103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.358525][ T8103] [ 233.423671][ T8119] dvb-usb: bulk message failed: -22 (3/0) [ 233.435961][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 233.451777][ T8103] [ 233.451777][ T8103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.451777][ T8103] [ 233.490114][ T8119] cxusb: i2c wr: len=80 is too big! [ 233.490114][ T8119] [ 233.505052][ T24] usb 4-1: media controller created [ 233.537997][ T8103] [ 233.537997][ T8103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.537997][ T8103] [ 233.624119][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 233.645015][ T8103] [ 233.645015][ T8103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.645015][ T8103] [ 233.672162][ T8140] program syz.4.887 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.738068][ T24] usb 4-1: selecting invalid altsetting 6 [ 233.760546][ T24] usb 4-1: digital interface selection failed (-22) [ 233.785448][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 233.825589][ T24] usb 4-1: setting power OFF [ 233.840498][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 233.864650][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 233.889866][ T921] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 233.897546][ T5843] [ 233.897546][ T5843] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.897546][ T5843] [ 233.912030][ T24] (NULL device *): no alternate interface [ 233.972247][ T5843] [ 233.972247][ T5843] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.972247][ T5843] [ 234.043444][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 234.075605][ T24] usb 4-1: USB disconnect, device number 9 [ 234.113498][ T921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 234.181503][ T921] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 234.229793][ T921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 234.300216][ T921] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 234.345525][ T921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.365734][ T921] usb 2-1: Product: syz [ 234.379752][ T921] usb 2-1: Manufacturer: syz [ 234.387564][ T8147] loop0: detected capacity change from 0 to 4096 [ 234.404251][ T921] usb 2-1: SerialNumber: syz [ 234.441666][ T921] usb 2-1: config 0 descriptor?? [ 234.452391][ T8141] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 234.487273][ T8141] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 234.496556][ T8153] loop3: detected capacity change from 0 to 64 [ 234.497286][ T8147] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 234.532026][ T921] usb 2-1: ucan: probing device on interface #0 [ 235.134018][ T921] ucan 2-1:0.0: probe with driver ucan failed with error -71 [ 235.191573][ T921] usb 2-1: USB disconnect, device number 6 [ 235.415888][ T8167] loop5: detected capacity change from 0 to 1024 [ 235.501407][ T5926] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 235.518788][ T8167] syz.5.900: attempt to access beyond end of device [ 235.518788][ T8167] loop5: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 235.671225][ T5926] usb 3-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00 [ 235.725044][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.792289][ T5926] usb 3-1: config 0 descriptor?? [ 235.892150][ T8171] loop3: detected capacity change from 0 to 8192 [ 236.011191][ T8171] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 236.120813][ T30] audit: type=1800 audit(1749903927.931:21): pid=8171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.902" name="file1" dev="loop3" ino=1048668 res=0 errno=0 [ 236.154586][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.907'. [ 236.218653][ T8178] loop5: detected capacity change from 0 to 4096 [ 236.255165][ T5926] ntrig 0003:1B96:0003.0011: item fetching failed at offset 2/5 [ 236.267769][ T8178] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 236.284217][ T5926] ntrig 0003:1B96:0003.0011: parse failed [ 236.327712][ T5926] ntrig 0003:1B96:0003.0011: probe with driver ntrig failed with error -22 [ 236.472102][ T24] usb 3-1: USB disconnect, device number 9 [ 236.478375][ T8178] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 236.517409][ T8178] ntfs3(loop5): Failed to load $Extend (-22). [ 236.556700][ T8178] ntfs3(loop5): Failed to initialize $Extend. [ 236.723430][ T8188] loop1: detected capacity change from 0 to 4096 [ 236.783526][ T8188] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 236.815492][ T8188] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 236.916092][ T8195] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 237.331884][ T8201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.916'. [ 238.019115][ T8211] loop1: detected capacity change from 0 to 4096 [ 238.049274][ T8214] loop5: detected capacity change from 0 to 4096 [ 238.227855][ T8221] loop3: detected capacity change from 0 to 1024 [ 238.501930][ T8190] loop4: detected capacity change from 0 to 32768 [ 238.597006][ T59] hfsplus: b-tree write err: -5, ino 4 [ 238.729871][ T8214] EXT4-fs (loop5): Test dummy encryption mode enabled [ 238.782049][ T8214] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a042c018, mo2=0003] [ 238.837083][ T8214] System zones: 0-5 [ 238.922767][ T8214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.084537][ T8230] loop1: detected capacity change from 0 to 2048 [ 239.106410][ T8214] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 239.164926][ T8230] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.276619][ T8230] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (24) [ 239.320940][ T8214] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 239.428369][ T8231] loop3: detected capacity change from 0 to 4096 [ 239.494644][ T8214] overlayfs: conflicting lowerdir path [ 239.959309][ T8222] loop2: detected capacity change from 0 to 32768 [ 240.023500][ T8234] loop4: detected capacity change from 0 to 65536 [ 240.162329][ T8234] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 240.173422][ T8234] XFS (loop4): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 240.189650][ T8222] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 240.320107][ T61] (kworker/u8:5,61,1):ocfs2_check_dir_entry:321 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=348545186005064, rec_len=0, name_len=1 [ 240.404107][ T8234] XFS (loop4): Metadata corruption detected at xfs_btree_agblock_verify+0xb8/0x4a0, xfs_inobt block 0x8 [ 240.414152][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.416935][ T8234] XFS (loop4): Unmount and run xfs_repair [ 240.430479][ T8222] (syz.2.925,8222,1):ocfs2_check_dir_entry:321 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=348545186005064, rec_len=0, name_len=1 [ 240.432920][ T8234] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 240.457829][ T8234] 00000000: 49 41 42 33 00 00 02 00 00 00 ff ff ff ff ff ff IAB3............ [ 240.468187][ T8234] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 240.478528][ T8234] 00000020: 66 53 b9 71 41 ab 48 0a bd 7b 5f f7 9b 94 09 b5 fS.qA.H..{_..... [ 240.488891][ T8234] 00000030: 00 00 00 00 2e 52 67 75 00 00 00 40 00 00 40 37 .....Rgu...@..@7 [ 240.500162][ T8225] loop0: detected capacity change from 0 to 32768 [ 240.510640][ T8234] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 240.519558][ T8234] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 240.530210][ T8234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 240.539135][ T8234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 240.550598][ T8234] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x23f/0x4f0" at daddr 0x8 len 2 error 117 [ 240.562230][ T8234] XFS (loop4): Failed to read root inode 0x40, error 117 [ 240.563675][ T8222] (syz.2.925,8222,1):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2 [ 240.569971][ T8234] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair. [ 240.611362][ T8222] (syz.2.925,8222,0):__ocfs2_prepare_orphan_dir:2180 ERROR: status = -2 [ 240.655747][ T8225] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 240.679924][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 240.681290][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 240.689910][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 240.693609][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 240.785829][ T8222] (syz.2.925,8222,1):ocfs2_prepare_orphan_dir:2224 ERROR: status = -2 [ 240.851834][ T8222] (syz.2.925,8222,0):ocfs2_prepare_orphan_dir:2240 ERROR: status = -2 [ 240.926332][ T8222] (syz.2.925,8222,1):ocfs2_unlink:964 ERROR: status = -2 [ 241.032890][ T8225] XFS (loop0): Ending clean mount [ 241.251474][ T5843] ocfs2: Unmounting device (7,2) on (node local) [ 241.413129][ T8262] netlink: 806 bytes leftover after parsing attributes in process `syz.3.933'. [ 241.535581][ T5839] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 242.026490][ T8274] loop4: detected capacity change from 0 to 128 [ 242.132497][ T8274] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 242.263896][ T8274] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.447096][ T8281] loop2: detected capacity change from 0 to 256 [ 242.575237][ T8281] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d) [ 242.776700][ T30] audit: type=1800 audit(1749903934.571:22): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.936" name="file1" dev="loop2" ino=1048669 res=0 errno=0 [ 243.121496][ T8289] loop5: detected capacity change from 0 to 2048 [ 243.183564][ T8289] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 243.323573][ T8293] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.375736][ T8297] loop2: detected capacity change from 0 to 256 [ 243.395331][ T8266] loop1: detected capacity change from 0 to 32768 [ 243.421992][ T8291] loop4: detected capacity change from 0 to 4096 [ 243.526673][ T8266] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 243.559121][ T8297] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 243.981732][ T5829] (syz-executor,5829,0):ocfs2_inode_is_valid_to_delete:885 ERROR: Skipping delete of system file 72 [ 244.008884][ T8306] loop0: detected capacity change from 0 to 64 [ 244.054657][ T5829] ocfs2: Unmounting device (7,1) on (node local) [ 244.151258][ T5926] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 244.313230][ T5926] usb 6-1: Using ep0 maxpacket: 8 [ 244.344838][ T5926] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 244.364466][ T5926] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 244.401193][ T5926] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 244.414971][ T5926] usb 6-1: Product: syz [ 244.419182][ T5926] usb 6-1: Manufacturer: syz [ 244.492636][ T5926] usb 6-1: SerialNumber: syz [ 244.738817][ T8318] loop3: detected capacity change from 0 to 64 [ 244.773598][ T5926] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 244.820180][ T5926] usb 6-1: Handspring Visor / Palm OS: port 109, is for unknown use [ 244.828207][ T5926] usb 6-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 244.905491][ T5926] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 244.976154][ T5926] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 245.016190][ T8322] loop0: detected capacity change from 0 to 8 [ 245.031934][ T5926] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 245.079440][ T8324] loop2: detected capacity change from 0 to 16 [ 245.090509][ T5926] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 245.128472][ T8322] SQUASHFS error: Failed to read block 0x2d7: -5 [ 245.142636][ T8324] erofs (device loop2): mounted with root inode @ nid 36. [ 245.167969][ T8322] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 245.192349][ T975] usb 6-1: USB disconnect, device number 6 [ 245.205951][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.965'. [ 245.253917][ T975] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 245.302830][ T975] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 245.388112][ T975] visor 6-1:1.0: device disconnected [ 246.341777][ T8351] loop4: detected capacity change from 0 to 1024 [ 246.390839][ T8352] loop2: detected capacity change from 0 to 1024 [ 246.439332][ T8351] hfsplus: bad catalog entry type [ 246.589926][ T8359] netlink: 'syz.1.979': attribute type 5 has an invalid length. [ 246.627864][ T8354] loop0: detected capacity change from 0 to 4096 [ 246.698712][ T61] hfsplus: b-tree write err: -5, ino 4 [ 246.834120][ T8363] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.859190][ T13] hfsplus: b-tree write err: -5, ino 4 [ 246.881225][ T921] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 247.087075][ T921] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.131517][ T921] usb 6-1: config 0 interface 0 has no altsetting 0 [ 247.193262][ T921] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 247.216992][ T921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.288769][ T921] usb 6-1: Product: syz [ 247.301372][ T921] usb 6-1: Manufacturer: syz [ 247.316432][ T921] usb 6-1: SerialNumber: syz [ 247.441368][ T921] usb 6-1: config 0 descriptor?? [ 247.485492][ T921] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 247.616434][ T921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 247.671929][ T921] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 247.731152][ T921] usb 6-1: media controller created [ 247.840582][ T921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 248.033184][ T8384] loop1: detected capacity change from 0 to 8 [ 248.110476][ T921] DVB: Unable to find symbol tda10046_attach() [ 248.126883][ T921] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 248.164904][ T921] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 248.165795][ T8387] netlink: 24 bytes leftover after parsing attributes in process `syz.0.991'. [ 248.262407][ T8384] SQUASHFS error: xz decompression failed, data probably corrupt [ 248.286426][ T8384] SQUASHFS error: Failed to read block 0xa8: -5 [ 248.329495][ T8384] SQUASHFS error: xz decompression failed, data probably corrupt [ 248.339048][ T8384] SQUASHFS error: Failed to read block 0xa8: -5 [ 248.371695][ T30] audit: type=1800 audit(1749903940.181:23): pid=8384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.990" name="file0" dev="loop1" ino=3 res=0 errno=0 [ 248.435805][ T921] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 248.496560][ T921] usb 6-1: USB disconnect, device number 7 [ 248.597723][ T8390] loop0: detected capacity change from 0 to 64 [ 249.493218][ T8405] loop3: detected capacity change from 0 to 2048 [ 249.575826][ T8405] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 249.736353][ T8416] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 249.883180][ T8418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1005'. [ 250.047473][ T8422] loop2: detected capacity change from 0 to 8 [ 250.196912][ T8427] loop4: detected capacity change from 0 to 64 [ 250.273303][ T8422] SQUASHFS error: xz decompression failed, data probably corrupt [ 250.331366][ T8422] SQUASHFS error: Failed to read block 0xa8: -5 [ 250.454722][ T8422] SQUASHFS error: xz decompression failed, data probably corrupt [ 250.482054][ T8422] SQUASHFS error: Failed to read block 0xa8: -5 [ 250.501944][ T30] audit: type=1800 audit(1749903942.311:24): pid=8422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1008" name="file0" dev="loop2" ino=3 res=0 errno=0 [ 251.027355][ T921] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 251.253802][ T921] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.291139][ T921] usb 5-1: config 0 interface 0 has no altsetting 0 [ 251.367596][ T921] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 251.398499][ T921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.451883][ T921] usb 5-1: Product: syz [ 251.476467][ T921] usb 5-1: Manufacturer: syz [ 251.496112][ T921] usb 5-1: SerialNumber: syz [ 251.534374][ T921] usb 5-1: config 0 descriptor?? [ 251.575566][ T921] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 251.606023][ T921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 251.637316][ T921] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 251.658930][ T8447] loop2: detected capacity change from 0 to 4096 [ 251.673756][ T921] usb 5-1: media controller created [ 251.779962][ T8451] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 251.825181][ T921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.273725][ T921] DVB: Unable to find symbol tda10046_attach() [ 252.303622][ T921] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 252.346049][ T921] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 252.415485][ T8465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1024'. [ 252.463520][ T8461] loop5: detected capacity change from 0 to 2048 [ 252.522485][ T8461] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 252.617103][ T921] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 252.634850][ T8466] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 252.704254][ T921] usb 5-1: USB disconnect, device number 6 [ 252.863974][ T8471] loop2: detected capacity change from 0 to 64 [ 253.277643][ T8478] loop5: detected capacity change from 0 to 8 [ 253.455465][ T8478] SQUASHFS error: xz decompression failed, data probably corrupt [ 253.495413][ T8478] SQUASHFS error: Failed to read block 0xa8: -5 [ 253.649263][ T8478] SQUASHFS error: xz decompression failed, data probably corrupt [ 253.689327][ T8478] SQUASHFS error: Failed to read block 0xa8: -5 [ 253.732150][ T30] audit: type=1800 audit(1749903945.541:25): pid=8478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1028" name="file0" dev="loop5" ino=3 res=0 errno=0 [ 254.428453][ T8498] loop5: detected capacity change from 0 to 4096 [ 254.486907][ T8499] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 255.192100][ T8510] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1041'. [ 255.305709][ T8513] loop3: detected capacity change from 0 to 64 [ 255.406308][ T8514] loop2: detected capacity change from 0 to 2048 [ 255.492465][ T8514] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 255.671953][ T8523] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 255.821518][ T5906] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 255.997008][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.047900][ T5906] usb 2-1: config 0 interface 0 has no altsetting 0 [ 256.074456][ T5906] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 256.101172][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.155949][ T5906] usb 2-1: Product: syz [ 256.181601][ T5906] usb 2-1: Manufacturer: syz [ 256.218973][ T5906] usb 2-1: SerialNumber: syz [ 256.271029][ T5906] usb 2-1: config 0 descriptor?? [ 256.304425][ T5906] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 256.372152][ T5906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 256.417180][ T8534] loop3: detected capacity change from 0 to 8 [ 256.438933][ T5906] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 256.459143][ T5906] usb 2-1: media controller created [ 256.570028][ T921] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 256.574304][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.632368][ T8534] SQUASHFS error: xz decompression failed, data probably corrupt [ 256.676929][ T8534] SQUASHFS error: Failed to read block 0xa8: -5 [ 256.727512][ T8534] SQUASHFS error: xz decompression failed, data probably corrupt [ 256.743711][ T921] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 256.755284][ T8534] SQUASHFS error: Failed to read block 0xa8: -5 [ 256.774741][ T921] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 256.786673][ T30] audit: type=1800 audit(1749903948.581:26): pid=8534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1053" name="file0" dev="loop3" ino=3 res=0 errno=0 [ 256.803767][ T5906] DVB: Unable to find symbol tda10046_attach() [ 256.824317][ T921] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 256.846598][ T921] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 256.865141][ T921] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 256.883426][ T921] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 256.887247][ T5906] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 256.912188][ T5906] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 256.928445][ T921] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 256.939664][ T921] usb 3-1: Product: syz [ 256.955372][ T921] usb 3-1: Manufacturer: syz [ 257.007810][ T921] cdc_wdm 3-1:1.0: skipping garbage [ 257.038343][ T921] cdc_wdm 3-1:1.0: skipping garbage [ 257.091461][ T921] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 257.097425][ T921] cdc_wdm 3-1:1.0: Unknown control protocol [ 257.171606][ T5906] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 257.213581][ T921] usb 3-1: USB disconnect, device number 10 [ 257.226730][ T5906] usb 2-1: USB disconnect, device number 7 [ 258.267763][ T8552] loop3: detected capacity change from 0 to 4096 [ 258.326081][ T8555] loop0: detected capacity change from 0 to 256 [ 258.428031][ T8559] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 258.487673][ T8555] FAT-fs (loop0): Directory bread(block 64) failed [ 258.531359][ T8555] FAT-fs (loop0): Directory bread(block 65) failed [ 258.567267][ T8555] FAT-fs (loop0): Directory bread(block 66) failed [ 258.599093][ T8555] FAT-fs (loop0): Directory bread(block 67) failed [ 258.664595][ T8562] loop1: detected capacity change from 0 to 2048 [ 258.682518][ T8555] FAT-fs (loop0): Directory bread(block 68) failed [ 258.718685][ T8555] FAT-fs (loop0): Directory bread(block 69) failed [ 258.736936][ T8562] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 258.774856][ T8555] FAT-fs (loop0): Directory bread(block 70) failed [ 258.845243][ T8555] FAT-fs (loop0): Directory bread(block 71) failed [ 258.864741][ T8555] FAT-fs (loop0): Directory bread(block 72) failed [ 258.906436][ T8555] FAT-fs (loop0): Directory bread(block 73) failed [ 258.912797][ T6909] udevd[6909]: incorrect nilfs2 checksum on /dev/loop1 [ 258.948421][ T8569] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 259.115873][ T5926] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 259.318037][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.367241][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.398061][ T5926] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 259.466602][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.532469][ T5926] usb 5-1: config 0 descriptor?? [ 259.721505][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 259.871224][ T921] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 259.892306][ T24] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 259.907782][ T24] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 259.941201][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 259.961245][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 259.988165][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 259.993349][ T5926] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 260.023540][ T24] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 260.034769][ T24] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 260.046300][ T921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.057544][ T5926] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 260.077552][ T5926] pyra 0003:1E7D:2CF6.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 260.086915][ T24] usb 6-1: Product: syz [ 260.106076][ T921] usb 1-1: config 0 interface 0 has no altsetting 0 [ 260.116168][ T24] usb 6-1: Manufacturer: syz [ 260.162266][ T921] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 260.193109][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 260.202222][ T5926] pyra 0003:1E7D:2CF6.0012: couldn't init struct pyra_device [ 260.203044][ T921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.232767][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 260.238397][ T5926] pyra 0003:1E7D:2CF6.0012: couldn't install mouse [ 260.326580][ T24] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 260.327407][ T5926] pyra 0003:1E7D:2CF6.0012: probe with driver pyra failed with error -71 [ 260.335330][ T921] usb 1-1: Product: syz [ 260.358595][ T24] cdc_wdm 6-1:1.0: Unknown control protocol [ 260.377822][ T921] usb 1-1: Manufacturer: syz [ 260.424721][ T5926] usb 5-1: USB disconnect, device number 7 [ 260.441668][ T921] usb 1-1: SerialNumber: syz [ 260.473535][ T921] usb 1-1: config 0 descriptor?? [ 260.561446][ T921] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 260.566725][ T8581] fido_id[8581]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:1E7D:2CF6.0012/report_descriptor': No such file or directory [ 260.593816][ T24] usb 6-1: USB disconnect, device number 8 [ 260.675020][ T921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 260.728698][ T921] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 260.762323][ T921] usb 1-1: media controller created [ 260.878949][ T921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 260.925777][ T8588] loop1: detected capacity change from 0 to 2048 [ 261.011401][ T8588] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.023362][ T8590] loop4: detected capacity change from 0 to 512 [ 261.048062][ T8590] EXT4-fs: Ignoring removed i_version option [ 261.143812][ T8590] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 261.236705][ T8590] EXT4-fs (loop4): 1 truncate cleaned up [ 261.296050][ T8590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.345229][ T921] DVB: Unable to find symbol tda10046_attach() [ 261.421485][ T921] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 261.461217][ T921] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 261.717000][ T921] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 261.752781][ T5831] EXT4-fs warning (device loop4): ext4_xattr_inode_create:1468: refuse to create EA inode when umounting [ 261.774001][ T921] usb 1-1: USB disconnect, device number 8 [ 261.801870][ T5831] ------------[ cut here ]------------ [ 261.807359][ T5831] WARNING: CPU: 1 PID: 5831 at fs/ext4/xattr.c:1470 ext4_xattr_inode_lookup_create+0x118e/0x1950 [ 261.818030][ T5831] Modules linked in: [ 261.823811][ T5831] CPU: 1 UID: 0 PID: 5831 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 261.837512][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.849031][ T5831] RIP: 0010:ext4_xattr_inode_lookup_create+0x118e/0x1950 [ 261.857561][ T5831] Code: f8 9c 97 ff e9 4e f6 ff ff e8 4e c2 31 ff 48 c7 c1 40 fa c7 8b ba bc 05 00 00 4c 89 e7 48 c7 c6 00 02 c8 8b e8 d3 dc fd ff 90 <0f> 0b 90 48 c7 c3 ea ff ff ff e8 23 c2 31 ff 48 8b 95 08 ff ff ff [ 261.878710][ T5831] RSP: 0018:ffffc90003427468 EFLAGS: 00010286 [ 261.886336][ T5831] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff819b00b9 [ 261.896790][ T5831] RDX: ffff8880285f8000 RSI: ffffffff82883781 RDI: 0000000000000005 [ 261.907160][ T5831] RBP: ffffc900034275c8 R08: 0000000000000005 R09: 0000000000000000 [ 261.916802][ T5831] R10: 0000000080000000 R11: 0000000000000001 R12: ffff88807e3ac000 [ 261.926220][ T5831] R13: ffff8880490702a4 R14: ffff888077314588 R15: ffff888077314588 [ 261.935667][ T5831] FS: 000055558d5cf500(0000) GS:ffff88812485a000(0000) knlGS:0000000000000000 [ 261.946067][ T5831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.954005][ T5831] CR2: 00007f1cbdbb7bac CR3: 000000005971a000 CR4: 0000000000350ef0 [ 261.963524][ T5831] Call Trace: [ 261.966824][ T5831] [ 261.971146][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.976840][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.984287][ T5831] ? find_held_lock+0x2b/0x80 [ 261.989021][ T5831] ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10 [ 261.997119][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.005288][ T5831] ? const_folio_flags+0x5b/0x100 [ 262.012564][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.018262][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.025298][ T5831] ? __lock_acquire+0xb8a/0x1c90 [ 262.031719][ T5831] ext4_xattr_block_set+0x818/0x3650 [ 262.037079][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.044235][ T5831] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 262.051478][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.057176][ T5831] ? check_xattrs+0x10a/0xba0 [ 262.063343][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.069025][ T5831] ? xattr_find_entry+0x2c9/0x3a0 [ 262.075524][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.082619][ T5831] ? ext4_xattr_block_find+0x59/0x430 [ 262.088057][ T5831] ext4_expand_extra_isize_ea+0x143d/0x1ab0 [ 262.094611][ T5831] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 262.101961][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.108456][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.114266][ T5831] ? dquot_initialize_needed+0x183/0x2a0 [ 262.121392][ T5831] __ext4_expand_extra_isize+0x346/0x480 [ 262.127108][ T5831] __ext4_mark_inode_dirty+0x544/0x870 [ 262.134056][ T5831] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 262.141521][ T5831] ? __pfx___might_resched+0x10/0x10 [ 262.146875][ T5831] ? ext4_journal_check_start+0x22b/0x340 [ 262.154073][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.161139][ T5831] ? __ext4_journal_start_sb+0x19e/0x690 [ 262.166823][ T5831] ? ext4_dirty_inode+0xa1/0x130 [ 262.173247][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.178933][ T5831] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 262.185658][ T5831] ext4_dirty_inode+0xd9/0x130 [ 262.191903][ T5831] ? rcu_is_watching+0x12/0xc0 [ 262.196718][ T5831] __mark_inode_dirty+0x1ee/0xe50 [ 262.204280][ T5831] iput+0xb7/0x880 [ 262.208906][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.215521][ T8604] loop1: detected capacity change from 0 to 4096 [ 262.223778][ T5831] dentry_unlink_inode+0x29c/0x480 [ 262.228953][ T5831] __dentry_kill+0x1d0/0x600 [ 262.235037][ T5831] ? shrink_dentry_list+0x11a/0x5d0 [ 262.241688][ T5831] shrink_dentry_list+0x140/0x5d0 [ 262.246822][ T5831] ? shrink_dcache_parent+0x22/0x530 [ 262.253611][ T5831] shrink_dcache_parent+0xe1/0x530 [ 262.258805][ T5831] ? __pfx_shrink_dcache_parent+0x10/0x10 [ 262.266037][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.273180][ T5831] shrink_dcache_for_umount+0xa5/0x3e0 [ 262.278688][ T5831] ? lockdep_hardirqs_on+0x7c/0x110 [ 262.285503][ T5831] generic_shutdown_super+0x6c/0x390 [ 262.292254][ T5831] kill_block_super+0x3b/0x90 [ 262.297009][ T5831] ext4_kill_sb+0x6a/0xb0 [ 262.302814][ T5831] deactivate_locked_super+0xc1/0x1a0 [ 262.309308][ T5831] deactivate_super+0xde/0x100 [ 262.316373][ T5831] cleanup_mnt+0x225/0x450 [ 262.322264][ T5831] task_work_run+0x150/0x240 [ 262.326909][ T5831] ? __pfx_task_work_run+0x10/0x10 [ 262.333486][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.339192][ T5831] ? __pfx___x64_sys_umount+0x10/0x10 [ 262.346053][ T5831] exit_to_user_mode_loop+0xeb/0x110 [ 262.352855][ T5831] do_syscall_64+0x3f6/0x4c0 [ 262.357505][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.364988][ T5831] RIP: 0033:0x7f5d44f8fc57 [ 262.369441][ T5831] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 262.390629][ T5831] RSP: 002b:00007ffd2374a0b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 262.397294][ T8607] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 262.399064][ T5831] RAX: 0000000000000000 RBX: 00007f5d45010925 RCX: 00007f5d44f8fc57 [ 262.419173][ T5831] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd2374a170 [ 262.426573][ T8606] loop3: detected capacity change from 0 to 256 [ 262.428145][ T5831] RBP: 00007ffd2374a170 R08: 0000000000000000 R09: 0000000000000000 [ 262.443075][ T5831] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd2374b200 [ 262.452558][ T5831] R13: 00007f5d45010925 R14: 000000000003fdca R15: 00007ffd2374b240 [ 262.462134][ T5831] [ 262.465183][ T5831] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 262.472490][ T5831] CPU: 1 UID: 0 PID: 5831 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 262.484688][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 262.494778][ T5831] Call Trace: [ 262.498084][ T5831] [ 262.501046][ T5831] dump_stack_lvl+0x3d/0x1f0 [ 262.505710][ T5831] panic+0x71c/0x800 [ 262.509664][ T5831] ? __pfx_panic+0x10/0x10 [ 262.514140][ T5831] ? show_trace_log_lvl+0x29b/0x3e0 [ 262.519403][ T5831] ? check_panic_on_warn+0x1f/0xb0 [ 262.524580][ T5831] ? ext4_xattr_inode_lookup_create+0x118e/0x1950 [ 262.531065][ T5831] check_panic_on_warn+0xab/0xb0 [ 262.536052][ T5831] __warn+0xf6/0x3c0 [ 262.539990][ T5831] ? ext4_xattr_inode_lookup_create+0x118e/0x1950 [ 262.546465][ T5831] report_bug+0x3c3/0x580 [ 262.550839][ T5831] ? ext4_xattr_inode_lookup_create+0x118e/0x1950 [ 262.557311][ T5831] handle_bug+0x184/0x210 [ 262.561671][ T5831] exc_invalid_op+0x17/0x50 [ 262.566200][ T5831] asm_exc_invalid_op+0x1a/0x20 [ 262.571075][ T5831] RIP: 0010:ext4_xattr_inode_lookup_create+0x118e/0x1950 [ 262.578154][ T5831] Code: f8 9c 97 ff e9 4e f6 ff ff e8 4e c2 31 ff 48 c7 c1 40 fa c7 8b ba bc 05 00 00 4c 89 e7 48 c7 c6 00 02 c8 8b e8 d3 dc fd ff 90 <0f> 0b 90 48 c7 c3 ea ff ff ff e8 23 c2 31 ff 48 8b 95 08 ff ff ff [ 262.597797][ T5831] RSP: 0018:ffffc90003427468 EFLAGS: 00010286 [ 262.603892][ T5831] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff819b00b9 [ 262.611889][ T5831] RDX: ffff8880285f8000 RSI: ffffffff82883781 RDI: 0000000000000005 [ 262.619897][ T5831] RBP: ffffc900034275c8 R08: 0000000000000005 R09: 0000000000000000 [ 262.627891][ T5831] R10: 0000000080000000 R11: 0000000000000001 R12: ffff88807e3ac000 [ 262.635880][ T5831] R13: ffff8880490702a4 R14: ffff888077314588 R15: ffff888077314588 [ 262.643881][ T5831] ? __wake_up_klogd.part.0+0x99/0xf0 [ 262.649285][ T5831] ? __ext4_warning+0x1a1/0x210 [ 262.654189][ T5831] ? ext4_xattr_inode_lookup_create+0x118d/0x1950 [ 262.660658][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.666333][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.672013][ T5831] ? find_held_lock+0x2b/0x80 [ 262.676725][ T5831] ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10 [ 262.683374][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.689035][ T5831] ? const_folio_flags+0x5b/0x100 [ 262.694085][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.699757][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.705421][ T5831] ? __lock_acquire+0xb8a/0x1c90 [ 262.710412][ T5831] ext4_xattr_block_set+0x818/0x3650 [ 262.715757][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.721446][ T5831] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 262.727221][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.732887][ T5831] ? check_xattrs+0x10a/0xba0 [ 262.737606][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.743267][ T5831] ? xattr_find_entry+0x2c9/0x3a0 [ 262.748356][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.754015][ T5831] ? ext4_xattr_block_find+0x59/0x430 [ 262.759449][ T5831] ext4_expand_extra_isize_ea+0x143d/0x1ab0 [ 262.765426][ T5831] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 262.771716][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.777379][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.783043][ T5831] ? dquot_initialize_needed+0x183/0x2a0 [ 262.788711][ T5831] __ext4_expand_extra_isize+0x346/0x480 [ 262.794401][ T5831] __ext4_mark_inode_dirty+0x544/0x870 [ 262.799907][ T5831] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 262.805922][ T5831] ? __pfx___might_resched+0x10/0x10 [ 262.811261][ T5831] ? ext4_journal_check_start+0x22b/0x340 [ 262.817025][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.822709][ T5831] ? __ext4_journal_start_sb+0x19e/0x690 [ 262.828379][ T5831] ? ext4_dirty_inode+0xa1/0x130 [ 262.833358][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.839027][ T5831] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 262.844437][ T5831] ext4_dirty_inode+0xd9/0x130 [ 262.849240][ T5831] ? rcu_is_watching+0x12/0xc0 [ 262.854037][ T5831] __mark_inode_dirty+0x1ee/0xe50 [ 262.859110][ T5831] iput+0xb7/0x880 [ 262.862872][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.868538][ T5831] dentry_unlink_inode+0x29c/0x480 [ 262.873698][ T5831] __dentry_kill+0x1d0/0x600 [ 262.878329][ T5831] ? shrink_dentry_list+0x11a/0x5d0 [ 262.883577][ T5831] shrink_dentry_list+0x140/0x5d0 [ 262.888653][ T5831] ? shrink_dcache_parent+0x22/0x530 [ 262.893984][ T5831] shrink_dcache_parent+0xe1/0x530 [ 262.899143][ T5831] ? __pfx_shrink_dcache_parent+0x10/0x10 [ 262.904919][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.910591][ T5831] shrink_dcache_for_umount+0xa5/0x3e0 [ 262.916072][ T5831] ? lockdep_hardirqs_on+0x7c/0x110 [ 262.921328][ T5831] generic_shutdown_super+0x6c/0x390 [ 262.926663][ T5831] kill_block_super+0x3b/0x90 [ 262.931399][ T5831] ext4_kill_sb+0x6a/0xb0 [ 262.935770][ T5831] deactivate_locked_super+0xc1/0x1a0 [ 262.941173][ T5831] deactivate_super+0xde/0x100 [ 262.945962][ T5831] cleanup_mnt+0x225/0x450 [ 262.950409][ T5831] task_work_run+0x150/0x240 [ 262.955023][ T5831] ? __pfx_task_work_run+0x10/0x10 [ 262.960154][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.965819][ T5831] ? __pfx___x64_sys_umount+0x10/0x10 [ 262.971244][ T5831] exit_to_user_mode_loop+0xeb/0x110 [ 262.976563][ T5831] do_syscall_64+0x3f6/0x4c0 [ 262.981180][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.987098][ T5831] RIP: 0033:0x7f5d44f8fc57 [ 262.991529][ T5831] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 263.011161][ T5831] RSP: 002b:00007ffd2374a0b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 263.019601][ T5831] RAX: 0000000000000000 RBX: 00007f5d45010925 RCX: 00007f5d44f8fc57 [ 263.027590][ T5831] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd2374a170 [ 263.035582][ T5831] RBP: 00007ffd2374a170 R08: 0000000000000000 R09: 0000000000000000 [ 263.043571][ T5831] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd2374b200 [ 263.051557][ T5831] R13: 00007f5d45010925 R14: 000000000003fdca R15: 00007ffd2374b240 [ 263.059568][ T5831] [ 263.062955][ T5831] Kernel Offset: disabled [ 263.067288][ T5831] Rebooting in 86400 seconds..