last executing test programs: 2m37.428832676s ago: executing program 1 (id=597): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="41000000010001", 0x7) 2m37.247975215s ago: executing program 1 (id=601): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x2, 0x9, 0x800}, {0x6, 0xba, 0x2, 0x541d}]}, 0x10) syz_emit_ethernet(0x33, &(0x7f0000000180)={@link_local, @empty, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x2c, 0x21, 0x68, 0x0, 0x22, 0x6, 0x0, @rand_addr=0x64010100, @local}, "1931d8bf543c8a61b58d3a5d7d"}}}}, 0x0) 2m37.095837973s ago: executing program 1 (id=603): capset(&(0x7f0000019340)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xe}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000b00)={'tunl0\x00', &(0x7f0000000ac0)={'erspan0\x00', 0x0, 0x8, 0x20, 0x8e0a, 0x7, {{0x5, 0x4, 0x0, 0x35, 0x14, 0x66, 0x0, 0x80, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @local}}}}) 2m36.96487119s ago: executing program 1 (id=605): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@grpid}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x2}}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$eJzs3M1vFOUfAPDvTLvl11/RVsQ38KWKRmK0pYDKwYMaTTxgYqIHPW7aSpCChtZESBOLBzwZY+LdePRf8KQXYzyZeNW7ISGGi+BpzezObHe7L7S4wwL7+SQL32dmdp/nu888u8+8bAMYWbPZP0nE7oj4PSKmG8X2DWYb/129sr547cr6YhK12tt/JfXt/r6yvlhsWjxvqrUQSezvUu/qufOnqisry2fz8vza6Y/mV8+df+7k6eqJ5RPLZw4fO3b0yMKLLxx+fiB5TkWaR2+899Wbx79oy39LHgMy22/lU7XagKsbrrta4vEhtoOdGcv7q1If/9Mx1tJ70/H6Z83Cp0NqIFCaWq1Wm+q9eqMG3MGSaC8b8jAqii/64vi323Hwy6XNPobv8iuNA6As76v5o7FmvHnGoLLl+HaQZiPi3Y1/vskeUc55CACANj9k859ns9nO+mI299icf6Rxf8t2d+fXhmYi4p6I2BMR98aZ2BsR90XUt30gIh7cYf0tF0nq08zO+U966YaT24Zs/vdSfm2rff5XzP5iZqxeOtcoRCV5/+TK8qH8PTkYlV1ZeaFPHT++9tuXvda1zv+yR1Z/MRfM23FpfFf7c5aqa9Ubz7jd5QsR+8a75Z80rwQkEfFQROzr9gLp9es4+cx3D/da1zP/yjYaP4ALTbVvI55u9P9GbMm/kPS/Pjn/v1hZPjRf7BWdfvn14lu96r9+/5cr6///d93/m/nPJK3Xa1d3XsfFPz7veUwzW/TzDvb/jepadSJ5px5P5Ms+qa6tnV2ImEiONxrduvzw5nOLcrF9lv/BA93H/57YfCf2R0S2Ez8SEY9GxGN53z0eEU9ExIE++f/86pMfbF02WeR/C/T/0o76fzOYiPYlaZdtsmDs1E/ft1U6sxnm+V/r//l3tB4dzJds5/OvsxXdg//6/gEAAMDtII2I3ZGkc804TefmGvfw743mWbiPzyw1fiMwE5W0ONM13XI+dCE/rG+UL0RE49aCYv2RSOvnjb8em6yX5xY/XFkaaubAVI/xn/lzbNitA0rnB1swuox/GF19x3/PG3EcHcCdoGP89735blepbQFuri7f/5PDaAdw83Wb/3f+vR/f+3An2jL+HdjDCHH+H0aX8Q+jy/iHkbQ6Gaeqk9v9tXy3oHilG3z69YLpiCjnlUsOonJLNKO0INLSq5god9cqLUhuwzZ3BMP7TAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABikfwMAAP//TfbN6A==") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m36.402579189s ago: executing program 1 (id=608): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 2m35.540538315s ago: executing program 1 (id=614): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001000000000004000000000000000000000000000000000000000000000001000000000000000000000000000005000000040200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000008000000000000008bffffffffffffff00000000000000000000000000000000dff90000000000000000000000000000fcffffffffffffff0000000000000000020000000000000000000000002000000000000000000000000000000000000001000003000000004400050020010000000000000000000000000000000000022b0000000a000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}}}}}}, 0x0) 2m34.872528739s ago: executing program 32 (id=614): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001000000000004000000000000000000000000000000000000000000000001000000000000000000000000000005000000040200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000008000000000000008bffffffffffffff00000000000000000000000000000000dff90000000000000000000000000000fcffffffffffffff0000000000000000020000000000000000000000002000000000000000000000000000000000000001000003000000004400050020010000000000000000000000000000000000022b0000000a000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}}}}}}, 0x0) 1m38.229073201s ago: executing program 0 (id=1079): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 1m38.022761531s ago: executing program 0 (id=1080): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2200004, &(0x7f0000000100)=ANY=[@ANYBLOB='nls=cp936,decompose,barrier,part=0x000000000000fc47,nodecompose,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00'], 0x1, 0x6b8, &(0x7f0000000a00)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x0) 1m37.730123257s ago: executing program 0 (id=1082): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r1, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x0) 1m37.497511529s ago: executing program 0 (id=1085): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@grpid}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x2}}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$eJzs3M1vFOUfAPDvTLvl11/RVsQ38KWKRmK0pYDKwYMaTTxgYqIHPW7aSpCChtZESBOLBzwZY+LdePRf8KQXYzyZeNW7ISGGi+BpzezObHe7L7S4wwL7+SQL32dmdp/nu888u8+8bAMYWbPZP0nE7oj4PSKmG8X2DWYb/129sr547cr6YhK12tt/JfXt/r6yvlhsWjxvqrUQSezvUu/qufOnqisry2fz8vza6Y/mV8+df+7k6eqJ5RPLZw4fO3b0yMKLLxx+fiB5TkWaR2+899Wbx79oy39LHgMy22/lU7XagKsbrrta4vEhtoOdGcv7q1If/9Mx1tJ70/H6Z83Cp0NqIFCaWq1Wm+q9eqMG3MGSaC8b8jAqii/64vi323Hwy6XNPobv8iuNA6As76v5o7FmvHnGoLLl+HaQZiPi3Y1/vskeUc55CACANj9k859ns9nO+mI299icf6Rxf8t2d+fXhmYi4p6I2BMR98aZ2BsR90XUt30gIh7cYf0tF0nq08zO+U966YaT24Zs/vdSfm2rff5XzP5iZqxeOtcoRCV5/+TK8qH8PTkYlV1ZeaFPHT++9tuXvda1zv+yR1Z/MRfM23FpfFf7c5aqa9Ubz7jd5QsR+8a75Z80rwQkEfFQROzr9gLp9es4+cx3D/da1zP/yjYaP4ALTbVvI55u9P9GbMm/kPS/Pjn/v1hZPjRf7BWdfvn14lu96r9+/5cr6///d93/m/nPJK3Xa1d3XsfFPz7veUwzW/TzDvb/jepadSJ5px5P5Ms+qa6tnV2ImEiONxrduvzw5nOLcrF9lv/BA93H/57YfCf2R0S2Ez8SEY9GxGN53z0eEU9ExIE++f/86pMfbF02WeR/C/T/0o76fzOYiPYlaZdtsmDs1E/ft1U6sxnm+V/r//l3tB4dzJds5/OvsxXdg//6/gEAAMDtII2I3ZGkc804TefmGvfw743mWbiPzyw1fiMwE5W0ONM13XI+dCE/rG+UL0RE49aCYv2RSOvnjb8em6yX5xY/XFkaaubAVI/xn/lzbNitA0rnB1swuox/GF19x3/PG3EcHcCdoGP89735blepbQFuri7f/5PDaAdw83Wb/3f+vR/f+3An2jL+HdjDCHH+H0aX8Q+jy/iHkbQ6Gaeqk9v9tXy3oHilG3z69YLpiCjnlUsOonJLNKO0INLSq5god9cqLUhuwzZ3BMP7TAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABikfwMAAP//TfbN6A==") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m37.177666306s ago: executing program 0 (id=1089): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000140)={[{@acl}, {@heartbeat_none}, {@inode64}, {@localalloc={'localalloc', 0x3d, 0x6b2}}, {@acl}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4443, &(0x7f0000004480)="$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") lchown(&(0x7f0000000040)='.\x00', 0xee00, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file1\x00', 0x8, 0x6) 1m36.500611991s ago: executing program 0 (id=1096): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000005b40)=ANY=[@ANYBLOB="646d61736b3d30303030303030303030303030303030303031373630352c6e6f646f74732c6e6f646f74732c6e6f646f74732c646f74732c6e6f646f74732c6e6f646f74732c71756965742c646973636172642c666c7573682c636865636b3d72656c617865642c646f74732c636865636b3d72656c617865642c756d61736b3d30303030303030303030303030303030303030303030352c6e66732c646f74732c747a3d5554432c6e6f646f74732c646f74732c6e6f636173652c6e6f646f74732c636f6465706167653d3935302c0083b7d0f19f8882968c0cfe51eb3304bfea67e1100cbb19bdb7c5e3f5e3d62eb5151ae3a324eddeac9f0c7ad8157d0c431264fa4e924f1aa72f7de4601d6e989c6a3739647ae8a8543d489e04f047820744d831b054b5c47bc6a8006bde"], 0xfd, 0x1d2, &(0x7f0000000500)="$eJzs3c9qE1EUB+CTWJvUVXeCKFzQhSAU9QkqUkEcEJQsdKVQ3TQi2M3opn0MH8xH8AGkq2zkSp1px44uYiQzsf2+Tc7kN3/OXWSSTc68uv5ub/f9/tuvVz/HeDyI4XZsx2wQmzGME4cBAJwns5zjW6703QsA0I05vv+/d9wSALBkz1+8fPKgKHaepTSOODosJ+Wkeq3yR4+Lnbvpp83mqKOynFw6ze+l9m+H4/xyXKnz+ymlL3dSOpuvx+2bVX588odPi1Y+it3lLh0AAAAAAAAAAAAAAAAAAAAAAHpzI9KJP8732dpq5xt1Xm39Mh+oNb9nLa6t1ZvNeKB80MWiAAAAAAAAAAAAAAAAAAAA4D+z//HT3uvp9M2HphhFxNl3/qYY1Cde8PCui2GsRBv9FzlXsxlWpZ9/KtJqtDFd8FOwHhHLamyWc55r5+YeMerp3gQAAAAAAAAAAAAAAAAAABdN86ff37NxHw0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQA+a5/8vUBxExBw7n15so3XxW50vFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHPqRwAAAP//Gl42vQ==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1m36.037629215s ago: executing program 33 (id=1096): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000005b40)=ANY=[@ANYBLOB="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"], 0xfd, 0x1d2, &(0x7f0000000500)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 38.263331406s ago: executing program 5 (id=1609): capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000001c0)={0x0, 0x8d9, 0x403, 0x9, 0xf, 0x8000}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000100)) 38.097859295s ago: executing program 5 (id=1611): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 37.320228596s ago: executing program 5 (id=1619): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000400620180100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x40, 0x24, 0xa8, {0xa8, 0x23, "d3d0bc6938c2f2fec8929bc4632236a928b6aad1dbdcedf98b08af71318b690550ac19b65d681dca6ba29e9a7039535b8d43a011e7aa00b78e0f7dd48db6ed1f20ce793993643c72b07b955f483c4852e9267463cdcc1917e863b9ae27c679e062e395300cdcd4ef6238e9feb44dfd906a1dcfea5d9a40a1b765b589c6dcd49e3b0a6a95bc408310410e19373d02bd30d8c2b3706ca8306d3d1a3b6854b36b1889622f83f9d6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 35.426372214s ago: executing program 5 (id=1634): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@grpid}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x2}}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 34.969183018s ago: executing program 5 (id=1636): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x0) 34.379483178s ago: executing program 5 (id=1638): r0 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x700000000000000) 33.931862802s ago: executing program 34 (id=1638): r0 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x700000000000000) 3.554005475s ago: executing program 4 (id=1870): setreuid(0x0, 0xee00) request_key(&(0x7f0000000140)='logon\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='asymmetric\x00', 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) 3.448316261s ago: executing program 4 (id=1871): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@ipv6_newrule={0x58, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x80, 0x14, 0x4, 0x2, 0x0, 0x0, 0x8, 0x6}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'hsr0\x00'}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x58}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 3.198780633s ago: executing program 4 (id=1874): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f00000001c0)={[{@rodir}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@utf8}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@shortname_lower}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlate}, {@utf8}, {@shortname_mixed}, {@utf8no}, {@numtail}, {@shortname_mixed}, {@shortname_mixed}, {@uni_xlateno}, {@fat=@nfs}]}, 0x1, 0x379, &(0x7f0000000880)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x51) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.372465617s ago: executing program 4 (id=1879): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000440)={'das16m1\x00', [0x3dc0, 0x6, 0x802, 0x40300000, 0xe4, 0xc, 0x8, 0x8, 0x1009f, 0xfffffff7, 0xcd6, 0x6, 0x1db, 0x2, 0x7, 0xfe, 0x10002, 0xf, 0x0, 0x0, 0x2, 0x7, 0xf21, 0x0, 0xb, 0xc00, 0x3f, 0x9, 0x6, 0x1, 0xfffffffc]}) ioctl$COMEDI_SETWSUBD(r0, 0x6411) 2.077836142s ago: executing program 2 (id=1881): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)) 2.034128394s ago: executing program 4 (id=1882): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0f00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 1.694359832s ago: executing program 2 (id=1885): r0 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 1.54442216s ago: executing program 2 (id=1886): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}], 0x3c) sendto$inet(r0, &(0x7f0000000140)='\a', 0x1, 0x8050, &(0x7f00000002c0)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) 1.34586669s ago: executing program 2 (id=1890): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 1.15699538s ago: executing program 6 (id=1892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a48000000060a0b040000000000000000020000001c0004801800018008000100647570000c000280080001400000008c0900010073797a30000000000900020073797a32"], 0x70}}, 0x0) 992.192168ms ago: executing program 3 (id=1894): timerfd_create(0x7, 0x0) unshare(0x24020400) pselect6(0x40, &(0x7f0000000440)={0x2, 0x0, 0x8, 0x7, 0x7, 0x401, 0x5, 0x8}, 0x0, &(0x7f0000004680)={0x9, 0xfff, 0xd3, 0x5, 0x7, 0x400, 0x9, 0x6}, &(0x7f00000046c0)={0x0, 0x989680}, 0x0) 967.5413ms ago: executing program 6 (id=1895): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_unix(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d756e695e656b7da8fa746fd8b11ade1897bdd2f229ea14264baa7081f14a77cd06730bb61f411cb2dfcc347d2833898586ebdd92d9"]) 848.407196ms ago: executing program 3 (id=1896): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) connect$ax25(r0, &(0x7f0000000280)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 759.443521ms ago: executing program 6 (id=1897): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000040)={[{@noswap}, {@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00ad, &(0x7f0000000200)={[{@noswap}, {@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) 651.140956ms ago: executing program 3 (id=1898): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, r1, 0xe19, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x3ff}, {0xc, 0x90, 0x4237}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008090}, 0x10) 560.431901ms ago: executing program 6 (id=1899): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, 0x0, 0x6a) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="e09e", 0x2}], 0x1, 0x2) 444.308167ms ago: executing program 3 (id=1900): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4003}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2}}], {0x14}}, 0x9c}}, 0x0) 425.946028ms ago: executing program 6 (id=1901): r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000080)=0x80, 0x4) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) 363.245911ms ago: executing program 3 (id=1902): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xd}, {0x1, 0xc}, {0x3, 0x16}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x804) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) 325.012844ms ago: executing program 2 (id=1903): ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6", 0x7f}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004"], 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 188.43436ms ago: executing program 6 (id=1904): syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000080)='./file0\x00', 0xa00004, &(0x7f00000005c0)=ANY=[@ANYBLOB='adinicb,dmode=00000000000000000000006,utf8,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c7569643d69676e6f72652c696f636861727365743d6d6163696e7569742c6d6f64653d30303030303030303030303030303030303030303031302c696f636861727365743d69736f383835392d31332c6164696e6963622c6769643d69676e6f72652c6c617374626c6f636b3d30303030303030303030303030303030303030372c6769643d666f726765742c766f6c756d653d30303030303030303030303030303030303132342c6206c81400"], 0x1, 0xc4d, &(0x7f0000000f40)="$eJzs3U9sHNd9B/DfGy3FldxWTJwqThoHm7ZIZcZy9S+mYhXuqqbZBpBlIhRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAhQwWMzsW3FJkbYskhIlfz429Z2deW/mvZn1jCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xr546nTaZsOhh9AYAOCBuDz2tVNntnv+AwCPrSs7/f8/AAAAAAAAAAAAAABwUKQo4slIMXd5LU1Unzvql9p9t26PD49sX+1IqmoeqsqXP/XTZ86e+/LzQ+e7eak98wH199pn49WxKxcbL83enJufWliYmmyMz7SvzU5O3fMedlt/q8HqBDRuvnZr8vr1hcaZ585u2nx74L3+J44PXBh65uTT3bLjwyMjYxtF6r3la/fdkI6dRngcjiJORopnv/+z1IqIInZ/LuoP9tpvdaTqxGDVifHhkaoj0+3WzGK5cbR7IoqIRk+lZvccbX8totb3QPuws2bEUtn8ssGDZffG5lrzravTU43R1vxie7E9OzOaOq0t+9OIIs6niOWIWO2/e3d9UUQtUnz32Fq6mt/6UZ2HL1UDg3duR7GPfbwHZTsbfRHLxSNwzQ6w/ijilUjx87dPxLV8n6nuNV+MeKXMH0a8WeaLEan8YpyLeHeb7xGPploU8efl9b+wliar+0H3vnLp642vzlyf7Snbva98xOfDXXeKh/R8OLIlH4wDfm+qRxGt6o6/lu7/NzsAAAAAAAAAAAAAAAAA7LUjUcRnIsXL//ZH1bjiqMalH7sw9PsDv9w7ZvypD9lPWfa5iFgq7m1M7uE8MHA0jab0kMcSf5zVo4g/zuP/vv2wGwMAAAAAAAAAAAAAAAAAAPCxVsRPI8UL75xIy9E7p3h75kbjSuvqdGdW2O7cv90509fX19cbqZPNnBM5l3Iu51zJuZozilw/ZzPnRM6lnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIt6PFN/55lqKFBHNiIno5Er/w24dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDqT0X8IFI0/qB5Z10tIlL1b8eJ8pdz0Txc5iejOVTmi9G8mLNVZa357YfQfnanLxXxk0jRX3/rzgXP17+v8+nO1yDe/NbGp8/WOnmou3Hgvf4njh+7MDTy+ad2Wk7bNWDwUnvm1u3G+PDIyFjP6lo++id71g3k4xZ703UiYuH1N15rTU9Pzd//QvkVuM/q3Su5i6M/yIVUe2SaamEvFqJ2IJrxcPq+Sf1h3JzYd+Xz/91I8dvv/Hv3gd95/tfjlzqf7jzh4xd/svH8f2Hrju7x+V/bWi8//8snwXbP/yd71r2QfzfSV4uoL96c6zseUV94/Y2T7ZutG1M3pmbOnTr1laGhr5w91Xc4on69PT3Vs7QnpwsAAAAAAAAAAAAAAADgwUlF/G6kaP1kLTUi4nY1XmvgwtAzJ58+FIeq8Vabxm2/OnblYuOl2Ztz81MLC1OTjfGZ9rXZyal7PVy9Gu41PjyyL535UEf2uf1H6i/Nzr0+377xh4vbbj9av3h1YXG+dW37zXEkiohm75rBqsHjwyNVo6fbrZmq6ui2g+k/ur5UxH9EimvnGukLeV0e/791hP+m8f9LW3e0h+P/P390Y/zfJ3qKlsdMqYhfRIrf+oun4gtVO4/GXecsl/ubSDF4/nO5XBwuy3Xb0HmvQGdkYFn2fyLFP7y/uWx3POSTG2VPf6ST+wgor/+xSPGDP/te/Hpet/n9D9tf/6Nbd7RP73/4VM+6o5veV7DrrpOv/8lI8eKTb8VvVGv+7wPf/9F9Y8OJTuGN93Ps0/X/1Z51A/m4v7lXnQcAAAAAAAAAAHiE9aUi/jZS/Giklp7P6+7l7/9Nbt3RPv39r0/3rJvcm/mKPnRh1ycVAAAAAA6IvlTETyPFjcW37oyh3jz+u2f85+9sjP8cTlu2Vn/O9yvVewP28s//eg3k407svtsAAAAAAAAAAAAAAAAAAABwoKRUxPN5PvWJajz/5I7zqa9Eipf/69lcLh0vy3XngR+ofq1fnp05eXF6erYei62r01ONsbnWtamy7qcixdpffy7XLar51bvzzXfmeN+Yi30+Uoz8XbdsZy727tzknfnA6+vrEafLsp+IFP/595vL5qmp89zR1X7PlGX/KlJ845+2L3t8o+zZsuz3IsWPv9Holj1alu2+H/XTG2WfuzZb7MNVAQAAAAAAAAAAAAAAAAAA4OOmLxXxp5Hiv28u3xnLn+f/7+v5WHnzWz3z/W9xu5rnf6Ca/3+n5fuZ/796r8DSTkcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDHU4oi3ogUc5fX0kp/+bmjfqk9c+v2+PDI9tWOpKrmoap8+VM/febsuS8/P3S+mx9cf699Jl4du3Kx8dLszbn5qYWFqcnG+Ez72uzk1D3vYbf1txqsTkDj5mu3Jq9fX2icee7sps23B97rf+L4wIWhZ04+3S07PjwyMtZTptZ330e/S9ph/eEo4i8jxbPf/1n6UX9EEbs/Fx/y3dlvR6pODFadGB8eqToy3W7NLJYbR7snooho9FRqds/RA7gWu9KMWCqbXzZ4sOze2FxrvnV1eqox2ppfbC+2Z2dGU6e1ZX8aUcT5FLEcEav9d++uL4p4LVJ899ha+uf+iEPd8/Cly2NfO3Vm53YU+9jHe1C2s9EXsVw8AtfsAOuPIv4xUvz87RPxL/0Rtej8xBcjXinzhxFvRud6p/KLcS7i3W2+RzyaalHE/5bX/8Jaeru/vB907yuXvt746sz12Z6y3fvKI/98eJAO+L2pHkX8uLrjr6V/9d81AAAAAAAAAAAAAAAAwAFSxK9FihfeOZGq8cF3xhS3Z240rrSuTneG9XXH/nXHTK+vr683UiebOSdyLuVczrmSczVnFLl+zmaZ9fX1ifx5KedyzpWcqznjUK6fs5lzIudSzuWcKzlXc0Yt18/ZzDmRcynncs6VnKs544CM3QMAAAAAAAAAAAAAAAAAAB4vRfVPiu98cy2t93fml56ITq6YD/Sx9/8BAAD//9kg9g0=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x3a) creat(&(0x7f0000000240)='./file1\x00', 0x2) 122.108544ms ago: executing program 2 (id=1905): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYBLOB="2c6d65b47d7189617375"], 0x1, 0x61e2, &(0x7f000000d7c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0xc0, 0x2, 0x0, 0x6, 0x3}) 96.738745ms ago: executing program 4 (id=1906): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="001306000000ec19d02303f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 0s ago: executing program 3 (id=1907): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000", @ANYRESHEX=0x0], 0x1, 0x1c3, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read(r0, &(0x7f0000000200)=""/189, 0xfdef) kernel console output (not intermixed with test programs): interface 1 has no altsetting 0 [ 209.570475][ T5809] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 209.580220][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.588895][ T8799] loop3: detected capacity change from 0 to 40427 [ 209.597813][ T8799] F2FS-fs (loop3): invalid crc value [ 209.600122][ T5809] usb 3-1: Product: syz [ 209.608190][ T5809] usb 3-1: Manufacturer: syz [ 209.613631][ T5808] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 209.619481][ T8799] F2FS-fs (loop3): Found nat_bits in checkpoint [ 209.625295][ T5809] usb 3-1: SerialNumber: syz [ 209.635168][ T967] usb 42-1: SetAddress Request (2) to port 0 [ 209.650639][ T967] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 209.694093][ T8799] F2FS-fs (loop3): Start checkpoint disabled! [ 209.705388][ T8799] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 209.830719][ T5808] usb 5-1: Using ep0 maxpacket: 32 [ 209.842002][ T5808] usb 5-1: config 0 has no interfaces? [ 209.877194][ T5808] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 209.899067][ T8823] loop3: detected capacity change from 0 to 1024 [ 209.912788][ T5809] usb 3-1: selecting invalid altsetting 0 [ 209.921841][ T5808] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 209.942349][ T5809] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 209.949882][ T5809] usb 3-1: No valid video chain found. [ 209.980122][ T5808] usb 5-1: Product: syz [ 209.985415][ T5808] usb 5-1: Manufacturer: syz [ 210.005573][ T5808] usb 5-1: SerialNumber: syz [ 210.033268][ T5809] usb 3-1: selecting invalid altsetting 0 [ 210.042197][ T5808] usb 5-1: config 0 descriptor?? [ 210.068682][ T5809] usbtest: probe of 3-1:220.1 failed with error -22 [ 210.086112][ T5809] usb 3-1: USB disconnect, device number 10 [ 210.138216][ T8823] hfsplus: bad catalog entry type [ 210.270419][ T1084] hfsplus: b-tree write err: -5, ino 25 [ 210.276631][ T1084] hfsplus: b-tree write err: -5, ino 4 [ 210.294269][ T8810] vhci_hcd: cannot find a urb of seqnum 9 max seqnum 1 [ 210.301890][ T8829] loop0: detected capacity change from 0 to 1024 [ 210.311543][ T965] usb 5-1: USB disconnect, device number 2 [ 210.330411][ T1084] hfsplus: b-tree write err: -5, ino 2 [ 210.366352][ T34] vhci_hcd: stop threads [ 210.373931][ T34] vhci_hcd: release socket [ 210.384166][ T34] vhci_hcd: disconnect device [ 210.447857][ T1084] hfsplus: b-tree write err: -5, ino 25 [ 210.478989][ T1084] hfsplus: b-tree write err: -5, ino 4 [ 210.485777][ T1084] hfsplus: b-tree write err: -5, ino 2 [ 210.492621][ T1084] hfsplus: b-tree write err: -5, ino 26 [ 210.591926][ T8833] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1082'. [ 210.620459][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1082'. [ 210.748647][ T8839] loop0: detected capacity change from 0 to 512 [ 210.800106][ T8839] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 210.829166][ T8839] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.1085: bad orphan inode 131083 [ 210.858349][ T8839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.961294][ T8839] overlayfs: upper fs needs to support d_type. [ 211.024618][ T5769] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /305/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 211.262871][ T8856] loop3: detected capacity change from 0 to 1024 [ 211.331082][ T8856] hfsplus: bad catalog entry type [ 211.413049][ T34] hfsplus: b-tree write err: -5, ino 25 [ 211.419256][ T34] hfsplus: b-tree write err: -5, ino 4 [ 211.447607][ T34] hfsplus: b-tree write err: -5, ino 2 [ 211.537444][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.698107][ T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.927838][ T8854] loop4: detected capacity change from 0 to 32768 [ 211.953011][ T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.000616][ T8851] loop2: detected capacity change from 0 to 32768 [ 212.007555][ T8854] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 212.048319][ T8854] XFS (loop4): Ending clean mount [ 212.067343][ T8854] XFS (loop4): Quotacheck needed: Please wait. [ 212.129136][ T8851] [ 212.129136][ T8851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.129136][ T8851] [ 212.213141][ T8851] ERROR: (device loop2): diWrite: ixpxd invalid [ 212.213141][ T8851] [ 212.254616][ T8854] XFS (loop4): Quotacheck: Done. [ 212.290158][ T8851] ERROR: (device loop2): txCommit: [ 212.290158][ T8851] [ 212.314264][ T34] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.357275][ T8869] jfs_create: dtSearch returned -17 [ 212.467098][ T5772] [ 212.467098][ T5772] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.467098][ T5772] [ 212.509523][ T7405] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 212.521304][ T5772] [ 212.521304][ T5772] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.521304][ T5772] [ 212.531533][ T34] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.901341][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.914848][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.939422][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.948743][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.958638][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.968266][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.153335][ T34] tipc: Disabling bearer [ 213.224539][ T34] tipc: Left network mode [ 213.256810][ T8878] loop2: detected capacity change from 0 to 1024 [ 213.429940][ T8873] loop3: detected capacity change from 0 to 32768 [ 213.487321][ T8873] ERROR: (device loop3): diAllocAG: free inode not found in summary map [ 213.487321][ T8873] [ 213.509358][ T8873] ERROR: (device loop3): remounting filesystem as read-only [ 213.570275][ T8873] ialloc: diAlloc returned -5! [ 213.669288][ T8887] loop2: detected capacity change from 0 to 512 [ 213.757122][ T8887] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1102: inode has both inline data and extents flags [ 213.804057][ T8887] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1102: couldn't read orphan inode 15 (err -117) [ 213.885060][ T8887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.065473][ T8887] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring [ 214.181992][ T8887] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 214.351911][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.571087][ T8874] chnl_net:caif_netlink_parms(): no params data found [ 214.750616][ T967] usb 42-1: device descriptor read/8, error -110 [ 215.140157][ T5774] Bluetooth: hci0: command tx timeout [ 215.195723][ T967] usb usb42-port1: attempt power cycle [ 215.660632][ T8874] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.668445][ T8874] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.710293][ T8874] bridge_slave_0: entered allmulticast mode [ 215.717842][ T8874] bridge_slave_0: entered promiscuous mode [ 215.756392][ T8874] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.779642][ T8874] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.808700][ T8874] bridge_slave_1: entered allmulticast mode [ 215.841460][ T8874] bridge_slave_1: entered promiscuous mode [ 215.882988][ T967] usb usb42-port1: unable to enumerate USB device [ 215.984763][ T8966] loop4: detected capacity change from 0 to 256 [ 216.076604][ T8966] FAT-fs (loop4): Directory bread(block 64) failed [ 216.105267][ T8966] FAT-fs (loop4): Directory bread(block 65) failed [ 216.141167][ T8966] FAT-fs (loop4): Directory bread(block 66) failed [ 216.174128][ T8874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.184720][ T8966] FAT-fs (loop4): Directory bread(block 67) failed [ 216.231871][ T8966] FAT-fs (loop4): Directory bread(block 68) failed [ 216.238652][ T8966] FAT-fs (loop4): Directory bread(block 69) failed [ 216.282624][ T8966] FAT-fs (loop4): Directory bread(block 70) failed [ 216.290958][ T8966] FAT-fs (loop4): Directory bread(block 71) failed [ 216.298233][ T8966] FAT-fs (loop4): Directory bread(block 72) failed [ 216.314734][ T8874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.376375][ T8966] FAT-fs (loop4): Directory bread(block 73) failed [ 217.230326][ T5774] Bluetooth: hci0: command tx timeout [ 217.327117][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1137'. [ 217.355482][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1137'. [ 217.841290][ T8980] loop2: detected capacity change from 0 to 131072 [ 217.853673][ T8980] F2FS-fs (loop2): Test dummy encryption mode enabled [ 217.865942][ T8980] F2FS-fs (loop2): invalid crc value [ 217.881661][ T8874] team0: Port device team_slave_0 added [ 217.898364][ T8980] F2FS-fs (loop2): Mismatch valid blocks 4 vs. 5 [ 217.906312][ T8980] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 217.928188][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1134'. [ 217.991732][ T8874] team0: Port device team_slave_1 added [ 218.220792][ T34] hsr_slave_0: left promiscuous mode [ 218.340056][ T34] hsr_slave_1: left promiscuous mode [ 218.420490][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.428413][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.511253][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.534704][ T9002] loop2: detected capacity change from 0 to 512 [ 218.549113][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.605686][ T34] bridge_slave_1: left allmulticast mode [ 218.624291][ T34] bridge_slave_1: left promiscuous mode [ 218.650261][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.699716][ T34] bridge_slave_0: left allmulticast mode [ 218.699792][ T9002] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 218.736083][ T34] bridge_slave_0: left promiscuous mode [ 218.764050][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.932833][ T9011] loop3: detected capacity change from 0 to 1764 [ 218.967291][ T34] veth1_macvtap: left promiscuous mode [ 218.996465][ T9002] EXT4-fs (loop2): 1 truncate cleaned up [ 219.014433][ T34] veth0_macvtap: left promiscuous mode [ 219.067943][ T34] veth1_vlan: left promiscuous mode [ 219.076778][ T9002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.097885][ T34] veth0_vlan: left promiscuous mode [ 219.300207][ T5774] Bluetooth: hci0: command tx timeout [ 219.598600][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.334270][ T9036] loop4: detected capacity change from 0 to 764 [ 220.420584][ T9036] rock: directory entry would overflow storage [ 220.444058][ T9036] rock: sig=0x4654, size=5, remaining=4 [ 220.773568][ T9027] loop3: detected capacity change from 0 to 32768 [ 220.868316][ T9027] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 220.978169][ T9027] XFS (loop3): Ending clean mount [ 221.180676][ T5773] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 221.394644][ T5774] Bluetooth: hci0: command tx timeout [ 221.457450][ T9054] loop4: detected capacity change from 0 to 2048 [ 221.599413][ T9054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 221.729860][ T9054] EXT4-fs error (device loop4): ext4_iget_extra_inode:4739: inode #12: comm syz.4.1157: corrupted in-inode xattr: invalid size in ea xattr [ 221.807986][ T7405] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 221.967913][ T9064] loop4: detected capacity change from 0 to 2048 [ 222.004129][ T34] team0 (unregistering): Port device team_slave_1 removed [ 222.041899][ T9064] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.129779][ T34] team0 (unregistering): Port device team_slave_0 removed [ 222.225588][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.287506][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.765230][ T34] bond0 (unregistering): Released all slaves [ 222.886236][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1158'. [ 222.903773][ T8874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.950862][ T8874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.996219][ T8874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.028967][ T8874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.044944][ T9068] netlink: 'syz.2.1160': attribute type 280 has an invalid length. [ 223.050995][ T8874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.095651][ T8874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.179887][ T9073] loop2: detected capacity change from 0 to 2048 [ 223.282298][ T9073] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.312918][ T8874] hsr_slave_0: entered promiscuous mode [ 223.319855][ T8874] hsr_slave_1: entered promiscuous mode [ 223.532243][ T9078] loop4: detected capacity change from 0 to 4096 [ 223.560434][ T5808] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 223.655860][ T9082] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 223.780205][ T5808] usb 4-1: Using ep0 maxpacket: 32 [ 223.820746][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.834019][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.886016][ T5808] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 223.920480][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.962383][ T5808] usb 4-1: config 0 descriptor?? [ 223.983588][ T5808] hub 4-1:0.0: USB hub found [ 224.061934][ T28] audit: type=1400 audit(1776702068.097:58): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26F81648AA2A pid=9088 comm="syz.4.1165" [ 224.108939][ T8874] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 224.127656][ T8874] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 224.147241][ T8874] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 224.164075][ T8874] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 224.221275][ T5808] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 224.426007][ T8874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.437360][ T5808] usbhid 4-1:0.0: can't add hid device: -71 [ 224.450979][ T5808] usbhid: probe of 4-1:0.0 failed with error -71 [ 224.495166][ T8874] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.511879][ T5808] usb 4-1: USB disconnect, device number 11 [ 224.542240][ T2889] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.550801][ T2889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.612316][ T2889] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.620600][ T2889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.978164][ T9087] loop2: detected capacity change from 0 to 40427 [ 225.015771][ T9087] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 225.031467][ T9087] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 225.043504][ T9087] F2FS-fs (loop2): invalid crc value [ 225.067370][ T9087] F2FS-fs (loop2): Found nat_bits in checkpoint [ 225.196435][ T9087] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 225.221695][ T9087] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 225.302815][ T8874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.408704][ T9087] syz.2.1166: attempt to access beyond end of device [ 225.408704][ T9087] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 225.526619][ T3524] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 225.581024][ T3524] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 226.059615][ T8874] veth0_vlan: entered promiscuous mode [ 226.103847][ T8874] veth1_vlan: entered promiscuous mode [ 226.174832][ T8874] veth0_macvtap: entered promiscuous mode [ 226.199575][ T8874] veth1_macvtap: entered promiscuous mode [ 226.236609][ T8874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.261523][ T8874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.264518][ T9124] loop3: detected capacity change from 0 to 32768 [ 226.278183][ T8874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.311845][ T8874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.323256][ T8874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.327879][ T9124] [ 226.327879][ T9124] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.327879][ T9124] [ 226.359252][ T8874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.384147][ T8874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.408793][ T9124] ERROR: (device loop3): diWrite: ixpxd invalid [ 226.408793][ T9124] [ 226.432668][ T8874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.435731][ T9124] ERROR: (device loop3): txCommit: [ 226.435731][ T9124] [ 226.462883][ T8874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.490111][ T8874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.515278][ T8874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.565564][ T8874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.583273][ T8874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.603893][ T8874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.615245][ T5773] [ 226.615245][ T5773] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.615245][ T5773] [ 226.644255][ T9140] ip6gretap1: entered allmulticast mode [ 226.656777][ T5773] [ 226.656777][ T5773] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.656777][ T5773] [ 226.667753][ T8874] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.683055][ T8874] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.693905][ T8874] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.703688][ T8874] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.020342][ T3513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.028694][ T3513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.153936][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.189592][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.298559][ T9160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1179'. [ 227.334826][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1179'. [ 227.545723][ T9166] loop3: detected capacity change from 0 to 512 [ 227.579665][ T9166] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 227.682072][ T9166] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.1182: bad orphan inode 131083 [ 227.741433][ T9166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.800102][ T28] audit: type=1800 audit(1776702071.837:59): pid=9166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1182" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 227.937657][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.274271][ T9193] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1192'. [ 228.671734][ T9209] loop5: detected capacity change from 0 to 16 [ 228.704255][ T9209] erofs: (device loop5): mounted with root inode @ nid 36. [ 228.767554][ T28] audit: type=1800 audit(1776702072.807:60): pid=9209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1197" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 228.830174][ T9206] loop3: detected capacity change from 0 to 4096 [ 228.938195][ T9206] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 228.984255][ T9206] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 229.015880][ T9206] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 229.079733][ T9206] ntfs: volume version 3.1. [ 229.193282][ T9220] loop2: detected capacity change from 0 to 16 [ 229.227221][ T9189] loop4: detected capacity change from 0 to 32768 [ 229.227303][ T9220] erofs: (device loop2): mounted with root inode @ nid 36. [ 229.414964][ T5773] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 229.558379][ T9226] loop5: detected capacity change from 0 to 512 [ 229.651785][ T9226] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 230.077031][ T9234] loop3: detected capacity change from 0 to 4096 [ 230.135385][ T9234] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 230.265642][ T9234] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 230.307999][ T9234] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 230.904029][ T9257] loop3: detected capacity change from 0 to 128 [ 230.989838][ T9230] loop2: detected capacity change from 0 to 40427 [ 231.030795][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 231.041874][ T9230] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 231.077367][ T9230] F2FS-fs (loop2): invalid crc value [ 231.096494][ T9230] F2FS-fs (loop2): Found nat_bits in checkpoint [ 231.296756][ T9230] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 231.362171][ T9268] loop3: detected capacity change from 0 to 1024 [ 231.528378][ T9268] hfsplus: request for non-existent node 33554434 in B*Tree [ 231.560394][ T9268] hfsplus: request for non-existent node 33554434 in B*Tree [ 231.589431][ T9268] hfsplus: request for non-existent node 33554434 in B*Tree [ 231.630160][ T9268] hfsplus: request for non-existent node 33554434 in B*Tree [ 231.655857][ T5772] syz-executor: attempt to access beyond end of device [ 231.655857][ T5772] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 231.671333][ T9276] hfsplus: request for non-existent node 33554434 in B*Tree [ 231.680349][ T9276] hfsplus: request for non-existent node 33554434 in B*Tree [ 231.703867][ T9245] JBD2: Ignoring recovery information on journal [ 231.730443][ T5772] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 231.801602][ T34] hfsplus: request for non-existent node 33554434 in B*Tree [ 231.823844][ T34] hfsplus: request for non-existent node 33554434 in B*Tree [ 231.943342][ T9245] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 232.323195][ T8874] ocfs2: Unmounting device (7,5) on (node local) [ 232.882420][ T9281] set_capacity_and_notify: 1 callbacks suppressed [ 232.882434][ T9281] loop4: detected capacity change from 0 to 32768 [ 232.974460][ T9281] [ 232.974460][ T9281] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.974460][ T9281] [ 232.999142][ T9296] loop2: detected capacity change from 0 to 2048 [ 233.039046][ T9281] ERROR: (device loop4): diWrite: ixpxd invalid [ 233.039046][ T9281] [ 233.099904][ T9281] ERROR: (device loop4): txCommit: [ 233.099904][ T9281] [ 233.170323][ T9301] jfs_create: dtSearch returned -17 [ 233.200813][ T9296] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.318249][ T7405] [ 233.318249][ T7405] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.318249][ T7405] [ 233.380618][ T7405] [ 233.380618][ T7405] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.380618][ T7405] [ 233.686351][ T9317] veth0_to_bond: entered allmulticast mode [ 234.246472][ T9341] loop4: detected capacity change from 0 to 2048 [ 234.310915][ T9341] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.363343][ T28] audit: type=1800 audit(1776702078.407:61): pid=9341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1239" name="file1" dev="loop4" ino=1346 res=0 errno=0 [ 234.430818][ T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 234.499922][ T9329] loop3: detected capacity change from 0 to 32768 [ 234.536092][ T9329] [ 234.536092][ T9329] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 234.536092][ T9329] [ 234.576818][ T9329] ERROR: (device loop3): diWrite: ixpxd invalid [ 234.576818][ T9329] [ 234.591236][ T9329] ERROR: (device loop3): txCommit: [ 234.591236][ T9329] [ 234.651437][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 234.662377][ T9329] jfs_create: dtSearch returned -17 [ 234.673351][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.685352][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.701291][ T23] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 234.720240][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.734881][ T23] usb 3-1: Product: syz [ 234.739469][ T23] usb 3-1: Manufacturer: syz [ 234.749078][ T23] usb 3-1: SerialNumber: syz [ 234.755131][ T5773] [ 234.755131][ T5773] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 234.755131][ T5773] [ 234.787471][ T5773] [ 234.787471][ T5773] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 234.787471][ T5773] [ 235.004225][ T23] usb 3-1: cannot find UAC_HEADER [ 235.069514][ T23] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 235.100651][ T23] usb 3-1: USB disconnect, device number 11 [ 235.177248][ T9354] loop3: detected capacity change from 0 to 128 [ 235.185208][ T6231] udevd[6231]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.490742][ T9366] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1250'. [ 235.604310][ T9368] QAT: Invalid ioctl 21531 [ 235.615862][ T9370] loop5: detected capacity change from 0 to 512 [ 235.639437][ T9370] EXT4-fs: inline encryption not supported [ 235.662998][ T9370] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 235.722233][ T9370] EXT4-fs (loop5): orphan cleanup on readonly fs [ 235.733278][ T9370] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1252: inode #15: comm syz.5.1252: iget: illegal inode # [ 235.752626][ T9370] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.1252: couldn't read orphan inode 15 (err -117) [ 235.774393][ T9370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 235.824247][ T8874] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.345411][ T9385] team0: Device gtp0 is of different type [ 236.921816][ T9404] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 236.955779][ T9404] CIFS mount error: No usable UNC path provided in device string! [ 236.955779][ T9404] [ 236.968390][ T9404] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 237.364296][ T9398] loop5: detected capacity change from 0 to 32768 [ 237.458379][ T9398] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 237.470451][ T9420] tipc: Started in network mode [ 237.476887][ T9420] tipc: Node identity 00000000000000000040ffffe0000001, cluster identity 4711 [ 237.491453][ T9420] tipc: Enabling of bearer rejected, failed to enable media [ 237.570756][ T9398] XFS (loop5): Ending clean mount [ 237.585318][ T9430] loop4: detected capacity change from 0 to 1024 [ 237.691438][ T9430] hfsplus: request for non-existent node 33554434 in B*Tree [ 237.699149][ T9430] hfsplus: request for non-existent node 33554434 in B*Tree [ 237.745765][ T9430] hfsplus: request for non-existent node 33554434 in B*Tree [ 237.789184][ T9430] hfsplus: request for non-existent node 33554434 in B*Tree [ 237.816931][ T9433] hfsplus: request for non-existent node 33554434 in B*Tree [ 237.836342][ T8874] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 237.859327][ T9433] hfsplus: request for non-existent node 33554434 in B*Tree [ 237.872518][ T9435] loop3: detected capacity change from 0 to 1764 [ 237.972946][ T34] hfsplus: request for non-existent node 33554434 in B*Tree [ 238.009304][ T34] hfsplus: request for non-existent node 33554434 in B*Tree [ 238.320683][ T9414] loop2: detected capacity change from 0 to 32768 [ 238.340269][ T9414] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.1273 (9414) [ 238.421144][ T9414] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 238.460571][ T9414] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 238.471776][ T9446] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1279'. [ 238.484045][ T9414] BTRFS info (device loop2): enabling disk space caching [ 238.500116][ T9414] BTRFS info (device loop2): force clearing of disk cache [ 238.520246][ T9414] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 238.544186][ T9414] BTRFS info (device loop2): use zstd compression, level 3 [ 238.570604][ T9414] BTRFS info (device loop2): disk space caching is enabled [ 238.709434][ T9414] BTRFS info (device loop2): enabling ssd optimizations [ 238.735842][ T9414] BTRFS info (device loop2): auto enabling async discard [ 238.754360][ T9414] BTRFS info (device loop2): rebuilding free space tree [ 238.789015][ T9414] BTRFS info (device loop2): disabling free space tree [ 238.802834][ T9414] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 238.818559][ T9414] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 238.898359][ T28] audit: type=1800 audit(1776702082.937:62): pid=9414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1273" name="file2" dev="loop2" ino=261 res=0 errno=0 [ 238.957365][ T5772] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 239.859819][ T9501] loop4: detected capacity change from 0 to 512 [ 239.892573][ T9501] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 239.950828][ T9501] System zones: 1-12 [ 239.993689][ T9501] EXT4-fs error (device loop4): ext4_iget_extra_inode:4739: inode #15: comm syz.4.1296: corrupted in-inode xattr: e_value size too large [ 240.070366][ T9501] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1296: couldn't read orphan inode 15 (err -117) [ 240.086219][ T9501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.234128][ T7405] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.599603][ T9508] loop5: detected capacity change from 0 to 32768 [ 240.621124][ T9508] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.1295 (9508) [ 240.678017][ T9508] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 240.701402][ T9508] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 240.736758][ T9508] BTRFS info (device loop5): enabling disk space caching [ 240.760130][ T9508] BTRFS info (device loop5): force clearing of disk cache [ 240.778569][ T9508] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 240.802841][ T9524] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1306'. [ 240.806140][ T9508] BTRFS info (device loop5): use zstd compression, level 3 [ 240.830477][ T9508] BTRFS info (device loop5): disk space caching is enabled [ 240.912589][ T9508] BTRFS info (device loop5): enabling ssd optimizations [ 240.930917][ T9508] BTRFS info (device loop5): auto enabling async discard [ 240.963653][ T9508] BTRFS info (device loop5): rebuilding free space tree [ 241.044618][ T9508] BTRFS info (device loop5): disabling free space tree [ 241.090291][ T9508] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 241.139052][ T9508] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 241.324306][ T28] audit: type=1800 audit(1776702085.357:63): pid=9508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1295" name="file2" dev="loop5" ino=261 res=0 errno=0 [ 241.515551][ T8874] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 241.856986][ T9564] netlink: 'syz.5.1315': attribute type 29 has an invalid length. [ 241.951370][ T9568] loop4: detected capacity change from 0 to 16 [ 241.988144][ T9568] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 242.051902][ T6231] udevd[6231]: incorrect cramfs checksum on /dev/loop4 [ 242.149772][ T6231] udevd[6231]: incorrect cramfs checksum on /dev/loop4 [ 242.257918][ T9551] loop3: detected capacity change from 0 to 32768 [ 242.324680][ T9551] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 242.403388][ T9551] JBD2: Ignoring recovery information on journal [ 242.504647][ T9580] loop2: detected capacity change from 0 to 1024 [ 242.589569][ T9551] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 242.693708][ T34] hfsplus: b-tree write err: -5, ino 25 [ 242.723112][ T34] hfsplus: b-tree write err: -5, ino 4 [ 242.747668][ T34] hfsplus: b-tree write err: -5, ino 2 [ 243.001617][ T8] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 243.052314][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 243.194407][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'. [ 243.215171][ T8] usb 6-1: config 0 has an invalid interface number: 243 but max is 0 [ 243.238831][ T8] usb 6-1: config 0 has no interface number 0 [ 243.258637][ T8] usb 6-1: config 0 interface 243 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 243.294169][ T8] usb 6-1: config 0 interface 243 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.330113][ T8] usb 6-1: config 0 interface 243 has no altsetting 0 [ 243.350190][ T8] usb 6-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 243.373370][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.406461][ T9612] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1332'. [ 243.461244][ T8] usb 6-1: config 0 descriptor?? [ 243.883272][ T8] uclogic 0003:28BD:0905.0009: interface is invalid, ignoring [ 243.971041][ T967] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 244.100777][ T5810] usb 6-1: USB disconnect, device number 2 [ 244.193918][ T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.217992][ T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.232053][ T967] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 244.246018][ T967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.261921][ T967] usb 3-1: config 0 descriptor?? [ 244.355322][ T9648] netlink: 356 bytes leftover after parsing attributes in process `syz.4.1343'. [ 244.430637][ T9651] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1344'. [ 244.511035][ T9655] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1345'. [ 244.698478][ T967] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 244.731271][ T967] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 244.754077][ T967] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 244.774921][ T967] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 244.784241][ T967] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 244.792716][ T9663] loop4: detected capacity change from 0 to 256 [ 244.805824][ T9663] exfat: Deprecated parameter 'namecase' [ 244.812729][ T967] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 244.826753][ T967] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 244.866281][ T9663] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 244.897226][ T967] arvo 0003:1E7D:30D4.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 244.970195][ T967] arvo 0003:1E7D:30D4.000A: couldn't init struct arvo_device [ 245.010139][ T967] arvo 0003:1E7D:30D4.000A: couldn't install keyboard [ 245.052278][ T967] arvo: probe of 0003:1E7D:30D4.000A failed with error -71 [ 245.121584][ T9672] loop5: detected capacity change from 0 to 256 [ 245.160634][ T967] usb 3-1: USB disconnect, device number 12 [ 245.172194][ T9672] exfat: Deprecated parameter 'utf8' [ 245.177721][ T9672] exfat: Deprecated parameter 'utf8' [ 245.200458][ T9672] exfat: Deprecated parameter 'utf8' [ 245.222977][ T9667] fido_id[9667]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 245.283687][ T9672] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 245.512359][ T28] audit: type=1326 audit(1776702089.547:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9679 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8180f9c819 code=0x7ffc0000 [ 245.535864][ T9681] loop3: detected capacity change from 0 to 512 [ 245.587153][ T9681] journal_path: Lookup failure for './file0' [ 245.600150][ T28] audit: type=1326 audit(1776702089.547:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9679 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8180f9c819 code=0x7ffc0000 [ 245.641490][ T9681] EXT4-fs: error: could not find journal device path [ 245.730082][ T28] audit: type=1326 audit(1776702089.567:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9679 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8180f9c819 code=0x7ffc0000 [ 245.882126][ T28] audit: type=1326 audit(1776702089.567:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9679 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8180f9c582 code=0x7ffc0000 [ 245.954023][ T28] audit: type=1326 audit(1776702089.577:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9679 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8180f5d04e code=0x7ffc0000 [ 245.961321][ T9691] loop4: detected capacity change from 0 to 4096 [ 246.046475][ T28] audit: type=1326 audit(1776702089.577:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9679 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8180f9c647 code=0x7ffc0000 [ 246.074304][ T9693] loop2: detected capacity change from 0 to 4096 [ 246.090110][ T9699] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.156969][ T9702] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.194329][ T28] audit: type=1326 audit(1776702089.577:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9679 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8180f5d04e code=0x7ffc0000 [ 246.208114][ T9701] loop3: detected capacity change from 0 to 1024 [ 246.227703][ T28] audit: type=1326 audit(1776702089.577:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9679 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8180f9c4ab code=0x7ffc0000 [ 246.313567][ T28] audit: type=1326 audit(1776702089.627:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9679 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8180f5d04e code=0x7ffc0000 [ 246.448655][ T28] audit: type=1326 audit(1776702089.627:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9679 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8180f5d04e code=0x7ffc0000 [ 246.532158][ T3486] hfsplus: b-tree write err: -5, ino 25 [ 246.538323][ T3486] hfsplus: b-tree write err: -5, ino 4 [ 246.585113][ T3486] hfsplus: b-tree write err: -5, ino 2 [ 246.747671][ T9710] loop4: detected capacity change from 0 to 256 [ 246.790975][ T9710] exfat: Deprecated parameter 'utf8' [ 246.797043][ T9710] exfat: Deprecated parameter 'namecase' [ 246.817743][ T9714] tipc: Enabling of bearer rejected, failed to enable media [ 246.926140][ T9710] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf974f890, utbl_chksum : 0xe619d30d) [ 247.138310][ T9687] loop5: detected capacity change from 0 to 32768 [ 247.318679][ T9687] MetaData crosses page boundary!! [ 247.327982][ T9687] lblock = 6300000010, size = -820051968 [ 247.352035][ T9687] CPU: 1 PID: 9687 Comm: syz.5.1356 Not tainted syzkaller #0 [ 247.360170][ T9687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 247.370883][ T9687] Call Trace: [ 247.375520][ T9687] [ 247.378751][ T9687] dump_stack_lvl+0x18c/0x250 [ 247.383654][ T9687] ? show_regs_print_info+0x20/0x20 [ 247.390124][ T9687] ? load_image+0x420/0x420 [ 247.395028][ T9687] ? folio_unlock+0x118/0x2e0 [ 247.400284][ T9687] __get_metapage+0xaac/0xfa0 [ 247.405454][ T9687] dtSearch+0x591/0x21b0 [ 247.410011][ T9687] ? security_inode_init_security+0x1af/0x380 [ 247.416692][ T9687] jfs_mkdir+0x30f/0xac0 [ 247.421558][ T9687] ? jfs_symlink+0xfa0/0xfa0 [ 247.426838][ T9687] ? make_vfsuid+0x51/0xb0 [ 247.432104][ T9687] ? generic_permission+0x1f3/0x590 [ 247.437827][ T9687] ? inode_permission+0xf3/0x480 [ 247.443240][ T9687] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 247.449080][ T9687] ? security_inode_mkdir+0xb7/0x100 [ 247.454692][ T9687] vfs_mkdir+0x296/0x440 [ 247.459054][ T9687] do_mkdirat+0x1dc/0x450 [ 247.463600][ T9687] ? vfs_mkdir+0x440/0x440 [ 247.468064][ T9687] __x64_sys_mkdirat+0x89/0xa0 [ 247.472959][ T9687] do_syscall_64+0x55/0xa0 [ 247.477491][ T9687] ? clear_bhb_loop+0x40/0x90 [ 247.482619][ T9687] ? clear_bhb_loop+0x40/0x90 [ 247.487779][ T9687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.493972][ T9687] RIP: 0033:0x7fadb739b687 [ 247.498522][ T9687] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.519383][ T9687] RSP: 002b:00007fadb8219e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 247.528537][ T9687] RAX: ffffffffffffffda RBX: 00007fadb8219ee0 RCX: 00007fadb739b687 [ 247.537099][ T9687] RDX: 00000000000001ff RSI: 0000200000000280 RDI: 00000000ffffff9c [ 247.543469][ T9727] loop3: detected capacity change from 0 to 4096 [ 247.545723][ T9687] RBP: 0000200000000300 R08: 00002000000000c0 R09: 0000000000000000 [ 247.561406][ T9687] R10: 0000200000000300 R11: 0000000000000246 R12: 0000200000000280 [ 247.569677][ T9687] R13: 00007fadb8219ea0 R14: 0000000000000000 R15: 0000000000000000 [ 247.578277][ T9687] [ 247.602107][ T9738] loop2: detected capacity change from 0 to 128 [ 247.614475][ T9738] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 247.627441][ T9687] bread failed! [ 247.632054][ T9687] jfs_mkdir: dtSearch returned -5 [ 247.696485][ T9727] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 247.829283][ T9727] ntfs3: loop3: Failed to load $Extend (-22). [ 247.868651][ T9727] ntfs3: loop3: Failed to initialize $Extend. [ 248.149650][ T9750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.220042][ T9750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.249813][ T9750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.268325][ T9750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.284574][ T9750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.313352][ T9750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.338956][ T9750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.360892][ T9750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.372596][ T9750] batadv_slave_1: entered promiscuous mode [ 248.619718][ T9762] exfat: Deprecated parameter 'utf8' [ 248.665109][ T9762] exfat: Deprecated parameter 'namecase' [ 248.795141][ T9762] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf974f890, utbl_chksum : 0xe619d30d) [ 248.905205][ T9771] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 248.936699][ T9771] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 248.967851][ T9771] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 249.031580][ T9771] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 249.050042][ T9771] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 249.070456][ T9771] EXT4-fs (loop4): failed to initialize system zone (-117) [ 249.090560][ T9771] EXT4-fs (loop4): mount failed [ 249.832231][ T9768] set_capacity_and_notify: 2 callbacks suppressed [ 249.832249][ T9768] loop2: detected capacity change from 0 to 32768 [ 249.923490][ T9768] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 250.187715][ T9768] XFS (loop2): Ending clean mount [ 250.275175][ T9768] XFS (loop2): Quotacheck needed: Please wait. [ 250.370505][ T9798] orangefs_mount: mount request failed with -4 [ 250.432117][ T9768] XFS (loop2): Quotacheck: Done. [ 250.645836][ T5772] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 250.865925][ T9853] loop3: detected capacity change from 0 to 512 [ 250.988842][ T9853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.130881][ T9853] EXT4-fs error (device loop3): ext4_lookup:1858: inode #14: comm syz.3.1405: casefold flag without casefold feature [ 251.266995][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.838214][ T9891] loop5: detected capacity change from 0 to 128 [ 251.879505][ T9891] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 251.910428][ T5808] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 251.928785][ T9891] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.118075][ T5808] usb 5-1: Using ep0 maxpacket: 16 [ 252.164421][ T5808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.187023][ T9905] loop3: detected capacity change from 0 to 512 [ 252.214878][ T5808] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 252.280550][ T5808] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 252.301651][ T9905] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 252.312513][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.331543][ T9905] EXT4-fs (loop3): orphan cleanup on readonly fs [ 252.343492][ T9905] __quota_error: 8 callbacks suppressed [ 252.343507][ T9905] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 252.379645][ T5808] usb 5-1: Product: syz [ 252.389272][ T9911] loop2: detected capacity change from 0 to 64 [ 252.411381][ T5808] usb 5-1: Manufacturer: syz [ 252.416136][ T5808] usb 5-1: SerialNumber: syz [ 252.421405][ T9913] loop5: detected capacity change from 0 to 1024 [ 252.434907][ T9913] EXT4-fs: Ignoring removed orlov option [ 252.445292][ T9905] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 252.455943][ T9905] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.1417: Failed to acquire dquot type 1 [ 252.489643][ T9911] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 252.494121][ T9905] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1417: bg 0: block 40: padding at end of block bitmap is not set [ 252.501422][ T5808] usb 5-1: config 0 descriptor?? [ 252.550298][ T9913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.573524][ T9905] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 252.599158][ T5808] mcba_usb 5-1:0.0 can0: couldn't setup read URBs [ 252.605909][ T5808] mcba_usb 5-1:0.0 can0: couldn't start device: -90 [ 252.627299][ T9905] EXT4-fs (loop3): 1 truncate cleaned up [ 252.635389][ T9905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 252.668129][ T9920] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 252.801329][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.826656][ T8874] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.871006][ T5808] mcba_usb: probe of 5-1:0.0 failed with error -90 [ 252.933239][ T5808] usb 5-1: USB disconnect, device number 4 [ 253.809490][ T965] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 253.867199][ T9938] loop3: detected capacity change from 0 to 32768 [ 253.921946][ T28] audit: type=1800 audit(1776702097.967:82): pid=9938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1428" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 254.060172][ T965] usb 3-1: Using ep0 maxpacket: 16 [ 254.072088][ T965] usb 3-1: too many endpoints for config 0 interface 0 altsetting 64: 129, using maximum allowed: 30 [ 254.124661][ T965] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.147019][ T965] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.171278][ T965] usb 3-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 254.187212][ T965] usb 3-1: config 0 interface 0 has no altsetting 0 [ 254.197558][ T965] usb 3-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 254.210372][ T965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.225413][ T965] usb 3-1: config 0 descriptor?? [ 254.897543][ T965] usb 3-1: USB disconnect, device number 13 [ 255.274917][ T9983] loop5: detected capacity change from 0 to 32768 [ 255.309516][ T9983] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 255.633997][ T8874] ocfs2: Unmounting device (7,5) on (node local) [ 255.957655][T10010] binder: 10008:10010 ioctl 4018620d 0 returned -22 [ 255.982170][T10010] binder: 10008:10010 ioctl c0306201 200000000300 returned -11 [ 256.151126][T10015] loop4: detected capacity change from 0 to 512 [ 256.158539][T10015] EXT4-fs: Ignoring removed nomblk_io_submit option [ 256.183084][T10015] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 256.216625][T10015] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 256.247672][T10015] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 256.298269][T10015] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 256.370453][T10015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 256.498741][T10015] EXT4-fs (loop4): Online resizing not supported with sparse_super2 [ 256.587033][T10025] loop5: detected capacity change from 0 to 4096 [ 256.611783][ T7405] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.705789][T10027] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 257.208011][T10045] loop3: detected capacity change from 0 to 1024 [ 257.226652][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.240143][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.276804][T10045] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 257.388221][T10045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.551753][T10045] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.1468: missing EA_INODE flag [ 257.586572][T10045] EXT4-fs (loop3): Remounting filesystem read-only [ 257.763059][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.841447][T10074] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 257.849085][T10074] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 257.950851][T10074] vhci_hcd vhci_hcd.0: Device attached [ 258.210059][ T5808] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 258.270225][ T965] usb 38-1: SetAddress Request (2) to port 0 [ 258.277476][ T965] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 258.317766][T10096] loop4: detected capacity change from 0 to 256 [ 258.349314][T10096] exfat: Deprecated parameter 'utf8' [ 258.400985][ T5808] usb 3-1: Using ep0 maxpacket: 32 [ 258.414877][T10096] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 258.430444][ T5808] usb 3-1: config 0 has no interfaces? [ 258.470458][ T5808] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 258.513458][ T5808] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 258.536331][ T5808] usb 3-1: Product: syz [ 258.569577][ T5808] usb 3-1: Manufacturer: syz [ 258.600976][ T5808] usb 3-1: SerialNumber: syz [ 258.613081][ T5808] usb 3-1: config 0 descriptor?? [ 258.921766][ T5810] usb 3-1: USB disconnect, device number 14 [ 258.925071][T10075] vhci_hcd: cannot find a urb of seqnum 9 max seqnum 1 [ 258.970499][ T1084] vhci_hcd: stop threads [ 258.993664][ T1084] vhci_hcd: release socket [ 259.030093][ T1084] vhci_hcd: disconnect device [ 259.239179][T10126] netlink: 'syz.3.1491': attribute type 1 has an invalid length. [ 259.466714][T10103] loop5: detected capacity change from 0 to 40427 [ 259.534480][T10103] F2FS-fs (loop5): invalid crc value [ 259.572921][T10103] F2FS-fs (loop5): Found nat_bits in checkpoint [ 259.749729][T10103] F2FS-fs (loop5): Start checkpoint disabled! [ 259.776923][T10103] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 259.813284][T10145] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1499'. [ 259.835313][T10143] loop3: detected capacity change from 0 to 512 [ 260.111660][T10151] option changes via remount are deprecated (pid=10148 comm=syz.2.1501) [ 260.133454][T10151] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" [ 260.677451][T10161] loop5: detected capacity change from 0 to 4096 [ 260.702151][T10161] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 260.764929][T10161] ntfs3: loop5: Failed to initialize $Extend/$ObjId. [ 260.811833][T10150] loop4: detected capacity change from 0 to 32768 [ 260.861782][T10165] sp0: Synchronizing with TNC [ 260.890509][T10169] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 261.077463][ T2889] ntfs3: loop5: ino=1e, ntfs3_write_inode failed, -22. [ 261.434258][T10181] loop4: detected capacity change from 0 to 136 [ 261.843907][T10197] netlink: 'syz.3.1523': attribute type 1 has an invalid length. [ 261.871819][T10197] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1523'. [ 261.954662][T10202] loop4: detected capacity change from 0 to 1024 [ 261.995248][T10202] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 262.012466][T10202] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 262.022660][T10202] EXT4-fs (loop4): orphan cleanup on readonly fs [ 262.052631][T10202] EXT4-fs error (device loop4): __ext4_get_inode_loc:4496: comm syz.4.1525: Invalid inode table block 0 in block_group 0 [ 262.070275][T10202] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 262.082101][T10202] EXT4-fs error (device loop4): ext4_quota_write:7342: inode #3: comm syz.4.1525: mark_inode_dirty error [ 262.100881][T10202] Quota error (device loop4): write_blk: dquota write failed [ 262.109583][T10202] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 262.120642][T10202] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1525: Failed to acquire dquot type 0 [ 262.134767][T10202] EXT4-fs error (device loop4): __ext4_get_inode_loc:4496: comm syz.4.1525: Invalid inode table block 0 in block_group 0 [ 262.156565][T10202] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 262.190217][T10202] EXT4-fs error (device loop4): ext4_ext_truncate:4519: inode #15: comm syz.4.1525: mark_inode_dirty error [ 262.212564][T10202] EXT4-fs error (device loop4): __ext4_get_inode_loc:4496: comm syz.4.1525: Invalid inode table block 0 in block_group 0 [ 262.241307][T10202] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 262.264942][T10202] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 262.284716][T10202] EXT4-fs error (device loop4): __ext4_get_inode_loc:4496: comm syz.4.1525: Invalid inode table block 0 in block_group 0 [ 262.361553][T10202] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 262.389665][T10202] EXT4-fs error (device loop4): ext4_truncate:4301: inode #15: comm syz.4.1525: mark_inode_dirty error [ 262.411591][T10202] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 262.433160][T10202] EXT4-fs (loop4): 1 truncate cleaned up [ 262.442290][T10202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 262.592910][ T7405] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.853712][T10228] loop2: detected capacity change from 0 to 1024 [ 262.958317][ T28] audit: type=1800 audit(1776702106.997:83): pid=10228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1543" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 262.973128][T10228] hfsplus: request for non-existent node 16777216 in B*Tree [ 263.030523][T10228] hfsplus: request for non-existent node 16777216 in B*Tree [ 263.174037][ T3450] hfsplus: b-tree write err: -5, ino 25 [ 263.181769][ T3450] hfsplus: b-tree write err: -5, ino 4 [ 263.196453][ T3450] hfsplus: b-tree write err: -5, ino 2 [ 263.380350][ T965] usb 38-1: device descriptor read/8, error -110 [ 263.493251][T10246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1545'. [ 263.535182][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1545'. [ 263.723490][T10255] binder: 10253:10255 ioctl 400c620e 200000001640 returned -22 [ 263.831339][ T965] usb usb38-port1: attempt power cycle [ 263.976026][T10262] loop2: detected capacity change from 0 to 1024 [ 264.010631][T10262] EXT4-fs: Ignoring removed orlov option [ 264.077108][T10262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.159706][T10262] EXT4-fs error (device loop2): __ext4_new_inode:1290: comm syz.2.1552: failed to insert inode 12: doubly allocated? [ 264.274141][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.380618][T10252] loop3: detected capacity change from 0 to 40427 [ 264.400369][T10252] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x7ffff [ 264.434035][T10252] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xe4 [ 264.445518][T10258] loop5: detected capacity change from 0 to 32768 [ 264.452458][T10252] F2FS-fs (loop3): invalid crc value [ 264.473171][T10252] F2FS-fs (loop3): Found nat_bits in checkpoint [ 264.480162][ T8] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 264.491240][T10272] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 264.507567][ T965] usb usb38-port1: unable to enumerate USB device [ 264.560239][T10258] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 264.659414][T10252] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 264.664485][T10283] loop2: detected capacity change from 0 to 512 [ 264.689493][ T8] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 264.690704][T10258] XFS (loop5): Ending clean mount [ 264.720063][ T8] usb 5-1: config 0 has no interface number 0 [ 264.738220][ T8] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 264.791805][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.798897][T10283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.815515][ T8] usb 5-1: Product: syz [ 264.839366][ T8] usb 5-1: Manufacturer: syz [ 264.839539][T10252] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 264.860267][T10283] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.882445][ T8] usb 5-1: SerialNumber: syz [ 264.922557][ T8] usb 5-1: config 0 descriptor?? [ 264.945307][ T5773] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x67/0x200 [ 264.979302][ T8] usb 5-1: selecting invalid altsetting 1 [ 264.989000][ T8] dvb_ttusb_budget: ttusb_init_controller: error [ 264.997140][ T8] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 265.009778][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.078478][ T8874] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 265.154551][ T8] DVB: Unable to find symbol stv0299_attach() [ 265.243920][ T8] DVB: Unable to find symbol tda8083_attach() [ 265.283586][ T8] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 265.331081][ T8] usb 5-1: USB disconnect, device number 5 [ 265.735383][T10293] loop3: detected capacity change from 0 to 16 [ 265.767748][T10293] erofs: (device loop3): mounted with root inode @ nid 36. [ 266.015611][T10302] loop4: detected capacity change from 0 to 256 [ 266.068763][T10305] tipc: Started in network mode [ 266.079633][T10305] tipc: Node identity 00000000000000000040ffffe0000001, cluster identity 9 [ 266.090122][T10305] tipc: Enabling of bearer rejected, failed to enable media [ 266.299087][T10312] blktrace: Concurrent blktraces are not allowed on sg0 [ 266.459516][T10308] loop2: detected capacity change from 0 to 8192 [ 266.536829][T10308] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 266.579692][T10308] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 266.597014][T10308] REISERFS (device loop2): using ordered data mode [ 266.605236][T10308] reiserfs: using flush barriers [ 266.613009][T10308] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 266.637172][T10308] REISERFS (device loop2): checking transaction log (loop2) [ 266.655494][T10308] REISERFS (device loop2): Using r5 hash to sort names [ 266.711073][T10308] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 267.133453][T10335] loop2: detected capacity change from 0 to 512 [ 267.144119][T10338] loop4: detected capacity change from 0 to 128 [ 267.158604][T10339] loop5: detected capacity change from 0 to 128 [ 267.160938][T10338] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 267.210761][T10338] hpfs: filesystem error: improperly stopped [ 267.225310][T10335] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 267.235883][T10338] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 267.248650][T10335] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 267.257662][T10338] hpfs: You really don't want any checks? You are crazy... [ 267.267383][T10338] hpfs: hpfs_map_sector(): read error [ 267.273178][T10335] System zones: 0-1, 15-15, 18-18, 34-34 [ 267.279235][T10338] hpfs: code page support is disabled [ 267.281461][T10335] EXT4-fs (loop2): orphan cleanup on readonly fs [ 267.286385][T10338] hpfs: hpfs_map_4sectors(): unaligned read [ 267.300202][T10338] hpfs: hpfs_map_4sectors(): unaligned read [ 267.306409][T10338] hpfs: filesystem error: unable to find root dir [ 267.361600][T10335] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 267.372602][T10335] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 267.416687][T10335] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 267.443361][T10343] loop4: detected capacity change from 0 to 64 [ 267.472105][T10335] EXT4-fs (loop2): 1 truncate cleaned up [ 267.479323][T10335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 267.543116][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.585707][T10343] hfs: bad catalog entry type 65409 [ 267.918133][T10329] loop3: detected capacity change from 0 to 32768 [ 267.933673][T10355] loop5: detected capacity change from 0 to 256 [ 268.000158][T10329] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 268.047822][T10355] FAT-fs (loop5): Directory bread(block 64) failed [ 268.081969][T10355] FAT-fs (loop5): Directory bread(block 65) failed [ 268.115761][T10355] FAT-fs (loop5): Directory bread(block 66) failed [ 268.128929][T10329] XFS (loop3): Ending clean mount [ 268.153159][T10355] FAT-fs (loop5): Directory bread(block 67) failed [ 268.160888][T10355] FAT-fs (loop5): Directory bread(block 68) failed [ 268.167967][T10355] FAT-fs (loop5): Directory bread(block 69) failed [ 268.175557][T10355] FAT-fs (loop5): Directory bread(block 70) failed [ 268.183389][T10355] FAT-fs (loop5): Directory bread(block 71) failed [ 268.191023][T10355] FAT-fs (loop5): Directory bread(block 72) failed [ 268.199591][T10355] FAT-fs (loop5): Directory bread(block 73) failed [ 268.277817][ T8] IPVS: starting estimator thread 0... [ 268.306048][T10355] syz.5.1588: attempt to access beyond end of device [ 268.306048][T10355] loop5: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 268.345654][T10355] syz.5.1588: attempt to access beyond end of device [ 268.345654][T10355] loop5: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 268.390138][T10368] IPVS: using max 22 ests per chain, 52800 per kthread [ 268.411927][ T28] audit: type=1800 audit(1776702112.447:84): pid=10355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1588" name="file0" dev="loop5" ino=1048708 res=0 errno=0 [ 268.444198][ T5773] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 268.819198][T10379] loop4: detected capacity change from 0 to 2048 [ 268.865210][T10379] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 268.884242][T10382] EXT4-fs (loop3): Test dummy encryption mode enabled [ 268.908066][T10382] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 268.964975][T10382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 269.023600][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.573691][T10401] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 269.820237][T10406] FAT-fs (loop3): Directory bread(block 64) failed [ 269.856651][T10406] FAT-fs (loop3): Directory bread(block 65) failed [ 269.893092][T10406] FAT-fs (loop3): Directory bread(block 66) failed [ 269.941171][T10406] FAT-fs (loop3): Directory bread(block 67) failed [ 269.949208][T10406] FAT-fs (loop3): Directory bread(block 68) failed [ 269.994200][T10406] FAT-fs (loop3): Directory bread(block 69) failed [ 270.006093][T10406] FAT-fs (loop3): Directory bread(block 70) failed [ 270.022341][T10406] FAT-fs (loop3): Directory bread(block 71) failed [ 270.031293][T10417] EXT4-fs: Ignoring removed bh option [ 270.037906][T10406] FAT-fs (loop3): Directory bread(block 72) failed [ 270.050144][T10406] FAT-fs (loop3): Directory bread(block 73) failed [ 270.083434][T10417] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e018, mo2=0003] [ 270.110213][T10417] System zones: 1-12 [ 270.114823][T10417] EXT4-fs (loop4): orphan cleanup on readonly fs [ 270.185526][T10417] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1610: invalid indirect mapped block 1819239214 (level 1) [ 270.215563][T10406] syz.3.1605: attempt to access beyond end of device [ 270.215563][T10406] loop3: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 270.280363][T10406] syz.3.1605: attempt to access beyond end of device [ 270.280363][T10406] loop3: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 270.300367][T10417] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1610: bg 0: block 361: padding at end of block bitmap is not set [ 270.326470][ T28] audit: type=1800 audit(1776702114.367:85): pid=10406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1605" name="file0" dev="loop3" ino=1048710 res=0 errno=0 [ 270.393177][T10417] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 270.447200][T10417] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1610: attempt to clear invalid blocks 33619980 len 1 [ 270.481313][T10417] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1610: invalid indirect mapped block 1819239214 (level 0) [ 270.524309][T10417] EXT4-fs (loop4): 1 truncate cleaned up [ 270.551506][T10417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 270.710940][T10417] EXT4-fs: Ignoring removed orlov option [ 270.716877][T10417] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 270.781174][T10417] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 270.824404][T10417] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=802e11c, mo2=0003] [ 270.848077][T10417] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 270.948613][ T7405] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.230437][ T5809] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 271.268026][T10430] set_capacity_and_notify: 4 callbacks suppressed [ 271.268043][T10430] loop2: detected capacity change from 0 to 40427 [ 271.314609][T10430] F2FS-fs (loop2): invalid crc value [ 271.331249][T10430] F2FS-fs (loop2): Found nat_bits in checkpoint [ 271.408916][T10449] netlink: 'syz.4.1624': attribute type 4 has an invalid length. [ 271.430874][ T5809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.449251][T10449] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1624'. [ 271.463907][ T5809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.471219][T10430] F2FS-fs (loop2): Start checkpoint disabled! [ 271.488670][ T5809] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 271.503792][ T5809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.522419][T10430] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 271.523415][ T5809] usb 6-1: config 0 descriptor?? [ 271.679789][T10455] loop3: detected capacity change from 0 to 4096 [ 271.739883][T10455] NILFS (loop3): invalid segment: Checksum error in segment payload [ 271.760084][T10455] NILFS (loop3): trying rollback from an earlier position [ 271.809287][T10455] NILFS (loop3): recovery complete [ 271.832201][T10456] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 271.869330][ T1084] kworker/u4:5: attempt to access beyond end of device [ 271.869330][ T1084] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 271.886010][ T1084] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 271.904648][ T1084] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 271.972550][ T5809] hkems 0003:2006:0118.000C: bogus close delimiter [ 271.979139][ T5809] hkems 0003:2006:0118.000C: item 0 0 2 10 parsing failed [ 272.008288][ T5809] hkems 0003:2006:0118.000C: parse failed [ 272.020290][ T5809] hkems: probe of 0003:2006:0118.000C failed with error -22 [ 272.151377][T10458] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 272.193069][ T967] usb 6-1: USB disconnect, device number 3 [ 272.289522][T10453] loop4: detected capacity change from 0 to 32768 [ 272.311942][T10453] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1625 (10453) [ 272.340717][T10453] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 272.362363][T10453] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 272.383498][T10453] BTRFS info (device loop4): using free space tree [ 272.540345][T10453] BTRFS info (device loop4): enabling ssd optimizations [ 272.542135][T10477] loop3: detected capacity change from 0 to 512 [ 272.553277][T10453] BTRFS info (device loop4): auto enabling async discard [ 272.585904][T10477] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 272.628950][T10477] EXT4-fs (loop3): orphan cleanup on readonly fs [ 272.672693][T10477] Quota error (device loop3): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 272.727634][T10477] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 272.773867][T10477] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 272.787325][T10485] loop2: detected capacity change from 0 to 1024 [ 272.801994][T10477] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.1630: bg 0: block 15: invalid block bitmap [ 272.823727][T10477] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 272.826513][ T7405] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 272.854388][T10477] EXT4-fs (loop3): 1 truncate cleaned up [ 272.891893][T10477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 272.894488][T10487] loop5: detected capacity change from 0 to 512 [ 272.981147][T10477] EXT4-fs error (device loop3): ext4_get_link:104: inode #16: comm syz.3.1630: bad symlink. [ 273.004032][T10487] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 273.034822][T10477] EXT4-fs error (device loop3): ext4_get_link:104: inode #16: comm syz.3.1630: bad symlink. [ 273.060141][ T34] hfsplus: b-tree write err: -5, ino 25 [ 273.070122][T10487] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.1634: bad orphan inode 131083 [ 273.076754][ T34] hfsplus: b-tree write err: -5, ino 4 [ 273.107266][ T34] hfsplus: b-tree write err: -5, ino 2 [ 273.115082][T10487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.146423][T10487] overlayfs: upper fs needs to support d_type. [ 273.208192][ T8874] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /113/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 273.266333][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.711864][ T8874] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.901774][T10491] loop4: detected capacity change from 0 to 32768 [ 273.918016][ T3524] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.995351][T10501] loop3: detected capacity change from 0 to 2048 [ 274.009923][T10491] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 274.054901][T10501] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 274.134264][ T3524] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.152640][ T28] audit: type=1800 audit(1776702118.187:86): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1640" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 274.293993][ T3524] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.334450][T10508] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1642'. [ 274.392276][T10491] XFS (loop4): Ending clean mount [ 274.532591][ T3524] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.688425][ T7405] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 275.141237][ T967] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 275.266776][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.272317][T10521] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 275.298796][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.309158][T10521] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 275.317420][T10521] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 275.326749][T10521] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 275.337666][T10521] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 275.346697][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.354670][T10521] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 275.366981][T10521] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 275.375097][T10521] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 275.380167][ T967] usb 4-1: Using ep0 maxpacket: 16 [ 275.382181][T10521] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 275.395387][T10521] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 275.403049][T10521] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 275.410607][T10521] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 275.419001][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.420186][T10521] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 275.470163][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.480865][ T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.500439][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.514439][T10521] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 275.524203][ T967] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 275.539496][T10521] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 275.596220][ T967] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 275.634675][ T967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.635170][T10521] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 275.651124][T10521] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 275.668716][T10521] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 275.670235][ T967] usb 4-1: Product: syz [ 275.678284][T10521] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 275.717684][ T967] usb 4-1: Manufacturer: syz [ 275.730083][ T967] usb 4-1: SerialNumber: syz [ 275.749648][T10521] comedi comedi3: 8255: I/O port conflict (0x1000,4) [ 275.766948][ T967] usb 4-1: config 0 descriptor?? [ 275.784296][T10521] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 275.802176][T10521] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 275.818208][T10521] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 275.822431][ T967] mcba_usb 4-1:0.0 can0: couldn't setup read URBs [ 275.853804][ T967] mcba_usb 4-1:0.0 can0: couldn't start device: -90 [ 276.095517][ T967] mcba_usb: probe of 4-1:0.0 failed with error -90 [ 276.140487][ T967] usb 4-1: USB disconnect, device number 12 [ 277.086293][T10554] loop4: detected capacity change from 0 to 32768 [ 277.105323][T10554] XFS: noikeep mount option is deprecated. [ 277.205234][T10554] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 277.226736][T10522] chnl_net:caif_netlink_parms(): no params data found [ 277.229868][T10554] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 277.303193][T10569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1661'. [ 277.351965][T10569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1661'. [ 277.508629][T10554] XFS (loop4): Ending clean mount [ 277.618845][T10554] XFS (loop4): Quotacheck needed: Please wait. [ 277.631157][ T5774] Bluetooth: hci0: command tx timeout [ 277.860529][T10554] XFS (loop4): Quotacheck: Done. [ 277.964435][ T3524] hsr_slave_0: left promiscuous mode [ 277.979484][ T7405] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 278.047580][ T3524] hsr_slave_1: left promiscuous mode [ 278.062022][ T3524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.080089][ T3524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.109282][ T3524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.156360][ T3524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.186733][ T3524] bridge_slave_1: left allmulticast mode [ 278.215741][ T3524] bridge_slave_1: left promiscuous mode [ 278.222374][ T23] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 278.253066][ T3524] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.324482][ T3524] bridge_slave_0: left allmulticast mode [ 278.350868][ T3524] bridge_slave_0: left promiscuous mode [ 278.370215][ T3524] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.440060][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 278.457286][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.481614][ T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 278.525078][ T23] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 278.535858][T10605] overlayfs: conflicting options: nfs_export=on,index=off [ 278.551289][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.559833][ T23] usb 3-1: Product: syz [ 278.609140][ T3524] batadv_slave_1: left promiscuous mode [ 278.615312][ T23] usb 3-1: Manufacturer: syz [ 278.630504][ T23] usb 3-1: SerialNumber: syz [ 278.646923][ T23] usb 3-1: config 0 descriptor?? [ 278.681041][ T3524] veth1_macvtap: left promiscuous mode [ 278.686884][ T3524] veth0_macvtap: left promiscuous mode [ 278.711388][ T3524] veth1_vlan: left promiscuous mode [ 278.730510][ T3524] veth0_vlan: left promiscuous mode [ 279.568815][T10617] loop2: detected capacity change from 0 to 1024 [ 279.616239][T10617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.710084][ T5774] Bluetooth: hci0: command tx timeout [ 279.750673][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.249383][T10623] loop2: detected capacity change from 0 to 32768 [ 280.286752][T10623] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 280.323263][ T3524] team0 (unregistering): Port device team_slave_1 removed [ 280.361309][T10623] XFS (loop2): Ending clean mount [ 280.380343][T10623] XFS (loop2): Quotacheck needed: Please wait. [ 280.409546][ T3524] team0 (unregistering): Port device team_slave_0 removed [ 280.523199][ T3524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.529412][T10623] XFS (loop2): Quotacheck: Done. [ 280.647070][ T3524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.697224][ T5772] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 281.181205][ T3524] bond0 (unregistering): Released all slaves [ 281.330427][ T23] mcba_usb 3-1:0.0 can0: couldn't setup read URBs [ 281.337552][ T23] mcba_usb 3-1:0.0 can0: couldn't start device: -90 [ 281.467665][T10635] loop4: detected capacity change from 0 to 2048 [ 281.480532][T10522] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.488415][T10522] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.496510][T10522] bridge_slave_0: entered allmulticast mode [ 281.504615][T10522] bridge_slave_0: entered promiscuous mode [ 281.520818][T10522] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.520845][ T23] mcba_usb: probe of 3-1:0.0 failed with error -90 [ 281.528444][T10522] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.550074][T10637] loop3: detected capacity change from 0 to 256 [ 281.553300][T10522] bridge_slave_1: entered allmulticast mode [ 281.562591][T10635] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 281.594903][T10522] bridge_slave_1: entered promiscuous mode [ 281.651333][ T23] usb 3-1: USB disconnect, device number 15 [ 281.678637][T10637] FAT-fs (loop3): Directory bread(block 64) failed [ 281.684348][ T28] audit: type=1800 audit(1776702125.717:87): pid=10635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1679" name="file1" dev="loop4" ino=1415 res=0 errno=0 [ 281.700254][T10637] FAT-fs (loop3): Directory bread(block 65) failed [ 281.734686][T10522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.749129][T10637] FAT-fs (loop3): Directory bread(block 66) failed [ 281.771090][T10637] FAT-fs (loop3): Directory bread(block 67) failed [ 281.783853][ T5774] Bluetooth: hci0: command tx timeout [ 281.806254][T10522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.810183][T10637] FAT-fs (loop3): Directory bread(block 68) failed [ 281.836251][T10637] FAT-fs (loop3): Directory bread(block 69) failed [ 281.878235][T10637] FAT-fs (loop3): Directory bread(block 70) failed [ 281.950280][T10637] FAT-fs (loop3): Directory bread(block 71) failed [ 281.974083][T10522] team0: Port device team_slave_0 added [ 282.021531][T10522] team0: Port device team_slave_1 added [ 282.029025][T10637] FAT-fs (loop3): Directory bread(block 72) failed [ 282.060666][T10637] FAT-fs (loop3): Directory bread(block 73) failed [ 282.152847][T10522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.174851][T10522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.300176][T10522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.392067][T10522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.399328][T10522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.457646][T10522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.711246][T10658] netlink: 'syz.4.1685': attribute type 1 has an invalid length. [ 282.729861][T10658] netlink: 'syz.4.1685': attribute type 2 has an invalid length. [ 282.759042][T10522] hsr_slave_0: entered promiscuous mode [ 282.803413][T10522] hsr_slave_1: entered promiscuous mode [ 283.169363][T10522] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 283.181010][T10522] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 283.197021][T10522] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 283.207099][T10522] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 283.336133][T10522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.372905][T10522] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.406963][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.414451][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.445415][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.453099][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.860142][ T5774] Bluetooth: hci0: command tx timeout [ 283.892453][T10693] loop4: detected capacity change from 0 to 256 [ 284.177083][T10522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.557131][T10716] loop4: detected capacity change from 0 to 512 [ 284.601723][T10716] EXT4-fs: Ignoring removed nobh option [ 284.671908][T10716] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 284.685372][T10716] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 284.695626][T10716] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #13: comm syz.4.1698: inode has both inline data and extents flags [ 284.716497][T10716] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1698: couldn't read orphan inode 13 (err -117) [ 284.736213][T10716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.768270][T10716] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 284.812125][ T7405] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.063523][T10522] veth0_vlan: entered promiscuous mode [ 285.129926][T10522] veth1_vlan: entered promiscuous mode [ 285.248783][T10522] veth0_macvtap: entered promiscuous mode [ 285.280397][T10522] veth1_macvtap: entered promiscuous mode [ 285.333157][T10522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.381326][T10522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.420239][T10522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.460416][T10522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.500333][T10522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.534106][T10522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.571757][T10742] loop2: detected capacity change from 0 to 512 [ 285.582426][T10522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.626477][T10742] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 285.681581][T10522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.736867][T10714] loop3: detected capacity change from 0 to 32768 [ 285.748098][T10522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.777504][T10522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.814655][T10522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.837209][T10522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.849189][T10522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.850583][T10714] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 285.883455][T10522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.964926][T10522] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.026310][T10522] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.064054][T10522] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.082750][T10522] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.106965][T10714] XFS (loop3): Ending clean mount [ 286.149930][T10764] vlan3: entered promiscuous mode [ 286.194330][T10764] dummy0: entered promiscuous mode [ 286.475227][ T3513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.483294][ T5773] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 286.518460][ T3513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.642695][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.684591][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.314947][T10795] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1721'. [ 287.424353][T10799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1722'. [ 287.466911][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1722'. [ 287.502502][T10799] netlink: 'syz.4.1722': attribute type 7 has an invalid length. [ 288.513288][T10829] loop6: detected capacity change from 0 to 4096 [ 288.575899][T10829] ntfs3: loop6: Different NTFS sector size (1024) and media sector size (512). [ 288.735503][T10813] loop3: detected capacity change from 0 to 32768 [ 288.827422][T10818] loop4: detected capacity change from 0 to 32768 [ 288.932891][T10818] JBD2: Ignoring recovery information on journal [ 289.103428][T10818] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 289.483648][ T7405] ocfs2: Unmounting device (7,4) on (node local) [ 289.687354][T10858] loop2: detected capacity change from 0 to 2048 [ 289.731269][T10858] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 289.993641][T10868] loop2: detected capacity change from 0 to 128 [ 290.037349][T10868] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 290.084907][T10868] ext4 filesystem being mounted at /433/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 290.246846][T10878] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 290.310180][ T5772] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 290.550339][ T967] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 290.762753][ T967] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 290.788122][ T967] usb 4-1: config 0 has no interface number 0 [ 290.800277][ T967] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 290.819822][ T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.841813][ T967] usb 4-1: config 0 descriptor?? [ 290.869398][ T967] usb 4-1: selecting invalid altsetting 1 [ 290.885818][ T967] dvb_ttusb_budget: ttusb_init_controller: error [ 290.920565][ T967] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 291.105825][ T967] DVB: Unable to find symbol cx22700_attach() [ 291.184258][T10913] loop6: detected capacity change from 0 to 1024 [ 291.242691][T10913] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.243260][ T967] DVB: Unable to find symbol tda10046_attach() [ 291.291549][ T967] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 291.310936][ T967] usb 4-1: USB disconnect, device number 13 [ 291.329123][T10913] EXT4-fs warning (device loop6): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 291.478417][T10522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.541100][ T965] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 291.751166][ T965] usb 3-1: Using ep0 maxpacket: 16 [ 291.797587][ T965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.853643][ T965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.891620][ T965] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 291.920765][ T965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.966840][ T965] usb 3-1: config 0 descriptor?? [ 292.061695][T10936] loop6: detected capacity change from 0 to 4096 [ 292.076882][T10940] loop4: detected capacity change from 0 to 8 [ 292.081888][T10936] ntfs3: loop6: Different NTFS sector size (1024) and media sector size (512). [ 292.154463][T10936] ntfs3: loop6: Failed to initialize $Extend/$ObjId. [ 292.432550][ T965] corsair 0003:1B1C:1B02.000D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 292.437429][ T3513] ntfs3: loop6: ino=1e, ntfs3_write_inode failed, -22. [ 292.627476][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1769'. [ 292.639617][ T965] corsair 0003:1B1C:1B02.000D: Failed to get K90 initial state (error -71). [ 292.710210][ T965] usb 3-1: USB disconnect, device number 16 [ 292.793413][T10945] fido_id[10945]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 292.897676][T10931] loop3: detected capacity change from 0 to 40427 [ 292.925843][T10931] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 292.944652][T10931] F2FS-fs (loop3): Image doesn't support compression [ 292.958784][T10931] F2FS-fs (loop3): Image doesn't support compression [ 292.966696][T10931] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 293.020637][T10931] F2FS-fs (loop3): invalid crc value [ 293.067278][T10931] F2FS-fs (loop3): Found nat_bits in checkpoint [ 293.174296][T10931] F2FS-fs (loop3): Start checkpoint disabled! [ 293.202249][T10931] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 293.310728][T10931] syz.3.1763: attempt to access beyond end of device [ 293.310728][T10931] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 293.321096][T10965] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1773'. [ 293.565393][ T3486] kworker/u4:10: attempt to access beyond end of device [ 293.565393][ T3486] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 293.591048][T10972] loop2: detected capacity change from 0 to 64 [ 293.613876][ T3486] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 293.629584][T10974] netlink: 'syz.6.1778': attribute type 1 has an invalid length. [ 293.631564][ T3486] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 293.645264][T10970] loop4: detected capacity change from 0 to 8192 [ 293.719471][T10970] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 293.763724][T10970] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 293.810178][T10970] REISERFS (device loop4): using ordered data mode [ 293.862006][T10970] reiserfs: using flush barriers [ 293.895662][T10970] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 293.916838][T10978] loop6: detected capacity change from 0 to 128 [ 293.975879][T10970] REISERFS (device loop4): checking transaction log (loop4) [ 294.257844][T10970] REISERFS (device loop4): Using r5 hash to sort names [ 294.280822][T10970] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 294.379655][T10987] loop2: detected capacity change from 0 to 64 [ 294.986920][T11004] set_capacity_and_notify: 1 callbacks suppressed [ 294.986935][T11004] loop6: detected capacity change from 0 to 256 [ 295.025940][T11004] exfat: Deprecated parameter 'debug' [ 295.060758][T11004] exfat: Unexpected value for 'debug' [ 295.100096][ T6231] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 295.365660][T11015] tipc: Cannot configure node identity twice [ 295.452906][T11016] loop3: detected capacity change from 0 to 2048 [ 295.498343][T11016] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.586301][T11016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.635458][T11000] loop2: detected capacity change from 0 to 40427 [ 295.716244][T11000] F2FS-fs (loop2): Found nat_bits in checkpoint [ 295.717549][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.829219][T11000] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 296.521280][T11043] 9pnet_rdma: rdma_create_trans (11043): problem binding to privport: 13 [ 296.628875][T11028] loop4: detected capacity change from 0 to 32768 [ 296.667278][T11028] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1799 (11028) [ 296.683491][ T967] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 296.707604][T11028] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 296.721754][T11028] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 296.733284][T11028] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 296.745953][T11028] BTRFS info (device loop4): use zstd compression, level 3 [ 296.753842][T11028] BTRFS info (device loop4): using free space tree [ 296.824351][T11028] BTRFS info (device loop4): enabling ssd optimizations [ 296.854293][T11028] BTRFS info (device loop4): auto enabling async discard [ 296.897113][ T967] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 296.922659][ T967] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.941835][ T967] usb 7-1: Product: syz [ 296.960077][ T967] usb 7-1: Manufacturer: syz [ 296.970237][ T967] usb 7-1: SerialNumber: syz [ 296.994151][ T28] audit: type=1800 audit(1776702141.037:88): pid=11028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1799" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 297.015930][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.029406][ T967] usb 7-1: config 0 descriptor?? [ 297.154580][ T7405] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 297.207523][T11072] loop2: detected capacity change from 0 to 8192 [ 297.247120][T11072] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 297.280855][T11072] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 297.327881][T11072] REISERFS (device loop2): using ordered data mode [ 297.338229][T11072] reiserfs: using flush barriers [ 297.375434][T11072] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 297.471015][T11072] REISERFS (device loop2): checking transaction log (loop2) [ 297.704246][ T967] usb 7-1: Firmware version (0.0) predates our first public release. [ 297.727620][ T967] usb 7-1: Please update to version 0.2 or newer [ 297.766437][T11078] sctp: [Deprecated]: syz.3.1813 (pid 11078) Use of int in max_burst socket option. [ 297.766437][T11078] Use struct sctp_assoc_value instead [ 297.883379][T11072] REISERFS (device loop2): Using tea hash to sort names [ 297.909415][T11072] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 297.923973][ T967] usb 7-1: USB disconnect, device number 2 [ 298.100285][T11076] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 298.249124][T11076] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 298.552427][T11076] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 298.608867][T11095] sit0: entered promiscuous mode [ 298.626215][T11095] netlink: 'syz.6.1817': attribute type 1 has an invalid length. [ 298.694072][T11095] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1817'. [ 298.751578][T11076] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 298.758645][T11076] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 298.844923][T11076] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 298.900699][T11102] netlink: 'syz.2.1816': attribute type 5 has an invalid length. [ 299.140796][T11108] loop3: detected capacity change from 0 to 2048 [ 299.207970][T11108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.255916][T11114] loop6: detected capacity change from 0 to 2048 [ 299.288495][T11108] ext4 filesystem being mounted at /434/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.358180][T11114] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.383897][T11118] loop2: detected capacity change from 0 to 256 [ 299.423966][T11108] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 299.443681][T11118] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 299.519223][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.556237][T11114] EXT4-fs error (device loop6): ext4_find_extent:945: inode #2: comm syz.6.1823: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 299.632816][T11114] EXT4-fs (loop6): Remounting filesystem read-only [ 299.831928][T10522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.020236][ T5774] Bluetooth: hci2: command 0x0c1a tx timeout [ 300.420569][ T965] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 300.613353][ T965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 300.635522][ T965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 300.667892][ T965] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 300.706413][ T965] usb 3-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 300.729192][ T965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.779186][ T965] usb 3-1: config 0 descriptor?? [ 300.794337][T11132] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 300.828091][ T5774] Bluetooth: hci0: command 0x0c1a tx timeout [ 300.953518][T11137] loop6: detected capacity change from 0 to 32768 [ 301.028329][T11137] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 301.081068][T11137] JBD2: Ignoring recovery information on journal [ 301.187843][T11137] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 301.228489][ T965] elecom 0003:056E:00FC.000E: unknown main item tag 0x3 [ 301.251397][ T965] elecom 0003:056E:00FC.000E: unknown global tag 0xe [ 301.259176][ T965] elecom 0003:056E:00FC.000E: item 0 1 1 14 parsing failed [ 301.288053][ T965] elecom: probe of 0003:056E:00FC.000E failed with error -22 [ 301.415603][T10522] ocfs2: Unmounting device (7,6) on (node local) [ 301.429167][ T965] usb 3-1: USB disconnect, device number 17 [ 301.657544][T11155] loop4: detected capacity change from 0 to 1024 [ 301.740504][T11155] EXT4-fs: Ignoring removed bh option [ 301.743273][T11158] loop3: detected capacity change from 0 to 764 [ 301.762073][T11155] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 301.801383][T11155] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #3: block 1: comm syz.4.1839: lblock 1 mapped to illegal pblock 1 (length 1) [ 301.817273][T11155] Quota error (device loop4): write_blk: dquota write failed [ 301.825915][T11155] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 301.836426][T11155] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1839: Failed to acquire dquot type 0 [ 301.874236][T11155] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.1839: Freeing blocks not in datazone - block = 0, count = 4096 [ 302.023900][T11155] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1839: Invalid inode bitmap blk 0 in block_group 0 [ 302.041188][ T1084] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 302.100895][ T5774] Bluetooth: hci2: command 0x0c1a tx timeout [ 302.164146][T11155] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 302.167512][ T1084] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 302.211791][ T1084] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:5: Failed to release dquot type 0 [ 302.240218][T11155] EXT4-fs (loop4): 1 orphan inode deleted [ 302.261619][T11155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.287226][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.317694][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.340296][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.348464][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.396168][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.422959][T11155] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 302.441495][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.449479][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.485699][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.494062][T11155] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (18333!=0) [ 302.499752][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.527348][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.543685][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.555306][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.580131][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.613294][ T7405] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.620048][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.656270][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.681361][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.689094][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.729661][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.758641][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.766921][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.816596][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.843736][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.873740][T11195] loop2: detected capacity change from 0 to 256 [ 302.879326][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.890251][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.907708][ T5774] Bluetooth: hci0: command 0x0c1a tx timeout [ 302.940188][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.948035][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.956566][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.966155][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.980285][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.988452][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 302.997108][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.005983][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.015103][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.029223][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.061708][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.080221][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.088464][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.150575][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.158302][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.224771][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.256242][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.297671][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.329755][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.340456][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.348816][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.359809][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.363811][T11207] loop2: detected capacity change from 0 to 1024 [ 303.368701][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.399220][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.408356][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.427667][T11207] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 303.442585][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.452482][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.460804][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.512917][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.530619][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.566979][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.588972][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.612127][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.629029][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.641734][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.663237][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.674835][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.731432][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.750099][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.758703][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.822637][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.849042][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.867903][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.880240][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.897237][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.936590][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 303.985658][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.000650][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.009350][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.019433][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.038576][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.070092][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.078896][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.110156][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.118543][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.139267][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.180552][ T5774] Bluetooth: hci2: command 0x0c1a tx timeout [ 304.186830][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.209465][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.218218][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.227323][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.235768][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.248333][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.284072][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.314190][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.327264][T11239] loop2: detected capacity change from 0 to 512 [ 304.338498][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.363644][T11239] EXT4-fs: Ignoring removed i_version option [ 304.367483][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.369767][T11239] EXT4-fs: Ignoring removed bh option [ 304.412893][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.450240][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.480110][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.526577][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.541538][T11239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.570123][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.577898][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.611708][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.630260][T11239] ext4 filesystem being mounted at /461/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 304.650143][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.657943][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.680859][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.689062][ T5809] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0 [ 304.715965][ T5809] hid-generic 0000:0000:0004.000F: hidraw0: HID v0.03 Device [syz0] on syz1 [ 304.760114][ T27] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 304.901599][T11259] loop3: detected capacity change from 0 to 64 [ 304.905705][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.943723][T11257] fido_id[11257]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 304.970879][ T27] usb 7-1: Using ep0 maxpacket: 32 [ 304.980215][ T5774] Bluetooth: hci0: command 0x0c1a tx timeout [ 305.017320][ T27] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 305.070826][ T27] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 305.084493][ T27] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 305.124519][T11263] loop4: detected capacity change from 0 to 256 [ 305.130560][ T27] usb 7-1: config 1 has no interface number 0 [ 305.137493][ T27] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 305.199605][ T27] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 305.241807][ T27] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 305.257729][T11266] loop3: detected capacity change from 0 to 164 [ 305.258988][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.298601][T11263] FAT-fs (loop4): Directory bread(block 64) failed [ 305.310123][T11263] FAT-fs (loop4): Directory bread(block 65) failed [ 305.338078][T11263] FAT-fs (loop4): Directory bread(block 66) failed [ 305.376359][T11263] FAT-fs (loop4): Directory bread(block 67) failed [ 305.403566][ T27] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 305.430322][T11263] FAT-fs (loop4): Directory bread(block 68) failed [ 305.435721][T11266] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 305.451435][T11263] FAT-fs (loop4): Directory bread(block 69) failed [ 305.495418][T11263] FAT-fs (loop4): Directory bread(block 70) failed [ 305.508126][T11263] FAT-fs (loop4): Directory bread(block 71) failed [ 305.528546][T11263] FAT-fs (loop4): Directory bread(block 72) failed [ 305.538458][T11273] loop2: detected capacity change from 0 to 1024 [ 305.545296][T11263] FAT-fs (loop4): Directory bread(block 73) failed [ 305.575172][T11273] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 305.616017][ T27] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 305.778547][T11273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.921185][T11273] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 306.167734][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.209867][ T5810] usb 7-1: USB disconnect, device number 3 [ 306.271347][ T5810] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 306.381646][T11299] set_capacity_and_notify: 1 callbacks suppressed [ 306.381662][T11299] loop3: detected capacity change from 0 to 256 [ 306.461580][ T5759] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 306.691151][ T5759] usb 5-1: Using ep0 maxpacket: 16 [ 306.716095][ T5759] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.742212][ T5759] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.776135][ T5759] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 306.813714][ T5759] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 306.829146][ T5759] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.840891][ T5759] usb 5-1: config 0 descriptor?? [ 306.941030][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1889'. [ 307.068947][ T5774] Bluetooth: hci0: command 0x0c1a tx timeout [ 307.265275][ T5759] microsoft 0003:045E:07DA.0010: No inputs registered, leaving [ 307.303693][T11331] 9pnet: Could not find request transport: uni^ek}¨útoرÞ—½Òò)ê&KªpñJwÍs ¶A²ßÌ4}(3‰…†ëÝ’Ù [ 307.320096][ T5759] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 307.380576][ T5759] microsoft 0003:045E:07DA.0010: no inputs found [ 307.391325][ T5759] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway [ 307.476938][ T27] usb 5-1: USB disconnect, device number 6 [ 307.525619][T11333] fido_id[11333]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 307.917953][T11352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1902'. [ 307.987065][T11352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1902'. [ 308.006633][T11352] netlink: 'syz.3.1902': attribute type 15 has an invalid length. [ 308.138530][T11359] loop6: detected capacity change from 0 to 2048 [ 308.247260][T11359] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 308.269527][T11367] loop3: detected capacity change from 0 to 16 [ 308.305912][T11367] erofs: (device loop3): mounted with root inode @ nid 36. [ 308.339546][T11367] syz.3.1907: attempt to access beyond end of device [ 308.339546][T11367] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 308.419488][T11367] syz.3.1907: attempt to access beyond end of device [ 308.419488][T11367] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 308.441458][ T27] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 308.454280][T11367] ================================================================== [ 308.462949][T11367] BUG: KASAN: slab-out-of-bounds in z_erofs_transform_plain+0x38c/0x460 [ 308.471927][T11367] Read of size 4096 at addr ffff888074813000 by task syz.3.1907/11367 [ 308.480289][T11367] [ 308.482628][T11367] CPU: 1 PID: 11367 Comm: syz.3.1907 Not tainted syzkaller #0 [ 308.490302][T11367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 308.500537][T11367] Call Trace: [ 308.503820][T11367] [ 308.506838][T11367] dump_stack_lvl+0x18c/0x250 [ 308.511518][T11367] ? __lock_acquire+0x7d40/0x7d40 [ 308.516822][T11367] ? show_regs_print_info+0x20/0x20 [ 308.522037][T11367] ? load_image+0x420/0x420 [ 308.526554][T11367] ? __virt_addr_valid+0x469/0x540 [ 308.532361][T11367] print_report+0xa8/0x210 [ 308.537451][T11367] ? z_erofs_transform_plain+0x38c/0x460 [ 308.543606][T11367] kasan_report+0x117/0x150 [ 308.548106][T11367] ? trace_contention_end+0x39/0xe0 [ 308.553401][T11367] ? z_erofs_transform_plain+0x38c/0x460 [ 308.559475][T11367] kasan_check_range+0x241/0x290 [ 308.565147][T11367] ? z_erofs_transform_plain+0x38c/0x460 [ 308.571404][T11367] __asan_memcpy+0x29/0x70 [ 308.575831][T11367] z_erofs_transform_plain+0x38c/0x460 [ 308.582010][T11367] ? z_erofs_lz4_decompress+0x1740/0x1740 [ 308.588487][T11367] z_erofs_decompress_queue+0x1780/0x26f0 [ 308.594671][T11367] ? z_erofs_onlinepage_end+0x360/0x360 [ 308.601258][T11367] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 308.607510][T11367] ? lock_chain_count+0x20/0x20 [ 308.612636][T11367] ? z_erofs_decompressqueue_endio+0x5a0/0x5a0 [ 308.619578][T11367] ? erofs_map_blocks+0x17b0/0x17b0 [ 308.625356][T11367] ? folio_unlock+0x118/0x2e0 [ 308.630925][T11367] z_erofs_runqueue+0x1a4e/0x1bf0 [ 308.636057][T11367] ? z_erofs_do_read_page+0x36b0/0x36b0 [ 308.641608][T11367] ? __lock_acquire+0x7d40/0x7d40 [ 308.646933][T11367] ? put_page+0xea/0x260 [ 308.651351][T11367] ? z_erofs_pcluster_readmore+0x39e/0x450 [ 308.657507][T11367] z_erofs_read_folio+0x323/0x5c0 [ 308.662716][T11367] ? z_erofs_rcu_callback+0x1b0/0x1b0 [ 308.668208][T11367] filemap_read_folio+0x172/0x760 [ 308.673409][T11367] ? z_erofs_rcu_callback+0x1b0/0x1b0 [ 308.678960][T11367] ? maybe_unlock_mmap_for_io+0xf0/0xf0 [ 308.684765][T11367] ? down_read+0x1ac/0x2e0 [ 308.689262][T11367] filemap_get_pages+0x13c7/0x1e90 [ 308.694572][T11367] ? filemap_read+0xf00/0xf00 [ 308.699260][T11367] ? __might_sleep+0xe0/0xe0 [ 308.703845][T11367] ? folio_mark_accessed+0x201/0x1420 [ 308.709540][T11367] ? folio_activate_fn+0x1f30/0x1f30 [ 308.714931][T11367] filemap_read+0x402/0xf00 [ 308.719612][T11367] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.725790][T11367] ? filemap_get_folios_tag+0x830/0x830 [ 308.731596][T11367] ? generic_file_read_iter+0x90/0x4f0 [ 308.737508][T11367] ? __asan_memset+0x22/0x40 [ 308.742199][T11367] ? iov_iter_kvec+0xd4/0x1b0 [ 308.746972][T11367] __kernel_read+0x2f3/0x710 [ 308.751943][T11367] ? rw_verify_area+0x1b0/0x1b0 [ 308.757244][T11367] integrity_kernel_read+0x8a/0xd0 [ 308.762447][T11367] ? integrity_inode_free+0x170/0x170 [ 308.768015][T11367] ? kernel_fpu_end+0x51/0x70 [ 308.772794][T11367] ? _sha256_update+0x129/0x1f0 [ 308.777746][T11367] ? sha256_transform_avx+0xcc0/0xcc0 [ 308.783313][T11367] ima_calc_file_hash+0x91d/0x1910 [ 308.789006][T11367] ? is_bpf_text_address+0x26/0x2a0 [ 308.794490][T11367] ? look_up_lock_class+0x75/0x140 [ 308.799788][T11367] ? ima_alloc_tfm+0x2f0/0x2f0 [ 308.805370][T11367] ? register_lock_class+0xc4/0x8a0 [ 308.810864][T11367] ? __lock_acquire+0x1347/0x7d40 [ 308.816370][T11367] ? generic_fillattr+0x312/0x7b0 [ 308.821780][T11367] ? __asan_memcpy+0x40/0x70 [ 308.826454][T11367] ? generic_fillattr+0x4fc/0x7b0 [ 308.831560][T11367] ima_collect_measurement+0x4d4/0xa20 [ 308.837198][T11367] ? ima_get_action+0xb0/0xb0 [ 308.841956][T11367] ? erofs_getxattr+0x13e/0x460 [ 308.846804][T11367] ? rcu_is_watching+0x15/0xb0 [ 308.851659][T11367] ? ima_get_hash_algo+0x91/0x4a0 [ 308.856682][T11367] ? ima_get_cache_status+0x1e0/0x1e0 [ 308.862057][T11367] process_measurement+0x128e/0x1d70 [ 308.867519][T11367] ? ima_file_mmap+0x1d0/0x1d0 [ 308.872275][T11367] ? tomoyo_check_open_permission+0x1cf/0x460 [ 308.878608][T11367] ? tomoyo_check_path_number_acl+0x280/0x280 [ 308.884700][T11367] ? apparmor_inode_getattr+0x2d0/0x2d0 [ 308.890345][T11367] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 308.896692][T11367] ima_file_check+0xcc/0x110 [ 308.901590][T11367] ? ima_bprm_check+0x200/0x200 [ 308.906552][T11367] path_openat+0x28b7/0x3230 [ 308.911597][T11367] ? do_filp_open+0x430/0x430 [ 308.916629][T11367] ? __virt_addr_valid+0x18c/0x540 [ 308.921917][T11367] do_filp_open+0x1f5/0x430 [ 308.926869][T11367] ? vfs_tmpfile+0x490/0x490 [ 308.931679][T11367] ? _raw_spin_unlock+0x28/0x40 [ 308.936530][T11367] ? alloc_fd+0x58f/0x630 [ 308.941409][T11367] do_sys_openat2+0x134/0x1d0 [ 308.946347][T11367] ? do_sys_open+0xe0/0xe0 [ 308.950784][T11367] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 308.957547][T11367] ? lock_chain_count+0x20/0x20 [ 308.962673][T11367] __x64_sys_openat+0x139/0x160 [ 308.967623][T11367] do_syscall_64+0x55/0xa0 [ 308.972408][T11367] ? clear_bhb_loop+0x40/0x90 [ 308.977288][T11367] ? clear_bhb_loop+0x40/0x90 [ 308.982072][T11367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.988319][T11367] RIP: 0033:0x7f8180f9c819 [ 308.992949][T11367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.013626][T11367] RSP: 002b:00007f8181ed6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 309.022562][T11367] RAX: ffffffffffffffda RBX: 00007f8181215fa0 RCX: 00007f8180f9c819 [ 309.030966][T11367] RDX: 0000000000080000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 309.039373][T11367] RBP: 00007f8181032c91 R08: 0000000000000000 R09: 0000000000000000 [ 309.047539][T11367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.056317][T11367] R13: 00007f8181216038 R14: 00007f8181215fa0 R15: 00007ffef681cee8 [ 309.064649][T11367] [ 309.067834][T11367] [ 309.070233][T11367] Allocated by task 10522: [ 309.074744][T11367] kasan_set_track+0x4e/0x70 [ 309.079439][T11367] __kasan_slab_alloc+0x6c/0x80 [ 309.084420][T11367] slab_post_alloc_hook+0x6e/0x4b0 [ 309.089813][T11367] kmem_cache_alloc+0x11a/0x2d0 [ 309.094858][T11367] add+0xffa/0x1ba0 [ 309.098751][T11367] wg_allowedips_insert_v4+0xde/0x140 [ 309.104482][T11367] wg_set_device+0x147f/0x1f70 [ 309.109332][T11367] genl_family_rcv_msg_doit+0x211/0x310 [ 309.115176][T11367] genl_rcv_msg+0x619/0x7a0 [ 309.119848][T11367] netlink_rcv_skb+0x241/0x4d0 [ 309.124707][T11367] genl_rcv+0x28/0x40 [ 309.128875][T11367] netlink_unicast+0x751/0x8d0 [ 309.134111][T11367] netlink_sendmsg+0x8d0/0xbf0 [ 309.139070][T11367] __sys_sendto+0x4a9/0x6b0 [ 309.143926][T11367] __x64_sys_sendto+0xde/0xf0 [ 309.148939][T11367] do_syscall_64+0x55/0xa0 [ 309.153621][T11367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.159793][T11367] [ 309.162109][T11367] The buggy address belongs to the object at ffff888074813000 [ 309.162109][T11367] which belongs to the cache allowedips_node of size 72 [ 309.177302][T11367] The buggy address is located 0 bytes inside of [ 309.177302][T11367] allocated 72-byte region [ffff888074813000, ffff888074813048) [ 309.191884][T11367] [ 309.194450][T11367] The buggy address belongs to the physical page: [ 309.200952][T11367] page:ffffea0001d204c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x74813 [ 309.211973][T11367] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 309.220305][T11367] page_type: 0xffffffff() [ 309.224710][T11367] raw: 00fff00000000800 ffff88814130ac80 dead000000000122 0000000000000000 [ 309.233912][T11367] raw: 0000000000000000 0000000080270027 00000001ffffffff 0000000000000000 [ 309.242747][T11367] page dumped because: kasan: bad access detected [ 309.249412][T11367] page_owner tracks the page as allocated [ 309.255989][T11367] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 10522, tgid 10522 (syz-executor), ts 283234179793, free_ts 283230678847 [ 309.275628][T11367] post_alloc_hook+0x1c1/0x200 [ 309.280932][T11367] get_page_from_freelist+0x1951/0x19e0 [ 309.286662][T11367] __alloc_pages+0x1f0/0x460 [ 309.291344][T11367] alloc_slab_page+0x5d/0x160 [ 309.296123][T11367] new_slab+0x87/0x2d0 [ 309.300177][T11367] ___slab_alloc+0xc5d/0x12f0 [ 309.304938][T11367] kmem_cache_alloc+0x1b3/0x2d0 [ 309.310041][T11367] add+0xffa/0x1ba0 [ 309.313855][T11367] wg_allowedips_insert_v4+0xde/0x140 [ 309.319519][T11367] wg_set_device+0x147f/0x1f70 [ 309.324362][T11367] genl_family_rcv_msg_doit+0x211/0x310 [ 309.329988][T11367] genl_rcv_msg+0x619/0x7a0 [ 309.334656][T11367] netlink_rcv_skb+0x241/0x4d0 [ 309.339769][T11367] genl_rcv+0x28/0x40 [ 309.343921][T11367] netlink_unicast+0x751/0x8d0 [ 309.349288][T11367] netlink_sendmsg+0x8d0/0xbf0 [ 309.354160][T11367] page last free stack trace: [ 309.359079][T11367] free_unref_page_prepare+0x7b2/0x8c0 [ 309.364880][T11367] free_unref_page+0x32/0x2e0 [ 309.369640][T11367] vfree+0x1a6/0x320 [ 309.373648][T11367] delayed_vfree_work+0x55/0x80 [ 309.379215][T11367] process_scheduled_works+0xa5d/0x15d0 [ 309.384850][T11367] worker_thread+0xa55/0xfc0 [ 309.391541][T11367] kthread+0x2fa/0x390 [ 309.395962][T11367] ret_from_fork+0x48/0x80 [ 309.400641][T11367] ret_from_fork_asm+0x11/0x20 [ 309.405847][T11367] [ 309.408193][T11367] Memory state around the buggy address: [ 309.415078][T11367] ffff888074812f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.424107][T11367] ffff888074812f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.433606][T11367] >ffff888074813000: 00 00 00 00 00 00 00 00 00 fc fc fc fc 00 00 00 [ 309.442335][T11367] ^ [ 309.449030][T11367] ffff888074813080: 00 00 00 00 00 00 fc fc fc fc 00 00 00 00 00 00 [ 309.457866][T11367] ffff888074813100: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 309.466265][T11367] ================================================================== [ 309.474679][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.510361][T11367] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 309.519440][T11367] CPU: 0 PID: 11367 Comm: syz.3.1907 Not tainted syzkaller #0 [ 309.527001][T11367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 309.538639][T11367] Call Trace: [ 309.542282][T11367] [ 309.545475][T11367] dump_stack_lvl+0x18c/0x250 [ 309.550515][T11367] ? show_regs_print_info+0x20/0x20 [ 309.555996][T11367] ? load_image+0x420/0x420 [ 309.560851][T11367] panic+0x2dc/0x730 [ 309.564843][T11367] ? bpf_jit_dump+0xd0/0xd0 [ 309.569522][T11367] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 309.576772][T11367] ? _raw_spin_unlock+0x40/0x40 [ 309.581819][T11367] ? print_memory_metadata+0x314/0x400 [ 309.587560][T11367] ? z_erofs_transform_plain+0x38c/0x460 [ 309.593366][T11367] check_panic_on_warn+0x84/0xa0 [ 309.599286][T11367] ? z_erofs_transform_plain+0x38c/0x460 [ 309.605113][T11367] end_report+0x6f/0x130 [ 309.609815][T11367] kasan_report+0x128/0x150 [ 309.614510][T11367] ? trace_contention_end+0x39/0xe0 [ 309.620514][T11367] ? z_erofs_transform_plain+0x38c/0x460 [ 309.626433][T11367] kasan_check_range+0x241/0x290 [ 309.631890][T11367] ? z_erofs_transform_plain+0x38c/0x460 [ 309.637726][T11367] __asan_memcpy+0x29/0x70 [ 309.642333][T11367] z_erofs_transform_plain+0x38c/0x460 [ 309.648228][T11367] ? z_erofs_lz4_decompress+0x1740/0x1740 [ 309.654473][T11367] z_erofs_decompress_queue+0x1780/0x26f0 [ 309.661420][T11367] ? z_erofs_onlinepage_end+0x360/0x360 [ 309.667359][T11367] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 309.673681][T11367] ? lock_chain_count+0x20/0x20 [ 309.678901][T11367] ? z_erofs_decompressqueue_endio+0x5a0/0x5a0 [ 309.685844][T11367] ? erofs_map_blocks+0x17b0/0x17b0 [ 309.691490][T11367] ? folio_unlock+0x118/0x2e0 [ 309.696475][T11367] z_erofs_runqueue+0x1a4e/0x1bf0 [ 309.701711][T11367] ? z_erofs_do_read_page+0x36b0/0x36b0 [ 309.707772][T11367] ? __lock_acquire+0x7d40/0x7d40 [ 309.713871][T11367] ? put_page+0xea/0x260 [ 309.718386][T11367] ? z_erofs_pcluster_readmore+0x39e/0x450 [ 309.724286][T11367] z_erofs_read_folio+0x323/0x5c0 [ 309.729660][T11367] ? z_erofs_rcu_callback+0x1b0/0x1b0 [ 309.735405][T11367] filemap_read_folio+0x172/0x760 [ 309.740886][T11367] ? z_erofs_rcu_callback+0x1b0/0x1b0 [ 309.746555][T11367] ? maybe_unlock_mmap_for_io+0xf0/0xf0 [ 309.752629][T11367] ? down_read+0x1ac/0x2e0 [ 309.757393][T11367] filemap_get_pages+0x13c7/0x1e90 [ 309.762866][T11367] ? filemap_read+0xf00/0xf00 [ 309.767713][T11367] ? __might_sleep+0xe0/0xe0 [ 309.772558][T11367] ? folio_mark_accessed+0x201/0x1420 [ 309.778637][T11367] ? folio_activate_fn+0x1f30/0x1f30 [ 309.783922][T11367] filemap_read+0x402/0xf00 [ 309.788679][T11367] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.795714][T11367] ? filemap_get_folios_tag+0x830/0x830 [ 309.801609][T11367] ? generic_file_read_iter+0x90/0x4f0 [ 309.807589][T11367] ? __asan_memset+0x22/0x40 [ 309.812382][T11367] ? iov_iter_kvec+0xd4/0x1b0 [ 309.817601][T11367] __kernel_read+0x2f3/0x710 [ 309.822692][T11367] ? rw_verify_area+0x1b0/0x1b0 [ 309.827678][T11367] integrity_kernel_read+0x8a/0xd0 [ 309.832884][T11367] ? integrity_inode_free+0x170/0x170 [ 309.838426][T11367] ? kernel_fpu_end+0x51/0x70 [ 309.843274][T11367] ? _sha256_update+0x129/0x1f0 [ 309.848341][T11367] ? sha256_transform_avx+0xcc0/0xcc0 [ 309.854285][T11367] ima_calc_file_hash+0x91d/0x1910 [ 309.859540][T11367] ? is_bpf_text_address+0x26/0x2a0 [ 309.865129][T11367] ? look_up_lock_class+0x75/0x140 [ 309.870696][T11367] ? ima_alloc_tfm+0x2f0/0x2f0 [ 309.875801][T11367] ? register_lock_class+0xc4/0x8a0 [ 309.881451][T11367] ? __lock_acquire+0x1347/0x7d40 [ 309.886563][T11367] ? generic_fillattr+0x312/0x7b0 [ 309.891855][T11367] ? __asan_memcpy+0x40/0x70 [ 309.897057][T11367] ? generic_fillattr+0x4fc/0x7b0 [ 309.902083][T11367] ima_collect_measurement+0x4d4/0xa20 [ 309.908277][T11367] ? ima_get_action+0xb0/0xb0 [ 309.913481][T11367] ? erofs_getxattr+0x13e/0x460 [ 309.919949][T11367] ? rcu_is_watching+0x15/0xb0 [ 309.925429][T11367] ? ima_get_hash_algo+0x91/0x4a0 [ 309.930735][T11367] ? ima_get_cache_status+0x1e0/0x1e0 [ 309.936809][T11367] process_measurement+0x128e/0x1d70 [ 309.943235][T11367] ? ima_file_mmap+0x1d0/0x1d0 [ 309.948027][T11367] ? tomoyo_check_open_permission+0x1cf/0x460 [ 309.955051][T11367] ? tomoyo_check_path_number_acl+0x280/0x280 [ 309.961475][T11367] ? apparmor_inode_getattr+0x2d0/0x2d0 [ 309.967202][T11367] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 309.973658][T11367] ima_file_check+0xcc/0x110 [ 309.978511][T11367] ? ima_bprm_check+0x200/0x200 [ 309.983618][T11367] path_openat+0x28b7/0x3230 [ 309.988656][T11367] ? do_filp_open+0x430/0x430 [ 309.993678][T11367] ? __virt_addr_valid+0x18c/0x540 [ 309.998974][T11367] do_filp_open+0x1f5/0x430 [ 310.003669][T11367] ? vfs_tmpfile+0x490/0x490 [ 310.008726][T11367] ? _raw_spin_unlock+0x28/0x40 [ 310.014391][T11367] ? alloc_fd+0x58f/0x630 [ 310.019001][T11367] do_sys_openat2+0x134/0x1d0 [ 310.023870][T11367] ? do_sys_open+0xe0/0xe0 [ 310.028474][T11367] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 310.035413][T11367] ? lock_chain_count+0x20/0x20 [ 310.040645][T11367] __x64_sys_openat+0x139/0x160 [ 310.045843][T11367] do_syscall_64+0x55/0xa0 [ 310.050684][T11367] ? clear_bhb_loop+0x40/0x90 [ 310.055467][T11367] ? clear_bhb_loop+0x40/0x90 [ 310.060426][T11367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.066961][T11367] RIP: 0033:0x7f8180f9c819 [ 310.071633][T11367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.092029][T11367] RSP: 002b:00007f8181ed6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 310.101312][T11367] RAX: ffffffffffffffda RBX: 00007f8181215fa0 RCX: 00007f8180f9c819 [ 310.110022][T11367] RDX: 0000000000080000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 310.118348][T11367] RBP: 00007f8181032c91 R08: 0000000000000000 R09: 0000000000000000 [ 310.126666][T11367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.135285][T11367] R13: 00007f8181216038 R14: 00007f8181215fa0 R15: 00007ffef681cee8 [ 310.143827][T11367] [ 310.147837][T11367] Kernel Offset: disabled [ 310.152451][T11367] Rebooting in 86400 seconds..