last executing test programs: 2m25.499784745s ago: executing program 4 (id=2567): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) write$FUSE_CREATE_OPEN(r0, 0x0, 0xfdef) 2m23.472079084s ago: executing program 4 (id=2575): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x4c, r0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x8}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1d}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 2m20.921886412s ago: executing program 4 (id=2591): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 2m20.395342332s ago: executing program 4 (id=2598): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(r1) 2m20.041159142s ago: executing program 4 (id=2603): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x7c45, &(0x7f0000000380)={0x0, 0x5065, 0x40, 0x0, 0x99}) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000001780), 0xa) 2m19.73390266s ago: executing program 4 (id=2605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xeb3}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 2m4.604322002s ago: executing program 32 (id=2605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xeb3}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 8.519917132s ago: executing program 2 (id=3545): symlinkat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0/file2\x00', 0x0) 5.291645991s ago: executing program 2 (id=3563): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp6\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev_snmp6\x00') fchdir(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xea2c7, 0x3) 5.182359682s ago: executing program 2 (id=3564): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0}) close(0x3) r1 = io_uring_setup(0xa71, &(0x7f0000000240)={0x0, 0x86a1, 0x8, 0x3, 0x377}) close_range(r1, 0xffffffffffffffff, 0x0) 5.089378374s ago: executing program 0 (id=3565): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) socket$unix(0x1, 0x1, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0}]) 4.936773291s ago: executing program 1 (id=3567): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@private1, 0x3, 0x0, 0xff, 0x29f0250d81da49a2, 0x4, 0x5}, &(0x7f0000000040)=0x20) 4.859318136s ago: executing program 6 (id=3568): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) write$sequencer(r1, &(0x7f0000000000), 0xca80) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0xffff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6694}}}, 0x30) 4.832261915s ago: executing program 2 (id=3569): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000015006b03000000d86e6c1d0002847ea622fb5645fe00", 0x1a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r0) socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local}) 4.55058018s ago: executing program 0 (id=3582): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, 0x0, 0x0}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080)=0x1) write$tun(r0, &(0x7f0000000240)=ANY=[], 0x110a) 4.516720223s ago: executing program 2 (id=3571): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8c0}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000003c00)=[{0x0}, {0x0}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}, 0x80000001}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043f433eff000704"], 0x19) 4.442170658s ago: executing program 6 (id=3572): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa145cf, 0x0) 4.174742537s ago: executing program 0 (id=3573): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x0, 0x400, 0xb7, 0xc20022, r2}) sendto$packet(r1, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r2, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) 4.133721547s ago: executing program 6 (id=3574): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0xc, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0x8, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x8, 0x803, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x10001, 0x3, 0x1, 0x8, 0x6, 0x9, 0x7, 0x9, 0x4, 0x0, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0xf9, 0x3, 0x8, 0x4, 0x2, 0xffff, 0x6, 0x939, 0x5, 0x9, 0x2, 0x4f, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x2, 0x56f00ca6, 0x5, 0x2a, 0x1, 0x22], [0x1, 0x9, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x1, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0x48, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xa9, 0x101, 0x10, 0x2, 0x7, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x6, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24b, 0x1ff, 0x2a0, 0x405, 0x6, 0x8, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x7fffffff, 0x8000, 0x4, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x5, 0x5, 0x4, 0x9, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x7c13, 0x1, 0x1, 0x7, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x2, 0xdd, 0xfe83, 0x9, 0xc3, 0x7751c64, 0x800007a3], [0x9, 0x3889, 0xffff9a7f, 0x200, 0x3, 0x2, 0x3, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x9, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0xffffff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x7, 0x20000000, 0x8, 0x1d, 0x4000b329, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x50, &(0x7f00000001c0)={0x0, 0x0}, 0x10) 3.942378868s ago: executing program 6 (id=3575): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000024c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x100}}}}}}}, 0x0) 3.898191114s ago: executing program 0 (id=3576): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000840) 3.7892034s ago: executing program 6 (id=3577): connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 3.760917071s ago: executing program 0 (id=3578): socket$unix(0x1, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r0, 0x2f, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f0000001400000004"], 0x20) 2.802115003s ago: executing program 2 (id=3579): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="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"/396, @ANYRESOCT, @ANYBLOB="b0790a07e1e471aed209036fa5f5ca6bc1ad170371c5e2bd52cf99296e6cdd0882cc4c075a7c4b8ca0d78022160660db09219ebb75dc37499a8272c148662b3afc124ff55a705238d347a5a54bc22fc6e8539f02d1a14d4df87689f2e34e7449a843df2a4e9fbe059f2102bb7efa83db5ef26895be033858456061b9ac965c95f1928de05eb811731601", @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x104b82b, 0x0, 0x1, 0x0, &(0x7f0000000880)) 2.800553774s ago: executing program 0 (id=3592): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000020dd25d2f337d2542d000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) preadv(r1, &(0x7f0000000840)=[{&(0x7f0000000500)=""/166, 0xa6}], 0x1, 0x9, 0xd99) 2.800113988s ago: executing program 1 (id=3583): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2d, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xfff1, 0xffff}, {}, {0xc, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x1000, 0x4, 0x8}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) 1.727063727s ago: executing program 1 (id=3597): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[0x0], &(0x7f0000000980), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000b00)={0x500, 0x1, &(0x7f0000000640)=[r1], &(0x7f0000000680)=[0x5], &(0x7f00000001c0)=[r2], &(0x7f0000000180), 0x0, 0x2}) 1.726198613s ago: executing program 6 (id=3598): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000180)=[{0x8a, 0x1000, 0x0, 0x0}, {0x0, 0x2411, 0x8b, &(0x7f0000000080)="6befec46ac0481cbf093bc0e8aea76c81ed725fa1b6613c970d4662c987d2485fca55b558c2d6c00cc0be4183dadb32166549c40aac58894e5746968d94c236a1b62803a913d839579b17bf6859e19d2e3a71c63205062b5e95f71d4ad39ebd22d11cad357d05ef79cb988da430655453924e0e6456cad56d51cd72c327217b882675caaf2da261e204a60"}], 0x2}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x80, 0x1, 0x2, '}W'}, 0x0, 0x0, 0x0, 0x0}) 1.437773961s ago: executing program 1 (id=3587): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x82, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r0, 0x0, 0x0) 1.425005254s ago: executing program 5 (id=3588): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) ioprio_get$pid(0x2, 0x0) 1.149294335s ago: executing program 5 (id=3589): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) 912.360831ms ago: executing program 3 (id=3590): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@iv={0x10}], 0x10, 0x40000}], 0x1, 0x40804) 749.362152ms ago: executing program 5 (id=3591): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r3, 0x25, 0xc, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x4}}, 0x30) 729.641688ms ago: executing program 3 (id=3593): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000001240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@op={0x18, 0x117, 0x3, 0x2}], 0x18}], 0x1, 0x20008054) 559.184235ms ago: executing program 5 (id=3594): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) 558.185056ms ago: executing program 3 (id=3608): r0 = mq_open(&(0x7f0000000240)='ba\x01adv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x7ffffffffffffffe, 0x8, 0x1, 0xc05}) io_setup(0x6, &(0x7f0000000540)=0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, r0, 0x0}]) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) mq_timedreceive(r0, &(0x7f0000000400)=""/215, 0xd7, 0x0, 0x0) 355.359127ms ago: executing program 5 (id=3595): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4, 0x0, 0x800}, {0x2}], 0x2) semop(r0, &(0x7f00000001c0)=[{0x2, 0x0, 0x2000}, {0x4, 0x6, 0x1000}], 0x2) semctl$IPC_RMID(r0, 0x0, 0x0) 288.42498ms ago: executing program 3 (id=3596): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x1c}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/153, 0x99}], 0x1}, 0x8}], 0x2, 0x400100f2, 0x0) 229.605263ms ago: executing program 1 (id=3599): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0x3ff, 0x1, 0x23d9, 0x2, 0x100, 0x10000, 0x30000001, 0x8, 0xa, 0xfffffffe, 0x7, 0x1, 0x0, 0x9, 0x0, 0x1, 0x3, 0xee9, 0x401, 0x7, 0x2, 0x1aa, 0x7, 0x48, 0x7, 0x7, 0x7, 0x81, 0x6, 0x8]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 155.464031ms ago: executing program 1 (id=3600): writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d94", 0x29}], 0x1) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 91.834484ms ago: executing program 3 (id=3601): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="1c000000000000000000000008000000f75723c83568f3e7228399204fc01a9ee80d3c1d"], 0x1b8}}], 0x2, 0x0) 37.269459ms ago: executing program 5 (id=3602): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) setuid(0xee00) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000012002df8001c00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x28}}, 0x0) 0s ago: executing program 3 (id=3603): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, 0x0) kernel console output (not intermixed with test programs): 9 [ 439.862492][ T5637] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 439.879337][ T5637] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 440.568531][T13029] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.2736'. [ 440.642987][T13035] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.2736'. [ 441.056144][T13045] loop5: detected capacity change from 0 to 128 [ 441.131028][T13045] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 441.175638][T13045] ext4 filesystem being mounted at /433/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 441.250031][T13044] loop0: detected capacity change from 0 to 2048 [ 441.340993][T13044] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 441.442440][ T5640] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 441.449622][T13048] loop3: detected capacity change from 0 to 4096 [ 441.651160][T13053] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 441.949022][ T5637] Bluetooth: hci6: command tx timeout [ 442.223745][T13064] loop5: detected capacity change from 0 to 256 [ 442.317573][T13059] loop0: detected capacity change from 0 to 4096 [ 442.334271][T13064] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 442.469397][T13059] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 442.516011][T13061] serio: Serial port ttynull [ 442.530835][T13059] ntfs3(loop0): failed to convert "0080" to koi8-ru [ 442.545286][T13059] ntfs3(loop0): failed to convert name for inode 1e. [ 442.552836][T13059] ntfs3(loop0): ino=1f, mi_enum_attr [ 443.467733][T13007] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.478921][T13007] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.491085][T13007] bridge_slave_0: entered allmulticast mode [ 443.503268][T13007] bridge_slave_0: entered promiscuous mode [ 443.518571][T13007] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.526243][T13007] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.533690][T13007] bridge_slave_1: entered allmulticast mode [ 443.543165][T13007] bridge_slave_1: entered promiscuous mode [ 443.702797][T13007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.725072][T13092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2753'. [ 443.755187][T13007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.029101][ T5637] Bluetooth: hci6: command tx timeout [ 444.142397][T13007] team0: Port device team_slave_0 added [ 444.239787][T13007] team0: Port device team_slave_1 added [ 444.343426][T13007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.358377][T13007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.387449][T13109] loop0: detected capacity change from 0 to 1024 [ 444.399064][T13109] EXT4-fs: Ignoring removed orlov option [ 444.407727][T13007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.468885][T13109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.500262][T13007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.558219][T13007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.653597][T13007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.735669][T13116] netlink: 'syz.3.2768': attribute type 14 has an invalid length. [ 445.172300][T13007] hsr_slave_0: entered promiscuous mode [ 445.195014][T13007] hsr_slave_1: entered promiscuous mode [ 445.213599][T13007] debugfs: 'hsr0' already exists in 'hsr' [ 445.227524][T13007] Cannot create hsr debugfs directory [ 445.348887][ T5767] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 445.434569][T13131] loop5: detected capacity change from 0 to 1024 [ 445.538002][ T5767] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 445.572081][ T5634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.602894][ T5767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.635116][ T5767] usb 4-1: Product: syz [ 445.644890][ T5767] usb 4-1: Manufacturer: syz [ 445.649923][ T5767] usb 4-1: SerialNumber: syz [ 445.671115][T13131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.818320][T13118] loop1: detected capacity change from 0 to 131072 [ 445.828570][T13118] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 445.838800][T13118] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 445.853443][ T30] audit: type=1800 audit(1779627811.010:143): pid=13131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2773" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 445.870989][T13118] F2FS-fs (loop1): invalid crc value [ 445.895669][T13131] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.2773: missing EA_INODE flag [ 445.938889][T13131] EXT4-fs (loop5): Remounting filesystem read-only [ 446.005095][T13118] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 446.020652][T13118] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 446.027699][T13118] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 446.109051][ T5637] Bluetooth: hci6: command tx timeout [ 446.157261][ T5640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.325635][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.381282][T13142] loop0: detected capacity change from 0 to 2048 [ 446.390617][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.422755][T13142] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 446.458886][T13142] NILFS (loop0): mounting unchecked fs [ 446.514378][ T5966] udevd[5966]: incorrect nilfs2 checksum on /dev/loop0 [ 446.540568][T13142] NILFS (loop0): recovery complete [ 446.572553][T13148] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 446.649503][ T5767] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 446.711455][ T5767] usb 4-1: USB disconnect, device number 21 [ 447.027910][T13154] loop5: detected capacity change from 0 to 1024 [ 447.058362][T13154] EXT4-fs: inline encryption not supported [ 447.136558][T13154] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.331528][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.378785][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.431379][ T5640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.487590][T13165] loop0: detected capacity change from 0 to 64 [ 447.826973][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.864978][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.093292][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.138812][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.192184][ T5637] Bluetooth: hci6: command tx timeout [ 448.223901][T13007] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 448.250862][T13007] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 448.270651][T13007] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 448.284349][T13007] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 448.315503][T13007] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 448.405150][T13007] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 448.447687][T13007] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 448.482618][T13007] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 448.708993][ T5767] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 448.866453][T13200] netlink: 'syz.5.2797': attribute type 14 has an invalid length. [ 448.898749][ T5767] usb 3-1: Using ep0 maxpacket: 16 [ 448.921746][ T5767] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.953612][ T5767] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.993488][ T5767] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 449.051145][ T5767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.090657][ T5767] usb 3-1: config 0 descriptor?? [ 449.120598][ T36] bridge_slave_1: left allmulticast mode [ 449.164825][ T36] bridge_slave_1: left promiscuous mode [ 449.196825][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.329605][ T36] bridge_slave_0: left allmulticast mode [ 449.335308][ T36] bridge_slave_0: left promiscuous mode [ 449.371629][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.526346][T13219] loop0: detected capacity change from 0 to 512 [ 449.565526][T13219] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 449.615643][ T5767] corsair 0003:1B1C:1B02.0018: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 449.653988][T13219] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.2801: bad orphan inode 131083 [ 449.684290][T13219] loop0: lost filesystem error report for type 5 error -117 [ 449.688691][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 449.702464][ C1] EXT4-fs (loop0): initial error at time 1779627814: ext4_orphan_get:1423 [ 449.711009][ C1] EXT4-fs (loop0): last error at time 1779627814: ext4_orphan_get:1423 [ 449.747044][T13219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.156407][ T5767] usb 3-1: USB disconnect, device number 23 [ 450.169127][ T5634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.212873][T13226] fido_id[13226]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 450.851784][T13244] loop0: detected capacity change from 0 to 128 [ 450.938050][T13244] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 451.004491][T13244] hpfs: filesystem error: improperly stopped [ 451.037057][T13244] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 451.087827][T13244] hpfs: You really don't want any checks? You are crazy... [ 451.118133][T13244] hpfs: hpfs_map_sector(): read error [ 451.138308][T13244] hpfs: code page support is disabled [ 451.165449][T13244] hpfs: hpfs_map_4sectors(): unaligned read [ 451.191628][T13244] hpfs: hpfs_map_4sectors(): unaligned read [ 451.208541][T13244] hpfs: filesystem error: unable to find root dir [ 451.217514][ T36] bond0 (unregistering): left promiscuous mode [ 451.253263][ T36] bond_slave_0: left promiscuous mode [ 451.277234][ T36] bond_slave_1: left promiscuous mode [ 451.292028][T13244] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim [ 451.336299][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.428086][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.482336][ T36] bond0 (unregistering): Released all slaves [ 451.592931][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 451.634552][T13256] loop3: detected capacity change from 0 to 256 [ 451.665528][T13258] loop0: detected capacity change from 0 to 256 [ 451.695242][ T36] tipc: Disabling bearer [ 451.717270][T13258] exfat: Deprecated parameter 'utf8' [ 451.731851][ T36] tipc: Left network mode [ 451.777001][T13256] FAT-fs (loop3): Directory bread(block 64) failed [ 451.826388][T13258] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 451.830502][T13007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.840747][T13256] FAT-fs (loop3): Directory bread(block 65) failed [ 451.900099][T13256] FAT-fs (loop3): Directory bread(block 66) failed [ 451.977856][T13256] FAT-fs (loop3): Directory bread(block 67) failed [ 452.025162][T13256] FAT-fs (loop3): Directory bread(block 68) failed [ 452.030653][T13007] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.071188][T13256] FAT-fs (loop3): Directory bread(block 69) failed [ 452.112817][T13256] FAT-fs (loop3): Directory bread(block 70) failed [ 452.118075][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.126564][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.156063][T13256] FAT-fs (loop3): Directory bread(block 71) failed [ 452.207081][T13256] FAT-fs (loop3): Directory bread(block 72) failed [ 452.238520][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.245713][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.254885][T13256] FAT-fs (loop3): Directory bread(block 73) failed [ 453.221376][ T5846] hid-generic 0103:0004:0000.0019: unknown main item tag 0x0 [ 453.242733][ T5846] hid-generic 0103:0004:0000.0019: unknown main item tag 0x0 [ 453.284361][ T5846] hid-generic 0103:0004:0000.0019: unknown main item tag 0x0 [ 453.307379][ T5846] hid-generic 0103:0004:0000.0019: unknown main item tag 0x0 [ 453.346020][T13227] syz.1.2802 (13227): drop_caches: 2 [ 453.354948][ T5846] hid-generic 0103:0004:0000.0019: unknown main item tag 0x0 [ 453.385505][ T5846] hid-generic 0103:0004:0000.0019: unknown main item tag 0x0 [ 453.412376][ T5846] hid-generic 0103:0004:0000.0019: unknown main item tag 0x0 [ 453.440793][ T5846] hid-generic 0103:0004:0000.0019: unknown main item tag 0x0 [ 453.477557][ T5846] hid-generic 0103:0004:0000.0019: unknown main item tag 0x0 [ 453.518265][ T5846] hid-generic 0103:0004:0000.0019: unknown main item tag 0x0 [ 453.675201][ T5846] hid-generic 0103:0004:0000.0019: hidraw0: HID v0.05 Device [syz0] on syz1 [ 453.711336][ T36] batadv0: left promiscuous mode [ 453.808188][ T36] hsr_slave_0: left promiscuous mode [ 453.877057][ T36] hsr_slave_1: left promiscuous mode [ 453.913684][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.976606][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.001885][T13289] fido_id[13289]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 454.020319][T13223] syz.1.2802 (13223): drop_caches: 2 [ 454.046708][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.116065][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.311611][ T36] veth1_macvtap: left promiscuous mode [ 454.360363][ T36] veth0_macvtap: left promiscuous mode [ 454.377775][ T36] veth1_vlan: left promiscuous mode [ 454.395775][ T36] veth0_vlan: left promiscuous mode [ 454.646180][T13314] (syz.3.2829,13314,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 454.756815][T13316] loop0: detected capacity change from 0 to 4096 [ 454.999091][ T5846] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 455.112834][T13324] loop3: detected capacity change from 0 to 128 [ 455.152258][T13324] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 455.181655][ T5846] usb 2-1: Using ep0 maxpacket: 16 [ 455.213197][ T5846] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 455.238510][T13324] ext4 filesystem being mounted at /474/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 455.252261][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 455.283608][ T5846] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 455.310168][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.327847][ T5846] usb 2-1: Product: syz [ 455.340400][ T5846] usb 2-1: Manufacturer: syz [ 455.346561][ T5846] usb 2-1: SerialNumber: syz [ 455.376068][ T5846] usb 2-1: config 0 descriptor?? [ 455.383760][ T36] team0 (unregistering): Port device team_slave_1 removed [ 455.416427][ T5639] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 455.421833][ T5846] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 455.474415][ T36] team0 (unregistering): Port device team_slave_0 removed [ 455.481815][ T5846] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 455.816134][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 456.023205][ T5846] em28xx 2-1:0.0: chip ID is em2874 [ 456.349339][ T5767] usb 2-1: USB disconnect, device number 15 [ 456.396822][ T5767] em28xx 2-1:0.0: Disconnecting em28xx [ 456.492951][ T5767] em28xx 2-1:0.0: Freeing device [ 456.579580][T13349] veth1_to_batadv: entered promiscuous mode [ 456.596029][T13343] syz.5.2839 (13343): drop_caches: 2 [ 456.677251][ T36] IPVS: stop unused estimator thread 0... [ 456.869018][T13342] syz.5.2839 (13342): drop_caches: 2 [ 456.926959][T13342] syz.5.2839 (13342): drop_caches: 2 [ 456.959918][T13357] loop3: detected capacity change from 0 to 1024 [ 456.999600][T13357] EXT4-fs: Ignoring removed mblk_io_submit option [ 457.033700][T13357] EXT4-fs: Ignoring removed oldalloc option [ 457.109596][T13357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 457.147002][T13357] ext4 filesystem being mounted at /476/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.448120][T13007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.481040][ T5639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 457.504594][T13377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2848'. [ 457.528012][T13375] loop5: detected capacity change from 0 to 512 [ 457.547350][T13375] EXT4-fs: Ignoring removed bh option [ 457.624162][T13375] EXT4-fs error (device loop5): ext4_iget_extra_inode:5127: inode #11: comm syz.5.2847: corrupted in-inode xattr: bad e_name length [ 457.685208][T13375] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 457.687268][T13375] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.2847: couldn't read orphan inode 11 (err -117) [ 457.687361][T13377] ipvlan3: entered allmulticast mode [ 457.696498][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 457.720649][ C0] EXT4-fs (loop5): initial error at time 1779627822: ext4_iget_extra_inode:5127: inode 11 [ 457.730619][ C0] EXT4-fs (loop5): last error at time 1779627822: ext4_iget_extra_inode:5127: inode 11 [ 457.741965][T13375] loop5: lost filesystem error report for type 5 error -117 [ 457.743110][T13375] EXT4-fs (loop5): 1 truncate cleaned up [ 457.789109][T13375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.828906][T13377] syz_tun: entered allmulticast mode [ 457.861772][T13375] xt_hashlimit: size too large, truncated to 1048576 [ 458.631590][T13406] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 458.640302][T13406] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 458.814351][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 458.996734][T13416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2859'. [ 459.144998][ T5640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.163891][T13007] veth0_vlan: entered promiscuous mode [ 459.311392][T13007] veth1_vlan: entered promiscuous mode [ 459.624981][T13007] veth0_macvtap: entered promiscuous mode [ 459.691654][T13007] veth1_macvtap: entered promiscuous mode [ 460.306875][T13444] loop5: detected capacity change from 0 to 512 [ 460.803375][T13444] EXT4-fs (loop5): Test dummy encryption mode enabled [ 460.822961][T13007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.865906][T13453] loop3: detected capacity change from 0 to 1024 [ 460.885755][T13444] EXT4-fs error (device loop5): ext4_iget_extra_inode:5127: inode #15: comm syz.5.2868: corrupted in-inode xattr: invalid ea_ino [ 461.020329][T13444] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 461.028299][T13440] loop0: detected capacity change from 0 to 131072 [ 461.028698][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 461.042465][T13440] F2FS-fs (loop0): invalid crc value [ 461.044019][ C0] EXT4-fs (loop5): initial error at time 1779627826: ext4_iget_extra_inode:5127: inode 15 [ 461.065663][ C0] EXT4-fs (loop5): last error at time 1779627826: ext4_iget_extra_inode:5127: inode 15 [ 461.084300][T13444] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.2868: couldn't read orphan inode 15 (err -117) [ 461.088518][T13007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.116549][T13444] loop5: lost filesystem error report for type 5 error -117 [ 461.159221][T13444] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.233900][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.255002][T13440] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 461.271285][T13440] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 461.295621][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.376853][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.420532][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.425498][T13444] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz.5.2868: invalid fast symlink length 39 [ 461.952414][ T5640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.027812][ T3350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.075265][ T3350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.297843][ T112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.340673][ T112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.350910][T13479] loop5: detected capacity change from 0 to 64 [ 462.395450][ T5290] 8021q: adding VLAN 0 to HW filter on device eth4 [ 462.782725][ T5640] hfs: node 4:3 still has 1 user(s)! [ 463.002037][T13489] loop6: detected capacity change from 0 to 128 [ 463.029270][ T5775] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 463.086535][ T5767] IPVS: starting estimator thread 0... [ 463.130272][T13489] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 463.229126][ T5775] usb 4-1: Using ep0 maxpacket: 32 [ 463.248096][ T5775] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 463.251716][T13489] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 463.282872][ T5775] usb 4-1: config 0 has no interface number 0 [ 463.303485][ T5775] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 463.314262][T13492] IPVS: using max 23 ests per chain, 55200 per kthread [ 463.343474][ T5775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.395125][ T5775] usb 4-1: Product: syz [ 463.415080][ T5775] usb 4-1: Manufacturer: syz [ 463.441683][ T5775] usb 4-1: SerialNumber: syz [ 463.446581][T13489] fscrypt (loop6, inode 12): Can't use IV_INO_LBLK_32 policy on filesystem 'loop6' because it doesn't have stable inode numbers [ 463.490050][ T5775] usb 4-1: config 0 descriptor?? [ 463.515269][ T5775] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 463.740420][T13007] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 463.759300][ T5775] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 463.791341][T13501] loop1: detected capacity change from 0 to 256 [ 463.828047][ T5775] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 464.233506][T13507] loop5: detected capacity change from 0 to 256 [ 464.236523][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 464.248106][ T5775] usb 4-1: USB disconnect, device number 22 [ 464.297751][ T5775] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 464.356074][ T5775] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 464.436793][ T5775] quatech2 4-1:0.51: device disconnected [ 464.509590][T13507] FAT-fs (loop5): Directory bread(block 64) failed [ 464.534508][T13507] FAT-fs (loop5): Directory bread(block 65) failed [ 464.570914][T13507] FAT-fs (loop5): Directory bread(block 66) failed [ 464.610708][T13507] FAT-fs (loop5): Directory bread(block 67) failed [ 464.630127][T13509] loop1: detected capacity change from 0 to 4096 [ 464.637094][T13507] FAT-fs (loop5): Directory bread(block 68) failed [ 464.663763][T13507] FAT-fs (loop5): Directory bread(block 69) failed [ 464.688943][T13507] FAT-fs (loop5): Directory bread(block 70) failed [ 464.722397][T13507] FAT-fs (loop5): Directory bread(block 71) failed [ 464.735475][T13509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.740475][T13507] FAT-fs (loop5): Directory bread(block 72) failed [ 464.816477][T13507] FAT-fs (loop5): Directory bread(block 73) failed [ 464.842253][T13509] EXT4-fs (loop1): shut down requested (0) [ 465.183559][ T5645] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.128386][T13536] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.584253][T13541] loop2: detected capacity change from 0 to 65536 [ 466.592650][T13541] xfs: Deprecated parameter 'ikeep' [ 466.597863][T13541] XFS: ikeep mount option is deprecated. [ 466.624600][T13541] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 466.683115][T13541] XFS (loop2): Ending clean mount [ 466.706988][T13541] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x6 [ 466.720330][T13541] XFS (loop2): Unmount and run xfs_repair [ 466.728915][T13541] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 466.736964][T13541] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 466.746444][T13541] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 466.763144][T13541] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 466.772109][T13541] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 466.781017][T13541] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 466.789947][T13541] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 466.798850][T13541] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 466.807747][T13541] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 466.816690][T13541] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x6 len 2 error 74 [ 466.830263][T13541] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x3fc/0x990 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 466.848350][T13541] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 466.904383][T13546] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 466.987107][ T5636] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 466.991068][T13546] block device autoloading is deprecated and will be removed. [ 467.565656][T13578] loop1: detected capacity change from 0 to 512 [ 467.591850][T13577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2906'. [ 467.597770][T13578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.737480][T13583] loop5: detected capacity change from 0 to 1024 [ 467.737634][T13581] loop8: detected capacity change from 0 to 8 [ 467.757921][T13583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.817128][T13581] Dev loop8: unable to read RDB block 8 [ 467.823002][T13581] loop8: unable to read partition table [ 467.829004][T13581] loop8: partition table beyond EOD, truncated [ 467.841686][T13581] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 467.883448][T13583] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 467.984502][ T30] audit: type=1800 audit(1779628089.163:144): pid=13583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2910" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 468.000381][T13583] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 468.023871][ T5645] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.060395][T13583] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 468.072908][T13583] EXT4-fs (loop5): This should not happen!! Data will be lost [ 468.072908][T13583] [ 468.099171][T13583] EXT4-fs (loop5): Total free blocks count 0 [ 468.105197][T13583] EXT4-fs (loop5): Free/Dirty block details [ 468.205913][T13583] EXT4-fs (loop5): free_blocks=20480 [ 468.268123][T13583] EXT4-fs (loop5): dirty_blocks=64 [ 468.307610][T13583] EXT4-fs (loop5): Block reservation details [ 468.351427][T13583] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 468.850906][ T5640] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 468.926735][T13596] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 469.334021][T13589] loop3: detected capacity change from 0 to 131072 [ 469.356944][T13589] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 469.365079][T13589] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 469.403340][T13589] F2FS-fs (loop3): invalid crc value [ 469.503246][T13589] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 469.507187][T13610] loop5: detected capacity change from 0 to 64 [ 469.521834][T13589] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 469.529685][T13589] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 469.620292][T13573] loop6: detected capacity change from 0 to 32768 [ 469.973959][T13618] vivid-001: ================= START STATUS ================= [ 470.035545][T13618] vivid-001: Radio HW Seek Mode: Bounded [ 470.068917][T13618] vivid-001: Radio Programmable HW Seek: false [ 470.091339][T13616] loop2: detected capacity change from 0 to 4096 [ 470.096927][T13618] vivid-001: RDS Rx I/O Mode: Block I/O [ 470.149481][T13616] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 470.153378][T13618] vivid-001: Generate RBDS Instead of RDS: [ 470.188528][T13616] ntfs3(loop2): ino=3, mi_enum_attr [ 470.218624][T13618] false [ 470.238974][T13618] vivid-001: RDS Reception: true [ 470.286510][T13618] vivid-001: RDS Program Type: 0 inactive [ 470.295484][T13616] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 470.305905][T13618] vivid-001: RDS PS Name: inactive [ 470.327510][T13618] vivid-001: RDS Radio Text: inactive [ 470.356543][T13618] vivid-001: RDS Traffic Announcement: false inactive [ 470.391568][T13618] vivid-001: RDS Traffic Program: false inactive [ 470.437819][T13618] vivid-001: RDS Music: false inactive [ 470.472086][T13618] vivid-001: ================== END STATUS ================== [ 470.644867][T13630] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3952. macoff=96 [ 470.785819][ T36] ntfs3(loop2): ino=1f, failed to open parent directory r=5 to update [ 471.221205][T13643] loop1: detected capacity change from 0 to 16 [ 471.264071][T13643] erofs: Unknown parameter 'ÿÿ>§$^' [ 471.999659][T13657] loop5: detected capacity change from 0 to 1024 [ 472.031172][T13660] loop2: detected capacity change from 0 to 64 [ 472.284909][T13637] loop0: detected capacity change from 0 to 32768 [ 472.316672][T13637] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2928 (13637) [ 472.400757][T13637] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 472.414144][T13637] BTRFS info (device loop0): using sha256 checksum algorithm [ 472.559811][T13637] BTRFS info (device loop0): enabling ssd optimizations [ 472.621199][T13637] BTRFS info (device loop0): turning on async discard [ 472.677481][T13637] BTRFS info (device loop0): enabling free space tree [ 473.072069][ T50] Bluetooth: hci1: command 0x1003 tx timeout [ 473.072079][ T5637] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 473.186827][ T5634] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 473.500866][T13701] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2947'. [ 474.187989][T13719] netlink: 236 bytes leftover after parsing attributes in process `syz.5.2953'. [ 474.241309][T13719] netlink: 236 bytes leftover after parsing attributes in process `syz.5.2953'. [ 474.270002][T13722] loop6: detected capacity change from 0 to 512 [ 474.314303][T13722] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 474.379057][T13722] EXT4-fs (loop6): 1 orphan inode deleted [ 474.393303][T13722] EXT4-fs (loop6): 1 truncate cleaned up [ 474.486842][T13722] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.665387][T13722] EXT4-fs error (device loop6): ext4_check_all_de:658: inode #12: block 7: comm syz.6.2954: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=124 fake=0 [ 474.793902][T13722] EXT4-fs (loop6): Remounting filesystem read-only [ 474.818861][ T5766] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 474.952847][T13007] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.989295][ T5766] usb 6-1: Using ep0 maxpacket: 8 [ 475.057602][ T5766] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 475.065914][ T5766] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 475.101918][ T5766] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 475.155667][ T5766] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 475.205215][ T5766] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 475.219553][ T5753] IPVS: starting estimator thread 0... [ 475.250705][T13750] tipc: Started in network mode [ 475.255596][T13750] tipc: Node identity ac1414aa, cluster identity 4711 [ 475.285632][ T5766] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 475.297083][T13750] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 475.324307][ T5766] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.332892][T13750] tipc: Enabled bearer , priority 10 [ 475.339455][T13751] IPVS: using max 22 ests per chain, 52800 per kthread [ 475.369688][T13754] loop1: detected capacity change from 0 to 128 [ 475.428355][T13755] loop2: detected capacity change from 0 to 1024 [ 475.435083][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 475.511307][T13754] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 475.521307][T13755] EXT4-fs: Ignoring removed orlov option [ 475.568767][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 475.594204][ T5766] usb 6-1: GET_CAPABILITIES returned 0 [ 475.603562][T13755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.616340][ T5766] usbtmc 6-1:16.0: can't read capabilities [ 475.709118][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 475.751804][T13754] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 475.828083][T13754] ext2 filesystem being mounted at /522/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.848732][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 475.876316][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.972806][T13764] loop6: detected capacity change from 0 to 4096 [ 475.988747][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 476.011058][T13764] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 476.042706][T13764] ntfs3(loop6): ino=3, mi_enum_attr [ 476.093377][T13764] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 476.128745][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 476.163744][T13773] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 476.169012][ T5775] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 476.186204][ T5766] usb 6-1: USB disconnect, device number 21 [ 476.268763][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 476.328069][ T12] ntfs3(loop6): ino=1f, failed to open parent directory r=5 to update [ 476.351797][ T5775] usb 4-1: Using ep0 maxpacket: 16 [ 476.385828][ T5775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.409874][ T9] tipc: Node number set to 2886997162 [ 476.416590][ T5645] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 476.427696][ T5775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.454673][ T5775] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 476.491869][ T5775] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 476.502226][ T5775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.548808][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 476.571134][ T5775] usb 4-1: config 0 descriptor?? [ 476.737649][T13786] loop2: detected capacity change from 0 to 256 [ 476.780940][T13786] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 476.820501][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 477.039050][ T5775] hid_parser_main: 20 callbacks suppressed [ 477.039082][ T5775] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 477.065392][T13791] loop5: detected capacity change from 0 to 16 [ 477.082374][T13791] erofs: Unknown parameter '00000000000000000000017777777777777777777770177777777777777777777718446744073709551615ÿÿÿÿÿÿÿ000000000000000000000x0000000000000000ÿÿÿÿÿÿÿÿÿ18446744073709551615%' [ 477.113321][ T5775] microsoft 0003:045E:07DA.001A: ignoring exceeding usage max [ 477.143769][T13793] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2976'. [ 477.177401][ T5775] microsoft 0003:045E:07DA.001A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 477.216035][ T5775] microsoft 0003:045E:07DA.001A: no inputs found [ 477.244926][ T5775] microsoft 0003:045E:07DA.001A: could not initialize ff, continuing anyway [ 477.334433][ T5775] usb 4-1: USB disconnect, device number 23 [ 477.632233][T13795] fido_id[13795]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 477.847703][T13808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2982'. [ 477.910993][T13809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2981'. [ 478.184674][T13813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 478.473739][T13818] loop3: detected capacity change from 0 to 1024 [ 478.924868][T13818] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 478.989345][T13805] loop6: detected capacity change from 0 to 131072 [ 479.004597][T13805] F2FS-fs (loop6): invalid crc value [ 479.101923][T13818] hfsplus: xattr search failed [ 479.175323][T13805] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 479.194832][T13805] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 479.380571][T13805] F2FS-fs (loop6): f2fs_lookup: inode (ino=4) has zero i_nlink [ 480.075597][T13848] loop1: detected capacity change from 0 to 1024 [ 480.116142][T13848] EXT4-fs: Ignoring removed bh option [ 480.269024][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 480.314725][T13848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.338843][T13848] ext4 filesystem being mounted at /527/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.418066][ T30] audit: type=1800 audit(1779628101.593:145): pid=13848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2995" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 480.458281][T13848] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.2995: bg 0: block 112: padding at end of block bitmap is not set [ 480.495359][T13860] loop0: detected capacity change from 0 to 1024 [ 480.508723][ C0] net_ratelimit: 3 callbacks suppressed [ 480.508746][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 480.552992][ T30] audit: type=1800 audit(1779628101.723:146): pid=13848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2995" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 480.588421][T13827] loop5: detected capacity change from 0 to 32768 [ 480.603668][T13846] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.2995: lblock 0 mapped to illegal pblock 0 (length 1) [ 480.617845][T13827] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2988 (13827) [ 480.691596][T13827] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 480.719172][T13827] BTRFS info (device loop5): using sha256 checksum algorithm [ 480.726877][T13846] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.2995: lblock 0 mapped to illegal pblock 0 (length 1) [ 480.805849][T13846] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.2995: lblock 0 mapped to illegal pblock 0 (length 1) [ 480.903831][T13846] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.2995: lblock 0 mapped to illegal pblock 0 (length 1) [ 480.958162][T13827] BTRFS info (device loop5): enabling ssd optimizations [ 480.996330][T13827] BTRFS info (device loop5): turning on async discard [ 481.017862][T13846] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.2995: lblock 0 mapped to illegal pblock 0 (length 1) [ 481.040757][T13827] BTRFS info (device loop5): enabling free space tree [ 481.093409][T13846] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.2995: lblock 0 mapped to illegal pblock 0 (length 1) [ 481.195733][T13848] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.2995: lblock 0 mapped to illegal pblock 0 (length 1) [ 481.410775][ T5766] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 481.476592][ T5645] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 481.503255][T13891] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3001'. [ 481.517917][ T5640] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 481.549557][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 481.623820][ T5766] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 481.654870][ T5766] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.771744][ T5766] usb 4-1: config 0 descriptor?? [ 481.809773][ T5766] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 481.899429][T13897] loop1: detected capacity change from 0 to 128 [ 482.010901][ T5766] gp8psk: usb in 128 operation failed. [ 482.024302][T13897] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 482.052564][T13900] loop0: detected capacity change from 0 to 2048 [ 482.073307][T13900] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=2362, location=2362 [ 482.128124][T13900] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 482.160805][T13897] ext4 filesystem being mounted at /528/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 482.280033][ T5766] gp8psk: usb in 146 operation failed. [ 482.297964][T13900] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 482.308415][ T5766] gp8psk: failed to get FW version [ 482.345426][ T5766] gp8psk: FPGA Version = 0 [ 482.377000][T13900] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 482.493074][ T30] audit: type=1800 audit(1779628103.673:147): pid=13900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3004" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 482.547748][ T5766] gp8psk: usb in 138 operation failed. [ 482.574047][ T5766] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 482.589150][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 482.613944][ T5766] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 482.661237][ T5766] usb 4-1: USB disconnect, device number 24 [ 482.712973][ T5645] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 483.628720][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 483.864303][T13953] loop2: detected capacity change from 0 to 1024 [ 483.891387][T13953] EXT4-fs: Ignoring removed bh option [ 483.909106][ T5766] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 483.926548][T13953] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 484.005149][T13953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.090211][ T5766] usb 2-1: Using ep0 maxpacket: 8 [ 484.143441][ T5766] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 484.159499][T13953] EXT4-fs error (device loop2): ext4_find_dest_de:2049: inode #12: block 7: comm syz.2.3020: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 484.191471][ T5766] usb 2-1: config 179 has no interface number 0 [ 484.230679][ T5766] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 484.283737][ T5766] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 484.300695][T13953] EXT4-fs (loop2): Remounting filesystem read-only [ 484.320062][ T5766] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 484.337224][T13953] overlayfs: failed to create directory ./file0/work (errno: 30); mounting read-only [ 484.362454][ T5766] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 484.393840][T13953] overlayfs: failed to set uuid (/bus, err=-30); falling back to uuid=null. [ 484.405418][ T5766] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 484.435839][ T5766] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 484.462340][T13967] loop3: detected capacity change from 0 to 256 [ 484.469927][ T5766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.496868][T13967] vfat: Unknown parameter 'no' [ 484.513927][T13948] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 484.668730][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 484.687940][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.754200][ T5753] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 484.856495][T13973] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 484.928782][ T5753] usb 6-1: Using ep0 maxpacket: 8 [ 484.953967][ T5753] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 484.988610][ T5753] usb 6-1: config 0 has no interface number 0 [ 485.014609][ T5753] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 485.020732][ T5766] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input35 [ 485.075439][ T5753] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 485.142103][ T5753] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 485.202299][ T5753] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 485.270615][ T5753] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 485.300413][ T5775] usb 2-1: USB disconnect, device number 16 [ 485.300491][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 485.314676][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 485.330637][ T5753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.411331][ T5753] usb 6-1: config 0 descriptor?? [ 485.512518][ T5753] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 485.708722][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 485.814437][ T5766] usb 6-1: USB disconnect, device number 22 [ 485.814515][ C1] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 485.844864][ T5766] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 486.034493][T13994] netlink: 211856 bytes leftover after parsing attributes in process `syz.3.3037'. [ 486.137649][T13996] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.3038'. [ 486.269281][ T5637] Bluetooth: hci6: command tx timeout [ 486.392595][T14002] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 486.419835][T14002] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 486.460972][T14002] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 486.556116][T14004] loop6: detected capacity change from 0 to 4096 [ 486.580207][T14004] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 486.741208][T14004] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 486.749572][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 486.773845][T14004] ntfs3(loop6): Failed to load $Extend (-22). [ 486.801452][T14004] ntfs3(loop6): Failed to initialize $Extend. [ 487.023417][T14015] loop0: detected capacity change from 0 to 512 [ 487.067866][T14019] loop1: detected capacity change from 0 to 1024 [ 487.107630][T14015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.179341][T14019] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 487.188893][T14019] hfsplus: xattr search failed [ 487.683698][ T5634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.788719][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 487.962846][T14034] input: syz1 as /devices/virtual/input/input36 [ 488.041159][T14039] xt_hashlimit: size too large, truncated to 1048576 [ 488.518389][T14047] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 488.643198][T14052] loop0: detected capacity change from 0 to 256 [ 488.828766][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 489.714341][T14058] loop1: detected capacity change from 0 to 32768 [ 489.766901][T14058] JBD2: Ignoring recovery information on journal [ 489.868982][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 489.871293][T14086] trusted_key: syz.5.3076 sent an empty control message without MSG_MORE. [ 489.926192][T14058] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 490.043340][T14087] loop0: detected capacity change from 0 to 4096 [ 490.093772][T14087] EXT4-fs (loop0): Test dummy encryption mode enabled [ 490.134264][T14087] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 490.164989][T14087] System zones: 0-5 [ 490.205247][T14087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.494960][ T5645] ocfs2: Unmounting device (7,1) on (node local) [ 490.763260][ T5634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.908726][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 491.192896][T14112] loop5: detected capacity change from 0 to 64 [ 491.224236][T14112] hfs: unable to locate alternate MDB [ 491.224288][T14112] hfs: continuing without an alternate MDB [ 491.948715][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 492.069617][T14135] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3097'. [ 492.201902][T14137] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 492.365912][T14145] loop2: detected capacity change from 0 to 256 [ 492.374332][T14145] exfat: Deprecated parameter 'utf8' [ 492.381089][T14145] exfat: Deprecated parameter 'namecase' [ 492.387319][T14145] exfat: Deprecated parameter 'namecase' [ 492.395338][T14145] exfat: Deprecated parameter 'namecase' [ 492.454431][T14145] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 492.729584][T14153] loop3: detected capacity change from 0 to 1024 [ 492.801416][T14153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.929866][ T5752] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 492.988742][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 493.131607][ T5752] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 493.178544][ T5752] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 493.190800][T14164] loop0: detected capacity change from 0 to 512 [ 493.203194][ T5639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.221481][T14164] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 493.235594][ T5752] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 493.290944][ T5752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.354998][T14151] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 493.416260][ T5752] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 493.797031][T14169] loop6: detected capacity change from 0 to 32768 [ 493.805326][T14169] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3110 (14169) [ 493.826168][T14169] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 493.836325][T14169] BTRFS info (device loop6): using sha256 checksum algorithm [ 494.028761][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 494.092998][T14169] BTRFS info (device loop6): rebuilding free space tree [ 494.114250][T14169] BTRFS info (device loop6): disabling free space tree [ 494.121240][T14169] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 494.130968][T14169] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 494.148036][T14169] BTRFS info (device loop6): setting nodatasum [ 494.154398][T14169] BTRFS info (device loop6): setting nodatacow [ 494.160636][T14169] BTRFS info (device loop6): turning off barriers [ 494.167074][T14169] BTRFS info (device loop6): turning on sync discard [ 494.174094][T14169] BTRFS info (device loop6): force clearing of disk cache [ 494.324879][T14169] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 494.583044][T13007] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 494.630495][ T24] usb 2-1: USB disconnect, device number 17 [ 495.068720][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 495.326679][T14209] Invalid argument reading file caps for ./file0 [ 495.728195][T14219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3122'. [ 495.784125][ T50] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 495.791592][ T50] Bluetooth: hci3: unexpected event for opcode 0x203e [ 496.108720][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 496.782260][T14230] loop5: detected capacity change from 0 to 40427 [ 496.800103][T14230] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 496.806890][T14230] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 496.829109][T14230] F2FS-fs (loop5): invalid crc value [ 496.911321][ T5637] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 496.932624][T14230] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 496.959272][T14230] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 496.966358][T14230] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 497.085301][ T5640] syz-executor: attempt to access beyond end of device [ 497.085301][ T5640] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 497.148729][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 497.175733][ T5640] CPU: 1 UID: 0 PID: 5640 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 497.175791][ T5640] Tainted: [L]=SOFTLOCKUP [ 497.175805][ T5640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 497.175828][ T5640] Call Trace: [ 497.175840][ T5640] [ 497.175860][ T5640] dump_stack_lvl+0x100/0x190 [ 497.175910][ T5640] f2fs_stop_checkpoint+0x600/0x9b0 [ 497.175974][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.176023][ T5640] ? errseq_set+0xe3/0x150 [ 497.176067][ T5640] ? errseq_set+0xe3/0x150 [ 497.176107][ T5640] f2fs_write_end_io+0xf59/0x1340 [ 497.176151][ T5640] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 497.176196][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.176249][ T5640] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 497.176287][ T5640] bio_endio+0x78f/0x8f0 [ 497.176346][ T5640] submit_bio_noacct+0x64c/0x2000 [ 497.176399][ T5640] f2fs_submit_write_bio+0x135/0x340 [ 497.176462][ T5640] __submit_merged_bio+0x331/0x780 [ 497.176509][ T5640] __submit_merged_write_cond+0x3fe/0x510 [ 497.176558][ T5640] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 497.176610][ T5640] ? __pfx___might_resched+0x10/0x10 [ 497.176661][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.176718][ T5640] f2fs_write_cache_pages+0x20e9/0x2630 [ 497.176794][ T5640] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 497.176855][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.176903][ T5640] ? bpf_ksym_find+0x124/0x1c0 [ 497.176962][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.177009][ T5640] ? __kasan_check_byte+0x13/0x50 [ 497.177067][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.177116][ T5640] ? unwind_next_frame+0x3be/0x2090 [ 497.177173][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.177224][ T5640] ? rcu_is_watching+0x12/0xc0 [ 497.177283][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.177346][ T5640] ? bpf_ksym_find+0x124/0x1c0 [ 497.177461][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.177512][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.177560][ T5640] ? add_lock_to_list+0x99/0x110 [ 497.177597][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.177644][ T5640] ? rcu_is_watching+0x12/0xc0 [ 497.177721][ T5640] f2fs_write_data_pages+0x799/0x16d0 [ 497.177787][ T5640] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 497.177837][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.177898][ T5640] ? do_writepages+0x4b5/0x600 [ 497.177959][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.178011][ T5640] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 497.178067][ T5640] do_writepages+0x278/0x600 [ 497.178134][ T5640] ? __pfx_do_writepages+0x10/0x10 [ 497.178196][ T5640] ? do_raw_spin_unlock+0x145/0x1e0 [ 497.178253][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.178301][ T5640] ? _raw_spin_unlock+0x28/0x50 [ 497.178364][ T5640] filemap_writeback+0x22d/0x2e0 [ 497.178405][ T5640] ? __pfx_filemap_writeback+0x10/0x10 [ 497.178468][ T5640] ? check_noncircular+0x97/0x160 [ 497.178562][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.178609][ T5640] ? find_held_lock+0x2b/0x80 [ 497.178671][ T5640] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 497.178725][ T5640] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 497.178777][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.178836][ T5640] f2fs_sync_dirty_inodes+0x469/0x990 [ 497.178914][ T5640] block_operations+0x2a6/0xfc0 [ 497.178964][ T5640] ? __bfs+0x150/0x2a0 [ 497.179009][ T5640] ? __pfx_block_operations+0x10/0x10 [ 497.179062][ T5640] ? check_noncircular+0x97/0x160 [ 497.179156][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.179210][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.179258][ T5640] ? rcu_is_watching+0x12/0xc0 [ 497.179314][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.179369][ T5640] f2fs_write_checkpoint+0x582/0x5550 [ 497.179430][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.179477][ T5640] ? _raw_spin_unlock_irq+0x2e/0x50 [ 497.179534][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.179581][ T5640] ? __wait_for_common+0x1f3/0x4c0 [ 497.179644][ T5640] ? __pfx_schedule_timeout+0x10/0x10 [ 497.179704][ T5640] ? __pfx___wait_for_common+0x10/0x10 [ 497.179769][ T5640] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 497.179834][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.179887][ T5640] ? rcu_is_watching+0x12/0xc0 [ 497.179943][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.179989][ T5640] ? kthread_stop+0x280/0x640 [ 497.180036][ T5640] kill_f2fs_super+0x3f1/0x4a0 [ 497.180089][ T5640] ? __pfx_kill_f2fs_super+0x10/0x10 [ 497.180162][ T5640] ? lockdep_hardirqs_on+0x78/0x100 [ 497.180226][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.180275][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.180337][ T5640] deactivate_locked_super+0xc1/0x1b0 [ 497.180398][ T5640] deactivate_super+0xe7/0x110 [ 497.180457][ T5640] cleanup_mnt+0x21f/0x450 [ 497.180499][ T5640] task_work_run+0x150/0x240 [ 497.180550][ T5640] ? __pfx_task_work_run+0x10/0x10 [ 497.180601][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.180649][ T5640] ? rcu_is_watching+0x12/0xc0 [ 497.180712][ T5640] exit_to_user_mode_loop+0x107/0x4f0 [ 497.180762][ T5640] ? rcu_is_watching+0x12/0xc0 [ 497.180825][ T5640] do_syscall_64+0x706/0xf80 [ 497.180874][ T5640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.180914][ T5640] RIP: 0033:0x7fb1e9d9e097 [ 497.180945][ T5640] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 497.180983][ T5640] RSP: 002b:00007fff4df0b418 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 497.181021][ T5640] RAX: 0000000000000000 RBX: 00007fb1e9e321ca RCX: 00007fb1e9d9e097 [ 497.181047][ T5640] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4df0b4d0 [ 497.181072][ T5640] RBP: 00007fff4df0b4d0 R08: 00007fff4df0c4d0 R09: 00000000ffffffff [ 497.181098][ T5640] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4df0c560 [ 497.181123][ T5640] R13: 00007fb1e9e321ca R14: 0000000000079575 R15: 00007fff4df0c5a0 [ 497.181174][ T5640] [ 497.988711][ T5766] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 498.015744][ T5640] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 498.170885][T14159] syz.2.3105 (14159) used greatest stack depth: 19664 bytes left [ 498.182687][T14251] loop0: detected capacity change from 0 to 256 [ 498.189096][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 498.211463][ T5766] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 498.220888][ T5766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.228981][ T5766] usb 2-1: Product: syz [ 498.233225][ T5766] usb 2-1: Manufacturer: syz [ 498.237853][ T5766] usb 2-1: SerialNumber: syz [ 498.246018][ T5766] usb 2-1: config 0 descriptor?? [ 498.632140][T14263] loop3: detected capacity change from 0 to 256 [ 498.704099][ T5766] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 498.735939][ T5766] usb 2-1: Firmware version (0.0) predates our first public release. [ 498.756653][ T5766] usb 2-1: Please update to version 0.2 or newer [ 498.907904][ T5766] usb 2-1: Firmware: build [ 499.178169][ T5766] usb 2-1: USB disconnect, device number 18 [ 499.228718][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 499.871736][ T5637] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 499.883361][ T5637] Bluetooth: hci3: Injecting HCI hardware error event [ 499.893467][ T5637] Bluetooth: hci3: hardware error 0x00 [ 500.125577][ T5752] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 500.195044][ T5752] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 500.268710][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 500.736603][T14307] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 500.751955][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.763085][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.308716][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 501.432845][T14325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3166'. [ 501.672853][T14331] loop5: detected capacity change from 0 to 512 [ 501.698225][T14331] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 501.754533][T14331] EXT4-fs (loop5): 1 truncate cleaned up [ 501.797906][T14331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.952807][ T5637] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 502.156882][ T5640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.348721][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 502.700563][ T5752] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 502.869913][ T5752] usb 6-1: Using ep0 maxpacket: 8 [ 502.888389][ T5752] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 502.915611][ T5752] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 502.948757][ T5752] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 502.969649][ T5752] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 502.998312][ T5752] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 503.038729][ T5752] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 503.071544][ T5752] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.349109][ T5752] usb 6-1: GET_CAPABILITIES returned 0 [ 503.358124][ T5752] usbtmc 6-1:16.0: can't read capabilities [ 503.388710][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 503.411728][T14354] loop2: detected capacity change from 0 to 32768 [ 503.432234][T14376] loop6: detected capacity change from 0 to 2048 [ 503.451242][T14376] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 503.479170][T14354] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 503.586142][T14354] XFS (loop2): Ending clean mount [ 503.785642][ T5636] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 503.943045][T14394] usbtmc 6-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 504.011814][T14393] loop6: detected capacity change from 0 to 4096 [ 504.041393][T14393] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 504.146478][ T5775] usb 6-1: USB disconnect, device number 23 [ 504.189644][T14393] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 504.288920][T14398] loop2: detected capacity change from 0 to 4096 [ 504.347230][T14398] NILFS (loop2): invalid segment: Checksum error in segment payload [ 504.405542][T14398] NILFS (loop2): trying rollback from an earlier position [ 504.428760][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 504.472810][T14398] NILFS (loop2): recovery complete [ 504.496324][T14404] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 505.149994][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 505.333027][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 505.365538][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 505.405343][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 505.439942][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.468766][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 505.489572][T14416] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 505.524064][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 505.967696][ T5766] usb 3-1: USB disconnect, device number 24 [ 506.508756][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 506.819235][ T9] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 506.838197][T14458] loop6: detected capacity change from 0 to 64 [ 507.050016][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 507.068001][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 507.085791][T14467] input: syz1 as /devices/virtual/input/input38 [ 507.094734][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 507.104461][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.348256][ T9] usb 2-1: usb_control_msg returned -32 [ 507.360103][ T9] usbtmc 2-1:16.0: can't read capabilities [ 507.548748][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 507.698154][T14481] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.742799][T14482] usbtmc 2-1:16.0: INDICATOR_PULSE returned 0 [ 507.969380][ T5766] usb 2-1: USB disconnect, device number 19 [ 508.124457][T14486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3225'. [ 508.151285][T14488] input: syz1 as /devices/virtual/input/input39 [ 508.164316][T14486] netlink: 'syz.3.3225': attribute type 5 has an invalid length. [ 508.189333][T14486] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3225'. [ 508.307714][T14486] geneve2: entered promiscuous mode [ 508.328734][T14486] geneve2: entered allmulticast mode [ 508.351970][ T1016] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 508.386937][ T1016] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 508.428079][ T1016] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 508.492820][ T1016] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 508.588736][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 509.395082][T14496] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.446977][T14496] team_slave_0: left promiscuous mode [ 509.477089][T14496] team_slave_1: left promiscuous mode [ 509.628807][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 509.804002][T14496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.836106][T14496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.859064][T14496] batman_adv: batadv0: Interface deactivated: vlan2 [ 509.950257][ T112] kworker/u8:5: attempt to access beyond end of device [ 509.950257][ T112] loop6: rw=1, sector=161, nr_sectors = 1 limit=64 [ 509.976004][ T112] Buffer I/O error on dev loop6, logical block 161, lost async page write [ 509.988170][ T112] kworker/u8:5: attempt to access beyond end of device [ 509.988170][ T112] loop6: rw=1, sector=162, nr_sectors = 1 limit=64 [ 510.007268][ T112] Buffer I/O error on dev loop6, logical block 162, lost async page write [ 510.016352][ T112] kworker/u8:5: attempt to access beyond end of device [ 510.016352][ T112] loop6: rw=1, sector=163, nr_sectors = 1 limit=64 [ 510.030146][ T112] Buffer I/O error on dev loop6, logical block 163, lost async page write [ 510.038967][ T112] kworker/u8:5: attempt to access beyond end of device [ 510.038967][ T112] loop6: rw=1, sector=167, nr_sectors = 1 limit=64 [ 510.053088][ T112] Buffer I/O error on dev loop6, logical block 167, lost async page write [ 510.061887][ T112] kworker/u8:5: attempt to access beyond end of device [ 510.061887][ T112] loop6: rw=1, sector=171, nr_sectors = 1 limit=64 [ 510.075782][ T112] Buffer I/O error on dev loop6, logical block 171, lost async page write [ 510.085323][ T112] kworker/u8:5: attempt to access beyond end of device [ 510.085323][ T112] loop6: rw=1, sector=172, nr_sectors = 1 limit=64 [ 510.099666][ T112] Buffer I/O error on dev loop6, logical block 172, lost async page write [ 510.111157][ T112] kworker/u8:5: attempt to access beyond end of device [ 510.111157][ T112] loop6: rw=1, sector=173, nr_sectors = 1 limit=64 [ 510.148522][ T112] Buffer I/O error on dev loop6, logical block 173, lost async page write [ 510.188867][ T112] kworker/u8:5: attempt to access beyond end of device [ 510.188867][ T112] loop6: rw=1, sector=174, nr_sectors = 1 limit=64 [ 510.214674][ T112] Buffer I/O error on dev loop6, logical block 174, lost async page write [ 510.232142][ T112] kworker/u8:5: attempt to access beyond end of device [ 510.232142][ T112] loop6: rw=1, sector=175, nr_sectors = 1 limit=64 [ 510.266111][ T112] Buffer I/O error on dev loop6, logical block 175, lost async page write [ 510.285442][ T112] kworker/u8:5: attempt to access beyond end of device [ 510.285442][ T112] loop6: rw=1, sector=176, nr_sectors = 1 limit=64 [ 510.301983][ T112] Buffer I/O error on dev loop6, logical block 176, lost async page write [ 510.414200][ T3410] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.453173][ T3410] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.486079][ T3410] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.528228][ T3410] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.568431][ T3410] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.620676][ T3410] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.653782][ T3410] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.668765][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 510.707146][ T3410] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.624856][T14561] loop5: detected capacity change from 0 to 128 [ 511.669877][T14561] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 511.681416][T14534] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 511.692570][T14561] ext4 filesystem being mounted at /527/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 511.708805][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 511.891102][T14534] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 511.906872][T14534] usb 2-1: config 0 has no interface number 0 [ 511.921565][T14569] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 511.937115][T14534] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 511.962140][T14571] loop2: detected capacity change from 0 to 256 [ 511.969653][T14534] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.972851][T14569] gretap1: entered allmulticast mode [ 511.997996][T14534] usb 2-1: Product: syz [ 512.012464][T14534] usb 2-1: Manufacturer: syz [ 512.012577][ T5640] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 512.029156][T14534] usb 2-1: SerialNumber: syz [ 512.076637][T14534] usb 2-1: config 0 descriptor?? [ 512.358541][T14534] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 512.397877][T14534] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 512.425391][T14534] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 512.438446][T14534] usb 2-1: media controller created [ 512.505315][T14534] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 512.647847][T14534] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 512.748737][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 512.781778][T14582] pim6reg1: entered promiscuous mode [ 512.794236][T14534] usb 2-1: USB disconnect, device number 20 [ 512.815267][T14582] pim6reg1: entered allmulticast mode [ 513.168828][T14596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3261'. [ 513.661547][T14601] loop5: detected capacity change from 0 to 32768 [ 513.672470][T14601] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3263 (14601) [ 513.696393][T14601] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 513.707048][T14601] BTRFS info (device loop5): using sha256 checksum algorithm [ 513.788802][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 513.823600][T14601] BTRFS info (device loop5): rebuilding free space tree [ 513.869272][T14601] BTRFS info (device loop5): disabling free space tree [ 513.876216][T14601] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 513.885939][T14601] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 513.904400][T14601] BTRFS info (device loop5): setting nodatasum [ 513.910659][T14601] BTRFS info (device loop5): setting nodatacow [ 513.916833][T14601] BTRFS info (device loop5): turning off barriers [ 513.923319][T14601] BTRFS info (device loop5): turning on sync discard [ 513.930037][T14601] BTRFS info (device loop5): force clearing of disk cache [ 514.086997][T14601] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 514.373143][T14636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3272'. [ 514.419548][T14636] netlink: 'syz.0.3272': attribute type 5 has an invalid length. [ 514.445279][T14636] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3272'. [ 514.465727][ T5640] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 514.508767][T14527] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 514.532328][T14636] geneve0: entered promiscuous mode [ 514.559249][T14636] geneve0: entered allmulticast mode [ 514.614553][ T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 514.652770][ T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 514.688734][T14527] usb 3-1: Using ep0 maxpacket: 16 [ 514.695126][ T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 514.739586][T14527] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 514.740384][ T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 514.784444][T14527] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 514.829675][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 514.852113][T14527] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.884938][T14640] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3275'. [ 514.904748][T14527] usb 3-1: Product: syz [ 514.933810][T14527] usb 3-1: Manufacturer: syz [ 514.949901][T14527] usb 3-1: SerialNumber: syz [ 515.010317][T14527] usb 3-1: config 0 descriptor?? [ 515.024600][T14527] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 515.035321][T14527] usb 3-1: Detected FT232R [ 515.241063][T14535] kernel write not supported for file /slabinfo (pid: 14535 comm: kworker/0:17) [ 515.272718][T14527] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 515.583989][T14527] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 515.835212][T14523] usb 3-1: USB disconnect, device number 25 [ 515.868801][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 515.887893][T14663] loop1: detected capacity change from 0 to 4096 [ 515.925159][T14523] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 515.944477][T14663] ntfs3(loop1): ino=3, Correct links count -> 2. [ 515.964951][T14523] ftdi_sio 3-1:0.0: device disconnected [ 516.740100][T14686] loop2: detected capacity change from 0 to 4096 [ 516.784511][T14686] EXT4-fs: Ignoring removed nomblk_io_submit option [ 516.836416][T14686] EXT4-fs (loop2): Test dummy encryption mode enabled [ 516.879842][T14686] EXT4-fs (loop2): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 516.908698][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 516.941837][T14686] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 516.977203][T14686] System zones: 0-5 [ 516.998966][T14686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.064993][T14697] loop0: detected capacity change from 0 to 256 [ 517.103623][T14697] FAT-fs (loop0): Directory bread(block 64) failed [ 517.113674][T14697] FAT-fs (loop0): Directory bread(block 65) failed [ 517.137156][T14697] FAT-fs (loop0): Directory bread(block 66) failed [ 517.172729][T14697] FAT-fs (loop0): Directory bread(block 67) failed [ 517.208818][T14697] FAT-fs (loop0): Directory bread(block 68) failed [ 517.243666][T14697] FAT-fs (loop0): Directory bread(block 69) failed [ 517.282983][T14697] FAT-fs (loop0): Directory bread(block 70) failed [ 517.313807][T14697] FAT-fs (loop0): Directory bread(block 71) failed [ 517.359501][T14697] FAT-fs (loop0): Directory bread(block 72) failed [ 517.384638][T14697] FAT-fs (loop0): Directory bread(block 73) failed [ 517.411445][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.948879][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 518.933567][T14744] batman_adv: batadv0: Adding interface: gretap1 [ 518.941038][T14744] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.988829][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 518.995173][T14744] batman_adv: batadv0: Interface activated: gretap1 [ 519.531259][T14757] loop0: detected capacity change from 0 to 2048 [ 519.611470][T14757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.807893][T14757] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 16: comm syz.0.3321: path /542/file1: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=8, size=2048 fake=0 [ 520.028943][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 520.125688][ T5634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.281183][T14783] geneve0: entered promiscuous mode [ 520.303649][T14783] geneve0: entered allmulticast mode [ 520.335494][T14527] IPVS: starting estimator thread 0... [ 520.449359][T14787] IPVS: using max 22 ests per chain, 52800 per kthread [ 520.692081][T14796] loop1: detected capacity change from 0 to 512 [ 520.748094][T14796] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 520.907062][T14796] EXT4-fs (loop1): 1 orphan inode deleted [ 520.942537][T14796] EXT4-fs (loop1): 1 truncate cleaned up [ 520.992901][T14796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.068847][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 521.090342][T14805] netlink: 'syz.5.3343': attribute type 1 has an invalid length. [ 521.166697][T14796] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 521.191980][T14805] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3343'. [ 521.314911][T14805] netlink: 'syz.5.3343': attribute type 1 has an invalid length. [ 521.417914][T14805] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3343'. [ 521.556098][ T5645] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.863730][T14794] loop6: detected capacity change from 0 to 131072 [ 521.895728][T14794] XFS (loop6): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 522.086049][T14794] XFS (loop6): Starting recovery (logdev: internal) [ 522.108847][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 522.153378][T14794] XFS (loop6): Ending recovery (logdev: internal) [ 522.244605][ T5637] Bluetooth: hci6: link tx timeout [ 522.255124][ T5637] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 522.372539][T14794] XFS (loop6): EXPERIMENTAL online shrink feature enabled. Use at your own risk! [ 522.422469][T14825] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3347'. [ 522.486968][T13007] XFS (loop6): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 522.527130][T14825] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3347'. [ 522.596914][T14825] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3347'. [ 522.654755][T14799] loop2: detected capacity change from 0 to 32768 [ 522.692500][T14827] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3347'. [ 522.723958][T14799] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 522.822840][T14827] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3347'. [ 522.869637][T14827] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3347'. [ 523.151040][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 523.257799][ T5636] ocfs2: Unmounting device (7,2) on (node local) [ 523.539867][T14535] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 523.720333][T14535] usb 2-1: Using ep0 maxpacket: 8 [ 523.737412][T14535] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 523.777363][T14535] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 523.811648][T14535] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.852584][T14535] usb 2-1: config 0 descriptor?? [ 523.994201][T14846] loop5: detected capacity change from 0 to 1024 [ 524.052160][T14846] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 524.113143][T14535] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 524.188704][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 524.270998][T14846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.351202][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 524.426604][T14855] loop2: detected capacity change from 0 to 8 [ 524.476067][T14855] SQUASHFS error: Unable to read inode 0x11f [ 524.679041][T14533] usb 2-1: USB disconnect, device number 21 [ 524.982667][ T5640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.187757][T14873] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 525.228726][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 525.473461][T14879] loop3: detected capacity change from 0 to 64 [ 525.613355][T14882] batman_adv: batadv0: Adding interface: gretap1 [ 525.645918][T14882] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.761786][T14882] batman_adv: batadv0: Interface activated: gretap1 [ 526.088744][ T5767] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 526.268700][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 526.269716][ T5767] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 526.312329][ T5767] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.356086][ T5767] usb 2-1: config 0 descriptor?? [ 526.380985][ T5767] cp210x 2-1:0.0: cp210x converter detected [ 526.810505][ T5767] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 527.086111][ T5767] usb 2-1: cp210x converter now attached to ttyUSB0 [ 527.162448][T14912] input: syz1 as /devices/virtual/input/input40 [ 527.292523][ T5767] usb 2-1: USB disconnect, device number 22 [ 527.308711][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 527.356169][ T5767] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 527.400585][ T5767] cp210x 2-1:0.0: device disconnected [ 527.589640][T14533] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 527.768846][T14533] usb 6-1: Using ep0 maxpacket: 32 [ 527.780653][T14533] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 527.798728][T14533] usb 6-1: config 0 has no interface number 0 [ 527.811312][T14533] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 527.820498][T14533] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.828546][T14533] usb 6-1: Product: syz [ 527.834604][T14533] usb 6-1: Manufacturer: syz [ 527.849252][T14533] usb 6-1: SerialNumber: syz [ 527.864023][T14533] usb 6-1: config 0 descriptor?? [ 528.348723][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 528.606007][ T13] bio_check_eod: 120 callbacks suppressed [ 528.606061][ T13] kworker/u8:1: attempt to access beyond end of device [ 528.606061][ T13] loop3: rw=1, sector=161, nr_sectors = 1 limit=64 [ 528.712030][ T13] buffer_io_error: 102 callbacks suppressed [ 528.712056][ T13] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 528.773158][ T13] kworker/u8:1: attempt to access beyond end of device [ 528.773158][ T13] loop3: rw=1, sector=162, nr_sectors = 1 limit=64 [ 528.836856][ T13] Buffer I/O error on dev loop3, logical block 162, lost async page write [ 528.877446][ T13] kworker/u8:1: attempt to access beyond end of device [ 528.877446][ T13] loop3: rw=1, sector=163, nr_sectors = 1 limit=64 [ 528.943447][ T13] Buffer I/O error on dev loop3, logical block 163, lost async page write [ 528.997266][ T13] kworker/u8:1: attempt to access beyond end of device [ 528.997266][ T13] loop3: rw=1, sector=167, nr_sectors = 1 limit=64 [ 529.066791][ T13] Buffer I/O error on dev loop3, logical block 167, lost async page write [ 529.096207][T14533] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 529.116596][T14936] loop1: detected capacity change from 0 to 256 [ 529.126697][ T13] kworker/u8:1: attempt to access beyond end of device [ 529.126697][ T13] loop3: rw=1, sector=169, nr_sectors = 1 limit=64 [ 529.158790][T14533] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 529.212731][T14533] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 529.232936][ T13] Buffer I/O error on dev loop3, logical block 169, lost async page write [ 529.273095][T14936] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 529.273581][T14928] loop2: detected capacity change from 0 to 131072 [ 529.295685][T14928] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 529.298975][ T13] kworker/u8:1: attempt to access beyond end of device [ 529.298975][ T13] loop3: rw=1, sector=171, nr_sectors = 1 limit=64 [ 529.302434][T14928] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 529.323996][T14533] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 529.335012][T14928] F2FS-fs (loop2): invalid crc value [ 529.354248][T14938] loop6: detected capacity change from 0 to 256 [ 529.371737][ T30] audit: type=1800 audit(1779628150.553:148): pid=14936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3393" name="file2" dev="loop1" ino=1048802 res=0 errno=0 [ 529.377511][T14533] usb 6-1: USB disconnect, device number 24 [ 529.392876][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 529.397415][ T30] audit: type=1804 audit(1779628150.573:149): pid=14936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3393" name="/newroot/585/file2/file2" dev="loop1" ino=1048802 res=1 errno=0 [ 529.422074][ T13] Buffer I/O error on dev loop3, logical block 171, lost async page write [ 529.461665][ T13] kworker/u8:1: attempt to access beyond end of device [ 529.461665][ T13] loop3: rw=1, sector=172, nr_sectors = 1 limit=64 [ 529.523752][ T13] Buffer I/O error on dev loop3, logical block 172, lost async page write [ 529.529735][T14928] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 529.552159][T14928] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 529.559248][T14928] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 529.594310][ T13] kworker/u8:1: attempt to access beyond end of device [ 529.594310][ T13] loop3: rw=1, sector=173, nr_sectors = 1 limit=64 [ 529.624244][ T13] Buffer I/O error on dev loop3, logical block 173, lost async page write [ 529.650413][ T13] kworker/u8:1: attempt to access beyond end of device [ 529.650413][ T13] loop3: rw=1, sector=174, nr_sectors = 1 limit=64 [ 529.701079][ T13] Buffer I/O error on dev loop3, logical block 174, lost async page write [ 529.734835][ T13] kworker/u8:1: attempt to access beyond end of device [ 529.734835][ T13] loop3: rw=1, sector=175, nr_sectors = 1 limit=64 [ 529.778574][T14944] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 529.794999][ T13] Buffer I/O error on dev loop3, logical block 175, lost async page write [ 529.812510][T14944] exFAT-fs (loop1): Filesystem has been set read-only [ 530.335425][T14954] loop0: detected capacity change from 0 to 1024 [ 530.365332][T14954] EXT4-fs: Ignoring removed mblk_io_submit option [ 530.402595][T14954] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002] [ 530.428704][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 530.472399][T14954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 530.557910][T14954] ext4 filesystem being mounted at /553/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 530.882260][ T5634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 531.303200][T14966] loop5: detected capacity change from 0 to 64 [ 531.469215][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 532.508707][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 532.984721][T14981] loop2: detected capacity change from 0 to 32768 [ 533.019248][T14981] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 533.102011][T14981] XFS (loop2): Ending clean mount [ 533.196181][T14981] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x26/0xe0, xfs_rmapbt block 0x14 [ 533.207822][T14981] XFS (loop2): Unmount and run xfs_repair [ 533.214390][T14981] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 533.222057][T14981] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 533.231007][T14981] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10 ................ [ 533.239899][T14981] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 533.248807][T14981] 00000030: 00 00 00 00 6c 4b dc c9 00 00 00 00 00 00 00 01 ....lK.......... [ 533.257688][T14981] 00000040: ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 ................ [ 533.266669][T14981] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 533.275583][T14981] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 533.284525][T14981] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 533.293550][T14981] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x14 len 4 error 74 [ 533.326848][T14981] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x3fc/0x990 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 533.341599][T14981] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 533.548864][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 533.673533][ T5636] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 534.341126][ T112] bio_check_eod: 126 callbacks suppressed [ 534.341153][ T112] kworker/u8:5: attempt to access beyond end of device [ 534.341153][ T112] loop5: rw=1, sector=161, nr_sectors = 1 limit=64 [ 534.360831][ T112] buffer_io_error: 110 callbacks suppressed [ 534.360855][ T112] Buffer I/O error on dev loop5, logical block 161, lost async page write [ 534.405040][ T112] kworker/u8:5: attempt to access beyond end of device [ 534.405040][ T112] loop5: rw=1, sector=162, nr_sectors = 1 limit=64 [ 534.419072][ T112] Buffer I/O error on dev loop5, logical block 162, lost async page write [ 534.427979][ T112] kworker/u8:5: attempt to access beyond end of device [ 534.427979][ T112] loop5: rw=1, sector=163, nr_sectors = 1 limit=64 [ 534.443323][ T112] Buffer I/O error on dev loop5, logical block 163, lost async page write [ 534.452355][ T112] kworker/u8:5: attempt to access beyond end of device [ 534.452355][ T112] loop5: rw=1, sector=167, nr_sectors = 1 limit=64 [ 534.465985][ T112] Buffer I/O error on dev loop5, logical block 167, lost async page write [ 534.474932][ T112] kworker/u8:5: attempt to access beyond end of device [ 534.474932][ T112] loop5: rw=1, sector=169, nr_sectors = 1 limit=64 [ 534.488984][ T112] Buffer I/O error on dev loop5, logical block 169, lost async page write [ 534.497836][ T112] kworker/u8:5: attempt to access beyond end of device [ 534.497836][ T112] loop5: rw=1, sector=171, nr_sectors = 1 limit=64 [ 534.512730][ T112] Buffer I/O error on dev loop5, logical block 171, lost async page write [ 534.523046][ T112] kworker/u8:5: attempt to access beyond end of device [ 534.523046][ T112] loop5: rw=1, sector=172, nr_sectors = 1 limit=64 [ 534.537166][ T112] Buffer I/O error on dev loop5, logical block 172, lost async page write [ 534.554881][ T112] kworker/u8:5: attempt to access beyond end of device [ 534.554881][ T112] loop5: rw=1, sector=173, nr_sectors = 1 limit=64 [ 534.569214][ T112] Buffer I/O error on dev loop5, logical block 173, lost async page write [ 534.588061][ T112] kworker/u8:5: attempt to access beyond end of device [ 534.588061][ T112] loop5: rw=1, sector=174, nr_sectors = 1 limit=64 [ 534.601631][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 534.636372][ T112] Buffer I/O error on dev loop5, logical block 174, lost async page write [ 534.666539][ T112] kworker/u8:5: attempt to access beyond end of device [ 534.666539][ T112] loop5: rw=1, sector=175, nr_sectors = 1 limit=64 [ 534.720823][ T112] Buffer I/O error on dev loop5, logical block 175, lost async page write [ 535.628913][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 535.648272][T15018] loop2: detected capacity change from 0 to 131072 [ 535.696903][T15018] XFS (loop2): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 535.786070][T15018] XFS (loop2): Starting recovery (logdev: internal) [ 535.834353][T15018] XFS (loop2): Ending recovery (logdev: internal) [ 535.925748][T15018] XFS (loop2): EXPERIMENTAL online shrink feature enabled. Use at your own risk! [ 536.384282][ T5636] XFS (loop2): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 536.668851][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 536.950740][T15061] loop1: detected capacity change from 0 to 64 [ 537.158989][T15065] loop6: detected capacity change from 0 to 256 [ 537.237846][T15065] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 537.273283][T15068] loop5: detected capacity change from 0 to 256 [ 537.370688][ T30] audit: type=1800 audit(1779628158.553:150): pid=15065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3439" name="file2" dev="loop6" ino=1048809 res=0 errno=0 [ 537.477588][ T30] audit: type=1804 audit(1779628158.553:151): pid=15065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3439" name="/newroot/86/file2/file2" dev="loop6" ino=1048809 res=1 errno=0 [ 537.648231][T15070] exFAT-fs (loop6): error, invalid access to FAT (entry 0xffffffff) [ 537.681499][T15070] exFAT-fs (loop6): Filesystem has been set read-only [ 537.708897][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 538.147013][T15080] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 538.196632][T15084] loop6: detected capacity change from 0 to 256 [ 538.224044][T15082] loop0: detected capacity change from 0 to 256 [ 538.543025][T15088] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 538.748866][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 538.931928][T15103] loop0: detected capacity change from 0 to 128 [ 538.951333][T15103] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 539.020282][T15103] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 539.038864][T15103] FAT-fs (loop0): Filesystem has been set read-only [ 539.047222][T15103] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 539.110188][T14534] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 539.458197][T15105] loop5: detected capacity change from 0 to 32768 [ 539.469321][T15105] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3455 (15105) [ 539.482975][T14533] IPVS: starting estimator thread 0... [ 539.491283][T15086] loop3: detected capacity change from 0 to 32768 [ 539.502855][T15105] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 539.513026][T15105] BTRFS info (device loop5): using crc32c checksum algorithm [ 539.541863][T14534] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 539.578720][T15108] IPVS: using max 30 ests per chain, 72000 per kthread [ 539.589183][T14534] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 539.668005][T14534] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 539.706374][T15105] BTRFS info (device loop5): setting nodatasum [ 539.712703][T15105] BTRFS info (device loop5): setting nodatacow [ 539.718982][T15105] BTRFS info (device loop5): turning on async discard [ 539.725764][T15105] BTRFS info (device loop5): enabling free space tree [ 539.732661][T15105] BTRFS info (device loop5): enabling auto defrag [ 539.740214][T15105] BTRFS info (device loop5): max_inline set to 0 [ 539.749046][T14534] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 539.778901][T14534] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 539.790326][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 539.813234][T14534] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 539.830302][T14534] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 539.842972][T14534] usb 3-1: Product: syz [ 539.847179][T14534] usb 3-1: Manufacturer: syz [ 539.912712][T15105] BTRFS info (device loop5): scrub: started on devid 1 [ 539.926695][T14534] cdc_wdm 3-1:1.0: skipping garbage [ 539.932440][T14534] cdc_wdm 3-1:1.0: skipping garbage [ 539.937804][T15105] BTRFS info (device loop5): scrub: finished on devid 1 with status: 0 [ 540.018106][T14534] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 540.024229][T14534] cdc_wdm 3-1:1.0: Unknown control protocol [ 540.163234][ T5640] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 540.232686][ T112] bio_check_eod: 120 callbacks suppressed [ 540.232713][ T112] kworker/u8:5: attempt to access beyond end of device [ 540.232713][ T112] loop1: rw=1, sector=161, nr_sectors = 1 limit=64 [ 540.339129][ T112] buffer_io_error: 102 callbacks suppressed [ 540.339158][ T112] Buffer I/O error on dev loop1, logical block 161, lost async page write [ 540.355936][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 540.362784][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 540.369051][ T112] kworker/u8:5: attempt to access beyond end of device [ 540.369051][ T112] loop1: rw=1, sector=162, nr_sectors = 1 limit=64 [ 540.369330][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 540.386350][ T112] Buffer I/O error on dev loop1, logical block 162, lost async page write [ 540.388856][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 540.389338][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 540.397979][ T112] kworker/u8:5: attempt to access beyond end of device [ 540.397979][ T112] loop1: rw=1, sector=163, nr_sectors = 1 limit=64 [ 540.403438][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 540.403809][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 540.435898][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 540.443074][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 540.449702][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 540.456819][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 540.463439][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 540.470545][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 540.477167][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 540.488772][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 540.495414][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 540.502007][T14534] usb 3-1: USB disconnect, device number 26 [ 540.508053][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 540.508092][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 540.508124][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 540.528678][ T112] Buffer I/O error on dev loop1, logical block 163, lost async page write [ 540.592379][ T112] kworker/u8:5: attempt to access beyond end of device [ 540.592379][ T112] loop1: rw=1, sector=167, nr_sectors = 1 limit=64 [ 540.642871][ T112] Buffer I/O error on dev loop1, logical block 167, lost async page write [ 540.665996][T15134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 540.715772][ T112] kworker/u8:5: attempt to access beyond end of device [ 540.715772][ T112] loop1: rw=1, sector=169, nr_sectors = 1 limit=64 [ 540.794163][ T112] Buffer I/O error on dev loop1, logical block 169, lost async page write [ 540.828727][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 540.851545][ T112] kworker/u8:5: attempt to access beyond end of device [ 540.851545][ T112] loop1: rw=1, sector=171, nr_sectors = 1 limit=64 [ 540.923075][ T112] Buffer I/O error on dev loop1, logical block 171, lost async page write [ 540.969164][ T112] kworker/u8:5: attempt to access beyond end of device [ 540.969164][ T112] loop1: rw=1, sector=172, nr_sectors = 1 limit=64 [ 541.017525][ T112] Buffer I/O error on dev loop1, logical block 172, lost async page write [ 541.053634][ T112] kworker/u8:5: attempt to access beyond end of device [ 541.053634][ T112] loop1: rw=1, sector=173, nr_sectors = 1 limit=64 [ 541.120632][ T112] Buffer I/O error on dev loop1, logical block 173, lost async page write [ 541.156425][ T112] kworker/u8:5: attempt to access beyond end of device [ 541.156425][ T112] loop1: rw=1, sector=174, nr_sectors = 1 limit=64 [ 541.211008][ T112] Buffer I/O error on dev loop1, logical block 174, lost async page write [ 541.238356][ T112] kworker/u8:5: attempt to access beyond end of device [ 541.238356][ T112] loop1: rw=1, sector=175, nr_sectors = 1 limit=64 [ 541.290577][ T112] Buffer I/O error on dev loop1, logical block 175, lost async page write [ 541.868694][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 541.966756][T15156] loop5: detected capacity change from 0 to 32768 [ 542.035154][T15158] loop2: detected capacity change from 0 to 32768 [ 542.079912][T15156] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 542.092470][T15158] JBD2: Ignoring recovery information on journal [ 542.180688][T15158] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 542.193786][T15156] XFS (loop5): Ending clean mount [ 542.210502][T15156] XFS (loop5): Quotacheck needed: Please wait. [ 542.487683][T15156] XFS (loop5): Quotacheck: Done. [ 542.592485][ T30] audit: type=1800 audit(1779628163.773:152): pid=15156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3467" name="file2" dev="loop5" ino=4423 res=0 errno=0 [ 542.735413][ T5640] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 542.783160][ T5636] ocfs2: Unmounting device (7,2) on (node local) [ 542.921960][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 543.413600][T15182] loop0: detected capacity change from 0 to 64 [ 543.948734][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 544.754145][T15187] loop6: detected capacity change from 0 to 131072 [ 544.807118][T15187] F2FS-fs (loop6): invalid crc value [ 544.936973][T15187] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 544.953244][T15187] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 544.988698][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 545.649361][T15219] 9pnet: p9_errstr2errno: server reported unknown error ÿ [ 545.873603][T15224] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 545.974350][T15228] loop2: detected capacity change from 0 to 1024 [ 546.028695][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 546.082103][T15228] hfsplus: bad catalog file entry [ 546.176568][T15230] loop6: detected capacity change from 0 to 512 [ 546.287792][T15230] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.393048][T15230] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.797680][ T12] bio_check_eod: 118 callbacks suppressed [ 546.797706][ T12] kworker/u8:0: attempt to access beyond end of device [ 546.797706][ T12] loop0: rw=1, sector=161, nr_sectors = 1 limit=64 [ 546.819469][T13007] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.884272][ T12] buffer_io_error: 102 callbacks suppressed [ 546.884296][ T12] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 546.914682][ T12] kworker/u8:0: attempt to access beyond end of device [ 546.914682][ T12] loop0: rw=1, sector=162, nr_sectors = 1 limit=64 [ 546.951069][ T12] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 546.979040][ T12] kworker/u8:0: attempt to access beyond end of device [ 546.979040][ T12] loop0: rw=1, sector=163, nr_sectors = 1 limit=64 [ 547.024207][ T12] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 547.053331][ T12] kworker/u8:0: attempt to access beyond end of device [ 547.053331][ T12] loop0: rw=1, sector=167, nr_sectors = 1 limit=64 [ 547.068691][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 547.110761][ T12] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 547.145475][ T12] kworker/u8:0: attempt to access beyond end of device [ 547.145475][ T12] loop0: rw=1, sector=169, nr_sectors = 1 limit=64 [ 547.186247][T15247] loop5: detected capacity change from 0 to 512 [ 547.201084][ T12] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 547.214682][T15247] EXT4-fs: Ignoring removed nobh option [ 547.238058][ T12] kworker/u8:0: attempt to access beyond end of device [ 547.238058][ T12] loop0: rw=1, sector=171, nr_sectors = 1 limit=64 [ 547.265432][T15247] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 547.281573][T15247] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 547.291706][ T12] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 547.300724][ T12] kworker/u8:0: attempt to access beyond end of device [ 547.300724][ T12] loop0: rw=1, sector=172, nr_sectors = 1 limit=64 [ 547.315931][ T12] Buffer I/O error on dev loop0, logical block 172, lost async page write [ 547.329829][T15247] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #13: comm syz.5.3497: inode has both inline data and extents flags [ 547.330653][ T12] kworker/u8:0: attempt to access beyond end of device [ 547.330653][ T12] loop0: rw=1, sector=173, nr_sectors = 1 limit=64 [ 547.356822][ T12] Buffer I/O error on dev loop0, logical block 173, lost async page write [ 547.365936][ T12] kworker/u8:0: attempt to access beyond end of device [ 547.365936][ T12] loop0: rw=1, sector=174, nr_sectors = 1 limit=64 [ 547.379635][ T12] Buffer I/O error on dev loop0, logical block 174, lost async page write [ 547.388263][ T12] kworker/u8:0: attempt to access beyond end of device [ 547.388263][ T12] loop0: rw=1, sector=175, nr_sectors = 1 limit=64 [ 547.402940][ T12] Buffer I/O error on dev loop0, logical block 175, lost async page write [ 547.428753][T15247] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 547.430544][T15247] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.3497: couldn't read orphan inode 13 (err -117) [ 547.439805][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 547.439838][ C1] EXT4-fs (loop5): initial error at time 1779628168: ext4_orphan_get:1397: inode 13 [ 547.439894][ C1] EXT4-fs (loop5): last error at time 1779628168: ext4_orphan_get:1397: inode 13 [ 547.540500][T15247] loop5: lost filesystem error report for type 5 error -117 [ 547.562600][T15247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.728255][T15247] EXT4-fs (loop5): shut down requested (1) [ 548.109022][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 548.125338][ T5640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.360207][T15273] loop5: detected capacity change from 0 to 512 [ 548.388939][T15273] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 548.452795][T15273] EXT4-fs (loop5): 1 truncate cleaned up [ 548.481317][T15273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.665472][T15278] overlayfs: failed to resolve './bus': -2 [ 548.880676][ T5640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.960502][T14533] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 549.130395][T14533] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 549.139485][T14533] usb 4-1: config 1 has no interface number 0 [ 549.145608][T14533] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 549.156767][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 549.165173][T14533] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 549.176076][T14533] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 549.185513][T14533] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 549.197920][T14533] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 26232, setting to 64 [ 549.216617][T14533] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 549.226218][T14533] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.236178][T14533] usb 4-1: Product: syz [ 549.241182][T14533] usb 4-1: Manufacturer: syz [ 549.246887][T14533] usb 4-1: SerialNumber: syz [ 549.265128][T15280] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 549.511349][T15280] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 549.748331][T15280] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 549.942853][T15304] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 550.188754][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 550.199548][T15280] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 550.242140][T14533] cdc_ncm 4-1:1.1: bind() failure [ 550.482291][T15298] loop5: detected capacity change from 0 to 131072 [ 550.492441][T15298] F2FS-fs (loop5): Test dummy encryption mode enabled [ 550.504328][T15298] F2FS-fs (loop5): invalid crc value [ 550.526653][T14533] usb 4-1: USB disconnect, device number 25 [ 550.537123][T15310] loop1: detected capacity change from 0 to 1024 [ 550.580590][T15310] ext4: Unknown parameter 'nouser_xattr' [ 550.617200][T15298] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 550.632378][T15298] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 550.663658][T15298] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 551.228856][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 551.959603][T14523] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 552.132854][T15341] loop3: detected capacity change from 0 to 2048 [ 552.142400][T14523] usb 2-1: Using ep0 maxpacket: 8 [ 552.159857][T15341] EXT4-fs: Ignoring removed nomblk_io_submit option [ 552.162002][T14523] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 552.205178][T14523] usb 2-1: config 0 has no interface number 0 [ 552.221968][T14523] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 552.244177][T14523] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 552.268691][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 552.277554][T15341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.278647][T14523] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 552.403853][T14523] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 552.457265][T14523] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 552.476699][T14523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.519294][T14523] usb 2-1: config 0 descriptor?? [ 552.547456][T14523] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 552.588883][T14535] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 552.721501][T15343] loop0: detected capacity change from 0 to 32768 [ 552.748780][T14535] usb 4-1: Using ep0 maxpacket: 8 [ 552.768150][T14535] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.797036][T15343] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 552.811437][T14535] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 552.904473][T14535] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 552.905280][T14523] usb 2-1: USB disconnect, device number 23 [ 552.913815][ C1] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 552.951406][T14535] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.953473][T14523] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 553.000390][T14535] usb 4-1: config 0 descriptor?? [ 553.190670][ T5634] ocfs2: Unmounting device (7,0) on (node local) [ 553.308827][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 553.423576][T14535] hid (null): unknown global tag 0xa3 [ 553.448726][T14535] hid (null): unknown global tag 0xc [ 553.458589][T14535] hid (null): unknown global tag 0xd [ 553.487741][T14535] uclogic 0003:5543:0005.001C: unexpected long global item [ 553.511148][T14535] uclogic 0003:5543:0005.001C: parse failed [ 553.527466][T14535] uclogic 0003:5543:0005.001C: probe with driver uclogic failed with error -22 [ 553.677706][T14535] usb 4-1: USB disconnect, device number 26 [ 553.764571][T15365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3535'. [ 554.114404][T15350] loop5: detected capacity change from 0 to 32768 [ 554.330305][ T30] audit: type=1800 audit(1779628175.423:153): pid=15350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3522" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 554.351007][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 554.816881][ T5639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.838219][T15361] loop2: detected capacity change from 0 to 131072 [ 554.845795][T15361] xfs: Deprecated parameter 'ikeep' [ 554.851193][T15361] XFS: ikeep mount option is deprecated. [ 554.904520][T15361] XFS (loop2): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 554.998538][T15361] XFS (loop2): Starting recovery (logdev: internal) [ 555.077544][T15361] XFS (loop2): Ending recovery (logdev: internal) [ 555.109845][T15382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3542'. [ 555.347193][ T5636] XFS (loop2): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 555.388806][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 556.131688][T15394] loop5: detected capacity change from 0 to 32768 [ 556.175453][T15394] JBD2: Ignoring recovery information on journal [ 556.219951][T15394] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 556.428887][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 556.581820][ T5640] ocfs2: Unmounting device (7,5) on (node local) [ 557.468840][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 558.054488][T15428] loop5: detected capacity change from 0 to 512 [ 558.085331][T15428] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 558.198432][T15428] EXT4-fs (loop5): 1 truncate cleaned up [ 558.234701][T15428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.238701][T15412] loop1: detected capacity change from 0 to 131072 [ 558.323912][T15412] XFS (loop1): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 558.385059][ T30] audit: type=1800 audit(1779628179.563:154): pid=15428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3560" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 558.474414][T15412] XFS (loop1): Starting recovery (logdev: internal) [ 558.508689][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 558.537067][T15412] XFS (loop1): Ending recovery (logdev: internal) [ 558.692615][T15412] XFS (loop1): EXPERIMENTAL online shrink feature enabled. Use at your own risk! [ 558.714325][ T5640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.763629][ T5645] XFS (loop1): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 559.548687][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 560.588699][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 560.686916][T15466] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 560.709480][T15466] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 560.722367][T15466] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 560.728456][T15466] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 560.783501][T15466] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 560.798862][T15466] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 560.814907][T15466] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 560.828917][T15466] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 561.059971][T15496] loop2: detected capacity change from 0 to 64 [ 561.551352][ T5637] Bluetooth: hci2: command 0x0406 tx timeout [ 561.628694][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 561.750731][T15489] netlink: 'syz.5.3581': attribute type 2 has an invalid length. [ 562.204310][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.668693][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 562.750624][ T5637] Bluetooth: hci5: command 0x0406 tx timeout [ 562.830186][ T5637] Bluetooth: hci6: command 0x0406 tx timeout [ 562.830560][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 563.629101][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 563.708689][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 563.896363][T15496] [ 563.898704][T15496] ============================================ [ 563.904832][T15496] WARNING: possible recursive locking detected [ 563.910993][T15496] syzkaller #0 Tainted: G L [ 563.916953][T15496] -------------------------------------------- [ 563.923086][T15496] syz.2.3579/15496 is trying to acquire lock: [ 563.929146][T15496] ffff88807a6800a8 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 563.938671][T15496] [ 563.938671][T15496] but task is already holding lock: [ 563.946015][T15496] ffff88807a6800a8 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 563.955541][T15496] [ 563.955541][T15496] other info that might help us debug this: [ 563.963591][T15496] Possible unsafe locking scenario: [ 563.963591][T15496] [ 563.971028][T15496] CPU0 [ 563.974296][T15496] ---- [ 563.977563][T15496] lock(&tree->tree_lock#2/1); [ 563.982442][T15496] lock(&tree->tree_lock#2/1); [ 563.987318][T15496] [ 563.987318][T15496] *** DEADLOCK *** [ 563.987318][T15496] [ 563.995449][T15496] May be due to missing lock nesting notation [ 563.995449][T15496] [ 564.003756][T15496] 5 locks held by syz.2.3579/15496: [ 564.008955][T15496] #0: ffff8880772b0410 (sb_writers#30){.+.+}-{0:0}, at: vfs_truncate+0x336/0x720 [ 564.018260][T15496] #1: ffff88803702d3d0 (&sb->s_type->i_mutex_key#44){+.+.}-{4:4}, at: do_truncate+0x14e/0x240 [ 564.028687][T15496] #2: ffff88803702d230 (&HFS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa6/0xcf0 [ 564.039378][T15496] #3: ffff88807a6800a8 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 564.049374][T15496] #4: ffff88803702eb30 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa6/0xcf0 [ 564.060576][T15496] [ 564.060576][T15496] stack backtrace: [ 564.066458][T15496] CPU: 0 UID: 0 PID: 15496 Comm: syz.2.3579 Tainted: G L syzkaller #0 PREEMPT(full) [ 564.066508][T15496] Tainted: [L]=SOFTLOCKUP [ 564.066521][T15496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 564.066544][T15496] Call Trace: [ 564.066556][T15496] [ 564.066569][T15496] dump_stack_lvl+0x100/0x190 [ 564.066610][T15496] print_deadlock_bug.cold+0xbd/0xca [ 564.066669][T15496] __lock_acquire+0x12bb/0x2630 [ 564.066716][T15496] ? hfs_bmap_reserve+0x2ab/0x3a0 [ 564.066767][T15496] ? __hfs_ext_write_extent+0x3c4/0x510 [ 564.066825][T15496] lock_acquire+0x1b1/0x370 [ 564.066872][T15496] ? hfs_find_init+0x273/0x330 [ 564.066918][T15496] ? __pfx___might_resched+0x10/0x10 [ 564.066967][T15496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.067007][T15496] __mutex_lock+0x1a4/0x1b10 [ 564.067043][T15496] ? hfs_find_init+0x273/0x330 [ 564.067085][T15496] ? hfs_find_init+0x273/0x330 [ 564.067131][T15496] ? __pfx___mutex_lock+0x10/0x10 [ 564.067170][T15496] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.067216][T15496] ? __kasan_kmalloc+0xaa/0xb0 [ 564.067264][T15496] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.067306][T15496] ? __kmalloc_noprof+0x320/0x850 [ 564.067357][T15496] ? hfs_find_init+0x273/0x330 [ 564.067398][T15496] hfs_find_init+0x273/0x330 [ 564.067441][T15496] hfs_ext_read_extent+0x19d/0x9d0 [ 564.067499][T15496] ? __pfx_hfs_ext_read_extent+0x10/0x10 [ 564.067555][T15496] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.067610][T15496] hfs_extend_file+0x4ff/0xcf0 [ 564.067667][T15496] ? __pfx_hfs_extend_file+0x10/0x10 [ 564.067723][T15496] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.067774][T15496] hfs_bmap_reserve+0x2ab/0x3a0 [ 564.067830][T15496] __hfs_ext_write_extent+0x3c4/0x510 [ 564.067890][T15496] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.067937][T15496] hfs_ext_read_extent+0x805/0x9d0 [ 564.067995][T15496] ? __pfx_hfs_ext_read_extent+0x10/0x10 [ 564.068063][T15496] hfs_extend_file+0x4ff/0xcf0 [ 564.068120][T15496] ? __pfx_hfs_extend_file+0x10/0x10 [ 564.068184][T15496] hfs_get_block+0x17f/0x830 [ 564.068243][T15496] ? __pfx_hfs_get_block+0x10/0x10 [ 564.068299][T15496] __block_write_begin_int+0x57a/0x19c0 [ 564.068363][T15496] ? __pfx_hfs_get_block+0x10/0x10 [ 564.068423][T15496] ? __pfx___block_write_begin_int+0x10/0x10 [ 564.068482][T15496] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.068532][T15496] ? __pfx_hfs_get_block+0x10/0x10 [ 564.068588][T15496] block_write_begin+0x9d/0x1d0 [ 564.068649][T15496] cont_write_begin+0x573/0xa10 [ 564.068708][T15496] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 564.068764][T15496] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.068811][T15496] ? __pfx_hfs_get_block+0x10/0x10 [ 564.068872][T15496] ? __pfx_cont_write_begin+0x10/0x10 [ 564.068938][T15496] hfs_write_begin+0x64/0x120 [ 564.068969][T15496] ? __pfx_hfs_get_block+0x10/0x10 [ 564.069028][T15496] cont_write_begin+0x2b9/0xa10 [ 564.069092][T15496] ? __pfx_hfs_get_block+0x10/0x10 [ 564.069148][T15496] ? __pfx_cont_write_begin+0x10/0x10 [ 564.069214][T15496] hfs_write_begin+0x64/0x120 [ 564.069246][T15496] ? __pfx_hfs_get_block+0x10/0x10 [ 564.069304][T15496] hfs_file_truncate+0xd2c/0x10f0 [ 564.069363][T15496] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.069407][T15496] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.069453][T15496] ? __pfx___up_read+0x10/0x10 [ 564.069502][T15496] ? unmap_mapping_pages+0x102/0x170 [ 564.069559][T15496] ? __pfx_hfs_file_truncate+0x10/0x10 [ 564.069625][T15496] ? setattr_prepare+0x1d4/0xa40 [ 564.069683][T15496] hfs_inode_setattr+0x499/0x5e0 [ 564.069717][T15496] ? __pfx_hfs_inode_setattr+0x10/0x10 [ 564.069750][T15496] notify_change+0xb25/0x1330 [ 564.069810][T15496] do_truncate+0x1df/0x240 [ 564.069870][T15496] ? __pfx_do_truncate+0x10/0x10 [ 564.069932][T15496] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.069975][T15496] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.070018][T15496] ? mnt_get_write_access+0x1e9/0x2f0 [ 564.070072][T15496] vfs_truncate+0x538/0x720 [ 564.070129][T15496] ? __pfx_vfs_truncate+0x10/0x10 [ 564.070187][T15496] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.070235][T15496] ksys_truncate+0xee/0x190 [ 564.070291][T15496] ? __pfx_ksys_truncate+0x10/0x10 [ 564.070355][T15496] __x64_sys_truncate+0x54/0x80 [ 564.070412][T15496] do_syscall_64+0x10b/0xf80 [ 564.070449][T15496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.070486][T15496] RIP: 0033:0x7f7aaff9ce59 [ 564.070513][T15496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.070548][T15496] RSP: 002b:00007f7ab0dfc028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 564.070580][T15496] RAX: ffffffffffffffda RBX: 00007f7ab0215fa0 RCX: 00007f7aaff9ce59 [ 564.070605][T15496] RDX: 0000000000000000 RSI: 0000000002fffffd RDI: 0000200000000940 [ 564.070628][T15496] RBP: 00007f7ab0032d6f R08: 0000000000000000 R09: 0000000000000000 [ 564.070651][T15496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.070674][T15496] R13: 00007f7ab0216038 R14: 00007f7ab0215fa0 R15: 00007ffc30856d68 [ 564.070709][T15496] [ 564.609644][T15556] loop3: detected capacity change from 0 to 256 [ 564.643487][T15554] loop1: detected capacity change from 0 to 1024 [ 564.661469][T15556] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 564.696389][ T30] audit: type=1800 audit(1779628185.873:155): pid=15556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3606" name="file2" dev="loop3" ino=1048833 res=0 errno=0 [ 564.748790][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 564.749291][T15554] hfsplus: bad catalog file entry [ 564.760821][ T30] audit: type=1804 audit(1779628185.873:156): pid=15556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3606" name="/newroot/598/file2/file2" dev="loop3" ino=1048833 res=1 errno=0 [ 564.761586][T15556] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 564.791927][T15556] exFAT-fs (loop3): Filesystem has been set read-only [ 564.828668][T15523] Bluetooth: hci5: command 0x0406 tx timeout [ 564.910036][T15523] Bluetooth: hci6: command 0x0406 tx timeout [ 564.916217][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 565.788662][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 566.828685][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 566.988676][T15523] Bluetooth: hci6: command 0x0406 tx timeout [ 567.868674][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 568.908667][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 569.948669][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 570.988661][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 572.028675][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 573.068748][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available