last executing test programs: 10m11.518798763s ago: executing program 3 (id=760): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) close(0x3) 10m11.179829509s ago: executing program 3 (id=764): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000680)='limits\x00') getdents(r0, &(0x7f0000001ec0)=""/4096, 0x1000) 10m10.085883242s ago: executing program 3 (id=770): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001b80)=[{{&(0x7f0000000380)={0x2, 0x4e28, @multicast1}, 0x10, &(0x7f0000003680)=[{&(0x7f00000003c0)="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", 0x1f5}], 0x1}}], 0x1, 0x2000c044) writev(r0, &(0x7f0000002640)=[{&(0x7f0000000c40)="b4", 0xfdef}], 0x1) 10m9.731674522s ago: executing program 3 (id=774): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000013c0)={[{@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.'}}, {@noblock_validity}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000000c0)='./file0\x00') 10m8.784166115s ago: executing program 3 (id=784): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4}) r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc) 10m3.278961482s ago: executing program 3 (id=809): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000a40)=0x4) 10m2.588403458s ago: executing program 32 (id=809): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000a40)=0x4) 5m25.450132358s ago: executing program 4 (id=2610): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, r1}, 0x14) sendto$inet6(r0, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x0, &(0x7f0000000040)={0xa, 0xfffd, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 5m25.255540249s ago: executing program 4 (id=2612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}]}]}, 0x78}}, 0x0) 5m25.046443604s ago: executing program 4 (id=2615): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)={[{@umask={'umask', 0x3d, 0x6}}, {@force}, {@nls={'nls', 0x3d, 'iso8859-13'}}]}, 0x1, 0x5c8, &(0x7f0000000cc0)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 5m24.680238463s ago: executing program 4 (id=2618): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB='utf8,utf8,uid=', @ANYRESHEX=0xee01, @ANYBLOB=',iocharset=cp949,errors=remount-ro,utf8,errors=remount-ro,dmask=00000000000000000000003,time_offset=0x0000000000000006,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c00fbffffff5a505bfd46f7580dd2ea15f3b668cebede3eecc4c69407c292f1d3dfd5aac484104426ec9b25db0706b5634c5e66cff8b681d028399da8ea3af9f39f769c1849cc22e67973c13874a9cd7c6fe66db41742e33d9eee94251e1f927485b96027199d6f1b7e0a35ebc654fe6ed00fa6330c5a0ac2b08017fd80c74035c97a3f1abdcc9dc0219f42ca4e30030c93416b6036b4d8a70b1de9d788f4f1061fd9d787b6082e03cb1d32128a67113d31b990d5b19028d67f7b19017497f33e96c675a35b6187404d626c5bc935b8065d385ec6345d67eecbe37d19a9ce59024756fd60bcf98a3849c69a3c4030ddd9cd1776b83adafb99609e57a84e2ede0ff35aa85b3e4b61980e0b6d668ad2393f1b290d06007100"/308], 0x1, 0x152b, &(0x7f0000002f80)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000006, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) 5m24.025257294s ago: executing program 4 (id=2621): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) 5m23.446927238s ago: executing program 4 (id=2625): syz_mount_image$reiserfs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x1000098, &(0x7f00000002c0), 0xfe, 0x10fd, &(0x7f0000006200)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 5m23.055854252s ago: executing program 33 (id=2625): syz_mount_image$reiserfs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x1000098, &(0x7f00000002c0), 0xfe, 0x10fd, &(0x7f0000006200)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 4m28.599783485s ago: executing program 5 (id=2941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a88000000090a050000000000000000000a0000040900020073797a311100000008000a40fffffffc0900010073797a3100000000080005400000000b"], 0xb0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 4m28.462679414s ago: executing program 5 (id=2942): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r0, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0xc880) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4m28.361697926s ago: executing program 5 (id=2944): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x20004080) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) 4m28.25267791s ago: executing program 5 (id=2945): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x404, &(0x7f0000000340)={[{@grpjquota}, {@usrquota}]}, 0xff, 0x4cb, &(0x7f0000001340)="$eJzs3c1rHOcZAPBndy1ZktX6o6XYLtgGF9wPrNUHxVLbg3tqezCUGnppwVWlteJopRXalWMJH+Tk5kMOISGBkEMuOeUvyCU+xQRCck3uIYfgkDgKJIHAhpndtfW1yeLIu0bz+8Fo35l3tM/7anlGM+/M7ASQWWeSH7mI4Yh4PyION2a3rnCm8bJx/+ZMMuWiXr/8eS5dL5lvrdr6vUMRsR4RAxHxr79F/D+3M251dW1+ulwuLTfni7WFpWJ1de38tYXpudJcaXFs8sLU1OToxPjUnvX19vNP37701j/63/z6uXt3X3jn7aRZw826zf3YS42u98XRTcsORMRfHkewHig0+zPY64bwSJLP7xcRcTbN/8NRSD9NIAvq9Xr9u/rBdtXrdWDfyqf7wLn8SEQ0yvn8yEhjH/6XMZQvV6q1P1ytrCzONvaVj0Rf/uq1cmm0eaxwJPpyyfxYWn44P75tfiIi3Qd+sTCYzo/MVMqz3d3UAdsc2pb/XxUa+Q9khEN+yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kN2yX/Iru35X+hRO4Du8/8fMumfly4lU711//vs9dWV+cr187Ol6vzIwsrMyExleWlkrlKZS+/ZWfix9ytXKktjf4yVG8VaqVorVlfXrixUVhZrV9L7+q+U+rrSK6ATR0/f+SgXEet/GkynRH+zTq7C/lav56LX9yADvWGoD7LL0B9kl2N8YJev6N1ioF3F0iOHtOsBPZbvdQOAnjl3wvk/yCrj/5BdDsIhu+zjAz0Y/wd6zPg/ZNdwm+d//WzTs7tGI+LnEfFhoe9g61lfwH6Q/zTX3P8/d/g3w9tr+3PfpKcI+iPimVcvv3xjulZbHkuWf/Fgee2V5vLxXrQf6FQrT1t5DABk18b9mzOtqZtxP/tr4yKEnfEPNMcmB9JzlEMbuS3XKuT26NqF9VsRcXy3+Lnm884bZz6GNgo74h9rvuYab5G290D63PTuxD+xKf6pTfFP/uS/CmTDnWT7M7pb/uXTnI4H+bd1+zO8R9dOtN/+5R9s/wpttn+nO4zx1GvPftI2/q2Ik7vGb8UbSGNtj5+07VyH8e/999+/apU/eOPUxc119dcb77Nb/JakVKwtLBWrq2vn0++Rmystjk1emJqaHJ0YnyqmY9TF1kj1Tn8+/t7ddme4k/4PtYnfrv8Xm236XYf9//bX7/7nTJu6JP5vz+7++R9rEz8xGBG/7zD+l+Mf/69dXRJ/tk3/8z8QP1k20WH86kt/P9jhqgBAF1RX1+any+XSskLXCvWIeAKa0UGhPyKegGYo9KDQ6y0T8Lg9TPpetwQAAAAAAAAAAADoVDcuJ+51HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9oPvAwAA//+Ax9Yl") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) 4m27.73878582s ago: executing program 5 (id=2948): mkdir(&(0x7f0000000100)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debugfs\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debugfs/ubifs/chk_index\x00', 0x2, 0x0) write$tcp_mem(r0, &(0x7f0000000000)={0xfffffffffffffff9, 0x20, 0x8547, 0x20, 0xc0}, 0x48) 4m27.266853772s ago: executing program 5 (id=2949): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xa0200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) preadv(r2, &(0x7f0000000440)=[{&(0x7f0000000080)=""/39, 0x27}], 0x1, 0x6, 0x9) 4m26.918446657s ago: executing program 34 (id=2949): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xa0200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) preadv(r2, &(0x7f0000000440)=[{&(0x7f0000000080)=""/39, 0x27}], 0x1, 0x6, 0x9) 4m23.106648095s ago: executing program 1 (id=2967): r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) 4m22.862569808s ago: executing program 1 (id=2969): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @loopback, 0x3}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x59a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4m22.653813163s ago: executing program 1 (id=2972): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000404c05a00b00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x15, "5ace1cc2c867e34cd1d5a7c4efbad58c1b034f5c26"}, 0x0}) 4m20.379192682s ago: executing program 1 (id=2974): r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x553a, &(0x7f0000006040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) 4m17.818816612s ago: executing program 1 (id=2987): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)="2099ff3720333630ddaf5ccd300a", 0xe) 4m15.387596894s ago: executing program 1 (id=2997): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x569, &(0x7f0000001f80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 4m14.873501705s ago: executing program 35 (id=2997): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x569, &(0x7f0000001f80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2m29.808648954s ago: executing program 0 (id=3481): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2f, 0xe, 0x0, &(0x7f0000000140)="e0b9547ed387dbe9abc89b6f5b2e", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m28.882291613s ago: executing program 0 (id=3487): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x101, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r2, 0x0, 0x57ee1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c080}, 0x200088c2) 2m28.520524301s ago: executing program 0 (id=3490): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x3, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000780), &(0x7f0000000740)=r0}, 0x22) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r1, &(0x7f0000000580), 0x0}, 0x20) 2m28.10374738s ago: executing program 0 (id=3493): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x5, @empty, 'vcan0\x00'}}, 0x1e) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 2m27.215290122s ago: executing program 0 (id=3499): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write$cgroup_devices(r0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0], 0x9) 2m26.932065903s ago: executing program 0 (id=3503): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 2m11.779491249s ago: executing program 36 (id=3503): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 3.722921679s ago: executing program 8 (id=4371): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) writev(r0, &(0x7f0000001e00)=[{&(0x7f0000000680)="ff3ed6cdede92c6f3de125013d", 0xd}], 0x1) 3.39350248s ago: executing program 8 (id=4374): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000100)='$', 0x1, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000000)=""/123, 0x7b, 0x756, 0x0, 0x0) 3.337244642s ago: executing program 6 (id=4375): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x110}) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000480)={0x8000001e}) 3.060816102s ago: executing program 8 (id=4377): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/options/bin\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000d40)=[{&(0x7f00000005c0)="94be", 0x2}, {0x0}], 0x2, 0xd, 0x401) 3.038384927s ago: executing program 2 (id=4378): unshare(0x20060400) userfaultfd(0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x0, 0x5, 0x3c5b, 0x7d, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x9, 0x4c75, 0x7ffffffc, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x4, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x2, 0x9, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0x15f, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x6, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0x2ea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0x9, 0x5, 0x1000005, 0x5f31, 0x2d, 0xd37, 0x5, 0x4, 0x1b, 0x2000004, 0x9, 0x80000002, 0x9, 0x6, 0x147, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x20000004, 0x4, 0x3, 0x50, 0x2, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xfffffffb, 0xff, 0x0, 0x5, 0xb, 0x1, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x2000000c, 0x8000004, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x3, 0x1003, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x4006, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x80, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ee, 0x4, 0xb], [0x9, 0xbb33, 0x6, 0xb, 0xfffffffe, 0x2, 0x5, 0x0, 0x4, 0xb9, 0xce7, 0x1ff, 0x2, 0x17, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0xfffffffe, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0xc, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf38, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x76, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.958686893s ago: executing program 6 (id=4379): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="576f05962b93a6a6", 0x8, 0x800, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) 2.793213379s ago: executing program 8 (id=4380): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d02, &(0x7f0000000900)) 2.763675945s ago: executing program 7 (id=4381): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@noquota}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1bc) read$FUSE(r0, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x1, 0x603, 0x3}}, 0x30) 2.763578135s ago: executing program 2 (id=4382): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.696706409s ago: executing program 6 (id=4383): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ppoll(&(0x7f0000000100)=[{r0, 0x811a}, {r0, 0x9000}], 0x2, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) 2.536870574s ago: executing program 2 (id=4384): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xb720, 0x10, 0x3, 0x200003ca}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffdffffffffff, 0xffffffffdbfffff9, 0x80000000000, 0x0, 0xfbfffffffffff30a, 0x3}, &(0x7f0000000000)={0x1d, 0x26d7, 0x80000007ff, 0x0, 0x80000001, 0x0, 0xffffffffff7ffffd, 0x8}, 0x0, 0x0, 0x0) 2.363641181s ago: executing program 6 (id=4385): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r0, 0x1, 0x9, &(0x7f0000000080), 0x4) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000400)=0x97, 0x4) 2.362739522s ago: executing program 8 (id=4393): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0479a, &(0x7f0000000d00), 0x82, 0x4a7, &(0x7f0000001400)="$eJzs3M1vG0UfAODfbr7et58BCrSlgtAKEfGRNGmBHjgAAolDESA4FDiFJK2qpg1qgkSqqg0IlQsSqgRn4IjEX8CNCwJOSEic4I4qVdBLC+JgtPZuaztx4wTHTuvnkVzP7Mx6ZnZ3vOOZbgLoWkPZP0nEloj4NSK2V6K1GYYqb9eunJ3868rZySRKpdf+SMr5rl45O1lkLfbbnEeG04j0wyQvpNbcwpkTEzMz06fz+Oj8yXdG5xbOPH785MSx6WPTp8YPHTp4YOypJ8efaEk7s3Zd3X1uds+uF9+4+NLkkYtv//B1Vt8teXp1O9akf+mmoazhf5bK6tMeiv//p+I2mq1V4aS3gxVhVXoiIjtdfVn/L5VK56vStscLH6yw++Z1rh6wjrJ708Ay2/P74mKpoeSmqcCtIIlO1wDojOJ+n/3+LV5tHH503OVnKz+AsnZfy1+VlN5I8zx9db9vW2koIo4s/v159opWzEMAAKzg48nPDsdjy43/0rinKt+2fA1lMCLuiIg7I+KuiNgREXdHlPPeGxE7mym0aoGgfmlo6fgnvVSXpaWrC9n47+l8bat2/JcWKzSDPeVYZQw4GH3J0eMz0/vzYzIcfQNZfOwmZXz7/M+f1G97Jn+vHv9lr6z8YiyY1+NSb90E3dTE/ER5UNoCl9+P2N0b/5RKpbr2J9cPdBIRuyJidyXa7PHfVgSOP/LVnkaZVm7/ko+7oQVXQunLiIcr538x6tpfSJauT/ZvvbE+Ofq/mJneP1pcFUv9+NOFVxqV33z710d2/jfVXv95yhcLeWDwrer12rlosHK5pWEZF377qOFvmrVe//3J6+Xvo2LZ9b2J+fnTYxH9yeFyvGb7+I19i3iRP2v/8L4spWh/sWda/o6L/PzfFxF78vWy+yPigbzuD0bE3ojY17D1Ed8/1zhtI5z/qarzn0T99b/zXOW9OP8Lqw70nPjum0blN3f+D5ZDw/mW8vffCpqt4NqPHAAAANw60vLMTZKOXA+n6chI5T/27ohN6czs3PyjR2ffPTVVmeEZjL60mOnaXjUfOpYs5p9YiY/nc8VF+oF83vjTnijHRyZnZ6Y63Hbodpsb9P/M7z2drh2w7pZbRxtf5oE24PZT3//T2uj5l9tZGaCtPK8N3WuF/p+2qx5A+7n/Q/darv+fr4tbC4DbUWnA/R+6l/4P3Uv/h+5V1/974pdO1QRoo8bPxu/Nc6zpkX+BtgReHVnNXgPRytIj3SAHoYlA838PYr0Db26MajQR6PAXEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIv8GwAA//8iZOkF") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 2.201365766s ago: executing program 2 (id=4386): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16a", 0x5, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0) 1.908095309s ago: executing program 2 (id=4387): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)="535b3d1a8ba5b6feeb33e73c263f635226abb42b8ac755f48ddbb23365576f077307dac1bab0255b4a6391909deed512555a", 0x32) 1.907963359s ago: executing program 6 (id=4388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) 1.881533715s ago: executing program 7 (id=4389): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000040)=0x2b) ioctl$SNDCTL_TMR_START(r0, 0x5402) 1.621613261s ago: executing program 6 (id=4390): syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000040)='./file0\x00', 0x204000, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/382, @ANYBLOB="c21691dafeb3bfdc9532a34a7c14ce9722355cacc81757b8cf313606c2d1f4b42c4c19b5c216a6118c49eaeaac6dee153d39e81b7d7bcd6ffa648247f1dc5defb81066ab453ad704a9141695eb167d743c5a36af234bae69619eefa5e7ee5c2b1e4ecc570d6088d281eb838fa55ac4b3489a7db09625a0c02b91aac97880d8341d22d0b86df7bf6451a8e2a9c677c64b98ba9954d85e8d573f97cc26490fb096d1ef852110ac69385fdd12d55d725999d012a03afbf12665a145d7cf1dc885915a359d060fed9b0391ee887da638dc9c10c8af0899ef7dbde2e35eb9b01cc24a443840f1c290363345c84222d9b36b7df931a7ac5c5bc0bc98a604e389fde29c4de8b2ac010e4ce94bf361414a7f50939c692e27c285349aa66d44e6099a792ebf9911a7574e9d23983e9afa87bf8d08f394d354b2554daa80580d7ccad1782c7834ad200ea7806b7fddfdd5333d724e18c50e782a4287187827d8600381514926812122d2b147104f8b77652c56655abee107a32cd3d880cde6ebb3e090fffe738ba79a1af83e8eecb002b48f21672e45bafcb2c550cf5257eb51c16ebe177a55a2c8d00271aff8bbf1a28f1ebced3cef8b2829e0ba51521d48ed5dc0e74f7513284f5dc56f64637b8c77033c42378562b4cee11e1f5a3383c938757f322b9a2fda1b0b991f061e6b14ea009f86acccaf536228cee7ab3ce1fd3dddba79b134ee5bdc097b56e7cf689ec72d3558573714c69c1cd39db7027b6cc9b431bbfa9fe0a4ac43d154bf5826bb37912ccc51a8796527a00e0bd7d579e720566c04fcd11c97a51d4d1ce8fe56de18c01d19e5bd63f75e4213f51a53d4fc7be0b5a3193565a9a00c2bea1f1d4a1c715575d218737f832dea3a2a6a174185923a37200b91a7d796cab9d3e564c9b7d09720cfa63c375ba62416e86838f36ff7f391ed10203eab6542ed9d5478666d813cd7ec3353d58c51ec1cb1db1097aa97897d7ae80c8bbbe33689698cd23da0d892b8849a970f91d9e582652f90f42655ef84147655a8336c3bd8de83abdc6572feec467dc355c92ff469277746b5383a330f4f1c7ebb357472d5371f0b1af4d39b4f131381478e96d7faa2bc88153f6de4f6bbe9b16db1ccac0a6ea048f004ea6fec0d580b678fad46324e12a23c8575e8adee1695e1b957ea31443f1d9dbc09f90ad882f602c34401780ed880a45ac2a1bdffb532a616a360515fdf6547363dc55f0537b59e93d162926084c58a8f027aefee00d80c912b8538d84e0255dc7f19fac429fe267a2c481f067d65bdd6349b6999fb1e71e57cb5cc9754e815f0442b31033c28e64c23908474b5cc9f3fcd84be293659d5f6af249e63c12a9c0f10c4e0e2d5a6ed925f0f0a61ea59b92953b923b7820d22b72cf4dec1f41c40f6dbe510ec42bb0fa4e6328ca730db972d27e0bd04c1d3661d9a3266181f333758c758f0fd8c0b09e45e552c268a3c54085193829f8827aa96eb5c475f0537148c43aa262e404c663b93ebcb64a22411297969a218a888e6839a4665396d7db62686146e5abbc5e943e225d1dd81211bdb99c472bb0c7052deccbf585fdd411e6c88f8f91437caf8433277fe08625ad110ea6e815aa4185a4ad6a3b752b8ab81c2212e4741967a3d3432399110adc7ea7532ec1ef7954596cb9779640705d344d59751b44e565e15cf2790aae6ea29e490d1facf4b38a1d286594f7aa49200e811944257d79cb5dc02e1ea4e087a03b02f4a47e4eb737c7e835c19e2efc6b31189c07488c9f4ba69c8dc42dc47f9e88b38ea6cd2210c806775e7d3d0e0209748186affccf0589660b70ab6e34129b7decee244d3d90917c7ed1ae7beb9f8c8dd2c9a09181c3698b8837c6ec177effa5e6a7cc7be9d83e880d3776bc94f107e89842766b01fdcfd511577046ddd7f23b6f15a95648bd877fb5eb5b75cf0e89c15ee77e8d7863d53fee9b6c76215e8f3818c507fb3e3c6a47cc5ef3de59e51525fbc80d77cd9650ca7079009f2c9f5f431f6aacf1d5dd77833951e637ed02d4b83f36f3dc4a0ee9709dacd10873d88aa2e077755506a81fd74b93078ef894c325f225630000600d734a3e9ecafff691c8feb8c833158afa947078819c29c0bd0df3048440b0ee999f7aacb7c206054848a45242a0d83e7669fe57da8d9312f0ed9d0631c700f49f3cd8a056b4885adc0d6169d282802492d8d10dba81aa46cc6c6ee93c226a880f6a926fc2549a813b1f131e5bec19b2a584fe5775a2fb69330f1394f8db40058938d66060313f92aa7abb165e56b71f3421aec47dd1c8d10b77b7d4a4a92f097e25b59b3e2dde62d3ca46782f98760ade7e9e945fd27684dfc7fc43677adf4302ddf0fb0bba188c2637cd82622f024614b8f424df6425f47ab1bb70b1829d923c1bb15baef4000f148261cb7e2f9d0114075d69a2670657fa616b7ff716a87347a40a7302e8151e41e434a90d78aa51e5a210b47a03e68abebdfb11ad3c5c7d2eddd794119297064f546111c673ba0537f658f233084253499592296d97863e2fd36c675288fc45a139faaca3367a8b01b7926da8010da8596d16a59f5ffc5b826306efa2ab195a71cf5113677ad9a25fe79063fdf14105c243bb2a56d87b65593212b2853a2289f1e69dca622aec081bf097439d6e4349073c015b031d5c30853f925a22a1f4644ee855dc11d239c075ed07641729bd6ae0a683f709a16bef9666a655707751762ab66fb8cf41431dcb001577b7a0ab2064ce8a33fd642cc21b3600746bbd4c182fd9d754d70a402501f1f71cd17e0299c06369d058f6836240f292c9dfc3b585800326736b354302cb03f2fe416cdd3a443dac3220db0f0b1c662b2153969345cdce1898038319d3f0582fbddbfe957bbe8e9b54fe10829375c59339fab6d0dd062a0d177e743f96157b7663f65b2dcf6b936f5dbcb3a677fe5bf63128a8079f715825eee8a4dae6f002db888bdc6bd65864d3d55418697341ca845835f3f6994e76a60dcb2f16e1cf5799fd40185d23778eeccf81631f7b44e4a0fe0815c92f5668a5e3ed9341ff19663d5cebcce8b0c0bdd1820e8c6a392b185cc9b8b1baf88a03b4efd32364016484be1c087bd084754e5b68940f56dc56a17075b8e743559b2fe4d89aa48350e3c9fa8e56348e478fd7ae7bfe0603be5ab79d353aafe0e65406eb9978df0151e0ef96e2ac5648855d8c569dee3a7845e0bbff0eb869e9036201c00e61231123b4109afa95798b0df7893eda2aa11555efb1b3deb1ec0db9fe205a09748b2196aad32f3590f10ecb3e71aa042e16f7773a1ffe795c0b796fa3a04c6cd667059c2a1f1060351f22b64d6c79c31b3521f9c4c796fd1b12d2bb2ab986aa591e2d9169aaccc7608857402ee0900395416d36c52bcefc764c6dfe6d622b9005fbfe1132d75258ff05ce228c7d1e3533d9fed4521055dff7f5276a8011c1390cd83eca20cb8c4acb09c77d3c452e1bc84e88cd43874733563af5c27b0308bd83701762ccede51de3fc305a81ac8af7f5e6d5088076142d304a98cd3fe5b3c05e37c689ab522bb45ef81ac18ce80de53ae4ce97b887351759fdcc733bbd4525df31484355f633a6bf638a5dc1ec45bd628de53c69c49506b7d191aae7dede05d46ad61747d6ce954cc475de2d6800b30007fd62994d9d0f0956869ede64e505396129b28b3d1e4fe62935bdad4fd26d47e56221f255406406d854f07466047d4635092251f48572ebb09e9149c61e74badbb1a3570cd4b77e41556d7a3bf81e87c4e772b23b8fb547940bd991cccfe843ac73ec7d39087af0f6a53f7aa25bf6ea0ec0eed73da8d1bc63db7fcf53f72551665b7094a523b24ec19305f3e242e93adf304814dd74975ba35e6d5157d28a10a2fb5c577ddbfd33bd1b86c33790688b37e5fe7ecdd2fffa28fb698b0177c24cc870e1a2082bd46619e0a4c541d7d108aee6332c76a34d833a7241c19725d935360d9ee4c67bec9df2b9258db6c4d051f5dec8f66452eb4b36292182864adc0be82930ced51c09452daac9e508f179920159de423020395551dbd41b34f2d34fa1b70a7e7a4bc6a9df2ca7cf6d5e3380691926329d4fe5dd81e65c79a3302f2e5b8af8d415c3475ef96a9cb193df930fdc725c76864275b88d1c93df143016357f4c1192a0b4dbb0b103bf79de39964f49389e0b8da94d8a23acf2abe475772c0c0895a67e2ac3f48f1f0639560e40337f07c52b516c844a9601c1e693f5d82aa8160573d3c9eae3c9a1bbdf8ce7e8760ec42e33a9c6daf2f1dfa7f3d16cc4428a1c480ec4adcaf511838b7b4c4a84aa7b8291ad2e42f6de2d872ce9e35d902f916c39ba73aa0978890ced54ca44b9494ca8da8cd9d46fe8de4d4ad208aebac7370e6f4f1a818335d403690746469903c271d482fa897af15fff37b1e2ee3c5e50a9126587478a3721c51791505ad21497e51d00a220fb2a343cfe94051ac0c1759572fad79407c77f3cce2b57b91499f462d2cf92ab100bc4c787f4b246df9afd4f0baa13854bcc4f1beaf8c42969875f21c75ea0e09b04f67ea10f5c4b718ba16b3ae35be1a015ef242158b061bbac352e5a8a3be11674831068cc47cab92bf5125ec1f018eac59ff37bfdeea27dad122ad8310399118eff9343789f653b84e9fb31574c14c7c198315a5a4fc846d31368e375a7a65a2ec09152ef72619bfaf5fc1746d0d091c871337b0f2cdc986f6fd981172f0b05bcc6f65e453744655c34a8f05858c7081cf4550072627139f2bd257d2d121a8bac214d8e7a8f08936184b413dcbeceff84e1f4c47989b3f6eb4483c58918d4dab4b96386aeb73980081236d9e38c8eceede359baa558e57cb6904e9bd74db2ef3df090bf447623b4fcc32531a7eb9be03db69eac90f63bd8e0f4cb813bca5cda9da813371ffb97791b4e6990419a779a7a21ae3e0e5d8fdbda94d7adc83341cf220c3b9dc498df8017372df2604d73301fef1fd1fc9bdada959e5198d51475c167d223d2902e04e7ece923bd78f5df59c292af1d21a235a474cd8806bf0089aeeb7e8aed4ecfb6f452dba91f61a06b9ad94dc6caa8edb2a50af2bb1768a3551b37ca332a0ef505073085654d64d119fecf5e82c5db3d1fca641062ecaa1f23ba09ecac58e1ef36c3b40ef53441caed0f9d3fbcb8dab513b31ee42651322fb5ad2d0c0eeeb7d719e398578e3e3933124d63c1a6c850e36082dcb0ecb3a3b7ec679d3b3e3bb35403bcb3b50f8da668d0e8b33159a8059b1f37876ea7b82c31569d403cee408f7f329a399a173118835483fc62bfa4977acdac01005b7a426285a1cea7103243291e51416007c2756c3b093e5eca56e58dad79848a09fd951b5d8f04d7771494437b75c7d499fbac6a50420083cd2c96b9979c471ea0726e6990e4404133be696d13b155eff87b62a0a0af8e1f9fe39da08b63397136334b42c6e02df9a6931273a6deaa1d518d17819e2abb3b463118b172a2195b5da640fdf2a8ee62a1fb553068a4b46f51ca28cee6f5523b3706a8aa2609d71ce27aebe8251bd03e829c2b4c510ea91afb6d3212b17e2e50871e1b847f894371d8956d4438cf145a1febffa548ccb785a1451c6ac0096bf24ba09e348df669d9323cafb0f47d19f0cfc4271e3e70bc3b727476fb30db7f44f167da43761ddebd5f9049ed6e194d6ff95e5bc0fad5ce47da3ef6d12173852851c59b28a5c4f18ffbef10384b78f9cf1e1ecd1942aa4ca9cbb1d930fb9b359374081ac02c6c6a8365d5c60", @ANYRES64, @ANYRES8=0x0, @ANYRES32, @ANYBLOB="f420bf948fe462d8dc0bea46fc2abc9bd647c6d30a29a6773a680ce82d6df4dcba32eed4e3c6cfba636918d42f60cef0dd66f1d996f9b3d18d69c2047b53b9d7fc39d9ae4ed624c6600cab26dd273ed2885c66fae78e5803c542b5782fe69a6f93b89ede15c0154226410873de938518a9613108ba01ea8bf4d667733082d972feb191f6fbcdd2a625b544024d9f6184b2d9fc4f841f56f1d74078cc091bcd6b99a893ac15d54e29cb4a42ca85de78e23a94ee4370e655cfb98d35c3ac1dae4284a41cc43d786bb0b7df6e338cebeb35415199ee55989f11da257e1210eba536713b9dc40ca08e", @ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYBLOB="a8d416099c85257d5ea33b3362af1549287c2b22620b26b2a4a9a6e5df0033cf9ad9e217610a2e229e6b52ca45508b1de4d97ae46626fe69a53061106e75290e1cf5379ca0b949ff6a9d07e3bbf77302d1497f66f4bd930b14c3acd6ab7d8a16b61fbe203d0b62651c2d7fa1bc37796e237a0f8103a0bbf20bc8b7952d149e5aeb1e9148e92935795c2950b6c4f003b591"], 0x1, 0x5560, &(0x7f0000005840)="$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") socket$inet6(0xa, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) 1.620638161s ago: executing program 2 (id=4399): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0479a, &(0x7f0000000d00), 0x82, 0x4a7, &(0x7f0000001400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 1.619933601s ago: executing program 8 (id=4391): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x40, 0x22, 0x7, {0x7, 0xa, "6c924c9bd3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0xc, @string={0xc, 0x3, "cbbf20fb9e8905f2e39a"}}, 0x0, 0x0, 0x0}, 0x0) 1.441632929s ago: executing program 7 (id=4392): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b0800000075000000000000", @ANYRES64=r0], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="050000000208"], 0x80}}, 0x4048884) 1.144687354s ago: executing program 7 (id=4394): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000740)={[{@fat=@nfs}, {@fat=@time_offset={'time_offset', 0x3d, 0x2b3}}, {@fat=@flush}, {@uni_xlateno}, {@utf8}, {@numtail}, {@uni_xlate}, {@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_lower}, {@fat=@check_strict}]}, 0x41, 0x38c, &(0x7f0000000380)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000280)) 350.290004ms ago: executing program 7 (id=4395): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd06, &(0x7f0000003000)="040000000000000000000000380100000000000000000000000000000000000000000000000000006d") 0s ago: executing program 7 (id=4396): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x32) kernel console output (not intermixed with test programs): 000-0000-0000-0000-000000000000. [ 580.667277][T14811] etas_es58x 3-1:1.0 can0: bit-timing not yet defined [ 581.000294][T14842] loop0: detected capacity change from 0 to 136 [ 581.383185][T14842] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 581.810790][T14811] etas_es58x 3-1:1.0: es58x_free_urbs: Timeout, some TX urbs still remain [ 581.909635][ C0] etas_es58x 3-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 581.917494][ C0] etas_es58x 3-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 581.925783][ C0] etas_es58x 3-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 581.934579][ C0] etas_es58x 3-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 581.942708][ C0] etas_es58x 3-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 581.950664][T14811] etas_es58x 3-1:1.0 can0: es58x_open: Could not open the network device: -EINVAL [ 582.079775][ T1192] usb 3-1: USB disconnect, device number 24 [ 582.143516][ T1192] etas_es58x 3-1:1.0: Disconnecting (null) (null) [ 582.316661][T14858] ip_tables: iptables: counters copy to user failed while replacing table [ 583.313769][T14881] batman_adv: batadv0: Adding interface: macsec2 [ 583.363325][T14881] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.523967][T14886] loop7: detected capacity change from 0 to 164 [ 583.551855][T14881] batman_adv: batadv0: Interface activated: macsec2 [ 584.328347][T14901] ieee802154 phy0 wpan0: encryption failed: -22 [ 584.603987][T14906] Cannot find set identified by id 0 to match [ 585.062979][T14912] loop7: detected capacity change from 0 to 4096 [ 585.182909][T14912] NILFS (loop7): invalid segment: Checksum error in segment payload [ 585.285765][T14912] NILFS (loop7): trying rollback from an earlier position [ 585.400077][T14912] NILFS (loop7): recovery complete [ 585.487985][T14922] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 585.558470][T14924] loop2: detected capacity change from 0 to 16 [ 585.650588][T14924] erofs: (device loop2): mounted with root inode @ nid 36. [ 586.282881][T14936] netlink: 'syz.6.3182': attribute type 11 has an invalid length. [ 586.500821][T14942] loop2: detected capacity change from 0 to 256 [ 586.616117][T14942] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 586.711779][ T28] audit: type=1800 audit(1790863318.355:118): pid=14942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3184" name="file2" dev="loop2" ino=1048763 res=0 errno=0 [ 588.697197][T14979] binder: 14978:14979 ioctl c0306201 200000000080 returned -14 [ 588.766024][T14981] loop2: detected capacity change from 0 to 256 [ 588.852841][T14981] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 589.364479][T14991] loop2: detected capacity change from 0 to 512 [ 589.402286][T14991] EXT4-fs: Ignoring removed oldalloc option [ 589.482823][T14991] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 589.578899][T14991] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 589.714591][T14991] EXT4-fs (loop2): 1 orphan inode deleted [ 589.768773][T14991] EXT4-fs (loop2): 1 truncate cleaned up [ 589.810468][T14991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.935467][T14991] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1430: inode #12: block 7: comm syz.2.3197: path /966/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 590.096516][T14991] EXT4-fs (loop2): Remounting filesystem read-only [ 590.233324][T15006] loop7: detected capacity change from 0 to 128 [ 590.276620][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.323790][T15006] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 590.440224][T15006] hpfs: filesystem error: improperly stopped [ 590.509761][T15006] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 590.518000][T15006] hpfs: You really don't want any checks? You are crazy... [ 590.626211][T15006] hpfs: Code page index out of array [ 590.687910][T15006] hpfs: code page support is disabled [ 590.720305][T15006] hpfs: hpfs_map_4sectors(): unaligned read [ 590.726761][T15006] hpfs: hpfs_map_4sectors(): unaligned read [ 590.822444][T15006] hpfs: filesystem error: unable to find root dir [ 590.897676][T15006] hpfs: hpfs_map_sector(): read error [ 590.969276][T15006] hpfs: hpfs_map_sector(): read error [ 592.237411][T15040] loop7: detected capacity change from 0 to 256 [ 592.689882][ T1061] block nbd0: Possible stuck request ffff888022038000: control (read@0,1024B). Runtime 330 seconds [ 592.706443][ T1061] block nbd0: Possible stuck request ffff888022038200: control (read@1024,3072B). Runtime 330 seconds [ 593.258729][T14400] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 593.351837][T15067] loop2: detected capacity change from 0 to 8 [ 593.489120][T14400] usb 7-1: Using ep0 maxpacket: 8 [ 593.517369][T14400] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 593.563423][T14400] usb 7-1: config 179 has no interface number 0 [ 593.613009][T14400] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 593.682931][T14400] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 593.740322][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 593.763475][T14400] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 593.821104][T14400] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 593.821135][T14400] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 593.821181][T14400] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 593.821199][T14400] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.827385][T15058] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 593.989224][ T9] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 593.989250][ T9] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 593.989264][ T9] usb 3-1: config 220 has an invalid descriptor of length 117, skipping remainder of the config [ 593.989278][ T9] usb 3-1: config 220 has no interface number 2 [ 593.989389][ T9] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 593.989410][ T9] usb 3-1: config 220 interface 0 has no altsetting 0 [ 593.989424][ T9] usb 3-1: config 220 interface 76 has no altsetting 0 [ 593.989438][ T9] usb 3-1: config 220 interface 1 has no altsetting 0 [ 593.996645][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 593.996671][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.996687][ T9] usb 3-1: Product: syz [ 593.996698][ T9] usb 3-1: Manufacturer: syz [ 593.996710][ T9] usb 3-1: SerialNumber: syz [ 594.326602][ T9] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 594.326804][ T9] usb 3-1: No valid video chain found. [ 594.326976][ T9] usb 3-1: selecting invalid altsetting 0 [ 594.426597][ T1192] usb 7-1: USB disconnect, device number 4 [ 594.426678][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 594.426715][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 594.448455][T14400] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input30 [ 594.464707][ T9] usb 3-1: selecting invalid altsetting 0 [ 594.464730][ T9] usbtest: probe of 3-1:220.1 failed with error -22 [ 594.510958][ T9] usb 3-1: USB disconnect, device number 25 [ 594.549198][ T5866] udevd[5866]: setting owner of /dev/bus/usb/003/025 to uid=0, gid=0 failed: No such file or directory [ 594.655691][ T1192] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 595.709126][ T1192] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 595.888988][ T1192] usb 3-1: Using ep0 maxpacket: 32 [ 595.895333][ T1192] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 595.895359][ T1192] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 595.895399][ T1192] usb 3-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 595.895429][ T1192] usb 3-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 595.895458][ T1192] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 595.895476][ T1192] usb 3-1: config 1 interface 1 has no altsetting 0 [ 595.900278][ T1192] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 595.900302][ T1192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.900318][ T1192] usb 3-1: Product: syz [ 595.900329][ T1192] usb 3-1: Manufacturer: syz [ 595.900340][ T1192] usb 3-1: SerialNumber: syz [ 596.132580][ T1192] usb 3-1: selecting invalid altsetting 0 [ 596.340522][ T1192] usb 3-1: 1:1: cannot get freq (v2/v3): err -32 [ 596.362216][T15119] loop6: detected capacity change from 0 to 1024 [ 596.551653][ T1192] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 596.695819][ T1192] usb 3-1: USB disconnect, device number 26 [ 596.838817][ T6736] udevd[6736]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 597.071020][T15127] batman_adv: batadv0: Adding interface: gretap1 [ 597.071036][T15127] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.071060][T15127] batman_adv: batadv0: Interface activated: gretap1 [ 597.553719][T15138] program syz.6.3238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 597.978778][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 598.178846][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 598.187350][ T9] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 598.187375][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.187391][ T9] usb 3-1: Product: syz [ 598.187403][ T9] usb 3-1: Manufacturer: syz [ 598.187414][ T9] usb 3-1: SerialNumber: syz [ 598.437208][ T9] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 598.445175][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 598.445673][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 598.445723][ T9] usb 3-1: media controller created [ 598.508444][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 598.797410][ T9] zl10353_read_register: readreg error (reg=127, ret==-110) [ 598.809619][T15163] loop7: detected capacity change from 0 to 128 [ 598.816435][T15163] EXT4-fs: Ignoring removed nobh option [ 598.852653][T15163] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 598.856072][T15163] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 598.919390][T15163] fscrypt (loop7, inode 12): Reserved bits set in encryption policy [ 599.053218][ T9] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5 [ 599.087307][ T9] usb 3-1: USB disconnect, device number 27 [ 599.178331][T14248] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 599.740204][T15177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3250'. [ 600.525814][T15194] loop2: detected capacity change from 0 to 1024 [ 600.581141][T15197] loop7: detected capacity change from 0 to 22 [ 600.581984][T15197] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 600.603700][T15197] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 601.497518][T15210] i2c i2c-0: new_device: Can't parse I2C address [ 602.695496][T15230] loop6: detected capacity change from 0 to 4096 [ 602.899716][ T28] audit: type=1800 audit(1790863334.555:119): pid=15230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3268" name="file1" dev="loop6" ino=30 res=0 errno=0 [ 603.013279][ T5787] Bluetooth: hci3: link tx timeout [ 603.021233][ T5787] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 603.044644][ T5787] Bluetooth: hci3: link tx timeout [ 603.054175][ T5787] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 603.316448][T15223] loop2: detected capacity change from 0 to 32768 [ 603.433790][T15236] loop6: detected capacity change from 0 to 2048 [ 603.486749][T15223] (syz.2.3265,15223,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 603.554305][T15236] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 603.622328][T15223] (syz.2.3265,15223,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 603.868135][T15223] JBD2: Ignoring recovery information on journal [ 604.081695][T15227] loop0: detected capacity change from 0 to 32768 [ 604.154329][T15223] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 604.360169][T15252] netlink: 200 bytes leftover after parsing attributes in process `syz.7.3274'. [ 605.097940][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 605.626901][ T5777] ocfs2: Unmounting device (7,2) on (node local) [ 605.984157][T15278] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.161792][T15281] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffd [ 606.351328][ T990] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 606.537974][T15288] loop2: detected capacity change from 0 to 512 [ 606.715272][T15288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.820465][T15288] ext4 filesystem being mounted at /986/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 607.057615][T15302] loop7: detected capacity change from 0 to 512 [ 607.132478][T15302] EXT4-fs: Ignoring removed orlov option [ 607.206806][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.272616][T15302] EXT4-fs error (device loop7): __ext4_iget:5091: inode #11: block 1: comm syz.7.3288: invalid block [ 607.341171][T15302] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.3288: couldn't read orphan inode 11 (err -117) [ 607.474875][T15302] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.662135][T15302] EXT4-fs error (device loop7): ext4_add_entry:2488: inode #2: comm syz.7.3288: Directory hole found for htree leaf block 0 [ 607.904264][T14248] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.750689][T15312] loop6: detected capacity change from 0 to 32768 [ 608.857479][T15312] [ 608.857479][T15312] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 608.857479][T15312] [ 609.010455][ T990] ERROR: (device loop6): diWrite: ixpxd invalid [ 609.010455][ T990] [ 609.164163][ T990] ERROR: (device loop6): remounting filesystem as read-only [ 609.218257][ T990] ERROR: (device loop6): txCommit: [ 609.218257][ T990] [ 609.279400][ T990] jfs_write_inode: jfs_commit_inode failed! [ 609.368098][T15325] loop7: detected capacity change from 0 to 32768 [ 609.514210][T15325] JBD2: Ignoring recovery information on journal [ 609.776159][T15325] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 610.090047][T15355] UBIFS error (pid: 15355): cannot open "ubi:0", error -19 [ 610.366700][T14248] (syz-executor,14248,0):ocfs2_inode_is_valid_to_delete:905 ERROR: Skipping delete of system file 66 [ 610.502526][T15359] loop2: detected capacity change from 0 to 512 [ 610.716927][T14248] ocfs2: Unmounting device (7,7) on (node local) [ 613.026464][T15403] syzkaller1: tun_chr_ioctl cmd 2147767517 [ 613.340718][T14521] lg-g15 0003:046D:0A07.000B: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 613.453021][T14521] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.000B/input/input31 [ 614.772432][T15411] loop2: detected capacity change from 0 to 40427 [ 614.852698][T15411] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 614.911600][T15411] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 614.992207][T15411] F2FS-fs (loop2): Unrecognized mount option "18446744073709551615" or missing value [ 615.458152][T15424] loop0: detected capacity change from 0 to 32768 [ 615.472211][ T9] IPVS: starting estimator thread 0... [ 615.569438][T15448] IPVS: using max 26 ests per chain, 62400 per kthread [ 617.007040][T15476] loop6: detected capacity change from 0 to 256 [ 617.071531][T15476] exfat: Deprecated parameter 'utf8' [ 617.120427][T15476] exfat: Deprecated parameter 'utf8' [ 617.167574][T15476] exfat: Deprecated parameter 'namecase' [ 617.223241][T15476] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 617.796797][ C0] sd 0:0:1:0: [sda] tag#2650 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 617.807376][ C0] sd 0:0:1:0: [sda] tag#2650 CDB: Read(6) 08 00 00 00 00 00 [ 618.147009][T15493] loop0: detected capacity change from 0 to 8192 [ 619.113632][T15492] loop2: detected capacity change from 0 to 32768 [ 619.205683][T15492] [ 619.205683][T15492] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 619.205683][T15492] [ 619.318533][T15492] JFS: metapage_get_blocks failed [ 619.397673][T15492] ERROR: (device loop2): release_metapage: metapage_write_one() failed [ 619.397673][T15492] [ 619.546800][T15492] ERROR: (device loop2): diWrite: ixpxd invalid [ 619.546800][T15492] [ 619.600227][T15492] ERROR: (device loop2): txCommit: [ 619.600227][T15492] [ 619.829851][ T5777] [ 619.829851][ T5777] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 619.829851][ T5777] [ 619.920458][ T5777] [ 619.920458][ T5777] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 619.920458][ T5777] [ 619.977670][T15531] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3357'. [ 620.376270][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 620.459672][ T9] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 622.338740][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 622.465303][T15582] loop7: detected capacity change from 0 to 1024 [ 622.571853][ T9] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 622.607619][ T9] usb 7-1: config 0 has no interface number 0 [ 622.670177][ T9] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 622.796602][ T1061] block nbd0: Possible stuck request ffff888022038000: control (read@0,1024B). Runtime 360 seconds [ 622.811198][ T1061] block nbd0: Possible stuck request ffff888022038200: control (read@1024,3072B). Runtime 360 seconds [ 622.875951][ T9] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 622.959975][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.035825][ T9] usb 7-1: Product: syz [ 623.090212][ T9] usb 7-1: Manufacturer: syz [ 623.171871][ T9] usb 7-1: SerialNumber: syz [ 623.249906][ T9] usb 7-1: config 0 descriptor?? [ 623.295177][ T9] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 623.523722][ T9] usb 7-1: USB disconnect, device number 5 [ 623.563724][ T9] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 623.803444][T15602] ip_tables: iptables: counters copy to user failed while replacing table [ 624.697769][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.708323][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.832479][T15626] loop7: detected capacity change from 0 to 1024 [ 625.430898][T15643] FAULT_INJECTION: forcing a failure. [ 625.430898][T15643] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 625.505873][T15643] CPU: 0 PID: 15643 Comm: syz.7.3394 Not tainted syzkaller #0 [ 625.513689][T15643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 625.525369][T15643] Call Trace: [ 625.528674][T15643] [ 625.531624][T15643] dump_stack_lvl+0x18c/0x250 [ 625.536367][T15643] ? show_regs_print_info+0x20/0x20 [ 625.542636][T15643] ? load_image+0x420/0x420 [ 625.547203][T15643] ? __might_fault+0xaa/0x120 [ 625.552074][T15643] ? __lock_acquire+0x7d80/0x7d80 [ 625.557126][T15643] should_fail_ex+0x394/0x4c0 [ 625.561923][T15643] _copy_from_user+0x2f/0xe0 [ 625.566545][T15643] kstrtouint_from_user+0xde/0x170 [ 625.571717][T15643] ? kstrtol_from_user+0x190/0x190 [ 625.576897][T15643] ? get_pid_task+0x20/0x1e0 [ 625.581546][T15643] proc_fail_nth_write+0x8f/0x250 [ 625.587073][T15643] ? proc_fail_nth_read+0x260/0x260 [ 625.592329][T15643] ? iov_iter_iovec_advance+0x1ef/0x290 [ 625.597943][T15643] do_iter_write+0x4e5/0xc50 [ 625.602572][T15643] ? proc_fail_nth_read+0x260/0x260 [ 625.607906][T15643] ? vfs_iter_write+0xa0/0xa0 [ 625.612635][T15643] ? rcu_read_lock_any_held+0xb4/0x140 [ 625.618141][T15643] ? rcu_read_lock_bh_held+0x100/0x100 [ 625.623722][T15643] do_writev+0x27f/0x480 [ 625.628076][T15643] ? do_readv+0x460/0x460 [ 625.632571][T15643] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 625.638785][T15643] ? lock_chain_count+0x20/0x20 [ 625.644036][T15643] ? lockdep_hardirqs_on+0x98/0x150 [ 625.653258][T15643] do_syscall_64+0x55/0xb0 [ 625.659474][T15643] ? clear_bhb_loop+0x40/0x90 [ 625.664922][T15643] ? clear_bhb_loop+0x40/0x90 [ 625.669664][T15643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 625.676029][T15643] RIP: 0033:0x7efe1119e159 [ 625.680501][T15643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.700434][T15643] RSP: 002b:00007efe12122028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 625.708889][T15643] RAX: ffffffffffffffda RBX: 00007efe11425fa0 RCX: 00007efe1119e159 [ 625.716892][T15643] RDX: 0000000000000003 RSI: 00002000000003c0 RDI: 0000000000000003 [ 625.725336][T15643] RBP: 00007efe1123506b R08: 0000000000000000 R09: 0000000000000000 [ 625.733339][T15643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.741411][T15643] R13: 00007efe11426038 R14: 00007efe11425fa0 R15: 00007ffee57e5ba8 [ 625.749419][T15643] [ 625.975702][T15646] loop0: detected capacity change from 0 to 4096 [ 626.135535][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 626.311469][T15646] ntfs3: loop0: ino=19, mi_enum_attr [ 626.391454][T15646] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 627.058321][T15669] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 627.419791][T15678] input: syz0 as /devices/virtual/input/input32 [ 628.245588][T15700] loop0: detected capacity change from 0 to 256 [ 628.341622][T15700] FAT-fs (loop0): Directory bread(block 64) failed [ 628.400780][T15700] FAT-fs (loop0): Directory bread(block 65) failed [ 628.485601][T15700] FAT-fs (loop0): Directory bread(block 66) failed [ 628.572645][T15700] FAT-fs (loop0): Directory bread(block 67) failed [ 628.664939][T15700] FAT-fs (loop0): Directory bread(block 68) failed [ 628.734783][T15700] FAT-fs (loop0): Directory bread(block 69) failed [ 628.802121][T15700] FAT-fs (loop0): Directory bread(block 70) failed [ 628.851265][T15700] FAT-fs (loop0): Directory bread(block 71) failed [ 628.917066][T15700] FAT-fs (loop0): Directory bread(block 72) failed [ 628.942837][T15715] loop2: detected capacity change from 0 to 128 [ 628.954658][T15716] netlink: 'syz.6.3416': attribute type 14 has an invalid length. [ 628.971144][T15700] FAT-fs (loop0): Directory bread(block 73) failed [ 629.102502][ T28] audit: type=1800 audit(1790863360.755:120): pid=15715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3415" name="bus" dev="loop2" ino=1048769 res=0 errno=0 [ 629.635122][T15721] loop2: detected capacity change from 0 to 512 [ 629.667328][T15721] EXT4-fs: Ignoring removed orlov option [ 629.724913][T15721] EXT4-fs: Ignoring removed mblk_io_submit option [ 629.784264][T15721] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.3419: corrupted in-inode xattr: e_value size too large [ 629.840042][T15727] dyndbg: expected <4096 bytes into control [ 629.851344][T15721] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.3419: couldn't read orphan inode 15 (err -117) [ 629.886907][T15721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 629.947251][ T28] audit: type=1800 audit(1790863361.585:121): pid=15721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3419" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 629.972814][T15721] Invalid ELF header magic: != ELF [ 630.055174][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.483719][T15739] loop2: detected capacity change from 0 to 512 [ 630.517171][T15739] EXT4-fs: Ignoring removed nomblk_io_submit option [ 630.623948][T15739] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 630.704590][T15739] EXT4-fs (loop2): 1 truncate cleaned up [ 630.761148][T15739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 630.983724][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.430474][T15755] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 631.517740][T15755] overlayfs: overlapping lowerdir path [ 631.560126][T15758] MTRR 1 not used [ 632.106848][T15769] loop7: detected capacity change from 0 to 512 [ 632.224090][T15769] EXT4-fs error (device loop7): ext4_orphan_get:1408: inode #15: comm syz.7.3434: inode has both inline data and extents flags [ 632.307857][T15769] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.3434: couldn't read orphan inode 15 (err -117) [ 632.449646][T15769] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.752699][T14248] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.962917][T15784] tmpfs: Bad value for 'uid' [ 633.336859][T15786] loop7: detected capacity change from 0 to 8192 [ 633.415295][T15786] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 633.529048][T15786] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 633.621587][T15786] REISERFS (device loop7): using ordered data mode [ 633.628274][T15786] reiserfs: using flush barriers [ 633.734806][T15786] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 633.879500][T15786] REISERFS (device loop7): checking transaction log (loop7) [ 633.936608][T15786] REISERFS (device loop7): Using tea hash to sort names [ 633.998823][T15786] REISERFS (device loop7): using 3.5.x disk format [ 634.697372][T15793] loop6: detected capacity change from 0 to 32768 [ 634.847682][T15794] loop2: detected capacity change from 0 to 40427 [ 634.978685][T15794] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x7ffff [ 635.080643][T15794] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x30e4 [ 635.178654][T15794] F2FS-fs (loop2): invalid crc value [ 635.241375][T15788] loop0: detected capacity change from 0 to 40427 [ 635.309655][T15794] F2FS-fs (loop2): Found nat_bits in checkpoint [ 635.354332][T15788] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0) [ 635.479654][T15788] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 635.547586][T15794] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 635.659835][T15788] F2FS-fs (loop0): invalid crc value [ 635.763952][T15788] F2FS-fs (loop0): Found nat_bits in checkpoint [ 635.915633][T15794] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 636.059393][T15794] syz.2.3442: attempt to access beyond end of device [ 636.059393][T15794] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 636.193358][T15816] F2FS-fs (loop2): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x181/0x910 [ 636.265400][T15804] loop7: detected capacity change from 0 to 32768 [ 636.360517][T15804] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop7 scanned by syz.7.3443 (15804) [ 636.615194][T15804] BTRFS info (device loop7): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 636.714740][T15804] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 636.819270][T15804] BTRFS info (device loop7): using free space tree [ 637.272865][T15804] BTRFS info (device loop7): enabling ssd optimizations [ 637.340006][T15804] BTRFS info (device loop7): auto enabling async discard [ 637.359531][T15811] loop6: detected capacity change from 0 to 32768 [ 637.483035][ T3462] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 637.575071][ T28] audit: type=1800 audit(1790863369.205:122): pid=15804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3443" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 637.610453][T15811] find_entry called with index >= next_index [ 637.617981][T15811] find_entry called with index >= next_index [ 637.729219][T15811] find_entry called with index >= next_index [ 637.736220][T15811] find_entry called with index >= next_index [ 637.770168][T14248] BTRFS info (device loop7): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 637.845940][T15811] find_entry called with index >= next_index [ 637.881295][T15811] add_index: next_index = 0. Resetting! [ 637.887098][T15811] find_entry called with index >= next_index [ 638.022954][T15811] find_entry called with index >= next_index [ 638.085612][T15811] find_entry called with index >= next_index [ 638.218776][T15811] non-latin1 character 0x3ff found in JFS file name [ 638.260992][T15811] mount with iocharset=utf8 to access [ 640.251505][T15854] loop2: detected capacity change from 0 to 32768 [ 640.394954][T15854] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 640.669240][T15854] (syz.2.3445,15854,0):ocfs2_rename:1291 ERROR: status = -2 [ 640.726966][T15854] (syz.2.3445,15854,0):ocfs2_rename:1697 ERROR: status = -2 [ 641.274371][ T5777] ocfs2: Unmounting device (7,2) on (node local) [ 641.344749][T15885] batman_adv: batadv0: Adding interface: vlan2 [ 641.428527][T15885] batman_adv: batadv0: The MTU of interface vlan2 is too small (1464) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.634885][T15885] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 642.535743][T15909] loop7: detected capacity change from 0 to 2048 [ 642.716231][T15909] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.000126][T14248] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.760866][T15944] loop0: detected capacity change from 0 to 1024 [ 643.865207][T15944] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 643.995280][T15944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.043752][T15950] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 644.185740][T15946] loop7: detected capacity change from 0 to 8192 [ 644.291350][T15946] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 644.392217][T15946] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 644.466498][T15946] REISERFS (device loop7): using ordered data mode [ 644.532804][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.547219][T15946] reiserfs: using flush barriers [ 644.610788][T15961] loop2: detected capacity change from 0 to 256 [ 644.628759][T15946] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 644.782482][T15946] REISERFS (device loop7): checking transaction log (loop7) [ 644.890129][T15946] REISERFS (device loop7): Using r5 hash to sort names [ 644.897757][T15946] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 645.044386][T15946] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 645.841138][T15981] loop2: detected capacity change from 0 to 1764 [ 646.736255][T15997] loop6: detected capacity change from 0 to 128 [ 648.125946][T16026] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3510'. [ 648.246846][T16020] loop2: detected capacity change from 0 to 32768 [ 649.572822][T16056] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 649.622258][T16056] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 649.666138][T16056] overlayfs: failed to get uuid (1051/file2, err=-13); falling back to uuid=null. [ 649.933700][T16065] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 650.189090][T16070] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3530'. [ 650.306604][T16072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3531'. [ 650.347361][T16072] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3531'. [ 650.411164][T16072] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.420421][T16072] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.429567][T16072] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.438700][T16072] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.535366][T16074] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3531'. [ 650.594712][T16074] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3531'. [ 650.859067][T16082] ./dev/sda1: Can't open blockdev [ 650.936240][T16084] loop7: detected capacity change from 0 to 512 [ 650.997452][T16084] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 651.062621][T16084] EXT4-fs error (device loop7): ext4_iget_extra_inode:4752: inode #15: comm syz.7.3536: corrupted in-inode xattr: e_value size too large [ 651.130060][T16090] loop2: detected capacity change from 0 to 16 [ 651.168074][T16084] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.3536: couldn't read orphan inode 15 (err -117) [ 651.189963][T16090] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 651.216757][ T5866] udevd[5866]: incorrect cramfs checksum on /dev/loop2 [ 651.247539][T16084] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.376448][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 652.849599][ T1061] block nbd0: Possible stuck request ffff888022038000: control (read@0,1024B). Runtime 390 seconds [ 652.861672][ T1061] block nbd0: Possible stuck request ffff888022038200: control (read@1024,3072B). Runtime 390 seconds [ 653.131497][T16138] loop6: detected capacity change from 0 to 164 [ 653.328411][ T28] audit: type=1400 audit(1790863384.975:123): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="foo" pid=16139 comm="syz.6.3562" name="foo" offset=60 [ 653.662069][T16150] loop2: detected capacity change from 0 to 128 [ 653.960316][T14248] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.930139][T16178] loop2: detected capacity change from 0 to 4096 [ 654.979507][T16178] EXT4-fs: Ignoring removed nobh option [ 654.985282][T16178] EXT4-fs: Ignoring removed bh option [ 655.062222][T16178] EXT4-fs (loop2): Test dummy encryption mode enabled [ 655.127465][T16178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.346545][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.514337][T16187] loop6: detected capacity change from 0 to 2048 [ 655.634353][T16187] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 655.646764][T16189] program syz.2.3584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 655.709321][T16187] EXT4-fs error (device loop6): ext4_find_extent:911: inode #2: comm syz.6.3583: inode has invalid extent depth: 8 [ 655.751550][T16182] loop7: detected capacity change from 0 to 32768 [ 655.832797][T16182] JBD2: Ignoring recovery information on journal [ 655.868367][T16187] EXT4-fs (loop6): Remounting filesystem read-only [ 655.979240][T16182] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 656.024368][T14073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.372313][T14248] ocfs2: Unmounting device (7,7) on (node local) [ 656.751630][T16210] rnbd_client L602: Mapping device / on session s., (access_mode: rw, nr_poll_queues: 0) [ 656.795495][T16210] rnbd_client L1255: Session s. not found, and path parameter not given [ 656.832050][T16212] loop2: detected capacity change from 0 to 1024 [ 657.071034][T16216] loop6: detected capacity change from 0 to 512 [ 657.190637][T16216] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.296273][T16216] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 657.452214][T14073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.474330][T16224] loop2: detected capacity change from 0 to 1024 [ 657.506651][T16224] EXT4-fs: Ignoring removed bh option [ 657.659154][T16224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 657.825043][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.628924][T16247] i2c i2c-0: delete_device: Can't parse I2C address [ 659.197311][T16256] loop6: detected capacity change from 0 to 2048 [ 659.223343][T16239] loop2: detected capacity change from 0 to 40427 [ 659.279986][T16256] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 659.298203][T16258] loop7: detected capacity change from 0 to 1024 [ 659.333700][T16239] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 659.391851][T16258] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 659.438888][T16239] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 659.506012][T16258] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 659.527389][T16239] F2FS-fs (loop2): invalid crc value [ 659.589547][T16239] F2FS-fs (loop2): Found nat_bits in checkpoint [ 659.638370][T16258] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 659.712315][T16258] System zones: 0-1, 3-36 [ 659.784489][T16258] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 659.951962][T16239] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 659.999506][T16239] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 660.074771][T14248] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.273864][ T5777] syz-executor: attempt to access beyond end of device [ 660.273864][ T5777] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 660.355075][ T5777] F2FS-fs (loop2): Remounting filesystem read-only [ 661.616326][T16273] loop6: detected capacity change from 0 to 40427 [ 661.659613][T16273] F2FS-fs (loop6): invalid crc value [ 661.693162][T16273] F2FS-fs (loop6): Found nat_bits in checkpoint [ 661.922528][T16273] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 661.993947][T16273] F2FS-fs (loop6): Stopped filesystem due to reason: 0 [ 662.660017][T16297] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3628'. [ 663.091544][T16304] sctp: [Deprecated]: syz.2.3630 (pid 16304) Use of int in max_burst socket option deprecated. [ 663.091544][T16304] Use struct sctp_assoc_value instead [ 663.641084][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 663.666863][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 663.681376][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 663.692706][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 663.711572][ T5787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 663.721539][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 664.054879][T16322] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3636'. [ 664.088141][T16322] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3636'. [ 664.350039][T16326] pim6reg: entered allmulticast mode [ 664.411172][T16326] pim6reg: left allmulticast mode [ 664.601328][T16312] chnl_net:caif_netlink_parms(): no params data found [ 664.705969][T16331] loop2: detected capacity change from 0 to 1024 [ 664.792921][T16331] EXT4-fs: Ignoring removed orlov option [ 664.963226][T16331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 665.052815][T16341] loop7: detected capacity change from 0 to 256 [ 665.324478][T16312] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.385402][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.427846][T16312] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.500838][T16312] bridge_slave_0: entered allmulticast mode [ 665.595861][T16312] bridge_slave_0: entered promiscuous mode [ 665.678099][T16312] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.776973][T16312] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.831527][T16316] Bluetooth: hci4: command tx timeout [ 665.868092][T16312] bridge_slave_1: entered allmulticast mode [ 665.917876][T16312] bridge_slave_1: entered promiscuous mode [ 666.137695][T16312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.216339][T16312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.305298][T16354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3647'. [ 666.446164][T16356] loop7: detected capacity change from 0 to 64 [ 666.603658][T16312] team0: Port device team_slave_0 added [ 666.682999][T16312] team0: Port device team_slave_1 added [ 666.942681][T16312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.021885][T16312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.227713][T16312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.365151][T16312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.395134][T16312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.535113][T16312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.845874][T16312] hsr_slave_0: entered promiscuous mode [ 667.893100][T16316] Bluetooth: hci4: command tx timeout [ 667.917712][T16312] hsr_slave_1: entered promiscuous mode [ 667.962142][T16312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 668.014827][T16312] Cannot create hsr debugfs directory [ 668.575711][T16386] loop2: detected capacity change from 0 to 1024 [ 668.664043][T16388] vxcan1: tx drop: invalid da for name 0x00000000000000c8 [ 668.819971][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 669.306450][T16312] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 669.353164][T16312] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 669.399473][T16312] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 669.466266][T16312] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 669.905477][T16312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.969233][T16316] Bluetooth: hci4: command tx timeout [ 670.051566][T16312] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.175143][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.184310][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.251905][T16396] loop2: detected capacity change from 0 to 32768 [ 670.295927][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.304797][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.412560][T16396] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 670.629265][T16396] XFS (loop2): Ending clean mount [ 670.817642][ T28] audit: type=1800 audit(1790863402.435:124): pid=16396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3665" name="file2" dev="loop2" ino=4423 res=0 errno=0 [ 670.935019][T16399] loop6: detected capacity change from 0 to 32768 [ 670.989888][ T5777] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 671.141486][ T28] audit: type=1800 audit(1790863402.435:125): pid=16396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3665" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 671.223759][T16399] XFS (loop6): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 671.264869][T16418] loop7: detected capacity change from 0 to 1024 [ 671.524393][T16399] XFS (loop6): Ending clean mount [ 671.694318][T16399] XFS (loop6): Quotacheck needed: Please wait. [ 672.072716][T16316] Bluetooth: hci4: command tx timeout [ 672.350249][T16429] loop2: detected capacity change from 0 to 256 [ 672.378217][T16399] XFS (loop6): Quotacheck: Done. [ 672.422937][T16312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.484715][T16399] jffs2: notice: (16399) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 673.692995][T16442] loop2: detected capacity change from 0 to 512 [ 673.862991][T16442] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.3673: corrupted in-inode xattr: e_value out of bounds [ 673.900431][T16312] veth0_vlan: entered promiscuous mode [ 673.956522][T14073] XFS (loop6): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 673.989788][T16312] veth1_vlan: entered promiscuous mode [ 674.010025][T16442] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.3673: couldn't read orphan inode 15 (err -117) [ 674.133413][T16442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.187297][T16312] veth0_macvtap: entered promiscuous mode [ 674.270629][T16312] veth1_macvtap: entered promiscuous mode [ 674.351564][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.386250][T16312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.466738][T16451] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3677'. [ 674.478697][T16312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.566862][T16312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.616158][T16312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.658717][T16312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.681488][T16312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.713902][T16312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.733426][T16312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.785337][T16312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.831546][T16459] pimreg: tun_chr_ioctl cmd 1074025681 [ 674.871132][T16312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.917244][T16312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.978624][T16312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.996454][T16463] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 675.007291][T16312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.042611][T16312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.091513][T16312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.119206][T16312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.146237][T16312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.268011][T16312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.466151][T16312] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.569895][T16312] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.643959][T16312] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.699044][T16312] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.199257][T16470] loop6: detected capacity change from 0 to 512 [ 676.251357][T16470] EXT4-fs: Ignoring removed bh option [ 676.268463][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.347247][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.506915][T16470] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.546393][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.610330][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.640397][T16470] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 677.024684][T16470] EXT4-fs error (device loop6): ext4_get_first_dir_block:3586: inode #12: comm syz.6.3674: Directory hole found for htree leaf block 0 [ 677.107137][T16468] loop7: detected capacity change from 0 to 40427 [ 677.233682][T16468] F2FS-fs (loop7): invalid crc value [ 677.292209][T16468] F2FS-fs (loop7): Found nat_bits in checkpoint [ 677.396275][T14073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.746846][T16468] F2FS-fs (loop7): Start checkpoint disabled! [ 677.935213][T16468] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 678.152185][T16493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3688'. [ 678.211489][T16493] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3688'. [ 678.583519][ T3462] kworker/u4:10: attempt to access beyond end of device [ 678.583519][ T3462] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 678.679088][ T3462] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 678.718767][ T3462] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 678.862411][T16503] loop2: detected capacity change from 0 to 512 [ 679.659335][ T1192] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 679.875748][ T1192] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 679.927487][ T1192] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.043342][ T1192] usb 7-1: config 0 descriptor?? [ 680.096998][ T1192] cp210x 7-1:0.0: cp210x converter detected [ 680.156487][T16518] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3701'. [ 680.524308][ T1192] usb 7-1: cp210x converter now attached to ttyUSB0 [ 680.800716][T14521] usb 7-1: USB disconnect, device number 6 [ 680.841413][T14521] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 680.940695][T14521] cp210x 7-1:0.0: device disconnected [ 681.167754][T16529] loop2: detected capacity change from 0 to 256 [ 681.292805][T16529] FAT-fs (loop2): Directory bread(block 64) failed [ 681.352778][T16529] FAT-fs (loop2): Directory bread(block 65) failed [ 681.385359][T16529] FAT-fs (loop2): Directory bread(block 66) failed [ 681.446068][T16529] FAT-fs (loop2): Directory bread(block 67) failed [ 681.489360][T16529] FAT-fs (loop2): Directory bread(block 68) failed [ 681.496324][T16529] FAT-fs (loop2): Directory bread(block 69) failed [ 681.527026][T16520] loop8: detected capacity change from 0 to 40427 [ 681.605021][T16529] FAT-fs (loop2): Directory bread(block 70) failed [ 681.654097][T16529] FAT-fs (loop2): Directory bread(block 71) failed [ 681.696150][T16520] F2FS-fs (loop8): Invalid segment/section count (24 != 3 * 1) [ 681.729021][T16529] FAT-fs (loop2): Directory bread(block 72) failed [ 681.741319][T16520] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 681.780186][T16529] FAT-fs (loop2): Directory bread(block 73) failed [ 681.850805][T16520] F2FS-fs (loop8): invalid crc value [ 681.928832][T16520] F2FS-fs (loop8): Found nat_bits in checkpoint [ 681.972799][T16541] loop7: detected capacity change from 0 to 512 [ 682.165591][T16541] EXT4-fs (loop7): 1 truncate cleaned up [ 682.207373][T16541] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 682.258723][T16520] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 682.265922][T16520] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 682.416726][T16541] EXT4-fs error (device loop7): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.7.3708: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 682.524337][T16520] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 682.584530][T16520] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 682.700685][T14248] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.936481][ T1061] block nbd0: Possible stuck request ffff888022038000: control (read@0,1024B). Runtime 420 seconds [ 682.957571][ T1061] block nbd0: Possible stuck request ffff888022038200: control (read@1024,3072B). Runtime 420 seconds [ 683.037487][T16520] F2FS-fs (loop8): f2fs_new_node_page: inconsistent nat entry, ino:5, nid:5, blkaddr:4608, ver:0, flag:0 [ 683.637511][T16570] sd 0:0:1:0: PR command failed: 1026 [ 683.667171][T16570] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 683.714594][T16570] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 685.090004][T16587] cramfs: checking physical address 0x00000001427ea000 for linear cramfs image [ 685.162917][T16587] cramfs: wrong magic [ 685.213800][T16587] cramfs: wrong magic [ 686.140166][T14400] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 686.151953][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.162269][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.853257][T16607] loop8: detected capacity change from 0 to 131072 [ 686.901755][T16607] F2FS-fs (loop8): invalid crc value [ 686.911899][T16607] F2FS-fs (loop8): Found nat_bits in checkpoint [ 686.952855][T14521] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 686.989158][T16607] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 687.018730][T14400] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 687.087194][T14400] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.147635][T14400] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 687.196415][T14400] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.221964][T14521] usb 7-1: Using ep0 maxpacket: 32 [ 687.254008][T14521] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 687.289996][T14400] usb 3-1: config 0 descriptor?? [ 687.315128][T14521] usb 7-1: config 0 has no interface number 0 [ 687.369042][T14521] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.459929][T14521] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.543965][T14521] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 687.622385][T14521] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.699930][T14521] usb 7-1: config 0 descriptor?? [ 687.805207][T14400] isku 0003:1E7D:319C.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 688.335417][T14400] usb 3-1: USB disconnect, device number 28 [ 688.414906][T14521] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:28BD:0094.000E/input/input33 [ 688.611420][T14521] uclogic 0003:28BD:0094.000E: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.6-1/input1 [ 688.723598][T14521] usb 7-1: USB disconnect, device number 7 [ 688.962658][T16614] fido_id[16614]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 689.252482][T16620] loop7: detected capacity change from 0 to 512 [ 689.308253][T16620] EXT4-fs: Ignoring removed orlov option [ 689.454190][T16620] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 689.565140][T16620] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 689.834956][T14248] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.946098][T14385] Bluetooth: hci5: Frame reassembly failed (-84) [ 689.995213][T16627] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 690.421186][T16618] loop2: detected capacity change from 0 to 40427 [ 690.514517][T16618] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 690.546491][T16618] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 690.602388][T16618] F2FS-fs (loop2): invalid crc value [ 690.634509][T16635] program syz.7.3748 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 690.968131][T16618] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 691.017576][T16618] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 691.333941][T16644] program syz.8.3750 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 691.354498][ T28] audit: type=1800 audit(1790863423.005:126): pid=16618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3742" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 691.500095][ T5777] syz-executor: attempt to access beyond end of device [ 691.500095][ T5777] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 691.584271][ T5777] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 691.824404][T16641] loop7: detected capacity change from 0 to 32768 [ 691.969542][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 691.979487][T16316] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 693.306591][T16662] loop6: detected capacity change from 0 to 2048 [ 693.441588][T16662] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 694.590674][T16694] loop2: detected capacity change from 0 to 64 [ 694.790136][T16696] loop8: detected capacity change from 0 to 256 [ 694.952110][T16679] loop6: detected capacity change from 0 to 32768 [ 694.976028][T16696] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 695.049590][T16679] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.3763 (16679) [ 695.192710][T16679] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 695.227646][T16701] loop2: detected capacity change from 0 to 64 [ 695.288872][T16679] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 695.405836][T16679] BTRFS info (device loop6): using free space tree [ 695.443665][T16701] hfs: request for non-existent node 131072 in B*Tree [ 695.524583][T16701] hfs: request for non-existent node 131072 in B*Tree [ 695.745962][T16679] BTRFS info (device loop6): enabling ssd optimizations [ 695.763698][T16719] program syz.7.3776 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 695.814909][T16679] BTRFS info (device loop6): auto enabling async discard [ 696.206449][T14073] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 696.797698][T16738] loop6: detected capacity change from 0 to 1024 [ 697.020108][T16738] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 697.106819][T16738] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 697.302780][T16738] EXT4-fs error (device loop6): ext4_map_blocks:720: inode #15: block 3: comm syz.6.3781: lblock 3 mapped to illegal pblock 3 (length 2) [ 697.364438][T16753] loop8: detected capacity change from 0 to 512 [ 697.415623][T16754] EXT4-fs error (device loop6): ext4_map_blocks:720: inode #15: comm syz.6.3781: lblock 0 mapped to illegal pblock 0 (length 3) [ 697.469167][T16753] EXT4-fs: Ignoring removed bh option [ 697.474712][T16753] EXT4-fs: inline encryption not supported [ 697.564385][T16753] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 697.599016][T16754] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 697.741131][T16753] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 697.772995][T16754] EXT4-fs (loop6): This should not happen!! Data will be lost [ 697.772995][T16754] [ 697.903442][T16753] EXT4-fs error (device loop8): ext4_validate_block_bitmap:439: comm syz.8.3788: bg 0: block 248: padding at end of block bitmap is not set [ 698.059814][T16753] Quota error (device loop8): write_blk: dquota write failed [ 698.124389][T16753] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 698.152549][ T41] EXT4-fs error (device loop6): ext4_map_blocks:720: inode #15: block 4: comm kworker/u4:2: lblock 4 mapped to illegal pblock 4 (length 1) [ 698.222015][T16753] EXT4-fs error (device loop8): ext4_acquire_dquot:6953: comm syz.8.3788: Failed to acquire dquot type 1 [ 698.336552][ T41] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 698.398442][T16753] EXT4-fs (loop8): 1 truncate cleaned up [ 698.421848][ T41] EXT4-fs (loop6): This should not happen!! Data will be lost [ 698.421848][ T41] [ 698.459007][T16753] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 698.541999][T14073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 698.781202][T16312] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 699.672304][T16782] loop6: detected capacity change from 0 to 512 [ 699.820916][T16782] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.841880][ T41] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 699.924109][T16782] ext4 filesystem being mounted at /219/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 700.143717][T14073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.361847][T16774] loop2: detected capacity change from 0 to 32768 [ 700.871165][T16779] loop7: detected capacity change from 0 to 40427 [ 700.914504][T16779] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64) [ 701.011723][T16779] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 701.104765][T16779] F2FS-fs (loop7): Image doesn't support compression [ 701.184464][T16779] F2FS-fs (loop7): Image doesn't support compression [ 701.259135][T16779] F2FS-fs (loop7): invalid crc value [ 701.378758][T16794] FAULT_INJECTION: forcing a failure. [ 701.378758][T16794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 701.579988][T16794] CPU: 0 PID: 16794 Comm: syz.6.3804 Not tainted syzkaller #0 [ 701.591705][T16794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 701.605972][T16794] Call Trace: [ 701.611586][T16794] [ 701.616009][T16794] dump_stack_lvl+0x18c/0x250 [ 701.622976][T16794] ? show_regs_print_info+0x20/0x20 [ 701.628604][T16794] ? load_image+0x420/0x420 [ 701.634048][T16794] ? __might_fault+0xaa/0x120 [ 701.639934][T16794] ? __lock_acquire+0x7d80/0x7d80 [ 701.646520][T16794] should_fail_ex+0x394/0x4c0 [ 701.653114][T16794] _copy_from_user+0x2f/0xe0 [ 701.660203][T16794] kstrtouint_from_user+0xde/0x170 [ 701.669141][T16794] ? kstrtol_from_user+0x190/0x190 [ 701.674677][T16794] ? get_pid_task+0x20/0x1e0 [ 701.680915][T16794] proc_fail_nth_write+0x8f/0x250 [ 701.686812][T16794] ? proc_fail_nth_read+0x260/0x260 [ 701.692989][T16794] ? iov_iter_iovec_advance+0x1ef/0x290 [ 701.700284][T16794] do_iter_write+0x4e5/0xc50 [ 701.705639][T16794] ? proc_fail_nth_read+0x260/0x260 [ 701.711927][T16794] ? vfs_iter_write+0xa0/0xa0 [ 701.718183][T16794] ? rcu_read_lock_any_held+0xb4/0x140 [ 701.726080][T16794] ? rcu_read_lock_bh_held+0x100/0x100 [ 701.733773][T16794] do_writev+0x27f/0x480 [ 701.739839][T16794] ? do_readv+0x460/0x460 [ 701.745913][T16794] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 701.756475][T16794] ? lock_chain_count+0x20/0x20 [ 701.764252][T16794] ? lockdep_hardirqs_on+0x98/0x150 [ 701.770831][T16794] do_syscall_64+0x55/0xb0 [ 701.776173][T16794] ? clear_bhb_loop+0x40/0x90 [ 701.780921][T16794] ? clear_bhb_loop+0x40/0x90 [ 701.788404][T16794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 701.796437][T16794] RIP: 0033:0x7f31bd39e159 [ 701.802919][T16794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.831765][T16794] RSP: 002b:00007f31be23b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 701.843940][T16794] RAX: ffffffffffffffda RBX: 00007f31bd625fa0 RCX: 00007f31bd39e159 [ 701.855283][T16794] RDX: 0000000000000003 RSI: 00002000000003c0 RDI: 0000000000000003 [ 701.864916][T16794] RBP: 00007f31bd43506b R08: 0000000000000000 R09: 0000000000000000 [ 701.874638][T16794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 701.885927][T16794] R13: 00007f31bd626038 R14: 00007f31bd625fa0 R15: 00007ffc773756a8 [ 701.901693][T16794] [ 702.280339][T16779] F2FS-fs (loop7): Start checkpoint disabled! [ 702.790404][T16796] loop2: detected capacity change from 0 to 32768 [ 702.839343][T16796] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.3806 (16796) [ 703.013956][T16796] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 703.126342][T16796] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 703.211550][T16796] BTRFS info (device loop2): using free space tree [ 703.637460][T16796] BTRFS info (device loop2): enabling ssd optimizations [ 703.713088][T16796] BTRFS info (device loop2): auto enabling async discard [ 704.006946][ T28] audit: type=1800 audit(1790863438.654:127): pid=16796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3806" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 704.154917][ T5777] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 704.745249][ T6731] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 9 /dev/loop2 scanned by udevd (6731) [ 705.817712][ T28] audit: type=1326 audit(1790863440.444:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16851 comm="syz.7.3821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1119e159 code=0x7ffc0000 [ 706.044916][T16858] sch_tbf: peakrate 221 is lower than or equals to rate 4003 ! [ 706.107684][ T28] audit: type=1326 audit(1790863440.454:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16851 comm="syz.7.3821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1119e159 code=0x7ffc0000 [ 706.327607][T16864] loop7: detected capacity change from 0 to 256 [ 706.435861][ T28] audit: type=1326 audit(1790863440.464:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16851 comm="syz.7.3821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1119e159 code=0x7ffc0000 [ 706.472837][T16864] exfat: Deprecated parameter 'utf8' [ 706.622525][T16864] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x1a991031, utbl_chksum : 0xe619d30d) [ 706.755454][ T28] audit: type=1326 audit(1790863440.464:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16851 comm="syz.7.3821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1119e159 code=0x7ffc0000 [ 706.994879][ T28] audit: type=1326 audit(1790863440.514:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16851 comm="syz.7.3821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7efe1119e159 code=0x7ffc0000 [ 707.232207][ T28] audit: type=1326 audit(1790863440.514:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16851 comm="syz.7.3821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1119e159 code=0x7ffc0000 [ 707.372695][T16880] loop8: detected capacity change from 0 to 2048 [ 707.406760][T16885] netlink: 'syz.6.3834': attribute type 29 has an invalid length. [ 707.443305][ T28] audit: type=1326 audit(1790863440.514:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16851 comm="syz.7.3821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1119e159 code=0x7ffc0000 [ 707.502812][T16885] netlink: 'syz.6.3834': attribute type 29 has an invalid length. [ 707.563122][T16886] netlink: 'syz.6.3834': attribute type 29 has an invalid length. [ 707.620022][T16880] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 707.696410][ T28] audit: type=1326 audit(1790863440.514:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16851 comm="syz.7.3821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1119e159 code=0x7ffc0000 [ 707.744913][T16880] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 707.867860][ T28] audit: type=1326 audit(1790863440.514:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16851 comm="syz.7.3821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1119e159 code=0x7ffc0000 [ 707.991402][T16312] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.656240][T16906] loop8: detected capacity change from 0 to 2048 [ 708.781738][T16913] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 708.806719][T16912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3844'. [ 709.540400][T16926] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.3848'. [ 709.609056][T16926] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.3848'. [ 710.299070][T16947] netlink: 'syz.2.3861': attribute type 12 has an invalid length. [ 710.357973][T16947] netlink: 'syz.2.3861': attribute type 29 has an invalid length. [ 710.398787][T16947] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3861'. [ 710.728684][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 710.728700][ T28] audit: type=1400 audit(1790863445.364:149): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name=":" pid=16956 comm="syz.8.3866" name=":" offset=33 [ 711.634029][T16984] loop2: detected capacity change from 0 to 1024 [ 711.705092][T16984] EXT4-fs: Ignoring removed orlov option [ 711.800463][T16984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 712.017413][T16990] pimreg0: tun_chr_ioctl cmd 2147767506 [ 712.094373][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.011945][ T1061] block nbd0: Possible stuck request ffff888022038000: control (read@0,1024B). Runtime 450 seconds [ 713.024195][ T1061] block nbd0: Possible stuck request ffff888022038200: control (read@1024,3072B). Runtime 450 seconds [ 713.045577][T17014] loop6: detected capacity change from 0 to 2048 [ 713.110061][T17014] NILFS (loop6): invalid segment: Magic number mismatch [ 713.151349][T17014] NILFS (loop6): trying rollback from an earlier position [ 713.234785][T17014] NILFS (loop6): recovery complete [ 713.261004][T17015] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 714.227056][T17033] loop7: detected capacity change from 0 to 4096 [ 714.375115][T17033] ntfs: volume version 3.1. [ 715.679118][T14521] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 715.904236][T14521] usb 7-1: too many configurations: 155, using maximum allowed: 8 [ 715.957881][T14521] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 716.032535][T14521] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 716.132854][T14521] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 716.207928][T14521] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 716.352189][T14521] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 716.412197][T14521] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 716.494109][T14521] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 716.546865][T14521] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 716.634782][T14521] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 716.684566][T14521] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 716.801560][T14521] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 716.867335][T14521] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 716.889479][T14400] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 716.986292][T14521] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 717.041186][T14521] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 717.124399][T14400] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 717.152496][T14521] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 717.182791][T14400] usb 3-1: config 0 has no interface number 0 [ 717.222416][T14400] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 717.237262][T14521] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 717.316835][T14400] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 717.374659][T14521] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice= 0.40 [ 717.403134][T14400] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 717.434386][T14521] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.463425][T14400] usb 3-1: Manufacturer: syz [ 717.488902][T14400] usb 3-1: SerialNumber: syz [ 717.497005][T14521] usb 7-1: Product: syz [ 717.526854][T14521] usb 7-1: Manufacturer: syz [ 717.546004][T14400] usb 3-1: config 0 descriptor?? [ 717.569693][T14521] usb 7-1: SerialNumber: syz [ 717.799597][T17087] kAFS: bad VL server IP address [ 717.837911][T14521] gspca_main: 046d:08ae too many config [ 717.900617][T14521] usb 7-1: USB disconnect, device number 8 [ 718.138647][T17089] loop7: detected capacity change from 0 to 164 [ 718.188966][T17089] rock: directory entry would overflow storage [ 718.205761][T14400] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.214/input/input34 [ 718.235336][T17089] rock: sig=0x4543, size=28, remaining=18 [ 718.416360][T14400] usb 3-1: USB disconnect, device number 29 [ 718.566255][T17091] loop8: detected capacity change from 0 to 1024 [ 718.747198][T17093] IPv6: NLM_F_CREATE should be specified when creating new route [ 718.860702][T17093] IPv6: Can't replace route, no match found [ 718.943552][T17091] gfs2: path_lookup on c::: returned error -2 [ 719.277968][ T28] audit: type=1326 audit(1790863453.934:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17098 comm="syz.2.3925" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f435899e159 code=0x0 [ 719.557092][T17100] loop7: detected capacity change from 0 to 8192 [ 719.621134][T17100] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 719.740212][T17100] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 719.824035][T17100] REISERFS (device loop7): using ordered data mode [ 719.877378][T17100] reiserfs: using flush barriers [ 719.941797][T17100] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 720.083042][T17100] REISERFS (device loop7): checking transaction log (loop7) [ 720.249034][T14521] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 720.421486][T17100] REISERFS (device loop7): Using tea hash to sort names [ 720.479474][T17100] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 720.510361][T14521] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 720.568177][T14521] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 720.628230][T14521] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 720.692938][T14521] usb 7-1: Product: syz [ 720.718196][T14521] usb 7-1: Manufacturer: syz [ 720.810572][T14521] usb 7-1: selecting invalid altsetting 1 [ 720.853515][T14521] dvb_ttusb_budget: ttusb_init_controller: error [ 720.897929][T14521] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 721.291177][T14521] DVB: Unable to find symbol cx22700_attach() [ 721.563143][T14521] DVB: Unable to find symbol tda10046_attach() [ 721.595676][T14521] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 722.848318][T14521] IPVS: starting estimator thread 0... [ 722.860295][T17149] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 722.987998][T17150] IPVS: using max 26 ests per chain, 62400 per kthread [ 723.018207][T14521] usb 7-1: USB disconnect, device number 9 [ 723.226450][T17158] loop2: detected capacity change from 0 to 128 [ 723.246792][T17151] loop8: detected capacity change from 0 to 4096 [ 723.280394][T17158] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 723.325954][T17151] ntfs3: loop8: Different NTFS sector size (4096) and media sector size (512). [ 723.456990][ T28] audit: type=1800 audit(1790863458.094:151): pid=17158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3948" name="file1" dev="loop2" ino=94 res=0 errno=0 [ 723.592784][T17158] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 724.381556][T17177] tipc: New replicast peer: 255.255.255.255 [ 724.436749][T17177] tipc: Enabled bearer , priority 10 [ 724.485156][T17151] ntfs3: loop8: ino=3, ntfs_set_state failed, -22. [ 724.541379][T17182] ntfs3: loop8: ino=3, ntfs_set_state failed, -22. [ 724.565380][T17151] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 724.634676][T17182] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 724.685808][T17182] ntfs3: loop8: ino=3, ntfs_set_state failed, -22. [ 724.798229][T17186] loop2: detected capacity change from 0 to 1024 [ 724.834952][T17186] EXT4-fs: Ignoring removed nomblk_io_submit option [ 724.904764][ T11] ntfs3: loop8: ino=3, ntfs3_write_inode failed, -22. [ 724.933825][T17186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 725.162698][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.462726][T17195] netlink: 'syz.8.3960': attribute type 9 has an invalid length. [ 725.533213][ T9] tipc: Node number set to 2130706433 [ 725.576602][T17195] netlink: 371 bytes leftover after parsing attributes in process `syz.8.3960'. [ 725.904362][T17205] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 725.946829][T17206] loop6: detected capacity change from 0 to 2048 [ 726.043513][T17207] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 726.245081][ T28] audit: type=1800 audit(1790863460.894:152): pid=17206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3966" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 726.291401][T17211] loop2: detected capacity change from 0 to 512 [ 726.316840][T17211] ext4: Unknown parameter 'permit_directio' [ 726.336288][T17209] loop8: detected capacity change from 0 to 1024 [ 726.647104][T17199] loop7: detected capacity change from 0 to 32768 [ 726.808750][T17199] JBD2: Ignoring recovery information on journal [ 726.956212][T17199] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 727.194759][ T28] audit: type=1804 audit(1790863461.844:153): pid=17199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3963" name="/newroot/240/file1/bus" dev="loop7" ino=17058 res=1 errno=0 [ 727.377175][ T28] audit: type=1800 audit(1790863461.844:154): pid=17199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3963" name="bus" dev="loop7" ino=17058 res=0 errno=0 [ 727.493188][T17219] block2mtd: error: cannot open device Ta4Gg)_դEvr!4>=Z{By<0\i= [ 727.493188][T17219] \!ug[ [ 727.628115][T14248] ocfs2: Unmounting device (7,7) on (node local) [ 727.829157][T17225] netlink: 116 bytes leftover after parsing attributes in process `syz.6.3976'. [ 729.108414][T17253] loop8: detected capacity change from 0 to 2048 [ 729.208199][T17258] loop2: detected capacity change from 0 to 512 [ 729.234050][T17253] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 729.289800][T17258] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 729.427976][ T5948] udevd[5948]: symlink '../../loop2' '/dev/disk/by-diskseq/1174.tmp-b7:2' failed: Read-only file system [ 729.451887][T17258] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 729.460872][ T5866] udevd[5866]: symlink '../../loop8' '/dev/disk/by-diskseq/1173.tmp-b7:8' failed: Read-only file system [ 729.546291][ T5866] udevd[5866]: symlink '../../loop8' '/dev/disk/by-label/LinuxUDF.tmp-b7:8' failed: Read-only file system [ 729.654074][ T5866] udevd[5866]: symlink '../../loop8' '/dev/disk/by-uuid/1234567812345678.tmp-b7:8' failed: Read-only file system [ 729.722723][T17264] loop7: detected capacity change from 0 to 128 [ 729.818803][ T5948] udevd[5948]: symlink '../../loop2' '/dev/disk/by-diskseq/1174.tmp-b7:2' failed: Read-only file system [ 729.877776][ T28] audit: type=1800 audit(1790863464.524:155): pid=17264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3991" name="file1" dev="loop7" ino=1048801 res=0 errno=0 [ 729.921267][T17264] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 729.971183][ T5866] udevd[5866]: symlink '../../loop8' '/dev/disk/by-diskseq/1173.tmp-b7:8' failed: Read-only file system [ 730.023950][ T5778] udevd[5778]: symlink '../../loop7' '/dev/disk/by-diskseq/1175.tmp-b7:7' failed: Read-only file system [ 730.038947][T17264] FAT-fs (loop7): Filesystem has been set read-only [ 730.104805][T17264] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 730.142161][ T41] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 730.180427][ T5866] udevd[5866]: symlink '../../loop8' '/dev/disk/by-diskseq/1173.tmp-b7:8' failed: Read-only file system [ 730.194155][ T5778] udevd[5778]: symlink '../../loop7' '/dev/disk/by-label/SYZKALLER.tmp-b7:7' failed: Read-only file system [ 730.223570][T17264] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 52) [ 730.250879][ T5948] udevd[5948]: symlink '../../loop2' '/dev/disk/by-diskseq/1174.tmp-b7:2' failed: Read-only file system [ 730.500820][T17270] MTRR 1 not used [ 730.693353][T17257] loop6: detected capacity change from 0 to 32768 [ 731.044421][ T9] Process accounting resumed [ 731.073538][ T990] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 733.274274][T17332] loop8: detected capacity change from 0 to 64 [ 733.348874][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 733.561806][ T9] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 733.577045][T17336] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4026'. [ 733.596144][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.628807][ T9] usb 7-1: Product: syz [ 733.633941][ T9] usb 7-1: Manufacturer: syz [ 733.662290][ T9] usb 7-1: SerialNumber: syz [ 733.690537][ T9] usb 7-1: config 0 descriptor?? [ 733.739903][ T9] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 010 [ 734.150159][ T9] (null): failure reading functionality [ 734.212730][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 734.395395][ T9] usb 7-1: USB disconnect, device number 10 [ 734.550407][T17338] loop8: detected capacity change from 0 to 32768 [ 734.599595][T17338] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 734.764729][T17338] XFS (loop8): Ending clean mount [ 734.772863][T14521] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 734.806479][T17338] XFS (loop8): Quotacheck needed: Please wait. [ 734.844000][ T6731] udevd[6731]: symlink '../../loop8' '/dev/disk/by-diskseq/1183.tmp-b7:8' failed: Read-only file system [ 734.918073][ T6731] udevd[6731]: symlink '../../loop8' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:8' failed: Read-only file system [ 735.003780][T17338] XFS (loop8): Quotacheck: Done. [ 735.028747][T14521] usb 3-1: Using ep0 maxpacket: 16 [ 735.071758][T14521] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 735.134902][T14521] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.193551][T14521] usb 3-1: config 0 descriptor?? [ 735.253100][T14521] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 735.462874][T17358] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 735.618638][T16312] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 736.056361][T14521] gspca_sonixj: reg_r err -71 [ 736.074796][T14521] sonixj: probe of 3-1:0.0 failed with error -71 [ 736.115123][T14521] usb 3-1: USB disconnect, device number 30 [ 736.321720][T17369] netlink: 964 bytes leftover after parsing attributes in process `syz.6.4038'. [ 736.354810][T17369] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 736.916438][ T6731] udevd[6731]: symlink '../../loop8' '/dev/disk/by-diskseq/1183.tmp-b7:8' failed: Read-only file system [ 737.064140][ T6731] udevd[6731]: symlink '../../loop8' '/dev/disk/by-diskseq/1183.tmp-b7:8' failed: Read-only file system [ 738.081247][T17379] loop6: detected capacity change from 0 to 32768 [ 738.135323][T17379] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.4043 (17379) [ 738.226331][T17379] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 738.298879][T17379] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 738.360596][T17379] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 738.407814][T17379] BTRFS info (device loop6): use zstd compression, level 3 [ 738.418196][ T6731] udevd[6731]: symlink '../../loop6' '/dev/disk/by-diskseq/1185.tmp-b7:6' failed: Read-only file system [ 738.457269][T17379] BTRFS info (device loop6): using free space tree [ 738.482185][ T6731] udevd[6731]: symlink '../../loop6' '/dev/disk/by-uuid/14d642db-7b15-43e4-81e6-4b8fac6a25f8.tmp-b7:6' failed: Read-only file system [ 738.626675][T17379] BTRFS info (device loop6): enabling ssd optimizations [ 738.668882][T17379] BTRFS info (device loop6): auto enabling async discard [ 738.969551][T14073] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 739.326782][T17394] loop8: detected capacity change from 0 to 32768 [ 739.540250][T17394] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 739.836512][T17394] XFS (loop8): Ending clean mount [ 739.914358][ T5866] udevd[5866]: symlink '../../loop8' '/dev/disk/by-diskseq/1186.tmp-b7:8' failed: Read-only file system [ 740.029906][ T5866] udevd[5866]: symlink '../../loop8' '/dev/disk/by-uuid/986211a9-7d00-4ebf-a576-e3de63fa2cbd.tmp-b7:8' failed: Read-only file system [ 740.119685][T16312] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 740.220409][ T6731] udevd[6731]: symlink '../../loop6' '/dev/disk/by-diskseq/1185.tmp-b7:6' failed: Read-only file system [ 740.410525][ T6731] udevd[6731]: symlink '../../loop6' '/dev/disk/by-diskseq/1185.tmp-b7:6' failed: Read-only file system [ 740.623532][ T5866] udevd[5866]: symlink '../../loop8' '/dev/disk/by-diskseq/1186.tmp-b7:8' failed: Read-only file system [ 740.710217][ T5866] udevd[5866]: symlink '../../loop8' '/dev/disk/by-uuid/986211a9-7d00-4ebf-a576-e3de63fa2cbd.tmp-b7:8' failed: Read-only file system [ 741.278329][T17460] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4064'. [ 741.472906][ T6731] udevd[6731]: symlink '../../loop8' '/dev/disk/by-diskseq/1186.tmp-b7:8' failed: Read-only file system [ 741.609981][ T6731] udevd[6731]: symlink '../../loop8' '/dev/disk/by-diskseq/1186.tmp-b7:8' failed: Read-only file system [ 742.053863][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 742.272314][ T9] usb 9-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 742.331120][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.397959][ T9] usb 9-1: config 0 descriptor?? [ 742.445980][ T9] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 742.868912][T14400] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 743.087351][T14400] usb 7-1: Using ep0 maxpacket: 32 [ 743.102785][ T1061] block nbd0: Possible stuck request ffff888022038000: control (read@0,1024B). Runtime 480 seconds [ 743.114614][ T1061] block nbd0: Possible stuck request ffff888022038200: control (read@1024,3072B). Runtime 480 seconds [ 743.155244][T14400] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 743.179023][T14400] usb 7-1: config 0 has no interface number 0 [ 743.218226][T14400] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 743.256445][T14400] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.269490][ T9] gspca_sunplus: reg_w_riv err -71 [ 743.274753][ T9] sunplus: probe of 9-1:0.0 failed with error -71 [ 743.315786][T14400] usb 7-1: Product: syz [ 743.345788][ T9] usb 9-1: USB disconnect, device number 2 [ 743.358713][T14400] usb 7-1: Manufacturer: syz [ 743.392777][T14400] usb 7-1: SerialNumber: syz [ 743.430485][T14400] usb 7-1: config 0 descriptor?? [ 743.460937][T14400] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 743.670803][T14400] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 743.743332][T14400] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 744.080617][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 744.089736][T14400] usb 7-1: USB disconnect, device number 11 [ 744.124301][T14400] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 744.219865][T14400] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 744.308434][T14400] quatech2 7-1:0.51: device disconnected [ 744.586683][T17510] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4084'. [ 744.884059][T17519] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4086'. [ 744.896067][T17518] Line length is too long: Should be less than 4094 [ 744.934983][T17519] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4086'. [ 745.009863][T17513] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4086'. [ 745.089549][T17517] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4086'. [ 745.233464][T17523] CacheFiles: Failed to register: -95 [ 745.677994][T17532] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 746.572159][T17557] loop6: detected capacity change from 0 to 256 [ 746.669876][T17557] exfat: Deprecated parameter 'namecase' [ 746.676528][T17557] exfat: Deprecated parameter 'namecase' [ 746.764691][T17557] exfat: Deprecated parameter 'namecase' [ 746.863422][T17557] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 746.892393][ T6731] udevd[6731]: symlink '../../loop6' '/dev/disk/by-diskseq/1189.tmp-b7:6' failed: Read-only file system [ 747.020423][ T6731] udevd[6731]: symlink '../../loop6' '/dev/disk/by-uuid/1234-1234.tmp-b7:6' failed: Read-only file system [ 747.303718][ T6731] udevd[6731]: symlink '../../loop6' '/dev/disk/by-diskseq/1189.tmp-b7:6' failed: Read-only file system [ 747.419324][ T6731] udevd[6731]: symlink '../../loop6' '/dev/disk/by-uuid/1234-1234.tmp-b7:6' failed: Read-only file system [ 747.579442][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.586356][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.620847][ T6731] udevd[6731]: symlink '../../loop6' '/dev/disk/by-diskseq/1189.tmp-b7:6' failed: Read-only file system [ 747.768049][ T6731] udevd[6731]: symlink '../../loop6' '/dev/disk/by-diskseq/1189.tmp-b7:6' failed: Read-only file system [ 748.084772][T17577] loop7: detected capacity change from 0 to 64 [ 748.184518][ T6731] udevd[6731]: symlink '../../loop7' '/dev/disk/by-diskseq/1191.tmp-b7:7' failed: Read-only file system [ 748.245887][T17577] hfs: request for non-existent node 131072 in B*Tree [ 748.297465][T17577] hfs: request for non-existent node 131072 in B*Tree [ 748.305022][T14521] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 748.324468][ T6731] udevd[6731]: symlink '../../loop7' '/dev/disk/by-label/unt.tmp-b7:7' failed: Read-only file system [ 748.505412][ T6731] udevd[6731]: symlink '../../loop7' '/dev/disk/by-diskseq/1191.tmp-b7:7' failed: Read-only file system [ 748.548727][T14521] usb 3-1: Using ep0 maxpacket: 8 [ 748.599004][T14521] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 748.659785][T14521] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 748.708311][ T6731] udevd[6731]: symlink '../../loop7' '/dev/disk/by-diskseq/1191.tmp-b7:7' failed: Read-only file system [ 748.755219][T14521] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.827649][T14521] usb 3-1: config 0 descriptor?? [ 748.851019][T17587] loop8: detected capacity change from 0 to 256 [ 749.123258][T14521] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 749.358178][T14521] usb 3-1: USB disconnect, device number 31 [ 749.650521][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 750.156393][T17607] loop2: detected capacity change from 0 to 256 [ 750.964579][T17601] loop8: detected capacity change from 0 to 40427 [ 751.039203][T17601] F2FS-fs (loop8): Corrupted extension count (64 + 1 > 64) [ 751.076613][T17605] loop6: detected capacity change from 0 to 32768 [ 751.109337][T17601] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 751.163842][T17605] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 751.190569][T17601] F2FS-fs (loop8): Image doesn't support compression [ 751.267350][T17601] F2FS-fs (loop8): Image doesn't support compression [ 751.387155][T17601] F2FS-fs (loop8): invalid crc value [ 751.565753][ T5866] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 751.917006][T17601] F2FS-fs (loop8): Start checkpoint disabled! [ 751.978866][T14400] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 752.103675][T17601] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 752.153989][T17601] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 752.220441][T14400] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 752.268753][T14400] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.293623][T17616] loop7: detected capacity change from 0 to 32768 [ 752.347112][T14400] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 752.407210][T14400] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 752.424504][ T5866] udevd[5866]: symlink '../../loop6' '/dev/disk/by-diskseq/1198.tmp-b7:6' failed: Read-only file system [ 752.470093][T17601] VFS:Filesystem freeze failed [ 752.489700][T14400] usb 7-1: Product: syz [ 752.495434][T14400] usb 7-1: Manufacturer: syz [ 752.556062][ T5866] udevd[5866]: symlink '../../loop6' '/dev/disk/by-diskseq/1198.tmp-b7:6' failed: Read-only file system [ 752.607057][T14400] hub 7-1:4.0: USB hub found [ 752.752754][ T6731] udevd[6731]: symlink '../../loop7' '/dev/disk/by-diskseq/1200.tmp-b7:7' failed: Read-only file system [ 752.830372][ T6731] udevd[6731]: symlink '../../loop7' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:7' failed: Read-only file system [ 752.876154][T14400] hub 7-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 753.142234][ T5866] udevd[5866]: symlink '../../loop8' '/dev/disk/by-diskseq/1197.tmp-b7:8' failed: Read-only file system [ 753.249096][T14400] usb 7-1: USB disconnect, device number 12 [ 753.313661][ T5866] udevd[5866]: symlink '../../loop8' '/dev/disk/by-diskseq/1197.tmp-b7:8' failed: Read-only file system [ 753.434283][T17629] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4138'. [ 753.531041][ T6731] udevd[6731]: symlink '../../loop7' '/dev/disk/by-diskseq/1200.tmp-b7:7' failed: Read-only file system [ 753.637084][ T6731] udevd[6731]: symlink '../../loop7' '/dev/disk/by-diskseq/1200.tmp-b7:7' failed: Read-only file system [ 753.761134][ T6731] udevd[6731]: symlink '../../loop7' '/dev/disk/by-diskseq/1200.tmp-b7:7' failed: Read-only file system [ 754.193378][T17643] loop6: detected capacity change from 0 to 4096 [ 754.247069][T17643] EXT4-fs: Ignoring removed nobh option [ 754.321539][T17643] EXT4-fs: Ignoring removed bh option [ 754.383025][T17643] EXT4-fs (loop6): Test dummy encryption mode enabled [ 754.460050][T17643] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 754.502676][ T28] audit: type=1400 audit(1790863489.154:156): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="foo" pid=17650 comm="syz.2.4151" name="foo" offset=60 [ 754.575608][ T6731] udevd[6731]: symlink '../../loop6' '/dev/disk/by-diskseq/1203.tmp-b7:6' failed: Read-only file system [ 754.871781][T14073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.584995][T17672] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4159'. [ 755.627629][T17672] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4159'. [ 755.703688][T17676] loop7: detected capacity change from 0 to 128 [ 755.717392][T17672] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.727192][T17672] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.736603][T17672] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.746247][T17672] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.782668][T17677] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 755.959120][T17674] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4159'. [ 756.035142][T17674] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4159'. [ 757.021900][T17702] loop2: detected capacity change from 0 to 1024 [ 757.099463][T17702] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 757.259221][T17702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.558256][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.577876][T17691] loop6: detected capacity change from 0 to 32768 [ 757.734275][ T5866] udevd[5866]: symlink '../../loop2' '/dev/disk/by-diskseq/1207.tmp-b7:2' failed: Read-only file system [ 757.857470][ T5866] udevd[5866]: symlink '../../loop2' '/dev/disk/by-diskseq/1207.tmp-b7:2' failed: Read-only file system [ 758.064331][ T6731] udevd[6731]: symlink '../../loop6' '/dev/disk/by-diskseq/1208.tmp-b7:6' failed: Read-only file system [ 758.166035][ T6731] udevd[6731]: symlink '../../loop6' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:6' failed: Read-only file system [ 758.375770][T17733] tmpfs: Bad value for 'uid' [ 758.833161][ T6731] udevd[6731]: symlink '../../loop6' '/dev/disk/by-diskseq/1208.tmp-b7:6' failed: Read-only file system [ 758.961928][ T6731] udevd[6731]: symlink '../../loop6' '/dev/disk/by-diskseq/1208.tmp-b7:6' failed: Read-only file system [ 759.009955][T17746] loop6: detected capacity change from 0 to 256 [ 759.161915][T17746] FAT-fs (loop6): Directory bread(block 64) failed [ 759.205756][T17746] FAT-fs (loop6): Directory bread(block 65) failed [ 759.223722][ T6731] udevd[6731]: symlink '../../loop6' '/dev/disk/by-diskseq/1211.tmp-b7:6' failed: Read-only file system [ 759.265123][T17746] FAT-fs (loop6): Directory bread(block 66) failed [ 759.299791][T17746] FAT-fs (loop6): Directory bread(block 67) failed [ 759.353441][T17746] FAT-fs (loop6): Directory bread(block 68) failed [ 759.412670][T17746] FAT-fs (loop6): Directory bread(block 69) failed [ 759.444240][ T6731] udevd[6731]: symlink '../../loop6' '/dev/disk/by-diskseq/1211.tmp-b7:6' failed: Read-only file system [ 759.461988][T17746] FAT-fs (loop6): Directory bread(block 70) failed [ 759.514666][T17746] FAT-fs (loop6): Directory bread(block 71) failed [ 759.548880][T17746] FAT-fs (loop6): Directory bread(block 72) failed [ 759.586723][T17746] FAT-fs (loop6): Directory bread(block 73) failed [ 759.765202][T17757] loop8: detected capacity change from 0 to 1024 [ 759.885156][ T6731] udevd[6731]: symlink '../../loop8' '/dev/disk/by-diskseq/1212.tmp-b7:8' failed: Read-only file system [ 760.003739][ T6731] udevd[6731]: symlink '../../loop8' '/dev/disk/by-label/untitled.tmp-b7:8' failed: Read-only file system [ 760.649898][T14521] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 760.758270][T17774] loop2: detected capacity change from 0 to 1024 [ 760.870099][T14521] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 760.898911][T14521] usb 9-1: config 0 has no interface number 0 [ 760.925456][T14521] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 761.042549][T14521] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 761.078784][T14521] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.148669][T14521] usb 9-1: Product: syz [ 761.185410][T14521] usb 9-1: Manufacturer: syz [ 761.194669][T17763] loop6: detected capacity change from 0 to 32768 [ 761.210020][T14400] lg-g15 0003:046D:0A07.000F: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 761.238737][T14521] usb 9-1: SerialNumber: syz [ 761.269743][T14521] usb 9-1: config 0 descriptor?? [ 761.279905][T14400] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.000F/input/input35 [ 761.351961][T17763] [ 761.351961][T17763] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 761.351961][T17763] [ 761.387135][T14521] yurex 9-1:0.50: USB YUREX device now attached to Yurex #0 [ 761.592067][T17763] JFS: metapage_get_blocks failed [ 761.597852][T17763] ERROR: (device loop6): release_metapage: metapage_write_one() failed [ 761.597852][T17763] [ 761.737350][ T1192] usb 9-1: USB disconnect, device number 3 [ 761.773187][T17763] ERROR: (device loop6): diWrite: ixpxd invalid [ 761.773187][T17763] [ 761.800284][ T1192] yurex 9-1:0.50: USB YUREX #0 now disconnected [ 761.836646][T17763] ERROR: (device loop6): txCommit: [ 761.836646][T17763] [ 762.020176][T14073] [ 762.020176][T14073] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 762.020176][T14073] [ 762.075021][T14073] [ 762.075021][T14073] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 762.075021][T14073] [ 762.111997][ T41] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 762.537268][T17778] loop7: detected capacity change from 0 to 40427 [ 762.615141][T17778] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 762.682641][T17778] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 762.776691][T17778] F2FS-fs (loop7): Unrecognized mount option "18446744073709551615" or missing value [ 762.979888][ T6731] udevd[6731]: symlink '../../loop7' '/dev/disk/by-diskseq/1219.tmp-b7:7' failed: Read-only file system [ 763.460721][ T6731] udevd[6731]: symlink '../../loop7' '/dev/disk/by-diskseq/1219.tmp-b7:7' failed: Read-only file system [ 764.351375][ T6731] udevd[6731]: symlink '../../loop7' '/dev/disk/by-diskseq/1219.tmp-b7:7' failed: Read-only file system [ 764.389555][T17804] loop2: detected capacity change from 0 to 2048 [ 764.460158][T17804] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 764.512014][ T6731] udevd[6731]: symlink '../../loop7' '/dev/disk/by-diskseq/1219.tmp-b7:7' failed: Read-only file system [ 764.574183][ T5866] udevd[5866]: symlink '../../loop2' '/dev/disk/by-diskseq/1221.tmp-b7:2' failed: Read-only file system [ 764.594599][T17806] loop8: detected capacity change from 0 to 4096 [ 764.701170][ T5866] udevd[5866]: symlink '../../loop2' '/dev/disk/by-label/LinuxUDF.tmp-b7:2' failed: Read-only file system [ 764.811452][ T5866] udevd[5866]: symlink '../../loop2' '/dev/disk/by-uuid/1234567812345678.tmp-b7:2' failed: Read-only file system [ 764.876211][ T28] audit: type=1800 audit(1790863499.524:157): pid=17806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4218" name="file1" dev="loop8" ino=30 res=0 errno=0 [ 764.936058][T17811] program syz.7.4227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 764.992324][ T5866] udevd[5866]: symlink '../../loop2' '/dev/disk/by-diskseq/1221.tmp-b7:2' failed: Read-only file system [ 765.147005][ T5866] udevd[5866]: symlink '../../loop2' '/dev/disk/by-diskseq/1221.tmp-b7:2' failed: Read-only file system [ 765.184628][ T6731] udevd[6731]: symlink '../../loop8' '/dev/disk/by-diskseq/1222.tmp-b7:8' failed: Read-only file system [ 765.687260][T17822] loop8: detected capacity change from 0 to 22 [ 765.729329][T17822] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 765.781789][T17822] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 766.157259][T17829] loop2: detected capacity change from 0 to 1024 [ 766.950328][T17847] loop8: detected capacity change from 0 to 128 [ 766.992475][T17847] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 767.047053][T17847] hpfs: filesystem error: improperly stopped [ 767.076422][T17847] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 767.104737][T17847] hpfs: You really don't want any checks? You are crazy... [ 767.127810][T17847] hpfs: Code page index out of array [ 767.143369][T17847] hpfs: code page support is disabled [ 767.160304][T17847] hpfs: hpfs_map_4sectors(): unaligned read [ 767.176596][T17847] hpfs: hpfs_map_4sectors(): unaligned read [ 767.197382][T17847] hpfs: filesystem error: unable to find root dir [ 767.249688][T17847] hpfs: hpfs_map_sector(): read error [ 767.255162][T17847] hpfs: hpfs_map_sector(): read error [ 767.746998][T17860] loop6: detected capacity change from 0 to 256 [ 767.826251][T17860] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 767.956133][ T28] audit: type=1800 audit(1790863502.604:158): pid=17860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4243" name="file2" dev="loop6" ino=1048814 res=0 errno=0 [ 768.302467][T17868] loop6: detected capacity change from 0 to 16 [ 768.357501][T17868] erofs: (device loop6): mounted with root inode @ nid 36. [ 768.395329][T17867] loop2: detected capacity change from 0 to 4096 [ 768.482538][T17867] NILFS (loop2): invalid segment: Checksum error in segment payload [ 768.532219][T17867] NILFS (loop2): trying rollback from an earlier position [ 768.623759][T17867] NILFS (loop2): recovery complete [ 768.678869][T17870] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 769.166176][T17876] Cannot find set identified by id 0 to match [ 769.622784][T17886] loop8: detected capacity change from 0 to 136 [ 769.766034][T17886] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 771.872662][T17927] loop2: detected capacity change from 0 to 131072 [ 771.921053][T17927] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 771.929438][T17927] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 771.970004][T17927] F2FS-fs (loop2): invalid crc value [ 772.041729][T17927] F2FS-fs (loop2): Found nat_bits in checkpoint [ 772.091065][T17927] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 772.099534][T17927] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 772.152784][T17925] loop6: detected capacity change from 0 to 4096 [ 772.217352][T17925] ntfs3: loop6: Different NTFS sector size (1024) and media sector size (512). [ 772.849014][T17935] netlink: 'syz.8.4272': attribute type 8 has an invalid length. [ 773.171826][ T1061] block nbd0: Possible stuck request ffff888022038000: control (read@0,1024B). Runtime 510 seconds [ 773.186937][ T1061] block nbd0: Possible stuck request ffff888022038200: control (read@1024,3072B). Runtime 510 seconds [ 773.858768][ T1192] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 774.078655][ T1192] usb 9-1: Using ep0 maxpacket: 32 [ 774.087609][ T1192] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 774.118415][ T1192] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.162769][ T1192] usb 9-1: config 0 descriptor?? [ 774.376026][ T1192] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 774.416657][ T1192] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 774.475458][ T1192] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 774.506480][ T1192] usb 9-1: media controller created [ 774.605535][ T1192] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 774.725026][ T1192] az6027: usb out operation failed. (-71) [ 774.764583][ T1192] az6027: usb out operation failed. (-71) [ 774.792574][ T1192] stb0899_attach: Driver disabled by Kconfig [ 774.822734][ T1192] az6027: no front-end attached [ 774.822734][ T1192] [ 774.858095][ T1192] az6027: usb out operation failed. (-71) [ 774.887682][ T1192] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 774.929297][ T1192] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input36 [ 775.016513][ T1192] dvb-usb: schedule remote query interval to 400 msecs. [ 775.056069][ T1192] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 775.159303][ T1192] usb 9-1: USB disconnect, device number 4 [ 775.267748][T17954] input: syz0 as /devices/virtual/input/input37 [ 775.505105][ T1192] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 775.553500][T17959] loop7: detected capacity change from 0 to 1024 [ 775.869319][T17959] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 775.977052][T17959] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 776.605773][T14248] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 776.626481][T17960] loop6: detected capacity change from 0 to 40427 [ 776.663729][T17969] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 776.715160][T17960] F2FS-fs (loop6): invalid crc value [ 776.761220][T17960] F2FS-fs (loop6): Found nat_bits in checkpoint [ 777.122647][T17960] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 777.361818][ T28] audit: type=1800 audit(1790863511.994:159): pid=17960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4283" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 777.480630][T14073] syz-executor: attempt to access beyond end of device [ 777.480630][T14073] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 778.142341][T17976] loop7: detected capacity change from 0 to 131072 [ 778.183445][T17976] F2FS-fs (loop7): Invalid segment/section count (458783, 24 x 150994945) [ 778.192485][T17976] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 778.210530][T17976] F2FS-fs (loop7): invalid crc value [ 778.259410][T14073] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 778.280046][T17976] F2FS-fs (loop7): Found nat_bits in checkpoint [ 778.389296][T17976] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 778.396659][T17976] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 779.813041][T17986] kAFS: bad VL server IP address [ 780.310811][ T28] audit: type=1400 audit(1790863514.964:160): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name=":" pid=17991 comm="syz.2.4291" name=":" offset=33 [ 782.031043][T18024] netlink: 'syz.6.4306': attribute type 12 has an invalid length. [ 782.109482][T18024] netlink: 'syz.6.4306': attribute type 29 has an invalid length. [ 782.164936][T18024] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4306'. [ 782.909521][T18041] netlink: 'syz.8.4316': attribute type 39 has an invalid length. [ 784.149665][T18065] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4327'. [ 784.197740][T18061] loop6: detected capacity change from 0 to 8192 [ 784.302210][T18061] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 784.407046][T18061] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 784.443702][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4329'. [ 784.489721][T18061] REISERFS (device loop6): using ordered data mode [ 784.543731][T18061] reiserfs: using flush barriers [ 784.557754][T18072] loop2: detected capacity change from 0 to 1024 [ 784.578214][T18061] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 784.623251][ T6731] udevd[6731]: symlink '../../loop6' '/dev/disk/by-diskseq/1249.tmp-b7:6' failed: Read-only file system [ 784.721121][T18061] REISERFS (device loop6): checking transaction log (loop6) [ 784.746924][ T6731] udevd[6731]: symlink '../../loop6' '/dev/disk/by-label/syzk\x03.tmp-b7:6' failed: Read-only file system [ 784.785040][ T5866] udevd[5866]: symlink '../../loop2' '/dev/disk/by-diskseq/1250.tmp-b7:2' failed: Read-only file system [ 784.848243][ T6731] udevd[6731]: symlink '../../loop6' '/dev/disk/by-uuid/12312312-1233-1233-1231-123413412412.tmp-b7:6' failed: Read-only file system [ 784.901328][ T5866] udevd[5866]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system [ 785.013844][ T5866] udevd[5866]: symlink '../../loop2' '/dev/disk/by-uuid/0c11cbbc-aa93-3898-a963-75536445a630.tmp-b7:2' failed: Read-only file system [ 785.189365][T18061] REISERFS (device loop6): Using tea hash to sort names [ 785.196718][T18061] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 785.243186][ T5866] udevd[5866]: symlink '../../loop2' '/dev/disk/by-diskseq/1250.tmp-b7:2' failed: Read-only file system [ 785.362019][ T6731] udevd[6731]: symlink '../../loop6' '/dev/disk/by-diskseq/1249.tmp-b7:6' failed: Read-only file system [ 785.378368][T18067] loop8: detected capacity change from 0 to 32768 [ 785.420234][ T5866] udevd[5866]: symlink '../../loop2' '/dev/disk/by-diskseq/1250.tmp-b7:2' failed: Read-only file system [ 785.465402][ T6731] udevd[6731]: symlink '../../loop6' '/dev/disk/by-label/syzk\x03.tmp-b7:6' failed: Read-only file system [ 785.538443][T18067] JBD2: Ignoring recovery information on journal [ 785.712756][T18067] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 786.065997][ T28] audit: type=1804 audit(1790863520.714:161): pid=18067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.4328" name="/newroot/150/file1/bus" dev="loop8" ino=17058 res=1 errno=0 [ 786.248899][ T28] audit: type=1800 audit(1790863520.754:162): pid=18067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4328" name="bus" dev="loop8" ino=17058 res=0 errno=0 [ 786.287044][T18086] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 786.414266][T16312] ocfs2: Unmounting device (7,8) on (node local) [ 786.650605][T18078] loop7: detected capacity change from 0 to 32768 [ 786.764779][T18078] ERROR: (device loop7): diAllocAG: numfree > numinos [ 786.764779][T18078] [ 786.849157][T18078] ERROR: (device loop7): remounting filesystem as read-only [ 786.913684][T18078] ialloc: diAlloc returned -5! [ 786.938965][T18096] ERROR: (device loop7): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 786.938965][T18096] [ 788.180280][T14400] IPVS: starting estimator thread 0... [ 788.188780][T18110] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 788.298651][T18112] IPVS: using max 26 ests per chain, 62400 per kthread [ 788.688381][T18125] loop7: detected capacity change from 0 to 1024 [ 788.875672][T18125] gfs2: path_lookup on c::: returned error -2 [ 788.970967][T18130] loop8: detected capacity change from 0 to 2048 [ 789.054208][T18130] NILFS (loop8): invalid segment: Magic number mismatch [ 789.116560][T18130] NILFS (loop8): trying rollback from an earlier position [ 789.199600][T18130] NILFS (loop8): recovery complete [ 789.237491][T18138] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 790.593234][T18165] loop6: detected capacity change from 0 to 2048 [ 790.701541][T18168] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 790.806665][ T28] audit: type=1800 audit(1790863525.454:163): pid=18165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4369" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 791.664482][T18188] MTRR 1 not used [ 791.697989][T18190] loop7: detected capacity change from 0 to 1024 [ 791.794053][T18190] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 791.897517][T18190] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 792.010136][ T28] audit: type=1800 audit(1790863526.664:164): pid=18190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4381" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 792.042599][T18190] EXT4-fs error (device loop7): ext4_map_blocks:720: inode #15: comm syz.7.4381: lblock 0 mapped to illegal pblock 0 (length 1) [ 792.076767][T18202] loop8: detected capacity change from 0 to 512 [ 792.132012][T18190] EXT4-fs error (device loop7): ext4_ext_remove_space:2957: inode #15: comm syz.7.4381: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 792.187012][T18202] EXT4-fs (loop8): 1 truncate cleaned up [ 792.231966][T18202] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 792.349568][T18202] EXT4-fs error (device loop8): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.8.4393: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 792.422175][T14248] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 792.637565][T16312] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.857245][T18215] loop2: detected capacity change from 0 to 512 [ 792.947732][T18215] EXT4-fs (loop2): 1 truncate cleaned up [ 792.987723][T18215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 793.109208][T18215] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.4399: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 793.239193][T14400] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 793.257739][T18224] loop7: detected capacity change from 0 to 256 [ 793.287093][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.334274][T14385] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 793.353173][T18224] FAT-fs (loop7): Directory bread(block 64) failed [ 793.383658][T18224] FAT-fs (loop7): Directory bread(block 65) failed [ 793.445668][T18224] FAT-fs (loop7): Directory bread(block 66) failed [ 793.458751][T14400] usb 9-1: Using ep0 maxpacket: 32 [ 793.499768][T18224] FAT-fs (loop7): Directory bread(block 67) failed [ 793.512680][T14400] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 793.545536][T18224] FAT-fs (loop7): Directory bread(block 68) failed [ 793.555739][T14400] usb 9-1: config 0 has no interface number 0 [ 793.590772][T14400] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.602061][T18224] FAT-fs (loop7): Directory bread(block 69) failed [ 793.638334][T18224] FAT-fs (loop7): Directory bread(block 70) failed [ 793.647389][T14400] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.674458][T18224] FAT-fs (loop7): Directory bread(block 71) failed [ 793.693836][T18224] FAT-fs (loop7): Directory bread(block 72) failed [ 793.708679][T14400] usb 9-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 793.729284][T18224] FAT-fs (loop7): Directory bread(block 73) failed [ 793.742132][T14400] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.780740][T14400] usb 9-1: config 0 descriptor?? [ 793.911126][T18216] loop6: detected capacity change from 0 to 40427 [ 793.957008][T18216] F2FS-fs (loop6): Invalid segment/section count (24 != 3 * 1) [ 793.996816][T18216] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 794.090513][T18216] F2FS-fs (loop6): invalid crc value [ 794.119675][T18216] F2FS-fs (loop6): Found nat_bits in checkpoint [ 794.277937][T18216] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 794.289361][ T29] INFO: task syz.0.3503:16012 blocked for more than 143 seconds. [ 794.324380][T18216] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 794.333663][ T29] Not tainted syzkaller #0 [ 794.343362][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 794.381380][ T29] task:syz.0.3503 state:D stack:27784 pid:16012 ppid:5775 flags:0x00004004 [ 794.432656][T14400] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:28BD:0094.0010/input/input39 [ 794.445885][ T29] Call Trace: [ 794.471957][ T29] [ 794.494590][ T3462] Bluetooth: hci5: Frame reassembly failed (-84) [ 794.513289][T18216] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 794.522778][ T29] __schedule+0x15ae/0x4660 [ 794.536104][T18232] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 794.544720][ T29] ? asan.module_dtor+0x20/0x20 [ 794.565209][T18216] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 794.575461][ T29] ? __mutex_lock+0x66e/0xc80 [ 794.597743][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 794.630271][T14400] uclogic 0003:28BD:0094.0010: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.8-1/input1 [ 794.646712][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 794.680860][ T29] schedule+0xbd/0x170 [ 794.706474][ T29] schedule_preempt_disabled+0x13/0x20 [ 794.734211][T14400] usb 9-1: USB disconnect, device number 5 [ 794.743656][ T29] __mutex_lock+0x673/0xc80 [ 794.760440][ T29] ? __mutex_lock+0x4d2/0xc80 [ 794.782739][ T29] ? blkdev_get_by_dev+0x11b/0x610 [ 794.804547][ T29] ? mutex_lock_nested+0x20/0x20 [ 794.837753][ T29] ? iput+0x33f/0x900 [ 794.866511][ T29] ? disk_block_events+0xa7/0x120 [ 794.899747][ T29] ? blkdev_get_by_dev+0xf6/0x610 [ 794.906475][T18216] F2FS-fs (loop6): f2fs_new_node_page: inconsistent nat entry, ino:5, nid:5, blkaddr:4608, ver:0, flag:0 [ 794.920116][T18233] fido_id[18233]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 794.947859][ T29] blkdev_get_by_dev+0x11b/0x610 [ 794.958787][ T29] blkdev_open+0x14e/0x360 [ 794.974812][ T29] do_dentry_open+0x880/0x14b0 [ 794.991152][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 795.010762][ T29] path_openat+0x284f/0x3270 [ 795.025711][ T29] ? do_sys_openat2+0xda/0x1d0 [ 795.034539][ T29] ? __x64_sys_openat+0x139/0x160 [ 795.043782][ T29] ? verify_lock_unused+0x140/0x140 [ 795.055462][ T29] ? do_filp_open+0x430/0x430 [ 795.063959][ T29] do_filp_open+0x1f2/0x430 [ 795.069507][ T29] ? vfs_tmpfile+0x620/0x620 [ 795.075490][ T29] ? _raw_spin_unlock+0x28/0x40 [ 795.085642][ T29] ? alloc_fd+0x590/0x640 [ 795.094308][ T29] do_sys_openat2+0x134/0x1d0 [ 795.102406][ T29] ? do_sys_open+0xe0/0xe0 [ 795.106949][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 795.114519][ T29] ? lock_chain_count+0x20/0x20 [ 795.122482][ T29] ? lock_chain_count+0x20/0x20 [ 795.127487][ T29] __x64_sys_openat+0x139/0x160 [ 795.133511][ T29] do_syscall_64+0x55/0xb0 [ 795.138102][ T29] ? clear_bhb_loop+0x40/0x90 [ 795.147014][ T29] ? clear_bhb_loop+0x40/0x90 [ 795.152858][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 795.166983][ T29] RIP: 0033:0x7f9e2a15e98e [ 795.178320][ T29] RSP: 002b:00007f9e2b13db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 795.192870][ T29] RAX: ffffffffffffffda RBX: 00007f9e2b13e6c0 RCX: 00007f9e2a15e98e [ 795.202212][ T29] RDX: 0000000000000000 RSI: 00007f9e2b13dc00 RDI: ffffffffffffff9c [ 795.212968][ T29] RBP: 00007f9e2b13dc00 R08: 0000000000000000 R09: 0000000000000000 [ 795.223207][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 795.233654][ T29] R13: 00007f9e2a426038 R14: 00007f9e2a425fa0 R15: 00007ffd456948a8 [ 795.243524][ T29] [ 795.303707][ T29] [ 795.303707][ T29] Showing all locks held in the system: [ 795.364756][ T29] 1 lock held by khungtaskd/29: [ 795.406835][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 795.438095][ T29] 1 lock held by udevd/5863: [ 795.460677][ T29] #0: ffff888141b5f4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 795.484718][ T29] 2 locks held by getty/8229: [ 795.502308][ T29] #0: ffff88814cdb90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 795.527957][ T29] #1: ffffc900044462f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 795.556341][ T29] 1 lock held by syz-executor/14073: [ 795.567400][ T29] 1 lock held by syz.0.3503/16012: [ 795.604626][ T29] #0: ffff888141b5f4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 795.617181][ T29] 3 locks held by kworker/u5:1/16316: [ 795.626519][ T29] #0: ffff888069876d38 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 795.641995][ T29] #1: ffffc900043bfd00 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 795.655358][ T29] #2: ffff8880460cce70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0x1a3/0x6b0 [ 795.671609][ T29] 2 locks held by syz.7.4396/18231: [ 795.676937][ T29] #0: ffff8880305ff0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0xb7/0x200 [ 795.692208][ T29] #1: ffff88805b54d0a0 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0xdb/0x200 [ 795.725404][ T29] [ 795.745813][ T29] ============================================= [ 795.745813][ T29] [ 795.778376][ T29] NMI backtrace for cpu 0 [ 795.782752][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 795.789959][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 795.800032][ T29] Call Trace: [ 795.803319][ T29] [ 795.806266][ T29] dump_stack_lvl+0x18c/0x250 [ 795.810974][ T29] ? __wake_up_klogd+0xd9/0x100 [ 795.815842][ T29] ? show_regs_print_info+0x20/0x20 [ 795.821083][ T29] ? load_image+0x420/0x420 [ 795.825652][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 795.830672][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 795.836863][ T29] ? load_image+0x420/0x420 [ 795.841408][ T29] ? wq_watchdog_touch+0xef/0x170 [ 795.846460][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 795.852568][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 795.858578][ T29] watchdog+0xf59/0xfa0 [ 795.862755][ T29] ? watchdog+0x1e1/0xfa0 [ 795.867109][ T29] kthread+0x2fa/0x390 [ 795.871191][ T29] ? hungtask_pm_notify+0x50/0x50 [ 795.876235][ T29] ? kthread_blkcg+0xd0/0xd0 [ 795.880858][ T29] ret_from_fork+0x48/0x80 [ 795.885305][ T29] ? kthread_blkcg+0xd0/0xd0 [ 795.889930][ T29] ret_from_fork_asm+0x11/0x20 [ 795.894735][ T29] [ 796.016660][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 796.023554][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 796.030768][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 796.040875][ T29] Call Trace: [ 796.044166][ T29] [ 796.047105][ T29] dump_stack_lvl+0x18c/0x250 [ 796.051802][ T29] ? show_regs_print_info+0x20/0x20 [ 796.057013][ T29] ? load_image+0x420/0x420 [ 796.061540][ T29] panic+0x2ca/0x720 [ 796.065452][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 796.069976][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 796.075536][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 796.080943][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 796.087132][ T29] watchdog+0xf98/0xfa0 [ 796.091315][ T29] ? watchdog+0x1e1/0xfa0 [ 796.095708][ T29] kthread+0x2fa/0x390 [ 796.099796][ T29] ? hungtask_pm_notify+0x50/0x50 [ 796.104848][ T29] ? kthread_blkcg+0xd0/0xd0 [ 796.109448][ T29] ret_from_fork+0x48/0x80 [ 796.113893][ T29] ? kthread_blkcg+0xd0/0xd0 [ 796.118497][ T29] ret_from_fork_asm+0x11/0x20 [ 796.123285][ T29] [ 796.126405][ T29] Kernel Offset: disabled [ 796.130739][ T29] Rebooting in 86400 seconds..