last executing test programs: 3m24.728708007s ago: executing program 4 (id=651): setreuid(0x0, 0xee00) r0 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) 3m24.442010531s ago: executing program 4 (id=656): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000001f80)=""/4095, 0xfff) getdents64(r0, 0x0, 0x0) 3m24.169339034s ago: executing program 4 (id=658): r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000900)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) 3m23.935577376s ago: executing program 4 (id=663): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') 3m21.895902887s ago: executing program 4 (id=685): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 3m21.076052207s ago: executing program 4 (id=703): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000100), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) 3m16.373418959s ago: executing program 0 (id=722): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000280)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@errors_remount}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51) fallocate(r0, 0x0, 0x9, 0x10001) 3m15.676138353s ago: executing program 0 (id=723): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cf90103", @ANYRES16=0x0, @ANYBLOB="c89045b2a6c0b186f6eb1f00000008003617"], 0x1c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 3m15.298226132s ago: executing program 0 (id=728): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0942, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES32], 0xffdd) 3m14.909284461s ago: executing program 0 (id=729): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000002c0)='./file0\x00', 0xa, &(0x7f00000000c0)=ANY=[], 0xff, 0x2ce, &(0x7f0000000780)="$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") mount$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000000), 0x4800, &(0x7f0000000380)={[{}]}) 3m14.5313941s ago: executing program 0 (id=732): r0 = memfd_create(&(0x7f0000000b40)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\xbd/\xd0J\xce=\x924\xc0\x17\x871N:\xb4\xea \x8e\xdelV\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8H\x7fsk\x9cD\xb3w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N', 0x2) fcntl$addseals(r0, 0x409, 0xf) ftruncate(r0, 0x1) 3m14.072898783s ago: executing program 1 (id=736): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040), 0x4) 3m13.876017923s ago: executing program 0 (id=739): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200), 0x4) listen(r0, 0xfff) 3m13.577946417s ago: executing program 32 (id=739): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200), 0x4) listen(r0, 0xfff) 3m13.566823647s ago: executing program 1 (id=741): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc) 3m13.409346665s ago: executing program 1 (id=742): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000062c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="747970653d704351852c636f6465706167653d63703836332c00000000746f723db84f842468f8c5568bcf21a304fee0a339572c6469725f756d61736b3d30303030303030313030303030303030303030303030313000"], 0x1, 0x2e6, &(0x7f00000027c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) 3m13.080446832s ago: executing program 1 (id=744): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000002c0)='./file0\x00', 0xa, &(0x7f00000000c0)=ANY=[], 0xff, 0x2ce, &(0x7f0000000780)="$eJzs3EFrE2kcx/HfNt0mTWmThaWwC7v7sHvZXkKbfQFrkBbEgFqboh6EqZ1oyJiUmVBJEZuLePV1FI+9Ceob6EW8eBVvRRA92IM4YiZpk3aaptrU1H4/UOafPM8v+ZeS8E8hz+aVh7eLeS+VtyoaiBkNSDVtSckvVcNPjetAvR5Sq5omRt6//OPy1WvnM9lsdNaYmczcf2ljzNhfT+7cffT3s8rI/PrY46g2ktc336Zfb4xv/Lb5ae5WwTMFz5TKFWOZhXK5Yi04tlkseMWUMRcd2/JsUyh5ttu2nnfKS0tVY5UWR+NLru15xipVTdGumkrZVNyqsW5ahZJJpVJmNK7TbbCLPbm12VkrE742/OqoO0LPDYfd6bqZmqShvYu5teNoCgAA9JfO838w6+8//2fng2tz/p8+mvlfOnD+j0hi/j+8WtutTvM/fhSum7HijddvO+Z/AAAAAAAAAAAAAAAAAAAAAABOgi3fT/i+n2hemz9RSTFJzdvfu0/0xkF//3fhsf+Pu0/0RssX92KS82A5t5wLrsF6Jq+CHNmaVEIf6+8HDUE9cy47PWnqPvi+v9rIry7nIoo2803JsPyfv0wFeaOnTkv+Z8Vbnz+thH4Nf/50aH7o0r//tORTSuj5DZXlaLH+vraTvzdlzNkL2V354fq+fYWetAAAAAAAQH9KmW3J9s+/kWC9viGmvetB/hD/H9j1+XpQv3dzRCUAAAAAAPhmXnWlaDmO7YYU65L2WaoXUUkd4qe1iKgv2thVnJHUB210LEaPrsOYpOAe8xXx8Tfb8a5Sfhd7Bg94NfVbEXpgMAAAAIATbGfoP0Toxf0edgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOnT8RiwiZFgU3Wl2Nzftqf1gTo8TsuuyPH9ZgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/+RwAAP//9WsVmg==") mount$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000000), 0x4800, &(0x7f0000000380)={[{}]}) 3m12.587493135s ago: executing program 1 (id=755): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000047850000001b000000b700000000000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 3m12.003206744s ago: executing program 1 (id=749): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3004017, &(0x7f0000000c40)={[{@nodiscard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x43, 0x4e0, &(0x7f0000000300)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) 3m11.621443433s ago: executing program 33 (id=749): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3004017, &(0x7f0000000c40)={[{@nodiscard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x43, 0x4e0, &(0x7f0000000300)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) 3m5.995302281s ago: executing program 34 (id=703): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000100), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) 2m41.316947449s ago: executing program 3 (id=907): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x8, 0x96}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 2m41.003165465s ago: executing program 3 (id=910): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) 2m40.630749813s ago: executing program 3 (id=912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x3d, 0x3, 0x1, 0x20}]}) 2m40.253174241s ago: executing program 3 (id=913): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x34}}, 0x4000080) 2m39.845133382s ago: executing program 3 (id=917): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m38.746247996s ago: executing program 3 (id=925): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000140)={[{@acl}, {@usrjquota_file, 0x4}, {@resize={'resize', 0x3d, 0x1875140b}}, {@commit={'commit', 0x3d, 0x7}}, {@usrjquota, 0x3d}]}, 0xff, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2m23.455245911s ago: executing program 35 (id=925): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000140)={[{@acl}, {@usrjquota_file, 0x4}, {@resize={'resize', 0x3d, 0x1875140b}}, {@commit={'commit', 0x3d, 0x7}}, {@usrjquota, 0x3d}]}, 0xff, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 51.246504641s ago: executing program 2 (id=1752): unshare(0x20000400) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) 50.911231157s ago: executing program 2 (id=1756): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x1004000, &(0x7f0000000040)={[{@gid}, {@mode={'mode', 0x3d, 0x4}}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@uid_ignore}]}, 0x1, 0xc34, &(0x7f0000000440)="$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") syz_usb_connect$uac1(0x2, 0x78, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x2c, 0x10, 0x7}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 48.753996504s ago: executing program 2 (id=1768): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000010) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac8180"], 0xfe33) 48.324388125s ago: executing program 2 (id=1772): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 47.383666302s ago: executing program 2 (id=1780): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setresuid(0xee00, 0xee01, 0xee01) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x400443c9, 0x20000002) 46.351966273s ago: executing program 2 (id=1788): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x18}) fallocate(r0, 0x10, 0x3, 0x37f) 45.593519669s ago: executing program 36 (id=1788): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x18}) fallocate(r0, 0x10, 0x3, 0x37f) 5.035886351s ago: executing program 8 (id=2136): syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfd, 0x60d2, &(0x7f0000000340)="$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") r0 = open(&(0x7f0000000140)='./file2\x00', 0x64042, 0x178) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 4.686282228s ago: executing program 5 (id=2140): r0 = socket(0x10, 0x3, 0x9) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453}, [], {0x14, 0x3f6}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 4.431775451s ago: executing program 5 (id=2143): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0xd8482a8000000000) 4.265289209s ago: executing program 6 (id=2144): madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x12) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000000)=0x6, 0x21, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 4.077396809s ago: executing program 6 (id=2147): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="03c8000df7"], 0x11) 3.704219857s ago: executing program 6 (id=2150): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES16, @ANYRES16], 0x11, 0x2d2, &(0x7f0000000bc0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3.219938411s ago: executing program 8 (id=2153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, r1, 0xcc071acbf25dbf8f, 0x78bd11, 0x25dfdbfc}, 0x14}}, 0x20008d4) 3.219650551s ago: executing program 6 (id=2154): unshare(0x2040400) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000280)=@urb_type_bulk={0x3, {0x3}, 0x9, 0x21, 0xfffffffffffffffe, 0x0, 0x9, 0xfdae, 0xfffffffd, 0x0, 0x0, 0x0}) 2.963726614s ago: executing program 6 (id=2157): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) listen(r0, 0x2) 2.727093466s ago: executing program 6 (id=2159): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}], 0x1}) 2.380178553s ago: executing program 7 (id=2161): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 2.365597873s ago: executing program 5 (id=2162): syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x10000, &(0x7f0000000000)={[{@nolazytime}]}, 0x1, 0x84d, &(0x7f0000000940)="$eJzs3V9oZFcdB/DfnSRNdnfaZMUHK5aKFleQTjIT6dQ/YIr2wUprsQqCld2wO5mEncmEzCxuQqHpmw8+uA+rgihbCqIIkgef7MMGBUFooSyKqBCh+KDFRdGCPjlyZybZ0E6a0Gxzl97PB27u+TN3vufMZO6ZeToB5NYH0z+FiHvTchIxOWhPImKsVxqNmOs/7srs5mJ6JNHtPvWPpPeYZ2Y3F2PPNalTEbERERMR8cvxJE6Ovzm3vbZ+cb7RqK0O6tOd5sp0e239waXmfL1Wry1XqtXZcqVafqh62+Z698LzP3/1hUefffEX116/7wu/+lkSc1Ec9O2dx+3Uf03G4sk9baNJxBffibAMjPT/Q3rnHclohgPi0D537sRWISLeExEf6p0nYyT6b96F5af/NRn/e2K/ax/+wA//dpxjBQBun+5nIroAQK5k/f0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADuRN1uYv9/AMiZrL9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAneyZ2c3FneO4Mu/7WsTNRyJiop9/ZXD0e0djrneeiLGIOPnvJEb3XJtExMwR8xduRGw8FxHvGzb/pJc/lQ5uSP5IRJw7Yv6L14+Wv3LE/K9+54hPcESnf5pt/rU/ZZt/7iPZ5v/l1WzzH7g/2/yrrYit9P4zN+zzV9i9/8SQz99E/7IjeeTrt+5/V950/7uVP7LP/W/jkDkv3fjz5LD2wpcibj4X8f7RYfnJbn6yT/63D5n/5Ud/9Klh7c++FtF9PuJMDM/fmzXdaa5Mt9fWH1xqztdr9dpypVqdLVeq5Yeq0wtLjdpM/+/Q/HsaTzw2rP3l7f78T+6TvzGY/36v/7VDzv8rv746tTmk/Te/7ed/9MNv/f4Pe/3TNXHrkPnXt7/19LD23326n39hn/kf9P6/csj8V6Y+//Fh7TczXn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4O0qREQxkkJpt1wolEoRpyLivXGy0Gi1Ox9baF1avpD2RUzFWGFnp6XJfj1J6+Ve+Va98ob6bEScjohvjp/o1UvnW40LWU8eAHKmGLH9x5nPHnYLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyJVTb9j//6/j/f3/AYB3n2LE9taNF36Sll8fz3o0AMBxSNf/s5d/cDWs/wCQG9Z/AMgf6z8A5I/1HwDyx/oPAPlj/QeA/Nm7/gMAAAAAAAAAAAAAAAAAAADZevLxx9Oje2V2czGtL7fqSxcXVz5RmSk1L50vnW+trpTqrVa9USudbzUPfr5Gq7VSrsSly9OdWrsz3V5bP9tsXVrunF1qztdrZ2tjxzAn4GCVx/7z+6zHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHeS0/dv/SGJiI1PnugdqbsGffbqh3e3QtYDADIzkvUAgMyMZj0AIDN+4wPJAf0T+/b4BgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH6cudf+/5BX9v+H/LL/P+SX3Xshv/zGB+z/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAByv2jqRQGuwFXoxCoVSKuDsipmIsWVhq1GYi4p6IeGl8bDytl7MeNADwthQjtrfnlh/OehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAnaq+tX5xvNGqrCgoKCruFrO9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcPxubfqd9UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIEuF15KISI8zkw8Ur//9xy/v7b0r+e947xwR3/j+U9+9PN/prJbT9n/utne+N2ivZDUHAOCt7KzTO+s4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzTXlu/ON9o1FbfwULWcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgd/h8AAP//WEsF2g==") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x0) 2.296049177s ago: executing program 8 (id=2163): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f00000005c0)={&(0x7f0000000180), 0x6, &(0x7f00000001c0)={&(0x7f000001a740)=ANY=[], 0x48}, 0x2}, 0x20000080) 2.131552734s ago: executing program 8 (id=2164): r0 = socket$kcm(0x11, 0x20000000000000a, 0x300) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4b, &(0x7f0000000000), 0x4) 2.068625678s ago: executing program 7 (id=2165): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file1\x00', 0x40, &(0x7f0000002500)=ANY=[], 0x1, 0x1da, &(0x7f00000041c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c00"], 0x0) 1.913781016s ago: executing program 5 (id=2166): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000400)='./file1\x00', 0x10000, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0xfe, 0x687, &(0x7f0000000fc0)="$eJzs3c1vHGcdB/DvrNeOHaTUfUlaUCWsRioIi8QvcsFcGjggHypUhUOFxMVKnMbKxq1sF7kVAvN+5dA/oBx8QOICEvdIReKAgFvFzeKAKiFx6cm3oJmdtdfxS9Ybv8Tw+Viz+8w8r/PbmWd3dmVNgP9bc+NpPkiRufE31sr1zY3p1ubG9IU6u5WkTDeSZvspxVJSfJzcSHvJ58uNdfnioH4+XJy9+clnm5+215r1UpVvHFavN+v1krEkA/XzXoN9tXfrwPYON7+dKrb3sAzY1U7g4Kw93GP9KNWf8LwFngZF+31zj9HkYpLh+nNA6tmhcbqjO35HmuUAAADgnHpmK1tZy6WzHgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcJ/X9/4t6aXTSYyk69/8fqrelTt9snPGYn8SDsx4AAAAAAAAAAByDL25lK2u5lPrH/YftX/ZfqR5fqB4/l/eykoUs51rWMp/VrGY5k0lGuxoaWptfXV2e7KHm1L41p/ob/+/7qwYAAAAAAAAA/2t+mrn27/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPC0KJKB9lO1vNBJj6bRTDKcZKgst578vZM+J4r9Nj44/XEAAADAExnuo84zW9nKWi511h8W1TX/lep6eTjvZSmrWcxqWlnI7foaurzqb2xuTLc2N6bvb25MVx1//2Fbu51v/udIw6haTPu7h/17fqkqMZI7Way2XMutajC306hqll6qx7O97O7kJ+WYRl6v9Tiy2/Vz2dmvD/oW4Tg0jlphtKo0uB2RiXpsZUPPHh6Jx746zUN7mkxj+5ufFw7pqbNLxRFjfrFTL8kvH4n56//67fd6bOYEbEeikSoSU11H35XDY5586Y+/e+tua+ne3Tsr4yd2GJ2WR4+J6a5IvHiuI9E8YvmJKhKXt9fn8u18N+MZy5tZzmJ+kPmsZiH1zJj5+nguH0e7opTsidSNXWtvPm4kQ/Xr0p5FexnTWC5Uqfm8UtW9lMUUeSe3s5DXqr+pTOZrmclMZrte4csHvsLVvlUzbeNoZ/3VL2fnVP9VOVP3Vi/5c68Fj679llrG9dmuuHbPuaNVXveWnSg918P70RHnxuYX6kTZx8/6eds4MY9GYrIrEs8fHonfVOfGSmvp3vLd+XcPaH/9kfVXB3fSv+jrnfmkpp7yeHkuw/VMsvvoKPOe355ldsdrqP7FpZ3X2JN3ucoris6Z+p19ztQy4rNV6Sv7tjRV5b24N2+gHvk//tmVt+vzVt756wkFDIDjdfErF4dG/j3yt5GPRn4+cnfkjeFvXfj6hZeHMvinwW80JwZebbxc/CEf5Uc71/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/Vt7/4N58q7WwvH+icXDW8SaK+rY8B5VpZiSnMIzTTBTJ+rG3nLPfrx4SnZsIPmk7b914KnbnXCcGktRbfpzsHD/1S9TPzUWBc+H66v13r6+8/8FXF+/Pv73w9sLS4MzM7MTszGvT1+8sthYm2o9nPUrgJOx8HuixwuAJDwgAAAAAAAAAAAB4rP3+MeAvx/yfBl3djZ3hrgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn1Nx4moMpMjlxbaJc39yYbpVLJ71Tspmk0UiKHybFx8mNtJeMdjVXHNTPh4uzNz/5bPPTnbaanfKNw+r1Zr1eMpZkoH7eY6i/9m4d1F7Piu09LAN2tRM4OGv/DQAA//+iHAcm") truncate(&(0x7f00000000c0)='./file1\x00', 0x6e3) 1.768954992s ago: executing program 7 (id=2167): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x5, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000000), 0x90) 1.496014696s ago: executing program 7 (id=2169): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x6387, 0x4) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000001040)={0xa, 0x4e23, 0xcc, @loopback, 0x88}, 0x1c, 0x0}}], 0x1, 0x84) 1.490127876s ago: executing program 5 (id=2170): syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040b"], 0xe) 1.395828761s ago: executing program 9 (id=2171): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 1.21203767s ago: executing program 7 (id=2172): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2010846, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x11, 0x5000000, 0x8000000) 1.192926281s ago: executing program 8 (id=2173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000000)={0x18, r1, 0x303, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40008081}, 0x0) 1.091631946s ago: executing program 9 (id=2174): unshare(0x2c020400) r0 = socket(0xa, 0x3, 0x102) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000204000/0x4000)=nil, &(0x7f00001d3000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000463000/0x4000)=nil, &(0x7f0000799000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f00004b9000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) 903.955745ms ago: executing program 8 (id=2175): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4451, &(0x7f0000008900)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', &(0x7f00000001c0), 0x4000) 734.208293ms ago: executing program 9 (id=2176): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="d2ff03076003008ccd9e08f086dd", 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x3c) 666.967327ms ago: executing program 7 (id=2177): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000300)='./file1\x00', 0x1c886, &(0x7f0000005400)=ANY=[], 0x83, 0x6122, &(0x7f000000ea40)="$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") flock(0xffffffffffffffff, 0x6) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x3) 443.963668ms ago: executing program 9 (id=2178): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48e2f4f40e678ea7, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) 282.001886ms ago: executing program 9 (id=2179): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}]}, 0x2c}}, 0x40000) 141.202603ms ago: executing program 5 (id=2180): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000380), 0x1, 0x55c, &(0x7f0000002fc0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 0s ago: executing program 9 (id=2181): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000002000000000000000000000000000000000000200000000001000000000000000000000000000000000000000000000700000000000000000000000900000000000000000000000900000000000000000000000906"], 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0xd}, 0x80) kernel console output (not intermixed with test programs): exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02679c799 code=0x7ffc0000 [ 262.359786][ T27] audit: type=1326 audit(1773783280.712:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.7.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02679c799 code=0x7ffc0000 [ 262.478371][ T27] audit: type=1326 audit(1773783280.712:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.7.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02679c799 code=0x7ffc0000 [ 262.537815][ T8230] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1334'. [ 262.567692][ T27] audit: type=1326 audit(1773783280.712:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.7.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02679c799 code=0x7ffc0000 [ 262.681695][ T27] audit: type=1326 audit(1773783280.712:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.7.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fa02679c799 code=0x7ffc0000 [ 262.789143][ T27] audit: type=1326 audit(1773783280.712:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.7.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02679c799 code=0x7ffc0000 [ 262.811371][ C1] vkms_vblank_simulate: vblank timer overrun [ 262.860611][ T8241] device netdevsim0 entered promiscuous mode [ 262.886962][ T8242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.937318][ T27] audit: type=1326 audit(1773783280.712:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.7.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02679c799 code=0x7ffc0000 [ 262.959541][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.064198][ T27] audit: type=1326 audit(1773783280.712:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.7.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa02679c799 code=0x7ffc0000 [ 263.172861][ T27] audit: type=1326 audit(1773783280.712:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.7.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa02679c799 code=0x7ffc0000 [ 263.195405][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.348100][ T8251] loop6: detected capacity change from 0 to 2048 [ 263.493378][ T8251] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.186136][ T8279] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 264.333114][ T8247] loop7: detected capacity change from 0 to 40427 [ 264.392554][ T8247] F2FS-fs (loop7): invalid crc value [ 264.413156][ T8247] F2FS-fs (loop7): Found nat_bits in checkpoint [ 264.641928][ T8290] loop8: detected capacity change from 0 to 64 [ 264.656260][ T8247] F2FS-fs (loop7): Cannot turn on quotas: -2 on 1 [ 264.726067][ T8247] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 265.082811][ T8299] device ip6gretap0 entered promiscuous mode [ 265.145352][ T8299] device macsec1 entered promiscuous mode [ 265.318276][ T8277] loop2: detected capacity change from 0 to 32768 [ 265.401143][ T8308] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 265.406759][ T8277] [ 265.406759][ T8277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 265.406759][ T8277] [ 265.409475][ T8308] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 265.428106][ T8308] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 265.436057][ T8308] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 265.444047][ T8308] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 265.451974][ T8308] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 265.459913][ T8308] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 265.467831][ T8308] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 265.532675][ T8277] ERROR: (device loop2): diWrite: ixpxd invalid [ 265.532675][ T8277] [ 265.581304][ T8277] ERROR: (device loop2): txCommit: [ 265.581304][ T8277] [ 265.625627][ T8313] loop7: detected capacity change from 0 to 1024 [ 265.693535][ T8313] hfsplus: bad catalog entry type [ 265.807110][ T4268] [ 265.807110][ T4268] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 265.807110][ T4268] [ 265.869780][ T4268] [ 265.869780][ T4268] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 265.869780][ T4268] [ 265.869853][ T7553] hfsplus: b-tree write err: -5, ino 25 [ 265.943773][ T7553] hfsplus: b-tree write err: -5, ino 4 [ 265.980015][ T7553] hfsplus: b-tree write err: -5, ino 2 [ 266.237672][ T8327] loop6: detected capacity change from 0 to 256 [ 266.292897][ T8327] exfat: Deprecated parameter 'utf8' [ 266.354382][ T8327] exfat: Deprecated parameter 'namecase' [ 266.378738][ T8327] exfat: Deprecated parameter 'namecase' [ 266.436401][ T8327] exfat: Deprecated parameter 'utf8' [ 266.483628][ T8327] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 266.581839][ T27] audit: type=1800 audit(1773783285.052:60): pid=8327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1370" name="file1" dev="loop6" ino=1048757 res=0 errno=0 [ 266.625910][ T8339] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 266.792230][ T8332] loop8: detected capacity change from 0 to 4096 [ 266.819014][ T8332] ntfs: (device loop8): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 267.026467][ T8332] ntfs: volume version 3.1. [ 267.047174][ T8347] loop6: detected capacity change from 0 to 16 [ 267.112191][ T8347] erofs: (device loop6): check_layout_compatibility: unidentified incompatible feature a50000, please upgrade kernel version [ 267.137586][ T8332] ntfs: (device loop8): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp1251. You might want to try to use the mount option nls=utf8. [ 267.228990][ T8332] ntfs: (device loop8): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 267.238347][ T8349] netlink: 4348 bytes leftover after parsing attributes in process `syz.7.1377'. [ 267.316601][ T8351] loop2: detected capacity change from 0 to 64 [ 267.398680][ T8354] loop5: detected capacity change from 0 to 256 [ 267.501016][ T8354] FAT-fs (loop5): Directory bread(block 64) failed [ 267.542109][ T8354] FAT-fs (loop5): Directory bread(block 65) failed [ 267.594437][ T8354] FAT-fs (loop5): Directory bread(block 66) failed [ 267.634309][ T8354] FAT-fs (loop5): Directory bread(block 67) failed [ 267.641299][ T8354] FAT-fs (loop5): Directory bread(block 68) failed [ 267.687363][ T8358] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 267.693922][ T8358] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 267.708362][ T8354] FAT-fs (loop5): Directory bread(block 69) failed [ 267.741750][ T8354] FAT-fs (loop5): Directory bread(block 70) failed [ 267.768964][ T8354] FAT-fs (loop5): Directory bread(block 71) failed [ 267.794938][ T8358] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 267.801494][ T8358] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 267.804850][ T8354] FAT-fs (loop5): Directory bread(block 72) failed [ 267.855108][ T8354] FAT-fs (loop5): Directory bread(block 73) failed [ 267.857486][ T8358] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 267.904497][ T8358] comedi comedi3: 8255: I/O port conflict (0xfd,4) [ 267.934370][ T8358] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 267.966802][ T8358] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 267.995797][ T8358] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 268.060695][ T8358] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 268.089351][ T8358] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 268.123222][ T8358] comedi comedi3: 8255: I/O port conflict (0x400,4) [ 268.131138][ T8358] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 268.149334][ T8358] comedi comedi3: 8255: I/O port conflict (0x40000003,4) [ 268.175106][ T8358] comedi comedi3: 8255: I/O port conflict (0x89,4) [ 268.204407][ T8358] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 268.210981][ T8358] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 268.248789][ T8358] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 268.277523][ T8358] comedi comedi3: 8255: I/O port conflict (0x10000008,4) [ 268.291537][ T8358] comedi comedi3: 8255: I/O port conflict (0xf,4) [ 268.303108][ T8358] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 268.309796][ T8358] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 268.322040][ T4632] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 268.333027][ T8358] comedi comedi3: 8255: I/O port conflict (0xfffe,4) [ 268.356913][ T8358] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 268.384218][ T5007] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 268.510584][ T4632] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 268.524366][ T4315] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 268.532627][ T4632] usb 8-1: config 0 has no interface number 0 [ 268.568081][ T4632] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 268.584342][ T5007] usb 3-1: Using ep0 maxpacket: 8 [ 268.592185][ T5007] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 268.604229][ T4632] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.631797][ T4632] usb 8-1: config 0 descriptor?? [ 268.634826][ T5007] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.659145][ T4632] usb 8-1: selecting invalid altsetting 1 [ 268.683110][ T5007] usb 3-1: config 0 descriptor?? [ 268.688990][ T4632] dvb_ttusb_budget: ttusb_init_controller: error [ 268.707238][ T4632] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 268.729124][ T4315] usb 7-1: Using ep0 maxpacket: 32 [ 268.736253][ T4315] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.767966][ T4315] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.816811][ T4315] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 268.846412][ T4315] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 268.872860][ T4315] usb 7-1: Product: syz [ 268.898667][ T4315] usb 7-1: Manufacturer: syz [ 268.908175][ T4315] usb 7-1: SerialNumber: syz [ 268.935561][ T4406] usb 3-1: USB disconnect, device number 8 [ 268.967410][ T4315] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input11 [ 269.063742][ T4632] DVB: Unable to find symbol cx22700_attach() [ 269.192237][ T27] audit: type=1326 audit(1773783287.662:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.5.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6dd9c799 code=0x7ffc0000 [ 269.231216][ T4406] usb 7-1: USB disconnect, device number 4 [ 269.264525][ T4406] appletouch 7-1:1.0: input: appletouch disconnected [ 269.303660][ T27] audit: type=1326 audit(1773783287.732:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.5.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f6d6dd9c799 code=0x7ffc0000 [ 269.392256][ T4632] DVB: Unable to find symbol tda10046_attach() [ 269.402423][ T4632] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 269.429715][ T27] audit: type=1326 audit(1773783287.732:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.5.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6dd9c799 code=0x7ffc0000 [ 269.495557][ T4632] usb 8-1: USB disconnect, device number 5 [ 269.571285][ T27] audit: type=1326 audit(1773783287.732:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.5.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6dd9c799 code=0x7ffc0000 [ 269.696582][ T27] audit: type=1326 audit(1773783287.732:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.5.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f6d6dd9c799 code=0x7ffc0000 [ 269.764306][ T27] audit: type=1326 audit(1773783287.732:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.5.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6dd9c799 code=0x7ffc0000 [ 269.796359][ T8398] loop5: detected capacity change from 0 to 4096 [ 269.859873][ T8398] ntfs: volume version 3.1. [ 269.882845][ T8382] loop8: detected capacity change from 0 to 32768 [ 269.992129][ T8382] XFS (loop8): Mounting V5 Filesystem [ 270.297438][ T8382] XFS (loop8): Ending clean mount [ 270.362084][ T8382] XFS (loop8): Quotacheck needed: Please wait. [ 270.508719][ T8382] XFS (loop8): Quotacheck: Done. [ 270.712503][ T8433] loop2: detected capacity change from 0 to 2048 [ 270.723656][ T7288] XFS (loop8): Unmounting Filesystem [ 270.853274][ T8433] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 270.932009][ T8433] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1111: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 271.058481][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 271.608188][ T8427] loop7: detected capacity change from 0 to 32768 [ 271.816705][ T8432] loop6: detected capacity change from 0 to 32768 [ 272.010680][ T8432] XFS (loop6): Mounting V5 Filesystem [ 272.224912][ T8463] loop5: detected capacity change from 0 to 4096 [ 272.302297][ T8432] XFS (loop6): Ending clean mount [ 272.338663][ T8472] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 272.571463][ T8445] loop2: detected capacity change from 0 to 32768 [ 272.594808][ T6302] XFS (loop6): Unmounting Filesystem [ 272.612559][ T8475] loop8: detected capacity change from 0 to 1024 [ 273.055072][ T11] hfsplus: b-tree write err: -5, ino 25 [ 273.060898][ T11] hfsplus: b-tree write err: -5, ino 4 [ 273.155687][ T11] hfsplus: b-tree write err: -5, ino 2 [ 273.521282][ T8492] loop7: detected capacity change from 0 to 1024 [ 273.559357][ T8495] netlink: 642 bytes leftover after parsing attributes in process `syz.8.1424'. [ 273.597117][ T8492] EXT4-fs: Ignoring removed bh option [ 273.646167][ T8492] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 273.796274][ T8492] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 274.130031][ T8512] loop2: detected capacity change from 0 to 64 [ 274.141703][ T6388] EXT4-fs (loop7): unmounting filesystem. [ 274.159411][ T8512] hfs: unable to locate alternate MDB [ 274.234621][ T8512] hfs: continuing without an alternate MDB [ 274.391669][ T8520] loop8: detected capacity change from 0 to 256 [ 274.405684][ T8515] loop5: detected capacity change from 0 to 1764 [ 274.420873][ T8520] exfat: Deprecated parameter 'utf8' [ 274.448683][ T8520] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x3e6496f2, utbl_chksum : 0xe619d30d) [ 274.528912][ T8515] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 274.833125][ T8531] squashfs: Bad value for 'errors' [ 274.954527][ T4406] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 275.164174][ T4406] usb 8-1: Using ep0 maxpacket: 16 [ 275.175144][ T4406] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.199853][ T4406] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.232475][ T4406] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 275.256809][ T4406] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 275.274427][ T4632] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 275.276779][ T4406] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.321358][ T4406] usb 8-1: config 0 descriptor?? [ 275.441112][ T8547] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 275.464321][ T4632] usb 3-1: Using ep0 maxpacket: 16 [ 275.485284][ T4632] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.526339][ T4632] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.552314][ T4632] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 275.581047][ T4632] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.605337][ T4632] usb 3-1: config 0 descriptor?? [ 275.728230][ T8547] overlayfs: upper fs does not support tmpfile. [ 275.754083][ T4406] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 275.778800][ T4406] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 275.779078][ T8547] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 275.832577][ T8537] set_capacity_and_notify: 2 callbacks suppressed [ 275.832594][ T8537] loop6: detected capacity change from 0 to 32768 [ 275.851882][ T4406] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 275.865779][ T8547] ntfs3: loop8: ino=1b, "file0" attr_set_size [ 275.894975][ T8547] overlayfs: failed to verify origin (/, ino=5, err=-2) [ 275.918030][ T4406] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 275.929965][ T8547] overlayfs: failed to verify upper root origin [ 275.947839][ T4406] microsoft 0003:045E:07DA.0009: no inputs found [ 275.956078][ T4406] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 276.011677][ T8537] XFS (loop6): Mounting V5 Filesystem [ 276.024645][ T4406] usb 8-1: USB disconnect, device number 6 [ 276.033481][ T4632] ntrig 0003:1B96:0008.000A: nested delimiters [ 276.048541][ T4632] ntrig 0003:1B96:0008.000A: item 0 1 2 10 parsing failed [ 276.056574][ T4632] ntrig 0003:1B96:0008.000A: parse failed [ 276.062388][ T4632] ntrig: probe of 0003:1B96:0008.000A failed with error -22 [ 276.169454][ T8537] XFS (loop6): Ending clean mount [ 276.179275][ T8537] XFS (loop6): Quotacheck needed: Please wait. [ 276.193168][ T7288] ntfs3: loop8: ntfs_sync_fs r=1a failed, -22. [ 276.258536][ T7288] ntfs3: loop8: ntfs_evict_inode r=1a failed, -22. [ 276.275799][ T4632] usb 3-1: USB disconnect, device number 9 [ 276.299253][ T7288] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 276.382992][ T8537] XFS (loop6): Quotacheck: Done. [ 276.554931][ T6302] XFS (loop6): Unmounting Filesystem [ 276.571383][ T8559] fido_id[8559]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 277.060635][ T8581] netlink: 'syz.5.1447': attribute type 10 has an invalid length. [ 277.112145][ T8587] loop7: detected capacity change from 0 to 512 [ 277.210723][ T8587] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 277.216758][ T8581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.238762][ T8581] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 277.292414][ T8587] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 277.389192][ T8594] loop6: detected capacity change from 0 to 256 [ 277.472556][ T6388] EXT4-fs (loop7): unmounting filesystem. [ 277.520719][ T8594] FAT-fs (loop6): Directory bread(block 64) failed [ 277.554554][ T8594] FAT-fs (loop6): Directory bread(block 65) failed [ 277.613832][ T8594] FAT-fs (loop6): Directory bread(block 66) failed [ 277.669570][ T8594] FAT-fs (loop6): Directory bread(block 67) failed [ 277.700009][ T8594] FAT-fs (loop6): Directory bread(block 68) failed [ 277.720238][ T8594] FAT-fs (loop6): Directory bread(block 69) failed [ 277.779545][ T8594] FAT-fs (loop6): Directory bread(block 70) failed [ 277.809816][ T8594] FAT-fs (loop6): Directory bread(block 71) failed [ 277.841830][ T8594] FAT-fs (loop6): Directory bread(block 72) failed [ 277.870321][ T8594] FAT-fs (loop6): Directory bread(block 73) failed [ 278.293818][ T8613] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1458'. [ 278.543904][ T8621] loop5: detected capacity change from 0 to 512 [ 278.571464][ T8621] EXT4-fs: Ignoring removed mblk_io_submit option [ 278.577599][ T8621] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 278.579477][ T8621] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 278.890631][ T8598] loop2: detected capacity change from 0 to 40427 [ 278.974721][ T8598] F2FS-fs (loop2): invalid crc value [ 278.991926][ T8598] F2FS-fs (loop2): Found nat_bits in checkpoint [ 279.219762][ T8598] F2FS-fs (loop2): Start checkpoint disabled! [ 279.240298][ T8633] loop8: detected capacity change from 0 to 256 [ 279.251347][ T8610] loop7: detected capacity change from 0 to 32768 [ 279.274522][ T8598] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 279.290383][ T8633] exfat: Deprecated parameter 'utf8' [ 279.317009][ T8610] XFS: attr2 mount option is deprecated. [ 279.388813][ T8633] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 279.484809][ T8610] XFS (loop7): Mounting V5 Filesystem [ 279.546219][ T8646] program syz.6.1464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.665663][ T8610] XFS (loop7): Ending clean mount [ 279.767732][ T8610] XFS (loop7): Quotacheck needed: Please wait. [ 279.897160][ T8610] XFS (loop7): Quotacheck: Done. [ 279.984891][ T11] kworker/u4:1: attempt to access beyond end of device [ 279.984891][ T11] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 280.110822][ T6388] XFS (loop7): Unmounting Filesystem [ 280.249877][ T8659] fuse: Invalid rootmode [ 281.005571][ T8676] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1465'. [ 281.254491][ T8683] program syz.8.1476 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.976211][ T8666] loop6: detected capacity change from 0 to 32768 [ 282.107741][ T8666] XFS (loop6): Mounting V5 Filesystem [ 282.116146][ T8705] loop2: detected capacity change from 0 to 4096 [ 282.205921][ T8716] loop7: detected capacity change from 0 to 2048 [ 282.220567][ T8672] loop5: detected capacity change from 0 to 32768 [ 282.240788][ T8708] loop8: detected capacity change from 0 to 4096 [ 282.267081][ T8708] ntfs3: loop8: Different NTFS' sector size (1024) and media sector size (512) [ 282.306685][ T8666] XFS (loop6): Ending clean mount [ 282.323506][ T8719] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.339843][ T8666] XFS (loop6): Quotacheck needed: Please wait. [ 282.372105][ T8720] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.471842][ T8672] XFS (loop5): Mounting V5 Filesystem [ 282.627364][ T8666] XFS (loop6): Quotacheck: Done. [ 282.706593][ T8672] XFS (loop5): Ending clean mount [ 282.732476][ T8672] XFS (loop5): Quotacheck needed: Please wait. [ 282.825587][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 282.825603][ T27] audit: type=1800 audit(1773783301.292:67): pid=8708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1485" name="file1" dev="loop8" ino=30 res=0 errno=0 [ 282.928485][ T8732] ntfs3: loop8: ntfs_sync_inode r=1e failed, -22. [ 282.945148][ T8672] XFS (loop5): Quotacheck: Done. [ 282.960554][ T8732] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 283.032042][ T8708] ntfs3: loop8: ntfs_sync_inode r=1e failed, -22. [ 283.048831][ T6302] XFS (loop6): Unmounting Filesystem [ 283.147978][ T6275] XFS (loop5): Unmounting Filesystem [ 283.245654][ T9] ntfs3: loop8: ntfs3_write_inode r=1e failed, -22. [ 283.291730][ T7288] ntfs3: loop8: ntfs_evict_inode r=1e failed, -22. [ 283.464334][ T8738] tipc: Started in network mode [ 283.469294][ T8738] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 283.544351][ T8738] tipc: Enabling of bearer rejected, failed to enable media [ 284.044042][ T8733] loop7: detected capacity change from 0 to 32768 [ 284.095187][ T4632] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 284.108312][ T4315] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 284.294914][ T4632] usb 9-1: Using ep0 maxpacket: 16 [ 284.336344][ T4315] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.352220][ T4315] usb 3-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 284.358439][ T4632] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.383366][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.409483][ T4632] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.420296][ T4315] usb 3-1: config 0 descriptor?? [ 284.436103][ T4632] usb 9-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 284.469294][ T4315] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 284.494329][ T5007] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 284.504449][ T4632] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.534728][ T4632] usb 9-1: config 0 descriptor?? [ 284.700136][ T5007] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 284.720348][ T5007] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.742710][ T5007] usb 7-1: Product: syz [ 284.755287][ T5007] usb 7-1: Manufacturer: syz [ 284.759965][ T5007] usb 7-1: SerialNumber: syz [ 284.782318][ T4315] usb 3-1: USB disconnect, device number 10 [ 284.810830][ T5007] usb 7-1: config 0 descriptor?? [ 284.843978][ T5007] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 284.915767][ T5007] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 284.965144][ T4632] hid (null): bogus close delimiter [ 284.977847][ T4632] wacom 0003:056A:0084.000B: bogus close delimiter [ 284.992610][ T5007] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 285.012749][ T5007] usb 7-1: media controller created [ 285.014447][ T4632] wacom 0003:056A:0084.000B: item 0 4 2 10 parsing failed [ 285.032236][ T8780] loop7: detected capacity change from 0 to 4096 [ 285.047935][ T8769] dvb-usb: bulk message failed: -22 (7/0) [ 285.057644][ T4632] wacom 0003:056A:0084.000B: parse failed [ 285.092538][ T4632] wacom: probe of 0003:056A:0084.000B failed with error -22 [ 285.101752][ T5007] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.107668][ T8780] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 285.201800][ T4315] usb 9-1: USB disconnect, device number 2 [ 285.445826][ T6388] ntfs3: loop7: ntfs_sync_fs r=1a failed, -22. [ 285.469812][ T5007] DVB: Unable to find symbol mt352_attach() [ 285.484010][ T6388] ntfs3: loop7: ntfs_evict_inode r=1a failed, -22. [ 285.504025][ T6388] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 285.766059][ T8788] loop2: detected capacity change from 0 to 4096 [ 285.793976][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1499'. [ 285.889455][ T5007] DVB: Unable to find symbol nxt6000_attach() [ 285.898035][ T5007] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 285.950969][ T5007] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input13 [ 285.983559][ T8788] ntfs3: loop2: ino=21, "file1" mmap(write) compressed not supported [ 286.012335][ T5007] dvb-usb: schedule remote query interval to 1000 msecs. [ 286.048863][ T5007] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 286.067566][ T8799] loop8: detected capacity change from 0 to 256 [ 286.112523][ T5007] dvb-usb: bulk message failed: -22 (7/0) [ 286.132461][ T8799] exfat: Deprecated parameter 'namecase' [ 286.144847][ T5007] dvb-usb: bulk message failed: -22 (7/0) [ 286.191624][ T5007] usb 7-1: USB disconnect, device number 5 [ 286.208310][ T4268] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 286.248319][ T8799] exfat: Deprecated parameter 'utf8' [ 286.253883][ T4268] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 286.297288][ T8802] loop5: detected capacity change from 0 to 2048 [ 286.351013][ T8807] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 286.370408][ T5007] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 286.390916][ T8799] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 287.045608][ T8807] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 287.077513][ T8807] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 287.156884][ T8807] Remounting filesystem read-only [ 287.173760][ T6275] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 287.236133][ T8829] tipc: Started in network mode [ 287.241093][ T8829] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 287.297227][ T8829] tipc: Enabled bearer , priority 10 [ 287.404845][ T8835] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1513'. [ 288.418121][ T125] tipc: Node number set to 4269801492 [ 288.853347][ T8889] loop2: detected capacity change from 0 to 256 [ 289.473366][ T8907] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1541'. [ 289.736161][ T8912] loop2: detected capacity change from 0 to 4096 [ 289.785215][ T8912] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 289.918949][ T27] audit: type=1326 audit(1773783308.392:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8919 comm="syz.5.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6dd9c799 code=0x7ffc0000 [ 290.022969][ T27] audit: type=1326 audit(1773783308.402:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8919 comm="syz.5.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6dd9c799 code=0x7ffc0000 [ 290.093006][ T8912] overlayfs: upper fs does not support tmpfile. [ 290.152473][ T27] audit: type=1326 audit(1773783308.422:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8919 comm="syz.5.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f6d6dd9c799 code=0x7ffc0000 [ 290.165183][ T8912] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 290.214837][ T8912] ntfs3: loop2: ino=1b, "file0" attr_set_size [ 290.244377][ T8912] overlayfs: failed to verify origin (/, ino=5, err=-2) [ 290.277045][ T8912] overlayfs: failed to verify upper root origin [ 290.308438][ T27] audit: type=1326 audit(1773783308.432:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8919 comm="syz.5.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6dd9c799 code=0x7ffc0000 [ 290.374847][ T8930] loop8: detected capacity change from 0 to 512 [ 290.382037][ T8930] EXT4-fs: Ignoring removed bh option [ 290.451696][ T27] audit: type=1326 audit(1773783308.432:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8919 comm="syz.5.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6dd9c799 code=0x7ffc0000 [ 290.491230][ T8930] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 290.513866][ T4268] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 290.543191][ T4268] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 290.561443][ T4268] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 290.570522][ T27] audit: type=1326 audit(1773783308.432:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8919 comm="syz.5.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f6d6dd9c799 code=0x7ffc0000 [ 290.608514][ T8930] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 290.624816][ T27] audit: type=1326 audit(1773783308.432:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8919 comm="syz.5.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6dd9c799 code=0x7ffc0000 [ 290.648216][ T27] audit: type=1326 audit(1773783308.432:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8919 comm="syz.5.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6dd9c799 code=0x7ffc0000 [ 290.773160][ T8930] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.1550: bg 0: block 248: padding at end of block bitmap is not set [ 290.857453][ T8930] Quota error (device loop8): write_blk: dquota write failed [ 290.884644][ T8930] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 290.935723][ T8930] EXT4-fs error (device loop8): ext4_acquire_dquot:6835: comm syz.8.1550: Failed to acquire dquot type 1 [ 291.006345][ T8930] EXT4-fs (loop8): 1 truncate cleaned up [ 291.012107][ T8930] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 291.109112][ T8951] netlink: 'syz.7.1555': attribute type 11 has an invalid length. [ 291.137942][ T8951] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1555'. [ 291.255258][ T8930] EXT4-fs: Ignoring removed orlov option [ 291.260998][ T8930] EXT4-fs: Ignoring removed nobh option [ 291.301514][ T8930] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 291.319323][ T8930] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 291.538014][ T7288] EXT4-fs (loop8): unmounting filesystem. [ 291.689749][ T8964] loop5: detected capacity change from 0 to 1024 [ 291.748590][ T8967] loop8: detected capacity change from 0 to 64 [ 291.855230][ T8969] loop7: detected capacity change from 0 to 1024 [ 291.907996][ T8964] hfsplus: bad catalog entry type [ 292.258039][ T46] hfsplus: b-tree write err: -5, ino 25 [ 292.280073][ T4326] hfsplus: b-tree write err: -5, ino 25 [ 292.306261][ T4326] hfsplus: b-tree write err: -5, ino 4 [ 292.311893][ T4326] hfsplus: b-tree write err: -5, ino 2 [ 292.317741][ T46] hfsplus: b-tree write err: -5, ino 4 [ 292.323379][ T46] hfsplus: b-tree write err: -5, ino 2 [ 292.426286][ T46] hfsplus: b-tree write err: -5, ino 17 [ 292.853197][ T8958] loop2: detected capacity change from 0 to 40427 [ 292.934302][ T8958] F2FS-fs (loop2): invalid crc value [ 292.977020][ T8958] F2FS-fs (loop2): Found nat_bits in checkpoint [ 293.211406][ T8958] F2FS-fs (loop2): Start checkpoint disabled! [ 293.219398][ T9000] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1573'. [ 293.284345][ T8958] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 293.474340][ T125] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 293.704187][ T125] usb 7-1: Using ep0 maxpacket: 16 [ 293.725864][ T125] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.774160][ T125] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.783979][ T125] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 293.809553][ T7553] kworker/u4:8: attempt to access beyond end of device [ 293.809553][ T7553] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 293.870588][ T125] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 293.902941][ T125] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.971419][ T125] usb 7-1: config 0 descriptor?? [ 294.201923][ T8995] loop7: detected capacity change from 0 to 32768 [ 294.286536][ T9017] loop8: detected capacity change from 0 to 1024 [ 294.315841][ T9017] EXT4-fs: Ignoring removed mblk_io_submit option [ 294.367459][ T8995] XFS (loop7): Mounting V5 Filesystem [ 294.417488][ T9017] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 294.434659][ T125] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 294.483172][ T125] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 294.501413][ T8995] XFS (loop7): Ending clean mount [ 294.540165][ T8995] XFS (loop7): Quotacheck needed: Please wait. [ 294.570532][ T9017] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 294.610364][ T125] microsoft 0003:045E:07DA.000C: No inputs registered, leaving [ 294.653179][ T125] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 294.695455][ T125] microsoft 0003:045E:07DA.000C: no inputs found [ 294.701894][ T125] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 294.784503][ T125] usb 7-1: USB disconnect, device number 6 [ 294.855697][ T7288] EXT4-fs (loop8): unmounting filesystem. [ 294.954556][ T8995] XFS (loop7): Quotacheck: Done. [ 295.206812][ T6388] XFS (loop7): Unmounting Filesystem [ 295.424210][ T4406] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 295.466410][ T9036] fido_id[9036]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 295.646487][ T4406] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 295.664277][ T4406] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.715233][ T4406] usb 6-1: config 0 descriptor?? [ 295.733895][ T4406] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 296.172795][ T4406] gspca_cpia1: usb_control_msg 03, error -32 [ 296.190957][ T4406] gspca_cpia1: usb_control_msg 03, error -71 [ 296.218362][ T4406] gspca_cpia1: usb_control_msg 01, error -71 [ 296.247235][ T4406] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 296.321063][ T4406] usb 6-1: USB disconnect, device number 4 [ 297.086007][ T9084] loop6: detected capacity change from 0 to 1024 [ 297.330481][ T9084] hfsplus: bad catalog entry type [ 297.608213][ T30] hfsplus: b-tree write err: -5, ino 25 [ 297.614047][ T30] hfsplus: b-tree write err: -5, ino 4 [ 297.683811][ T30] hfsplus: b-tree write err: -5, ino 2 [ 297.715097][ T9097] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1598'. [ 297.780340][ T9097] tipc: Invalid UDP bearer configuration [ 297.780380][ T9097] tipc: Enabling of bearer rejected, failed to enable media [ 297.938750][ T9078] loop8: detected capacity change from 0 to 32768 [ 298.001080][ T9078] [ 298.001080][ T9078] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 298.001080][ T9078] [ 298.082259][ T9078] read_mapping_page failed! [ 298.082378][ T9078] ERROR: (device loop8): txCommit: [ 298.082378][ T9078] [ 298.090399][ T9104] jfs_rmdir: dtDelete returned -2 [ 298.327907][ T9] ERROR: (device loop8): diWrite: ixpxd invalid [ 298.327907][ T9] [ 298.328040][ T9] ERROR: (device loop8): txCommit: [ 298.328040][ T9] [ 298.328094][ T9] jfs_write_inode: jfs_commit_inode failed! [ 298.334162][ T7288] [ 298.334162][ T7288] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 298.334162][ T7288] [ 298.334558][ T7288] [ 298.334558][ T7288] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 298.334558][ T7288] [ 298.834203][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 298.839554][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 299.043140][ T9123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1608'. [ 299.443465][ T9128] loop8: detected capacity change from 0 to 4096 [ 299.456311][ T9086] loop5: detected capacity change from 0 to 32768 [ 299.676478][ T27] audit: type=1800 audit(1773783318.152:76): pid=9128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1609" name="file1" dev="loop8" ino=30 res=0 errno=0 [ 299.742452][ T9086] XFS (loop5): Mounting V5 Filesystem [ 300.114301][ T9086] XFS (loop5): Ending clean mount [ 300.346181][ T9163] [U] [ 300.349393][ T9163] [U] [ 300.352130][ T9163] [U] [ 300.354863][ T9163] [U] [ 300.357598][ T9163] [U] [ 300.360338][ T9163] [U] [ 300.363071][ T9163] [U] [ 300.365812][ T9163] [U] [ 300.484896][ T9163] [U] [ 300.487689][ T9163] [U] [ 300.490425][ T9163] [U] [ 300.503330][ T9160] [U] [ 300.638967][ T9162] loop7: detected capacity change from 0 to 8192 [ 300.666364][ T6275] XFS (loop5): Unmounting Filesystem [ 300.776901][ T9162] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 300.844234][ T9162] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 300.853510][ T9162] REISERFS (device loop7): using ordered data mode [ 300.907782][ T9162] reiserfs: using flush barriers [ 300.964401][ T9162] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 301.024844][ T9162] REISERFS (device loop7): checking transaction log (loop7) [ 301.070821][ T9162] REISERFS (device loop7): Using r5 hash to sort names [ 301.119602][ T9162] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 301.231663][ T9162] REISERFS warning (device loop7): super-6502 reiserfs_getopt: unknown mount option "journal_ioprio=0x0000000000000006" [ 302.152934][ T9208] comedi: No check for data length of config insn id 1003 is implemented [ 302.175284][ T9208] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 302.214338][ T9208] comedi: Assuming n=15 is correct [ 302.514985][ T9218] loop5: detected capacity change from 0 to 512 [ 302.564453][ T9218] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 302.677387][ T9218] EXT4-fs (loop5): 1 truncate cleaned up [ 302.683128][ T9218] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 302.684975][ T5007] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 302.877182][ T6275] EXT4-fs (loop5): unmounting filesystem. [ 302.914323][ T5007] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 302.932876][ T5007] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 302.968701][ T5007] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 302.997496][ T5007] usb 9-1: config 220 has no interface number 2 [ 303.036703][ T5007] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 303.070543][ T5007] usb 9-1: config 220 interface 0 has no altsetting 0 [ 303.094308][ T5007] usb 9-1: config 220 interface 76 has no altsetting 0 [ 303.121470][ T5007] usb 9-1: config 220 interface 1 has no altsetting 0 [ 303.157964][ T5007] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 303.204242][ T5007] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.229207][ T5007] usb 9-1: Product: syz [ 303.243694][ T5007] usb 9-1: Manufacturer: syz [ 303.284190][ T5007] usb 9-1: SerialNumber: syz [ 303.371146][ T9246] loop7: detected capacity change from 0 to 64 [ 303.524769][ T5007] usb 9-1: Found UVC 7.01 device syz (8086:0b07) [ 303.531631][ T5007] usb 9-1: No valid video chain found. [ 303.567178][ T9251] loop5: detected capacity change from 0 to 512 [ 303.573671][ T5007] usb 9-1: selecting invalid altsetting 0 [ 303.600078][ T9250] loop6: detected capacity change from 0 to 1024 [ 303.631244][ T5007] usb 9-1: selecting invalid altsetting 0 [ 303.642383][ T9251] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 303.668843][ T5007] usbtest: probe of 9-1:220.1 failed with error -22 [ 303.701588][ T9251] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 303.724714][ T5007] usb 9-1: USB disconnect, device number 3 [ 303.777584][ T9251] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.1649: Invalid block bitmap block 0 in block_group 0 [ 303.802774][ T9251] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 303.864421][ T9251] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.1649: attempt to clear invalid blocks 983261 len 1 [ 303.953839][ T9251] EXT4-fs error (device loop5): __ext4_get_inode_loc:4513: comm syz.5.1649: Invalid inode table block 0 in block_group 0 [ 303.974461][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 303.994199][ T9251] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 304.004725][ T4353] hfsplus: b-tree write err: -5, ino 25 [ 304.010504][ T4353] hfsplus: b-tree write err: -5, ino 4 [ 304.024239][ T4353] hfsplus: b-tree write err: -5, ino 2 [ 304.030537][ T9235] loop2: detected capacity change from 0 to 40427 [ 304.040770][ T9251] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 304.106544][ T9251] EXT4-fs error (device loop5): __ext4_get_inode_loc:4513: comm syz.5.1649: Invalid inode table block 0 in block_group 0 [ 304.129889][ T9235] F2FS-fs (loop2): invalid crc value [ 304.161321][ T9235] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 304.195083][ T9257] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1650'. [ 304.206515][ T9251] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 304.246362][ T9251] EXT4-fs error (device loop5): ext4_truncate:4318: inode #11: comm syz.5.1649: mark_inode_dirty error [ 304.308920][ T9251] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 304.338560][ T9251] EXT4-fs error (device loop5): __ext4_get_inode_loc:4513: comm syz.5.1649: Invalid inode table block 0 in block_group 0 [ 304.415104][ T9251] EXT4-fs (loop5): 1 truncate cleaned up [ 304.422940][ T9235] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 304.430934][ T9251] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 304.498798][ T9235] F2FS-fs (loop2): Start checkpoint disabled! [ 304.540771][ T9251] EXT4-fs error (device loop5): __ext4_get_inode_loc:4513: comm syz.5.1649: Invalid inode table block 0 in block_group 0 [ 304.574242][ T9235] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 304.634315][ T9251] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 304.678524][ T9268] loop6: detected capacity change from 0 to 1024 [ 304.823555][ T6275] EXT4-fs (loop5): unmounting filesystem. [ 304.931061][ T4353] kworker/u4:7: attempt to access beyond end of device [ 304.931061][ T4353] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 304.994850][ T9] hfsplus: b-tree write err: -5, ino 25 [ 305.000655][ T9] hfsplus: b-tree write err: -5, ino 4 [ 305.037412][ T9] hfsplus: b-tree write err: -5, ino 2 [ 305.094218][ T9] hfsplus: b-tree write err: -5, ino 26 [ 305.230405][ T9279] sp0: Synchronizing with TNC [ 305.261086][ T9283] sp0: Found TNC [ 305.353443][ T9278] [U] è` [ 306.074743][ T125] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 306.231317][ T9307] loop7: detected capacity change from 0 to 4096 [ 306.276631][ T125] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 306.295187][ T9307] EXT4-fs (loop7): Test dummy encryption mode enabled [ 306.318920][ T125] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 306.333588][ T9307] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 306.443234][ T125] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 306.513337][ T125] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 306.570579][ T125] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.626055][ T125] usb 9-1: Product: syz [ 306.630316][ T125] usb 9-1: Manufacturer: syz [ 306.664959][ T125] usb 9-1: SerialNumber: syz [ 306.676654][ T125] usb 9-1: config 0 descriptor?? [ 306.917195][ T125] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 307.104786][ T9335] loop6: detected capacity change from 0 to 4096 [ 307.193706][ T125] usb 9-1: USB disconnect, device number 4 [ 307.255004][ T9307] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 307.268329][ T9335] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 307.412741][ T27] audit: type=1800 audit(1773783325.882:77): pid=9335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1677" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 307.486459][ T27] audit: type=1804 audit(1773783325.912:78): pid=9346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1677" name="/newroot/175/file0/file1" dev="loop6" ino=15 res=1 errno=0 [ 307.570672][ T9351] loop5: detected capacity change from 0 to 1024 [ 307.584747][ T6388] EXT4-fs (loop7): unmounting filesystem. [ 307.757341][ T6302] EXT4-fs (loop6): unmounting filesystem. [ 307.931432][ T4353] hfsplus: b-tree write err: -5, ino 25 [ 307.938144][ T4353] hfsplus: b-tree write err: -5, ino 4 [ 307.946758][ T4353] hfsplus: b-tree write err: -5, ino 2 [ 308.517206][ T27] audit: type=1400 audit(1773783326.992:79): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=262620616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 pid=9379 comm="syz.6.1691" [ 309.134237][ T27] audit: type=1326 audit(1773783327.612:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.8.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105919c799 code=0x7ff00000 [ 309.180304][ T9406] loop5: detected capacity change from 0 to 256 [ 309.251832][ T27] audit: type=1326 audit(1773783327.632:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.8.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105919c799 code=0x7ff00000 [ 309.303115][ T9406] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 309.371457][ T9410] loop2: detected capacity change from 0 to 1024 [ 309.403885][ T27] audit: type=1326 audit(1773783327.632:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.8.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105919c799 code=0x7ff00000 [ 309.453018][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1706'. [ 309.463087][ T27] audit: type=1326 audit(1773783327.632:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.8.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105919c799 code=0x7ff00000 [ 309.527031][ T27] audit: type=1326 audit(1773783327.632:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.8.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105919c799 code=0x7ff00000 [ 309.603520][ T9410] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 2: comm syz.2.1704: lblock 2 mapped to illegal pblock 2 (length 1) [ 309.684226][ T27] audit: type=1326 audit(1773783327.632:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.8.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105919c799 code=0x7ff00000 [ 309.706451][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.730797][ T9410] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 309.790177][ T9410] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 48: comm syz.2.1704: lblock 0 mapped to illegal pblock 48 (length 1) [ 309.861504][ T9410] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.1704: Failed to acquire dquot type 0 [ 309.888381][ T9410] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 309.943842][ T9410] EXT4-fs error (device loop2): ext4_evict_inode:279: inode #11: comm syz.2.1704: mark_inode_dirty error [ 309.997873][ T9410] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 310.061944][ T9410] EXT4-fs (loop2): 1 orphan inode deleted [ 310.076764][ T63] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 310.109136][ T9410] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 310.131992][ T63] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:4: Failed to release dquot type 0 [ 310.361215][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 310.389353][ T4353] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 310.443711][ T4353] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:7: Failed to release dquot type 0 [ 310.517086][ T4268] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 310.591049][ T4268] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 310.613747][ T4268] EXT4-fs error (device loop2): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 310.657422][ T9412] loop6: detected capacity change from 0 to 32768 [ 310.666858][ T9443] netlink: 'syz.5.1716': attribute type 11 has an invalid length. [ 310.694231][ T4315] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 310.713402][ T9412] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12 [ 310.906873][ T4315] usb 8-1: Using ep0 maxpacket: 16 [ 310.916992][ T4315] usb 8-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 310.978999][ T4315] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.007965][ T4315] usb 8-1: Product: syz [ 311.032703][ T4315] usb 8-1: Manufacturer: syz [ 311.054255][ T4315] usb 8-1: SerialNumber: syz [ 311.086303][ T4315] usb 8-1: config 0 descriptor?? [ 311.114182][ T4315] gspca_main: spca508-2.14.0 probing 041e:4018 [ 311.137139][ T4772] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12 [ 311.301223][ T4315] gspca_spca508: reg_read err -32 [ 311.327692][ T9457] loop8: detected capacity change from 0 to 64 [ 311.525513][ T4315] gspca_spca508: reg_read err -71 [ 311.536434][ T4315] gspca_spca508: reg_read err -71 [ 311.553638][ T4315] gspca_spca508: reg_read err -71 [ 311.564422][ T4315] gspca_spca508: reg write: error -71 [ 311.574556][ T4315] spca508: probe of 8-1:0.0 failed with error -71 [ 311.624277][ T4315] usb 8-1: USB disconnect, device number 7 [ 312.028655][ T9471] loop2: detected capacity change from 0 to 2048 [ 312.081116][ T9474] loop6: detected capacity change from 0 to 2048 [ 312.129818][ T9471] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 312.154461][ T9474] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 312.554028][ T9485] loop2: detected capacity change from 0 to 1024 [ 312.625140][ T9485] EXT4-fs: Ignoring removed orlov option [ 312.663522][ T9491] loop7: detected capacity change from 0 to 256 [ 312.695128][ T9491] exfat: Deprecated parameter 'utf8' [ 312.776113][ T9485] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 312.791515][ T9491] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 313.166519][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 313.754969][ T9522] loop6: detected capacity change from 0 to 4096 [ 313.825453][ T9522] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 313.854260][ T9522] UDF-fs: Scanning with blocksize 512 failed [ 313.867377][ T9528] netlink: 'syz.5.1746': attribute type 62 has an invalid length. [ 313.927941][ T9522] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.042878][ T9522] UDF-fs: error (device loop6): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 314.154300][ T9522] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1328) has too big (2088) entry at pos 0 [ 314.958522][ T9555] syz.8.1755 uses obsolete (PF_INET,SOCK_PACKET) [ 314.983085][ T9554] loop5: detected capacity change from 0 to 512 [ 315.022385][ T9552] loop2: detected capacity change from 0 to 2048 [ 315.075366][ T9552] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 315.096047][ T9554] EXT4-fs: inline encryption not supported [ 315.140439][ T9552] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 315.170654][ T9554] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 315.230843][ T9554] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 315.272981][ T9520] loop7: detected capacity change from 0 to 32768 [ 315.361145][ T9554] __quota_error: 64 callbacks suppressed [ 315.361162][ T9554] Quota error (device loop5): do_insert_tree: Free block already used in tree: block 1 [ 315.380597][ T9520] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 315.443600][ T9520] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 315.453885][ T9554] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 315.494280][ T9554] EXT4-fs error (device loop5): ext4_acquire_dquot:6835: comm syz.5.1757: Failed to acquire dquot type 1 [ 315.506100][ T4632] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 315.551164][ T9554] EXT4-fs (loop5): Remounting filesystem read-only [ 315.585075][ T9554] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1111: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 315.645507][ T9554] EXT4-fs (loop5): Remounting filesystem read-only [ 315.652427][ T9554] EXT4-fs error (device loop5): ext4_do_update_inode:5272: inode #12: comm syz.5.1757: corrupted inode contents [ 315.692883][ T9520] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 10ms [ 315.706531][ T4632] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.731002][ T9554] EXT4-fs (loop5): Remounting filesystem read-only [ 315.744465][ T4406] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 315.751802][ T4406] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 315.754301][ T4632] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 315.768551][ T9554] EXT4-fs error (device loop5): ext4_dirty_inode:6137: inode #12: comm syz.5.1757: mark_inode_dirty error [ 315.810563][ T4632] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 315.831148][ T9554] EXT4-fs (loop5): Remounting filesystem read-only [ 315.854270][ T9554] EXT4-fs error (device loop5): ext4_do_update_inode:5272: inode #12: comm syz.5.1757: corrupted inode contents [ 315.874143][ T4632] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 315.905626][ T9554] EXT4-fs (loop5): Remounting filesystem read-only [ 315.915815][ T4632] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 315.933930][ T9554] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #12: comm syz.5.1757: mark_inode_dirty error [ 315.954274][ T4632] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.962334][ T4632] usb 3-1: Product: syz [ 315.992228][ T9554] EXT4-fs (loop5): Remounting filesystem read-only [ 316.011395][ T4632] usb 3-1: Manufacturer: syz [ 316.016914][ T9554] EXT4-fs error (device loop5): ext4_do_update_inode:5272: inode #12: comm syz.5.1757: corrupted inode contents [ 316.034254][ T4632] usb 3-1: SerialNumber: syz [ 316.069621][ T4406] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 317ms [ 316.091089][ T9554] EXT4-fs (loop5): Remounting filesystem read-only [ 316.110477][ T4406] gfs2: fsid=syz:syz.0: jid=0: Done [ 316.128767][ T9554] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 316.138711][ T9520] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 316.181973][ T9554] EXT4-fs (loop5): Remounting filesystem read-only [ 316.224561][ T9554] EXT4-fs error (device loop5): ext4_do_update_inode:5272: inode #12: comm syz.5.1757: corrupted inode contents [ 316.262042][ T4284] Bluetooth: hci2: Unknown advertising packet type: 0x3030 [ 316.262223][ T4284] Bluetooth: hci2: Unknown advertising packet type: 0x110 [ 316.270464][ T4284] Bluetooth: hci2: Unknown advertising packet type: 0x200 [ 316.278012][ T4284] Bluetooth: hci2: Malformed LE Event: 0x0d [ 316.310368][ T4632] usb 3-1: 0:2 : does not exist [ 316.320318][ T9554] EXT4-fs (loop5): Remounting filesystem read-only [ 316.343431][ T4632] usb 3-1: USB disconnect, device number 11 [ 316.374339][ T9554] EXT4-fs error (device loop5): ext4_truncate:4318: inode #12: comm syz.5.1757: mark_inode_dirty error [ 316.464754][ T9554] EXT4-fs (loop5): Remounting filesystem read-only [ 316.471469][ T9554] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 316.514520][ T9554] EXT4-fs (loop5): Remounting filesystem read-only [ 316.533099][ T9554] EXT4-fs (loop5): 1 truncate cleaned up [ 316.563901][ T9554] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 316.626231][ T4357] udevd[4357]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 316.777229][ T9520] gfs2: fsid=syz:syz.0: found 1 quota changes [ 316.915900][ T6275] EXT4-fs (loop5): unmounting filesystem. [ 317.073619][ T6388] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 317.073619][ T6388] inode = 11 2339 [ 317.073619][ T6388] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 317.125164][ T6388] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 317.147428][ T9592] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1767'. [ 317.152564][ T6388] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:6388 [syz-executor] gfs2_quota_sync+0x32c/0x700 [ 317.195663][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1767'. [ 317.217326][ T6388] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 317.241887][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.262006][ T6388] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 317.345595][ T6388] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 317.417445][ T6388] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 317.426160][ T6388] gfs2: fsid=syz:syz.0: File system withdrawn [ 317.432308][ T6388] CPU: 1 PID: 6388 Comm: syz-executor Not tainted syzkaller #0 [ 317.439893][ T6388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 317.450002][ T6388] Call Trace: [ 317.453333][ T6388] [ 317.456324][ T6388] dump_stack_lvl+0x188/0x24e [ 317.461149][ T6388] ? kobject_uevent_env+0x35f/0x8a0 [ 317.466400][ T6388] ? show_regs_print_info+0x12/0x12 [ 317.471690][ T6388] ? load_image+0x400/0x400 [ 317.476250][ T6388] ? kobject_uevent_env+0x35f/0x8a0 [ 317.481600][ T6388] gfs2_withdraw+0x1398/0x16c0 [ 317.486436][ T6388] ? gfs2_lm+0x240/0x240 [ 317.490739][ T6388] ? gfs2_consist_inode_i+0xf1/0x110 [ 317.496081][ T6388] gfs2_inode_refresh+0xb64/0xfd0 [ 317.501175][ T6388] ? gfs2_inode_metasync+0xf0/0xf0 [ 317.506346][ T6388] ? gfs2_glock_nq+0xcf0/0x14e0 [ 317.511259][ T6388] gfs2_instantiate+0x15e/0x210 [ 317.516165][ T6388] gfs2_glock_wait+0x1d0/0x2a0 [ 317.520984][ T6388] do_sync+0x4bf/0xc40 [ 317.525114][ T6388] ? gfs2_quota_sync+0x32c/0x700 [ 317.530115][ T6388] ? slot_put+0x1e0/0x1e0 [ 317.534502][ T6388] ? gfs2_quota_sync+0x32c/0x700 [ 317.539496][ T6388] ? do_raw_spin_unlock+0x11d/0x230 [ 317.544746][ T6388] gfs2_quota_sync+0x32c/0x700 [ 317.549568][ T6388] gfs2_sync_fs+0x48/0xb0 [ 317.553988][ T6388] sync_filesystem+0xe6/0x220 [ 317.558732][ T6388] generic_shutdown_super+0x6b/0x340 [ 317.564083][ T6388] kill_block_super+0x7c/0xe0 [ 317.568831][ T6388] deactivate_locked_super+0x93/0xf0 [ 317.574201][ T6388] cleanup_mnt+0x42c/0x4b0 [ 317.578670][ T6388] ? lockdep_hardirqs_on+0x94/0x140 [ 317.583919][ T6388] task_work_run+0x1d0/0x260 [ 317.588574][ T6388] ? task_work_cancel+0x220/0x220 [ 317.593655][ T6388] ? exit_to_user_mode_loop+0x3b/0x110 [ 317.599219][ T6388] exit_to_user_mode_loop+0xe6/0x110 [ 317.604556][ T6388] exit_to_user_mode_prepare+0xee/0x180 [ 317.610148][ T6388] syscall_exit_to_user_mode+0x16/0x40 [ 317.615766][ T6388] do_syscall_64+0x58/0xa0 [ 317.620236][ T6388] ? clear_bhb_loop+0x60/0xb0 [ 317.624962][ T6388] ? clear_bhb_loop+0x60/0xb0 [ 317.629702][ T6388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.635658][ T6388] RIP: 0033:0x7fa02679d9d7 [ 317.640130][ T6388] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 317.659782][ T6388] RSP: 002b:00007ffdb67f1a08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 317.668243][ T6388] RAX: 0000000000000000 RBX: 00007fa026832050 RCX: 00007fa02679d9d7 [ 317.676254][ T6388] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb67f1ac0 [ 317.684265][ T6388] RBP: 00007ffdb67f1ac0 R08: 00007ffdb67f2ac0 R09: 00000000ffffffff [ 317.692277][ T6388] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdb67f2b50 [ 317.700290][ T6388] R13: 00007fa026832050 R14: 000000000004c8a5 R15: 00007ffdb67f2b90 [ 317.708320][ T6388] [ 317.721215][ T9603] loop2: detected capacity change from 0 to 128 [ 317.802066][ T9603] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 317.887308][ T9603] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 318.004272][ T9603] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 318.064389][ T9603] UDF-fs: error (device loop2): udf_count_free_bitmap: udf_count_free failed [ 318.384356][ T4268] UDF-fs: error (device loop2): udf_read_inode: (ino 104) failed !bh [ 318.425515][ T4268] UDF-fs: error (device loop2): udf_read_inode: (ino 104) failed !bh [ 318.511263][ T6388] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 318.554199][ T6388] CPU: 0 PID: 6388 Comm: syz-executor Not tainted syzkaller #0 [ 318.561845][ T6388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 318.571941][ T6388] Call Trace: [ 318.575263][ T6388] [ 318.578233][ T6388] dump_stack_lvl+0x188/0x24e [ 318.582964][ T6388] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 318.588218][ T6388] ? show_regs_print_info+0x12/0x12 [ 318.593479][ T6388] ? load_image+0x400/0x400 [ 318.598040][ T6388] ? do_raw_spin_unlock+0x11d/0x230 [ 318.603300][ T6388] gfs2_assert_warn_i+0x18f/0x2c0 [ 318.608384][ T6388] gfs2_quota_cleanup+0x4b4/0x6a0 [ 318.613471][ T6388] gfs2_put_super+0x22f/0x8c0 [ 318.618220][ T6388] ? gfs2_evict_inode+0x11d0/0x11d0 [ 318.623484][ T6388] generic_shutdown_super+0x130/0x340 [ 318.628913][ T6388] kill_block_super+0x7c/0xe0 [ 318.633667][ T6388] deactivate_locked_super+0x93/0xf0 [ 318.639039][ T6388] cleanup_mnt+0x42c/0x4b0 [ 318.643537][ T6388] ? lockdep_hardirqs_on+0x94/0x140 [ 318.648784][ T6388] task_work_run+0x1d0/0x260 [ 318.653433][ T6388] ? task_work_cancel+0x220/0x220 [ 318.658518][ T6388] ? exit_to_user_mode_loop+0x3b/0x110 [ 318.664044][ T6388] exit_to_user_mode_loop+0xe6/0x110 [ 318.669386][ T6388] exit_to_user_mode_prepare+0xee/0x180 [ 318.674985][ T6388] syscall_exit_to_user_mode+0x16/0x40 [ 318.680591][ T6388] do_syscall_64+0x58/0xa0 [ 318.685063][ T6388] ? clear_bhb_loop+0x60/0xb0 [ 318.689789][ T6388] ? clear_bhb_loop+0x60/0xb0 [ 318.694523][ T6388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.700460][ T6388] RIP: 0033:0x7fa02679d9d7 [ 318.704914][ T6388] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 318.724569][ T6388] RSP: 002b:00007ffdb67f1a08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 318.733023][ T6388] RAX: 0000000000000000 RBX: 00007fa026832050 RCX: 00007fa02679d9d7 [ 318.741044][ T6388] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb67f1ac0 [ 318.749073][ T6388] RBP: 00007ffdb67f1ac0 R08: 00007ffdb67f2ac0 R09: 00000000ffffffff [ 318.757100][ T6388] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdb67f2b50 [ 318.765124][ T6388] R13: 00007fa026832050 R14: 000000000004c8a5 R15: 00007ffdb67f2b90 [ 318.773182][ T6388] [ 319.031978][ T9605] loop6: detected capacity change from 0 to 32768 [ 319.103000][ T9605] (syz.6.1774,9605,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 319.163142][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1786'. [ 319.210060][ T9605] (syz.6.1774,9605,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 319.382180][ T9605] JBD2: Ignoring recovery information on journal [ 319.595497][ T9605] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 319.687592][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.979181][ T6302] ocfs2: Unmounting device (7,6) on (node local) [ 319.987590][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.417108][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.656867][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.695805][ T9683] device bond_slave_0 entered promiscuous mode [ 320.702760][ T9683] device bond_slave_1 entered promiscuous mode [ 320.709085][ T9683] device batadv0 entered promiscuous mode [ 320.775872][ T9683] device macsec1 entered promiscuous mode [ 320.781774][ T9683] device bond0 entered promiscuous mode [ 320.868380][ T9683] device bond0 left promiscuous mode [ 320.895126][ T9683] device bond_slave_0 left promiscuous mode [ 320.901193][ T9683] device bond_slave_1 left promiscuous mode [ 320.907543][ T9683] device batadv0 left promiscuous mode [ 321.235817][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 321.250265][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 321.259768][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 321.273174][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 321.283224][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 321.291064][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 321.450167][ T9698] smc: net device bond0 applied user defined pnetid SYZ2 [ 321.571521][ T9684] loop6: detected capacity change from 0 to 32768 [ 321.619899][ T63] tipc: Left network mode [ 321.733585][ T9684] XFS (loop6): Mounting V5 Filesystem [ 321.886225][ T9684] XFS (loop6): Ending clean mount [ 322.135796][ T6302] XFS (loop6): Unmounting Filesystem [ 322.318097][ T9694] chnl_net:caif_netlink_parms(): no params data found [ 322.564819][ T9733] mkiss: ax0: crc mode is auto. [ 322.616649][ T9740] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 322.623256][ T9740] comedi comedi3: 8255: I/O port conflict (0x8001022,4) [ 322.630651][ T9740] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 322.638925][ T9740] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 323.064240][ T9738] loop7: detected capacity change from 0 to 4096 [ 323.105293][ T9738] ntfs: (device loop7): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 323.152785][ T9694] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.180826][ T9694] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.238110][ T9694] device bridge_slave_0 entered promiscuous mode [ 323.309272][ T9738] ntfs: volume version 3.1. [ 323.314609][ T4280] Bluetooth: hci2: command 0x0409 tx timeout [ 323.397864][ T9763] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1820'. [ 323.417081][ T9763] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1820'. [ 323.451915][ T9694] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.483426][ T9694] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.521907][ T9694] device bridge_slave_1 entered promiscuous mode [ 323.766038][ T9694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.916404][ T9694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.024412][ T4274] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 324.039354][ T9779] loop6: detected capacity change from 0 to 512 [ 324.224583][ T9694] team0: Port device team_slave_0 added [ 324.244297][ T4274] usb 9-1: Using ep0 maxpacket: 16 [ 324.254733][ T4274] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.281162][ T9783] loop7: detected capacity change from 0 to 256 [ 324.304197][ T4274] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.320391][ T4274] usb 9-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 324.328434][ T9694] team0: Port device team_slave_1 added [ 324.367568][ T9783] FAT-fs (loop7): Directory bread(block 64) failed [ 324.379484][ T4274] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.402725][ T9783] FAT-fs (loop7): Directory bread(block 65) failed [ 324.434291][ T9783] FAT-fs (loop7): Directory bread(block 66) failed [ 324.452526][ T4274] usb 9-1: config 0 descriptor?? [ 324.487099][ T9783] FAT-fs (loop7): Directory bread(block 67) failed [ 324.493817][ T9783] FAT-fs (loop7): Directory bread(block 68) failed [ 324.514596][ T9783] FAT-fs (loop7): Directory bread(block 69) failed [ 324.529588][ T9783] FAT-fs (loop7): Directory bread(block 70) failed [ 324.540569][ T9783] FAT-fs (loop7): Directory bread(block 71) failed [ 324.579095][ T9694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.588329][ T63] IPVS: stopping master sync thread 8339 ... [ 324.595893][ T9783] FAT-fs (loop7): Directory bread(block 72) failed [ 324.620721][ T9783] FAT-fs (loop7): Directory bread(block 73) failed [ 324.627670][ T9694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.722333][ T9694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.876167][ T4274] apple 0003:05AC:024B.000D: item fetching failed at offset 19/69 [ 324.894866][ T4274] apple 0003:05AC:024B.000D: parse failed [ 324.904460][ T4274] apple: probe of 0003:05AC:024B.000D failed with error -22 [ 325.036586][ T9694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.043608][ T9694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.083679][ T4315] usb 9-1: USB disconnect, device number 5 [ 325.125663][ T9694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.338277][ T9781] loop5: detected capacity change from 0 to 32768 [ 325.414995][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 325.552296][ T9797] loop7: detected capacity change from 0 to 2048 [ 325.615758][ T9797] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 325.667254][ T63] device hsr_slave_0 left promiscuous mode [ 325.711557][ T9804] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 325.744325][ T63] device hsr_slave_1 left promiscuous mode [ 325.792811][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.855040][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.902926][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.938154][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.955920][ T9810] loop6: detected capacity change from 0 to 16 [ 325.978977][ T63] device hsr0 left promiscuous mode [ 325.990283][ T9810] erofs: (device loop6): mounted with root inode @ nid 36. [ 325.998173][ T63] bridge0: port 4(hsr0) entered disabled state [ 326.076624][ T63] bridge0: port 3(batadv0) entered disabled state [ 326.105644][ T63] device bridge_slave_1 left promiscuous mode [ 326.111956][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.161759][ T63] device bridge_slave_0 left promiscuous mode [ 326.196330][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.359692][ T63] device veth1_macvtap left promiscuous mode [ 326.376652][ T63] device veth0_macvtap left promiscuous mode [ 326.404703][ T63] device veth1_vlan left promiscuous mode [ 326.420836][ T63] device veth0_vlan left promiscuous mode [ 327.487306][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 327.721952][ T63] team0 (unregistering): Port device team_slave_1 removed [ 327.780015][ T63] team0 (unregistering): Port device team_slave_0 removed [ 327.839966][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.906723][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.326270][ T63] bond0 (unregistering): Released all slaves [ 328.443034][ T9807] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1838'. [ 328.466019][ T9694] device hsr_slave_0 entered promiscuous mode [ 328.473291][ T9694] device hsr_slave_1 entered promiscuous mode [ 328.503586][ T9694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.532578][ T9694] Cannot create hsr debugfs directory [ 328.647484][ T9845] loop8: detected capacity change from 0 to 512 [ 328.731089][ T9845] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 328.782011][ T9849] loop6: detected capacity change from 0 to 512 [ 328.866486][ T9849] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 328.906882][ T9845] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3850: comm syz.8.1850: Allocating blocks 41-42 which overlap fs metadata [ 329.048495][ T9849] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 329.067154][ T9694] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 329.114982][ T9845] Quota error (device loop8): write_blk: dquota write failed [ 329.122459][ T9845] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 329.146609][ T9849] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 329.186042][ T9694] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 329.260501][ T9845] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3850: comm syz.8.1850: Allocating blocks 41-42 which overlap fs metadata [ 329.305281][ T9694] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 329.322049][ T6302] EXT4-fs (loop6): unmounting filesystem. [ 329.368297][ T9694] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 329.427727][ T9845] Quota error (device loop8): write_blk: dquota write failed [ 329.445275][ T9845] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 329.493521][ T9845] EXT4-fs error (device loop8): ext4_acquire_dquot:6835: comm syz.8.1850: Failed to acquire dquot type 1 [ 329.554497][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 329.584973][ T9845] EXT4-fs error (device loop8): mb_free_blocks:1824: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 329.744289][ T9845] EXT4-fs error (device loop8): ext4_do_update_inode:5272: inode #12: comm syz.8.1850: corrupted inode contents [ 329.782924][ T9694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.787750][ T9845] EXT4-fs error (device loop8): ext4_dirty_inode:6137: inode #12: comm syz.8.1850: mark_inode_dirty error [ 329.842499][ T9845] EXT4-fs error (device loop8): ext4_do_update_inode:5272: inode #12: comm syz.8.1850: corrupted inode contents [ 329.846578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 329.900328][ T9845] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #12: comm syz.8.1850: mark_inode_dirty error [ 329.946843][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.956636][ T9845] EXT4-fs error (device loop8): ext4_do_update_inode:5272: inode #12: comm syz.8.1850: corrupted inode contents [ 330.002191][ T9694] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.018243][ T9845] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 330.050201][ T9845] EXT4-fs error (device loop8): ext4_do_update_inode:5272: inode #12: comm syz.8.1850: corrupted inode contents [ 330.076090][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.116275][ T9845] EXT4-fs error (device loop8): ext4_truncate:4318: inode #12: comm syz.8.1850: mark_inode_dirty error [ 330.154722][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.180052][ T9845] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 330.193836][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.201073][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.210878][ T9845] EXT4-fs (loop8): 1 truncate cleaned up [ 330.231905][ T9845] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 330.284703][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 330.364828][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.373745][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.415794][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.423098][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.487312][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 330.496775][ T7288] EXT4-fs (loop8): unmounting filesystem. [ 330.554499][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.637216][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.692374][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.710724][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.732691][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.769367][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.790435][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.857235][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 330.895135][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.927290][ T9694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 330.965028][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 331.303694][ T9880] loop7: detected capacity change from 0 to 32768 [ 331.415498][ T27] audit: type=1800 audit(1773783349.892:147): pid=9880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1860" name="file1" dev="loop7" ino=7 res=0 errno=0 [ 331.470395][ T9880] ialloc: diAlloc returned -5! [ 331.588436][ T9915] loop6: detected capacity change from 0 to 1024 [ 331.669622][ T9918] netlink: 612 bytes leftover after parsing attributes in process `syz.8.1874'. [ 331.714658][ T9918] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 331.969266][ T9924] loop5: detected capacity change from 0 to 2048 [ 332.099022][ T9930] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 332.371426][ T9927] loop6: detected capacity change from 0 to 8192 [ 332.456045][ T9927] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 332.511494][ T9927] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 332.538627][ T9694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.559925][ T9927] REISERFS (device loop6): using ordered data mode [ 332.619871][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.628077][ T9927] reiserfs: using flush barriers [ 332.670401][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.710354][ T9927] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 332.834618][ T9927] REISERFS (device loop6): checking transaction log (loop6) [ 333.271131][ T9927] REISERFS (device loop6): Using tea hash to sort names [ 333.314741][ T9927] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 333.399930][ T9927] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 333.546484][ T9927] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 333.770909][ T9973] loop7: detected capacity change from 0 to 256 [ 333.830321][ T9973] exfat: Deprecated parameter 'namecase' [ 333.941086][ T9973] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 334.664801][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 334.696638][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 334.769339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 334.791220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 334.823673][ T9694] device veth0_vlan entered promiscuous mode [ 334.844647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 334.874751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 334.900632][ T9694] device veth1_vlan entered promiscuous mode [ 334.976864][T10003] device batadv0 entered promiscuous mode [ 334.983513][T10003] device macsec1 entered promiscuous mode [ 335.025570][T10003] device batadv0 left promiscuous mode [ 335.164624][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 335.190980][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 335.211044][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 335.245055][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 335.275776][ T9694] device veth0_macvtap entered promiscuous mode [ 335.330733][ T9694] device veth1_macvtap entered promiscuous mode [ 335.412429][ T9694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.433323][ T9694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.461005][ T9694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.512491][ T9694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.553277][ T9694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.586950][ T9694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.623797][ T9694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.674202][ T9694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.714771][ T9694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.749292][ T9694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.785320][ T9694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.824726][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 335.843950][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 335.881888][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 335.908818][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 335.945110][ T9694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.974486][ T9694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.012754][ T9694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.071136][ T9694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.104174][ T9694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.135601][ T9694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.167944][ T9694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.204211][ T9694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.223778][ T9694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.235803][T10036] loop8: detected capacity change from 0 to 8 [ 336.256990][ T9694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.282889][ T9694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.311233][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 336.324706][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 336.357618][ T9694] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.384810][ T9694] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.421057][ T9694] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.459621][ T9694] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.681152][T10001] loop5: detected capacity change from 0 to 32768 [ 336.745749][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.793840][T10001] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 336.804294][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.837991][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 336.875339][T10001] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 336.914358][ T9721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.917359][T10044] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 336.938565][ T9721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.949859][T10001] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 336.975297][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 337.006867][ T4409] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 337.016430][ T4409] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 337.129581][ T4409] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 113ms [ 337.179730][ T4409] gfs2: fsid=syz:syz.0: jid=0: Done [ 337.210600][T10001] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 337.446268][T10058] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1792'. [ 337.484213][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1792'. [ 337.787865][T10001] gfs2: fsid=syz:syz.0: found 1 quota changes [ 337.891019][T10062] loop8: detected capacity change from 0 to 4096 [ 337.953593][ T6275] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 337.953593][ T6275] inode = 11 2339 [ 337.953593][ T6275] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 338.014237][ T6275] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 338.024435][ T6275] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:6275 [syz-executor] gfs2_quota_sync+0x32c/0x700 [ 338.094165][ T6275] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000201 s:0 p:0 [ 338.123595][T10062] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 338.131871][ T6275] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 338.200647][ T6275] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 338.250376][ T6275] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 338.314582][ T6275] gfs2: fsid=syz:syz.0: File system withdrawn [ 338.320742][ T6275] CPU: 0 PID: 6275 Comm: syz-executor Not tainted syzkaller #0 [ 338.328330][ T6275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 338.338427][ T6275] Call Trace: [ 338.341747][ T6275] [ 338.344724][ T6275] dump_stack_lvl+0x188/0x24e [ 338.349460][ T6275] ? kobject_uevent_env+0x35f/0x8a0 [ 338.354723][ T6275] ? show_regs_print_info+0x12/0x12 [ 338.359978][ T6275] ? load_image+0x400/0x400 [ 338.364531][ T6275] ? kobject_uevent_env+0x35f/0x8a0 [ 338.369792][ T6275] gfs2_withdraw+0x1398/0x16c0 [ 338.374615][ T6275] ? gfs2_lm+0x240/0x240 [ 338.379045][ T6275] ? gfs2_consist_inode_i+0xf1/0x110 [ 338.384394][ T6275] gfs2_inode_refresh+0xb64/0xfd0 [ 338.389479][ T6275] ? gfs2_inode_metasync+0xf0/0xf0 [ 338.394686][ T6275] ? gfs2_glock_nq+0xcf0/0x14e0 [ 338.399613][ T6275] gfs2_instantiate+0x15e/0x210 [ 338.404518][ T6275] gfs2_glock_wait+0x1d0/0x2a0 [ 338.409331][ T6275] do_sync+0x4bf/0xc40 [ 338.413461][ T6275] ? gfs2_quota_sync+0x32c/0x700 [ 338.418464][ T6275] ? slot_put+0x1e0/0x1e0 [ 338.422864][ T6275] ? gfs2_quota_sync+0x32c/0x700 [ 338.427887][ T6275] ? do_raw_spin_unlock+0x11d/0x230 [ 338.433133][ T6275] gfs2_quota_sync+0x32c/0x700 [ 338.437963][ T6275] gfs2_sync_fs+0x48/0xb0 [ 338.442342][ T6275] sync_filesystem+0xe6/0x220 [ 338.447072][ T6275] generic_shutdown_super+0x6b/0x340 [ 338.452407][ T6275] kill_block_super+0x7c/0xe0 [ 338.457135][ T6275] deactivate_locked_super+0x93/0xf0 [ 338.462464][ T6275] cleanup_mnt+0x42c/0x4b0 [ 338.466933][ T6275] ? lockdep_hardirqs_on+0x94/0x140 [ 338.472178][ T6275] task_work_run+0x1d0/0x260 [ 338.476823][ T6275] ? task_work_cancel+0x220/0x220 [ 338.481897][ T6275] ? exit_to_user_mode_loop+0x3b/0x110 [ 338.487437][ T6275] exit_to_user_mode_loop+0xe6/0x110 [ 338.492782][ T6275] exit_to_user_mode_prepare+0xee/0x180 [ 338.498383][ T6275] syscall_exit_to_user_mode+0x16/0x40 [ 338.503881][ T6275] do_syscall_64+0x58/0xa0 [ 338.508356][ T6275] ? clear_bhb_loop+0x60/0xb0 [ 338.513126][ T6275] ? clear_bhb_loop+0x60/0xb0 [ 338.518040][ T6275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.523977][ T6275] RIP: 0033:0x7f6d6dd9d9d7 [ 338.528444][ T6275] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 338.548094][ T6275] RSP: 002b:00007ffdbe168b68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 338.556601][ T6275] RAX: 0000000000000000 RBX: 00007f6d6de32050 RCX: 00007f6d6dd9d9d7 [ 338.564626][ T6275] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdbe168c20 [ 338.572633][ T6275] RBP: 00007ffdbe168c20 R08: 00007ffdbe169c20 R09: 00000000ffffffff [ 338.580642][ T6275] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdbe169cb0 [ 338.588661][ T6275] R13: 00007f6d6de32050 R14: 0000000000051bd5 R15: 00007ffdbe169cf0 [ 338.596737][ T6275] [ 338.850585][T10051] loop7: detected capacity change from 0 to 32768 [ 338.968633][T10051] non-latin1 character 0xffff found in JFS file name [ 339.011591][T10087] loop8: detected capacity change from 0 to 16 [ 339.023230][T10051] mount with iocharset=utf8 to access [ 339.083774][T10086] loop6: detected capacity change from 0 to 2048 [ 339.098798][T10087] erofs: (device loop8): mounted with root inode @ nid 36. [ 339.220161][T10086] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 339.320444][ T27] audit: type=1800 audit(1773783357.792:148): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1934" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 339.423914][T10094] loop9: detected capacity change from 0 to 2048 [ 339.515040][T10100] loop8: detected capacity change from 0 to 256 [ 339.522232][T10100] exfat: Deprecated parameter 'utf8' [ 339.545366][T10094] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 339.574315][T10100] exfat: Deprecated parameter 'namecase' [ 339.580790][ T6275] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 339.663580][ T6275] CPU: 0 PID: 6275 Comm: syz-executor Not tainted syzkaller #0 [ 339.668143][T10100] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 339.671196][ T6275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 339.693306][ T6275] Call Trace: [ 339.696632][ T6275] [ 339.697456][ T6302] EXT4-fs (loop6): unmounting filesystem. [ 339.699586][ T6275] dump_stack_lvl+0x188/0x24e [ 339.710049][ T6275] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 339.715223][ T6275] ? show_regs_print_info+0x12/0x12 [ 339.720498][ T6275] ? load_image+0x400/0x400 [ 339.725059][ T6275] ? do_raw_spin_unlock+0x11d/0x230 [ 339.730316][ T6275] gfs2_assert_warn_i+0x18f/0x2c0 [ 339.735393][ T6275] gfs2_quota_cleanup+0x4b4/0x6a0 [ 339.740455][ T6275] gfs2_put_super+0x22f/0x8c0 [ 339.745175][ T6275] ? gfs2_evict_inode+0x11d0/0x11d0 [ 339.750405][ T6275] generic_shutdown_super+0x130/0x340 [ 339.755805][ T6275] kill_block_super+0x7c/0xe0 [ 339.760522][ T6275] deactivate_locked_super+0x93/0xf0 [ 339.765844][ T6275] cleanup_mnt+0x42c/0x4b0 [ 339.770285][ T6275] ? lockdep_hardirqs_on+0x94/0x140 [ 339.775513][ T6275] task_work_run+0x1d0/0x260 [ 339.780147][ T6275] ? task_work_cancel+0x220/0x220 [ 339.785203][ T6275] ? exit_to_user_mode_loop+0x3b/0x110 [ 339.790694][ T6275] exit_to_user_mode_loop+0xe6/0x110 [ 339.796009][ T6275] exit_to_user_mode_prepare+0xee/0x180 [ 339.801585][ T6275] syscall_exit_to_user_mode+0x16/0x40 [ 339.807067][ T6275] do_syscall_64+0x58/0xa0 [ 339.811516][ T6275] ? clear_bhb_loop+0x60/0xb0 [ 339.816246][ T6275] ? clear_bhb_loop+0x60/0xb0 [ 339.820947][ T6275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.826865][ T6275] RIP: 0033:0x7f6d6dd9d9d7 [ 339.831299][ T6275] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 339.850952][ T6275] RSP: 002b:00007ffdbe168b68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 339.859400][ T6275] RAX: 0000000000000000 RBX: 00007f6d6de32050 RCX: 00007f6d6dd9d9d7 [ 339.867396][ T6275] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdbe168c20 [ 339.875387][ T6275] RBP: 00007ffdbe168c20 R08: 00007ffdbe169c20 R09: 00000000ffffffff [ 339.883399][ T6275] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdbe169cb0 [ 339.891426][ T6275] R13: 00007f6d6de32050 R14: 0000000000051bd5 R15: 00007ffdbe169cf0 [ 339.899439][ T6275] [ 340.055918][ T9694] EXT4-fs (loop9): unmounting filesystem. [ 340.438339][T10113] loop8: detected capacity change from 0 to 4096 [ 340.512008][T10113] ntfs: (device loop8): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 340.560330][T10113] ntfs: (device loop8): ntfs_read_locked_inode(): $DATA attribute is missing. [ 340.599636][T10113] ntfs: (device loop8): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 340.625151][T10113] ntfs: (device loop8): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 340.724035][T10113] ntfs: volume version 3.1. [ 340.794880][T10113] ntfs: (device loop8): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp852. You might want to try to use the mount option nls=utf8. [ 340.832815][T10113] ntfs: (device loop8): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 340.866546][T10113] ntfs: (device loop8): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp852. You might want to try to use the mount option nls=utf8. [ 340.956054][T10113] ntfs: (device loop8): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 341.250025][T10135] loop7: detected capacity change from 0 to 512 [ 341.371252][T10142] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 341.453311][T10146] loop5: detected capacity change from 0 to 512 [ 341.460207][T10135] EXT4-fs (loop7): 1 truncate cleaned up [ 341.471041][T10146] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 341.513747][T10135] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 341.547560][T10149] loop9: detected capacity change from 0 to 8 [ 341.604516][T10146] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 341.622898][T10146] EXT4-fs (loop5): orphan cleanup on readonly fs [ 341.661214][T10146] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.1956: bad orphan inode 3 [ 341.693913][T10146] EXT4-fs (loop5): Remounting filesystem read-only [ 341.723656][T10146] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 341.928136][T10135] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 341.961490][ T6275] EXT4-fs (loop5): unmounting filesystem. [ 341.970600][T10135] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 342.125811][T10163] loop6: detected capacity change from 0 to 16 [ 342.156257][ T6388] EXT4-fs (loop7): unmounting filesystem. [ 342.188361][T10163] erofs: (device loop6): mounted with root inode @ nid 36. [ 342.249512][T10163] erofs: (device loop6): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 342.320471][T10163] erofs: (device loop6): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 342.344534][T10168] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #17: comm syz.8.1963: iget: immutable or append flags not allowed on symlinks [ 342.348369][T10163] erofs: (device loop6): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 342.414416][T10168] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1963: couldn't read orphan inode 17 (err -117) [ 342.453411][T10168] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 342.453448][T10163] erofs: (device loop6): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 342.541441][T10163] erofs: (device loop6): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 342.585761][T10163] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117] [ 342.607553][T10176] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 342.624734][ T7288] EXT4-fs (loop8): unmounting filesystem. [ 342.638352][ T27] audit: type=1800 audit(1773783361.112:149): pid=10163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1962" name="file3" dev="loop6" ino=89 res=0 errno=0 [ 342.784299][T10176] ntfs3: loop7: failed to convert "c46c" to iso8859-13 [ 343.081196][T10192] syz.7.1970 uses old SIOCAX25GETINFO [ 343.446283][T10202] exfat: Deprecated parameter 'namecase' [ 343.494851][T10204] EXT4-fs: Ignoring removed nobh option [ 343.534458][T10202] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 343.565696][T10204] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 343.725289][T10204] EXT4-fs (loop7): 1 truncate cleaned up [ 343.789407][T10210] FAT-fs (loop5): Directory bread(block 64) failed [ 343.805869][T10204] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 343.834278][T10210] FAT-fs (loop5): Directory bread(block 65) failed [ 343.854310][T10210] FAT-fs (loop5): Directory bread(block 66) failed [ 343.860933][T10210] FAT-fs (loop5): Directory bread(block 67) failed [ 343.911270][T10204] EXT4-fs (loop7): resizing filesystem from 256 to 1 blocks [ 343.944701][T10216] netlink: 'syz.8.1978': attribute type 1 has an invalid length. [ 343.955028][T10204] EXT4-fs warning (device loop7): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 343.967350][T10210] FAT-fs (loop5): Directory bread(block 68) failed [ 344.009333][T10210] FAT-fs (loop5): Directory bread(block 69) failed [ 344.051302][T10210] FAT-fs (loop5): Directory bread(block 70) failed [ 344.074812][T10210] FAT-fs (loop5): Directory bread(block 71) failed [ 344.102815][T10210] FAT-fs (loop5): Directory bread(block 72) failed [ 344.120178][T10210] FAT-fs (loop5): Directory bread(block 73) failed [ 344.193335][ T6388] EXT4-fs (loop7): unmounting filesystem. [ 345.256982][T10258] set_capacity_and_notify: 5 callbacks suppressed [ 345.257000][T10258] loop7: detected capacity change from 0 to 512 [ 345.296895][T10258] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 345.367712][T10258] System zones: 1-12 [ 345.376376][T10258] EXT4-fs error (device loop7): ext4_iget_extra_inode:4756: inode #15: comm syz.7.1994: corrupted in-inode xattr [ 345.474539][ T4406] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 345.527057][T10258] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1994: couldn't read orphan inode 15 (err -117) [ 345.568392][T10267] netem: change failed [ 345.583631][T10258] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 345.664356][ T4406] usb 9-1: Using ep0 maxpacket: 32 [ 345.671890][ T4406] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.737181][ T4406] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.779791][ T4406] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 345.800246][ T6388] EXT4-fs (loop7): unmounting filesystem. [ 345.809113][ T4406] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 345.826018][T10270] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1999'. [ 345.844280][ T4406] usb 9-1: Product: syz [ 345.854918][ T4406] usb 9-1: Manufacturer: syz [ 345.910633][ T4406] hub 9-1:4.0: USB hub found [ 345.996498][T10278] loop7: detected capacity change from 0 to 256 [ 346.031671][T10274] loop6: detected capacity change from 0 to 2048 [ 346.087091][T10274] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 346.115764][ T4406] hub 9-1:4.0: config failed, hub has too many ports! (err -19) [ 346.165122][T10274] EXT4-fs (loop6): Online resizing not supported with bigalloc [ 346.263624][T10282] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 346.406716][ T6302] EXT4-fs (loop6): unmounting filesystem. [ 346.444405][ T4406] usb 9-1: USB disconnect, device number 6 [ 346.603914][T10288] loop9: detected capacity change from 0 to 1024 [ 346.713560][T10288] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #3: block 2: comm syz.9.2003: lblock 2 mapped to illegal pblock 2 (length 1) [ 346.744972][T10288] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 346.821468][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2008'. [ 346.864332][T10288] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #3: block 48: comm syz.9.2003: lblock 0 mapped to illegal pblock 48 (length 1) [ 346.940892][T10288] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 346.994747][T10288] EXT4-fs error (device loop9): ext4_acquire_dquot:6835: comm syz.9.2003: Failed to acquire dquot type 0 [ 347.051713][T10288] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 347.094178][T10288] EXT4-fs error (device loop9): ext4_evict_inode:279: inode #11: comm syz.9.2003: mark_inode_dirty error [ 347.114773][T10288] EXT4-fs warning (device loop9): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 347.144379][T10288] EXT4-fs (loop9): 1 orphan inode deleted [ 347.166329][T10288] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 347.181795][ T9] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 347.257530][T10288] EXT4-fs error (device loop9): __ext4_get_inode_loc:4513: comm syz.9.2003: Invalid inode table block 1 in block_group 0 [ 347.277207][ T9] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 347.296170][ T9] EXT4-fs error (device loop9): ext4_release_dquot:6871: comm kworker/u4:0: Failed to release dquot type 0 [ 347.374407][T10288] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 347.559896][ T9694] EXT4-fs (loop9): unmounting filesystem. [ 347.574423][ T9694] EXT4-fs error (device loop9): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 347.664571][ T9694] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 347.694193][ T9694] EXT4-fs error (device loop9): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 348.059557][T10295] loop7: detected capacity change from 0 to 32768 [ 348.130438][T10327] loop5: detected capacity change from 0 to 1024 [ 348.210920][T10295] XFS (loop7): Mounting V5 Filesystem [ 348.404442][T10295] XFS (loop7): Ending clean mount [ 348.696349][ T6388] XFS (loop7): Unmounting Filesystem [ 348.726353][T10350] loop8: detected capacity change from 0 to 256 [ 348.786330][T10352] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2025'. [ 348.886041][T10352] device gretap0 entered promiscuous mode [ 348.911726][T10350] FAT-fs (loop8): Directory bread(block 64) failed [ 348.938537][T10350] FAT-fs (loop8): Directory bread(block 65) failed [ 348.964343][T10350] FAT-fs (loop8): Directory bread(block 66) failed [ 348.967699][T10354] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2025'. [ 348.970938][T10350] FAT-fs (loop8): Directory bread(block 67) failed [ 349.001677][T10354] 0ªî{X¹¦: renamed from gretap0 [ 349.102241][T10354] device 30ªî{X¹¦ left promiscuous mode [ 349.114043][T10350] FAT-fs (loop8): Directory bread(block 68) failed [ 349.141102][T10350] FAT-fs (loop8): Directory bread(block 69) failed [ 349.151926][T10354] net_ratelimit: 46 callbacks suppressed [ 349.151943][T10354] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 349.184513][T10350] FAT-fs (loop8): Directory bread(block 70) failed [ 349.191223][T10350] FAT-fs (loop8): Directory bread(block 71) failed [ 349.211731][T10350] FAT-fs (loop8): Directory bread(block 72) failed [ 349.221776][T10350] FAT-fs (loop8): Directory bread(block 73) failed [ 349.572897][T10366] loop6: detected capacity change from 0 to 64 [ 349.693530][T10366] syz.6.2030: attempt to access beyond end of device [ 349.693530][T10366] loop6: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 349.764553][ T4406] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 349.765485][T10366] Buffer I/O error on dev loop6, logical block 512, async page read [ 349.841953][T10366] syz.6.2030: attempt to access beyond end of device [ 349.841953][T10366] loop6: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 349.894332][T10366] Buffer I/O error on dev loop6, logical block 56576, async page read [ 349.964193][ T4406] usb 10-1: Using ep0 maxpacket: 16 [ 349.973584][ T4406] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 350.010982][ T4406] usb 10-1: config 0 has no interface number 0 [ 350.011029][ T4406] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 350.011060][ T4406] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 350.012887][ T4406] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 350.012918][ T4406] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 350.012941][ T4406] usb 10-1: Product: syz [ 350.012957][ T4406] usb 10-1: SerialNumber: syz [ 350.034456][ T4284] Bluetooth: hci5: command 0x0406 tx timeout [ 350.042386][ T4406] usb 10-1: config 0 descriptor?? [ 350.059700][ T4406] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 350.061014][ T4406] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input15 [ 350.190265][T10378] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2034'. [ 350.280820][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 350.283566][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 350.283813][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 350.284128][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 350.284319][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 350.284526][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 350.285521][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 350.285721][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 350.285916][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 350.286122][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 350.286784][ T4406] usb 10-1: USB disconnect, device number 2 [ 350.286862][ C1] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 350.292865][ T4406] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 350.463894][T10384] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2037'. [ 350.503043][T10383] loop6: detected capacity change from 0 to 1024 [ 350.763220][T10369] loop8: detected capacity change from 0 to 32768 [ 350.863195][T10383] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 350.871199][T10383] EXT4-fs (loop6): mount failed [ 351.097475][T10394] loop9: detected capacity change from 0 to 256 [ 351.172584][T10394] exfat: Deprecated parameter 'utf8' [ 351.225926][T10394] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 351.464782][T10403] loop7: detected capacity change from 0 to 512 [ 351.615521][T10407] loop9: detected capacity change from 0 to 64 [ 351.624528][T10403] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 351.633579][T10403] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.143309][ T6388] EXT4-fs (loop7): unmounting filesystem. [ 352.193879][T10383] loop6: detected capacity change from 0 to 32768 [ 352.223633][T10383] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 352.648941][T10399] loop5: detected capacity change from 0 to 40427 [ 352.708891][T10399] F2FS-fs (loop5): invalid crc value [ 352.708927][T10399] F2FS-fs (loop5): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 352.720642][T10399] F2FS-fs (loop5): Found nat_bits in checkpoint [ 352.755800][ T4772] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 352.962184][T10399] F2FS-fs (loop5): recover fsync data on readonly fs [ 352.962509][T10399] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 352.966921][T10399] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 353.136974][T10440] loop8: detected capacity change from 0 to 4096 [ 353.166661][T10440] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 353.243917][T10440] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 353.252574][T10440] ntfs3: loop8: Failed to load $Extend. [ 353.864153][ T14] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 354.066021][ T14] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 354.138789][ T14] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.192167][ T14] usb 10-1: config 0 descriptor?? [ 354.199525][ T14] cp210x 10-1:0.0: cp210x converter detected [ 354.767380][T10464] loop5: detected capacity change from 0 to 32768 [ 354.806024][ T14] cp210x 10-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 354.813782][ T14] cp210x 10-1:0.0: GPIO initialisation failed: -71 [ 354.821621][T10464] ERROR: (device loop5): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 354.821621][T10464] [ 354.860523][ T14] usb 10-1: cp210x converter now attached to ttyUSB0 [ 354.904301][ T14] usb 10-1: USB disconnect, device number 3 [ 354.928388][ T14] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 354.942900][ T14] cp210x 10-1:0.0: device disconnected [ 355.359639][T10495] program syz.5.2078 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 355.773544][T10515] loop7: detected capacity change from 0 to 64 [ 355.796443][T10517] netlink: 'syz.8.2086': attribute type 5 has an invalid length. [ 356.367231][T10527] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2091'. [ 356.391158][T10513] loop9: detected capacity change from 0 to 40427 [ 356.420326][T10513] F2FS-fs (loop9): build fault injection attr: rate: 690, type: 0x3ffff [ 356.460759][T10513] F2FS-fs (loop9): build fault injection attr: rate: 0, type: 0x4 [ 356.496725][T10513] F2FS-fs (loop9): invalid crc value [ 356.539209][T10513] F2FS-fs (loop9): Found nat_bits in checkpoint [ 356.587649][T10531] loop7: detected capacity change from 0 to 1024 [ 356.701037][ T27] audit: type=1326 audit(1773783375.172:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6dd9c799 code=0x7ffc0000 [ 356.775091][T10513] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 356.793922][ T27] audit: type=1326 audit(1773783375.192:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6dd9c799 code=0x7ffc0000 [ 356.857738][ T27] audit: type=1326 audit(1773783375.202:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f6d6dd9c799 code=0x7ffc0000 [ 357.002539][ T27] audit: type=1326 audit(1773783375.202:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6dd9c799 code=0x7ffc0000 [ 357.076305][T10523] loop8: detected capacity change from 0 to 32768 [ 357.128776][ T27] audit: type=1326 audit(1773783375.202:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6dd9c799 code=0x7ffc0000 [ 357.176128][T10523] JBD2: Ignoring recovery information on journal [ 357.309091][T10523] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 357.554028][T10547] loop7: detected capacity change from 0 to 512 [ 357.566564][ T7288] ocfs2: Unmounting device (7,8) on (node local) [ 357.677265][T10547] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 357.694256][T10549] tipc: Started in network mode [ 357.738496][T10547] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.755853][T10549] tipc: Node identity 000000005f003a000000000000000001, cluster identity 4711 [ 357.869811][T10549] tipc: Enabling of bearer rejected, failed to enable media [ 358.042924][ T6388] EXT4-fs (loop7): unmounting filesystem. [ 358.510691][T10574] loop6: detected capacity change from 0 to 512 [ 358.810621][T10554] loop8: detected capacity change from 0 to 32768 [ 358.882307][T10554] JBD2: Ignoring recovery information on journal [ 359.031145][T10554] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 359.246089][ T7288] ocfs2: Unmounting device (7,8) on (node local) [ 359.493140][T10608] loop6: detected capacity change from 0 to 256 [ 359.622809][T10608] FAT-fs (loop6): Directory bread(block 64) failed [ 359.643438][T10608] FAT-fs (loop6): Directory bread(block 65) failed [ 359.679859][T10608] FAT-fs (loop6): Directory bread(block 66) failed [ 359.703599][T10608] FAT-fs (loop6): Directory bread(block 67) failed [ 359.754481][T10608] FAT-fs (loop6): Directory bread(block 68) failed [ 359.761106][T10608] FAT-fs (loop6): Directory bread(block 69) failed [ 359.812322][T10613] IPVS: Error connecting to the multicast addr [ 359.834530][T10608] FAT-fs (loop6): Directory bread(block 70) failed [ 359.841138][T10608] FAT-fs (loop6): Directory bread(block 71) failed [ 359.875086][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2124'. [ 359.901976][T10608] FAT-fs (loop6): Directory bread(block 72) failed [ 359.910331][T10608] FAT-fs (loop6): Directory bread(block 73) failed [ 360.511359][T10638] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 360.588681][T10638] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 360.663368][ T4280] Bluetooth: hci1: Malformed LE Event: 0x1d [ 360.670583][T10643] ieee802154 phy0 wpan0: encryption failed: -126 [ 360.686172][T10642] loop6: detected capacity change from 0 to 128 [ 360.722929][T10647] ieee802154 phy0 wpan0: encryption failed: -126 [ 360.744613][T10642] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 360.781007][T10642] ext4 filesystem being mounted at /272/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 360.932203][ T6302] EXT4-fs (loop6): unmounting filesystem. [ 361.620789][ T4409] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 361.748548][T10675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.815420][T10648] loop8: detected capacity change from 0 to 32768 [ 361.817121][ T4409] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 361.873850][ T4409] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 361.898718][ T27] audit: type=1800 audit(1773783380.372:155): pid=10648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2136" name="file2" dev="loop8" ino=5 res=0 errno=0 [ 361.938330][ T4409] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.975445][T10648] ERROR: (device loop8): dbAllocBits: leaf page corrupt [ 361.975445][T10648] [ 362.001406][ T4409] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 362.014900][T10648] ERROR: (device loop8): remounting filesystem as read-only [ 362.033388][T10648] syz.8.2136: attempt to access beyond end of device [ 362.033388][T10648] loop8: rw=34817, sector=4680704, nr_sectors = 960 limit=32768 [ 362.067215][ T4409] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.085811][ T4409] usb 6-1: Product: syz [ 362.090052][ T4409] usb 6-1: Manufacturer: syz [ 362.115512][ T4409] usb 6-1: SerialNumber: syz [ 362.151416][T10685] loop6: detected capacity change from 0 to 64 [ 362.161521][ T107] blkno = 8ed80, nblocks = 78 [ 362.183236][ T4409] hub 6-1:1.0: bad descriptor, ignoring hub [ 362.204287][ T4409] hub: probe of 6-1:1.0 failed with error -5 [ 362.211209][ T107] ERROR: (device loop8): dbFree: block to be freed is outside the map [ 362.211209][ T107] [ 362.392330][ T4409] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 362.795709][ T125] usb 6-1: USB disconnect, device number 5 [ 362.848102][ T125] usblp0: removed [ 363.482610][T10716] loop5: detected capacity change from 0 to 2048 [ 363.603571][T10716] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 363.664263][T10716] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.754704][T10729] loop7: detected capacity change from 0 to 16 [ 363.780685][ T6275] EXT4-fs (loop5): unmounting filesystem. [ 363.784895][T10729] erofs: (device loop7): mounted with root inode @ nid 36. [ 363.993515][T10732] loop5: detected capacity change from 0 to 1024 [ 364.639546][T10750] loop7: detected capacity change from 0 to 1024 [ 364.736028][T10750] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 364.899428][T10750] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3850: comm syz.7.2172: Allocating blocks 385-513 which overlap fs metadata [ 364.958221][T10749] EXT4-fs (loop7): pa ffff888073c29ee0: logic 81920, phys. 129, len 24 [ 364.968140][T10749] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4890: group 0, free 0, pa_free 8 [ 365.045912][ T6388] EXT4-fs (loop7): unmounting filesystem. [ 365.521127][T10761] loop8: detected capacity change from 0 to 32768 [ 365.623685][T10761] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 365.650336][T10761] JBD2: Ignoring recovery information on journal [ 365.692985][T10776] loop5: detected capacity change from 0 to 512 [ 365.751692][T10776] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 365.812827][T10776] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 365.826938][T10761] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 365.874574][ T28] INFO: task syz-executor:4270 blocked for more than 143 seconds. [ 365.925549][ T28] Not tainted syzkaller #0 [ 365.930589][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 365.977923][T10768] loop7: detected capacity change from 0 to 32768 [ 366.046084][ T28] task:syz-executor state:D stack:21968 pid:4270 ppid:1 flags:0x00004004 [ 366.083108][T10768] ea_get: invalid extended attribute [ 366.104114][ T28] Call Trace: [ 366.123194][ T28] [ 366.133945][T10768] ffff88806873c3f0: 04 00 00 00 .... [ 366.134315][ T28] __schedule+0x11d1/0x40e0 [ 366.187711][ T28] ? mark_lock+0x94/0x320 [ 366.202408][ T28] ? __sched_text_start+0x8/0x8 [ 366.222258][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 366.247679][ T28] ? lock_chain_count+0x20/0x20 [ 366.262841][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 366.297721][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 366.317341][ T28] schedule+0xb9/0x180 [ 366.321602][ T28] io_schedule+0x7c/0xd0 [ 366.334195][ T28] folio_wait_bit_common+0x70a/0xfa0 [ 366.339613][ T28] ? folio_wait_bit+0x30/0x30 [ 366.364173][ T4284] Bluetooth: hci0: command 0x2016 tx timeout [ 366.374491][ T28] ? migration_entry_wait_on_locked+0xe90/0xe90 [ 366.395781][ T28] ? __lock_acquire+0x7d10/0x7d10 [ 366.420790][ T28] ? __filemap_get_folio+0x10f/0xdb0 [ 366.447410][ T28] __filemap_get_folio+0x423/0xdb0 [ 366.481300][ T28] ? __filemap_get_folio+0x10f/0xdb0 [ 366.500710][ T28] ? page_cache_prev_miss+0x380/0x380 [ 366.526864][ T28] ? mlock_page_drain_local+0x75/0x490 [ 366.532426][ T28] ? mlock_page_drain_local+0x289/0x490 [ 366.550906][ T28] truncate_inode_pages_range+0x402/0x1090 [ 366.561528][ T28] ? mapping_evict_folio+0x520/0x520 [ 366.569426][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 366.590022][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 366.598587][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 366.603943][ T28] evict+0x4dc/0x8d0 [ 366.617306][ T28] ? proc_nr_inodes+0x2f0/0x2f0 [ 366.622252][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 366.631036][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 366.639903][ T28] evict_inodes+0x60c/0x6a0 [ 366.648000][ T28] ? clear_inode+0x150/0x150 [ 366.652676][ T28] generic_shutdown_super+0x93/0x340 [ 366.661546][ T28] kill_block_super+0x7c/0xe0 [ 366.669962][ T28] deactivate_locked_super+0x93/0xf0 [ 366.683183][ T28] cleanup_mnt+0x42c/0x4b0 [ 366.702125][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 366.712236][ T28] task_work_run+0x1d0/0x260 [ 366.722889][ T28] ? task_work_cancel+0x220/0x220 [ 366.729326][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 366.740496][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 366.747218][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 366.752849][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 366.772256][ T28] do_syscall_64+0x58/0xa0 [ 366.781337][ T28] ? clear_bhb_loop+0x60/0xb0 [ 366.788611][ T28] ? clear_bhb_loop+0x60/0xb0 [ 366.793370][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.813094][ T28] RIP: 0033:0x7f450399d9d7 [ 366.819566][ T28] RSP: 002b:00007ffdbb776218 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 366.833868][ T28] RAX: 0000000000000000 RBX: 00007f4503a32050 RCX: 00007f450399d9d7 [ 366.843270][ T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdbb7762d0 [ 366.857047][ T28] RBP: 00007ffdbb7762d0 R08: 00007ffdbb7772d0 R09: 00000000ffffffff [ 366.868670][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdbb777360 [ 366.880197][ T28] R13: 00007f4503a32050 R14: 0000000000032807 R15: 00007ffdbb7773a0 [ 366.891626][ T28] [ 366.903075][ T6275] EXT4-fs (loop5): unmounting filesystem. [ 366.913166][ T28] [ 366.913166][ T28] Showing all locks held in the system: [ 366.965581][ T7288] ocfs2: Unmounting device (7,8) on (node local) [ 366.979627][ T28] 1 lock held by rcu_tasks_kthre/12: [ 367.002625][ T28] #0: ffffffff8cb2dfb0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 367.056160][ T28] 1 lock held by rcu_tasks_trace/13: [ 367.061535][ T28] #0: ffffffff8cb2e7d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 367.109486][ T28] 2 locks held by kworker/0:1/14: [ 367.130752][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 367.169498][ T28] #1: ffffc90000137d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 367.209443][ T28] 1 lock held by khungtaskd/28: [ 367.215727][ T28] #0: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 367.250670][ T28] 3 locks held by kworker/0:2/125: [ 367.301264][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 367.338922][ T28] #1: ffffc90002d67d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 367.352599][ T28] #2: ffffffff8cb332f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 367.365326][ T28] 1 lock held by udevd/3637: [ 367.384949][ T28] #0: ffff8880b8f3ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 367.402362][ T28] 2 locks held by getty/4028: [ 367.408516][ T28] #0: ffff88802fdf2098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 367.427375][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 367.442188][ T28] 1 lock held by syz-executor/4270: [ 367.449911][ T28] #0: ffff888027a460e0 (&type->s_umount_key#92){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 367.468103][ T28] 3 locks held by kworker/1:10/4406: [ 367.473536][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 367.500649][ T28] #1: ffffc90004737d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 367.513566][ T28] #2: ffffffff8cb332f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 367.532587][ T28] 5 locks held by rm/10795: [ 367.537506][ T28] [ 367.539918][ T28] ============================================= [ 367.539918][ T28] [ 367.559829][ T28] NMI backtrace for cpu 0 [ 367.564228][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 367.571459][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 367.581555][ T28] Call Trace: [ 367.584875][ T28] [ 367.587849][ T28] dump_stack_lvl+0x188/0x24e [ 367.592671][ T28] ? irq_work_queue+0xb8/0x140 [ 367.597500][ T28] ? show_regs_print_info+0x12/0x12 [ 367.602758][ T28] ? load_image+0x400/0x400 [ 367.607318][ T28] ? vprintk_emit+0x59f/0x6a0 [ 367.612053][ T28] ? printk_sprint+0x460/0x460 [ 367.616879][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 367.621878][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 367.628091][ T28] ? _printk+0xda/0x130 [ 367.632302][ T28] ? load_image+0x400/0x400 [ 367.636861][ T28] ? load_image+0x400/0x400 [ 367.641410][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 367.647529][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 367.653653][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 367.659697][ T28] watchdog+0xeee/0xf30 [ 367.663909][ T28] ? watchdog+0x1ed/0xf30 [ 367.668291][ T28] kthread+0x29d/0x330 [ 367.672490][ T28] ? hungtask_pm_notify+0x40/0x40 [ 367.677574][ T28] ? kthread_blkcg+0xd0/0xd0 [ 367.682227][ T28] ret_from_fork+0x1f/0x30 [ 367.686710][ T28] [ 367.691207][ T28] Sending NMI from CPU 0 to CPUs 1: [ 367.696904][ C1] NMI backtrace for cpu 1 [ 367.696915][ C1] CPU: 1 PID: 30 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 367.696932][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 367.696942][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 367.696982][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 [ 367.697004][ C1] Code: 00 00 00 00 00 90 53 48 89 fb e8 17 00 00 00 48 8b 3d f0 66 9d 0c 48 89 de 5b e9 77 21 50 00 00 00 cc cc 00 00 cc 48 8b 04 24 <65> 48 8b 0d 84 fc 7f 7e 65 8b 15 85 fc 7f 7e 81 e2 00 01 ff 00 74 [ 367.697018][ C1] RSP: 0018:ffffc90000a6fb00 EFLAGS: 00000282 [ 367.697031][ C1] RAX: ffffffff882b2da3 RBX: dffffc0000000000 RCX: ffff88801c24bb80 [ 367.697044][ C1] RDX: 0000000000000000 RSI: 000000000000000e RDI: ffff88807cba7140 [ 367.697055][ C1] RBP: ffff888029e61a48 R08: ffff8880753f0ee3 R09: 1ffff1100ea7e1dc [ 367.697068][ C1] R10: dffffc0000000000 R11: ffffed100ea7e1dd R12: dffffc0000000000 [ 367.697080][ C1] R13: ffff88807cba7140 R14: ffff88807cba7140 R15: 000000000000000e [ 367.697092][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 367.697110][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 367.697122][ C1] CR2: 00007ffcdc1bcf30 CR3: 000000007e10e000 CR4: 00000000003506e0 [ 367.697137][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 367.697147][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 367.697157][ C1] Call Trace: [ 367.697163][ C1] [ 367.697167][ C1] skb_put+0x23/0x210 [ 367.697196][ C1] nsim_dev_trap_report_work+0x324/0xaf0 [ 367.697228][ C1] ? process_one_work+0x7b0/0x1160 [ 367.697248][ C1] process_one_work+0x8a2/0x1160 [ 367.697274][ C1] ? worker_detach_from_pool+0x240/0x240 [ 367.697296][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 367.697313][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 367.697330][ C1] ? kthread_data+0x4b/0xc0 [ 367.697357][ C1] worker_thread+0xaa2/0x1270 [ 367.697390][ C1] ? __kthread_parkme+0x162/0x1c0 [ 367.697417][ C1] kthread+0x29d/0x330 [ 367.697430][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 367.697448][ C1] ? kthread_blkcg+0xd0/0xd0 [ 367.697464][ C1] ret_from_fork+0x1f/0x30 [ 367.697493][ C1] [ 367.944209][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 367.951137][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 367.958362][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 367.968438][ T28] Call Trace: [ 367.971723][ T28] [ 367.974659][ T28] dump_stack_lvl+0x188/0x24e [ 367.979357][ T28] ? memcpy+0x3c/0x60 [ 367.983350][ T28] ? show_regs_print_info+0x12/0x12 [ 367.988564][ T28] ? load_image+0x400/0x400 [ 367.993082][ T28] panic+0x2e5/0x730 [ 367.997018][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 368.002699][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 368.007226][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 368.012818][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 368.019025][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 368.025241][ T28] watchdog+0xf2d/0xf30 [ 368.029435][ T28] ? watchdog+0x1ed/0xf30 [ 368.033818][ T28] kthread+0x29d/0x330 [ 368.037902][ T28] ? hungtask_pm_notify+0x40/0x40 [ 368.042965][ T28] ? kthread_blkcg+0xd0/0xd0 [ 368.047577][ T28] ret_from_fork+0x1f/0x30 [ 368.052015][ T28] [ 368.055648][ T28] Kernel Offset: disabled [ 368.059991][ T28] Rebooting in 86400 seconds..