last executing test programs: 6m5.215427581s ago: executing program 3 (id=290): unshare(0x42000000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0}}]}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0xa4}}, 0x0) 6m3.197052922s ago: executing program 3 (id=299): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/vm/nr_overcommit_hugepages\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 6m2.928543358s ago: executing program 3 (id=300): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) 6m2.636683916s ago: executing program 3 (id=303): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) creat(&(0x7f0000000140)='./file0/file2\x00', 0x14) 6m1.705270899s ago: executing program 3 (id=306): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="a5e6efc35603e7564b7345d63ddd28921043052db1e8293a3cccdcbbfe66420d245c069405350a418630348ac28237dffd6396393abb1c54e8b62fa09afa9dd6143056389d59d83d642d9c199a7ee26b39bb83b6c59ab057c4cdda6edf7b8eac48ee1f2a5e0c4e0ccc25cf9b5449", @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESHEX, @ANYRES8, @ANYRES32, @ANYRES64], 0x1, 0x5de, &(0x7f0000000a00)="$eJzs3E1v3MYZAOChJUVbBTUKBI0dx0AYJwf3YGV3VcsQ0oO3FCUx2V0uSCqQT4VRy6lQKS3iFmh886Vt0PbYc5FTgZ567J/KX6gK7oesL2ur+EMx8DyAzVny5cw7XGoGIjQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECIktVmsxWFbtbf3IqfLVkt8t4Zxyf1/efI5oi5EMLsQbshRPW/0GiEq6NdV996Gvvj+r8b4cro05XQCCH8txEev/n2jz5+a/ZSfeJcFIUzEnolHn31+Nf3d3e3v7zoRF6A/ej856yn/azMs15nPY2zMo9XlpebH22slfFa1k3Le2WV9uKkSDtVXsQ3k7shhJWlOF28l2/211c73TS+mfwkbq2s3LnVbjaX408WB2mnKPP+R58slslG1u1m/fVhTH34Vvu9cKe+ET/NqrhKO704frizu700Lck6qHV8569OCWpPq6ndbLdbrXa7tXx75fadZrMxvlsPdsw2jwnHT5kd3bSTn4NzXm9eT2+Exl8Ovu7JGPfGixvF4bvZT6KLTgEAAAB4yaLhM/Zo+HT+6rC0lnXT5pGYfY8IAAAA4LU2/NX+yvgBQAhXQ3Ty938AAADg9fbno2vswtE1diGKQjmYjyZLVQZbH0Z7nbrU2ZsZ7Zo5XmO1di26PK5kuFmeHX9K0uvRO6OgdybR3443D6flERXFXPTk+RIIfw3XRjHXHoy2DyZHRq0srGXddDHJux+3Qqdz+VKVblW//2LnDyEUxf7M1/3e5Sg83NndXvzlb3YfDHN5UtfyZG/8FxIn/lDiaC7z4VAuvztY9zju8d2jPZ4bPoipe/11v7cwarc56M4e9P/S8Oz9E1/pGf3/Y3h3FPPuwmi7cLT/jbrN1uIpvT+cRWuw9eH8uLFxz+fOl8X1Ucz1mx/Umw9ujo/MHcqiPS2L9uHrP7oW4dKLyOLwtVg6I4v9sLO7vfScWQBclIfHZ6HRvBuezv8n5t3x8BYfr+qMUW7K7F5P4VNn9/kzW/n3Qj2ivz+Kef/a7NO5+NiI3pw2rzT/z3k9hNP7+q9w4x9/D2Ez3JgEP2uOrdv925FZNdr7pj7hmxPtTlaal912VH+Ymd/7bXj70VePb+3s3f98+/PtL9rtpeXmT5vN2+0wN+zGeGPuAeAUafFttFD9KSqKbPCL1spKq1NtpHGRJ5/GRba6nsZZv0qLZKPTX0/jQZFXeZJ368Jn2WpaxuXmYJAXVbyWF/EgL7Ot4Ztf4vGrX8q01+lXWVIOummnTOMk71edpIpXszKJB5s/72blRloMTy4HaZKtZUmnyvJ+XOabRZIuxnGZpocCs9W0X2VrWV3s/zMUWa9T3Is/y7ubvTReTcukyAZVPqpw0lbWX8uL3rDaxYu+2ADwPfEojN9gd/Aqu3MXQmNKzGntnnhGCgC8Msdn6fmLTggAAAAAAAAAAAAAADjh8HK9n40X5T33isAzC41wUAjhZTRx983TDr33krpznsLkdT73d3dDCLMvta2Zp209Rz31d3SRV+x7U2jUhUvhotOYO7R09rvUU9+Bzzj0g3G1218++mEd86pHIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACY7n8BAAD//yDUhEw=") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 6m0.658671315s ago: executing program 3 (id=309): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0x0, 0x1}, 'syz1\x00', 0x1a}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 6m0.007987941s ago: executing program 32 (id=309): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0x0, 0x1}, 'syz1\x00', 0x1a}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 5m59.368387817s ago: executing program 0 (id=316): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000140)=0xa, 0x4) sendmsg$802154_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)="11212e", 0x3}, 0x1, 0x0, 0x0, 0x24008011}, 0x400c890) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x2, 0x0}, 0x4}], 0x3ffffffffffff4a, 0x10160, 0x0) 5m58.83005393s ago: executing program 0 (id=318): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='-', 0x1) 5m58.567416717s ago: executing program 0 (id=319): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x2000000) 5m58.355121902s ago: executing program 0 (id=321): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {}, {@nojournal_checksum}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x574, &(0x7f0000000cc0)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f00000005c0)='./file0/file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 5m57.607105061s ago: executing program 0 (id=323): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) 5m47.322776786s ago: executing program 0 (id=335): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r0, 0x1) 5m46.636933413s ago: executing program 33 (id=335): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r0, 0x1) 4m54.290456733s ago: executing program 4 (id=618): fanotify_init(0x200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x3, 0xaf) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0xb) 4m53.733085377s ago: executing program 4 (id=620): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='wwnn=+x1111111111111111', 0x17) 4m53.136736432s ago: executing program 4 (id=626): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x6}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x44}}, 0x0) 4m52.169073506s ago: executing program 4 (id=635): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@user_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@orlov}, {@usrquota}, {@grpquota}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa}]}) 4m50.816003989s ago: executing program 4 (id=644): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x4000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x200000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 4m49.458829073s ago: executing program 4 (id=648): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) 4m34.401035736s ago: executing program 34 (id=648): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) 3.441111444s ago: executing program 5 (id=2709): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000}) 3.026957814s ago: executing program 5 (id=2714): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) syz_clone(0x6004500, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) dup(0xffffffffffffffff) 2.80589299s ago: executing program 1 (id=2717): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = io_uring_setup(0x462, &(0x7f0000000180)={0x0, 0xaefa, 0x2, 0x4, 0x3be}) close_range(r1, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000080)=""/5, 0x5) 2.650152294s ago: executing program 5 (id=2720): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macvlan1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xc9, 0x19, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.41602719s ago: executing program 5 (id=2723): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x1, 0x5004) ptrace$getregset(0x4204, r0, 0x204, &(0x7f0000000040)={0x0}) 2.190902706s ago: executing program 6 (id=2725): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x38}}, 0x4008000) 2.111527158s ago: executing program 5 (id=2726): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f00000001c0), 0x1, 0x10fd, &(0x7f0000002240)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) symlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.890474463s ago: executing program 6 (id=2729): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) 1.781148716s ago: executing program 1 (id=2730): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000200000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000140085000000700000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg$unix(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x448c0) 1.692465988s ago: executing program 2 (id=2731): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x40082, 0x0) write(r0, 0x0, 0x0) 1.522480822s ago: executing program 1 (id=2732): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRES8, @ANYRESDEC, @ANYRES32], 0x1, 0x2ca, &(0x7f0000000640)="$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") setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)=0xcd, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x8042, 0x90) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.478937123s ago: executing program 6 (id=2733): sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r1, @ANYBLOB="290e29bd7000fbdbdf252700000005003100030000001400300053e0e85290ceb080fb816d3cdadf198b0a0001007770616e31000000240032"], 0xd4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1.419316734s ago: executing program 2 (id=2734): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1000a3) 1.147654332s ago: executing program 2 (id=2735): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000b40)=[{{&(0x7f00000000c0)=@in6={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x56f6}, 0x80, 0x0}}], 0x1, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138) 1.077303343s ago: executing program 6 (id=2736): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000380)={0x1, 0x0, [{0x400000f3, 0x0, 0x6}]}) 873.988778ms ago: executing program 2 (id=2737): openat$kvm(0xffffffffffffff9c, 0x0, 0x2501, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x4c}}, 0x0) 872.635518ms ago: executing program 5 (id=2738): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0', 0xc) 805.61896ms ago: executing program 1 (id=2739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000600)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @local, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x5, 0x1, 0x3}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x6, 0x58, 0x66, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @private=0xa010102}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0x4, 0x1, 0x9, 0x2, 0x1, 0x1, 0x5, 0x4}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x1, {{0x5, 0x2, 0x4, 0x0, 0x1, 0x0, 0x7, 0x10}, 0x2, {0x4, 0x8, 0x2, 0x1, 0x0, 0x1}}}}}}}}, 0x0) 586.974645ms ago: executing program 6 (id=2740): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000180)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[], 0x1, 0x242, &(0x7f0000000300)="$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") syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 570.033446ms ago: executing program 2 (id=2741): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x242, &(0x7f0000000300)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[], &(0x7f0000000100)=""/4117, 0x1a, 0x1015, 0x1}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 423.978329ms ago: executing program 1 (id=2742): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000080)=0x24, 0x4) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) 26.891239ms ago: executing program 6 (id=2743): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'xfrm0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x10001}], 0x1, 0x21, 0x0) 6.325609ms ago: executing program 1 (id=2744): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 0s ago: executing program 2 (id=2745): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/58, 0x3a}], 0x1, &(0x7f0000002300)=""/12, 0xc}, 0x90}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) kernel console output (not intermixed with test programs): T11615] loop6: detected capacity change from 0 to 128 [ 368.471853][T11615] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 368.505215][T11617] netlink: 75 bytes leftover after parsing attributes in process `syz.5.1727'. [ 368.564155][T11615] ext4 filesystem being mounted at /247/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 368.596318][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.039877][ T8533] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 369.394347][T11635] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1734'. [ 369.414143][ T52] block nbd1: Receive control failed (result -32) [ 369.427552][ T5090] block nbd1: Receive control failed (result -32) [ 370.093055][T11633] loop5: detected capacity change from 0 to 32768 [ 370.365834][T11652] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 371.404864][ T5821] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 371.489496][T11682] ucsi-stm32g0-i2c 0-0003: i2c read 03, 00 error: 0 [ 371.534335][T11682] ucsi-stm32g0-i2c: probe of 0-0003 failed with error -5 [ 371.584614][T11682] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x03 [ 371.639299][ T5821] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.718883][ T5821] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.782318][ T5821] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 371.856533][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.906044][T11573] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 371.910604][T11574] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 371.923001][T11575] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 371.947510][ T5821] usb 7-1: config 0 descriptor?? [ 372.275578][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 372.329148][ T5821] usbhid 7-1:0.0: can't add hid device: -71 [ 372.355326][ T5821] usbhid: probe of 7-1:0.0 failed with error -71 [ 372.393173][ T5821] usb 7-1: USB disconnect, device number 5 [ 372.505006][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 372.574324][ T9] usb 3-1: string descriptor 0 read error: -22 [ 372.584182][ T9] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 372.656707][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.726174][ T9] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 372.769564][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 372.984892][ T5821] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 373.142601][ T9] usb 3-1: USB disconnect, device number 14 [ 373.204910][ T5821] usb 7-1: Using ep0 maxpacket: 32 [ 373.233400][ T5821] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.290793][ T5821] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.331551][ T5821] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 373.364118][T11765] loop1: detected capacity change from 0 to 2048 [ 373.371505][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.413132][ T5821] usb 7-1: config 0 descriptor?? [ 373.425728][T11765] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 373.469219][ T5821] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 373.533945][ T5821] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 373.775915][T11675] ldusb 7-1:0.0: Couldn't submit interrupt_in_urb -90 [ 373.820952][ T8] usb 7-1: USB disconnect, device number 6 [ 373.863860][ T8] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 374.020882][T11772] loop2: detected capacity change from 0 to 2048 [ 374.050611][T11772] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 374.085328][ T5821] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 374.228752][T11776] tmpfs: Bad value for 'nr_inodes' [ 374.310714][ T5821] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 374.324187][ T5821] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 374.377730][ T5821] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 374.448499][ T5821] usb 2-1: config 1 interface 0 has no altsetting 0 [ 374.484340][T11780] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 374.491341][T11780] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 374.502265][ T5821] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 374.552143][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.596580][ T5821] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 374.809817][ T5821] scsi host1: usb-storage 2-1:1.0 [ 374.889382][T10199] EXT4-fs error (device sda1): ext4_validate_block_bitmap:421: comm kworker/u4:16: bg 3: bad block bitmap checksum [ 374.933624][T10199] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 1504 with max blocks 1 with error 74 [ 374.981289][T10199] EXT4-fs (sda1): This should not happen!! Data will be lost [ 374.981289][T10199] [ 375.086665][ T9] usb 2-1: USB disconnect, device number 17 [ 375.338430][T11796] loop2: detected capacity change from 0 to 256 [ 375.362768][T11796] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 375.466635][T11790] loop6: detected capacity change from 0 to 32768 [ 375.552198][T11790] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 375.570914][T10209] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 375.751904][T11790] XFS (loop6): Ending clean mount [ 375.872212][T11808] loop5: detected capacity change from 0 to 512 [ 375.961413][T11808] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 375.999717][T11810] loop1: detected capacity change from 0 to 2048 [ 376.064211][T11808] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.1782: bad orphan inode 131083 [ 376.152694][T11810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.215116][T11808] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.265029][T11810] ext4 filesystem being mounted at /421/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.329112][ T8533] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 376.449559][T11810] fs-verity: sha512 using implementation "sha512-avx2" [ 376.553692][ T7124] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.747604][T11820] program syz.2.1788 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 376.799146][ T6646] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.064891][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 377.284592][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 377.316149][T11834] tap0: tun_chr_ioctl cmd 1074025677 [ 377.324462][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 377.358640][T11834] tap0: linktype set to 778 [ 377.389404][ T9] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 377.426704][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.472472][ T9] usb 6-1: Product: syz [ 377.498495][ T9] usb 6-1: Manufacturer: syz [ 377.531622][ T9] usb 6-1: SerialNumber: syz [ 377.825146][ T9] usb 6-1: Limiting number of CPorts to U8_MAX [ 377.845701][T11758] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 377.896268][T11843] loop2: detected capacity change from 0 to 8192 [ 377.997269][T11843] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 378.099142][T11843] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 378.165002][T11843] REISERFS (device loop2): using ordered data mode [ 378.194417][T11843] reiserfs: using flush barriers [ 378.227153][ C0] usb 6-1: invalid arpc response id received: 18432 [ 378.259827][T11843] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 378.379773][T11843] REISERFS (device loop2): checking transaction log (loop2) [ 378.437657][ T9] usb 6-1: failed to send ARPC request 1: -71 [ 378.517712][ T9] usb 6-1: failed to execute ARPC: -71 [ 378.523321][ T9] usb 6-1: failed to set connected state for cport 0: -71 [ 378.678455][ T9] greybus greybus1: 0/0:0: failed to set connected state: -71 [ 378.760808][ T9] usb 6-1: failed to send ARPC request 3: -71 [ 378.847181][ T9] usb 6-1: failed to execute ARPC: -71 [ 378.852967][ T9] usb 6-1: failed to clear cport 0: -71 [ 378.872074][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.878579][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.994780][ T9] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 379.030089][T11843] REISERFS (device loop2): Using tea hash to sort names [ 379.086941][T11843] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 379.120342][ T9] es2_ap_driver: probe of 6-1:1.0 failed with error -71 [ 379.202990][ T9] usb 6-1: USB disconnect, device number 16 [ 380.534818][ T5820] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 380.545011][ T5821] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 380.659176][T11877] loop6: detected capacity change from 0 to 32768 [ 380.697677][T11877] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 380.755003][ T5820] usb 2-1: Using ep0 maxpacket: 16 [ 380.761880][ T5821] usb 6-1: config 0 has an invalid interface number: 37 but max is 1 [ 380.783250][ T5820] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 380.809064][ T5821] usb 6-1: config 0 has an invalid interface number: 255 but max is 1 [ 380.830113][ T5820] usb 2-1: config 0 has no interface number 0 [ 380.847534][T11877] XFS (loop6): Ending clean mount [ 380.862860][ T5821] usb 6-1: config 0 has no interface number 0 [ 380.870578][ T5820] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 380.900485][ T5821] usb 6-1: config 0 has no interface number 1 [ 380.928924][ T5820] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 380.946137][ T5821] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 381.000013][ T5821] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 381.015658][ T5820] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 381.060489][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.090390][ T5821] usb 6-1: config 0 interface 255 has no altsetting 0 [ 381.117972][ T5820] usb 2-1: Product: syz [ 381.139416][ T8533] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 381.148502][ T5820] usb 2-1: Manufacturer: syz [ 381.155077][ T5821] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 381.188478][ T5820] usb 2-1: SerialNumber: syz [ 381.195723][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.203748][ T5821] usb 6-1: Product: syz [ 381.220187][ T5820] usb 2-1: config 0 descriptor?? [ 381.252459][T11880] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 381.285580][ T5821] usb 6-1: Manufacturer: syz [ 381.290233][ T5821] usb 6-1: SerialNumber: syz [ 381.304361][T11880] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 381.365728][ T5821] usb 6-1: config 0 descriptor?? [ 381.589822][T11880] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 381.648347][T11880] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 381.768416][ T5853] usb 6-1: USB disconnect, device number 17 [ 381.895799][ T5820] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 382.106023][ T5820] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 93 [ 382.400956][ T5820] usb 2-1: USB disconnect, device number 18 [ 382.427645][T11912] loop2: detected capacity change from 0 to 1024 [ 382.679415][T10279] hfsplus: b-tree write err: -5, ino 25 [ 382.698006][T10279] hfsplus: b-tree write err: -5, ino 4 [ 382.703562][T10279] hfsplus: b-tree write err: -5, ino 2 [ 382.742257][T10279] hfsplus: b-tree write err: -5, ino 17 [ 383.316625][T11933] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1833'. [ 383.760158][T11944] maxtcpc: probe of 0-0002 failed with error -5 [ 383.828426][T11944] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x02 [ 383.901915][T11950] netlink: 'syz.2.1841': attribute type 3 has an invalid length. [ 385.050464][T11985] loop2: detected capacity change from 0 to 512 [ 385.415024][ T5820] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 385.517264][T11993] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 385.552520][T11976] loop5: detected capacity change from 0 to 32768 [ 385.564472][T11993] CPU: 0 PID: 11993 Comm: syz.2.1861 Not tainted syzkaller #0 [ 385.571956][T11993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 385.582071][T11993] Call Trace: [ 385.585355][T11993] [ 385.588372][T11993] dump_stack_lvl+0x18c/0x250 [ 385.593077][T11993] ? show_regs_print_info+0x20/0x20 [ 385.598315][T11993] ? load_image+0x420/0x420 [ 385.602844][T11993] sysfs_create_dir_ns+0x26e/0x2a0 [ 385.607986][T11993] ? __lock_acquire+0x7d80/0x7d80 [ 385.613032][T11993] ? sysfs_warn_dup+0xa0/0xa0 [ 385.617750][T11993] ? rcu_is_watching+0x15/0xb0 [ 385.622548][T11993] ? do_raw_spin_unlock+0x121/0x230 [ 385.627853][T11993] kobject_add_internal+0x617/0xc90 [ 385.633118][T11993] kobject_add+0x164/0x240 [ 385.637723][T11993] ? kobject_init+0x1d0/0x1d0 [ 385.642419][T11993] ? get_device_parent+0x366/0x390 [ 385.647552][T11993] device_add+0x3fa/0xc40 [ 385.651882][T11993] tty_register_device_attr+0x425/0x950 [ 385.657453][T11993] ? tty_register_device+0x30/0x30 [ 385.662566][T11993] ? tty_port_init+0x132/0x1a0 [ 385.667324][T11993] ? gsm_dlci_alloc+0x32a/0x630 [ 385.672174][T11993] ? __might_fault+0xaa/0x120 [ 385.676883][T11993] gsm_activate_mux+0x110/0x2a0 [ 385.681735][T11993] gsmld_ioctl+0x12ca/0x1900 [ 385.686327][T11993] ? gsmld_write+0x120/0x120 [ 385.690921][T11993] ? __init_ldsem+0x150/0x150 [ 385.695594][T11993] ? __fget_files+0x28/0x460 [ 385.700219][T11993] ? gsmld_write+0x120/0x120 [ 385.704805][T11993] tty_ioctl+0x9b5/0xdc0 [ 385.709060][T11993] ? tty_get_icount+0xb0/0xb0 [ 385.713821][T11993] __se_sys_ioctl+0xfd/0x170 [ 385.718409][T11993] do_syscall_64+0x55/0xb0 [ 385.722879][T11993] ? clear_bhb_loop+0x40/0x90 [ 385.727681][T11993] ? clear_bhb_loop+0x40/0x90 [ 385.732529][T11993] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.738515][T11993] RIP: 0033:0x7f761339e0d9 [ 385.742926][T11993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.762533][T11993] RSP: 002b:00007f761430f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.770980][T11993] RAX: ffffffffffffffda RBX: 00007f7613626090 RCX: 00007f761339e0d9 [ 385.778951][T11993] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 385.787063][T11993] RBP: 00007f7613435024 R08: 0000000000000000 R09: 0000000000000000 [ 385.795066][T11993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.803052][T11993] R13: 00007f7613626128 R14: 00007f7613626090 R15: 00007ffe4d527138 [ 385.811053][T11993] [ 385.814198][ C0] vkms_vblank_simulate: vblank timer overrun [ 385.849287][ T5853] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 385.874103][ T5820] usb 7-1: unable to get BOS descriptor or descriptor too short [ 385.909779][ T5820] usb 7-1: not running at top speed; connect to a high speed hub [ 385.934262][ T5820] usb 7-1: config 1 interface 0 altsetting 35 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 385.951901][T11976] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 385.993851][ T5820] usb 7-1: config 1 interface 0 altsetting 35 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.044794][ T5853] usb 2-1: Using ep0 maxpacket: 16 [ 386.051491][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.072077][T11976] XFS (loop5): Ending clean mount [ 386.088318][T11993] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 386.122963][ T5820] usb 7-1: config 1 interface 0 has no altsetting 0 [ 386.130224][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.163523][ T5820] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 386.212045][ T5853] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 386.244873][ T5820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.292373][ T5820] usb 7-1: Product: syz [ 386.315998][ T5853] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 386.325843][ T5820] usb 7-1: Manufacturer: syz [ 386.330463][ T5820] usb 7-1: SerialNumber: syz [ 386.351883][ T7124] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 386.380739][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.395274][T11988] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 386.478417][ T5853] usb 2-1: config 0 descriptor?? [ 386.684476][ T5820] cdc_ether: probe of 7-1:1.0 failed with error -71 [ 386.759533][ T5820] usb 7-1: USB disconnect, device number 7 [ 386.952827][ T5853] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 387.013348][ T5853] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 387.081608][ T5853] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 387.143262][ T5853] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 387.194498][ T5853] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 387.240658][ T5853] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 387.289125][ T5853] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 387.331557][ T5853] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 387.383386][ T5853] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 387.436547][ T5853] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 387.487443][ T5853] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 387.535304][ T5853] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 387.585909][ T5853] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 387.593248][ T5853] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 387.695963][ T5853] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 387.740912][ T5853] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 387.817028][ T5853] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 387.824384][ T5853] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 387.922426][ T5853] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 387.970114][T12022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1871'. [ 387.979206][ T5853] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 388.036401][ T5853] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 388.043643][ T5853] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 388.146990][ T5853] microsoft 0003:045E:07DA.000C: No inputs registered, leaving [ 388.168254][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1872'. [ 388.207961][ T5853] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 388.226490][T12024] netlink: 'syz.5.1872': attribute type 20 has an invalid length. [ 388.277383][T12024] netlink: 'syz.5.1872': attribute type 21 has an invalid length. [ 388.295323][ T5853] microsoft 0003:045E:07DA.000C: no inputs found [ 388.324803][ T5853] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 388.409452][ T5853] usb 2-1: USB disconnect, device number 19 [ 388.461547][T12033] loop2: detected capacity change from 0 to 764 [ 388.736179][T12016] loop6: detected capacity change from 0 to 32768 [ 388.889513][T12016] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 388.929299][T12063] netem: unknown loss type 25 [ 388.962764][T12070] loop2: detected capacity change from 0 to 512 [ 388.972375][T12063] netem: change failed [ 389.045888][T12016] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 389.074343][T12020] loop1: detected capacity change from 0 to 40427 [ 389.139154][T12070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.183159][T12016] XFS (loop6): Starting recovery (logdev: internal) [ 389.190303][T12020] F2FS-fs (loop1): invalid crc value [ 389.224136][T12070] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.257541][T12020] F2FS-fs (loop1): Found nat_bits in checkpoint [ 389.282063][T12016] XFS (loop6): Ending recovery (logdev: internal) [ 389.527237][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.543656][T12020] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 389.596267][T12016] XFS (loop6): Metadata corruption detected at xfs_btree_lookup_get_block+0x43f/0x660, xfs_bnobt block 0x8 [ 389.725449][T12016] XFS (loop6): Unmount and run xfs_repair [ 389.889596][ T8533] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 390.162223][T12111] loop2: detected capacity change from 0 to 512 [ 390.169438][ T27] audit: type=1804 audit(1786971565.579:57): pid=12020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1870" name="/newroot/442/file0/file1" dev="loop1" ino=10 res=1 errno=0 [ 390.308681][T12111] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.367909][ T6646] syz-executor: attempt to access beyond end of device [ 390.367909][ T6646] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 390.499488][ T6646] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 390.757981][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.180913][T12127] loop6: detected capacity change from 0 to 1024 [ 391.372890][T12127] hfsplus: request for non-existent node 262144 in B*Tree [ 391.418409][T12127] hfsplus: request for non-existent node 262144 in B*Tree [ 391.744072][T12138] Mass Storage Function, version: 2009/09/11 [ 391.774230][T12138] LUN: removable file: (no medium) [ 392.079417][T12146] loop1: detected capacity change from 0 to 256 [ 392.158287][T12146] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 392.367452][T12152] loop6: detected capacity change from 0 to 2048 [ 392.420338][T12152] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 392.482672][T12152] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 392.505369][ T5853] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 392.552221][T12152] UDF-fs: Scanning with blocksize 512 failed [ 392.607221][T12152] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.686922][T12160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1903'. [ 392.754617][ T5853] usb 6-1: unable to get BOS descriptor or descriptor too short [ 392.773801][T12160] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.781343][T12160] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.817649][ T5853] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 392.855716][ T5853] usb 6-1: can't read configurations, error -71 [ 392.876646][T12160] bridge0: entered allmulticast mode [ 393.189976][T12167] loop1: detected capacity change from 0 to 2048 [ 393.202556][T12170] loop6: detected capacity change from 0 to 512 [ 393.246850][T12170] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 393.267158][T12171] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 393.419623][T12170] EXT4-fs (loop6): 1 truncate cleaned up [ 393.465875][T12170] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.804571][ T8533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.306825][T12101] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 394.326524][ T5853] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 394.476567][T12027] udevd[12027]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 394.642222][ T5853] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 394.687799][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.720713][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1920'. [ 394.760301][ T5853] usb 6-1: config 0 descriptor?? [ 394.789564][ T5853] cp210x 6-1:0.0: cp210x converter detected [ 395.093051][T12210] loop6: detected capacity change from 0 to 512 [ 395.216633][T12210] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.234273][ T5853] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 395.506482][ T5853] cp210x 6-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 395.573731][ T5853] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 395.621267][ T5853] usb 6-1: cp210x converter now attached to ttyUSB0 [ 395.701577][ T8533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.711001][T12221] loop2: detected capacity change from 0 to 1024 [ 395.729419][ T5853] usb 6-1: USB disconnect, device number 20 [ 395.771196][ T5853] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 395.856401][ T5853] cp210x 6-1:0.0: device disconnected [ 396.025039][T12223] netlink: 'syz.6.1927': attribute type 13 has an invalid length. [ 396.050701][T10251] hfsplus: request for non-existent node 33554434 in B*Tree [ 396.087858][T10251] hfsplus: request for non-existent node 33554434 in B*Tree [ 396.338966][T12218] loop1: detected capacity change from 0 to 32768 [ 396.414919][T12218] JBD2: Ignoring recovery information on journal [ 396.508805][T12218] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 397.143472][ T6646] ocfs2: Unmounting device (7,1) on (node local) [ 397.344376][T12239] loop5: detected capacity change from 0 to 2048 [ 397.429464][T12239] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.528148][T12239] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.736048][T12250] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.1935: bg 0: block 345: padding at end of block bitmap is not set [ 397.854906][T12250] EXT4-fs (loop5): Remounting filesystem read-only [ 397.918235][T10231] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4952: inode #15: block 1: len 15: ext4_ext_map_blocks returned -5 [ 398.050248][T12259] loop2: detected capacity change from 0 to 256 [ 398.116206][T12259] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 398.153243][ T7124] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.269469][T12262] loop6: detected capacity change from 0 to 512 [ 398.363528][T12262] EXT4-fs: Ignoring removed i_version option [ 398.414955][T12262] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 398.447664][T12264] loop1: detected capacity change from 0 to 2048 [ 398.490797][T12262] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.523312][T12267] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1945'. [ 398.573437][T12264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.590162][T12262] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.774926][T12262] EXT4-fs error (device loop6): ext4_generic_delete_entry:2729: inode #12: block 32: comm syz.6.1944: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 398.795792][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.873841][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1948'. [ 398.954300][T12262] EXT4-fs (loop6): Remounting filesystem read-only [ 398.988306][T12262] EXT4-fs warning (device loop6): ext4_rename_delete:3778: inode #12: comm syz.6.1944: Deleting old file: nlink 2, error=-117 [ 399.035875][T12277] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 399.140238][ T8533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.169465][ T6646] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.023847][T12307] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1962'. [ 400.309574][T12345] vxcan1: tx drop: invalid da for name 0x00000000000000c8 [ 401.085365][T12380] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1972'. [ 401.133227][T12382] loop5: detected capacity change from 0 to 8 [ 401.372298][T12372] loop1: detected capacity change from 0 to 32768 [ 401.518025][T12372] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 401.539251][T12386] loop6: detected capacity change from 0 to 4096 [ 401.624280][T12399] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 401.743798][T12372] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 401.877350][T12372] XFS (loop1): Starting recovery (logdev: internal) [ 401.958970][T12372] XFS (loop1): Ending recovery (logdev: internal) [ 402.221668][T12372] XFS (loop1): Metadata corruption detected at xfs_btree_lookup_get_block+0x43f/0x660, xfs_bnobt block 0x8 [ 402.294898][T12372] XFS (loop1): Unmount and run xfs_repair [ 402.414340][ T6646] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 402.477894][T12395] loop2: detected capacity change from 0 to 32768 [ 402.631992][T12395] JBD2: Ignoring recovery information on journal [ 402.680158][T12395] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 402.763213][T12395] JBD2: bad block at offset 32 [ 402.816855][T12395] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 403.812616][ T5780] ocfs2: Unmounting device (7,2) on (node local) [ 403.922267][T12430] loop6: detected capacity change from 0 to 128 [ 403.964918][T12430] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 404.068924][T12430] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 404.133190][T12430] FAT-fs (loop6): Filesystem has been set read-only [ 406.064843][T12378] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 406.703993][ T8533] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 407.012103][T12440] i2c i2c-0: delete_device: Can't parse I2C address [ 407.503988][T12458] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 407.736164][T12464] loop7: detected capacity change from 0 to 7 [ 407.774067][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 407.783303][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 407.800722][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 407.809959][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 407.835326][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 407.844512][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 407.859180][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 407.868386][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 407.893169][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 407.902403][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 407.911752][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 407.921055][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 407.936398][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 407.945586][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 407.953617][T12464] ldm_validate_partition_table(): Disk read failed. [ 407.994743][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 408.003940][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 408.012266][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 408.021539][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 408.033519][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 408.042710][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 408.058836][T12464] Dev loop7: unable to read RDB block 0 [ 408.088163][T12464] loop7: unable to read partition table [ 408.114147][T12464] loop7: partition table beyond EOD, truncated [ 408.140966][ T5820] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 408.151802][T12464] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 408.184354][ T5820] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 408.212556][ T5820] lpc_ich 0000:00:00.0: I/O space for GPIO uninitialized [ 408.237021][ T5820] lpc_ich 0000:00:00.0: No MFD cells added [ 408.272083][ T5820] lpc_ich 0000:00:01.0: I/O space for ACPI uninitialized [ 408.318271][ T5820] lpc_ich 0000:00:01.0: I/O space for ACPI uninitialized [ 408.352754][ T5820] lpc_ich 0000:00:01.0: I/O space for GPIO uninitialized [ 408.406077][ T5820] lpc_ich 0000:00:01.0: No MFD cells added [ 408.441484][ T5820] lpc_ich 0000:00:01.3: RCBA is disabled by hardware/BIOS, device disabled [ 408.498335][ T5820] lpc_ich 0000:00:01.3: I/O space for GPIO uninitialized [ 408.551312][ T5820] lpc_ich 0000:00:01.3: No MFD cells added [ 408.590475][ T5820] lpc_ich 0000:00:05.0: I/O space for ACPI uninitialized [ 408.640802][ T5820] lpc_ich 0000:00:05.0: I/O space for ACPI uninitialized [ 408.683723][ T5820] lpc_ich 0000:00:05.0: I/O space for GPIO uninitialized [ 408.734087][ T5820] lpc_ich 0000:00:05.0: No MFD cells added [ 408.961389][T12481] loop5: detected capacity change from 0 to 256 [ 409.044044][T12481] FAT-fs (loop5): unable to read block(1744830464) for building NFS inode [ 409.877855][T12494] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 410.009003][T12498] loop7: detected capacity change from 0 to 7 [ 410.020153][T12498] ldm_validate_partition_table(): Disk read failed. [ 410.028997][T12498] Dev loop7: unable to read RDB block 0 [ 410.036693][T12498] loop7: unable to read partition table [ 410.042708][T12498] loop7: partition table beyond EOD, truncated [ 410.050819][T12498] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 410.877590][T12513] loop5: detected capacity change from 0 to 8 [ 410.913922][T12513] SQUASHFS error: lzo decompression failed, data probably corrupt [ 410.982499][T12513] SQUASHFS error: Failed to read block 0x91: -5 [ 411.012496][T12513] SQUASHFS error: Unable to read metadata cache entry [8f] [ 411.058551][T12513] SQUASHFS error: Unable to read inode 0x11f [ 411.416158][T12525] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 411.463201][T12525] iwpm_hello_cb: Unable to parse nlmsg [ 411.472786][T12527] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2034'. [ 411.837408][T12535] loop1: detected capacity change from 0 to 256 [ 411.896468][T12535] exfat: Deprecated parameter 'utf8' [ 411.945027][T12535] exfat: Deprecated parameter 'utf8' [ 411.993598][T12535] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 412.391329][T12549] netlink: 'syz.5.2044': attribute type 2 has an invalid length. [ 412.751519][T12555] loop5: detected capacity change from 0 to 4096 [ 412.859128][T12555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.885750][T12559] loop2: detected capacity change from 0 to 2048 [ 412.991772][T12559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.041255][T12564] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2050'. [ 413.087849][T12559] ext4 filesystem being mounted at /540/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.247135][ T7124] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.281118][ T27] audit: type=1800 audit(1786971588.699:58): pid=12559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2049" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 413.451208][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.457598][T12643] loop1: detected capacity change from 0 to 512 [ 414.501014][T12643] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 414.575832][T12643] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.2063: bad orphan inode 131083 [ 414.640810][T12643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.998355][ T6646] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.090072][T12657] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 416.209368][T12688] loop5: detected capacity change from 0 to 512 [ 416.218593][T12689] loop2: detected capacity change from 0 to 256 [ 416.229120][T12688] EXT4-fs: inline encryption not supported [ 416.241159][T12689] exfat: Deprecated parameter 'utf8' [ 416.281090][T12689] exfat: Deprecated parameter 'namecase' [ 416.300681][T12688] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 416.346774][T12689] exfat: Deprecated parameter 'namecase' [ 416.352643][T12689] exfat: Deprecated parameter 'namecase' [ 416.378196][T12688] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 416.450608][T12689] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 416.476619][T12688] EXT4-fs (loop5): orphan cleanup on readonly fs [ 416.575647][T12688] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.2082: bg 0: block 64: padding at end of block bitmap is not set [ 416.694889][T12688] Quota error (device loop5): write_blk: dquota write failed [ 416.743578][T12688] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 416.789396][T12696] overlayfs: conflicting lowerdir path [ 416.808076][T12688] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.2082: Failed to acquire dquot type 0 [ 416.856868][T12698] loop2: detected capacity change from 0 to 512 [ 416.873207][T12688] EXT4-fs (loop5): 1 truncate cleaned up [ 416.905456][T12698] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 416.927504][T12688] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 417.032207][T12698] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.2087: invalid indirect mapped block 83886080 (level 1) [ 417.084899][T12688] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 417.149736][T12688] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 417.169514][T12705] macvlan2: entered allmulticast mode [ 417.179240][T12698] EXT4-fs (loop2): Remounting filesystem read-only [ 417.197610][T12705] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 417.207460][T12698] EXT4-fs (loop2): 1 orphan inode deleted [ 417.213201][T12698] EXT4-fs (loop2): 1 truncate cleaned up [ 417.247600][T12698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.263537][ T7124] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.414758][ T5820] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 417.519399][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.560541][ T27] audit: type=1107 audit(1786971592.989:59): pid=12709 uid=0 auid=0 ses=1 subj=unconfined msg='' [ 417.654092][ T5820] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.714735][ T5820] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.778692][ T5820] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 417.845657][ T5820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.866845][T12717] loop1: detected capacity change from 0 to 1024 [ 417.888803][ T5820] usb 7-1: config 0 descriptor?? [ 417.910223][T12717] EXT4-fs: Ignoring removed orlov option [ 417.918797][T12719] sock: sock_set_timeout: `syz.5.2095' (pid 12719) tries to set negative timeout [ 417.972923][T12717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.231050][ T6646] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.370656][ T5820] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 418.428020][ T5820] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 418.489008][ T5820] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 418.518234][ T5820] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 418.568632][ T5820] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 418.619188][ T5820] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 418.653674][ T5820] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 418.717408][ T5820] pyra 0003:1E7D:2CF6.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0 [ 418.995866][ T5820] pyra 0003:1E7D:2CF6.000D: couldn't init struct pyra_device [ 419.040766][ T5820] pyra 0003:1E7D:2CF6.000D: couldn't install mouse [ 419.073017][ T5820] pyra: probe of 0003:1E7D:2CF6.000D failed with error -71 [ 419.112254][ T5820] usb 7-1: USB disconnect, device number 8 [ 419.478762][T12744] loop2: detected capacity change from 0 to 8192 [ 419.499576][T12746] loop1: detected capacity change from 0 to 512 [ 419.545772][T12746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.747738][T12649] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 419.891322][T12759] loop5: detected capacity change from 0 to 8 [ 420.003839][ T6646] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.119472][T12759] SQUASHFS error: Failed to read block 0x2d7: -5 [ 420.199988][T12759] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 420.514926][ T5853] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 420.543213][T12814] tipc: Started in network mode [ 420.567353][T12814] tipc: Node identity ac14140f, cluster identity 4711 [ 420.615979][T12814] tipc: New replicast peer: 255.255.255.255 [ 420.662073][T12814] tipc: Enabled bearer , priority 10 [ 420.734727][ T5853] usb 3-1: Using ep0 maxpacket: 32 [ 420.764491][ T5853] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.833119][ T5853] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.889253][T12821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2118'. [ 420.911271][ T5853] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 420.981528][ T5853] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 421.021885][ T5853] usb 3-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 421.092081][ T5853] usb 3-1: Product: syz [ 421.118554][ T5853] usb 3-1: Manufacturer: syz [ 421.123368][ T5853] usb 3-1: SerialNumber: syz [ 421.192535][ T5853] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input21 [ 421.415930][T12835] netlink: 'syz.1.2124': attribute type 3 has an invalid length. [ 421.450023][ T5853] usb 3-1: USB disconnect, device number 15 [ 421.525244][ T5820] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 421.576452][ T5853] appletouch 3-1:1.0: input: appletouch disconnected [ 421.681001][T12839] tap0: tun_chr_ioctl cmd 1074025677 [ 421.690609][T12841] zram0: detected capacity change from 8 to 0 [ 421.699058][T12839] tap0: linktype set to 804 [ 421.768732][ T5821] tipc: Node number set to 2886997007 [ 421.776460][ T5820] usb 6-1: unable to get BOS descriptor or descriptor too short [ 421.833622][ T5820] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 421.856367][ T5820] usb 6-1: can't read configurations, error -71 [ 422.072103][T12847] loop6: detected capacity change from 0 to 1024 [ 422.124277][T12851] loop1: detected capacity change from 0 to 256 [ 422.165959][T12847] hfsplus: request for non-existent node 3 in B*Tree [ 422.173145][T12847] hfsplus: request for non-existent node 3 in B*Tree [ 422.376653][T12847] hfsplus: request for non-existent node 4 in B*Tree [ 422.383371][T12847] hfsplus: request for non-existent node 4 in B*Tree [ 422.419680][T12853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2133'. [ 422.597113][T12856] loop5: detected capacity change from 0 to 2048 [ 422.680630][T12860] loop2: detected capacity change from 0 to 256 [ 422.697986][T12856] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 422.733360][T12860] exfat: Deprecated parameter 'utf8' [ 422.800029][T12860] exfat: Deprecated parameter 'namecase' [ 422.834100][T12860] exfat: Deprecated parameter 'namecase' [ 422.904944][T12860] exfat: Deprecated parameter 'utf8' [ 422.950135][T12860] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 423.381279][T12874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2142'. [ 423.401096][T12876] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2143'. [ 423.430764][T12874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2142'. [ 424.450759][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 424.463412][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 424.477097][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x2053 instead [ 424.488320][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x1e7d instead [ 424.501821][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 424.513347][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 424.527648][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 424.540543][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 424.557693][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 424.569405][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 424.582085][T12893] jffs2: Further such events for this erase block will not be printed [ 424.591404][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 424.604521][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 424.618020][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x2053 instead [ 424.630486][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x1e7d instead [ 424.646190][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 424.659179][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 424.673768][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 424.687107][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 424.697902][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 424.710108][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 424.722356][T12893] jffs2: Further such events for this erase block will not be printed [ 424.731965][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 424.748341][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 424.759766][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x2053 instead [ 424.773812][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x1e7d instead [ 424.795776][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 424.808918][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 424.819686][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x2053 instead [ 424.833322][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x1e7d instead [ 424.848313][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 424.859938][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 424.876369][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x2053 instead [ 424.888983][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x1e7d instead [ 424.902408][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 424.915928][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 424.927843][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x2053 instead [ 424.939793][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x1e7d instead [ 424.958711][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 424.970036][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 424.984318][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x2053 instead [ 424.998930][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x1e7d instead [ 425.011896][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 425.024995][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 425.037524][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x2053 instead [ 425.048772][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x1e7d instead [ 425.062456][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 425.073924][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 425.088429][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x2053 instead [ 425.099202][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x1e7d instead [ 425.114231][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 425.129545][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 425.140297][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x2053 instead [ 425.154743][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x1e7d instead [ 425.168199][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 425.179324][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 425.193333][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x2053 instead [ 425.207990][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x1e7d instead [ 425.220151][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 425.233271][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 425.248482][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x2053 instead [ 425.260493][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x1e7d instead [ 425.274073][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 425.304839][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 425.323083][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x2053 instead [ 425.338078][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x1e7d instead [ 425.349860][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 425.365942][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 425.377860][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x2053 instead [ 425.390339][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x1e7d instead [ 425.402714][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 425.416155][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 425.429088][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x2053 instead [ 425.442027][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x1e7d instead [ 425.454436][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 425.471287][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 425.482099][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x2053 instead [ 425.495549][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x1e7d instead [ 425.508648][T12813] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 425.519590][T12883] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2146'. [ 425.542616][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 425.588390][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 425.636212][T12884] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2146'. [ 425.652543][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x2053 instead [ 425.726273][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x1e7d instead [ 425.740291][T12904] loop5: detected capacity change from 0 to 256 [ 425.803468][T12737] udevd[12737]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 425.819524][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 425.835254][T12904] FAT-fs (loop5): Directory bread(block 1285) failed [ 425.842153][T12904] FAT-fs (loop5): Directory bread(block 1286) failed [ 425.911325][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 425.952247][T12904] FAT-fs (loop5): Directory bread(block 1287) failed [ 426.003049][T12904] FAT-fs (loop5): Directory bread(block 1288) failed [ 426.011160][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x2053 instead [ 426.087027][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x1e7d instead [ 426.101189][T12904] FAT-fs (loop5): FAT read failed (blocknr 1281) [ 426.184992][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 426.247559][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 426.261381][T12934] loop2: detected capacity change from 0 to 128 [ 426.318483][T12934] EXT4-fs (loop2): Test dummy encryption mode enabled [ 426.326066][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x2053 instead [ 426.379045][T12934] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 426.405638][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x1e7d instead [ 426.452433][T12952] mtrr: base(0x10000) is not aligned on a size(0x0000) boundary [ 426.491217][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 426.509386][T12934] ext4 filesystem being mounted at /569/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 426.556687][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 426.621143][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x2053 instead [ 426.697826][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x1e7d instead [ 426.733053][ T5780] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 426.752531][T12964] loop5: detected capacity change from 0 to 256 [ 426.764913][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 426.806807][T12964] exfat: Deprecated parameter 'utf8' [ 426.866154][T12964] exfat: Deprecated parameter 'utf8' [ 426.871534][T12964] exfat: Deprecated parameter 'namecase' [ 426.928127][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 426.955477][T12964] exfat: Deprecated parameter 'namecase' [ 427.010291][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x2053 instead [ 427.045777][T12964] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 427.081506][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x1e7d instead [ 427.152648][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 427.235698][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 427.314860][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x2053 instead [ 427.376794][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x1e7d instead [ 427.425202][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 427.486815][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 427.560042][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x2053 instead [ 427.607977][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x1e7d instead [ 427.679599][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 427.727654][T12978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2166'. [ 427.745142][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 427.784844][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x2053 instead [ 427.856584][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x1e7d instead [ 427.913537][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 428.016403][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 428.091403][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x2053 instead [ 428.150334][T12972] loop6: detected capacity change from 0 to 32768 [ 428.187302][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x1e7d instead [ 428.253077][T12972] JBD2: Ignoring recovery information on journal [ 428.282917][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 428.380140][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 428.437629][T12972] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 428.496780][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x2053 instead [ 428.573835][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x1e7d instead [ 428.643306][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 428.711274][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 428.795269][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x2053 instead [ 428.852675][T12972] OCFS2: ERROR (device loop6): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 428.879452][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x1e7d instead [ 428.935163][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 428.976023][T12972] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 429.012454][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 429.038241][T12972] OCFS2: Returning error to the calling process. [ 429.062844][T12996] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2173'. [ 429.080260][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x2053 instead [ 429.094859][T12972] (syz.6.2163,12972,0):ocfs2_search_chain:1783 ERROR: status = -5 [ 429.103389][T12972] (syz.6.2163,12972,0):ocfs2_search_chain:1893 ERROR: status = -5 [ 429.135304][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x1e7d instead [ 429.161504][T12972] (syz.6.2163,12972,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5 [ 429.178333][T12998] loop5: detected capacity change from 0 to 128 [ 429.185094][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 429.225671][T12972] (syz.6.2163,12972,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5 [ 429.234136][T12972] (syz.6.2163,12972,0):ocfs2_claim_new_inode:2248 ERROR: status = -5 [ 429.266858][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 429.321177][T12998] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 429.336630][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x2053 instead [ 429.349569][T12972] (syz.6.2163,12972,0):ocfs2_claim_new_inode:2263 ERROR: status = -5 [ 429.382947][T12972] (syz.6.2163,12972,0):ocfs2_mknod_locked:639 ERROR: status = -5 [ 429.393666][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x1e7d instead [ 429.415574][T12998] hpfs: filesystem error: improperly stopped [ 429.434794][T12972] (syz.6.2163,12972,0):ocfs2_mknod:385 ERROR: status = -5 [ 429.442079][T12972] (syz.6.2163,12972,0):ocfs2_mknod:502 ERROR: status = -5 [ 429.464140][T12998] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 429.474319][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 429.487717][T12998] hpfs: You really don't want any checks? You are crazy... [ 429.495457][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 429.508813][T12972] (syz.6.2163,12972,0):ocfs2_mkdir:659 ERROR: status = -5 [ 429.518586][T12998] hpfs: hpfs_map_sector(): read error [ 429.534815][T12998] hpfs: code page support is disabled [ 429.541775][T12998] hpfs: hpfs_map_4sectors(): unaligned read [ 429.548113][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x2053 instead [ 429.586529][T12998] hpfs: hpfs_map_4sectors(): unaligned read [ 429.592567][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x1e7d instead [ 429.615494][T12998] hpfs: filesystem error: unable to find root dir [ 429.626851][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 429.724401][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 429.763635][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x2053 instead [ 429.790091][ T8533] ocfs2: Unmounting device (7,6) on (node local) [ 429.863715][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x1e7d instead [ 429.924917][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 430.005139][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 430.085534][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x2053 instead [ 430.155385][T12893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x1e7d instead [ 430.214807][T12893] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 430.261523][T12893] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 430.978604][T13032] cifs: Bad value for 'source' [ 431.054044][T13035] tun0: tun_chr_ioctl cmd 1074025677 [ 431.086032][T13035] tun0: linktype set to 1 [ 431.430199][T13045] loop6: detected capacity change from 0 to 128 [ 431.483612][T13045] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 431.666168][T13045] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 431.725918][T13045] FAT-fs (loop6): Filesystem has been set read-only [ 431.732617][T13045] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 431.752130][T12962] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 431.848776][T13045] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 431.875757][T13048] loop2: detected capacity change from 0 to 8192 [ 431.933250][T13048] loop2: p1 p2 p4[EZD] [ 431.962317][T13045] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 431.998400][T13048] loop2: p4 start 201326592 is beyond EOD, truncated [ 432.156779][T13007] Bluetooth: hci4: command 0x0406 tx timeout [ 432.224357][ T8533] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 432.419737][T13085] loop2: detected capacity change from 0 to 256 [ 432.493753][T13091] loop5: detected capacity change from 0 to 512 [ 432.647724][T12002] udevd[12002]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 432.696410][ T5794] udevd[5794]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 432.708880][T13091] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.820960][T13091] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.201057][ T7124] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.581537][T13132] loop5: detected capacity change from 0 to 4096 [ 434.214986][ T5821] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 434.434857][ T5821] usb 3-1: Using ep0 maxpacket: 32 [ 434.479409][ T5821] usb 3-1: config 192 has an invalid interface number: 147 but max is 0 [ 434.524436][ T5821] usb 3-1: config 192 has no interface number 0 [ 434.568937][ T5821] usb 3-1: config 192 interface 147 altsetting 2 has an invalid endpoint with address 0xF5, skipping [ 434.644716][ T5821] usb 3-1: config 192 interface 147 has no altsetting 0 [ 434.708008][ T5821] usb 3-1: Dual-Role OTG device on HNP port [ 434.735017][ T5821] usb 3-1: New USB device found, idVendor=0421, idProduct=04b2, bcdDevice=5f.af [ 434.774099][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.834201][ T5821] usb 3-1: Product: syz [ 434.872270][ T5821] usb 3-1: Manufacturer: syz [ 434.901390][ T5821] usb 3-1: SerialNumber: syz [ 435.165614][ T5821] rndis_wlan 3-1:192.147: skipping garbage [ 435.207827][ T5821] usb 3-1: bad CDC descriptors [ 435.243905][ T5821] rndis_host 3-1:192.147: skipping garbage [ 435.279887][ T5821] usb 3-1: bad CDC descriptors [ 435.325194][ T5821] cdc_acm 3-1:192.147: skipping garbage [ 435.381866][ T5821] usb 3-1: USB disconnect, device number 16 [ 435.583756][T13159] loop1: detected capacity change from 0 to 32768 [ 435.679918][T13159] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 435.872759][T13159] XFS (loop1): Ending clean mount [ 435.910246][T13159] XFS (loop1): Quotacheck needed: Please wait. [ 436.080258][T13159] XFS (loop1): Quotacheck: Done. [ 436.250241][T13196] loop5: detected capacity change from 0 to 8192 [ 436.473181][ T6646] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 436.684821][ T5821] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 436.916707][ T5821] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 436.940781][ T5821] usb 3-1: config 179 has no interface number 0 [ 436.968260][ T5821] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 437.027339][ T5821] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 437.100768][ T5821] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 437.164818][ T5821] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 437.211112][ T5821] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 437.279147][ T5821] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 437.325159][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.381142][T13201] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 437.398034][T13201] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 437.502638][T13220] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 437.502638][T13220] The task syz.5.2243 (13220) triggered the difference, watch for misbehavior. [ 437.816960][ T9] usb 3-1: USB disconnect, device number 17 [ 437.822959][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 437.822994][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 437.845245][T13115] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 438.003364][T12994] udevd[12994]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Exec format error [ 438.326744][T13229] loop6: detected capacity change from 0 to 2048 [ 438.433721][T13233] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 439.261002][T13253] vcan0: entered allmulticast mode [ 439.856013][T13249] loop6: detected capacity change from 0 to 32768 [ 439.888206][T13249] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.2255 (13249) [ 440.005469][T13249] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 440.073796][T13249] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 440.117518][T13249] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 440.172488][T13249] BTRFS info (device loop6): trying to use backup root at mount time [ 440.220631][T13249] BTRFS info (device loop6): using free space tree [ 440.313738][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.321603][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.362179][ T49] BTRFS warning (device loop6): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6f08ecb level 0 [ 440.456598][T13249] BTRFS warning (device loop6): couldn't read tree root [ 440.489077][T13249] BTRFS warning (device loop6): try to load backup roots slot 1 [ 440.571602][T13249] BTRFS info (device loop6): enabling ssd optimizations [ 440.602474][T13249] BTRFS info (device loop6): auto enabling async discard [ 440.638689][T13249] BTRFS info (device loop6): rebuilding free space tree [ 440.974548][ T8533] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 441.558959][T13344] loop5: detected capacity change from 0 to 7 [ 441.618370][T13344] Dev loop5: unable to read RDB block 7 [ 441.624019][T13344] loop5: unable to read partition table [ 441.631459][T13345] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2268'. [ 441.695362][T13344] loop5: partition table beyond EOD, truncated [ 441.703983][T10271] loop: Write error at byte offset 4, length 3584. [ 441.763295][T13344] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 441.797154][ C0] blk_print_req_error: 29 callbacks suppressed [ 441.797166][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 441.813129][ C0] buffer_io_error: 29 callbacks suppressed [ 441.813139][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 441.914978][ T5144] Dev loop5: unable to read RDB block 7 [ 441.920674][ T5144] loop5: unable to read partition table [ 441.975054][ T5144] loop5: partition table beyond EOD, truncated [ 442.234787][ T5820] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 442.420776][T13363] loop1: detected capacity change from 0 to 256 [ 442.437238][ T5820] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 442.485213][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.555816][ T5820] usb 6-1: config 0 descriptor?? [ 442.607589][ T5820] cp210x 6-1:0.0: cp210x converter detected [ 443.010673][ T5820] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 443.061289][ T5820] usb 6-1: cp210x converter now attached to ttyUSB0 [ 443.262112][ T5820] usb 6-1: USB disconnect, device number 23 [ 443.316769][ T5820] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 443.383739][ T5820] cp210x 6-1:0.0: device disconnected [ 443.674295][T13381] program syz.6.2282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 444.170458][T13394] loop5: detected capacity change from 0 to 1024 [ 444.203667][T13394] EXT4-fs: Ignoring removed orlov option [ 444.261365][T13394] EXT4-fs: Ignoring removed i_version option [ 444.367859][T13394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.687239][ T7124] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.599380][T13334] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 445.736822][T13435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2307'. [ 445.951051][T13264] udevd[13264]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Exec format error [ 446.210126][T13449] loop2: detected capacity change from 0 to 128 [ 446.291296][T13449] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 446.395521][T13449] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 446.538798][T13455] loop1: detected capacity change from 0 to 164 [ 447.392372][T13473] loop9: detected capacity change from 0 to 524287999 [ 448.014794][ T9] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 448.227571][ T9] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 448.253153][ T9] usb 2-1: config 0 has no interface number 0 [ 448.283111][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 448.310082][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.351436][ T9] usb 2-1: Product: syz [ 448.376353][ T9] usb 2-1: Manufacturer: syz [ 448.404578][ T9] usb 2-1: SerialNumber: syz [ 448.432118][ T9] usb 2-1: config 0 descriptor?? [ 448.539409][T13499] loop6: detected capacity change from 0 to 2048 [ 448.619453][T13502] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 448.907667][ T27] audit: type=1800 audit(1786971624.339:60): pid=13499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2336" name="bus" dev="loop6" ino=2097152 res=0 errno=0 [ 448.956622][T13505] NILFS (loop6): nilfs_sufile_do_free: segment 9 is already clean [ 449.169981][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 449.206300][ T9] asix: probe of 2-1:0.251 failed with error -524 [ 449.436966][ T9] usb 2-1: USB disconnect, device number 20 [ 449.684473][T13510] loop2: detected capacity change from 0 to 32768 [ 449.738934][T13510] [ 449.738934][T13510] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 449.738934][T13510] [ 449.814708][ T27] audit: type=1800 audit(1786971625.239:61): pid=13510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2340" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 449.881872][T13510] [ 449.881872][T13510] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 449.881872][T13510] [ 449.925206][T13510] [ 449.925206][T13510] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 449.925206][T13510] [ 449.968584][T13510] [ 449.968584][T13510] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 449.968584][T13510] [ 449.994733][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 450.041389][T13510] [ 450.041389][T13510] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 450.041389][T13510] [ 450.104998][ T114] ERROR: (device loop2): dbFree: error in block map [ 450.104998][ T114] [ 450.151642][T13522] loop1: detected capacity change from 0 to 512 [ 450.158562][T13510] [ 450.158562][T13510] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 450.158562][T13510] [ 450.225219][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 450.251247][ T9] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 450.266225][T13522] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.296114][ T5780] [ 450.296114][ T5780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 450.296114][ T5780] [ 450.316136][ T9] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 450.344251][T13522] ext4 filesystem being mounted at /548/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.366208][ T5780] [ 450.366208][ T5780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 450.366208][ T5780] [ 450.377079][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.398513][ T9] usb 7-1: Product: syz [ 450.402790][ T9] usb 7-1: Manufacturer: syz [ 450.470712][ T9] usb 7-1: SerialNumber: syz [ 450.516331][ T9] usb 7-1: config 0 descriptor?? [ 450.556698][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 450.604826][ T9] usb 7-1: setting power ON [ 450.618036][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 450.642986][ T6646] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.663264][T13520] loop5: detected capacity change from 0 to 40427 [ 450.682974][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 450.733529][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 450.758564][T13518] dvb-usb: bulk message failed: -22 (3/0) [ 450.774876][T13520] F2FS-fs (loop5): invalid crc value [ 450.827366][T13518] dvb-usb: bulk message failed: -22 (5/0) [ 450.833437][ T9] usb 7-1: media controller created [ 450.842796][T13520] F2FS-fs (loop5): Found nat_bits in checkpoint [ 450.877204][T13528] dvb-usb: bulk message failed: -22 (3/0) [ 450.988933][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 451.014073][T13531] loop1: detected capacity change from 0 to 1764 [ 451.093081][T13520] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 451.113216][ T9] usb 7-1: selecting invalid altsetting 6 [ 451.169825][ T9] usb 7-1: digital interface selection failed (-22) [ 451.217873][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 451.295145][ T9] usb 7-1: setting power OFF [ 451.345112][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 451.376466][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 451.391943][T13520] syz.5.2345: attempt to access beyond end of device [ 451.391943][T13520] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 451.447111][ T9] (NULL device *): no alternate interface [ 451.519868][T13520] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 451.576461][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 451.678589][ T9] usb 7-1: USB disconnect, device number 9 [ 451.684527][T13520] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 451.820266][T13546] kAFS: bad VL server IP address [ 452.962198][T13573] loop2: detected capacity change from 0 to 1024 [ 453.023344][T13575] loop5: detected capacity change from 0 to 256 [ 453.140110][T13575] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 453.390299][T13579] loop2: detected capacity change from 0 to 512 [ 453.498488][T13579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.534553][T13567] loop6: detected capacity change from 0 to 32768 [ 453.594857][T13579] ext4 filesystem being mounted at /622/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.618982][T13567] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.2365 (13567) [ 453.738598][T13567] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 453.809099][T13567] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 453.830728][T13579] EXT4-fs error (device loop2): ext4_get_first_dir_block:3584: inode #12: comm syz.2.2370: Attempting to read directory block (0) that is past i_size (3) [ 453.889728][T13567] BTRFS info (device loop6): setting nodatasum [ 453.924892][T13567] BTRFS info (device loop6): force zlib compression, level 3 [ 453.970055][T13567] BTRFS info (device loop6): turning on flush-on-commit [ 454.008685][T13567] BTRFS info (device loop6): max_inline at 4096 [ 454.048972][T13567] BTRFS info (device loop6): using free space tree [ 454.070670][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.154237][T13577] loop1: detected capacity change from 0 to 32768 [ 454.304864][T13567] BTRFS info (device loop6): enabling ssd optimizations [ 454.608251][ T8533] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 455.627880][T13636] loop5: detected capacity change from 0 to 40427 [ 455.712376][T13636] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 455.758953][T13636] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 455.846249][T13636] F2FS-fs (loop5): invalid crc value [ 455.928708][T13636] F2FS-fs (loop5): Found nat_bits in checkpoint [ 456.128450][T13636] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 456.167646][T13636] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 456.289788][ T27] audit: type=1800 audit(1786971631.719:62): pid=13636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2375" name="file0" dev="loop5" ino=10 res=0 errno=0 [ 457.551304][ T27] audit: type=1326 audit(1786971632.979:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13700 comm="syz.6.2392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06299e0d9 code=0x7ffc0000 [ 457.656771][ T27] audit: type=1326 audit(1786971633.009:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13700 comm="syz.6.2392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd06299e0d9 code=0x7ffc0000 [ 457.706320][T13703] loop5: detected capacity change from 0 to 2048 [ 457.772222][ T27] audit: type=1326 audit(1786971633.009:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13700 comm="syz.6.2392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06299e0d9 code=0x7ffc0000 [ 457.883773][ T27] audit: type=1326 audit(1786971633.009:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13700 comm="syz.6.2392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06299e0d9 code=0x7ffc0000 [ 458.057627][ T27] audit: type=1326 audit(1786971633.009:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13700 comm="syz.6.2392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fd06299e0d9 code=0x7ffc0000 [ 458.111636][T13707] loop5: detected capacity change from 0 to 1764 [ 458.232579][ T27] audit: type=1326 audit(1786971633.159:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13700 comm="syz.6.2392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06299e0d9 code=0x7ffc0000 [ 458.295264][T13707] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 458.381963][ T27] audit: type=1326 audit(1786971633.169:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13700 comm="syz.6.2392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06299e0d9 code=0x7ffc0000 [ 458.712804][T13724] program syz.5.2403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 459.117719][T13718] loop2: detected capacity change from 0 to 32768 [ 459.179991][T13718] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 459.305086][T13718] XFS (loop2): Ending clean mount [ 459.362320][T13718] XFS (loop2): Quotacheck needed: Please wait. [ 459.463307][T13718] XFS (loop2): Quotacheck: Done. [ 459.634043][ T5780] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 460.065502][T13667] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 461.095605][ T5820] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 461.305142][T13832] input: syz1 as /devices/virtual/input/input22 [ 461.374812][ T5820] usb 7-1: Using ep0 maxpacket: 32 [ 461.383496][ T5820] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 461.451933][ T5820] usb 7-1: config 0 has no interface number 0 [ 461.474322][ T5820] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 461.529616][ T5820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.590368][ T5820] usb 7-1: Product: syz [ 461.615951][ T5820] usb 7-1: Manufacturer: syz [ 461.620576][ T5820] usb 7-1: SerialNumber: syz [ 461.687374][ T5820] usb 7-1: config 0 descriptor?? [ 461.711594][ T5820] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 461.864345][T13844] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(6) [ 461.917043][ T5820] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 462.002419][ T5820] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 462.032977][ T27] audit: type=1326 audit(1786971893.454:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.2.2431" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f761339e0d9 code=0x7ffc0000 [ 462.265330][ T27] audit: type=1326 audit(1786971893.484:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.2.2431" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f761339e0d9 code=0x7ffc0000 [ 462.313970][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 462.325360][ T9] usb 7-1: USB disconnect, device number 10 [ 462.366234][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 462.441177][T13855] loop5: detected capacity change from 0 to 512 [ 462.459358][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 462.481252][ T27] audit: type=1326 audit(1786971893.484:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.2.2431" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f761339e0d9 code=0x7ffc0000 [ 462.527135][T13855] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 462.576820][ T9] quatech2 7-1:0.51: device disconnected [ 462.665506][T13855] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.715007][ T27] audit: type=1326 audit(1786971893.484:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.2.2431" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f761339e0d9 code=0x7ffc0000 [ 462.751212][T13855] ext4 filesystem being mounted at /523/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.854483][ T27] audit: type=1326 audit(1786971893.484:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.2.2431" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f761339e0d9 code=0x7ffc0000 [ 463.041401][ T7124] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.051359][ T27] audit: type=1326 audit(1786971893.484:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.2.2431" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f761339e0d9 code=0x7ffc0000 [ 463.242396][ T27] audit: type=1326 audit(1786971893.484:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.2.2431" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f761339e0d9 code=0x7ffc0000 [ 463.449573][ T27] audit: type=1326 audit(1786971893.494:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.2.2431" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f761339e0d9 code=0x7ffc0000 [ 463.627465][ T27] audit: type=1326 audit(1786971893.494:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.2.2431" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f761339e0d9 code=0x7ffc0000 [ 463.804792][ T27] audit: type=1326 audit(1786971893.494:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.2.2431" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f761339e0d9 code=0x7ffc0000 [ 463.946752][T13889] loop6: detected capacity change from 0 to 256 [ 463.972026][T13887] loop1: detected capacity change from 0 to 2048 [ 464.077206][T13887] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #2: comm syz.1.2446: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 464.252274][T13887] EXT4-fs (loop1): get root inode failed [ 464.294771][T13887] EXT4-fs (loop1): mount failed [ 464.440328][T13897] loop6: detected capacity change from 0 to 2048 [ 464.620642][T13897] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.753700][T13897] EXT4-fs (loop6): shut down requested (2) [ 464.902212][T13891] loop5: detected capacity change from 0 to 32768 [ 464.917025][ T8533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.988249][T13891] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.2448 (13891) [ 465.055497][ T5853] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 465.102964][T13891] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 465.185275][T13891] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 465.227244][T13891] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 465.290562][T13891] BTRFS info (device loop5): use zstd compression, level 3 [ 465.298793][ T5853] usb 2-1: Using ep0 maxpacket: 8 [ 465.328597][ T5853] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 465.339821][T13891] BTRFS info (device loop5): using free space tree [ 465.354268][ T5853] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 465.406778][ T5853] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 465.455180][ T5853] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 465.508807][T13807] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 465.509228][T13808] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 465.538269][ T5853] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 465.579580][T13891] BTRFS info (device loop5): enabling ssd optimizations [ 465.613453][T13891] BTRFS info (device loop5): auto enabling async discard [ 465.676816][ T5853] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 465.725946][T13891] fs-verity: sha256 using implementation "sha256-avx2" [ 465.778124][ T5853] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 465.836955][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.920939][T13954] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2458'. [ 465.936650][T13891] fs-verity (loop5, inode 258): Error -4 building Merkle tree [ 465.953083][T13907] loop2: detected capacity change from 0 to 32768 [ 466.050572][T13907] read_mapping_page failed! [ 466.111520][T13907] ERROR: (device loop2): txCommit: [ 466.111520][T13907] [ 466.121119][ T5853] usb 2-1: GET_CAPABILITIES returned 0 [ 466.158239][ T5853] usbtmc 2-1:16.0: can't read capabilities [ 466.235070][ T7124] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 466.334469][ T5853] usb 2-1: USB disconnect, device number 21 [ 466.512750][T13987] binder: 13985:13987 ioctl c0306201 200000000300 returned -14 [ 468.165654][T14021] loop1: detected capacity change from 0 to 256 [ 468.220363][T14021] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 468.494173][T14024] loop6: detected capacity change from 0 to 4096 [ 468.590860][T14024] ntfs3: loop6: Different NTFS sector size (2048) and media sector size (512). [ 468.719425][T14028] loop2: detected capacity change from 0 to 1024 [ 468.763948][T14024] ntfs3: loop6: Failed to initialize $Extend/$ObjId. [ 469.673382][T14052] 9pnet_fd: Insufficient options for proto=fd [ 470.629678][T14082] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2501'. [ 470.846400][T14091] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2505'. [ 471.160290][T14096] loop1: detected capacity change from 0 to 4096 [ 471.271749][T13983] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 471.481718][T14103] pim6reg1: tun_chr_ioctl cmd 1074025675 [ 471.635367][T14103] pim6reg1: persist disabled [ 472.635936][T14128] loop5: detected capacity change from 0 to 8192 [ 472.689325][T14128] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 472.793533][T14128] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 472.881652][T14128] REISERFS (device loop5): using ordered data mode [ 472.899860][ T5820] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 472.950952][T14128] reiserfs: using flush barriers [ 473.000258][T14128] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 473.029067][ T5820] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 473.140313][T14128] REISERFS (device loop5): checking transaction log (loop5) [ 473.414487][T14128] REISERFS (device loop5): Using tea hash to sort names [ 473.485085][T14128] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 474.483318][T14207] loop1: detected capacity change from 0 to 512 [ 474.564833][ T5820] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 474.734430][T14211] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2537'. [ 474.763214][T14211] bond0: entered promiscuous mode [ 474.789232][T14211] bond_slave_0: entered promiscuous mode [ 474.806597][ T5820] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 474.828042][T14211] bond_slave_1: entered promiscuous mode [ 474.873079][ T5820] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 474.911006][T14211] team0: entered promiscuous mode [ 474.933245][T14211] team_slave_0: entered promiscuous mode [ 474.954528][ T5820] usb 6-1: config 0 interface 0 has no altsetting 0 [ 474.972314][T14211] team_slave_1: entered promiscuous mode [ 474.989767][ T5820] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 475.010914][T14211] hsr2: entered promiscuous mode [ 475.027371][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 475.037892][T14211] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 475.055243][ T5820] usb 6-1: Product: syz [ 475.081925][ T5820] usb 6-1: Manufacturer: syz [ 475.108953][ T5820] usb 6-1: SerialNumber: syz [ 475.141888][ T5820] usb 6-1: config 0 descriptor?? [ 475.176005][ T5820] usb 6-1: selecting invalid altsetting 0 [ 475.427206][ T5853] usb 6-1: USB disconnect, device number 24 [ 475.555119][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 475.774178][ T9] usb 3-1: config 2 has an invalid interface number: 5 but max is 0 [ 475.802530][ T9] usb 3-1: config 2 has no interface number 0 [ 475.819045][ T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 475.871311][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.928752][ T9] ums-realtek 3-1:2.5: USB Mass Storage device detected [ 476.179147][ T5820] usb 3-1: USB disconnect, device number 18 [ 476.738218][T14252] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2555'. [ 476.829751][T14236] loop1: detected capacity change from 0 to 32768 [ 476.863130][T14236] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2548 (14236) [ 476.990990][T14236] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 477.049741][T14236] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 477.096339][T14236] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 477.157612][T14236] BTRFS info (device loop1): force zstd compression, level 15 [ 477.186745][T14236] BTRFS info (device loop1): using free space tree [ 477.292194][T14236] BTRFS info (device loop1): enabling ssd optimizations [ 477.328756][T14236] BTRFS info (device loop1): auto enabling async discard [ 477.585356][T14254] loop2: detected capacity change from 0 to 32768 [ 477.652996][T14254] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.2556 (14254) [ 477.716592][ T6646] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 477.914816][ T6207] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (6207) [ 479.033964][T14196] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 480.227864][T14392] loop5: detected capacity change from 0 to 512 [ 480.250491][T14394] loop6: detected capacity change from 0 to 128 [ 480.409139][T14392] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2589: inode has both inline data and extents flags [ 480.522818][T14392] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2589: couldn't read orphan inode 15 (err -117) [ 480.631674][T14392] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.763429][T14392] fscrypt (loop5, inode 18): Unsupported encryption flags (0xae) [ 480.898357][T14411] bad cache= option: noneages 0 [ 480.898357][T14411] nr_free_cma 0 [ 480.898357][T14411] numa_hit 1575000 [ 480.898357][T14411] numa_miss 0 [ 480.898357][T14411] numa_foreign 0 [ 480.898357][T14411] numa_interleave 47068 [ 480.898357][T14411] numa_local 1551165 [ 480.898357][T14411] numa_other 23835 [ 480.898357][T14411] nr_inactive_anon 0 [ 480.898357][T14411] nr_active_anon 14351 [ 480.898357][T14411] nr_inactive_file 4694 [ 480.898357][T14411] nr_active_file 762 [ 480.898357][T14411] nr_unevictable 768 [ 480.898357][T14411] nr_slab_reclaimable 11000 [ 480.898357][T14411] nr_slab_unreclaimable 96350 [ 480.898357][T14411] nr_isolated_anon 0 [ 480.898357][T14411] nr_isolated_file 0 [ 480.898357][T14411] workingset_nodes 0 [ 480.898357][T14411] workingset_refault_anon 1277 [ 480.898357][T14411] workingset_refault_file 312 [ 480.898357][T14411] workingset_activate_anon 1061 [ 480.898357][T14411] workingset_activate_file 55 [ 480.898357][T14411] workingset_restore_anon 1059 [ 480.898357][T14411] workingset_restore_file 0 [ 480.898357][T14411] workingset_nodereclaim 0 [ 480.898357][T14411] nr_anon_pages 9566 [ 480.898357][T14411] nr_mapped 25058 [ 480.898357][T14411] nr_file_pages 10977 [ 480.898357][T14411] nr_dirty 198 [ 480.898357][T14411] nr_writeback 0 [ 480.898357][T14411] nr_writeback_temp 0 [ 480.898357][T14411] nr_shmem 5554 [ 480.898357][T14411] nr_shmem_hugepages 0 [ 480.898357][T14411] nr_shmem_pmdmapped 0 [ 480.898357][T14411] nr_file_hugepages 0 [ 480.898357][T14411] nr_file_pmdmapped 0 [ 480.898357][T14411] nr_anon_transparent_hugepages 6 [ 480.898357][T14411] nr_vmscan_write 9206 [ 480.898357][T14411] nr_vmscan_immediate_reclaim 4 [ 480.898357][T14411] nr_dirtied 11001 [ 480.898357][T14411] nr_written 19197 [ 480.898357][T14411] nr_throttled_written 0 [ 480.898357][T14411] nr_kernel_misc_reclaimable 0 [ 480.898357][T14411] nr_foll_pin_acquired 8092 [ 480.898357][T14411] nr_foll_pin_released 8698 [ 480.898652][T14411] CIFS: VFS: bad cache= option: noneages 0 [ 480.898652][T14411] nr_free_cma 0 [ 480.898652][T14411] numa_hit 1575000 [ 480.898652][T14411] numa_miss 0 [ 480.898652][T14411] numa_foreign 0 [ 480.898652][T14411] numa_interleave 47068 [ 480.898652][T14411] numa_local 1551165 [ 480.898652][T14411] numa_other 23835 [ 480.898652][T14411] nr_inactive_anon 0 [ 480.898652][T14411] nr_active_anon 14351 [ 480.898652][T14411] nr_inactive_file 4694 [ 480.898652][T14411] nr_active_file 762 [ 480.898652][T14411] nr_unevictable 768 [ 480.898652][T14411] nr_slab_reclaimable 11000 [ 480.898652][T14411] nr_slab_unreclaimable 96350 [ 480.898652][T14411] nr_isolated_anon 0 [ 480.898652][T14411] nr_isolated_file 0 [ 480.898652][T14411] workingset_nodes 0 [ 480.898652][T14411] workingset_refault_anon 1277 [ 480.898652][T14411] workingset_refault_file 312 [ 480.898652][T14411] workingset_activate_anon 1061 [ 480.898652][T14411] workingset_activate_file 55 [ 480.898652][T14411] workingset_restore_anon 1059 [ 480.898652][T14411] workingset_restore_file 0 [ 480.898652][T14411] workingset_nodereclaim 0 [ 480.898652][T14411] nr_anon_pages 9566 [ 480.898652][T14411] nr_mapped 25058 [ 480.898652][T14411] nr_file_pages 10977 [ 480.898652][T14411] nr_dirty 198 [ 480.898652][T14411] nr_writeback 0 [ 480.898652][T14411] nr_writeback_temp 0 [ 480.898652][T14411] nr_shmem 5554 [ 480.898652][T14411] nr_shmem_hugepages 0 [ 480.898652][T14411] nr_shmem_pmdmapped 0 [ 480.898652][T14411] nr_file_hugepages 0 [ 480.898652][T14411] nr_file_pmdmapped 0 [ 480.898652][T14411] nr_anon_transparent_hugepages 6 [ 480.898652][T14411] nr_vmscan_write 9206 [ 480.898652][T14411] nr_vmscan_immediate_reclaim 4 [ 480.898652][T14411] nr_dirtied 11001 [ 480.898652][T14411] nr_written 19197 [ 480.898652][T14411] nr_throttled_written 0 [ 480.898652][T14411] nr_kernel_misc_reclaimable 0 [ 480.898652][T14411] nr_foll_pin_acquired 8092 [ 480.898652][T14411] nr_foll_pin_released 8698 [ 481.083301][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.268365][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.405750][ T7124] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.397282][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 482.601315][ T9] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 482.623805][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.658845][ T9] usb 6-1: Product: syz [ 482.678891][ T9] usb 6-1: Manufacturer: syz [ 482.700432][ T9] usb 6-1: SerialNumber: syz [ 482.732293][ T9] usb 6-1: config 0 descriptor?? [ 482.777625][ T9] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 483.010161][T14437] loop6: detected capacity change from 0 to 32768 [ 483.039019][T14437] XFS: ikeep mount option is deprecated. [ 483.084127][T14437] XFS: ikeep mount option is deprecated. [ 483.163008][T14437] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 483.199928][T14437] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 483.280606][T14437] XFS (loop6): Ending clean mount [ 483.291601][T14437] XFS (loop6): Quotacheck needed: Please wait. [ 483.364514][T14437] XFS (loop6): Quotacheck: Done. [ 483.444021][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 483.444032][ T27] audit: type=1800 audit(1786971914.864:85): pid=14437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2608" name="bus" dev="loop6" ino=9290 res=0 errno=0 [ 483.566407][ T8533] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 483.597214][ T9] usb 6-1: USB disconnect, device number 25 [ 484.253240][T14468] loop2: detected capacity change from 0 to 4096 [ 484.290030][T14468] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 484.407179][T14468] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 484.491650][T14474] loop5: detected capacity change from 0 to 2048 [ 484.532488][T14474] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 484.574935][ T5853] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 484.716957][ T7124] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.780333][ T5853] usb 7-1: Using ep0 maxpacket: 16 [ 484.825718][ T5853] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.874370][ T5853] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.900944][T14479] block2mtd: parameter too long [ 484.916088][ T5853] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 484.954712][T14380] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 484.989287][ T5853] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 485.136457][ T5853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.199918][ T5853] usb 7-1: config 0 descriptor?? [ 485.425160][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 485.632661][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 485.649779][ T5853] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 485.679463][ T9] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.713100][ T5853] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 485.732277][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 485.739255][ T5853] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 485.775318][ T9] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 485.790001][ T5853] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 485.830153][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.839093][ T5853] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 485.882400][ T5853] microsoft 0003:045E:07DA.000F: ignoring exceeding usage max [ 485.892641][ T9] usb 6-1: config 0 descriptor?? [ 485.921024][ T5853] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 485.947789][ T5853] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 485.968317][ T5853] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 485.994750][ T5853] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 486.015921][ T5853] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 486.034148][ T5853] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 486.057268][ T5853] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 486.077999][ T5853] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 486.089582][T14537] loop2: detected capacity change from 0 to 40427 [ 486.101371][ T5853] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 486.121638][T14537] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 486.136830][ T5821] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 486.150716][ T5853] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 486.171615][T14537] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 486.184139][ T5853] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 486.212942][T14537] F2FS-fs (loop2): invalid crc value [ 486.218769][ T5853] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 486.238012][T14537] F2FS-fs (loop2): Found nat_bits in checkpoint [ 486.259604][ T5853] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 486.316740][ T5853] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.000F/input/input23 [ 486.339973][ T9] mcp2221 0003:04D8:00DD.0010: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 486.358783][ T5821] usb 2-1: Using ep0 maxpacket: 8 [ 486.403044][ T5821] usb 2-1: unable to get BOS descriptor or descriptor too short [ 486.421259][ T5821] usb 2-1: config 117 has an invalid interface number: 163 but max is 0 [ 486.439710][T14537] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 486.454698][ T5821] usb 2-1: config 117 has no interface number 0 [ 486.482132][T14537] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 486.495329][ T5853] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 486.522701][ T5821] usb 2-1: config 117 interface 163 has no altsetting 0 [ 486.628542][ T5821] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 486.671227][T14537] syz.2.2627: attempt to access beyond end of device [ 486.671227][T14537] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 486.687948][ T5853] usb 7-1: USB disconnect, device number 11 [ 486.704902][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.743760][ T5821] usb 2-1: Product: syz [ 486.783560][ T5821] usb 2-1: Manufacturer: syz [ 486.790207][T14537] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 486.813985][ T5820] usb 6-1: USB disconnect, device number 26 [ 486.822696][ T5821] usb 2-1: SerialNumber: syz [ 487.141235][T14550] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2633'. [ 487.679328][ T5821] f81534a_ctrl 2-1:117.163: failed to enable ports: -71 [ 487.708730][ T5821] f81534a_ctrl: probe of 2-1:117.163 failed with error -71 [ 487.797191][ T5821] usb 2-1: USB disconnect, device number 22 [ 487.899168][T14562] loop2: detected capacity change from 0 to 256 [ 487.981176][T14564] loop5: detected capacity change from 0 to 1024 [ 487.998231][T14562] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 488.042576][T14564] EXT4-fs: Ignoring removed bh option [ 488.133644][T14564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.389487][ T7124] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.430825][T14575] program syz.1.2643 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 489.276238][T14596] loop5: detected capacity change from 0 to 1024 [ 489.343296][T14596] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 489.549019][ T27] audit: type=1800 audit(1786971920.964:86): pid=14601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2653" name="bus" dev="loop5" ino=990 res=0 errno=0 [ 489.773524][T14585] loop6: detected capacity change from 0 to 32768 [ 489.926319][T14585] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 490.036581][T14585] XFS (loop6): Ending clean mount [ 490.334139][T14598] loop2: detected capacity change from 0 to 32768 [ 490.376819][T14600] loop1: detected capacity change from 0 to 32768 [ 490.396038][T14535] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 490.400327][T14534] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 490.540726][T14600] ea_get: invalid extended attribute [ 490.583434][ T8533] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 490.725131][T14600] ffff88805a6ca830: 04 00 00 00 .... [ 490.827019][T14600] ea_get: invalid extended attribute [ 490.832426][T14600] ffff88805a6ca830: 04 00 00 00 .... [ 491.035072][T14649] ea_get: invalid extended attribute [ 491.117221][T14649] ffff88805a6ca830: 04 00 00 00 .... [ 491.149877][T14603] loop5: detected capacity change from 0 to 40427 [ 491.295635][T14603] F2FS-fs (loop5): Wrong segment_count / block_count (31 > 0) [ 491.384840][T14603] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 491.493111][T14603] F2FS-fs (loop5): invalid crc value [ 491.599960][T14603] F2FS-fs (loop5): Found nat_bits in checkpoint [ 491.869930][T14603] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 491.914869][T14603] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 492.008858][T14603] syz.5.2656: attempt to access beyond end of device [ 492.008858][T14603] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 492.136322][T14634] loop2: detected capacity change from 0 to 32768 [ 492.157548][T14673] syz.5.2656: attempt to access beyond end of device [ 492.157548][T14673] loop5: rw=2049, sector=45136, nr_sectors = 32 limit=40427 [ 492.235778][T14634] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 492.261153][T14673] syz.5.2656: attempt to access beyond end of device [ 492.261153][T14673] loop5: rw=2049, sector=45192, nr_sectors = 16 limit=40427 [ 492.329451][T14673] syz.5.2656: attempt to access beyond end of device [ 492.329451][T14673] loop5: rw=2049, sector=45240, nr_sectors = 16 limit=40427 [ 492.368442][T14634] XFS (loop2): Ending clean mount [ 492.420647][T14673] syz.5.2656: attempt to access beyond end of device [ 492.420647][T14673] loop5: rw=2049, sector=45272, nr_sectors = 32 limit=40427 [ 492.453172][T14669] loop6: detected capacity change from 0 to 32768 [ 492.474753][ T5821] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 492.561212][ T5780] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 492.578227][T14669] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 492.671864][ T7124] syz-executor: attempt to access beyond end of device [ 492.671864][ T7124] loop5: rw=2049, sector=45328, nr_sectors = 8 limit=40427 [ 492.697469][ T5821] usb 2-1: not running at top speed; connect to a high speed hub [ 492.744887][ T5821] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.803762][ T7124] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 492.833253][ T5821] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 492.855578][T14669] XFS (loop6): Ending clean mount [ 492.896816][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.955599][ T27] audit: type=1800 audit(1786971924.374:87): pid=14669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2657" name="file1" dev="loop6" ino=4422 res=0 errno=0 [ 493.009087][ T5821] usb 2-1: Found UVC 1.00 device (046d:0825) [ 493.117720][ T8533] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 493.419616][ T5821] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 493.540066][ T5821] videodev: could not get a free minor [ 493.572497][ T5821] uvcvideo 2-1:1.1: Failed to register meta-cap device (-23). [ 493.700329][ T5821] usb 2-1: USB disconnect, device number 23 [ 494.675276][T14718] program syz.1.2672 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 495.145608][T14729] loop6: detected capacity change from 0 to 1024 [ 495.227768][T14729] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.348374][ T27] audit: type=1800 audit(1786971926.774:88): pid=14729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2676" name="file0" dev="loop6" ino=13 res=0 errno=0 [ 495.486238][ T8533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.267223][T14759] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2687'. [ 496.386018][T14665] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 496.687330][T14791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2693'. [ 496.860538][T14798] loop1: detected capacity change from 0 to 1024 [ 496.982106][T14801] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 497.071835][T14801] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 497.257998][T14805] loop1: detected capacity change from 0 to 512 [ 497.338736][T14805] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 497.406920][T14805] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.2699: corrupted in-inode xattr: e_value size too large [ 497.428217][T14810] loop6: detected capacity change from 0 to 1024 [ 497.516418][T14805] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2699: couldn't read orphan inode 15 (err -117) [ 497.611560][T14805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.820903][T14805] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 497.948061][T14816] loop6: detected capacity change from 0 to 512 [ 497.996055][ T6646] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.008220][T14816] EXT4-fs (loop6): unsupported inode size: 4096 [ 498.060427][T14816] EXT4-fs (loop6): blocksize: 1024 [ 498.108527][T13007] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 498.180536][ T5794] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 498.494882][T14825] netlink: 'syz.6.2707': attribute type 1 has an invalid length. [ 498.502765][T14825] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2707'. [ 500.146463][ T5090] Bluetooth: hci1: command 0x0406 tx timeout [ 500.171915][T14870] loop5: detected capacity change from 0 to 8192 [ 500.244582][T14870] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 500.332241][T14870] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 500.388018][T14870] REISERFS (device loop5): using ordered data mode [ 500.434490][T14870] reiserfs: using flush barriers [ 500.517546][T14870] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 500.616345][T14883] loop1: detected capacity change from 0 to 256 [ 500.635250][T14885] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2733'. [ 500.650549][T14870] REISERFS (device loop5): checking transaction log (loop5) [ 500.704058][T14883] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 500.741416][T14870] REISERFS (device loop5): Using r5 hash to sort names [ 500.793563][T14883] FAT-fs (loop1): Filesystem has been set read-only [ 500.801124][T14870] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 500.876865][T14883] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 500.970736][T14883] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 501.062020][ T27] audit: type=1800 audit(1786971932.474:89): pid=14883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2732" name=CD dev="loop1" ino=1048772 res=0 errno=0 [ 501.520461][T14899] loop6: detected capacity change from 0 to 512 [ 501.532521][T14901] loop2: detected capacity change from 0 to 512 [ 501.585373][T14783] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 501.587547][T14784] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 501.600926][T14785] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 501.749889][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.788904][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.099340][T14903] [ 502.101709][T14903] ====================================================== [ 502.108738][T14903] WARNING: possible circular locking dependency detected [ 502.115822][T14903] syzkaller #0 Not tainted [ 502.120254][T14903] ------------------------------------------------------ [ 502.127265][T14903] syz.5.2738/14903 is trying to acquire lock: [ 502.133335][T14903] ffff88814d63c0e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_lock+0x189/0x390 [ 502.142834][T14903] [ 502.142834][T14903] but task is already holding lock: [ 502.150944][T14903] ffff888148dfc788 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0 [ 502.160841][T14903] [ 502.160841][T14903] which lock already depends on the new lock. [ 502.160841][T14903] [ 502.171346][T14903] [ 502.171346][T14903] the existing dependency chain (in reverse order) is: [ 502.180362][T14903] [ 502.180362][T14903] -> #4 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 502.188534][T14903] __mutex_lock+0x135/0xc80 [ 502.193628][T14903] bd_finish_claiming+0x229/0x3f0 [ 502.199163][T14903] blkdev_get_by_dev+0x469/0x610 [ 502.204619][T14903] bdev_open_by_dev+0x77/0x100 [ 502.210440][T14903] setup_bdev_super+0x59/0x660 [ 502.215815][T14903] mount_bdev+0x1ce/0x2c0 [ 502.220816][T14903] legacy_get_tree+0xea/0x180 [ 502.226032][T14903] vfs_get_tree+0x8c/0x280 [ 502.231265][T14903] do_new_mount+0x24a/0xa40 [ 502.236397][T14903] init_mount+0xde/0x130 [ 502.241252][T14903] do_mount_root+0x97/0x230 [ 502.246586][T14903] mount_root_generic+0x1a6/0x3e0 [ 502.252562][T14903] prepare_namespace+0xc2/0x100 [ 502.258028][T14903] kernel_init_freeable+0x41a/0x560 [ 502.263744][T14903] kernel_init+0x1d/0x1c0 [ 502.268595][T14903] ret_from_fork+0x48/0x80 [ 502.273912][T14903] ret_from_fork_asm+0x11/0x20 [ 502.279244][T14903] [ 502.279244][T14903] -> #3 (bdev_lock){+.+.}-{3:3}: [ 502.286730][T14903] __mutex_lock+0x135/0xc80 [ 502.292421][T14903] bd_prepare_to_claim+0x1d9/0x4a0 [ 502.299289][T14903] truncate_bdev_range+0x4e/0x260 [ 502.305465][T14903] blkdev_fallocate+0x428/0x6a0 [ 502.311018][T14903] vfs_fallocate+0x585/0x6f0 [ 502.316923][T14903] do_madvise+0x166b/0x3790 [ 502.324622][T14903] __x64_sys_madvise+0xa6/0xc0 [ 502.330285][T14903] do_syscall_64+0x55/0xb0 [ 502.335252][T14903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 502.341861][T14903] [ 502.341861][T14903] -> #2 (mapping.invalidate_lock){++++}-{3:3}: [ 502.350311][T14903] down_write+0x97/0x200 [ 502.355464][T14903] set_blocksize+0x247/0x4b0 [ 502.360579][T14903] sb_min_blocksize+0xbe/0x190 [ 502.365861][T14903] ext4_fill_super+0x6e7/0x6870 [ 502.371249][T14903] get_tree_bdev+0x3e5/0x520 [ 502.376352][T14903] vfs_get_tree+0x8c/0x280 [ 502.381283][T14903] do_new_mount+0x24a/0xa40 [ 502.386385][T14903] init_mount+0xde/0x130 [ 502.391237][T14903] do_mount_root+0x97/0x230 [ 502.396261][T14903] mount_root_generic+0x1a6/0x3e0 [ 502.401801][T14903] prepare_namespace+0xc2/0x100 [ 502.407180][T14903] kernel_init_freeable+0x41a/0x560 [ 502.412980][T14903] kernel_init+0x1d/0x1c0 [ 502.417826][T14903] ret_from_fork+0x48/0x80 [ 502.422755][T14903] ret_from_fork_asm+0x11/0x20 [ 502.428129][T14903] [ 502.428129][T14903] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 502.436818][T14903] down_write+0x97/0x200 [ 502.441870][T14903] set_blocksize+0x1ff/0x4b0 [ 502.447015][T14903] sb_min_blocksize+0xbe/0x190 [ 502.453270][T14903] ext4_fill_super+0x6e7/0x6870 [ 502.458819][T14903] get_tree_bdev+0x3e5/0x520 [ 502.464434][T14903] vfs_get_tree+0x8c/0x280 [ 502.469581][T14903] do_new_mount+0x24a/0xa40 [ 502.474885][T14903] init_mount+0xde/0x130 [ 502.479653][T14903] do_mount_root+0x97/0x230 [ 502.485561][T14903] mount_root_generic+0x1a6/0x3e0 [ 502.491307][T14903] prepare_namespace+0xc2/0x100 [ 502.497133][T14903] kernel_init_freeable+0x41a/0x560 [ 502.503222][T14903] kernel_init+0x1d/0x1c0 [ 502.508219][T14903] ret_from_fork+0x48/0x80 [ 502.513188][T14903] ret_from_fork_asm+0x11/0x20 [ 502.519520][T14903] [ 502.519520][T14903] -> #0 (&type->s_umount_key#31){++++}-{3:3}: [ 502.528405][T14903] __lock_acquire+0x37ef/0x7d80 [ 502.533895][T14903] lock_acquire+0x19e/0x420 [ 502.538964][T14903] down_read+0x46/0x2e0 [ 502.543648][T14903] super_lock+0x189/0x390 [ 502.548515][T14903] fs_bdev_mark_dead+0xad/0x1f0 [ 502.554085][T14903] bdev_mark_dead+0x83/0x1a0 [ 502.559190][T14903] blk_report_disk_dead+0x21c/0x3e0 [ 502.565010][T14903] del_gendisk+0x2cb/0x8f0 [ 502.570340][T14903] sd_remove+0x8d/0x100 [ 502.575193][T14903] device_release_driver_internal+0x458/0x6f0 [ 502.581827][T14903] bus_remove_device+0x43b/0x520 [ 502.587726][T14903] device_del+0x51f/0x910 [ 502.592582][T14903] __scsi_remove_device+0x1a2/0x390 [ 502.598321][T14903] scsi_forget_host+0xd0/0x110 [ 502.603827][T14903] scsi_remove_host+0x1b3/0x730 [ 502.609202][T14903] virtscsi_remove+0x130/0x1a0 [ 502.614494][T14903] virtio_dev_remove+0x96/0x1a0 [ 502.619876][T14903] device_release_driver_internal+0x408/0x6f0 [ 502.626463][T14903] bus_remove_device+0x43b/0x520 [ 502.632106][T14903] device_del+0x51f/0x910 [ 502.637126][T14903] device_unregister+0x20/0xc0 [ 502.642430][T14903] unregister_virtio_device+0x37/0x60 [ 502.648577][T14903] virtio_pci_remove+0x7f/0xf0 [ 502.654711][T14903] pci_device_remove+0x97/0x230 [ 502.660534][T14903] device_release_driver_internal+0x408/0x6f0 [ 502.669118][T14903] unbind_store+0x1a1/0x1d0 [ 502.674788][T14903] kernfs_fop_write_iter+0x3a4/0x520 [ 502.681950][T14903] vfs_write+0x474/0x9a0 [ 502.687219][T14903] ksys_write+0x151/0x260 [ 502.692723][T14903] do_syscall_64+0x55/0xb0 [ 502.698230][T14903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 502.706331][T14903] [ 502.706331][T14903] other info that might help us debug this: [ 502.706331][T14903] [ 502.717452][T14903] Chain exists of: [ 502.717452][T14903] &type->s_umount_key#31 --> bdev_lock --> &bdev->bd_holder_lock [ 502.717452][T14903] [ 502.731901][T14903] Possible unsafe locking scenario: [ 502.731901][T14903] [ 502.739636][T14903] CPU0 CPU1 [ 502.745219][T14903] ---- ---- [ 502.750949][T14903] lock(&bdev->bd_holder_lock); [ 502.756015][T14903] lock(bdev_lock); [ 502.762649][T14903] lock(&bdev->bd_holder_lock); [ 502.770134][T14903] rlock(&type->s_umount_key#31); [ 502.775272][T14903] [ 502.775272][T14903] *** DEADLOCK *** [ 502.775272][T14903] [ 502.783418][T14903] 8 locks held by syz.5.2738/14903: [ 502.788706][T14903] #0: ffff88802df3cd48 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 502.798052][T14903] #1: ffff88807c082418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 502.806978][T14903] #2: ffff8880266bec88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 [ 502.816751][T14903] #3: ffff888146a5c1f0 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 502.827499][T14903] #4: ffff88801b73c1b8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 502.838313][T14903] #5: ffff888022c900e0 (&shost->scan_mutex){+.+.}-{3:3}, at: scsi_remove_host+0x32/0x730 [ 502.848513][T14903] #6: ffff888022c0e3b8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 502.859344][T14903] #7: ffff888148dfc788 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0 [ 502.870770][T14903] [ 502.870770][T14903] stack backtrace: [ 502.876673][T14903] CPU: 0 PID: 14903 Comm: syz.5.2738 Not tainted syzkaller #0 [ 502.884461][T14903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 502.894799][T14903] Call Trace: [ 502.898083][T14903] [ 502.901048][T14903] dump_stack_lvl+0x18c/0x250 [ 502.905725][T14903] ? load_image+0x420/0x420 [ 502.910227][T14903] ? show_regs_print_info+0x20/0x20 [ 502.915681][T14903] ? print_circular_bug+0x12b/0x1a0 [ 502.920880][T14903] check_noncircular+0x2fc/0x400 [ 502.926009][T14903] ? print_deadlock_bug+0x5d0/0x5d0 [ 502.931307][T14903] ? lockdep_lock+0xf5/0x230 [ 502.936017][T14903] ? _find_first_zero_bit+0xd6/0x100 [ 502.941440][T14903] __lock_acquire+0x37ef/0x7d80 [ 502.946376][T14903] ? __lock_acquire+0x1262/0x7d80 [ 502.951399][T14903] ? verify_lock_unused+0x140/0x140 [ 502.956591][T14903] ? verify_lock_unused+0x140/0x140 [ 502.961792][T14903] ? find_lock_entries+0x120/0x1020 [ 502.967117][T14903] lock_acquire+0x19e/0x420 [ 502.971778][T14903] ? super_lock+0x189/0x390 [ 502.977114][T14903] ? __might_sleep+0xe0/0xe0 [ 502.982118][T14903] ? read_lock_is_recursive+0x20/0x20 [ 502.987627][T14903] ? __mutex_trylock_common+0x160/0x270 [ 502.993931][T14903] ? trace_raw_output_contention_end+0xd0/0xd0 [ 503.000310][T14903] ? mapping_try_invalidate+0x4bf/0x570 [ 503.006180][T14903] down_read+0x46/0x2e0 [ 503.011048][T14903] ? super_lock+0x189/0x390 [ 503.015675][T14903] super_lock+0x189/0x390 [ 503.020028][T14903] ? xa_find_after+0xaf/0x430 [ 503.024713][T14903] ? user_get_super+0x180/0x180 [ 503.029749][T14903] ? mutex_lock_nested+0x20/0x20 [ 503.034974][T14903] fs_bdev_mark_dead+0xad/0x1f0 [ 503.039841][T14903] ? super_s_dev_set+0xa0/0xa0 [ 503.044809][T14903] bdev_mark_dead+0x83/0x1a0 [ 503.049624][T14903] ? blk_report_disk_dead+0x88/0x3e0 [ 503.054928][T14903] blk_report_disk_dead+0x21c/0x3e0 [ 503.060134][T14903] ? __blk_mark_disk_dead+0x120/0x120 [ 503.066121][T14903] ? xa_find_after+0xaf/0x430 [ 503.070822][T14903] del_gendisk+0x2cb/0x8f0 [ 503.075443][T14903] ? blk_report_disk_dead+0x3e0/0x3e0 [ 503.080828][T14903] ? __pm_runtime_resume+0x129/0x170 [ 503.086119][T14903] sd_remove+0x8d/0x100 [ 503.090290][T14903] ? sd_probe+0x11c0/0x11c0 [ 503.094803][T14903] device_release_driver_internal+0x458/0x6f0 [ 503.100891][T14903] bus_remove_device+0x43b/0x520 [ 503.105927][T14903] ? bus_probe_device+0x260/0x260 [ 503.111234][T14903] ? up_write+0x1be/0x410 [ 503.115838][T14903] ? kernfs_remove_by_name_ns+0x117/0x150 [ 503.121857][T14903] device_del+0x51f/0x910 [ 503.126294][T14903] ? kill_device+0x160/0x160 [ 503.131180][T14903] ? kobject_put+0x421/0x450 [ 503.136236][T14903] __scsi_remove_device+0x1a2/0x390 [ 503.141646][T14903] scsi_forget_host+0xd0/0x110 [ 503.146741][T14903] scsi_remove_host+0x1b3/0x730 [ 503.151637][T14903] virtscsi_remove+0x130/0x1a0 [ 503.156608][T14903] virtio_dev_remove+0x96/0x1a0 [ 503.161470][T14903] ? virtio_dev_probe+0xae0/0xae0 [ 503.166670][T14903] device_release_driver_internal+0x408/0x6f0 [ 503.172831][T14903] bus_remove_device+0x43b/0x520 [ 503.177768][T14903] ? bus_probe_device+0x260/0x260 [ 503.182822][T14903] ? up_write+0x1be/0x410 [ 503.187145][T14903] ? kernfs_remove_by_name_ns+0x117/0x150 [ 503.192862][T14903] device_del+0x51f/0x910 [ 503.197217][T14903] ? kill_device+0x160/0x160 [ 503.201800][T14903] ? pci_device_is_present+0x175/0x240 [ 503.207272][T14903] ? pci_real_dma_dev+0x20/0x20 [ 503.212198][T14903] ? _raw_spin_lock_irq+0xbb/0xf0 [ 503.217237][T14903] device_unregister+0x20/0xc0 [ 503.222097][T14903] unregister_virtio_device+0x37/0x60 [ 503.227565][T14903] virtio_pci_remove+0x7f/0xf0 [ 503.232678][T14903] pci_device_remove+0x97/0x230 [ 503.237524][T14903] ? pci_device_probe+0x8d0/0x8d0 [ 503.242774][T14903] device_release_driver_internal+0x408/0x6f0 [ 503.248949][T14903] unbind_store+0x1a1/0x1d0 [ 503.254280][T14903] ? sysfs_kf_read+0x360/0x360 [ 503.260478][T14903] kernfs_fop_write_iter+0x3a4/0x520 [ 503.265935][T14903] vfs_write+0x474/0x9a0 [ 503.270318][T14903] ? file_end_write+0x250/0x250 [ 503.275482][T14903] ? __fget_files+0x3fc/0x460 [ 503.280188][T14903] ? __fdget_pos+0x2a3/0x330 [ 503.284802][T14903] ? ksys_write+0x74/0x260 [ 503.289331][T14903] ksys_write+0x151/0x260 [ 503.293854][T14903] ? __ia32_sys_read+0x90/0x90 [ 503.298731][T14903] ? lockdep_hardirqs_on+0x98/0x150 [ 503.304396][T14903] do_syscall_64+0x55/0xb0 [ 503.309284][T14903] ? clear_bhb_loop+0x40/0x90 [ 503.313977][T14903] ? clear_bhb_loop+0x40/0x90 [ 503.318659][T14903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.324569][T14903] RIP: 0033:0x7f834d79e0d9 [ 503.329000][T14903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.348800][T14903] RSP: 002b:00007f834e725028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 503.357458][T14903] RAX: ffffffffffffffda RBX: 00007f834da25fa0 RCX: 00007f834d79e0d9 [ 503.365431][T14903] RDX: 000000000000000c RSI: 0000200000000140 RDI: 0000000000000003 [ 503.373482][T14903] RBP: 00007f834d835024 R08: 0000000000000000 R09: 0000000000000000 [ 503.381446][T14903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.389496][T14903] R13: 00007f834da26038 R14: 00007f834da25fa0 R15: 00007ffd5fe52ac8 [ 503.397469][T14903] [ 503.539560][ T10] device offline error, dev sda, sector 1114470 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 503.550790][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 139308) [ 503.592992][ T10] Buffer I/O error on device sda1, logical block 139270 [ 503.601520][ T10] Buffer I/O error on device sda1, logical block 139271 [ 503.609235][ T10] device offline error, dev sda, sector 1114518 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 503.621936][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 139314) [ 503.638324][ T10] Buffer I/O error on device sda1, logical block 139276 [ 503.646221][ T10] device offline error, dev sda, sector 1114550 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 503.658616][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 139318) [ 503.670705][ T10] Buffer I/O error on device sda1, logical block 139280 [ 503.678597][ T10] Buffer I/O error on device sda1, logical block 139281 [ 503.687829][ T10] device offline error, dev sda, sector 1114582 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 503.699137][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 139322) [ 503.710918][ T10] Buffer I/O error on device sda1, logical block 139284 [ 503.718028][ T10] device offline error, dev sda, sector 1114598 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 503.729747][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 139324) [ 503.743931][ T10] Buffer I/O error on device sda1, logical block 139286 [ 503.754094][ T10] device offline error, dev sda, sector 1114614 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 503.766318][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 139326) [ 503.778976][ T10] Buffer I/O error on device sda1, logical block 139288 [ 503.786375][ T10] device offline error, dev sda, sector 1114662 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 503.798967][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 139332) [ 503.810833][ T10] Buffer I/O error on device sda1, logical block 139294 [ 503.817916][ T10] Buffer I/O error on device sda1, logical block 139295 [ 503.825905][ T10] device offline error, dev sda, sector 1114726 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 503.837239][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 139340) [ 503.849545][ T10] device offline error, dev sda, sector 1114790 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 503.860525][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 139348) [ 503.873113][ T10] device offline error, dev sda, sector 1114822 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 503.883966][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 139352) [ 503.908090][T10222] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2031, error -5) [ 503.921914][ T5106] Aborting journal on device sda1-8. [ 503.927359][ T10] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 503.937129][ T5106] JBD2: I/O error when updating journal superblock for sda1-8. [ 503.961825][T14903] EXT4-fs (sda1): shut down requested (2) [ 504.009568][T14903] sd 0:0:1:0: [sda] Synchronizing SCSI cache