last executing test programs: 3m34.968925799s ago: executing program 1 (id=62): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)={0x4c, r1, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, ']((+#&\'/,]],@\x00'}]}]}]}]}, 0x4c}}, 0x0) 3m34.8740155s ago: executing program 1 (id=63): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000880), r0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={0x20, r1, 0x901, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 3m34.553588382s ago: executing program 1 (id=67): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) creat(&(0x7f0000002000)='./file0\x00', 0xa) 3m34.288830923s ago: executing program 1 (id=71): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) creat(&(0x7f0000000200)='./cgroup\x00', 0x80) 3m33.970536736s ago: executing program 1 (id=74): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000100)) 3m33.787294576s ago: executing program 1 (id=76): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000900)={[{@acl}, {@usrjquota_file, 0x4}, {@acl}, {@balloc_hashed_reloc}, {@usrjquota, 0x3d}]}, 0x2, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) 3m26.931015398s ago: executing program 3 (id=133): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)={0x1c, r0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x2000) 3m26.880001448s ago: executing program 3 (id=135): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 3m26.61909973s ago: executing program 3 (id=138): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000002000100240012800b00010065727370616e0000140002800600020030000000080004"], 0x44}}, 0x0) 3m26.451287011s ago: executing program 3 (id=141): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000080)='./file1\x00', 0x818, &(0x7f00000000c0)={[{@nossd_spread}, {@nobarrier}, {@fatal_errors_bug}, {@notreelog}, {@noflushoncommit}, {@acl}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x39, 0x35, 0x67, 0x30, 0x33, 0x36]}}]}, 0x1, 0x50f9, &(0x7f0000005140)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 3m25.554891316s ago: executing program 3 (id=148): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010003904fdffffff0000000000000000", @ANYRES32=r1, @ANYBLOB="01980500431305002c0012800b00010067726574617000001c000280060011004e240000060010"], 0x4c}}, 0x0) 3m25.030880799s ago: executing program 3 (id=153): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0x7, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x50) 3m24.492711463s ago: executing program 32 (id=153): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0x7, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x50) 3m18.628750148s ago: executing program 33 (id=76): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000900)={[{@acl}, {@usrjquota_file, 0x4}, {@acl}, {@balloc_hashed_reloc}, {@usrjquota, 0x3d}]}, 0x2, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) 55.664257583s ago: executing program 0 (id=1356): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xffffffffffffffd8}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}}, 0x0) 55.443154034s ago: executing program 0 (id=1360): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0xfefc, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x4) 55.336221805s ago: executing program 0 (id=1361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) 55.151105296s ago: executing program 0 (id=1363): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x4, 0x570, &(0x7f0000000680)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x8000000000000000, 0xa8d02) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 54.959557427s ago: executing program 0 (id=1367): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x9, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x30}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x7ff, 0x20}, &(0x7f0000000180)=0xc) 54.54538119s ago: executing program 0 (id=1376): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 54.272045211s ago: executing program 34 (id=1376): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 16.139994312s ago: executing program 4 (id=1826): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffffe, {0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x12, 0x5, 0x0, "de0c2dea1061a1db869ed552804127f9ba6226d3e30e89d8d3d3f2889bc1248c7210eb14d2e4d7e5d7f957fdcdb8a7cd2a8d24cee5c0043b1eae0b181d2a9c65", "f25c6bf857339c73a535b0ab568c7f7e15003cda37db33c12515eba545bbdb3217940e8e827a2a04871b510a7592b2906064586f333178a7fd36d37942a574aa", "8b5a9a0103626e050a00", [0x2, 0xad]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, 0x0, 0x0, 0x7}, 0x94) r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000080), 0x23}) 16.002659213s ago: executing program 4 (id=1828): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000140), 0xfd, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 15.549749615s ago: executing program 4 (id=1834): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r0, &(0x7f0000000100)=""/94, 0xfffffcf7) 14.562990781s ago: executing program 4 (id=1843): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x1010051, &(0x7f0000000240)={[{@debug}, {@inlinecrypt}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@resuid}]}, 0x1, 0x550, &(0x7f00000002c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') getxattr(&(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x0) 13.973066315s ago: executing program 4 (id=1845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4088}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 10.390169817s ago: executing program 4 (id=1875): syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file1\x00', 0x204800, &(0x7f0000000100)={[{@shortname_winnt}, {@fat=@gid}, {@shortname_lower}, {@shortname_winnt}, {@fat=@check_strict}]}, 0x11, 0x305, &(0x7f0000002480)="$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") ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x300}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x1008001, 0x0, 0x0, 0x0, 0x0) 10.021480559s ago: executing program 35 (id=1875): syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file1\x00', 0x204800, &(0x7f0000000100)={[{@shortname_winnt}, {@fat=@gid}, {@shortname_lower}, {@shortname_winnt}, {@fat=@check_strict}]}, 0x11, 0x305, &(0x7f0000002480)="$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") ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x300}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x1008001, 0x0, 0x0, 0x0, 0x0) 4.598518622s ago: executing program 2 (id=1910): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) recvmsg(r0, &(0x7f00000024c0)={0x0, 0x0, 0x0}, 0x10000) write(r0, &(0x7f0000000140)="24000000010006", 0x7) 4.309255563s ago: executing program 2 (id=1912): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {0x2, 0x0, 0x1}, 0xfd}, 0x18) 4.120535635s ago: executing program 2 (id=1913): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x8000000000000001) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x1) 3.452844179s ago: executing program 6 (id=1919): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000a31000)={0x20071026}, 0x0) 2.615189564s ago: executing program 6 (id=1923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac02}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac02]}]]}, 0x38}, 0x1, 0x0, 0x0, 0x400a841}, 0x4004010) 2.470752355s ago: executing program 6 (id=1924): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 2.264721276s ago: executing program 6 (id=1925): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000780)={[{@bsdgroups}, {@grpid}, {@uqnoenforce}, {@gquota}, {@grpquota}, {@pqnoenforce}, {@gquota}], [{@flag='sync'}]}, 0x4, 0x967e, &(0x7f0000009680)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) sendfile(r0, r0, 0x0, 0xe0000000) 1.922771318s ago: executing program 7 (id=1876): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000600)={0x1, 0x0, [{0xd, 0x2, 0x1, 0x7, 0x7, 0x1, 0x1}]}) 1.879545218s ago: executing program 2 (id=1928): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file2\x00', 0x2200800, &(0x7f0000000080), 0x4, 0x96bd, &(0x7f0000012d00)="$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") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x2) 1.681885089s ago: executing program 5 (id=1930): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) 1.62137559s ago: executing program 7 (id=1931): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/kexec_crash_size', 0x40000, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) readv(r0, &(0x7f0000001ac0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1) 1.53747613s ago: executing program 5 (id=1932): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x9) 1.50821129s ago: executing program 7 (id=1933): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x301c802, &(0x7f0000000f80)=ANY=[], 0x11, 0x605c, &(0x7f000000a140)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.367150021s ago: executing program 5 (id=1934): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [], {}, [{0x8, 0x3}, {0x8, 0x2}], {0x10, 0x5}}, 0x34, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x18a) 1.202109982s ago: executing program 5 (id=1935): set_mempolicy(0x3, &(0x7f0000000080)=0x1ff, 0x5) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4a, 0x3, 0x0, 0x5, 0x0, 0x2, 0x6c, 0x87a, 0x6, 0x7, 0x0, 0x3, 0x1, 0x3, 0x8ca, 0x8005], 0x2000, 0x1f2a15}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 1.082678053s ago: executing program 5 (id=1936): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1568, 0x10000, 0x2, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r0, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 1.074677593s ago: executing program 6 (id=1937): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) 836.187354ms ago: executing program 5 (id=1938): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x16, {0x2, 0x0, @private}, 'syz_tun\x00'}) 685.131525ms ago: executing program 6 (id=1939): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x10040, &(0x7f00000000c0)={[{@journal_async_commit}, {@noacl}, {@coherency_full}, {@heartbeat_none}, {@journal_async_commit}, {@nouser_xattr}]}, 0x1, 0x444c, &(0x7f000000cd40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) 633.604866ms ago: executing program 7 (id=1940): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x50, r1, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x50}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) 516.372617ms ago: executing program 2 (id=1941): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 142.715349ms ago: executing program 2 (id=1942): syz_80211_inject_frame(0x0, 0x0, 0x262) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 56.401329ms ago: executing program 7 (id=1943): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x14, r1, 0x701}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) 0s ago: executing program 7 (id=1944): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x16) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x0, 0xfffbfffd, 0x3, 0x4f, "0c41920887e8d2b791f19dd026d76d7fcb366b", 0x4, 0x200}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x8) kernel console output (not intermixed with test programs): ronizing with TNC [ 214.539303][ T6332] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 214.882628][ T9372] loop2: detected capacity change from 0 to 32768 [ 214.897670][ T9372] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 214.953319][ T9372] XFS (loop2): Ending clean mount [ 215.086605][ T5783] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 215.147106][ T5838] kernel read not supported for file /dsp (pid: 5838 comm: kworker/0:4) [ 215.795748][ T23] kernel read not supported for file /dsp (pid: 23 comm: kworker/1:0) [ 215.915795][ T9409] loop4: detected capacity change from 0 to 2048 [ 215.958639][ T9412] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1057'. [ 215.988810][ T9412] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1057'. [ 216.003665][ T9412] team0: entered promiscuous mode [ 216.013050][ T9412] team_slave_0: entered promiscuous mode [ 216.020435][ T9412] team_slave_1: entered promiscuous mode [ 216.035187][ T9412] gretap0: entered promiscuous mode [ 216.166275][ T9418] loop4: detected capacity change from 0 to 512 [ 216.188934][ T9418] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 216.236384][ T9418] EXT4-fs (loop4): 1 truncate cleaned up [ 216.247398][ T9418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.290316][ T9418] EXT4-fs error (device loop4): ext4_xattr_block_list:772: inode #15: comm syz.4.1060: corrupted xattr block 33: invalid header [ 216.311204][ T9418] EXT4-fs (loop4): Remounting filesystem read-only [ 216.355959][ T6332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.435454][ T9404] loop5: detected capacity change from 0 to 65536 [ 216.443900][ T9422] loop0: detected capacity change from 0 to 16 [ 216.453229][ T9422] erofs: (device loop0): mounted with root inode @ nid 36. [ 216.475796][ T9404] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 216.488279][ T28] audit: type=1800 audit(1761849876.809:36): pid=9422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1063" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 216.564344][ T9404] XFS (loop5): Ending clean mount [ 216.621033][ T9436] loop0: detected capacity change from 0 to 128 [ 216.660859][ T9436] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.699055][ T9436] ext4 filesystem being mounted at /286/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 216.710482][ T6444] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 216.760123][ T9436] fscrypt (loop0, inode 12): Unsupported encryption flags (0x0e) [ 216.799822][ T5785] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.998239][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 217.138575][ T5796] Bluetooth: hci2: command 0x0406 tx timeout [ 217.178881][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 217.185532][ T23] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 217.193845][ T23] usb 3-1: config 179 has no interface number 0 [ 217.200200][ T23] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 217.211386][ T23] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 217.223005][ T5853] kernel read not supported for file /dsp (pid: 5853 comm: kworker/1:4) [ 217.231467][ T23] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 217.247586][ T23] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 217.263421][ T23] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 217.276796][ T23] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 217.286931][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.297509][ T9443] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 217.408205][ T5853] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 217.572759][ T786] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input14 [ 217.588404][ T5853] usb 1-1: Using ep0 maxpacket: 8 [ 217.597660][ T5853] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 217.606904][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.622347][ T5853] pvrusb2: Hardware description: Terratec Grabster AV400 [ 217.629530][ T5853] pvrusb2: ********** [ 217.633567][ T5853] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 217.643927][ T5853] pvrusb2: Important functionality might not be entirely working. [ 217.652072][ T5853] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 217.663680][ T5853] pvrusb2: ********** [ 217.798767][ T8] usb 3-1: USB disconnect, device number 8 [ 217.798876][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 217.813331][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 217.823053][ T8] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 217.845514][ T2317] pvrusb2: Invalid write control endpoint [ 217.961283][ T2317] pvrusb2: Invalid write control endpoint [ 217.978218][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 218.008238][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 218.018394][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 218.039203][ T2317] pvrusb2: Device being rendered inoperable [ 218.061469][ T9450] pvrusb2: Killing an I2C write to 1 that is too large (desired=8192 limit=61) [ 218.075329][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 218.075698][ T8] usb 1-1: USB disconnect, device number 8 [ 218.089248][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 218.110351][ T2317] pvrusb2: Attached sub-driver cx25840 [ 218.119555][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 218.134732][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 218.291493][ T9469] loop4: detected capacity change from 0 to 2048 [ 218.351150][ T9469] Alternate GPT is invalid, using primary GPT. [ 218.363366][ T9469] loop4: p2 p3 p7 [ 218.597283][ T9481] loop5: detected capacity change from 0 to 8 [ 218.671031][ T9481] SQUASHFS error: Failed to read block 0x2d7: -5 [ 218.677427][ T9481] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 218.710803][ T9483] loop2: detected capacity change from 0 to 4096 [ 218.725286][ T9483] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 218.765602][ T9483] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 218.790402][ T9485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1088'. [ 219.026946][ T9496] netlink: 'syz.4.1095': attribute type 6 has an invalid length. [ 219.042824][ T9496] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1095'. [ 219.142511][ T9503] loop0: detected capacity change from 0 to 128 [ 219.150120][ T9503] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 219.179853][ T9503] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 219.210655][ T28] audit: type=1800 audit(1761849879.529:37): pid=9503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1099" name="file2" dev="loop0" ino=1048692 res=0 errno=0 [ 219.308196][ T5853] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 219.322865][ T42] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 219.332823][ T9507] loop2: detected capacity change from 0 to 4096 [ 219.402089][ T28] audit: type=1326 audit(1761849879.719:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193038efc9 code=0x7ffc0000 [ 219.455939][ T28] audit: type=1326 audit(1761849879.719:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193038efc9 code=0x7ffc0000 [ 219.526691][ T28] audit: type=1326 audit(1761849879.719:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f193038efc9 code=0x7ffc0000 [ 219.550762][ T5853] usb 6-1: Using ep0 maxpacket: 8 [ 219.580106][ T5853] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 219.588764][ T5853] usb 6-1: config 179 has no interface number 0 [ 219.595092][ T5853] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 219.608548][ T28] audit: type=1326 audit(1761849879.719:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193038efc9 code=0x7ffc0000 [ 219.658415][ T5853] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 219.678159][ T28] audit: type=1326 audit(1761849879.719:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193038efc9 code=0x7ffc0000 [ 219.700881][ T5853] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 219.738333][ T5853] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 219.758200][ T28] audit: type=1326 audit(1761849879.719:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f193038efc9 code=0x7ffc0000 [ 219.780987][ T5853] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 219.808179][ T5853] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 219.817277][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.828240][ T28] audit: type=1326 audit(1761849879.719:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193038efc9 code=0x7ffc0000 [ 219.888904][ T28] audit: type=1326 audit(1761849879.719:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193038efc9 code=0x7ffc0000 [ 219.901474][ T9518] loop0: detected capacity change from 0 to 64 [ 219.917133][ T9497] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 219.984059][ T9517] Trying to free block not in datazone [ 220.069147][ T9509] loop4: detected capacity change from 0 to 32768 [ 220.112546][ T9509] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 220.271500][ T9509] XFS (loop4): Ending clean mount [ 220.287267][ T23] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input15 [ 220.289217][ T9509] XFS (loop4): Quotacheck needed: Please wait. [ 220.357740][ T9509] XFS (loop4): Quotacheck: Done. [ 220.400150][ T5853] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 220.451922][ T6332] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 220.584985][ T5838] usb 6-1: USB disconnect, device number 10 [ 220.584985][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 220.585123][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 220.609520][ T5838] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 220.648456][ T5853] usb 1-1: Using ep0 maxpacket: 8 [ 220.665459][ T5853] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 220.684325][ T5853] usb 1-1: config 179 has no interface number 0 [ 220.709720][ T5853] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 220.744337][ T5853] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 220.766411][ T5853] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 220.789074][ T5853] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 220.810443][ T5853] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 220.824951][ T5853] usb 1-1: config 179 interface 65 has no altsetting 0 [ 220.832361][ T5853] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 220.841863][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.873634][ T5853] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input16 [ 221.065759][ T5853] usb 1-1: USB disconnect, device number 9 [ 221.066823][ T9540] loop2: detected capacity change from 0 to 32768 [ 221.071749][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 221.084639][ T5853] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 221.105084][ T9540] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 221.132526][ T9540] XFS (loop2): Ending clean mount [ 221.145414][ T9540] XFS (loop2): Quotacheck needed: Please wait. [ 221.188887][ T9540] XFS (loop2): Quotacheck: Done. [ 221.326928][ T5783] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 221.380731][ T9554] sp0: Synchronizing with TNC [ 221.800470][ T9559] loop2: detected capacity change from 0 to 2048 [ 221.884131][ T9559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.930554][ T9559] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.985958][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1120'. [ 221.996221][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1120'. [ 222.007263][ T9559] fs-verity (loop2, inode 13): Unknown hash algorithm number: 0 [ 222.155609][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.268892][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1123'. [ 222.386862][ T9561] loop4: detected capacity change from 0 to 40427 [ 222.422886][ T9561] F2FS-fs (loop4): invalid crc value [ 222.429191][ T9578] block nbd0: server does not support multiple connections per device. [ 222.443387][ T9561] F2FS-fs (loop4): Found nat_bits in checkpoint [ 222.445948][ T9578] block nbd0: shutting down sockets [ 222.541029][ T9586] loop0: detected capacity change from 0 to 4096 [ 222.575307][ T9586] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 222.593881][ T9561] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 222.669984][ T28] audit: type=1800 audit(1761849882.989:46): pid=9561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1118" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 222.771964][ T9561] syz.4.1118: attempt to access beyond end of device [ 222.771964][ T9561] loop4: rw=2049, sector=77824, nr_sectors = 2568 limit=40427 [ 222.964830][ T6332] syz-executor: attempt to access beyond end of device [ 222.964830][ T6332] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 222.998440][ T6332] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 223.040832][ T9602] loop0: detected capacity change from 0 to 4096 [ 223.060005][ T9602] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 223.457528][ T9617] loop0: detected capacity change from 0 to 1024 [ 223.581816][ T12] hfsplus: b-tree write err: -5, ino 8 [ 223.965578][ T9633] loop4: detected capacity change from 0 to 8192 [ 224.293627][ T9630] loop5: detected capacity change from 0 to 32768 [ 224.343793][ T9630] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 224.502321][ T6444] ocfs2: Unmounting device (7,5) on (node local) [ 224.806003][ T9635] loop2: detected capacity change from 0 to 40427 [ 224.834158][ T9635] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 224.866805][ T9635] F2FS-fs (loop2): invalid crc value [ 224.906663][ T9635] F2FS-fs (loop2): Found nat_bits in checkpoint [ 224.995342][ T9635] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 225.033444][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 225.033458][ T28] audit: type=1800 audit(1761849885.349:48): pid=9635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1147" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 225.080886][ T9676] loop4: detected capacity change from 0 to 512 [ 225.118702][ T5783] syz-executor: attempt to access beyond end of device [ 225.118702][ T5783] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 225.143209][ T9678] loop5: detected capacity change from 0 to 1024 [ 225.143249][ T5783] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 225.830946][ T9700] sp0: Synchronizing with TNC [ 225.936239][ T9692] loop4: detected capacity change from 0 to 32768 [ 225.982817][ T9711] loop2: detected capacity change from 0 to 128 [ 225.989494][ T9692] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 226.006555][ T9711] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 226.020175][ T9711] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.024137][ T9692] XFS (loop4): Ending clean mount [ 226.044354][ T28] audit: type=1800 audit(1761849886.359:49): pid=9711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1178" name="bus" dev="loop2" ino=12 res=0 errno=0 [ 226.105578][ T6332] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 226.128325][ T5783] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 226.481955][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1183'. [ 226.534465][ T9731] loop4: detected capacity change from 0 to 1024 [ 226.542126][ T9731] EXT4-fs: Ignoring removed mblk_io_submit option [ 226.548784][ T9731] EXT4-fs: inline encryption not supported [ 226.555661][ T9731] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 226.572380][ T9731] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c802e018, mo2=0000] [ 226.586460][ T9731] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.1179: bad orphan inode 11 [ 226.597585][ T9731] ext4_test_bit(bit=10, block=4) = 1 [ 226.610101][ T9731] is_bad_inode(inode)=0 [ 226.614405][ T9731] NEXT_ORPHAN(inode)=3254779904 [ 226.622214][ T9731] max_ino=32 [ 226.625524][ T9731] i_nlink=0 [ 226.644467][ T9731] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #3: block 2: comm syz.4.1179: lblock 2 mapped to illegal pblock 2 (length 1) [ 226.666401][ T9731] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 226.675093][ T9731] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #3: block 48: comm syz.4.1179: lblock 0 mapped to illegal pblock 48 (length 1) [ 226.689269][ T1197] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 226.707258][ T9731] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 226.722726][ T9731] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1179: Failed to acquire dquot type 0 [ 226.740860][ T9731] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 226.764375][ T9731] EXT4-fs error (device loop4): ext4_evict_inode:252: inode #11: comm syz.4.1179: mark_inode_dirty error [ 226.796418][ T9731] EXT4-fs warning (device loop4): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 226.820386][ T9731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.862610][ T9734] loop2: detected capacity change from 0 to 8192 [ 226.885531][ T9734] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 226.902897][ T6332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.916131][ T1197] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 226.927999][ T6332] EXT4-fs error (device loop4): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 226.942373][ T1197] usb 6-1: config 0 has no interface number 0 [ 226.961760][ T1197] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 226.967438][ T6332] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 226.980256][ T1197] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.980281][ T1197] usb 6-1: Product: syz [ 226.980294][ T1197] usb 6-1: Manufacturer: syz [ 226.980306][ T1197] usb 6-1: SerialNumber: syz [ 227.009465][ T1197] usb 6-1: config 0 descriptor?? [ 227.014181][ T6332] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 227.220792][ T1197] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 227.250310][ T9740] loop4: detected capacity change from 0 to 512 [ 227.254410][ T1197] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 227.257361][ T9740] EXT4-fs: Ignoring removed nobh option [ 227.285893][ T1197] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 227.301216][ T1197] usb 6-1: media controller created [ 227.321278][ T9740] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1188: iget: bad i_size value: 38620345925642 [ 227.345830][ T1197] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.368495][ T9740] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1188: couldn't read orphan inode 15 (err -117) [ 227.392490][ T9740] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.434387][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1190'. [ 227.498796][ T1197] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 227.568550][ T6332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.583118][ T1197] usb 6-1: USB disconnect, device number 11 [ 227.664742][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1194'. [ 227.695680][ T9751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1194'. [ 227.790558][ T9761] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1198'. [ 227.804430][ T9761] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1198'. [ 227.826692][ T9761] team0: entered promiscuous mode [ 227.833670][ T9761] team_slave_0: entered promiscuous mode [ 227.844629][ T9761] team_slave_1: entered promiscuous mode [ 227.853671][ T9761] gretap0: entered promiscuous mode [ 227.867948][ T9761] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 227.876202][ T9761] Cannot create hsr debugfs directory [ 227.997070][ T9767] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1201'. [ 228.050469][ T9767] netlink: 'syz.2.1201': attribute type 12 has an invalid length. [ 228.059820][ T9767] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1201'. [ 228.161227][ T9776] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1205'. [ 228.414994][ T9791] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1210'. [ 228.435913][ T9793] loop2: detected capacity change from 0 to 1024 [ 228.444778][ T9791] gretap0: entered promiscuous mode [ 228.451998][ T9791] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 228.468546][ T9791] Cannot create hsr debugfs directory [ 228.995475][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804e811800: rx timeout, send abort [ 229.007279][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804e811800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 229.174071][ T9823] loop4: detected capacity change from 0 to 1024 [ 229.277810][ T9812] loop5: detected capacity change from 0 to 32768 [ 229.315131][ T9812] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 229.337683][ T12] hfsplus: b-tree write err: -5, ino 8 [ 229.352055][ T9837] loop2: detected capacity change from 0 to 128 [ 229.495188][ T9812] XFS (loop5): Ending clean mount [ 229.519506][ T9812] XFS (loop5): Quotacheck needed: Please wait. [ 229.594348][ T9812] XFS (loop5): Quotacheck: Done. [ 229.728377][ T5853] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 229.751420][ T6444] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 229.928580][ T5853] usb 5-1: Using ep0 maxpacket: 32 [ 229.958931][ T5853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 229.968050][ T5853] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 229.991233][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.011352][ T5853] usb 5-1: Product: syz [ 230.015576][ T5853] usb 5-1: Manufacturer: syz [ 230.043375][ T5853] usb 5-1: SerialNumber: syz [ 230.073364][ T5853] usb 5-1: config 0 descriptor?? [ 230.499678][ T5853] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 230.657897][ T9843] loop2: detected capacity change from 0 to 65536 [ 230.689509][ T9843] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 230.748344][ T5796] Bluetooth: hci3: command 0x0405 tx timeout [ 230.763196][ T9843] XFS (loop2): Ending clean mount [ 230.778914][ T9843] XFS (loop2): Quotacheck needed: Please wait. [ 230.832451][ T9843] XFS (loop2): Quotacheck: Done. [ 230.907658][ T5783] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 230.918335][ T5853] usb 5-1: USB disconnect, device number 8 [ 231.130756][ T9858] loop0: detected capacity change from 0 to 32768 [ 231.282801][ T9882] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 231.294747][ T9882] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 231.725080][ T9899] loop0: detected capacity change from 0 to 512 [ 231.735540][ T9901] loop2: detected capacity change from 0 to 16 [ 231.749619][ T9901] erofs: (device loop2): mounted with root inode @ nid 36. [ 231.759646][ T9899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.776730][ T28] audit: type=1800 audit(1761849892.079:50): pid=9901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1252" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 231.778464][ T9899] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.824918][ T9899] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #2: comm syz.0.1246: corrupted inode contents [ 231.840252][ T9899] EXT4-fs error (device loop0): ext4_dirty_inode:6120: inode #2: comm syz.0.1246: mark_inode_dirty error [ 231.852360][ T9899] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #2: comm syz.0.1246: corrupted inode contents [ 231.864829][ T9899] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.1246: mark_inode_dirty error [ 231.896457][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.966303][ T9906] loop2: detected capacity change from 0 to 2048 [ 231.978270][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 232.011107][ T9906] loop2: p1 p3 p4 [ 232.016668][ T9906] loop2: p4 size 589824 extends beyond EOD, truncated [ 232.044467][ T9906] FAT-fs (loop2p1): invalid media value (0x00) [ 232.051962][ T9906] FAT-fs (loop2p1): Can't find a valid FAT filesystem [ 232.160398][ T8] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 232.169270][ T8] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 232.178660][ T8] usb 5-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 232.189325][ T8] usb 5-1: config 220 has no interface number 2 [ 232.195631][ T8] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 232.211129][ T8] usb 5-1: config 220 interface 0 has no altsetting 0 [ 232.218022][ T8] usb 5-1: config 220 interface 76 has no altsetting 0 [ 232.224982][ T8] usb 5-1: config 220 interface 1 has no altsetting 0 [ 232.234570][ T8] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 232.243923][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.252147][ T1197] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 232.260002][ T8] usb 5-1: Product: syz [ 232.264236][ T8] usb 5-1: Manufacturer: syz [ 232.278159][ T8] usb 5-1: SerialNumber: syz [ 232.448264][ T1197] usb 1-1: Using ep0 maxpacket: 8 [ 232.455206][ T1197] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 232.463740][ T1197] usb 1-1: config 179 has no interface number 0 [ 232.470344][ T1197] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 232.481889][ T1197] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 232.494478][ T1197] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 232.506002][ T1197] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 232.523064][ T1197] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 232.536703][ T1197] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 232.547653][ T8] usb 5-1: selecting invalid altsetting 0 [ 232.553550][ T1197] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.564959][ T8] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 232.584922][ T8] usb 5-1: No valid video chain found. [ 232.592465][ T9909] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 232.603434][ T8] usb 5-1: selecting invalid altsetting 0 [ 232.620969][ T8] usbtest: probe of 5-1:220.1 failed with error -22 [ 232.634088][ T8] usb 5-1: USB disconnect, device number 9 [ 232.892948][ T8] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input17 [ 233.081870][ T9922] loop2: detected capacity change from 0 to 16 [ 233.112961][ T9922] erofs: (device loop2): erofs_read_inode: unsupported chunk format ffff of nid 36 [ 233.186138][ T9927] __nla_validate_parse: 1 callbacks suppressed [ 233.186157][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1266'. [ 233.248647][ T5853] usb 1-1: USB disconnect, device number 10 [ 233.248763][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 233.263289][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 233.271627][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.271647][ T5853] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 233.312752][ T9929] loop2: detected capacity change from 0 to 512 [ 233.348825][ T9929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.397088][ T9929] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 233.411377][ T9933] loop4: detected capacity change from 0 to 16 [ 233.420862][ T9933] erofs: (device loop4): mounted with root inode @ nid 36. [ 233.447037][ T28] audit: type=1800 audit(1761849893.759:51): pid=9933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1261" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 233.482677][ T9929] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 233.544387][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.672244][ T9939] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1263'. [ 233.906497][ T9948] loop0: detected capacity change from 0 to 128 [ 233.924528][ T9948] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 233.927404][ T9949] loop2: detected capacity change from 0 to 512 [ 233.971417][ T9949] EXT4-fs (loop2): Test dummy encryption mode enabled [ 233.981145][ T9949] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 233.992188][ T9948] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.012205][ T9949] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1268: bad orphan inode 131083 [ 234.041716][ T9949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.063164][ T28] audit: type=1800 audit(1761849894.379:52): pid=9948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1267" name="bus" dev="loop0" ino=12 res=0 errno=0 [ 234.184547][ T5785] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 234.271923][ T9949] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 234.360813][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.556756][ T9969] loop0: detected capacity change from 0 to 1024 [ 234.753810][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1278'. [ 234.858006][ T9963] loop5: detected capacity change from 0 to 32768 [ 234.880315][ T9963] find_entry called with index = 0 [ 234.887741][ T9963] read_mapping_page failed! [ 234.900063][ T9963] ERROR: (device loop5): txCommit: [ 234.900063][ T9963] [ 234.914540][ T9963] ERROR: (device loop5): remounting filesystem as read-only [ 235.421134][ T9991] loop5: detected capacity change from 0 to 128 [ 235.431871][ T9988] loop0: detected capacity change from 0 to 1024 [ 235.456422][ T9991] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 235.483417][ T9991] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.533909][ T9995] loop2: detected capacity change from 0 to 128 [ 235.587408][ T28] audit: type=1800 audit(1761849895.899:53): pid=9991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1279" name="bus" dev="loop5" ino=12 res=0 errno=0 [ 235.599738][ T9995] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 235.696565][ T6444] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.985931][T10010] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1291'. [ 236.461955][T10006] loop0: detected capacity change from 0 to 32768 [ 236.507936][T10035] loop2: detected capacity change from 0 to 136 [ 236.515951][T10006] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 236.674552][T10006] XFS (loop0): Ending clean mount [ 236.694169][T10006] XFS (loop0): Quotacheck needed: Please wait. [ 236.778865][T10006] XFS (loop0): Quotacheck: Done. [ 236.883481][ T5785] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 236.887863][T10044] loop4: detected capacity change from 0 to 1024 [ 236.947599][T10028] loop5: detected capacity change from 0 to 32768 [ 236.985594][T10028] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 237.104260][T10028] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 237.147783][ T1095] hfsplus: b-tree write err: -5, ino 4 [ 237.226907][T10042] loop2: detected capacity change from 0 to 40427 [ 237.241626][T10042] F2FS-fs (loop2): invalid crc value [ 237.290955][T10042] F2FS-fs (loop2): Found nat_bits in checkpoint [ 237.311462][ T6444] ocfs2: Unmounting device (7,5) on (node local) [ 237.425239][T10042] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 237.571782][ T28] audit: type=1800 audit(1761849897.889:54): pid=10042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1302" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 237.628591][ T28] audit: type=1800 audit(1761849897.919:55): pid=10042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1302" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 237.675962][T10065] loop5: detected capacity change from 0 to 1024 [ 237.683386][T10065] EXT4-fs: Ignoring removed mblk_io_submit option [ 237.694791][T10065] EXT4-fs: inline encryption not supported [ 237.702256][T10065] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 237.728297][T10065] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c802e018, mo2=0000] [ 237.746332][T10065] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.1307: bad orphan inode 11 [ 237.767385][T10042] syz.2.1302: attempt to access beyond end of device [ 237.767385][T10042] loop2: rw=2049, sector=77824, nr_sectors = 2056 limit=40427 [ 237.786802][T10065] ext4_test_bit(bit=10, block=4) = 1 [ 237.796899][T10065] is_bad_inode(inode)=0 [ 237.810209][T10065] NEXT_ORPHAN(inode)=3254779904 [ 237.827891][T10042] syz.2.1302: attempt to access beyond end of device [ 237.827891][T10042] loop2: rw=2049, sector=79880, nr_sectors = 512 limit=40427 [ 237.832380][T10065] max_ino=32 [ 237.849686][T10065] i_nlink=0 [ 237.854895][T10065] EXT4-fs error (device loop5): ext4_map_blocks:608: inode #3: block 2: comm syz.5.1307: lblock 2 mapped to illegal pblock 2 (length 1) [ 237.874046][T10065] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 237.896687][T10065] EXT4-fs error (device loop5): ext4_map_blocks:608: inode #3: block 48: comm syz.5.1307: lblock 0 mapped to illegal pblock 48 (length 1) [ 237.914331][ T5783] syz-executor: attempt to access beyond end of device [ 237.914331][ T5783] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 237.919120][T10065] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 237.931256][ T5783] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 237.945601][T10065] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1307: Failed to acquire dquot type 0 [ 237.978242][T10065] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 238.018201][T10065] EXT4-fs error (device loop5): ext4_evict_inode:252: inode #11: comm syz.5.1307: mark_inode_dirty error [ 238.046473][T10065] EXT4-fs warning (device loop5): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 238.065216][T10065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.216182][ T6444] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.251576][ T6444] EXT4-fs error (device loop5): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 238.264757][T10080] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 238.287222][ T6444] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 238.304554][T10080] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 238.312469][ T6444] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 238.888267][ T23] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 238.953033][T10103] loop0: detected capacity change from 0 to 64 [ 238.984869][T10087] loop2: detected capacity change from 0 to 32768 [ 238.991230][T10105] netlink: 464 bytes leftover after parsing attributes in process `syz.4.1327'. [ 239.005581][ T28] audit: type=1800 audit(1761849899.319:56): pid=10103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1328" name="file1" dev="loop0" ino=22 res=0 errno=0 [ 239.039307][T10087] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 239.088503][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 239.101597][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.118395][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.130466][ T23] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 239.140354][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.168855][ T23] usb 6-1: config 0 descriptor?? [ 239.220870][T10087] XFS (loop2): Ending clean mount [ 239.231211][T10087] XFS (loop2): Quotacheck needed: Please wait. [ 239.325429][T10087] XFS (loop2): Quotacheck: Done. [ 239.345488][T10126] loop4: detected capacity change from 0 to 256 [ 239.364769][T10126] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 239.377630][T10126] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 239.415062][ T23] usbhid 6-1:0.0: can't add hid device: -71 [ 239.419139][T10126] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000006) [ 239.425039][ T23] usbhid: probe of 6-1:0.0 failed with error -71 [ 239.450265][T10126] exFAT-fs (loop4): Filesystem has been set read-only [ 239.457849][ T23] usb 6-1: USB disconnect, device number 12 [ 239.517830][ T5783] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 239.760278][T10135] netlink: 'syz.0.1338': attribute type 21 has an invalid length. [ 239.772972][T10135] netlink: 14565 bytes leftover after parsing attributes in process `syz.0.1338'. [ 239.797382][T10137] loop2: detected capacity change from 0 to 256 [ 240.164621][T10139] loop0: detected capacity change from 0 to 32768 [ 240.181472][T10139] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1339 (10139) [ 240.204097][T10139] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 240.214660][T10139] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 240.224864][T10139] BTRFS info (device loop0): force zlib compression, level 3 [ 240.232422][T10139] BTRFS info (device loop0): enabling ssd optimizations [ 240.239647][T10139] BTRFS info (device loop0): allowing degraded mounts [ 240.246451][T10139] BTRFS info (device loop0): force clearing of disk cache [ 240.253849][T10139] BTRFS info (device loop0): using free space tree [ 240.301406][T10139] BTRFS info (device loop0): rebuilding free space tree [ 240.326744][T10139] BTRFS info (device loop0): checking UUID tree [ 240.396606][ T5785] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 240.485801][T10173] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1347'. [ 240.638775][T10177] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1350'. [ 240.808805][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1352'. [ 240.825370][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1352'. [ 240.876976][T10188] loop4: detected capacity change from 0 to 1024 [ 240.933452][T10188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.055628][ T6332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.058618][T10196] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1356'. [ 241.514388][T10212] loop0: detected capacity change from 0 to 1024 [ 241.527336][T10186] loop2: detected capacity change from 0 to 32768 [ 241.562811][T10212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.588657][ T28] audit: type=1800 audit(1761849901.909:57): pid=10212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1363" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 241.849743][ T1197] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 242.078622][ T1197] usb 6-1: Using ep0 maxpacket: 32 [ 242.096890][ T1197] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 242.118298][ T1197] usb 6-1: config 0 has no interface number 0 [ 242.137868][ T1197] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 242.142354][ T1108] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.168276][ T1197] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.176673][ T1197] usb 6-1: Product: syz [ 242.185520][ T1197] usb 6-1: Manufacturer: syz [ 242.195945][ T1197] usb 6-1: SerialNumber: syz [ 242.208845][ T1197] usb 6-1: config 0 descriptor?? [ 242.220114][ T1197] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 242.251566][ T1108] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.374422][ T1108] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.431087][ T1197] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 242.444704][ T1197] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 242.444974][T10239] loop2: detected capacity change from 0 to 256 [ 242.516483][ T1108] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.834983][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 242.844094][ T8] usb 6-1: USB disconnect, device number 13 [ 242.882872][ T8] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 242.918056][ T8] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 242.941922][ T8] quatech2 6-1:0.51: device disconnected [ 242.982680][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 242.998864][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 243.008334][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 243.018521][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 243.026300][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 243.033932][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 243.627107][T10275] loop2: detected capacity change from 0 to 8 [ 243.643006][T10250] chnl_net:caif_netlink_parms(): no params data found [ 243.668643][T10275] SQUASHFS error: Failed to read block 0x636: -5 [ 243.675589][T10275] SQUASHFS error: Unable to read metadata cache entry [634] [ 243.694890][T10275] SQUASHFS error: Unable to read metadata cache entry [634] [ 243.713645][T10275] SQUASHFS error: Unable to read directory block [634:0] [ 243.771265][ T1108] gretap0 (unregistering): left promiscuous mode [ 243.891120][T10282] loop4: detected capacity change from 0 to 4096 [ 243.936525][T10284] loop5: detected capacity change from 0 to 4096 [ 243.977336][T10250] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.993904][T10250] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.002479][T10250] bridge_slave_0: entered allmulticast mode [ 244.009126][T10290] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 244.032232][T10250] bridge_slave_0: entered promiscuous mode [ 244.065747][T10291] loop2: detected capacity change from 0 to 2048 [ 244.085207][T10250] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.098396][T10291] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 244.118215][T10250] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.128674][T10250] bridge_slave_1: entered allmulticast mode [ 244.148183][T10250] bridge_slave_1: entered promiscuous mode [ 244.159079][T10291] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 244.194777][T10291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.251032][T10291] EXT4-fs (loop2): shut down requested (1) [ 244.291793][T10250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.339964][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.390265][T10299] loop6: detected capacity change from 0 to 524287999 [ 244.413093][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.422344][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 244.433344][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.442560][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 244.454549][T10250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.493337][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.502682][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 244.512101][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.521551][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 244.530268][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.539479][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 244.544601][T10250] team0: Port device team_slave_0 added [ 244.560540][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.569782][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 244.579847][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.589077][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 244.597518][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.606299][ T1108] team0: left promiscuous mode [ 244.606730][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 244.612645][ T1108] team_slave_0: left promiscuous mode [ 244.625907][T10299] ldm_validate_partition_table(): Disk read failed. [ 244.626816][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.633427][ T1108] team_slave_1: left promiscuous mode [ 244.641995][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 244.652974][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.664474][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 244.682145][T10299] Dev loop6: unable to read RDB block 0 [ 244.687870][ T1108] hsr_slave_0: left promiscuous mode [ 244.697293][T10299] loop6: unable to read partition table [ 244.706311][T10308] Bluetooth: MGMT ver 1.22 [ 244.717279][T10299] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾xИCÖ) failed (rc=-5) [ 244.727836][ T1108] hsr_slave_1: left promiscuous mode [ 244.737545][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.741285][T10304] ldm_validate_partition_table(): Disk read failed. [ 244.753165][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.757473][T10304] Dev loop6: unable to read RDB block 0 [ 244.769233][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.774042][T10304] loop6: unable to read partition table [ 244.782385][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.795804][T10304] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾xИCÖ) failed (rc=-5) [ 244.828362][ T1108] veth1_macvtap: left promiscuous mode [ 244.833984][ T1108] veth0_macvtap: left promiscuous mode [ 244.840359][ T1108] veth1_vlan: left promiscuous mode [ 244.845681][ T1108] veth0_vlan: left promiscuous mode [ 244.858302][ T1189] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 244.910449][T10312] loop4: detected capacity change from 0 to 256 [ 244.936375][T10312] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 244.963706][T10312] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 244.973789][T10312] exFAT-fs (loop4): Filesystem has been set read-only [ 245.048668][ T1189] usb 6-1: Using ep0 maxpacket: 8 [ 245.056965][ T1189] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.078936][ T1189] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 245.106617][ T1189] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.134987][ T1189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.140169][ T5796] Bluetooth: hci1: command tx timeout [ 245.143747][ T1189] usb 6-1: Product: syz [ 245.166340][ T1189] usb 6-1: Manufacturer: syz [ 245.171115][ T1189] usb 6-1: SerialNumber: syz [ 245.418003][ T1189] cdc_ncm 6-1:1.0: bind() failure [ 245.440208][ T1189] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 245.447969][ T1189] cdc_ncm 6-1:1.1: bind() failure [ 245.459033][ T1189] usb 6-1: USB disconnect, device number 14 [ 245.595644][ T5853] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 245.666634][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 245.728516][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 245.781874][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.782633][ T5853] usb 5-1: Using ep0 maxpacket: 8 [ 245.804043][ T5853] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 245.820813][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.836115][ T5853] pvrusb2: Hardware description: Terratec Grabster AV400 [ 245.848682][ T5853] pvrusb2: ********** [ 245.854614][ T5853] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 245.866876][ T5853] pvrusb2: Important functionality might not be entirely working. [ 245.871699][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.876061][ T5853] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 245.894707][ T5853] pvrusb2: ********** [ 246.012893][T10320] input: syz1 as /devices/virtual/input/input18 [ 246.058051][ T2317] pvrusb2: Invalid write control endpoint [ 246.106537][ T2317] pvrusb2: Invalid write control endpoint [ 246.112987][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 246.127930][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 246.144908][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 246.176212][ T2317] pvrusb2: Device being rendered inoperable [ 246.186420][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 246.207554][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 246.219563][ T2317] pvrusb2: Attached sub-driver cx25840 [ 246.225077][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 246.244100][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 246.263641][T10318] pvrusb2: Killing an I2C write to 0 that is too large (desired=8192 limit=61) [ 246.276442][ T1197] usb 5-1: USB disconnect, device number 10 [ 246.795048][ T1108] bond0 (unregistering): Released all slaves [ 246.864973][T10250] team0: Port device team_slave_1 added [ 246.981069][T10250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.992751][T10250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.019803][T10250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.038357][T10250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.047556][T10250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.119440][T10250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.218478][ T5796] Bluetooth: hci1: command tx timeout [ 247.291458][T10250] hsr_slave_0: entered promiscuous mode [ 247.337669][T10250] hsr_slave_1: entered promiscuous mode [ 247.346416][T10250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.376322][T10250] Cannot create hsr debugfs directory [ 247.593369][T10348] loop4: detected capacity change from 0 to 4096 [ 247.611447][T10348] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 247.664201][T10348] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 247.695711][T10342] loop5: detected capacity change from 0 to 32768 [ 247.722640][T10342] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1420 (10342) [ 247.732884][T10348] ntfs3: loop4: ino=1d, "file1" failed to parse mft record [ 247.758532][T10342] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 247.759036][T10348] ntfs3: loop4: ino=1d, "file1" attr_set_size [ 247.778418][T10342] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 247.787208][T10342] BTRFS info (device loop5): use zlib compression, level 3 [ 247.807228][T10342] BTRFS info (device loop5): using free space tree [ 247.866971][T10250] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 247.883333][ T6332] ntfs3: loop4: ino=1a, ntfs_sync_fs failed, -22. [ 247.891073][T10250] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 247.921958][T10250] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 247.968027][T10250] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 247.988446][T10342] BTRFS info (device loop5): enabling ssd optimizations [ 247.999291][T10342] BTRFS info (device loop5): auto enabling async discard [ 248.010448][T10346] loop2: detected capacity change from 0 to 32768 [ 248.081930][T10346] JBD2: Ignoring recovery information on journal [ 248.209504][T10346] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 248.254078][T10365] loop4: detected capacity change from 0 to 32768 [ 248.277417][T10365] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 248.304131][T10365] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 248.332193][ T6444] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 248.344403][T10250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.417808][ T6332] ocfs2: Unmounting device (7,4) on (node local) [ 248.443789][T10250] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.491852][ T2929] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.499085][ T2929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.536126][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.543331][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.582180][ T5783] ocfs2: Unmounting device (7,2) on (node local) [ 249.170983][T10250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.298479][ T5796] Bluetooth: hci1: command tx timeout [ 249.600995][T10381] loop5: detected capacity change from 0 to 32768 [ 249.625428][T10381] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 249.665671][T10250] veth0_vlan: entered promiscuous mode [ 249.683481][T10381] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 249.692355][T10250] veth1_vlan: entered promiscuous mode [ 249.724770][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 249.747481][T10250] veth0_macvtap: entered promiscuous mode [ 249.759923][T10381] XFS (loop5): Ending clean mount [ 249.788890][T10250] veth1_macvtap: entered promiscuous mode [ 249.810221][T10250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.822171][T10250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.832748][T10250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.845607][T10250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.855809][T10250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.866544][T10250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.877315][ T6444] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 249.887152][T10250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.897862][T10250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.912890][T10250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.924374][T10250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.935666][T10250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.940672][ T23] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 249.948561][T10250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.970511][T10250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.982864][ T23] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 250.002044][T10250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.008259][ T23] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 250.028461][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.050192][T10405] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 250.060928][ T23] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 250.103165][T10250] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.118403][T10250] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.128992][T10250] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.138579][T10250] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.251547][T10422] netlink: 'syz.4.1437': attribute type 16 has an invalid length. [ 250.265834][T10422] netlink: 'syz.4.1437': attribute type 17 has an invalid length. [ 250.293605][ T5853] usb 3-1: USB disconnect, device number 9 [ 250.342375][T10424] loop5: detected capacity change from 0 to 4096 [ 250.366754][T10424] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.488714][ T6444] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.574853][ T2929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.601627][ T2929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.663382][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.689949][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.850024][T10440] loop4: detected capacity change from 0 to 64 [ 250.864560][T10440] hfs: unable to locate alternate MDB [ 250.874771][T10440] hfs: continuing without an alternate MDB [ 251.200001][T10451] loop2: detected capacity change from 0 to 512 [ 251.254174][T10451] EXT4-fs (loop2): 1 truncate cleaned up [ 251.274917][T10451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.380201][ T5796] Bluetooth: hci1: command tx timeout [ 251.401563][T10450] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.1445: bg 0: block 465: padding at end of block bitmap is not set [ 251.576453][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.980231][T10479] loop7: detected capacity change from 0 to 7 [ 251.985778][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1460'. [ 252.004069][ C1] blk_print_req_error: 24 callbacks suppressed [ 252.004087][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.019717][ C1] buffer_io_error: 24 callbacks suppressed [ 252.019733][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 252.035633][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.044890][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 252.088792][T10479] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.105809][T10479] Buffer I/O error on dev loop7, logical block 0, async page read [ 252.133836][T10479] ldm_validate_partition_table(): Disk read failed. [ 252.159280][T10489] syz.4.1465[10489] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.159415][T10489] syz.4.1465[10489] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.178592][T10479] Dev loop7: unable to read RDB block 0 [ 252.208230][T10479] loop7: unable to read partition table [ 252.214158][T10479] loop7: partition table beyond EOD, truncated [ 252.230775][T10479] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 252.513051][T10500] loop5: detected capacity change from 0 to 4096 [ 253.103600][T10516] loop6: detected capacity change from 0 to 8192 [ 253.872094][T10555] sp0: Synchronizing with TNC [ 253.900895][T10558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1497'. [ 253.911784][T10558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1497'. [ 254.342289][T10578] loop6: detected capacity change from 0 to 512 [ 254.808583][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 254.891486][T10577] loop4: detected capacity change from 0 to 40427 [ 254.904733][T10577] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 254.915513][T10577] F2FS-fs (loop4): invalid crc value [ 254.927746][T10577] F2FS-fs (loop4): Found nat_bits in checkpoint [ 255.008523][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 255.019419][ T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 255.031114][T10577] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 255.038190][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.039491][T10588] loop6: detected capacity change from 0 to 32768 [ 255.070342][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 255.085580][ T8] pvrusb2: ********** [ 255.098929][ T28] audit: type=1800 audit(1761849915.409:58): pid=10577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1505" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 255.119367][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.128814][ T6332] syz-executor: attempt to access beyond end of device [ 255.128814][ T6332] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 255.129737][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 255.158238][ T6332] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 255.165879][ T8] pvrusb2: Important functionality might not be entirely working. [ 255.198123][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 255.209966][ T8] pvrusb2: ********** [ 255.264986][ T2317] pvrusb2: Invalid write control endpoint [ 255.332545][ T2317] pvrusb2: Invalid write control endpoint [ 255.348751][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 255.368919][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 255.377203][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 255.397114][T10600] loop5: detected capacity change from 0 to 256 [ 255.408992][ T2317] pvrusb2: Device being rendered inoperable [ 255.421466][T10600] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 255.435994][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 255.445647][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 255.462532][T10600] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 255.490675][ T2317] pvrusb2: Attached sub-driver cx25840 [ 255.496223][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 255.545622][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 255.557656][T10582] pvrusb2: Killing an I2C write to 1 that is too large (desired=8192 limit=61) [ 255.573377][ T1197] usb 3-1: USB disconnect, device number 10 [ 255.574811][T10600] exFAT-fs (loop5): error, invalid access to FAT free cluster (entry 0x00000006) [ 255.597569][T10600] exFAT-fs (loop5): Filesystem has been set read-only [ 256.023384][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.031784][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.497434][T10619] loop4: detected capacity change from 0 to 8192 [ 256.520421][T10619] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.585246][T10627] loop2: detected capacity change from 0 to 256 [ 256.623919][T10627] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ac714, utbl_chksum : 0xe619d30d) [ 256.930249][T10638] loop2: detected capacity change from 0 to 4096 [ 256.995170][T10638] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 257.010200][T10638] ntfs3: loop2: Failed to load $Extend (-22). [ 257.028274][T10638] ntfs3: loop2: Failed to initialize $Extend. [ 257.036236][T10644] loop4: detected capacity change from 0 to 4096 [ 257.047203][T10644] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 257.061020][T10638] ntfs3: loop2: ino=1e, attr_set_size [ 257.103320][T10644] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 257.255119][T10652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1538'. [ 257.725271][T10654] loop5: detected capacity change from 0 to 32768 [ 257.751729][T10654] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 257.795376][T10654] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 257.825661][T10676] loop4: detected capacity change from 0 to 64 [ 257.862838][T10654] (syz.5.1539,10654,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 257.864120][T10676] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 257.984105][ T28] audit: type=1326 audit(1761849918.299:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.6.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ed38efc9 code=0x7ffc0000 [ 258.019077][ T6444] ocfs2: Unmounting device (7,5) on (node local) [ 258.041685][ T28] audit: type=1326 audit(1761849918.299:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.6.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ed38efc9 code=0x7ffc0000 [ 258.078815][ T28] audit: type=1326 audit(1761849918.349:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.6.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18ed38efc9 code=0x7ffc0000 [ 258.101085][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.140264][ T28] audit: type=1326 audit(1761849918.349:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.6.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ed38efc9 code=0x7ffc0000 [ 258.171245][ T28] audit: type=1326 audit(1761849918.349:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.6.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ed38efc9 code=0x7ffc0000 [ 258.233888][ T28] audit: type=1326 audit(1761849918.369:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.6.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18ed38efc9 code=0x7ffc0000 [ 258.293740][ T28] audit: type=1326 audit(1761849918.419:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.6.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ed38efc9 code=0x7ffc0000 [ 258.316080][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.389065][ T28] audit: type=1326 audit(1761849918.449:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.6.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f18ed385e67 code=0x7ffc0000 [ 258.438511][ T28] audit: type=1326 audit(1761849918.449:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.6.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f18ed32b099 code=0x7ffc0000 [ 258.665452][T10709] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 258.870081][T10717] loop4: detected capacity change from 0 to 8192 [ 258.983231][T10717] syz.4.1566 (10717) used greatest stack depth: 19952 bytes left [ 259.305933][T10734] loop2: detected capacity change from 0 to 4096 [ 259.328950][T10729] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 259.336097][T10734] NILFS (loop2): invalid segment: Checksum error in segment payload [ 259.344533][T10729] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 259.359815][T10729] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 259.371074][T10734] NILFS (loop2): trying rollback from an earlier position [ 259.379671][T10729] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 259.392399][T10729] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 259.394745][T10734] NILFS (loop2): recovery complete [ 259.405242][T10729] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 259.406276][T10741] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 259.426419][T10729] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 259.433149][T10729] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 259.440795][T10729] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 259.758668][ T8] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 259.948392][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 259.962753][ T8] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 259.978349][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.997184][ T8] usb 6-1: Product: syz [ 260.007300][ T8] usb 6-1: Manufacturer: syz [ 260.017427][ T8] usb 6-1: SerialNumber: syz [ 260.030192][ T8] usb 6-1: config 0 descriptor?? [ 260.188900][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 260.188943][ T28] audit: type=1326 audit(1761849920.509:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.2.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0958efc9 code=0x7ffc0000 [ 260.217460][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.230557][ T28] audit: type=1326 audit(1761849920.509:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.2.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0958efc9 code=0x7ffc0000 [ 260.252906][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.284289][ T28] audit: type=1326 audit(1761849920.549:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.2.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f6a0958efc9 code=0x7ffc0000 [ 260.329209][ T8] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 015 [ 260.340125][ T28] audit: type=1326 audit(1761849920.579:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.2.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0958efc9 code=0x7ffc0000 [ 260.370876][ T28] audit: type=1326 audit(1761849920.579:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.2.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0958efc9 code=0x7ffc0000 [ 260.528460][T10751] loop4: detected capacity change from 0 to 65536 [ 260.540723][T10740] i2c i2c-1: adapter quirk: no zero length (addr 0x0001, size 0, read) [ 260.555597][ T8] usb 6-1: USB disconnect, device number 15 [ 260.580495][T10751] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 260.623371][T10751] XFS (loop4): Ending clean mount [ 260.638856][T10751] XFS (loop4): Quotacheck needed: Please wait. [ 260.699309][T10751] XFS (loop4): Quotacheck: Done. [ 260.777164][ T6332] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 260.836795][T10778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1592'. [ 261.085650][T10788] loop2: detected capacity change from 0 to 4096 [ 261.094541][T10788] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 261.298175][ T5792] Bluetooth: hci0: command 0x0c1a tx timeout [ 261.362446][T10795] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1600'. [ 261.378287][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 261.458258][ T5792] Bluetooth: hci1: command 0x0c1a tx timeout [ 261.458550][ T5796] Bluetooth: hci3: command 0x0405 tx timeout [ 261.695828][T10803] loop5: detected capacity change from 0 to 128 [ 261.727157][T10803] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 262.595800][T10811] loop5: detected capacity change from 0 to 32768 [ 262.615159][T10811] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 262.667130][T10814] loop6: detected capacity change from 0 to 40427 [ 262.677553][T10814] F2FS-fs (loop6): invalid crc value [ 262.678888][T10811] XFS (loop5): Ending clean mount [ 262.688372][T10814] F2FS-fs (loop6): Found nat_bits in checkpoint [ 262.694094][T10811] XFS (loop5): Quotacheck needed: Please wait. [ 262.739310][T10814] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 262.759566][T10811] XFS (loop5): Quotacheck: Done. [ 262.782425][ T28] audit: type=1800 audit(1761849923.099:124): pid=10814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1609" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 262.813881][ T28] audit: type=1800 audit(1761849923.119:125): pid=10814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1609" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 262.851402][T10814] syz.6.1609: attempt to access beyond end of device [ 262.851402][T10814] loop6: rw=2049, sector=77824, nr_sectors = 2128 limit=40427 [ 262.871370][T10814] syz.6.1609: attempt to access beyond end of device [ 262.871370][T10814] loop6: rw=2049, sector=79952, nr_sectors = 440 limit=40427 [ 262.888264][ T6444] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 262.967712][T10250] syz-executor: attempt to access beyond end of device [ 262.967712][T10250] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 263.001605][T10250] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 263.458845][ T5796] Bluetooth: hci2: command 0x0406 tx timeout [ 263.502613][T10846] /dev/loop0: Can't open blockdev [ 263.538242][ T5796] Bluetooth: hci1: command 0x0c1a tx timeout [ 263.538249][ T5792] Bluetooth: hci3: command 0x0405 tx timeout [ 263.760669][ T28] audit: type=1800 audit(1761849924.079:126): pid=10854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.6.1619" name="/newroot/40/bus/#225//deleted" dev="tmpfs" ino=225 res=0 errno=0 [ 263.793124][T10859] loop4: detected capacity change from 0 to 4096 [ 263.809661][T10859] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 264.121432][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1626'. [ 264.308279][T10863] loop2: detected capacity change from 0 to 32768 [ 264.345284][T10875] loop4: detected capacity change from 0 to 2048 [ 264.362632][T10863] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 264.369835][T10875] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 264.391110][T10875] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.401382][T10863] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 264.605383][ T5783] ocfs2: Unmounting device (7,2) on (node local) [ 264.810684][T10896] loop5: detected capacity change from 0 to 736 [ 264.965759][T10901] loop2: detected capacity change from 0 to 2048 [ 264.991565][T10902] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 265.029771][T10902] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 265.047782][T10904] loop6: detected capacity change from 0 to 1024 [ 265.049848][T10902] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 265.059883][T10904] EXT4-fs: Ignoring removed orlov option [ 265.089232][T10904] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 265.098268][T10902] Remounting filesystem read-only [ 265.108430][ T1108] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 265.129333][ T1108] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 265.154671][ T1108] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 265.167208][T10904] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.178243][ T1108] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 265.212915][T10250] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.212988][ T1108] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 265.251073][ T1108] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 265.257944][ T1108] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 265.265647][ T1108] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 265.288273][ T1108] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 265.297190][ T1108] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 265.323635][T10901] NILFS (loop2): mounting fs with errors [ 265.344729][T10901] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 265.378501][T10901] Remounting filesystem read-only [ 265.383596][T10901] NILFS (loop2): error -5 reading inode: ino=18 [ 265.396810][T10901] NILFS (loop2): cannot mark inode dirty (ino=18): error -5 loading inode block [ 265.418029][T10897] loop4: detected capacity change from 0 to 32768 [ 265.446454][T10897] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1638 (10897) [ 265.484908][T10897] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 265.507882][ T5783] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 265.519053][T10897] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 265.523217][ T5783] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 265.534966][ T5783] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 265.548348][ T5783] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 265.549072][T10897] BTRFS info (device loop4): force zlib compression, level 3 [ 265.555700][ T5783] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 265.567280][T10897] BTRFS info (device loop4): enabling ssd optimizations [ 265.572553][ T5783] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 265.594321][T10897] BTRFS info (device loop4): allowing degraded mounts [ 265.595225][ T5783] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 265.605283][T10897] BTRFS info (device loop4): force clearing of disk cache [ 265.622106][ T5792] Bluetooth: hci3: command 0x0405 tx timeout [ 265.622119][ T5796] Bluetooth: hci1: command 0x0c1a tx timeout [ 265.625636][ T5783] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 265.634714][T10897] BTRFS info (device loop4): using free space tree [ 265.673114][ T5783] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 265.695278][ T5783] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 265.713535][ T5783] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 265.741786][ T5783] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 265.745416][T10897] BTRFS info (device loop4): rebuilding free space tree [ 265.758410][ T5783] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 265.772155][T10897] BTRFS info (device loop4): checking UUID tree [ 265.772463][ T5783] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 265.787997][ T5783] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 265.797771][ T5783] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 265.807915][ T5783] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 265.815020][ T5783] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 265.823697][ T5783] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 265.837704][ T5783] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 265.848374][ T5783] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 265.857438][ T5783] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 265.866444][ T5783] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 265.875792][ T5783] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 265.889931][ T5783] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 265.897273][ T5783] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 265.946471][ T6332] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 266.333991][T10955] loop4: detected capacity change from 0 to 1024 [ 266.343315][T10955] EXT4-fs: Ignoring removed orlov option [ 266.363596][T10955] EXT4-fs: Ignoring removed nomblk_io_submit option [ 266.385409][T10955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.527587][ T6332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.781426][T10957] loop2: detected capacity change from 0 to 32768 [ 266.832615][T10957] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 266.877678][T10957] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 267.002508][T10961] loop5: detected capacity change from 0 to 32768 [ 267.141742][T10957] syz.2.1657 (10957) used greatest stack depth: 19248 bytes left [ 267.216201][ T5783] ocfs2: Unmounting device (7,2) on (node local) [ 267.681300][T11000] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1674'. [ 267.691037][T11001] netlink: 'syz.5.1673': attribute type 16 has an invalid length. [ 267.699343][T11001] netlink: 'syz.5.1673': attribute type 17 has an invalid length. [ 267.778503][ T5792] Bluetooth: hci1: command 0x0c1a tx timeout [ 268.100190][T11018] loop5: detected capacity change from 0 to 128 [ 268.107662][T11018] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 268.126701][T11018] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 268.154891][ T28] audit: type=1800 audit(1761849928.469:127): pid=11018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1682" name="file2" dev="loop5" ino=1048738 res=0 errno=0 [ 268.247279][ T1108] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 268.268402][ T5852] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 268.307856][T11012] loop2: detected capacity change from 0 to 32768 [ 268.322317][T11012] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 268.349202][T11012] XFS (loop2): Ending clean mount [ 268.394079][ T5783] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 268.486956][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 268.519508][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.529685][ T5852] usb 5-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 268.556051][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.567666][ T5852] usb 5-1: config 0 descriptor?? [ 268.893059][T11033] loop2: detected capacity change from 0 to 32768 [ 268.904141][T11033] (syz.2.1685,11033,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 268.922801][T11033] (syz.2.1685,11033,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 268.951419][T11033] JBD2: Ignoring recovery information on journal [ 268.995371][T11033] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 268.995547][ T5852] uclogic 0003:28BD:0075.000C: interface is invalid, ignoring [ 269.015053][ T42] ocfs2: Finishing quota recovery on device (7,2) for slot 0 [ 269.064824][ T5783] ocfs2: Unmounting device (7,2) on (node local) [ 269.201519][ T5872] usb 5-1: USB disconnect, device number 11 [ 269.243440][T11040] loop5: detected capacity change from 0 to 512 [ 269.256454][T11041] netlink: 'syz.2.1686': attribute type 16 has an invalid length. [ 269.257462][T11040] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 269.271294][T11041] netlink: 'syz.2.1686': attribute type 17 has an invalid length. [ 269.872067][T11058] loop2: detected capacity change from 0 to 1024 [ 269.901347][T11049] loop5: detected capacity change from 0 to 32768 [ 269.916264][T11058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.947264][T11049] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 270.040442][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.119831][T11049] XFS (loop5): Ending clean mount [ 270.137938][T11049] XFS (loop5): Quotacheck needed: Please wait. [ 270.202144][T11078] loop2: detected capacity change from 0 to 2048 [ 270.214770][T11049] XFS (loop5): Quotacheck: Done. [ 270.256529][T11078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.358570][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.377934][T11088] /dev/loop0: Can't open blockdev [ 270.387873][T11088] /dev/loop0: Can't open blockdev [ 270.467898][ T6444] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 270.537354][T11094] loop2: detected capacity change from 0 to 256 [ 270.581513][T11094] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 270.701253][T11094] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 270.728260][T11094] exFAT-fs (loop2): Filesystem has been set read-only [ 270.926437][T11106] loop6: detected capacity change from 0 to 736 [ 271.155733][T11113] netlink: 'syz.2.1707': attribute type 32 has an invalid length. [ 271.167817][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1707'. [ 271.182087][T11113] (unnamed net_device) (uninitialized): option coupled_control: invalid value (17) [ 271.304377][T11120] input: syz1 as /devices/virtual/input/input19 [ 271.337398][T11104] loop4: detected capacity change from 0 to 32768 [ 271.367491][T11104] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 271.386997][T11125] loop5: detected capacity change from 0 to 256 [ 271.406467][T11125] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 271.442040][T11104] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 271.534116][T11104] (syz.4.1702,11104,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 271.619121][ T6332] ocfs2: Unmounting device (7,4) on (node local) [ 271.761195][T11140] loop6: detected capacity change from 0 to 512 [ 271.806144][T11140] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 271.851060][T11140] EXT4-fs (loop6): orphan cleanup on readonly fs [ 271.857956][T11140] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.1717: iget: bad i_size value: 360287970189639680 [ 271.877657][T11140] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1717: couldn't read orphan inode 15 (err -117) [ 271.934262][T11140] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 272.067014][T11153] loop4: detected capacity change from 0 to 64 [ 272.086771][T11153] hfs: request for non-existent node 131072 in B*Tree [ 272.100568][T10250] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.109718][T11153] hfs: request for non-existent node 131072 in B*Tree [ 272.154071][T11156] loop5: detected capacity change from 0 to 2048 [ 272.184429][T11156] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.636913][T11160] loop6: detected capacity change from 0 to 32768 [ 272.694565][T11160] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 272.718958][T11170] loop5: detected capacity change from 0 to 128 [ 272.726773][T11170] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 272.747109][T11170] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 272.753771][T11160] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 272.811486][T11174] loop2: detected capacity change from 0 to 512 [ 272.822691][T11174] EXT4-fs: Ignoring removed orlov option [ 272.831147][T11162] loop4: detected capacity change from 0 to 32768 [ 272.837654][T11160] (syz.6.1728,11160,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 272.849916][T11162] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1729 (11162) [ 272.863183][T11174] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1734: inode has both inline data and extents flags [ 272.880910][T11162] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 272.888205][T11174] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1734: couldn't read orphan inode 15 (err -117) [ 272.903479][T11162] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 272.912563][T11162] BTRFS info (device loop4): use zlib compression, level 3 [ 272.917842][T11174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.919888][T11162] BTRFS info (device loop4): using free space tree [ 272.966818][T10250] ocfs2: Unmounting device (7,6) on (node local) [ 272.999409][ T28] audit: type=1800 audit(1761849933.309:128): pid=11174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1734" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 273.076939][T11162] BTRFS info (device loop4): enabling ssd optimizations [ 273.108439][T11162] BTRFS info (device loop4): auto enabling async discard [ 273.297820][ T6332] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 273.421136][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.641215][T11206] loop4: detected capacity change from 0 to 64 [ 274.109673][T11201] loop6: detected capacity change from 0 to 40427 [ 274.123370][T11201] F2FS-fs (loop6): invalid crc value [ 274.134134][T11201] F2FS-fs (loop6): Found nat_bits in checkpoint [ 274.238778][T11201] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 274.312973][ T28] audit: type=1800 audit(1761849934.629:129): pid=11201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1740" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 274.333501][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.375333][ T28] audit: type=1800 audit(1761849934.659:130): pid=11201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1740" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 274.426731][T11201] syz.6.1740: attempt to access beyond end of device [ 274.426731][T11201] loop6: rw=2049, sector=77824, nr_sectors = 2568 limit=40427 [ 274.536116][T10250] syz-executor: attempt to access beyond end of device [ 274.536116][T10250] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 274.572505][T10250] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 274.731365][T11222] loop2: detected capacity change from 0 to 32768 [ 274.765563][T11222] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 274.798701][T11222] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 274.852283][T11222] (syz.2.1745,11222,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 274.964914][ T5783] ocfs2: Unmounting device (7,2) on (node local) [ 275.036177][T11228] loop4: detected capacity change from 0 to 32768 [ 275.095069][T11228] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 275.181272][T11228] XFS (loop4): Ending clean mount [ 275.299794][ T5792] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 275.431831][ T6332] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 275.939205][T11249] loop2: detected capacity change from 0 to 40427 [ 275.947640][T11249] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 275.956856][T11249] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 275.967997][T11249] F2FS-fs (loop2): invalid crc value [ 275.975935][T11249] F2FS-fs (loop2): Found nat_bits in checkpoint [ 276.042863][T11249] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 276.054373][T11249] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 276.086639][ T28] audit: type=1800 audit(1761849936.399:131): pid=11249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1753" name="file0" dev="loop2" ino=10 res=0 errno=0 [ 276.100664][T11249] syz.2.1753: attempt to access beyond end of device [ 276.100664][T11249] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 276.130095][T11249] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 276.219651][T11272] input: syz0 as /devices/virtual/input/input20 [ 276.470293][T11279] bond1: entered allmulticast mode [ 276.476042][T11279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 278.026790][T11319] loop2: detected capacity change from 0 to 4096 [ 278.187113][T11306] loop5: detected capacity change from 0 to 40427 [ 278.223507][T11306] F2FS-fs (loop5): invalid crc value [ 278.248955][T11306] F2FS-fs (loop5): Found nat_bits in checkpoint [ 278.346349][T11317] loop4: detected capacity change from 0 to 32768 [ 278.347549][T11306] F2FS-fs (loop5): Start checkpoint disabled! [ 278.371781][T11306] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 278.379265][T11317] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 278.520119][T11317] XFS (loop4): Ending clean mount [ 278.549426][T11317] XFS (loop4): Quotacheck needed: Please wait. [ 278.567977][ T42] kworker/u4:2: attempt to access beyond end of device [ 278.567977][ T42] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 278.592150][ T42] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 278.608207][ T42] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 278.641945][T11317] XFS (loop4): Quotacheck: Done. [ 278.872738][ T6332] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 279.201012][T11361] loop2: detected capacity change from 0 to 64 [ 279.311487][T11361] minix_free_block (loop2:21): bit already cleared [ 279.327489][T11361] Trying to free block not in datazone [ 280.320989][T11412] netlink: 'syz.5.1817': attribute type 1 has an invalid length. [ 280.329547][T11412] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1817'. [ 280.338878][T11416] syz.2.1820 uses obsolete (PF_INET,SOCK_PACKET) [ 280.636865][T11430] loop5: detected capacity change from 0 to 256 [ 280.659071][T11430] exfat: Deprecated parameter 'utf8' [ 280.664471][T11430] exfat: Deprecated parameter 'namecase' [ 280.681637][T11430] exfat: Deprecated parameter 'namecase' [ 280.687362][T11430] exfat: Deprecated parameter 'utf8' [ 280.758202][T11430] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 280.773709][T11432] loop4: detected capacity change from 0 to 8192 [ 280.799798][T11432] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 280.816574][T11432] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 280.826000][T11432] REISERFS (device loop4): using ordered data mode [ 280.832900][T11432] reiserfs: using flush barriers [ 280.840381][T11432] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 280.884109][T11432] REISERFS (device loop4): checking transaction log (loop4) [ 280.924685][T11432] REISERFS (device loop4): Using r5 hash to sort names [ 280.945262][T11432] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 281.198603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 281.249799][T11450] loop6: detected capacity change from 0 to 8 [ 281.388660][ T1197] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 281.599831][T11442] loop5: detected capacity change from 0 to 40427 [ 281.606631][ T1197] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 281.608022][T11442] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 281.637609][ T1197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.643654][T11442] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 281.648525][ T1197] usb 3-1: Product: syz [ 281.664385][ T1197] usb 3-1: Manufacturer: syz [ 281.669539][ T1197] usb 3-1: SerialNumber: syz [ 281.677219][ T1197] usb 3-1: config 0 descriptor?? [ 281.686679][T11442] F2FS-fs (loop5): Found nat_bits in checkpoint [ 281.764900][T11442] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 281.773376][T11442] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 282.104080][ T1197] usb 3-1: Firmware: major: 0, minor: 3, hardware type: UNKNOWN (64) [ 282.193306][T11468] loop4: detected capacity change from 0 to 512 [ 282.229221][T11468] EXT4-fs: inline encryption not supported [ 282.271152][T11468] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 282.299591][T11468] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e018, mo2=0002] [ 282.317381][ T1197] usb 3-1: failed to fetch extended address, random address set [ 282.325314][ T1197] usb 3-1: atusb_probe: initialization failed, error = -524 [ 282.349620][T11468] EXT4-fs (loop4): orphan cleanup on readonly fs [ 282.356123][T11468] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 282.365870][T11466] loop6: detected capacity change from 0 to 40427 [ 282.368811][ T1197] atusb: probe of 3-1:0.0 failed with error -524 [ 282.386839][ T1197] usb 3-1: USB disconnect, device number 11 [ 282.393480][T11468] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 282.426095][T11466] F2FS-fs (loop6): invalid crc value [ 282.438418][T11468] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 282.450554][T11466] F2FS-fs (loop6): Found nat_bits in checkpoint [ 282.459647][T11468] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1843: bg 0: block 40: padding at end of block bitmap is not set [ 282.490653][T11468] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 282.502656][T11466] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 282.511683][T11468] EXT4-fs (loop4): 1 truncate cleaned up [ 282.518657][T11468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 282.557769][T11468] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.1843: bad symlink. [ 282.573152][ T28] audit: type=1800 audit(1761849942.869:132): pid=11466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1842" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 282.614906][ T28] audit: type=1800 audit(1761849942.889:133): pid=11466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1842" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 282.656920][T11466] syz.6.1842: attempt to access beyond end of device [ 282.656920][T11466] loop6: rw=2049, sector=77824, nr_sectors = 2056 limit=40427 [ 282.691091][T11466] syz.6.1842: attempt to access beyond end of device [ 282.691091][T11466] loop6: rw=2049, sector=79880, nr_sectors = 512 limit=40427 [ 282.797971][T10250] syz-executor: attempt to access beyond end of device [ 282.797971][T10250] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 282.818918][T10250] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 282.938562][ T1197] kernel write not supported for file /snd/pcmC0D0p (pid: 1197 comm: kworker/0:3) [ 283.165166][T11486] loop2: detected capacity change from 0 to 256 [ 283.213454][T11486] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 283.433089][T11491] syz.2.1853[11491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.433236][T11491] syz.2.1853[11491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.608236][ T1197] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 283.819190][ T1197] usb 6-1: Using ep0 maxpacket: 8 [ 283.832810][ T1197] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 283.850119][ T1197] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 283.881230][ T1197] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 283.908129][ T1197] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 283.928125][ T1197] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.958235][ T1197] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 283.967342][ T1197] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.100138][T11502] loop2: detected capacity change from 0 to 1024 [ 284.166354][T11493] loop6: detected capacity change from 0 to 40427 [ 284.201123][T11493] F2FS-fs (loop6): invalid crc value [ 284.214195][ T1197] usb 6-1: GET_CAPABILITIES returned 0 [ 284.222281][ T1197] usbtmc 6-1:16.0: can't read capabilities [ 284.223803][T11493] F2FS-fs (loop6): Found nat_bits in checkpoint [ 284.304549][T11493] F2FS-fs (loop6): Start checkpoint disabled! [ 284.316662][T11493] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 284.353290][T11506] loop2: detected capacity change from 0 to 512 [ 284.389873][T11506] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 284.412123][T11506] EXT4-fs (loop2): orphan cleanup on readonly fs [ 284.486869][T11506] EXT4-fs error (device loop2): ext4_do_update_inode:5244: inode #16: comm syz.2.1858: corrupted inode contents [ 284.529878][ T5872] usb 6-1: USB disconnect, device number 16 [ 284.553888][T11506] EXT4-fs (loop2): Remounting filesystem read-only [ 284.591194][T11506] EXT4-fs (loop2): 1 truncate cleaned up [ 284.621112][ T42] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 284.644224][ T42] Quota error (device loop2): write_blk: dquota write failed [ 284.660627][ T42] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 284.674070][ T1095] kworker/u4:6: attempt to access beyond end of device [ 284.674070][ T1095] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 284.689821][ T42] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 284.700820][ T1095] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 284.708154][ T1095] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 284.715230][ T42] Quota error (device loop2): write_blk: dquota write failed [ 284.723085][ T42] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 284.733406][ T42] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 284.748043][ T42] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 284.765058][ T42] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 284.777862][T11506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 284.946086][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.385074][T11523] loop5: detected capacity change from 0 to 64 [ 285.395511][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.419247][T11523] minix_free_block (loop5:21): bit already cleared [ 285.426764][T11523] Trying to free block not in datazone [ 285.572304][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.701716][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.761166][T11532] loop5: detected capacity change from 0 to 256 [ 285.851855][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.097604][ T6332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.114808][ T12] tipc: Disabling bearer [ 286.122575][ T12] tipc: Left network mode [ 286.242688][T11542] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 286.860601][T11538] loop6: detected capacity change from 0 to 32768 [ 286.902499][T11538] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 287.152623][T11538] XFS (loop6): Ending clean mount [ 287.179064][T11538] XFS (loop6): Quotacheck needed: Please wait. [ 287.254476][T11540] loop5: detected capacity change from 0 to 65536 [ 287.266285][T11538] XFS (loop6): Quotacheck: Done. [ 287.300096][T11538] XFS (loop6): User initiated shutdown received. [ 287.307522][T11538] XFS (loop6): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 287.324031][T11540] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 287.325007][T11538] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 287.393670][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 287.408546][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 287.417488][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 287.428532][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 287.441099][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 287.448595][T11540] XFS (loop5): Ending clean mount [ 287.448829][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 287.464468][T11540] XFS (loop5): Quotacheck needed: Please wait. [ 287.493799][T10250] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 287.659207][T11540] XFS (loop5): Quotacheck: Done. [ 287.682674][T11573] loop2: detected capacity change from 0 to 4096 [ 287.690647][T11573] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 287.966564][ T6444] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 288.173805][ T12] hsr_slave_0: left promiscuous mode [ 288.187405][ T12] hsr_slave_1: left promiscuous mode [ 288.220925][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.231540][T11581] loop2: detected capacity change from 0 to 512 [ 288.242375][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.271548][T11581] EXT4-fs: Ignoring removed oldalloc option [ 288.283057][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.311907][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.326029][T11581] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1886: dx entry: limit 1024 != root limit 124 [ 288.362553][T11581] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1886: Corrupt directory, running e2fsck is recommended [ 288.412266][T11581] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 288.431318][T11581] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2249: inode #15: comm syz.2.1886: corrupted in-inode xattr: invalid ea_ino [ 288.445420][T11581] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1886: couldn't read orphan inode 15 (err -117) [ 288.461608][T11581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.475289][ T12] veth1_macvtap: left promiscuous mode [ 288.485510][ T12] veth0_macvtap: left promiscuous mode [ 288.491347][T11581] EXT4-fs error (device loop2): ext4_xattr_set_entry:1682: inode #2: comm syz.2.1886: corrupted xattr entries [ 288.491904][ T12] veth1_vlan: left promiscuous mode [ 288.508801][ T12] veth0_vlan: left promiscuous mode [ 288.565873][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.109117][T11593] loop2: detected capacity change from 0 to 4096 [ 289.159424][T11593] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 289.198662][T11593] ntfs3: loop2: Failed to load $Extend (-22). [ 289.210889][T11593] ntfs3: loop2: Failed to initialize $Extend. [ 289.278606][ T28] audit: type=1800 audit(1761849949.589:134): pid=11593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1889" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 289.355350][ T12] team_slave_1 (unregistering): left promiscuous mode [ 289.372145][ T12] team0 (unregistering): Port device team_slave_1 removed [ 289.443833][ T12] team_slave_0 (unregistering): left promiscuous mode [ 289.462395][ T12] team0 (unregistering): Port device team_slave_0 removed [ 289.557303][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.617244][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.618376][ T5796] Bluetooth: hci2: command tx timeout [ 290.569765][ T12] bond0 (unregistering): Released all slaves [ 291.101552][T11565] chnl_net:caif_netlink_parms(): no params data found [ 291.285865][T11565] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.304848][T11565] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.312574][T11565] bridge_slave_0: entered allmulticast mode [ 291.329379][T11565] bridge_slave_0: entered promiscuous mode [ 291.346567][T11565] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.378459][T11565] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.385735][T11565] bridge_slave_1: entered allmulticast mode [ 291.418471][T11565] bridge_slave_1: entered promiscuous mode [ 291.479805][T11565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.512004][T11565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.577856][T11636] loop2: detected capacity change from 0 to 512 [ 291.613686][T11565] team0: Port device team_slave_0 added [ 291.632777][T11636] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 291.660265][T11565] team0: Port device team_slave_1 added [ 291.666135][T11636] System zones: 0-2, 18-18, 34-34 [ 291.685865][T11636] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.1905: bg 0: block 248: padding at end of block bitmap is not set [ 291.686495][T11642] netlink: 'syz.6.1907': attribute type 25 has an invalid length. [ 291.709248][ T5792] Bluetooth: hci2: command tx timeout [ 291.710609][T11636] Quota error (device loop2): write_blk: dquota write failed [ 291.714846][T11642] netlink: 'syz.6.1907': attribute type 7 has an invalid length. [ 291.727903][T11636] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 291.770974][T11636] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1905: Failed to acquire dquot type 1 [ 291.831808][T11636] EXT4-fs (loop2): 1 truncate cleaned up [ 291.841214][T11636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.880118][T11636] ext4 filesystem being mounted at /563/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.035442][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.232366][T11565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.250767][T11565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.289545][T11647] loop6: detected capacity change from 0 to 32768 [ 292.303270][T11565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.333264][T11565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.359335][T11565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.392582][T11565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.470938][T11565] hsr_slave_0: entered promiscuous mode [ 292.477796][T11565] hsr_slave_1: entered promiscuous mode [ 292.484552][T11565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.494078][T11565] Cannot create hsr debugfs directory [ 292.666751][T11661] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 292.674639][T11661] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 292.682403][T11661] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 292.696402][T11661] Error parsing options; rc = [-22] [ 292.856249][T11565] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 292.873666][T11565] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 292.886514][T11565] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 292.904451][T11565] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 292.942528][T11669] loop6: detected capacity change from 0 to 4096 [ 292.983779][T11676] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 293.022619][T11565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.047447][T11565] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.065923][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.073137][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.094450][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.101714][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.403091][T11565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.780968][ T5796] Bluetooth: hci2: command tx timeout [ 293.792390][T11565] veth0_vlan: entered promiscuous mode [ 293.827707][T11565] veth1_vlan: entered promiscuous mode [ 293.920091][T11565] veth0_macvtap: entered promiscuous mode [ 293.943123][T11565] veth1_macvtap: entered promiscuous mode [ 294.001649][T11565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.017084][T11565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.042768][T11565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.053415][T11565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.071128][T11698] loop5: detected capacity change from 0 to 4096 [ 294.079181][T11565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.091170][T11698] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 294.100778][T11565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.113635][T11565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.144401][T11565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.157458][T11565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.173164][T11565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.186502][T11565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.204595][T11565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.216735][T11565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.219407][T11698] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 294.229731][T11565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.243157][T11698] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 294.259465][T11565] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.273958][T11565] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.286670][T11565] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.306609][T11565] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.463365][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.476653][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.557584][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.575879][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.658330][ T5792] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 294.665317][ T5796] Bluetooth: hci4: command 0x1003 tx timeout [ 294.933788][T11705] loop6: detected capacity change from 0 to 32768 [ 294.993258][T11705] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 295.046233][T11726] loop7: detected capacity change from 0 to 7 [ 295.056534][T11726] Dev loop7: unable to read RDB block 7 [ 295.063824][T11726] loop7: unable to read partition table [ 295.070391][T11726] loop7: partition table beyond EOD, truncated [ 295.076593][T11726] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 295.179380][T11705] XFS (loop6): Ending clean mount [ 295.187671][T11705] XFS (loop6): Quotacheck needed: Please wait. [ 295.318939][T11705] XFS (loop6): Quotacheck: Done. [ 295.561710][T10250] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 295.628674][T11714] loop2: detected capacity change from 0 to 32768 [ 295.743951][T11714] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 295.773538][T11730] loop7: detected capacity change from 0 to 32768 [ 295.861901][ T5792] Bluetooth: hci2: command tx timeout [ 295.907799][T11730] non-latin1 character 0x365 found in JFS file name [ 295.936904][T11730] mount with iocharset=utf8 to access [ 296.003111][T11714] XFS (loop2): Ending clean mount [ 296.117082][ T5783] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 296.352155][T11754] loop6: detected capacity change from 0 to 32768 [ 296.413043][T11754] JBD2: Ignoring recovery information on journal [ 296.486460][T11754] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 296.628070][T11754] [ 296.630454][T11754] ====================================================== [ 296.637484][T11754] WARNING: possible circular locking dependency detected [ 296.644519][T11754] syzkaller #0 Not tainted [ 296.644530][T11754] ------------------------------------------------------ [ 296.644537][T11754] syz.6.1939/11754 is trying to acquire lock: [ 296.644546][T11754] ffff88804daf4da0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 296.644594][T11754] [ 296.644594][T11754] but task is already holding lock: [ 296.644599][T11754] ffff88804daf4e38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320 [ 296.644640][T11754] [ 296.644640][T11754] which lock already depends on the new lock. [ 296.644640][T11754] [ 296.644644][T11754] [ 296.644644][T11754] the existing dependency chain (in reverse order) is: [ 296.644650][T11754] [ 296.644650][T11754] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 296.644679][T11754] down_read+0x46/0x2e0 [ 296.644714][T11754] ocfs2_init_acl+0x2fa/0x720 [ 296.644738][T11754] ocfs2_mknod+0x12e5/0x20f0 [ 296.644755][T11754] ocfs2_create+0x196/0x410 [ 296.644770][T11754] path_openat+0x1277/0x3190 [ 296.644795][T11754] do_filp_open+0x1c5/0x3d0 [ 296.644817][T11754] do_sys_openat2+0x12c/0x1c0 [ 296.644836][T11754] __x64_sys_openat+0x139/0x160 [ 296.644854][T11754] do_syscall_64+0x55/0xb0 [ 296.644876][T11754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.644893][T11754] [ 296.644893][T11754] -> #3 (jbd2_handle){++++}-{0:0}: [ 296.644917][T11754] start_this_handle+0x1e9d/0x20c0 [ 296.644932][T11754] jbd2__journal_start+0x2bb/0x5b0 [ 296.644947][T11754] jbd2_journal_start+0x2a/0x40 [ 296.644961][T11754] ocfs2_start_trans+0x376/0x6c0 [ 296.644982][T11754] ocfs2_modify_bh+0xe9/0x470 [ 296.644996][T11754] ocfs2_local_read_info+0x13fd/0x1770 [ 296.645011][T11754] dquot_load_quota_sb+0x757/0xb80 [ 296.645033][T11754] dquot_load_quota_inode+0x2dc/0x5d0 [ 296.645056][T11754] ocfs2_enable_quotas+0x1c7/0x440 [ 296.645071][T11754] ocfs2_fill_super+0x3f6d/0x4d90 [ 296.645085][T11754] mount_bdev+0x22b/0x2d0 [ 296.645099][T11754] legacy_get_tree+0xea/0x180 [ 296.645116][T11754] vfs_get_tree+0x8c/0x280 [ 296.645130][T11754] do_new_mount+0x24b/0xa40 [ 296.645144][T11754] __se_sys_mount+0x2da/0x3c0 [ 296.645158][T11754] do_syscall_64+0x55/0xb0 [ 296.645178][T11754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.645193][T11754] [ 296.645193][T11754] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 296.645219][T11754] down_read+0x46/0x2e0 [ 296.645243][T11754] ocfs2_start_trans+0x36a/0x6c0 [ 296.645266][T11754] ocfs2_modify_bh+0xe9/0x470 [ 296.645283][T11754] ocfs2_local_read_info+0x13fd/0x1770 [ 296.645301][T11754] dquot_load_quota_sb+0x757/0xb80 [ 296.645322][T11754] dquot_load_quota_inode+0x2dc/0x5d0 [ 296.645344][T11754] ocfs2_enable_quotas+0x1c7/0x440 [ 296.645359][T11754] ocfs2_fill_super+0x3f6d/0x4d90 [ 296.645373][T11754] mount_bdev+0x22b/0x2d0 [ 296.645387][T11754] legacy_get_tree+0xea/0x180 [ 296.645405][T11754] vfs_get_tree+0x8c/0x280 [ 296.645419][T11754] do_new_mount+0x24b/0xa40 [ 296.645454][T11754] __se_sys_mount+0x2da/0x3c0 [ 296.645469][T11754] do_syscall_64+0x55/0xb0 [ 296.645489][T11754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.645506][T11754] [ 296.645506][T11754] -> #1 (sb_internal#3){.+.+}-{0:0}: [ 296.645532][T11754] ocfs2_start_trans+0x26b/0x6c0 [ 296.645554][T11754] ocfs2_setattr+0x95a/0x1b20 [ 296.645572][T11754] notify_change+0xb0d/0xe10 [ 296.645588][T11754] chmod_common+0x250/0x3f0 [ 296.645603][T11754] do_fchmodat+0x134/0x200 [ 296.645619][T11754] __x64_sys_fchmodat+0x7d/0x90 [ 296.645634][T11754] do_syscall_64+0x55/0xb0 [ 296.645651][T11754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.645667][T11754] [ 296.645667][T11754] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 296.645697][T11754] __lock_acquire+0x2ddb/0x7c80 [ 296.645715][T11754] lock_acquire+0x197/0x410 [ 296.645730][T11754] down_write+0x97/0x1f0 [ 296.645753][T11754] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 296.645768][T11754] ocfs2_truncate_file+0xd84/0x13a0 [ 296.645786][T11754] ocfs2_setattr+0x150d/0x1b20 [ 296.645804][T11754] notify_change+0xb0d/0xe10 [ 296.645821][T11754] do_truncate+0x19b/0x220 [ 296.645833][T11754] path_openat+0x298c/0x3190 [ 296.645855][T11754] do_filp_open+0x1c5/0x3d0 [ 296.645876][T11754] do_sys_openat2+0x12c/0x1c0 [ 296.645892][T11754] __x64_sys_openat+0x139/0x160 [ 296.645909][T11754] do_syscall_64+0x55/0xb0 [ 296.645926][T11754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.645939][T11754] [ 296.645939][T11754] other info that might help us debug this: [ 296.645939][T11754] [ 296.645945][T11754] Chain exists of: [ 296.645945][T11754] &ocfs2_file_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem [ 296.645945][T11754] [ 296.645973][T11754] Possible unsafe locking scenario: [ 296.645973][T11754] [ 296.645977][T11754] CPU0 CPU1 [ 296.645982][T11754] ---- ---- [ 296.645986][T11754] lock(&oi->ip_xattr_sem); [ 296.645997][T11754] lock(jbd2_handle); [ 296.646010][T11754] lock(&oi->ip_xattr_sem); [ 296.646023][T11754] lock(&ocfs2_file_ip_alloc_sem_key); [ 296.646035][T11754] [ 296.646035][T11754] *** DEADLOCK *** [ 296.646035][T11754] [ 296.646038][T11754] 3 locks held by syz.6.1939/11754: [ 296.646049][T11754] #0: ffff88805cc58418 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 296.646099][T11754] #1: ffff88804daf5118 (&sb->s_type->i_mutex_key#35){+.+.}-{3:3}, at: do_truncate+0x187/0x220 [ 296.646142][T11754] #2: ffff88804daf4e38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320 [ 296.646186][T11754] [ 296.646186][T11754] stack backtrace: [ 296.646207][T11754] CPU: 1 PID: 11754 Comm: syz.6.1939 Not tainted syzkaller #0 [ 296.646223][T11754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 296.646241][T11754] Call Trace: [ 296.646248][T11754] [ 296.646259][T11754] dump_stack_lvl+0x16c/0x230 [ 296.646284][T11754] ? load_image+0x3b0/0x3b0 [ 296.646300][T11754] ? show_regs_print_info+0x20/0x20 [ 296.646328][T11754] ? print_circular_bug+0x12b/0x1a0 [ 296.646351][T11754] check_noncircular+0x2bd/0x3c0 [ 296.646375][T11754] ? print_deadlock_bug+0x5d0/0x5d0 [ 296.646393][T11754] ? lockdep_lock+0xe0/0x220 [ 296.646411][T11754] ? lockdep_unlock+0x137/0x2d0 [ 296.646431][T11754] ? _find_first_zero_bit+0xd3/0x100 [ 296.646455][T11754] __lock_acquire+0x2ddb/0x7c80 [ 296.646486][T11754] ? verify_lock_unused+0x140/0x140 [ 296.646518][T11754] lock_acquire+0x197/0x410 [ 296.646536][T11754] ? ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 296.646562][T11754] ? __might_sleep+0xe0/0xe0 [ 296.646584][T11754] ? read_lock_is_recursive+0x20/0x20 [ 296.646609][T11754] down_write+0x97/0x1f0 [ 296.646635][T11754] ? ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 296.646654][T11754] ? down_read_killable+0x340/0x340 [ 296.646674][T11754] ? ocfs2_truncate_file+0xcaa/0x13a0 [ 296.646722][T11754] ? __lock_acquire+0x7c80/0x7c80 [ 296.646742][T11754] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 296.646765][T11754] ? ocfs2_remove_refcount_tree+0xd50/0xd50 [ 296.646788][T11754] ? up_write+0x1c3/0x410 [ 296.646806][T11754] ocfs2_truncate_file+0xd84/0x13a0 [ 296.646827][T11754] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 296.646850][T11754] ? ocfs2_simple_size_update+0x470/0x470 [ 296.646873][T11754] ? do_raw_spin_unlock+0x121/0x230 [ 296.646896][T11754] ? _raw_spin_unlock+0x28/0x40 [ 296.646912][T11754] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 296.646935][T11754] ? ocfs2_inode_lock_atime+0x4e0/0x4e0 [ 296.646952][T11754] ? ocfs2_rw_lock+0x138/0x240 [ 296.646970][T11754] ? dquot_initialize+0x20/0x20 [ 296.646992][T11754] ? ocfs2_create_new_inode_locks+0x640/0x640 [ 296.647010][T11754] ? setattr_prepare+0x1e6/0xac0 [ 296.647031][T11754] ? jbd2_journal_begin_ordered_truncate+0xbb/0x150 [ 296.647053][T11754] ocfs2_setattr+0x150d/0x1b20 [ 296.647081][T11754] ? ocfs2_extend_allocation+0x1760/0x1760 [ 296.647104][T11754] ? ktime_get_coarse_real_ts64+0x3a/0x120 [ 296.647125][T11754] ? seqcount_lockdep_reader_access+0x176/0x1c0 [ 296.647153][T11754] ? ktime_get_coarse_real_ts64+0x110/0x120 [ 296.647176][T11754] ? current_time+0x18d/0x270 [ 296.647196][T11754] ? inode_set_ctime_current+0x2d0/0x2d0 [ 296.647214][T11754] ? evm_inode_setattr+0x94/0x6a0 [ 296.647240][T11754] ? bpf_lsm_inode_setattr+0x9/0x10 [ 296.647257][T11754] ? try_break_deleg+0x79/0x120 [ 296.647275][T11754] ? ocfs2_extend_allocation+0x1760/0x1760 [ 296.647299][T11754] notify_change+0xb0d/0xe10 [ 296.647323][T11754] do_truncate+0x19b/0x220 [ 296.647341][T11754] ? put_page_bootmem+0x2c0/0x2c0 [ 296.647357][T11754] ? apparmor_file_truncate+0x23f/0x2d0 [ 296.647377][T11754] ? ima_bprm_check+0x1f0/0x1f0 [ 296.647401][T11754] path_openat+0x298c/0x3190 [ 296.647434][T11754] ? __kasan_slab_alloc+0x6c/0x80 [ 296.647452][T11754] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.647470][T11754] ? verify_lock_unused+0x140/0x140 [ 297.519794][T11754] ? do_filp_open+0x3d0/0x3d0 [ 297.519830][T11754] ? __virt_addr_valid+0x18c/0x540 [ 297.529610][T11754] do_filp_open+0x1c5/0x3d0 [ 297.529644][T11754] ? vfs_tmpfile+0x490/0x490 [ 297.538742][T11754] ? _raw_spin_unlock+0x28/0x40 [ 297.538766][T11754] ? alloc_fd+0x58f/0x630 [ 297.538795][T11754] do_sys_openat2+0x12c/0x1c0 [ 297.538818][T11754] ? do_sys_open+0xe0/0xe0 [ 297.538837][T11754] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 297.563012][T11754] ? lock_chain_count+0x20/0x20 [ 297.563041][T11754] __x64_sys_openat+0x139/0x160 [ 297.572735][T11754] do_syscall_64+0x55/0xb0 [ 297.577175][T11754] ? clear_bhb_loop+0x40/0x90 [ 297.581868][T11754] ? clear_bhb_loop+0x40/0x90 [ 297.586575][T11754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 297.592482][T11754] RIP: 0033:0x7f18ed38efc9 [ 297.596979][T11754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.616581][T11754] RSP: 002b:00007f18ee213038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 297.624983][T11754] RAX: ffffffffffffffda RBX: 00007f18ed5e5fa0 RCX: 00007f18ed38efc9 [ 297.632952][T11754] RDX: 0000000000007a05 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 297.640981][T11754] RBP: 00007f18ed411f91 R08: 0000000000000000 R09: 0000000000000000 [ 297.648954][T11754] R10: 0000000000001700 R11: 0000000000000246 R12: 0000000000000000 [ 297.656913][T11754] R13: 00007f18ed5e6038 R14: 00007f18ed5e5fa0 R15: 00007fffb1dcc1d8 [ 297.664889][T11754] [ 297.749869][T11761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.767834][T10250] ocfs2: Unmounting device (7,6) on (node local) [ 297.938388][ T5792] Bluetooth: hci2: command tx timeout