last executing test programs: 2m49.093618815s ago: executing program 3 (id=269): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x4, 0x401d031, r0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000100)='./file1\x00', 0x4002, &(0x7f00000001c0)=ANY=[@ANYBLOB='longad,uid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=forget,volume=00000000000000000003,shortad,gid=', @ANYRESDEC=0x0, @ANYBLOB=',session=18446744073709551489,gid=ignore,lastblock=0000001002,partition=18446744073709551612,undelete,\x00'], 0x2, 0xc30, &(0x7f0000002740)="$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") r1 = getpid() sched_setaffinity(0x0, 0x2c, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 2m44.250788914s ago: executing program 3 (id=286): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000080)=ANY=[], 0x0, 0x5f4, &(0x7f0000000640)="$eJzs3U1vXFcZB/D/nUycTJASt03agCrFaiSgWCS2J5TAhoAQ8qJClZBYVZWsZFJbmbiVPUVuhcC8ix0foSz8Bdh1gyqVRVewZuVthcTeu6B75449jl0zbkxmTH4/6cw5Z8695zz3mbl3XixrAjyzFmfT3EyRxdnXN8r+9la7u73VfjhoJzmXpJE0+1WK1aT4JLmTfsmXyzvr6YrPW+fVzy59dO2tT9/s95p1qbZvHLXfaDbrkpkkZ+p6v6JZjL7KvvnuHjrfcRT7jvD6IHEwbo8O2DzO7k943gKToOi/bh4wnVxIcr5+H5D66tB4utGdvGNd5QAAAOCUurSTnWzk4rjjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNOk/v3/oi6NQXsmxeD3/6fq+1K3T7WPxx0AAAAAAAAAAJyAazvZyUYuDvqPiupv/q9UncvV7ZfyXtbTyVpuZCNL6aWXtcwnmR6aaGpjqddbmx9hz4VD91wYMeDWkx8zAAAAAAAAAPwf+nUW9/7+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAk6BIzvSrqlwetKfTaCY5n2Sq3G4z+cegfZp9PO4AAAAA4Cm4tJOdbOTioP+oqD7zv1h97j+f97KaXlbSSzed3Ku+C+h/6m9sb7W721vth2U5OO/3/32sMKoZ0//u4fCVr1ZbtHI/K9U9N3I376Sbe2lUe5auDuI5PK5flTEV36uNGNW9ul0e+Z/qejJMVxk5u5uRuTq2MhvPHZ2JYz46j680n8buNz+XTzjnpQt1XR7P7yc65wtDz74Xj85E8q2f/nN5ubv6YPn++uzkHNIX9Hgm2kOZeOmZysRclYkru/3F/Cg/yWxm8kbWspKfZSm9dDKTH1atpfr5XN5OH52pO/t6b/y3SKbqx6V/FT1eTK9U+17MSn6cd3IvndzOd3Irt3M7t7KQucwNPcJXRjjrG8c7669/vW60kvyhridDmdfnhvI6fM2drsaG79nL0vMnf21sfqVulGv8pq4nw+OZmB/KxAtHZ+LPj8rb9e7qg7XlpXdHXO9rdV2eR7+bqFeJ8vnyfPlgVb39z45y7IVDx+arscu7Y40DY1eSv/6xXuPoM3Wqfg93cKaFauylobGyHlzDy7GrQ2OHvd8CYOJd+MaFqda/Wn9vfdj6bWu59fr5H5y7fe7lqZz929nvNufOfLXxcvGXfJhf7H3+BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvrj19z94sNTtdtZOcWPwA0CTEo+Gxmlq/PLQoTFfmID/uZu9h+/eXH//g2+uPFx6u/N2Z7V9a7792q3519rfvnl/pduZ69/u7TA1zmiBk7T3oj/uSAAAAAAAAAAAAIBRPY1/MBj3MQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACn2+JsmpspMj93Y67sb2+1u2UZtPe2bCZpJCl+nhSfJHfSL5kemq74vHVe/ezSR9fe+vTNvbmag+0bR+03ms26ZCbJmbo+qfnuPvF8xe4Rlgm7PkgcjNt/AgAA///50Akj") llistxattr(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)=""/8, 0x8) 2m43.513922432s ago: executing program 3 (id=289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() r2 = socket$inet6(0xa, 0x3, 0xff) userfaultfd(0x80001) write$binfmt_script(r2, &(0x7f00000000c0), 0x28) recvmmsg(r2, &(0x7f000000e080)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002000, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000400)="110000001000"/22, 0x16) 2m42.79456357s ago: executing program 3 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto(r3, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10022, 0x0) 2m41.833183104s ago: executing program 3 (id=293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './trace\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) sched_setscheduler(0x0, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(0xffffffffffffffff, &(0x7f0000002200)=ANY=[], 0x54) 2m40.913099537s ago: executing program 3 (id=296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x211, &(0x7f00000004c0)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) write$cgroup_subtree(r0, 0x0, 0x4b) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x40000, 0x52) fadvise64(r1, 0x54056, 0x0, 0x3) 2m24.97578171s ago: executing program 32 (id=296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x211, &(0x7f00000004c0)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) write$cgroup_subtree(r0, 0x0, 0x4b) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x40000, 0x52) fadvise64(r1, 0x54056, 0x0, 0x3) 21.390446012s ago: executing program 4 (id=856): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000500), 0x5, 0xbc8, &(0x7f0000002380)="$eJzs3M9rHNcdAPDvjH7alrtyKaXuxSql2FC6ll1kalOoXVx66aHQXgsW8soIrX8gqTiSdVgl/0BIcg7kEkhiEnyIz74kkGsuiXONySFggmIlEEKiMPtDWku7+mGtNIr8+cDTvDdvZt73q5F23oPdDeC5NZT9SCOOR8SVJKJQ359GRG+11h9RqR23tDg/9u3i/FgSy8v/+SqJJCKeLM6PNa6V1LdH6o3+iPj470n88qX1407Pzk2OlsulqXr79Mz1W6enZ+f+NHF99FrpWunGmXN/GTk7cm74/EjHcv3u84v3v/ndP7+ofP/2D3e/fvXNJC7GQL2vOY961js2FEMrv5Nm3REx2oHr7wdd9Xya80y6Nzkp3eWgAABoK22aw/06CtEVq5O3QnzwSa7BAQAAAB2x3BWxDAAAABxwifU/AAAAHHCN9wE8WZwfa5R835Gwtx5fiojBWv5L9VLr6Y5KddsfPRFx+EkSzR9rTWqn7dhQRDz67Px7WYkWn0PebZWFiPhNq/ufVPMfrH8Sem3+aUQMd2D8oTXtn1P+Fzswft75A/B8enCp9iBb//xLV+Y/0eL5193i2fUs8n7+NeZ/S+vmf6v5d7WZ//17i2Pceev12+36svz/ev8f7zZKNn623VFS2/B4IeK33a3yT1byT9rkf2WLYxR+vF1q15d3/stvRJyM1vk3JBt/P9Hp8Ylyabj2s+UYCx+NvNNu/Lzzz+7/4Tb5b3D/+7N9t566Uvsv9fnf5cv32vVtnn/6ZW/y32qtt77nhdGZmakzEb3Jv9bvP7txvo1jGtfI8j/1+43//1v9/WevCZX630aW+UJ9m7VfXDPm3+7eeX+j/LO1X573/+r2739138tbHOMPH75yql1f8/o3K9n4j5LaWhgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIgkLUZEUq2nabEYcSQifhWH0/LN6Zk/jt/8/42rWV/EYPSk4xPl0nBEFGrtJGufqdZX22fXtP8cEcci4rXCoWq7OHazfDXv5AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhxJCIGIkmLEZFGxFIhTYvFvKMCAAAAOm4w7wAAAACAXWf9DwAAAAef9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC77NiJBw+TiKhcOFQtmd56X0+ukQG7Lc07ACA3XXkHAOSmO+8AgNxsc41vugAHULJJf3/bnr6OxwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/nXy+IOHSURULhyqlkxvva+n5Rkn9jA6YDeleQcA5KZro87uvYsD2HvP/C9+tLNxAHuv9RofeJ4km/T3rx5Tebqnb9diAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD/GaiWJC1GRFqtp2mxGHE0IgajJxmfKJeGI+IXEfFpoacva/flHTQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNz07NzlaLpemnqWS7Ox0FRWVpkqyP8KoVfJ+ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/Ts3OTo+VyaWo670gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvE3Pzk2OlsulqS1U7m3n4KZK3jkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCfnwIAAP//198NMw==") sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace(0x10, r0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x51) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40084, 0x0, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f0000000140)=""/168) 18.085941863s ago: executing program 4 (id=881): r0 = io_uring_setup(0x136a, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xd, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r5, 0x4004550c, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x358, 0xffff8881f5c0a000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r6, 0x7, 0xfffffffc, 0x3, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x10050, &(0x7f0000000100)={[{@uni_xlateno}, {@rodir}, {@shortname_winnt}, {@uni_xlate}, {@shortname_lower}, {@shortname_lower}, {@rodir}, {@utf8no}, {@fat=@nfs_nostale_ro}, {@fat=@uid}, {@rodir}, {@shortname_mixed}, {@fat=@umask={'umask', 0x3d, 0x89}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@nonumtail}, {@fat=@nfs}]}, 0x1, 0x2b0, &(0x7f0000000640)="$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") 17.764677211s ago: executing program 4 (id=886): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000002c0)={0x1, 0x0, 'client1\x00', 0x0, "cfe40365a4c60b52", "0d91240e3f2a118b7b1e756c18a0fcdb9602d47c096d1eda1a797ec7a2ce6255", 0x1, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x40001, 0x0) write$binfmt_misc(r4, &(0x7f00000000c0), 0xff86) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x158, 0x0, 0x1, 'queue0\x00', 0xcd65}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xb8}, [@ldst={0x5, 0x2}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24b, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x0, 0x7a120, 0x25, {0x1}, 0xfffffffe, 0x9}) 16.516570142s ago: executing program 4 (id=894): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') chdir(&(0x7f0000000140)='./file0\x00') mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a1d804, 0x0) unshare(0x22020600) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 15.580126245s ago: executing program 4 (id=897): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x7, 0x100, @val=0x80}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x709282, 0x0) 12.521804631s ago: executing program 4 (id=911): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) 11.845192027s ago: executing program 33 (id=911): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) 8.785285393s ago: executing program 5 (id=930): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000001"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x97) 8.262841846s ago: executing program 5 (id=934): socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000180)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x10048, &(0x7f00000009c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x67, 0xc54, &(0x7f0000002500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0xfffe, 0x400, @loopback={0xff00000000000000}, 0x101}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="1400000000000000290000000800000003000002000000005921b180b94170"], 0x18}}], 0x1, 0x4000880) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x307b87f, 0x0, 0x3, 0x0, &(0x7f0000000240)) rmdir(&(0x7f0000000040)='./bus\x00') syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x141200) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0xc, &(0x7f0000000300), 0x2, 0x53a, &(0x7f00000011c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x90f402, 0x0) 6.688222235s ago: executing program 5 (id=939): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./bus\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x577, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd2b, 0x25dfdbfc, {0x2, 0x20, 0x20, 0x0, 0x3, 0x0, 0x0, 0x8, 0x10007}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x5c}, @FRA_DST={0x8, 0x1, @multicast2}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x34}}, 0x0) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1, 0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 6.197068707s ago: executing program 1 (id=948): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 5.077037214s ago: executing program 5 (id=951): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000280), 0x1, 0x751, &(0x7f0000001040)="$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") r0 = creat(&(0x7f0000000000)='./file1\x00', 0x4) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x2000}]) 5.075716555s ago: executing program 1 (id=959): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3.855511115s ago: executing program 2 (id=953): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x2f8, 0xffffffff, 0xffffffff, 0x2f8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1d0, 0x230, 0x0, {}, [@common=@srh={{0x30}, {0xc, 0xc, 0x3, 0x33, 0x9, 0x4, 0x884}}, @common=@inet=@recent0={{0xf8}, {0x0, 0xe, 0x8, 0x1, 'syz0\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@rand_addr=0x64010100, [0xff, 0xff000000, 0xffffffff], 0x4e23, 0x4e21, 0x4e22, 0x4e21, 0x100, 0x1, 0x6, 0x3ff, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/480], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 3.119244803s ago: executing program 5 (id=954): write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0), 0xff86) 3.021207526s ago: executing program 2 (id=955): syz_mount_image$hfsplus(&(0x7f00000003c0), &(0x7f0000000040)='./file0\x00', 0x201048c, &(0x7f0000000080)=ANY=[], 0xfd, 0x659, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0xc1042, 0x15) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x7, 0x1) pwrite64(r0, 0x0, 0x0, 0x9) stat(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r2, 0x400, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.014071556s ago: executing program 0 (id=956): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80002, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000040)) 2.974033937s ago: executing program 0 (id=957): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000000000000000000000000000000000000000000000f7ffffffffffffff0000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) 2.901812438s ago: executing program 0 (id=958): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r1 = getpid() r2 = socket$inet6(0xa, 0x3, 0xff) userfaultfd(0x80001) write$binfmt_script(r2, &(0x7f00000000c0), 0x28) recvmmsg(r2, &(0x7f000000e080)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002000, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000400)="110000001000"/22, 0x16) 2.751144102s ago: executing program 0 (id=960): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 2.738558802s ago: executing program 5 (id=961): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./bus\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x577, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd2b, 0x25dfdbfc, {0x2, 0x20, 0x20, 0x0, 0x3, 0x0, 0x0, 0x8, 0x10007}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x5c}, @FRA_DST={0x8, 0x1, @multicast2}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x34}}, 0x0) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1, 0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 2.084987988s ago: executing program 2 (id=962): r0 = io_uring_setup(0x136a, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xd, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r5, 0x4004550c, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x358, 0xffff8881f5c0a000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r6, 0x7, 0xfffffffc, 0x3, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x10050, &(0x7f0000000100)={[{@uni_xlateno}, {@rodir}, {@shortname_winnt}, {@uni_xlate}, {@shortname_lower}, {@shortname_lower}, {@rodir}, {@utf8no}, {@fat=@nfs_nostale_ro}, {@fat=@uid}, {@rodir}, {@shortname_mixed}, {@fat=@umask={'umask', 0x3d, 0x89}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@nonumtail}, {@fat=@nfs}]}, 0x1, 0x2b0, &(0x7f0000000640)="$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") 1.846607635s ago: executing program 0 (id=963): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x4, 0x401d031, r0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000100)='./file1\x00', 0x4002, &(0x7f00000001c0)=ANY=[@ANYBLOB='longad,uid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=forget,volume=00000000000000000003,shortad,gid=', @ANYRESDEC=0x0, @ANYBLOB=',session=18446744073709551489,gid=ignore,lastblock=0000001002,partition=18446744073709551612,undelete,\x00'], 0x2, 0xc30, &(0x7f0000002740)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.845535664s ago: executing program 2 (id=964): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000200)=@ll={0x11, 0x3, r2, 0x1, 0xe4, 0x6, @broadcast}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000cc0)="5401020001000000ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f0000000140)="2cf2565b0e508224b706a643e9a8c932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777439cc590257a0641579678f72a6f", 0x35}, {&(0x7f0000003580)="f76e14895b4c9474738e303e1fe34234a0a92ecda2f8da4a", 0x18}], 0x3}, 0x40000) 1.761953587s ago: executing program 1 (id=965): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4) 1.19973652s ago: executing program 2 (id=966): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r7) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 959.823606ms ago: executing program 1 (id=967): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TCGETS2(r0, 0x802c542a, 0x0) 840.685119ms ago: executing program 0 (id=968): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) kexec_load(0x3, 0x0, 0x0, 0x0) 809.68873ms ago: executing program 1 (id=969): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r1 = getpid() r2 = socket$inet6(0xa, 0x3, 0xff) userfaultfd(0x80001) write$binfmt_script(r2, &(0x7f00000000c0), 0x28) recvmmsg(r2, &(0x7f000000e080)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002000, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000400)="110000001000"/22, 0x16) 163.618956ms ago: executing program 2 (id=970): write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0), 0xff86) 0s ago: executing program 1 (id=971): syz_mount_image$hfsplus(&(0x7f00000003c0), &(0x7f0000000040)='./file0\x00', 0x201048c, &(0x7f0000000080)=ANY=[], 0xfd, 0x659, &(0x7f0000000400)="$eJzs3c1vHGcdB/DvbNZ2Ni2JmyZtQJVqNRIgLBK/yAVzISCEfKhQVQ6crcRprGzSYrvIrRA179ce+geUg2+ckLhHKhcucOvVRySkXrhgTot2dtbe2GvHTpxdp/18otl5nn3meeb3/GZm12MrmgBfWguTqT9IkYXJN9bb9a3N2ebW5uy9bjnJWJKNpJ6klqT4b6vV+jS5kRQ7wxR71vt8vDz/1mf/2fpXp1avlhTl6If0O5qNaslEkjPV+qTGu/nE4xU7M7yR5Gq1hqEbSdJ6yM///vxOS49Gv95nBxIj8HQVne/NfcaTc9WFXn5Tb3Terg02upO3MewAAAAAYAAubGc768X5YccBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz4qN3ef/V8Xy+f5FsZFMpOg+/3+0aktVPl1ePd7mD55WHAAAAAAAAAAwQK9uZzvrOd+tt4ryb/6vlZVL5etzeS+rWcpKrmU9i1nLWlYynWS8Z6DR9cW1tZXpI/Sc6dtz5hGBjlXrxsnMGwAAAAAAAAC+YH6Thd2//wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGlQJGc6q3K51C2Pp1ZPcjbJaHu7jeSf3fIzqj2vPBh2FAAAADAAF7aznfWc79ZbRXnP/1J5f3w27+V+1rKctTSzlFude+byrr+2tTnb3Nqcvdde9o46dtwwyhHT+d1D/z1fKbdo5HaWy3eu5WbeSTO3Uit7tl2p4klaF/rs5Neft8f+fuWIkd2q1u2Zf9T9rcFeHx53vn0d85cp42VGRnYyMlXF1s7GC90j0/8I/eDzJ9rTdGo7wV7as6c9k3isnJ8rX0fK+fzhoJwPxd5MzPScfS8dnvPkG3/988/uNO/fvXN7dfL0TOlozlTrVvna2J+J2Z5MvPxFzsQ+U2UmLu/UF/Lj/DSTmcibWclyfpHFrGUpE/lRWVqszuei55I/IFM3Hqq9+ahIRqsztHOwjhfTa2Xf81nOT/JObmUpr5f/ZjKd72Quc5nvOcKXDzzC5RblVV874KpvfaVv8Fe/WRUaSf5YrU+Hdl5f6Mlr72fueNnW+85uli4efh30+WysPSqU+teqQnvL3x6lx8DszcR0TyZePDwTfyo/Vlab9++u3Fl892i7u/hRVWhfR78/Vd8S7fPlYvtglbWHz45224t926bLtks7bbV9bZd32jpX6saBV+po9TPc/pFmyraX+7bNlm1Xetr6/bwFwKl37lvnRhv/bvyj8Unjd407jTfO/nDsu2OvjGbkbyPfq0+d+XrtleIv+SS/2r3/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHt/q+x/cXWw2l1b2FFqt1ocHNPUpPHeEbU5Fofs4swHu9KvPJ6di7kMt/K/ValXvFKchnsMLrcpjdE8GG2r3jD7xkYf4oQQMxPW1e+9eX33/g28v31t8e+ntpfvzc3PzU/Nzr89ev73cXJrqvA47SuBp2P3SL6vHfBQ1AAAAAAAAAAAAMAyD+I8Kw54jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GxbmEz9QYpMT12bate3Nmeb7aVb3t2ynqSWpPhlUnya3EhnyXjPcMVB+/l4ef6tz8Z7x6p3t68d1u9oNqolE0nOVOuTGu9m6k84XrEzw3bCrqbeSRwM2/8DAAD//2bxCDE=") r0 = memfd_create(0x0, 0x3) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) fallocate(r0, 0x3, 0x7, 0x1) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9) stat(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r2, 0x400, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): inue. Quota mode: writeback. [ 78.435164][ T4398] erofs: (device loop1): mounted with root inode @ nid 36. [ 78.456153][ T4398] attempt to access beyond end of device [ 78.456153][ T4398] loop1: rw=0, want=40, limit=16 [ 78.482744][ T4398] attempt to access beyond end of device [ 78.482744][ T4398] loop1: rw=524288, want=48, limit=16 [ 78.494094][ T4398] attempt to access beyond end of device [ 78.494094][ T4398] loop1: rw=524288, want=40, limit=16 [ 79.088715][ T4406] loop2: detected capacity change from 0 to 128 [ 79.272211][ T4413] loop4: detected capacity change from 0 to 128 [ 79.296235][ T4406] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.411020][ T4200] Bluetooth: hci2: command 0x042a tx timeout [ 79.464791][ T4406] ext4 filesystem being mounted at /syzcgroup/unified/syz2/syz1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.642548][ T4413] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 79.948941][ T4413] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 81.339946][ T4428] loop3: detected capacity change from 0 to 256 [ 81.447743][ T4428] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.520046][ T13] cfg80211: failed to load regulatory.db [ 81.580612][ T4428] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 83.151871][ T4428] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b889, utbl_chksum : 0xe619d30d) [ 83.855013][ T4446] loop1: detected capacity change from 0 to 164 [ 84.352853][ T4451] rock: directory entry would overflow storage [ 84.359258][ T4451] rock: sig=0x4f50, size=4, remaining=3 [ 84.364942][ T4451] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 84.432306][ T4451] netlink: 'syz.1.51': attribute type 16 has an invalid length. [ 84.440023][ T4451] netlink: 'syz.1.51': attribute type 17 has an invalid length. [ 84.487966][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.496060][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.504199][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.555482][ T4451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.948499][ T4464] loop3: detected capacity change from 0 to 1024 [ 85.978191][ T4462] loop1: detected capacity change from 0 to 2048 [ 86.077738][ T4462] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 86.129210][ T4462] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.385727][ T4466] loop1: detected capacity change from 0 to 128 [ 86.718380][ T4475] loop4: detected capacity change from 0 to 16 [ 87.583420][ T4472] sched: RT throttling activated [ 88.761119][ T4475] erofs: (device loop4): mounted with root inode @ nid 36. [ 88.848971][ T4472] attempt to access beyond end of device [ 88.848971][ T4472] loop4: rw=0, want=40, limit=16 [ 88.860262][ T4472] attempt to access beyond end of device [ 88.860262][ T4472] loop4: rw=524288, want=48, limit=16 [ 88.871239][ T4472] attempt to access beyond end of device [ 88.871239][ T4472] loop4: rw=524288, want=40, limit=16 [ 88.962944][ T4466] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 89.001178][ T4466] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.333106][ T4490] loop1: detected capacity change from 0 to 1024 [ 91.541174][ T7] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 91.769121][ T4490] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 91.790836][ T4490] hfsplus: xattr searching failed [ 91.811297][ T7] usb 3-1: device descriptor read/64, error -71 [ 92.121163][ T7] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 92.378113][ T7] usb 3-1: device descriptor read/64, error -71 [ 92.561168][ T7] usb usb3-port1: attempt power cycle [ 92.658860][ T4503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.67'. [ 92.695786][ T4507] loop4: detected capacity change from 0 to 512 [ 92.799060][ T4507] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 92.850558][ T4507] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.68: invalid indirect mapped block 256 (level 1) [ 92.981067][ T7] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 92.990237][ T4507] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.68: invalid indirect mapped block 2683928664 (level 1) [ 93.113825][ T4507] EXT4-fs (loop4): 1 truncate cleaned up [ 93.121134][ T4507] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 93.191239][ T7] usb 3-1: device descriptor read/8, error -71 [ 93.989152][ T4521] loop1: detected capacity change from 0 to 128 [ 94.244786][ T4523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.73'. [ 94.629685][ T4528] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.68: Invalid block bitmap block 3 in block_group 0 [ 94.749955][ T4521] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 94.786025][ T4521] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 95.220982][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 95.240968][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 95.250963][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 95.260962][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 95.270964][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 95.280962][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 96.068030][ T4543] IPv6: sit1: Disabled Multicast RS [ 96.121160][ T4230] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 96.293915][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'. [ 96.578718][ T4565] loop1: detected capacity change from 0 to 16 [ 96.641717][ T4230] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.698695][ T4565] erofs: (device loop1): mounted with root inode @ nid 36. [ 96.720696][ T4565] attempt to access beyond end of device [ 96.720696][ T4565] loop1: rw=0, want=40, limit=16 [ 96.741304][ T4565] attempt to access beyond end of device [ 96.741304][ T4565] loop1: rw=524288, want=48, limit=16 [ 96.752726][ T4565] attempt to access beyond end of device [ 96.752726][ T4565] loop1: rw=524288, want=40, limit=16 [ 96.813745][ T4230] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 96.825848][ T4230] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.837004][ T4230] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.851293][ T4230] usb 1-1: config 0 interface 0 has no altsetting 0 [ 96.858146][ T4230] usb 1-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 1.00 [ 96.868569][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.934918][ T4564] loop3: detected capacity change from 0 to 1024 [ 97.174325][ T4564] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.197753][ T4230] usb 1-1: config 0 descriptor?? [ 97.411332][ T4564] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 97.602141][ T4580] loop1: detected capacity change from 0 to 8 [ 97.658869][ T4564] EXT4-fs warning (device loop3): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 14852430585828512223 [ 97.696021][ T4230] hid-generic 0003:18D1:503C.0001: unexpected long global item [ 97.726937][ T4230] hid-generic: probe of 0003:18D1:503C.0001 failed with error -22 [ 97.848106][ T4580] SQUASHFS error: zlib decompression failed, data probably corrupt [ 97.893778][ T4580] SQUASHFS error: Failed to read block 0x4de: -5 [ 97.938428][ T4580] SQUASHFS error: Failed to read block 0x4e2: -5 [ 97.961434][ T7] usb 1-1: USB disconnect, device number 2 [ 97.971404][ T4580] SQUASHFS error: Failed to read block 0x9ca: -5 [ 97.995761][ T4580] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 98.023809][ T4580] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 98.069415][ T4580] SQUASHFS error: Failed to read block 0x535f2: -5 [ 98.145728][ T25] audit: type=1800 audit(1791070488.343:2): pid=4580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.88" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 98.611219][ T4230] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.901122][ T4230] usb 5-1: Using ep0 maxpacket: 8 [ 98.966892][ T4592] loop1: detected capacity change from 0 to 256 [ 100.082592][ T4592] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 100.145715][ T4598] IPv6: sit1: Disabled Multicast RS [ 100.151321][ T4230] usb 5-1: unable to get BOS descriptor or descriptor too short [ 100.291326][ T4230] usb 5-1: config 1 interface 0 altsetting 128 bulk endpoint 0x82 has invalid maxpacket 32 [ 100.324707][ T4230] usb 5-1: config 1 interface 0 altsetting 128 bulk endpoint 0x3 has invalid maxpacket 8 [ 100.356729][ T4230] usb 5-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.421028][ T4230] usb 5-1: config 1 interface 0 has no altsetting 0 [ 100.447982][ T4607] loop3: detected capacity change from 0 to 128 [ 100.612292][ T4230] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.634958][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.679477][ T4230] usb 5-1: Product: syz [ 100.700692][ T4230] usb 5-1: Manufacturer: syz [ 100.724538][ T4230] usb 5-1: SerialNumber: syz [ 100.842640][ T4588] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 100.873055][ T4588] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 101.098989][ T4607] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 101.116671][ T4607] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.411946][ T4230] usb 5-1: bad CDC descriptors [ 101.433180][ T4230] usb 5-1: USB disconnect, device number 2 [ 101.595358][ T4626] netlink: 32 bytes leftover after parsing attributes in process `syz.1.103'. [ 101.645589][ T4626] netlink: 44 bytes leftover after parsing attributes in process `syz.1.103'. [ 102.213636][ T4634] loop1: detected capacity change from 0 to 256 [ 102.422504][ T4634] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 102.462311][ T4638] netlink: 'syz.3.109': attribute type 16 has an invalid length. [ 102.511049][ T4638] netlink: 'syz.3.109': attribute type 17 has an invalid length. [ 102.547466][ T4636] loop4: detected capacity change from 0 to 1024 [ 102.582158][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.620127][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.685014][ T4636] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.691329][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.020552][ T4638] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.144492][ T4636] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 103.303500][ T4642] IPv6: sit1: Disabled Multicast RS [ 103.382865][ T4636] EXT4-fs warning (device loop4): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 14852430585828512223 [ 103.481064][ T4655] loop3: detected capacity change from 0 to 256 [ 103.489494][ T4654] loop1: detected capacity change from 0 to 128 [ 103.970305][ T4655] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.996818][ T4654] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 104.031698][ T4654] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.424840][ T4673] netlink: 32 bytes leftover after parsing attributes in process `syz.3.116'. [ 104.448462][ T4673] netlink: 44 bytes leftover after parsing attributes in process `syz.3.116'. [ 104.963478][ T4682] netlink: 'syz.0.122': attribute type 16 has an invalid length. [ 104.971297][ T4682] netlink: 'syz.0.122': attribute type 17 has an invalid length. [ 104.988942][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.996586][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.004576][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.370484][ T4682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.866546][ T4179] udevd[4179]: incorrect ext4 checksum on /dev/loop0 [ 107.212736][ T4188] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 107.239527][ T4710] loop1: detected capacity change from 0 to 1024 [ 107.411739][ T4717] netlink: 32 bytes leftover after parsing attributes in process `syz.0.134'. [ 107.457029][ T4717] netlink: 44 bytes leftover after parsing attributes in process `syz.0.134'. [ 107.592506][ T4188] usb 4-1: not running at top speed; connect to a high speed hub [ 107.794499][ T4188] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.937469][ T4188] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 108.131734][ T4188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.151394][ T4710] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 108.614446][ T4188] usb 4-1: Found UVC 1.00 device (046d:0825) [ 108.656570][ T4188] usb 4-1: No streaming interface found for terminal 2. [ 108.746409][ T4188] usb 4-1: USB disconnect, device number 2 [ 108.803275][ T4729] loop1: detected capacity change from 0 to 164 [ 109.508878][ T4735] rock: directory entry would overflow storage [ 109.515252][ T4735] rock: sig=0x4f50, size=4, remaining=3 [ 109.520908][ T4735] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 109.564353][ T4735] netlink: 'syz.1.138': attribute type 16 has an invalid length. [ 109.572696][ T4735] netlink: 'syz.1.138': attribute type 17 has an invalid length. [ 109.584247][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.597993][ T4735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.672771][ T4757] loop1: detected capacity change from 0 to 2048 [ 110.834022][ T4757] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.000102][ T4772] loop4: detected capacity change from 0 to 16 [ 113.738337][ T4772] erofs: (device loop4): mounted with root inode @ nid 36. [ 113.753801][ T4771] attempt to access beyond end of device [ 113.753801][ T4771] loop4: rw=0, want=40, limit=16 [ 113.766557][ T4771] attempt to access beyond end of device [ 113.766557][ T4771] loop4: rw=524288, want=48, limit=16 [ 113.778085][ T4771] attempt to access beyond end of device [ 113.778085][ T4771] loop4: rw=524288, want=40, limit=16 [ 113.842278][ T4778] UDF-fs: warning (device loop1): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 167936 lbcount: 172032 extent 129+136192 [ 113.996969][ T4789] ip_tables: iptables: counters copy to user failed while replacing table [ 115.303922][ T21] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 115.333278][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.711669][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 115.821801][ T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.876687][ T21] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 115.965430][ T21] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 115.991176][ T4766] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.007775][ T21] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 116.096975][ T21] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 116.113453][ T21] usb 3-1: config 1 interface 1 has no altsetting 0 [ 116.128240][ T4821] loop1: detected capacity change from 0 to 512 [ 116.179807][ T4821] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 116.188487][ T4821] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.168: inode #15: comm syz.1.168: iget: illegal inode # [ 116.203731][ T4821] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.168: couldn't read orphan inode 15 (err -117) [ 116.216697][ T4821] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000008000,errors=continue,,errors=continue. Quota mode: writeback. [ 116.262288][ T4821] EXT4-fs (loop1): shut down requested (2) [ 116.271308][ T13] usb 5-1: config 0 has an invalid interface number: 5 but max is 3 [ 116.289240][ T13] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 116.294399][ T4766] usb 4-1: Using ep0 maxpacket: 32 [ 116.299110][ T13] usb 5-1: config 0 has no interface number 0 [ 116.310439][ T13] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 116.320354][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.356951][ T13] usb 5-1: config 0 descriptor?? [ 116.381180][ T21] usb 3-1: string descriptor 0 read error: -22 [ 116.387695][ T21] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 116.397143][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.412356][ T13] ums-realtek 5-1:0.5: USB Mass Storage device detected [ 116.441235][ T4766] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 53, changing to 7 [ 116.457442][ T4766] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1024 [ 116.516885][ T4838] loop1: detected capacity change from 0 to 512 [ 116.541315][ T4838] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 116.550012][ T4838] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.575383][ T4838] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3894: comm syz.1.174: Allocating blocks 41-42 which overlap fs metadata [ 116.591266][ T4838] EXT4-fs (loop1): Remounting filesystem read-only [ 116.597897][ T4838] Quota error (device loop1): write_blk: dquota write failed [ 116.606368][ T4838] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 116.619120][ T4838] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 116.631172][ T4838] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.174: Failed to acquire dquot type 1 [ 116.634485][ T4766] usb 4-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 116.651645][ T4188] usb 5-1: USB disconnect, device number 3 [ 116.658642][ T4229] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.665966][ T4838] EXT4-fs (loop1): Remounting filesystem read-only [ 116.666908][ T4766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.678764][ T4838] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 12: [ 116.680680][ T4766] usb 4-1: Product: syz [ 116.680686][ T4838] block 14: [ 116.680698][ T4766] usb 4-1: Manufacturer: syz [ 116.680711][ T4766] usb 4-1: SerialNumber: syz [ 116.706763][ T4838] freeing already freed block (bit 14); block bitmap corrupt. [ 116.717961][ T4838] EXT4-fs (loop1): Remounting filesystem read-only [ 116.724793][ T4838] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.174: corrupted inode contents [ 116.737006][ T4838] EXT4-fs (loop1): Remounting filesystem read-only [ 116.743557][ T4838] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #12: comm syz.1.174: mark_inode_dirty error [ 116.755964][ T4838] EXT4-fs (loop1): Remounting filesystem read-only [ 116.762903][ T4838] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.174: corrupted inode contents [ 116.778478][ T4838] EXT4-fs (loop1): Remounting filesystem read-only [ 116.785869][ T4838] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #12: comm syz.1.174: mark_inode_dirty error [ 116.797604][ T4838] EXT4-fs (loop1): Remounting filesystem read-only [ 116.804391][ T4838] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.174: corrupted inode contents [ 116.818433][ T4838] EXT4-fs (loop1): Remounting filesystem read-only [ 116.827632][ T4838] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 116.836564][ T4838] EXT4-fs (loop1): Remounting filesystem read-only [ 116.843228][ T4838] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.174: corrupted inode contents [ 116.857707][ T4838] EXT4-fs (loop1): Remounting filesystem read-only [ 116.864481][ T4838] EXT4-fs error (device loop1): ext4_truncate:4286: inode #12: comm syz.1.174: mark_inode_dirty error [ 116.876112][ T4838] EXT4-fs (loop1): Remounting filesystem read-only [ 116.882710][ T4838] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 116.891953][ T4838] EXT4-fs (loop1): Remounting filesystem read-only [ 116.898793][ T4838] EXT4-fs (loop1): 1 truncate cleaned up [ 116.904489][ T4838] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,noblock_validity,mblk_io_submit,noinit_itable,noinit_itable,grpjquota=,errors=remount-ro,max_dir_size_kb=0x0000000000000006,barrier=0x00000000000007ff2. Quota mode: writeback. [ 117.061884][ T4229] usb 1-1: unable to get BOS descriptor or descriptor too short [ 117.141295][ T4229] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 117.194410][ T4766] usb 4-1: Can't get UAC3 power state for id 10 [ 117.207304][ T4845] loop4: detected capacity change from 0 to 1024 [ 117.219591][ T4846] loop1: detected capacity change from 0 to 256 [ 117.260345][ T4846] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 117.291112][ T4766] usb 4-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 117.302140][ T4766] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 117.312935][ T4845] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 117.324807][ T4229] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 117.346876][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.358203][ T4229] usb 1-1: Product: syz [ 117.372873][ T4229] usb 1-1: Manufacturer: syz [ 117.377524][ T4229] usb 1-1: SerialNumber: syz [ 117.458904][ T4849] loop1: detected capacity change from 0 to 2048 [ 117.486415][ T4766] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 117.523767][ T4766] usb 4-1: USB disconnect, device number 3 [ 117.604897][ T4849] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.236821][ T4229] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 118.292542][ T4852] kvm [4851]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 118.340233][ T4852] kvm [4851]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x32 [ 118.348536][ T4188] usb 3-1: USB disconnect, device number 6 [ 118.356564][ T4855] udevd[4855]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 118.393031][ T4852] kvm [4851]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 118.394823][ T4864] loop4: detected capacity change from 0 to 164 [ 118.416099][ T4852] kvm [4851]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x32 [ 118.426387][ T4852] kvm [4851]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 118.478536][ T4870] loop1: detected capacity change from 0 to 1024 [ 118.585358][ T25] audit: type=1326 audit(1791070508.833:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4876 comm="syz.2.187" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2992ce4159 code=0x7ffc0000 [ 118.643301][ T25] audit: type=1326 audit(1791070508.863:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4876 comm="syz.2.187" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2992ce4159 code=0x7ffc0000 [ 118.681250][ T4229] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 118.729317][ T4870] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 119.147805][ T4882] rock: directory entry would overflow storage [ 119.154129][ T4882] rock: sig=0x4f50, size=4, remaining=3 [ 119.159756][ T4882] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 119.201230][ T4882] netlink: 'syz.4.180': attribute type 16 has an invalid length. [ 119.209570][ T4882] netlink: 'syz.4.180': attribute type 17 has an invalid length. [ 119.251028][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.259163][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.267378][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.310485][ T4870] hfsplus: xattr searching failed [ 119.327378][ T4882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.413608][ T4229] usb 1-1: USB disconnect, device number 3 [ 119.420486][ T25] audit: type=1326 audit(1791070508.863:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4876 comm="syz.2.187" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2992ce4159 code=0x7ffc0000 [ 120.127420][ T25] audit: type=1326 audit(1791070508.863:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4876 comm="syz.2.187" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2992ce4159 code=0x7ffc0000 [ 120.401529][ T4855] udevd[4855]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 120.804217][ T25] audit: type=1326 audit(1791070508.863:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4876 comm="syz.2.187" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2992ce4159 code=0x7ffc0000 [ 120.830494][ T25] audit: type=1326 audit(1791070508.863:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4876 comm="syz.2.187" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2992ce4159 code=0x7ffc0000 [ 120.856749][ T25] audit: type=1326 audit(1791070508.863:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4876 comm="syz.2.187" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2992ce4159 code=0x7ffc0000 [ 121.216807][ T4902] loop1: detected capacity change from 0 to 1024 [ 121.251162][ T4188] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 121.469225][ T4253] hfsplus: b-tree write err: -5, ino 25 [ 121.615805][ T4253] hfsplus: b-tree write err: -5, ino 4 [ 121.695550][ T4253] hfsplus: b-tree write err: -5, ino 2 [ 122.143404][ T4901] kvm [4899]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 122.171671][ T4901] kvm [4899]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x32 [ 122.220030][ T4901] kvm [4899]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 122.241882][ T4901] kvm [4899]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x32 [ 122.251305][ T4901] kvm [4899]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 122.508310][ T4925] netlink: 'syz.2.201': attribute type 16 has an invalid length. [ 122.516199][ T4925] netlink: 'syz.2.201': attribute type 17 has an invalid length. [ 122.561633][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.569709][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.577965][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.639848][ T4925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.059636][ T4929] netlink: 'syz.4.204': attribute type 12 has an invalid length. [ 123.067736][ T4929] netlink: 'syz.4.204': attribute type 29 has an invalid length. [ 123.075874][ T4188] usb 1-1: not running at top speed; connect to a high speed hub [ 123.084544][ T4929] netlink: 148 bytes leftover after parsing attributes in process `syz.4.204'. [ 123.287850][ T4938] netlink: 20 bytes leftover after parsing attributes in process `syz.4.208'. [ 123.685167][ T4188] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.707096][ T4188] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 123.745225][ T4188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.093801][ T4950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'. [ 124.113163][ T4188] usb 1-1: can't set config #1, error -71 [ 124.128873][ T4188] usb 1-1: USB disconnect, device number 4 [ 126.708754][ T4964] kvm_set_msr_common: 20 callbacks suppressed [ 126.708773][ T4964] kvm [4955]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 126.824323][ T4964] kvm [4955]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x32 [ 127.516276][ T4988] netlink: 20 bytes leftover after parsing attributes in process `syz.2.225'. [ 127.637217][ T4993] loop3: detected capacity change from 0 to 164 [ 128.118009][ T5001] rock: directory entry would overflow storage [ 128.124398][ T5001] rock: sig=0x4f50, size=4, remaining=3 [ 128.129991][ T5001] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 128.468545][ T5001] netlink: 'syz.3.227': attribute type 16 has an invalid length. [ 128.476911][ T5001] netlink: 'syz.3.227': attribute type 17 has an invalid length. [ 128.487772][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 128.497202][ T5003] loop4: detected capacity change from 0 to 512 [ 128.504961][ T5001] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.574681][ T5005] loop1: detected capacity change from 0 to 256 [ 128.591639][ T5003] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 128.621254][ T5003] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.665963][ T5003] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 128.712897][ T5003] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 128.753864][ T5003] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 128.775826][ T5003] System zones: 0-2, 18-18, 34-35 [ 128.846720][ T5003] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 128.972318][ T5003] EXT4-fs (loop4): shut down requested (2) [ 130.159816][ T5040] loop4: detected capacity change from 0 to 164 [ 130.322746][ T5038] loop1: detected capacity change from 0 to 2048 [ 130.720792][ T5043] rock: directory entry would overflow storage [ 130.727180][ T5043] rock: sig=0x4f50, size=4, remaining=3 [ 130.732911][ T5043] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 130.774715][ T5043] netlink: 'syz.4.243': attribute type 16 has an invalid length. [ 130.783007][ T5043] netlink: 'syz.4.243': attribute type 17 has an invalid length. [ 130.803057][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 130.959176][ T5043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.055335][ T5038] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.414473][ T5057] loop4: detected capacity change from 0 to 256 [ 131.428183][ T5060] FAULT_INJECTION: forcing a failure. [ 131.428183][ T5060] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 131.442454][ T5060] CPU: 0 PID: 5060 Comm: syz.0.249 Not tainted syzkaller #0 [ 131.449752][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.459806][ T5060] Call Trace: [ 131.463075][ T5060] [ 131.465988][ T5060] dump_stack_lvl+0x188/0x250 [ 131.470659][ T5060] ? show_regs_print_info+0x20/0x20 [ 131.475838][ T5060] ? load_image+0x410/0x410 [ 131.480330][ T5060] ? mark_lock+0x94/0x320 [ 131.484638][ T5060] should_fail+0x383/0x4b0 [ 131.489037][ T5060] prepare_alloc_pages+0x1e3/0x5b0 [ 131.494134][ T5060] __alloc_pages+0x11b/0x480 [ 131.498710][ T5060] ? zone_statistics+0x170/0x170 [ 131.503645][ T5060] ? rcu_lock_acquire+0x30/0x30 [ 131.508476][ T5060] ? alloc_pages+0x452/0x560 [ 131.513064][ T5060] __get_free_pages+0x8/0x30 [ 131.517632][ T5060] __tlb_remove_page_size+0x1f2/0x3f0 [ 131.522985][ T5060] unmap_page_range+0xfcf/0x2410 [ 131.527916][ T5060] unmap_vmas+0x131/0x250 [ 131.532226][ T5060] ? unmap_page_range+0x2410/0x2410 [ 131.537397][ T5060] ? __mutex_lock_common+0x435/0x2400 [ 131.542746][ T5060] ? exit_mm_release+0x16/0x30 [ 131.547490][ T5060] exit_mmap+0x3b9/0x640 [ 131.551710][ T5060] ? vm_brk+0x20/0x20 [ 131.555674][ T5060] ? uprobe_clear_state+0x2f6/0x460 [ 131.560857][ T5060] __mmput+0x115/0x390 [ 131.564904][ T5060] exit_mm+0x632/0x7b0 [ 131.568946][ T5060] ? perf_pmu_migrate_context+0xb70/0xb70 [ 131.574645][ T5060] ? do_exit+0x2110/0x2110 [ 131.579054][ T5060] ? __ia32_sys_timer_delete+0x40/0x40 [ 131.584487][ T5060] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 131.589925][ T5060] ? tty_audit_exit+0x149/0x1f0 [ 131.594753][ T5060] do_exit+0x5b8/0x2110 [ 131.598896][ T5060] ? put_task_struct+0x80/0x80 [ 131.603636][ T5060] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 131.609597][ T5060] ? _raw_spin_lock_irq+0xb7/0xf0 [ 131.614602][ T5060] do_group_exit+0x12c/0x2f0 [ 131.619168][ T5060] ? lockdep_hardirqs_on+0x94/0x140 [ 131.624359][ T5060] get_signal+0x7eb/0x12e0 [ 131.628774][ T5060] arch_do_signal_or_restart+0xe6/0x12a0 [ 131.634396][ T5060] ? futex_exit_release+0x1c0/0x1c0 [ 131.639574][ T5060] ? get_sigframe_size+0x10/0x10 [ 131.644489][ T5060] ? __context_tracking_exit+0x4c/0x80 [ 131.649932][ T5060] ? exit_to_user_mode_loop+0x3b/0x130 [ 131.655368][ T5060] exit_to_user_mode_loop+0x9e/0x130 [ 131.660655][ T5060] exit_to_user_mode_prepare+0xee/0x180 [ 131.666175][ T5060] syscall_exit_to_user_mode+0x16/0x40 [ 131.671611][ T5060] do_syscall_64+0x58/0xa0 [ 131.676004][ T5060] ? clear_bhb_loop+0x30/0x80 [ 131.680656][ T5060] ? clear_bhb_loop+0x30/0x80 [ 131.685314][ T5060] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.691217][ T5060] RIP: 0033:0x7f6b73b38159 [ 131.695624][ T5060] Code: Unable to access opcode bytes at RIP 0x7f6b73b3812f. [ 131.702963][ T5060] RSP: 002b:00007f6b71d900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 131.711483][ T5060] RAX: 0000000000000001 RBX: 00007f6b73dbffa8 RCX: 00007f6b73b38159 [ 131.719445][ T5060] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6b73dbffac [ 131.727400][ T5060] RBP: 00007f6b73dbffa0 R08: 0016daa7fb1ff7fe R09: 0000000000000000 [ 131.735354][ T5060] R10: 000000003aef8881 R11: 0000000000000246 R12: 0000000000000000 [ 131.743309][ T5060] R13: 00007f6b73dc0038 R14: 00007ffe1bd23690 R15: 00007ffe1bd23778 [ 131.751274][ T5060] [ 132.101158][ T4230] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 132.351111][ T4230] usb 4-1: Using ep0 maxpacket: 32 [ 132.471325][ T4230] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.512450][ T4230] usb 4-1: config 0 has no interfaces? [ 132.559375][ T4230] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 132.614626][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.622409][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.641431][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.731827][ T4230] usb 4-1: config 0 descriptor?? [ 134.796058][ T4188] usb 4-1: USB disconnect, device number 4 [ 134.804002][ T5083] loop4: detected capacity change from 0 to 256 [ 134.860871][ T5083] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 134.918417][ T5085] loop1: detected capacity change from 0 to 512 [ 135.105590][ T5085] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 135.118121][ T5085] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.258: invalid indirect mapped block 256 (level 1) [ 135.171819][ T5085] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.258: invalid indirect mapped block 2683928664 (level 1) [ 135.289959][ T5085] EXT4-fs (loop1): 1 truncate cleaned up [ 135.596514][ T5085] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 136.097441][ T5121] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.258: Invalid block bitmap block 3 in block_group 0 [ 136.294969][ T5115] loop3: detected capacity change from 0 to 2048 [ 136.495579][ T5115] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.391300][ T5137] loop1: detected capacity change from 0 to 512 [ 137.544855][ T5137] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,usrquota,quota,,errors=continue. Quota mode: writeback. [ 137.568409][ T5137] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.680121][ T25] kauditd_printk_skb: 4 callbacks suppressed [ 138.680134][ T25] audit: type=1326 audit(1791070528.923:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5149 comm="syz.1.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6abee159 code=0x7ffc0000 [ 139.878086][ T25] audit: type=1326 audit(1791070528.963:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5149 comm="syz.1.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6abee159 code=0x7ffc0000 [ 139.880599][ T5157] loop1: detected capacity change from 0 to 512 [ 139.921947][ T25] audit: type=1326 audit(1791070528.983:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5149 comm="syz.1.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6abee159 code=0x7ffc0000 [ 139.946072][ T25] audit: type=1326 audit(1791070528.983:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5149 comm="syz.1.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6abee159 code=0x7ffc0000 [ 139.970384][ T25] audit: type=1326 audit(1791070528.983:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5149 comm="syz.1.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3c6abee159 code=0x7ffc0000 [ 139.999729][ T25] audit: type=1326 audit(1791070528.983:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5149 comm="syz.1.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6abee159 code=0x7ffc0000 [ 140.093107][ T25] audit: type=1326 audit(1791070528.983:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5149 comm="syz.1.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6abee159 code=0x7ffc0000 [ 140.121905][ T5157] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 140.166748][ T5157] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.281: invalid indirect mapped block 256 (level 1) [ 140.221092][ T25] audit: type=1326 audit(1791070528.993:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5149 comm="syz.1.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6abee159 code=0x7ffc0000 [ 140.226308][ T5160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.282'. [ 140.265703][ T5157] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.281: invalid indirect mapped block 2683928664 (level 1) [ 140.298702][ T5157] EXT4-fs (loop1): 1 truncate cleaned up [ 140.311557][ T5157] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 140.337171][ T25] audit: type=1326 audit(1791070529.003:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5149 comm="syz.1.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f3c6abee159 code=0x7ffc0000 [ 140.337213][ T25] audit: type=1326 audit(1791070529.003:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5149 comm="syz.1.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6abee159 code=0x7ffc0000 [ 140.681268][ T4292] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 140.727083][ T5169] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.281: Invalid block bitmap block 3 in block_group 0 [ 141.008617][ T4292] usb 5-1: device descriptor read/64, error -71 [ 141.191253][ T5171] loop3: detected capacity change from 0 to 1024 [ 141.296642][ T5175] loop1: detected capacity change from 0 to 512 [ 141.303392][ T4292] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 141.429627][ T5175] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.481222][ T4231] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 141.526616][ T4292] usb 5-1: device descriptor read/64, error -71 [ 141.615129][ T5175] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.662654][ T4292] usb usb5-port1: attempt power cycle [ 142.970036][ T4231] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.053154][ T4231] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 143.062199][ T4231] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 143.073875][ T4231] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 143.083555][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.029636][ T21] usb 1-1: USB disconnect, device number 5 [ 144.074433][ T5205] loop3: detected capacity change from 0 to 16 [ 144.168936][ T5209] Zero length message leads to an empty skb [ 144.274195][ T5210] loop1: detected capacity change from 0 to 512 [ 144.460494][ T5205] erofs: (device loop3): mounted with root inode @ nid 36. [ 144.539015][ T5205] attempt to access beyond end of device [ 144.539015][ T5205] loop3: rw=0, want=40, limit=16 [ 144.566335][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 1638399 of nid 36 [ 144.576561][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 399 @ nid 36 [ 144.585736][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 1634303 of nid 36 [ 144.595840][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 398 @ nid 36 [ 144.605516][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 1630207 of nid 36 [ 144.615640][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 397 @ nid 36 [ 144.624829][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 1626111 of nid 36 [ 144.634947][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 396 @ nid 36 [ 144.644093][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 1622015 of nid 36 [ 144.654182][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 395 @ nid 36 [ 144.663330][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 1617919 of nid 36 [ 144.673422][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 394 @ nid 36 [ 144.682640][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 1613823 of nid 36 [ 144.692765][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 393 @ nid 36 [ 144.701911][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 1609727 of nid 36 [ 144.712575][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 392 @ nid 36 [ 144.721776][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 387 @ nid 36 [ 144.730890][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 386 @ nid 36 [ 144.740034][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 385 @ nid 36 [ 144.749206][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 384 @ nid 36 [ 144.758638][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 339 @ nid 36 [ 144.767775][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 338 @ nid 36 [ 144.776926][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 337 @ nid 36 [ 144.786060][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 336 @ nid 36 [ 144.795320][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 315 @ nid 36 [ 144.804484][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 314 @ nid 36 [ 144.813924][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 313 @ nid 36 [ 144.823075][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 312 @ nid 36 [ 144.832186][ T5205] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 75 of nid 36 [ 144.841578][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 311 @ nid 36 [ 144.850666][ T5205] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 75 of nid 36 [ 144.860065][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 310 @ nid 36 [ 144.869201][ T5205] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 75 of nid 36 [ 144.878588][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 309 @ nid 36 [ 144.887718][ T5205] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 75 of nid 36 [ 144.897086][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 308 @ nid 36 [ 144.906198][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 307 @ nid 36 [ 144.915617][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 306 @ nid 36 [ 144.924758][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 305 @ nid 36 [ 144.933863][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 304 @ nid 36 [ 144.942990][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 1245183 of nid 36 [ 144.953054][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 303 @ nid 36 [ 144.962174][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 1241087 of nid 36 [ 144.972232][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 302 @ nid 36 [ 144.981398][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 1236991 of nid 36 [ 144.991501][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 301 @ nid 36 [ 145.000612][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 1232895 of nid 36 [ 145.010727][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 300 @ nid 36 [ 145.020573][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 1228799 of nid 36 [ 145.030701][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 299 @ nid 36 [ 145.039836][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 1224703 of nid 36 [ 145.049953][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 298 @ nid 36 [ 145.059058][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 1220607 of nid 36 [ 145.069120][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 297 @ nid 36 [ 145.078231][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 1216511 of nid 36 [ 145.088294][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 296 @ nid 36 [ 145.097570][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 291 @ nid 36 [ 145.106698][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 290 @ nid 36 [ 145.116113][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 289 @ nid 36 [ 145.125240][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 288 @ nid 36 [ 145.134350][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 1179647 of nid 36 [ 145.144491][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 287 @ nid 36 [ 145.153601][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 1175551 of nid 36 [ 145.163696][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 286 @ nid 36 [ 145.172980][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 1171455 of nid 36 [ 145.183052][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 285 @ nid 36 [ 145.192164][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 1167359 of nid 36 [ 145.202245][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 284 @ nid 36 [ 145.211390][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 275 @ nid 36 [ 145.220799][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 274 @ nid 36 [ 145.229952][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 273 @ nid 36 [ 145.239062][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 272 @ nid 36 [ 145.248185][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 267 @ nid 36 [ 145.257284][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 266 @ nid 36 [ 145.266395][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 265 @ nid 36 [ 145.275507][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 264 @ nid 36 [ 145.284651][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 259 @ nid 36 [ 145.293762][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 258 @ nid 36 [ 145.302881][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 257 @ nid 36 [ 145.311982][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 256 @ nid 36 [ 145.322067][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 186 @ nid 36 [ 145.331203][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 185 @ nid 36 [ 145.340287][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 184 @ nid 36 [ 145.349414][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 183 @ nid 36 [ 145.358515][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 182 @ nid 36 [ 145.367627][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 181 @ nid 36 [ 145.376740][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 180 @ nid 36 [ 145.385853][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 179 @ nid 36 [ 145.394961][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 178 @ nid 36 [ 145.404077][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 177 @ nid 36 [ 145.413234][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 176 @ nid 36 [ 145.422710][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 155 @ nid 36 [ 145.431817][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 154 @ nid 36 [ 145.440897][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 153 @ nid 36 [ 145.450008][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 152 @ nid 36 [ 145.459107][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 151 @ nid 36 [ 145.468229][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 150 @ nid 36 [ 145.477326][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 149 @ nid 36 [ 145.486435][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 148 @ nid 36 [ 145.495551][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 147 @ nid 36 [ 145.504659][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 146 @ nid 36 [ 145.513757][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 145 @ nid 36 [ 145.522884][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 144 @ nid 36 [ 145.532305][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 589823 of nid 36 [ 145.542300][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 143 @ nid 36 [ 145.551412][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 585727 of nid 36 [ 145.561389][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 142 @ nid 36 [ 145.570468][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 581631 of nid 36 [ 145.580431][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 141 @ nid 36 [ 145.589551][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 577535 of nid 36 [ 145.599520][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 140 @ nid 36 [ 145.608628][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 573439 of nid 36 [ 145.618601][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 139 @ nid 36 [ 145.628029][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 569343 of nid 36 [ 145.638001][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 138 @ nid 36 [ 145.647140][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 565247 of nid 36 [ 145.657133][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 137 @ nid 36 [ 145.666245][ T5205] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 561151 of nid 36 [ 145.676218][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 136 @ nid 36 [ 145.685407][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 115 @ nid 36 [ 145.694509][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 114 @ nid 36 [ 145.703627][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 113 @ nid 36 [ 145.712726][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 112 @ nid 36 [ 145.721835][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 111 @ nid 36 [ 145.731231][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 110 @ nid 36 [ 145.740319][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 109 @ nid 36 [ 145.749506][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 108 @ nid 36 [ 145.758607][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 107 @ nid 36 [ 145.767710][ T5205] erofs: (device loop3): z_erofs_readahead: readahead error at page 106 @ nid 36 [ 145.777118][ T5205] attempt to access beyond end of device [ 145.777118][ T5205] loop3: rw=524288, want=13478624064, limit=16 [ 145.788771][ T5205] attempt to access beyond end of device [ 145.788771][ T5205] loop3: rw=524288, want=13478624072, limit=16 [ 145.800416][ T5205] attempt to access beyond end of device [ 145.800416][ T5205] loop3: rw=524288, want=14550774184, limit=16 [ 145.812072][ T5205] attempt to access beyond end of device [ 145.812072][ T5205] loop3: rw=524288, want=14550774192, limit=16 [ 145.823733][ T5205] attempt to access beyond end of device [ 145.823733][ T5205] loop3: rw=524288, want=13716630408, limit=16 [ 145.835389][ T5205] attempt to access beyond end of device [ 145.835389][ T5205] loop3: rw=524288, want=13716630416, limit=16 [ 145.847302][ T5205] attempt to access beyond end of device [ 145.847302][ T5205] loop3: rw=524288, want=104, limit=16 [ 145.858400][ T5205] attempt to access beyond end of device [ 145.858400][ T5205] loop3: rw=524288, want=112, limit=16 [ 145.869472][ T5205] attempt to access beyond end of device [ 145.869472][ T5205] loop3: rw=524288, want=14425508800, limit=16 [ 145.983378][ T5210] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 146.009935][ T5210] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.299: invalid indirect mapped block 256 (level 1) [ 146.111651][ T5210] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.299: invalid indirect mapped block 2683928664 (level 1) [ 146.654862][ T5210] EXT4-fs (loop1): 1 truncate cleaned up [ 146.664713][ T5210] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 147.816453][ T5237] process 'syz.4.306' launched './file0' with NULL argv: empty string added [ 148.206242][ T5238] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.299: Invalid block bitmap block 3 in block_group 0 [ 148.819459][ T25] kauditd_printk_skb: 38 callbacks suppressed [ 148.819472][ T25] audit: type=1326 audit(1791070539.073:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.4.310" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039efaf159 code=0x7ffc0000 [ 150.760513][ T25] audit: type=1326 audit(1791070539.083:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.4.310" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039efaf159 code=0x7ffc0000 [ 150.807963][ T25] audit: type=1326 audit(1791070539.283:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.4.310" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f039efaf159 code=0x7ffc0000 [ 150.951872][ T25] audit: type=1326 audit(1791070539.283:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.4.310" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039efaf159 code=0x7ffc0000 [ 151.063446][ T25] audit: type=1326 audit(1791070539.283:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.4.310" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039efaf159 code=0x7ffc0000 [ 151.088057][ T25] audit: type=1326 audit(1791070539.283:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.4.310" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f039efaf159 code=0x7ffc0000 [ 151.127393][ T25] audit: type=1326 audit(1791070539.283:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.4.310" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039efaf159 code=0x7ffc0000 [ 151.172889][ T25] audit: type=1326 audit(1791070539.283:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.4.310" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039efaf159 code=0x7ffc0000 [ 151.236755][ T25] audit: type=1326 audit(1791070539.283:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.4.310" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f039efaf159 code=0x7ffc0000 [ 151.283256][ T25] audit: type=1326 audit(1791070539.283:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.4.310" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039efaf159 code=0x7ffc0000 [ 151.303810][ T5262] capability: warning: `syz.0.315' uses 32-bit capabilities (legacy support in use) [ 151.342221][ T4265] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 151.357748][ T5264] netlink: 32 bytes leftover after parsing attributes in process `syz.2.316'. [ 151.761788][ T4265] usb 2-1: config 0 interface 0 has no altsetting 0 [ 151.780330][ T4265] usb 2-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.00 [ 151.884733][ T4265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.020495][ T4265] usb 2-1: config 0 descriptor?? [ 152.574980][ T4265] wacom 0003:056A:00D8.0002: Unknown device_type for 'HID 056a:00d8'. Assuming pen. [ 152.593414][ T4265] wacom 0003:056A:00D8.0002: hidraw0: USB HID v8.00 Device [HID 056a:00d8] on usb-dummy_hcd.1-1/input0 [ 152.606656][ T4265] input: Wacom Bamboo Comic 2FG Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00D8.0002/input/input5 [ 153.486631][ T4265] usb 2-1: USB disconnect, device number 3 [ 154.761917][ T5291] fido_id[5291]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 155.018908][ T5309] loop1: detected capacity change from 0 to 16 [ 155.049692][ T5309] erofs: (device loop1): mounted with root inode @ nid 36. [ 156.469831][ T5330] loop4: detected capacity change from 0 to 128 [ 156.751348][ T5330] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 157.307769][ T5330] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.435537][ T5341] af_packet: tpacket_rcv: packet too big, clamped from 4083 to 4294967272. macoff=96 [ 157.487991][ T5344] loop4: detected capacity change from 0 to 8 [ 157.858689][ T5357] loop4: detected capacity change from 0 to 164 [ 158.347862][ T5362] rock: directory entry would overflow storage [ 158.354138][ T5362] rock: sig=0x4f50, size=4, remaining=3 [ 158.359733][ T5362] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 158.372019][ T5362] netlink: 'syz.4.340': attribute type 16 has an invalid length. [ 158.379817][ T5362] netlink: 'syz.4.340': attribute type 17 has an invalid length. [ 158.402362][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 158.460537][ T5362] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.843867][ T5380] loop1: detected capacity change from 0 to 256 [ 158.999235][ T5380] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 160.318221][ T5406] loop4: detected capacity change from 0 to 512 [ 160.444528][ T5406] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 160.595433][ T5406] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.353: invalid indirect mapped block 256 (level 1) [ 160.668016][ T5406] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.353: invalid indirect mapped block 2683928664 (level 1) [ 160.704755][ T5406] EXT4-fs (loop4): 1 truncate cleaned up [ 160.710433][ T5406] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 160.784200][ T5403] chnl_net:caif_netlink_parms(): no params data found [ 161.218349][ T5428] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.353: Invalid block bitmap block 3 in block_group 0 [ 161.378789][ T5403] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.419263][ T5403] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.527649][ T5403] device bridge_slave_0 entered promiscuous mode [ 161.578512][ T5403] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.794221][ T5403] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.983392][ T5403] device bridge_slave_1 entered promiscuous mode [ 162.461091][ T4265] Bluetooth: hci5: command 0x0409 tx timeout [ 162.498778][ T5447] loop1: detected capacity change from 0 to 164 [ 162.510252][ T5403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.872669][ T5403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.044994][ T5403] team0: Port device team_slave_0 added [ 163.054376][ T5403] team0: Port device team_slave_1 added [ 163.074415][ T5403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.081417][ T5403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.117786][ T5403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.148661][ T5403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.240975][ T5403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.666281][ T5462] rock: directory entry would overflow storage [ 163.672541][ T5462] rock: sig=0x4f50, size=4, remaining=3 [ 163.678094][ T5462] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 163.709928][ T5403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.835191][ T5462] netlink: 'syz.1.360': attribute type 16 has an invalid length. [ 163.843179][ T5462] netlink: 'syz.1.360': attribute type 17 has an invalid length. [ 163.856199][ T5462] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.865689][ T5462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.964894][ T5469] loop4: detected capacity change from 0 to 8 [ 163.994146][ T5403] device hsr_slave_0 entered promiscuous mode [ 164.096556][ T5403] device hsr_slave_1 entered promiscuous mode [ 164.261136][ T5403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.280486][ T5403] Cannot create hsr debugfs directory [ 164.395669][ T5480] loop1: detected capacity change from 0 to 256 [ 164.546822][ T21] Bluetooth: hci5: command 0x041b tx timeout [ 164.564298][ T5482] loop4: detected capacity change from 0 to 512 [ 164.588796][ T5480] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 164.694100][ T5482] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 164.721991][ T5482] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.368: invalid indirect mapped block 256 (level 1) [ 164.794549][ T5482] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.368: invalid indirect mapped block 2683928664 (level 1) [ 164.817837][ T5403] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 164.827459][ T5403] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 164.838212][ T5403] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 164.848758][ T5403] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 164.857894][ T5482] EXT4-fs (loop4): 1 truncate cleaned up [ 164.895486][ T5482] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 165.039124][ T5403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.078277][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.090297][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.105006][ T5403] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.126398][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.147435][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.182913][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.190050][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.218855][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.230657][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.239660][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.249589][ T4290] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.256778][ T4290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.333872][ T5499] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.368: Invalid block bitmap block 3 in block_group 0 [ 165.527788][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.579452][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.630575][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.678354][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.717486][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.751634][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.787613][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.837585][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.891909][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.909814][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.930752][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.967042][ T5403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.347593][ T5519] netlink: 'syz.0.374': attribute type 16 has an invalid length. [ 166.355401][ T5519] netlink: 'syz.0.374': attribute type 17 has an invalid length. [ 166.376113][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 166.875459][ T2303] Bluetooth: hci5: command 0x040f tx timeout [ 166.891320][ T5519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.222791][ T5529] loop4: detected capacity change from 0 to 8 [ 167.237018][ T5523] loop1: detected capacity change from 0 to 4096 [ 167.695506][ T5523] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 167.997276][ T5403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.027865][ T5554] loop4: detected capacity change from 0 to 1024 [ 168.081178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.100601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.907051][ T5567] netlink: 'syz.2.387': attribute type 16 has an invalid length. [ 168.914922][ T5567] netlink: 'syz.2.387': attribute type 17 has an invalid length. [ 168.935946][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 168.967588][ T5567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.091582][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 169.494985][ T5575] loop4: detected capacity change from 0 to 256 [ 169.698421][ T5575] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 169.774740][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.803128][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.903809][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.970022][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.352170][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.581168][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.813861][ T5403] device veth0_vlan entered promiscuous mode [ 170.879740][ T5403] device veth1_vlan entered promiscuous mode [ 170.934160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.970473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.013506][ T5403] device veth0_macvtap entered promiscuous mode [ 171.058476][ T5403] device veth1_macvtap entered promiscuous mode [ 171.158389][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.200853][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.245080][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.288597][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.325030][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.363317][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.392606][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.424764][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.457422][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.498273][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.511055][ T5403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.521999][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.532645][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.544593][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.600354][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.627390][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.658451][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.668757][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.697839][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.729879][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.780982][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.792390][ T5403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.800122][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 171.812314][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 171.826977][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.839274][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.971481][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.153195][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.350293][ T5403] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.386523][ T5403] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.421910][ T5403] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.430732][ T5403] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.493780][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.529507][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.558804][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 173.597239][ T5614] loop4: detected capacity change from 0 to 1024 [ 173.639791][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.669120][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.695986][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 173.721202][ T5614] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 173.739263][ T5614] hfsplus: xattr searching failed [ 174.731259][ T4230] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 174.878152][ T5628] loop5: detected capacity change from 0 to 128 [ 174.880264][ T5629] loop4: detected capacity change from 0 to 256 [ 175.011920][ T5629] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 175.039814][ T5628] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 175.111258][ T4230] usb 1-1: not running at top speed; connect to a high speed hub [ 175.124614][ T5628] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 175.221238][ T4230] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.561151][ T4230] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 175.570247][ T4230] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 175.611090][ T4230] usb 1-1: Product: syz [ 175.615370][ T4230] usb 1-1: Manufacturer: syz [ 175.639574][ T5642] loop5: detected capacity change from 0 to 256 [ 175.654381][ T5642] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 175.675102][ T4230] usb 1-1: Found UVC 1.00 device syz (225a:e1d4) [ 175.913041][ T4230] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 175.924090][ T5646] loop5: detected capacity change from 0 to 256 [ 175.934994][ T5646] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value [ 176.109419][ T4230] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 176.134736][ T4230] uvcvideo 1-1:1.1: Failed to initialize the device (-5). [ 176.894113][ T4230] usb 1-1: USB disconnect, device number 6 [ 178.403592][ T5674] loop4: detected capacity change from 0 to 128 [ 178.544028][ T5679] loop5: detected capacity change from 0 to 256 [ 178.601837][ T5674] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 178.615948][ T5674] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 178.670531][ T5679] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 180.920046][ T5699] loop4: detected capacity change from 0 to 256 [ 181.032268][ T5699] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 181.537964][ T5714] loop4: detected capacity change from 0 to 256 [ 181.582863][ T5714] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 182.549128][ T5722] loop5: detected capacity change from 0 to 8 [ 183.527716][ T5741] loop5: detected capacity change from 0 to 256 [ 183.537676][ T5741] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value [ 185.526942][ T5764] loop5: detected capacity change from 0 to 256 [ 185.598899][ T5764] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 186.020658][ T3518] Bluetooth: hci1: command 0x0406 tx timeout [ 186.086000][ T3518] Bluetooth: hci2: command 0x0406 tx timeout [ 186.104790][ T3518] Bluetooth: hci3: command 0x0406 tx timeout [ 186.144400][ T3518] Bluetooth: hci0: command 0x0406 tx timeout [ 186.169787][ T3518] Bluetooth: hci4: command 0x0406 tx timeout [ 186.172100][ T5769] loop5: detected capacity change from 0 to 4096 [ 186.192438][ T5771] loop1: detected capacity change from 0 to 128 [ 186.272040][ T5769] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 186.339786][ T5771] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 186.361741][ T5771] ext4 filesystem being mounted at /84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 186.820410][ T5779] loop1: detected capacity change from 0 to 8 [ 189.614604][ T5807] loop1: detected capacity change from 0 to 256 [ 189.682576][ T5807] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 190.015883][ T5812] loop1: detected capacity change from 0 to 256 [ 190.058593][ T5817] loop5: detected capacity change from 0 to 128 [ 190.090958][ T5812] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 190.535854][ T5817] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 190.881739][ T5817] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 193.188024][ T5858] loop5: detected capacity change from 0 to 256 [ 193.246544][ T5858] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 193.569900][ T5863] loop5: detected capacity change from 0 to 4096 [ 193.629348][ T5863] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 193.897021][ T5869] loop4: detected capacity change from 0 to 128 [ 194.097461][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.103814][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.114958][ T5869] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 194.157666][ T5869] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 196.800902][ T5899] loop1: detected capacity change from 0 to 256 [ 196.898025][ T5899] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 197.698221][ T5909] loop4: detected capacity change from 0 to 256 [ 197.753003][ T5909] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 197.852838][ T5916] loop1: detected capacity change from 0 to 128 [ 197.965088][ T5916] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 197.981555][ T5916] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 198.090825][ T5921] loop5: detected capacity change from 0 to 256 [ 198.141946][ T5921] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value [ 199.900056][ T5944] loop1: detected capacity change from 0 to 256 [ 200.028522][ T5944] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 200.274810][ T5952] loop1: detected capacity change from 0 to 4096 [ 200.291492][ T5958] loop5: detected capacity change from 0 to 128 [ 200.357181][ T5952] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 200.518710][ T5958] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 200.884844][ T5958] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 201.536333][ T5970] loop4: detected capacity change from 0 to 256 [ 201.584289][ T5970] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 202.594367][ T5972] loop5: detected capacity change from 0 to 2048 [ 202.643211][ T5972] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.063122][ T5987] loop4: detected capacity change from 0 to 256 [ 203.128026][ T5987] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 203.211676][ T5993] loop1: detected capacity change from 0 to 8 [ 204.909735][ T6018] loop5: detected capacity change from 0 to 256 [ 204.977297][ T6018] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value [ 205.260528][ T6016] loop4: detected capacity change from 0 to 4096 [ 205.365482][ T6025] loop1: detected capacity change from 0 to 256 [ 205.435399][ T6016] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 205.458102][ T6025] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 206.325065][ T6044] loop1: detected capacity change from 0 to 128 [ 206.430382][ T6044] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 206.519405][ T6044] ext4 filesystem being mounted at /108/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 207.626883][ T6062] loop4: detected capacity change from 0 to 256 [ 207.695946][ T6062] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 208.162761][ T6067] loop1: detected capacity change from 0 to 256 [ 208.208654][ T6067] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 209.294793][ T6081] loop1: detected capacity change from 0 to 128 [ 209.387506][ T6081] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 209.414111][ T6081] ext4 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 209.429712][ T6083] loop4: detected capacity change from 0 to 4096 [ 209.649340][ T6083] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 210.131225][ T6096] loop1: detected capacity change from 0 to 8 [ 212.643957][ T6137] loop1: detected capacity change from 0 to 1024 [ 212.825166][ T6137] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 212.894827][ T6137] hfsplus: xattr searching failed [ 214.526460][ T6167] loop4: detected capacity change from 0 to 128 [ 214.721775][ T6167] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 214.736192][ T6167] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 215.121394][ T6179] loop4: detected capacity change from 0 to 256 [ 215.162265][ T6179] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 216.015996][ T6185] loop1: detected capacity change from 0 to 256 [ 216.062248][ T6185] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 216.237397][ T6205] loop1: detected capacity change from 0 to 128 [ 216.257540][ T6202] loop4: detected capacity change from 0 to 1024 [ 216.309284][ T6202] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 216.341316][ T6202] hfsplus: xattr searching failed [ 216.349295][ T6205] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 216.377776][ T6205] ext4 filesystem being mounted at /120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 217.090493][ T6220] loop4: detected capacity change from 0 to 256 [ 217.143185][ T6220] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 217.274385][ T6223] loop4: detected capacity change from 0 to 128 [ 217.327942][ T6223] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 218.009044][ T6231] loop4: detected capacity change from 0 to 256 [ 218.047882][ T6231] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 218.648359][ T6235] loop5: detected capacity change from 0 to 2048 [ 218.745956][ T6235] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.321676][ T6248] loop1: detected capacity change from 0 to 128 [ 219.387702][ T6252] loop4: detected capacity change from 0 to 256 [ 219.419711][ T6248] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 219.437381][ T6252] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 219.447889][ T6248] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 220.051402][ T6266] loop4: detected capacity change from 0 to 256 [ 220.108027][ T6266] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 221.379922][ T6283] set_capacity_and_notify: 1 callbacks suppressed [ 221.379951][ T6283] loop5: detected capacity change from 0 to 256 [ 221.391506][ T6276] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 221.471759][ T6276] hfsplus: xattr searching failed [ 221.723132][ T6283] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value [ 221.939971][ T6287] loop5: detected capacity change from 0 to 4096 [ 221.988594][ T6287] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 222.666816][ T6296] loop1: detected capacity change from 0 to 2048 [ 222.764606][ T6296] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.335864][ T6304] loop4: detected capacity change from 0 to 128 [ 223.496260][ T6304] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 223.570231][ T6312] loop1: detected capacity change from 0 to 8 [ 223.601213][ T6304] ext4 filesystem being mounted at /126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 224.700756][ T6330] loop1: detected capacity change from 0 to 256 [ 224.717862][ T6330] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 225.666155][ T6341] loop4: detected capacity change from 0 to 2048 [ 225.800475][ T6341] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.355520][ T6346] loop5: detected capacity change from 0 to 256 [ 226.464418][ T6346] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 227.523048][ T6373] loop1: detected capacity change from 0 to 256 [ 227.696582][ T6373] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 227.958692][ T6379] loop5: detected capacity change from 0 to 128 [ 228.006123][ T6379] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 228.682961][ T6379] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 229.836920][ T6398] loop5: detected capacity change from 0 to 1024 [ 229.970789][ T6398] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 230.017074][ T6402] loop4: detected capacity change from 0 to 256 [ 230.040660][ T6398] hfsplus: xattr searching failed [ 230.099647][ T6404] loop1: detected capacity change from 0 to 256 [ 230.128382][ T6402] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 230.228868][ T6404] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 230.848984][ T6409] loop4: detected capacity change from 0 to 8 [ 231.405727][ T6427] netlink: 52 bytes leftover after parsing attributes in process `syz.4.643'. [ 231.512368][ T6427] netlink: 44 bytes leftover after parsing attributes in process `syz.4.643'. [ 232.275101][ T6440] loop5: detected capacity change from 0 to 256 [ 232.411488][ T6440] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value [ 233.225814][ T6448] loop5: detected capacity change from 0 to 256 [ 233.311998][ T6448] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value [ 233.349130][ T6446] loop4: detected capacity change from 0 to 2048 [ 233.444605][ T6446] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.985227][ T6453] loop5: detected capacity change from 0 to 8 [ 234.194423][ T6455] netlink: 52 bytes leftover after parsing attributes in process `syz.0.655'. [ 234.210625][ T6455] netlink: 44 bytes leftover after parsing attributes in process `syz.0.655'. [ 234.299498][ T6457] loop1: detected capacity change from 0 to 128 [ 234.522357][ T6457] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 234.548125][ T6457] ext4 filesystem being mounted at /136/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 234.607907][ T6466] loop5: detected capacity change from 0 to 1024 [ 235.194794][ T6466] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 235.520503][ T6466] hfsplus: xattr searching failed [ 236.220073][ T6486] loop1: detected capacity change from 0 to 256 [ 236.292586][ T6486] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 237.016078][ T6500] netlink: 52 bytes leftover after parsing attributes in process `syz.4.667'. [ 237.055844][ T6500] netlink: 44 bytes leftover after parsing attributes in process `syz.4.667'. [ 237.139628][ T6504] loop5: detected capacity change from 0 to 8 [ 237.599111][ T6512] loop5: detected capacity change from 0 to 128 [ 237.700353][ T6512] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 237.751864][ T6512] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 238.381905][ T6526] loop5: detected capacity change from 0 to 256 [ 238.403478][ T6526] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value [ 239.196960][ T6531] loop5: detected capacity change from 0 to 256 [ 239.212899][ T6531] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value [ 239.893160][ T6540] netlink: 52 bytes leftover after parsing attributes in process `syz.2.679'. [ 240.955617][ T6552] loop5: detected capacity change from 0 to 1024 [ 241.842720][ T6552] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 241.849374][ T6552] hfsplus: xattr searching failed [ 242.812843][ T6580] netlink: 52 bytes leftover after parsing attributes in process `syz.0.693'. [ 242.945132][ T6583] loop1: detected capacity change from 0 to 2048 [ 242.949683][ T6587] loop5: detected capacity change from 0 to 8 [ 243.423651][ T6583] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.873284][ T6602] loop5: detected capacity change from 0 to 256 [ 244.994268][ T6602] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value [ 245.747742][ T6619] loop1: detected capacity change from 0 to 256 [ 245.879451][ T6619] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 246.232366][ T6625] netlink: 52 bytes leftover after parsing attributes in process `syz.0.706'. [ 246.383420][ T6631] loop5: detected capacity change from 0 to 128 [ 246.395648][ T6630] loop1: detected capacity change from 0 to 256 [ 246.470476][ T6631] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 246.532297][ T6630] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 246.631196][ T6631] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 247.570870][ T6645] netlink: 'syz.0.712': attribute type 16 has an invalid length. [ 247.578792][ T6645] netlink: 'syz.0.712': attribute type 17 has an invalid length. [ 247.597878][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 248.142931][ T6645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.264122][ T6646] loop5: detected capacity change from 0 to 256 [ 248.417497][ T6646] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value [ 248.663071][ T6656] loop1: detected capacity change from 0 to 2048 [ 248.971294][ T6656] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.054341][ T6667] netlink: 20 bytes leftover after parsing attributes in process `syz.2.719'. [ 250.244707][ T6675] loop1: detected capacity change from 0 to 128 [ 250.320011][ T6675] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 250.489871][ T6675] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 252.132260][ T6702] loop5: detected capacity change from 0 to 256 [ 252.218164][ T6702] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value [ 252.328316][ T6706] loop4: detected capacity change from 0 to 256 [ 252.382860][ T6706] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 252.687984][ T6711] netlink: 20 bytes leftover after parsing attributes in process `syz.4.733'. [ 253.175432][ T6715] loop5: detected capacity change from 0 to 164 [ 253.245206][ T6719] loop4: detected capacity change from 0 to 128 [ 253.556962][ T6727] rock: directory entry would overflow storage [ 253.563225][ T6727] rock: sig=0x4f50, size=4, remaining=3 [ 253.568847][ T6727] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 253.580665][ T6727] netlink: 'syz.5.735': attribute type 16 has an invalid length. [ 253.588498][ T6727] netlink: 'syz.5.735': attribute type 17 has an invalid length. [ 253.637033][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.645051][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.653195][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.699646][ T6727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.756830][ T6719] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 254.004849][ T6719] ext4 filesystem being mounted at /146/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 255.493771][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.500152][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.222692][ T6758] loop1: detected capacity change from 0 to 2048 [ 256.740020][ T6758] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.746576][ T6765] loop5: detected capacity change from 0 to 128 [ 256.794155][ T6765] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 256.889534][ T6765] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 257.604123][ T6777] loop1: detected capacity change from 0 to 4096 [ 257.740496][ T6785] loop4: detected capacity change from 0 to 256 [ 257.798115][ T6785] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 258.162540][ T6777] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 261.468873][ T6828] loop4: detected capacity change from 0 to 1024 [ 262.171727][ T6828] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 262.178282][ T6828] hfsplus: xattr searching failed [ 263.059026][ T6843] netlink: 20 bytes leftover after parsing attributes in process `syz.2.774'. [ 263.288518][ T6853] loop4: detected capacity change from 0 to 256 [ 263.428615][ T6853] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 264.363045][ T6865] loop1: detected capacity change from 0 to 2048 [ 264.496745][ T6865] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.494957][ T6885] netlink: 20 bytes leftover after parsing attributes in process `syz.5.787'. [ 266.550705][ T6887] loop5: detected capacity change from 0 to 128 [ 267.242887][ T6887] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 267.414759][ T6887] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 267.632435][ T6900] loop1: detected capacity change from 0 to 256 [ 267.849802][ T6899] loop4: detected capacity change from 0 to 256 [ 267.882180][ T6900] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 267.945779][ T6899] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 268.230161][ T6907] loop4: detected capacity change from 0 to 4096 [ 268.379751][ T6914] loop5: detected capacity change from 0 to 256 [ 268.383490][ T6907] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 268.439256][ T6914] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value [ 269.956680][ T6927] loop5: detected capacity change from 0 to 2048 [ 271.013210][ T6934] netlink: 20 bytes leftover after parsing attributes in process `syz.0.799'. [ 271.159859][ T6927] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.036682][ T6948] loop1: detected capacity change from 0 to 256 [ 272.105206][ T6948] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 275.014333][ T6980] netlink: 20 bytes leftover after parsing attributes in process `syz.0.811'. [ 275.117290][ T6982] loop1: detected capacity change from 0 to 256 [ 275.227048][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.814'. [ 275.251098][ T6982] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 275.530059][ T6991] loop1: detected capacity change from 0 to 2048 [ 275.720149][ T6991] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.818603][ T6998] netlink: 'syz.0.817': attribute type 16 has an invalid length. [ 275.826541][ T6998] netlink: 'syz.0.817': attribute type 17 has an invalid length. [ 275.848459][ T6998] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 275.886636][ T6998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.538007][ T7019] loop4: detected capacity change from 0 to 256 [ 277.571234][ T13] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 277.621111][ T7019] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 277.660092][ T7024] netlink: 20 bytes leftover after parsing attributes in process `syz.0.826'. [ 277.715408][ T7022] loop1: detected capacity change from 0 to 4096 [ 278.992932][ T7022] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 279.316626][ T13] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.335494][ T13] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 279.368732][ T13] usb 6-1: config 0 interface 0 has no altsetting 0 [ 279.401028][ T13] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 279.483326][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.497312][ T13] usb 6-1: config 0 descriptor?? [ 280.056135][ T13] hid (null): bogus close delimiter [ 280.072784][ T13] hid-multitouch 0003:0EEF:72C4.0003: collection stack underflow [ 280.107776][ T13] hid-multitouch 0003:0EEF:72C4.0003: item 0 4 0 12 parsing failed [ 280.191605][ T13] hid-multitouch: probe of 0003:0EEF:72C4.0003 failed with error -22 [ 280.233535][ T13] usb 6-1: USB disconnect, device number 2 [ 282.880658][ T7111] loop1: detected capacity change from 0 to 512 [ 282.941831][ T7111] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 283.246380][ T7111] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 283.255677][ T13] Bluetooth: hci5: command 0x0406 tx timeout [ 283.505930][ T7111] EXT4-fs (loop1): orphan cleanup on readonly fs [ 283.538684][ T7111] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.853: bad orphan inode 15 [ 283.626170][ T7111] ext4_test_bit(bit=14, block=5) = 0 [ 283.655689][ T7111] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,sysvgroups,dioread_nolock,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 283.696684][ T7123] loop4: detected capacity change from 0 to 4096 [ 283.732621][ T7127] loop5: detected capacity change from 0 to 128 [ 283.774130][ T7123] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 283.877732][ T7127] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 283.931188][ T7127] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 286.129657][ T7178] loop5: detected capacity change from 0 to 128 [ 286.223667][ T7178] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 286.244854][ T7180] loop1: detected capacity change from 0 to 2048 [ 286.271268][ T7178] ext4 filesystem being mounted at /84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 286.416240][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'. [ 286.506708][ T7180] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 286.835816][ T7193] xt_CT: No such helper "snmp" [ 287.062592][ T7206] loop4: detected capacity change from 0 to 256 [ 287.095916][ T7206] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 287.726800][ T7216] loop5: detected capacity change from 0 to 8192 [ 288.428374][ T7225] loop5: detected capacity change from 0 to 4096 [ 289.362899][ T7225] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 291.707687][ T7267] loop1: detected capacity change from 0 to 2048 [ 291.996820][ T7267] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.621980][ T4290] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.011628][ T7289] netlink: 'syz.2.910': attribute type 16 has an invalid length. [ 293.021252][ T7289] netlink: 'syz.2.910': attribute type 17 has an invalid length. [ 293.036791][ T7289] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 293.076726][ T7289] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.246900][ T4290] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.367397][ T4290] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.619468][ T4290] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.860699][ T7319] loop5: detected capacity change from 0 to 164 [ 295.279587][ T7298] chnl_net:caif_netlink_parms(): no params data found [ 295.700127][ T4230] Bluetooth: hci0: command 0x0409 tx timeout [ 295.753860][ T7332] rock: directory entry would overflow storage [ 295.753950][ T7332] rock: sig=0x4f50, size=4, remaining=3 [ 295.753992][ T7332] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 295.883646][ T7331] netlink: 'syz.5.923': attribute type 16 has an invalid length. [ 295.896919][ T7331] netlink: 'syz.5.923': attribute type 17 has an invalid length. [ 295.911485][ T7331] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 296.005583][ T7331] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 296.311979][ T7355] loop1: detected capacity change from 0 to 1024 [ 296.360017][ T7298] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.374131][ T7298] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.388482][ T7355] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 296.425495][ T7298] device bridge_slave_0 entered promiscuous mode [ 296.503716][ T7298] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.526685][ T7355] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,noblock_validity,nobarrier,debug_want_extra_isize=0x0000000000000004,abort,nombcache,init_itable,,errors=continue. Quota mode: none. [ 296.590034][ T7298] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.600788][ T7298] device bridge_slave_1 entered promiscuous mode [ 296.654636][ T7368] loop5: detected capacity change from 0 to 512 [ 296.734998][ T7298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.758886][ T7368] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 296.782036][ T7368] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.934: invalid indirect mapped block 256 (level 1) [ 296.832019][ T7368] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.934: invalid indirect mapped block 2683928664 (level 1) [ 296.883297][ T7298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.893050][ T7368] EXT4-fs (loop5): 1 truncate cleaned up [ 296.905416][ T7368] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 297.005331][ T7377] loop1: detected capacity change from 0 to 2048 [ 297.189420][ T7377] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 297.205669][ T7377] ext4 filesystem being mounted at /173/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 297.414606][ T7298] team0: Port device team_slave_0 added [ 297.533197][ T7298] team0: Port device team_slave_1 added [ 297.765747][ T7391] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.934: Invalid block bitmap block 3 in block_group 0 [ 298.200457][ T4229] Bluetooth: hci0: command 0x041b tx timeout [ 298.266118][ T7298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.316738][ T7298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.379595][ T7399] loop5: detected capacity change from 0 to 164 [ 298.451329][ T7298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.574589][ T7298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.623776][ T7298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.718223][ T7298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.792089][ T7421] rock: directory entry would overflow storage [ 298.802395][ T7421] rock: sig=0x4f50, size=4, remaining=3 [ 298.811017][ T7421] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 299.664002][ T7421] netlink: 'syz.5.939': attribute type 16 has an invalid length. [ 299.678128][ T7421] netlink: 'syz.5.939': attribute type 17 has an invalid length. [ 299.694109][ T7421] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 299.721132][ T7421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. dÿÿ9P2000.L[ 300.085670][ T7432] loop5: detected capacity change from 0 to 2048 [ 300.291198][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 300.402050][ T7432] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 300.441292][ T7432] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) lÿÿ[ 301.007191][ T7298] device hsr_slave_0 entered promiscuous mode [ 301.016006][ T7298] device hsr_slave_1 entered promiscuous mode [ 301.055392][ T7298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.070251][ T7298] Cannot create hsr debugfs directory [ 302.135349][ T4290] device hsr_slave_0 left promiscuous mode [ 302.165143][ T4290] device hsr_slave_1 left promiscuous mode [ 302.187787][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.200646][ T7466] loop5: detected capacity change from 0 to 164 [ 302.204464][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.220164][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.371177][ T4230] Bluetooth: hci0: command 0x0419 tx timeout [ 302.784956][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.907131][ T4290] device bridge_slave_1 left promiscuous mode [ 303.102811][ T4290] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.163930][ T7482] FAULT_INJECTION: forcing a failure. [ 303.163930][ T7482] name failslab, interval 1, probability 0, space 0, times 1 [ 303.166225][ T4290] device bridge_slave_0 left promiscuous mode [ 303.243596][ T7485] rock: directory entry would overflow storage [ 303.249882][ T7485] rock: sig=0x4f50, size=4, remaining=3 [ 303.255690][ T7485] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 303.436106][ T7482] CPU: 1 PID: 7482 Comm: syz.1.965 Not tainted syzkaller #0 [ 303.443431][ T7482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 303.453497][ T7482] Call Trace: [ 303.456773][ T7482] [ 303.459702][ T7482] dump_stack_lvl+0x188/0x250 [ 303.464404][ T7482] ? show_regs_print_info+0x20/0x20 [ 303.469644][ T7482] ? load_image+0x410/0x410 [ 303.474474][ T7482] ? __might_sleep+0xf0/0xf0 [ 303.479576][ T7482] ? __lock_acquire+0x7d40/0x7d40 [ 303.484718][ T7482] should_fail+0x383/0x4b0 [ 303.489156][ T7482] should_failslab+0x5/0x20 [ 303.493660][ T7482] slab_pre_alloc_hook+0x51/0xc0 [ 303.498602][ T7482] ? __d_alloc+0x27/0x6d0 [ 303.502931][ T7482] kmem_cache_alloc+0x3d/0x280 [ 303.507690][ T7482] ? __lock_acquire+0x7d40/0x7d40 [ 303.512720][ T7482] __d_alloc+0x27/0x6d0 [ 303.516879][ T7482] d_alloc_parallel+0x7b/0x1320 [ 303.521730][ T7482] ? __d_lookup+0x6a4/0x760 [ 303.526248][ T7482] path_openat+0x985/0x2fb0 [ 303.530780][ T7482] ? do_filp_open+0x400/0x400 [ 303.535478][ T7482] do_filp_open+0x1df/0x400 [ 303.539985][ T7482] ? vfs_tmpfile+0x300/0x300 [ 303.544594][ T7482] ? _raw_spin_unlock+0x24/0x40 [ 303.549451][ T7482] ? alloc_fd+0x59e/0x650 [ 303.553783][ T7482] do_sys_openat2+0x14b/0x500 [ 303.558457][ T7482] ? __lock_acquire+0x7d40/0x7d40 [ 303.563484][ T7482] ? do_sys_open+0xe0/0xe0 [ 303.567906][ T7482] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 303.573890][ T7482] ? lock_chain_count+0x20/0x20 [ 303.578745][ T7482] __x64_sys_openat+0x135/0x160 [ 303.583754][ T7482] do_syscall_64+0x4c/0xa0 [ 303.588214][ T7482] ? clear_bhb_loop+0x30/0x80 [ 303.592893][ T7482] ? clear_bhb_loop+0x30/0x80 [ 303.597576][ T7482] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 303.603475][ T7482] RIP: 0033:0x7f3c6abee159 [ 303.607893][ T7482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.627517][ T7482] RSP: 002b:00007f3c68e46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 303.635938][ T7482] RAX: ffffffffffffffda RBX: 00007f3c6ae75fa0 RCX: 00007f3c6abee159 [ 303.643919][ T7482] RDX: 0000000000020d42 RSI: 000020000000c380 RDI: ffffffffffffff9c [ 303.650172][ T4290] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.651892][ T7482] RBP: 00007f3c6ac8506b R08: 0000000000000000 R09: 0000000000000000 [ 303.651928][ T7482] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 303.651940][ T7482] R13: 00007f3c6ae76038 R14: 00007f3c6ae75fa0 R15: 00007ffcf56de0f8 [ 303.682846][ T7482] [ 304.056670][ T4290] device veth1_macvtap left promiscuous mode [ 304.073600][ T4290] device veth0_macvtap left promiscuous mode [ 304.079705][ T4290] device veth1_vlan left promiscuous mode [ 304.179311][ T4290] device veth0_vlan left promiscuous mode [ 304.886779][ T27] INFO: task syz.3.296:5205 blocked for more than 143 seconds. [ 304.904594][ T27] Not tainted syzkaller #0 [ 304.909570][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 304.920071][ T27] task:syz.3.296 state:D stack:24704 pid: 5205 ppid: 4198 flags:0x00004004 [ 304.929682][ T27] Call Trace: [ 304.933322][ T27] [ 304.936272][ T27] __schedule+0x11c3/0x4350 [ 304.955213][ T27] ? release_firmware_map_entry+0x190/0x190 [ 304.975249][ T7509] loop1: detected capacity change from 0 to 1024 [ 304.981762][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 304.987768][ T27] ? blk_check_plugged+0x250/0x250 [ 304.996150][ T27] ? lock_chain_count+0x20/0x20 [ 305.001132][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 305.006345][ T27] schedule+0x11b/0x1e0 [ 305.010520][ T27] io_schedule+0x7c/0xd0 [ 305.015097][ T27] wait_on_page_bit_common+0x8bf/0xeb0 [ 305.020659][ T27] ? wait_on_page_bit+0x50/0x50 [ 305.025681][ T27] ? rcu_lock_release+0x20/0x20 [ 305.030568][ T27] ? bio_add_page+0x2dd/0x460 [ 305.035366][ T27] z_erofs_runqueue+0x775/0x1a70 [ 305.040308][ T27] ? prepare_alloc_pages+0x359/0x5b0 [ 305.045657][ T27] ? z_erofs_do_read_page+0x2680/0x2680 [ 305.051324][ T27] ? mutex_unlock+0x10/0x10 [ 305.055841][ T27] z_erofs_readahead+0xbc7/0x1140 [ 305.060859][ T27] ? z_erofs_readpage+0x740/0x740 [ 305.066485][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 305.072936][ T27] ? local_lock_release+0x97/0x170 [ 305.078060][ T27] read_pages+0x172/0x920 [ 305.082702][ T27] ? page_cache_ra_unbounded+0x8f0/0x8f0 [ 305.088358][ T27] ? add_to_page_cache_lru+0x2ad/0x4a0 [ 305.094261][ T27] page_cache_ra_unbounded+0x7f4/0x8f0 [ 305.099754][ T27] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 305.106675][ T27] force_page_cache_ra+0x3e5/0x440 [ 305.111989][ T27] generic_fadvise+0x52b/0x7e0 [ 305.116794][ T27] ? dump_task+0x610/0x610 [ 305.121321][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 305.127331][ T27] ? __fdget+0x150/0x210 [ 305.131645][ T27] __x64_sys_fadvise64+0x139/0x180 [ 305.136766][ T27] do_syscall_64+0x4c/0xa0 [ 305.141283][ T27] ? clear_bhb_loop+0x30/0x80 [ 305.145971][ T27] ? clear_bhb_loop+0x30/0x80 [ 305.150642][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 305.156569][ T27] RIP: 0033:0x7f1ab30b6159 [ 305.161066][ T27] RSP: 002b:00007f1ab130e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 305.169924][ T27] RAX: ffffffffffffffda RBX: 00007f1ab333dfa0 RCX: 00007f1ab30b6159 [ 305.177988][ T27] RDX: 0000000000000000 RSI: 0000000000054056 RDI: 0000000000000004 [ 305.186006][ T27] RBP: 00007f1ab314d06b R08: 0000000000000000 R09: 0000000000000000 [ 305.194038][ T27] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 305.202057][ T27] R13: 00007f1ab333e038 R14: 00007f1ab333dfa0 R15: 00007ffd17b65f48 [ 305.210064][ T27] [ 305.215306][ T27] [ 305.215306][ T27] Showing all locks held in the system: [ 305.223732][ T27] 1 lock held by khungtaskd/27: [ 305.228591][ T27] #0: ffffffff8c31efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 305.248431][ T27] 4 locks held by udevd/3558: [ 305.249544][ T7509] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 305.253617][ T27] #0: ffff88805e80f2f0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0x9d/0xc50 [ 305.260753][ T7509] hfsplus: xattr searching failed [ 305.269502][ T27] #1: ffff888022a3c488 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x55/0x3c0 [ 305.283978][ T27] #2: ffff88805ea382c0 (kn->active#32){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 305.293633][ T27] #3: ffff8880794b2178 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320 [ 305.302668][ T27] 1 lock held by dhcpcd/3851: [ 305.307344][ T27] #0: ffffffff8d44d808 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x256/0x1ba0 [ 305.316550][ T27] 2 locks held by getty/3947: [ 305.322130][ T27] #0: ffff88814c5e3098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 305.331953][ T27] #1: ffffc900026562e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 [ 305.342128][ T27] 2 locks held by kworker/1:5/4229: [ 305.347310][ T27] #0: ffff888016c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 305.357627][ T27] #1: ffffc9000314fd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 305.368903][ T27] 3 locks held by kworker/1:6/4230: [ 305.374533][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 305.384901][ T27] #1: ffffc9000315fd00 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 305.395216][ T27] #2: ffffffff8d44d808 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 [ 305.405681][ T27] 3 locks held by kworker/u4:7/4289: [ 305.411035][ T27] #0: ffff888016c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 305.422095][ T27] #1: ffffc9000329fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 305.433005][ T27] #2: ffffffff8d44d808 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 305.442079][ T27] 5 locks held by kworker/u4:8/4290: [ 305.447361][ T27] #0: ffff888016dcd938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 305.457721][ T27] #1: ffffc9000325fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 305.467606][ T27] #2: ffffffff8d4418d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 305.477463][ T27] #3: ffffffff8d44d808 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0x165/0x3c0 [ 305.487669][ T27] #4: ffffffff8c323a28 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750 [ 305.498657][ T27] 1 lock held by syz.3.296/5205: [ 305.503648][ T27] #0: ffff8880631ed820 (mapping.invalidate_lock#5){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x19a/0x8f0 [ 305.514934][ T27] 6 locks held by syz-executor/7298: [ 305.520222][ T27] #0: ffff88807f13c460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x296/0xd70 [ 305.529155][ T27] #1: ffff88801de89888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x500 [ 305.538947][ T27] #2: ffff888023a25bd0 (kn->active#285){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1fd/0x500 [ 305.549708][ T27] #3: ffffffff8cd8a488 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x14c/0x770 [ 305.560094][ T27] #4: ffff8880794b2178 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 305.569379][ T27] #5: ffffffff8d44d808 (rtnl_mutex){+.+.}-{3:3}, at: devlink_nl_port_fill+0x346/0x8c0 [ 305.579432][ T27] 1 lock held by syz.5.961/7485: [ 305.584449][ T27] #0: ffffffff8d44d808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10 [ 305.601077][ T27] [ 305.603427][ T27] ============================================= [ 305.603427][ T27] [ 305.631010][ T27] NMI backtrace for cpu 1 [ 305.635361][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 305.642535][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 305.652584][ T27] Call Trace: [ 305.655864][ T27] [ 305.658805][ T27] dump_stack_lvl+0x188/0x250 [ 305.663491][ T27] ? show_regs_print_info+0x20/0x20 [ 305.668679][ T27] ? load_image+0x410/0x410 [ 305.673166][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 305.678523][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 305.683639][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 305.688582][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 305.694729][ T27] ? _printk+0xda/0x130 [ 305.698865][ T27] ? load_image+0x410/0x410 [ 305.703348][ T27] ? load_image+0x410/0x410 [ 305.707829][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 305.713883][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 305.719855][ T27] watchdog+0xe1b/0xe60 [ 305.724009][ T27] kthread+0x42e/0x520 [ 305.728062][ T27] ? hungtask_pm_notify+0x40/0x40 [ 305.733071][ T27] ? kthread_blkcg+0xd0/0xd0 [ 305.737672][ T27] ret_from_fork+0x1f/0x30 [ 305.742095][ T27] [ 305.745763][ T27] Sending NMI from CPU 1 to CPUs 0: [ 305.751229][ C0] NMI backtrace for cpu 0 [ 305.751239][ C0] CPU: 0 PID: 4288 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 305.751254][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 305.751263][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 305.751284][ C0] RIP: 0010:__lock_acquire+0x581/0x7d40 [ 305.751304][ C0] Code: 10 49 89 07 65 8b 05 72 7d a5 7e 45 31 ff 85 c0 41 0f 95 c7 45 01 ff 48 8b 44 24 20 4c 8d a0 d4 0a 00 00 4c 89 e0 48 c1 e8 03 <48> 89 84 24 c8 00 00 00 42 0f b6 04 00 84 c0 0f 85 99 14 00 00 31 [ 305.751316][ C0] RSP: 0018:ffffc900031bf7c0 EFLAGS: 00000807 [ 305.751328][ C0] RAX: 1ffff11005773512 RBX: 0000000000000831 RCX: ffff888078a985e8 [ 305.751339][ C0] RDX: 0000000000000831 RSI: 0000000000000000 RDI: ffff88802bb9a930 [ 305.751348][ C0] RBP: ffffc900031bfa08 R08: dffffc0000000000 R09: 0000000000000001 [ 305.751358][ C0] R10: dffffc0000000000 R11: fffffbfff1b1657e R12: ffff88802bb9a894 [ 305.751368][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 305.751377][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 305.751389][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 305.751399][ C0] CR2: 000055557f50e4e8 CR3: 00000000737fc000 CR4: 00000000003506f0 [ 305.751412][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 305.751421][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 305.751430][ C0] Call Trace: [ 305.751434][ C0] [ 305.751441][ C0] ? __lock_acquire+0x13b3/0x7d40 [ 305.751463][ C0] ? verify_lock_unused+0x140/0x140 [ 305.751483][ C0] ? __mutex_trylock_common+0x15c/0x260 [ 305.751499][ C0] ? rcu_lock_release+0x20/0x20 [ 305.751512][ C0] ? verify_lock_unused+0x140/0x140 [ 305.751529][ C0] lock_acquire+0x19f/0x400 [ 305.751544][ C0] ? cfg80211_wiphy_work+0x69/0x260 [ 305.751562][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 305.751577][ C0] ? read_lock_is_recursive+0x10/0x10 [ 305.751595][ C0] ? cfg80211_wiphy_work+0x31/0x260 [ 305.751611][ C0] ? _raw_spin_lock_irq+0x86/0xf0 [ 305.751627][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 305.751644][ C0] _raw_spin_lock_irq+0xab/0xf0 [ 305.751658][ C0] ? cfg80211_wiphy_work+0x69/0x260 [ 305.751673][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 305.751687][ C0] ? read_lock_is_recursive+0x10/0x10 [ 305.751705][ C0] cfg80211_wiphy_work+0x69/0x260 [ 305.751722][ C0] process_one_work+0x867/0xff0 [ 305.751743][ C0] ? worker_detach_from_pool+0x240/0x240 [ 305.751757][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 305.751773][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 305.751787][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 305.751802][ C0] ? wq_worker_running+0x97/0x170 [ 305.751816][ C0] worker_thread+0xad7/0x12a0 [ 305.751839][ C0] kthread+0x42e/0x520 [ 305.751851][ C0] ? rcu_lock_release+0x20/0x20 [ 305.751865][ C0] ? kthread_blkcg+0xd0/0xd0 [ 305.751878][ C0] ret_from_fork+0x1f/0x30 [ 305.751897][ C0] [ 305.753454][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 306.048464][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 306.055642][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 306.065681][ T27] Call Trace: [ 306.068965][ T27] [ 306.071890][ T27] dump_stack_lvl+0x188/0x250 [ 306.076572][ T27] ? show_regs_print_info+0x20/0x20 [ 306.081752][ T27] ? load_image+0x410/0x410 [ 306.086240][ T27] panic+0x2f8/0x850 [ 306.090143][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 306.095758][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 306.100249][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 306.106403][ T27] watchdog+0xe5a/0xe60 [ 306.110566][ T27] kthread+0x42e/0x520 [ 306.114625][ T27] ? hungtask_pm_notify+0x40/0x40 [ 306.119649][ T27] ? kthread_blkcg+0xd0/0xd0 [ 306.124506][ T27] ret_from_fork+0x1f/0x30 [ 306.128932][ T27] [ 306.132163][ T27] Kernel Offset: disabled [ 306.136482][ T27] Rebooting in 86400 seconds..