last executing test programs: 4m32.043520411s ago: executing program 3 (id=369): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f00000000c0)=ANY=[], 0x11, 0x69f, &(0x7f0000001040)="$eJzs3c1vHGcdB/DvrNcvm0qu26ZpQJUwjVQQEYkdK4VwSUAIBalCVTggjlbjNFacNDguSnsgLiD1yoE/oBzCBU4ghISEFKmc4VZxszhVQuqlp7QHBu3s7Hrt7volb2vD5xPNzvPMM/M8v/nNy+46Wk2A/1sXT6Z5L61cPPnq7XZ94+7CysbdhevdcpLJJI2k2ZmluJEUHyQX0pnyhfbCurti2Di/Xj536cNPNj7q1JrZ7K/90hoeYHMve7FeT5lNMlbPH8KW/l5/sP4mN4tFLzPthJ3oJg5GbTxJucVPjm22DFKO9VWGXu/A4VF03jf7dK7/meRIkqnuG9p6p7Hx5CPc1b7uReuPLw4AAAA4MJ6+fye5nelRxwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACHSf38/6KeGt3ybIru8/8n+p6xPzHicIfbObKpbuFe40kEAwAAAAAAAACP15fu53eXynK6Wy+L6v/8X6oqR6vXp/JWbmUpqzmV21nMWtaymvkkM+/9uNfRxO3FtbXV+e6Wn5VlOWTLM+0t+0LobHlmjwG3Hs1+AwAAAAAAAMD/iPP1/Oe5mOkRxwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFsUyVhnVk1Hu+WZNJpJppJMtNdbT/7RLR9m90YdAAAAADwBT9/P/dzOdLdeFtV3/mPV9/6pvJUbWcty1rKSpVyu/hbQ+dbf2Li7sLJxd+F6e9raZ2PbGH+c3jWMiXqzsao2aOTj1RqtXMlyteRUXs+bWcnlNHoDHu/GMziudz9u932+oyz3lqDL9by957+q5wfDTJWR8V5G5urY2tl4ZudMfPvjhxppPo3eX36O7iPn53ccpfhP95gc6S5Jnvr+7jkf39fO7EPxuYG3Z+JM39l3bOdMJF/50+9/dHXlxrWrxfrJg3Ma7cPkvzavmu2ZWOjLxAt7zsSVW4czE9s18nyvfDHfyw9zMrN5LatZzk+zmLUsZTbfrUqL9fncfp3ZOVMXttRe2y2Kifq4jG2L6ctPd+Y7xfRSte10lvODvJnLWcor1b8zmc83cjZnc67vCD+/h6u+MeCq//Pw4E98tS60krxXzw+Gdl6f6ctr/z13pmrrX9JIOdnZ7tlHdm/saX6xLrSPxC8GvNmOTi8TU+m9S3Sje66bgfGBmfhNdVu5tXLj2urVxZvb+i3WB4/3crbu/sG5kbTPl2fbB6uqbT072m3PDWybr9qO9toa29t+2+q17XalTtSf4T7f05mq7YWBbQtV2/G+ts3PW5+VZdn5vAXAgXfka0cmWv9u/b31fuuXrautV6e+M/nNyRcnMv638W8158ZebrxY/CHv52fZ/Rs6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwq1tvv3NtcWVlaXVboSzLO0OaHkshzWTLkr/+pW+dJNXDgPbeYXvtC42kWtJMXdhfYHcebHfefdAk/LM+Jk8k4Y+kMDX0/Nle+LQsy4MR814KZe2gxDOKwkhvS8ATcHrt+s3Tt95+5+vL1xffWHpj6ca5s2fPzZ07+8rC6SvLK0tznddRRwk8Dn2fwAEAAAAAAAAAAIBDYm8/zike7rc9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/h4sk076XI/NypuXZ94+7CSnvqljfX/DRJI0kxmxQfJBfSmTLT110xbJz15NKHn2x81Kk166lav7HTdnuzXk+ZTTJWzweYGrSwvDOsv6Lq5+bw/vao6O1hO2EnuomDUftvAAAA//8fBRpx") setxattr$trusted_overlay_upper(&(0x7f0000001240)='./file1\x00', &(0x7f0000000180), &(0x7f0000000180)=ANY=[], 0x841, 0x0) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0xfb) 4m31.601806584s ago: executing program 3 (id=374): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x1, 0x2, 0xfffff034}, {0x20, 0x0, 0x40, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 4m31.030128024s ago: executing program 3 (id=381): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@zcopy_cookie={0xfffffffffffffe9d, 0x114, 0xc, 0x8001}], 0x18}, 0x0) 4m30.812145151s ago: executing program 3 (id=384): syz_mount_image$nilfs2(&(0x7f0000000480), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x1, 0xeec, &(0x7f0000001e40)="$eJzs3U9sHNUZAPA3a6/txCZeAwUDJaTQikDBDkmkprcgoh4Rl96D8odGMWnU0ANRIKYHRCVEkSJOFQcqLpRKKVKRQJWqqKe2p1a99YR6oVKVSkE9tJESV1m/We8+e7rrsT1r7/5+0rdv37zZ+b7xRs7MePZtAIZWrfl4+PBsFsJ7n1859trJ7NM7yx5prbGv+ZjFXiOEUG/rZ8n2vogLbt24dGKtNgsHm495Pzx/vfXayRDCYtgXroVG+Hh+4auP3n9u/ydvTtz3zsWzr2/R7rek+wEAAIPo6p8W/vbEP/741MzNq3uPhvHW8pXj9WWT8bj/QFyQL6+Fzn7WFu3GkvVGYtSS9UaS9UaTPKMF+erJduoF6411yTfStmyt/QQAAICdKD+vbYSsNtfRr9Xm5pbP++/4Ynosmzt3ZuH0hT4VCgAAAJT278vNm26FEEIIIYQQQggxwLE03e8rEAAAAMCwSecLW2Vxc2fqam2t0Vv+68/W1n49bIKq//3Lv7Pyf/iG3zgAAJQ3qEeT+X7lx9H5PAbpPIIjyevWe/xfS7Yzus46i+YV7Fiebd+3qaj+9Oe6XRXVv973sV+K6k/nw9yuiupP5+ncrorqH6+4jrKK6p+ouI6yiurfVXEdZRXVv7viOsoqqn+y4jrKKqp/quI6yiqq/66K6yirqP49FddRVlH9O+W22qL6GxXXUVZR/TMV11FWUf13V1xHWUX131NxHWUV1X9vxXX0y8OxzX8Oe5Px9vPn9Jxup5zjAQAAwLD7r/n/hBBCiFXRvA9iG9QhxGBHtg1qEEKI4YnL/b4AAQAAAPRd/rmA/APoS1E+PtJlfLR9fGJlhXy83uX1Y13Gx7uMAwAAACH89q3TD7ybrXzOf6Pz4eXzRu0Kn94OJeYxSie6W2/+jc57ttH865i3zPQJAAAAVCb73rXbTx774JWZm1f3Hm07+70dz3fzeUBH4wnrZ7Gf3xcwlfSz/Bz6aGeeWsF66fWBu4q298IGdxQAAACGWH7+3ghZba7tvLsRarW5uZXz8dlQz06fWTh1IPbz72f5w3R9/M7yZyquGwAAAOjdyvn+2uf/+ff4zoaxbO7cmYXTF5b7U63l9Vr7dYHpleVZ+3WBRrL8YMHyQ7Gff3/nD6Z3NZfPnfjhwsnN3nkAAAAYEhdevXj2xYWFUz/yxBNPPGk96fdvJgAAYLN9+eWV+o8PTf1u+fP/K/Pf5Z//3xf7jTi335/jCvl9AvnnAFZ9Xv94Z57povXOd67XSNYbiTGe1D3Rtp3QnG+w83UzRfkandsZK8g3meSbSvKl8xSMJuvn+fYky9P5CfP1ppPl6eSAo0mOLMn/aAAAAIBi86+8fH7+wqsXnz7z8osvnXrp1LlDB49898iRA89855n55n398+139wMAAAA70cpNv/2uBAAAAAAAAAAAAAAAAAAAAIZXFV8n1u99BAAAgGH3r8shhEUhhCgdS+P9r0GILjG2DWoQQgghhFiO5ne7V5+31u/rDwAAAMDwuXXj0on2dpXFbFPztbbWWG5ux7x5O/X0X2fuRL7a9WdHOl6/e1OrYdhV/e9f/p2V/8M3Njf/RP6k599/ySXjo+XyPj7/y9n2/A+O9pg/3f8XyuXfn+R/PPSWf+mDJP/xcvmfSPLv7jH/qv0/Xy7/kzH/bOzvf6zX/J3v/3hs8/3Y1WP+byf7fzL0mj/Z/0aPCRNPxfwAMIwG9QaA/CghP46ejP18f+PhZhhJXrfe4/9asp3RDVfeud38OOj+2M+Pl6aSvLn11j+ZbO+uknWm0rq2q6L6N+t93GpF9dcrrqOsovrHKq6jrKL6xyuuo6yi+icqrqOsovp7PQ/tt6L6d8p15aL6Jyuuo6yi+qcqrqOsovrX+/94vxTVv6fiOsoqqn+64jrKKqq/5GW1yhXVP1NxHWUV1X93xXWUVVT/PRXXUVZR/fdWXEe/PBTbovPh/PxzOo7l/UbSH1/jZzmo1xYAAABgp/mn+f+EEEIIIUpF836ZbVBHf6Ltbrm+1yI2I/6ztKzfdQghti6Wlvp48YG+29pPMwOwXfn9P9y8/8PN+z/cvP/8P/k9/FnSz410GR/tMl7vMj6WjKf/Xse7jN+TbHcpv64Z3dtl/Gtdxvd0Gb+/y/hsl/EHuow/2GX8oS7jAAAADIf7Yuv8EAAAAAbXa7/67O3fPH78xszNq3uPhrFV884fiP3x+Lf1t2I/nfc+V49/8/9J7P8itr+P7d+T9d1/AgAAAFsv/54Yf/8HAACAwZV/T6nzfwAAABhcM7F1/g8AAACD6+7YOv8HAACAAZZNrL04tvl1gUdj2+u8fgDA9vf12D4c272xfSS234htfhzwWGy/WVF9AMDm+fn3f3rk3Wxlvv9DyfituDxvV1lcvlKQ1Tpn8t8V292x/VaP9aTfB9Br/tyeHvNsVf7pDeYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZHrfl4+PBsFsJ7n1859rOxt/9yZ9kjrTX2NR+z2GuEEOqt1+WjK/1fxxVv3bh0or29HdssHAxZyFrLw/PXW5kmQwiLYV+4Fhrh4/mFrz56/7n9n7w5cd87F8++voU/go79AwAAgEH0vwAAAP//cFQjcg==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4m29.982602289s ago: executing program 3 (id=394): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) r0 = syz_open_dev$evdev(&(0x7f0000007580), 0x304, 0x81) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000001c0)=""/27) 4m28.774987788s ago: executing program 3 (id=406): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e1f, 0xc4d, @mcast2}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0xa}, 0x1}, r1, 0x8}}, 0x48) 4m28.216094889s ago: executing program 32 (id=406): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e1f, 0xc4d, @mcast2}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0xa}, 0x1}, r1, 0x8}}, 0x48) 3m31.829625153s ago: executing program 1 (id=901): unshare(0x24020400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4) 3m31.521031802s ago: executing program 1 (id=905): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x64000080) 3m31.286391645s ago: executing program 1 (id=909): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x935, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffd, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0xc, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='@#E'], 0x0, 0x0, 0x0, 0x0}, 0x0) 3m29.179282073s ago: executing program 1 (id=935): syz_mount_image$nilfs2(&(0x7f0000000480), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x1, 0xeec, &(0x7f0000001e40)="$eJzs3U9sHNUZAPA3a6/txCZeAwUDJaTQikDBDkmkprcgoh4Rl96D8odGMWnU0ANRIKYHRCVEkSJOFQcqLpRKKVKRQJWqqKe2p1a99YR6oVKVSkE9tJESV1m/We8+e7rrsT1r7/5+0rdv37zZ+b7xRs7MePZtAIZWrfl4+PBsFsJ7n1859trJ7NM7yx5prbGv+ZjFXiOEUG/rZ8n2vogLbt24dGKtNgsHm495Pzx/vfXayRDCYtgXroVG+Hh+4auP3n9u/ydvTtz3zsWzr2/R7rek+wEAAIPo6p8W/vbEP/741MzNq3uPhvHW8pXj9WWT8bj/QFyQL6+Fzn7WFu3GkvVGYtSS9UaS9UaTPKMF+erJduoF6411yTfStmyt/QQAAICdKD+vbYSsNtfRr9Xm5pbP++/4Ynosmzt3ZuH0hT4VCgAAAJT278vNm26FEEIIIYQQQggxwLE03e8rEAAAAMCwSecLW2Vxc2fqam2t0Vv+68/W1n49bIKq//3Lv7Pyf/iG3zgAAJQ3qEeT+X7lx9H5PAbpPIIjyevWe/xfS7Yzus46i+YV7Fiebd+3qaj+9Oe6XRXVv973sV+K6k/nw9yuiupP5+ncrorqH6+4jrKK6p+ouI6yiurfVXEdZRXVv7viOsoqqn+y4jrKKqp/quI6yiqq/66K6yirqP49FddRVlH9O+W22qL6GxXXUVZR/TMV11FWUf13V1xHWUX131NxHWUV1X9vxXX0y8OxzX8Oe5Px9vPn9Jxup5zjAQAAwLD7r/n/hBBCiFXRvA9iG9QhxGBHtg1qEEKI4YnL/b4AAQAAAPRd/rmA/APoS1E+PtJlfLR9fGJlhXy83uX1Y13Gx7uMAwAAACH89q3TD7ybrXzOf6Pz4eXzRu0Kn94OJeYxSie6W2/+jc57ttH865i3zPQJAAAAVCb73rXbTx774JWZm1f3Hm07+70dz3fzeUBH4wnrZ7Gf3xcwlfSz/Bz6aGeeWsF66fWBu4q298IGdxQAAACGWH7+3ghZba7tvLsRarW5uZXz8dlQz06fWTh1IPbz72f5w3R9/M7yZyquGwAAAOjdyvn+2uf/+ff4zoaxbO7cmYXTF5b7U63l9Vr7dYHpleVZ+3WBRrL8YMHyQ7Gff3/nD6Z3NZfPnfjhwsnN3nkAAAAYEhdevXj2xYWFUz/yxBNPPGk96fdvJgAAYLN9+eWV+o8PTf1u+fP/K/Pf5Z//3xf7jTi335/jCvl9AvnnAFZ9Xv94Z57povXOd67XSNYbiTGe1D3Rtp3QnG+w83UzRfkandsZK8g3meSbSvKl8xSMJuvn+fYky9P5CfP1ppPl6eSAo0mOLMn/aAAAAIBi86+8fH7+wqsXnz7z8osvnXrp1LlDB49898iRA89855n55n398+139wMAAAA70cpNv/2uBAAAAAAAAAAAAAAAAAAAAIZXFV8n1u99BAAAgGH3r8shhEUhhCgdS+P9r0GILjG2DWoQQgghhFiO5ne7V5+31u/rDwAAAMDwuXXj0on2dpXFbFPztbbWWG5ux7x5O/X0X2fuRL7a9WdHOl6/e1OrYdhV/e9f/p2V/8M3Njf/RP6k599/ySXjo+XyPj7/y9n2/A+O9pg/3f8XyuXfn+R/PPSWf+mDJP/xcvmfSPLv7jH/qv0/Xy7/kzH/bOzvf6zX/J3v/3hs8/3Y1WP+byf7fzL0mj/Z/0aPCRNPxfwAMIwG9QaA/CghP46ejP18f+PhZhhJXrfe4/9asp3RDVfeud38OOj+2M+Pl6aSvLn11j+ZbO+uknWm0rq2q6L6N+t93GpF9dcrrqOsovrHKq6jrKL6xyuuo6yi+icqrqOsovp7PQ/tt6L6d8p15aL6Jyuuo6yi+qcqrqOsovrX+/94vxTVv6fiOsoqqn+64jrKKqq/5GW1yhXVP1NxHWUV1X93xXWUVVT/PRXXUVZR/fdWXEe/PBTbovPh/PxzOo7l/UbSH1/jZzmo1xYAAABgp/mn+f+EEEIIIUpF836ZbVBHf6Ltbrm+1yI2I/6ztKzfdQghti6Wlvp48YG+29pPMwOwXfn9P9y8/8PN+z/cvP/8P/k9/FnSz410GR/tMl7vMj6WjKf/Xse7jN+TbHcpv64Z3dtl/Gtdxvd0Gb+/y/hsl/EHuow/2GX8oS7jAAAADIf7Yuv8EAAAAAbXa7/67O3fPH78xszNq3uPhrFV884fiP3x+Lf1t2I/nfc+V49/8/9J7P8itr+P7d+T9d1/AgAAAFsv/54Yf/8HAACAwZV/T6nzfwAAABhcM7F1/g8AAACD6+7YOv8HAACAAZZNrL04tvl1gUdj2+u8fgDA9vf12D4c272xfSS234htfhzwWGy/WVF9AMDm+fn3f3rk3Wxlvv9DyfituDxvV1lcvlKQ1Tpn8t8V292x/VaP9aTfB9Br/tyeHvNsVf7pDeYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZHrfl4+PBsFsJ7n1859rOxt/9yZ9kjrTX2NR+z2GuEEOqt1+WjK/1fxxVv3bh0or29HdssHAxZyFrLw/PXW5kmQwiLYV+4Fhrh4/mFrz56/7n9n7w5cd87F8++voU/go79AwAAgEH0vwAAAP//cFQjcg==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m28.47744884s ago: executing program 1 (id=940): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000680)=@in6={0xa, 0x4e25, 0x6, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0x4044044) 3m27.238362083s ago: executing program 1 (id=947): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {0x3, 0xfffffffd}, {0xfffffffe}]}, @fwd, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x94) 3m26.484369499s ago: executing program 33 (id=947): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {0x3, 0xfffffffd}, {0xfffffffe}]}, @fwd, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x94) 45.251595406s ago: executing program 7 (id=2621): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x6f, 0x0, 0x2, [0x10]}]}}}], 0x38}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x11, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000640)="9dbe44f632c72137820ca3215935b741b669af55cdc581eec182ea3d7fcf7232e02142cdc6c5d4acfffd36f914871683b533cdb42cf6be04643044d7991b2fd65403926c8787900e25311dec663a76601cefd1acd496bcc5d507e285d26bd817b736b75780fe981b147295c326ce065bc41e54fdd8e38fc15fe229031899a44ac490a4344a8d18c18420cc020b5bf34595823382201d36b7b882710723bce22b832883ffb74915472c7a167585847478792aee8b4c765e1ec5ca320079cb5d67f2b81f9d514dc93a005fb1513dd764d4bc9cc8266f78e9070b2214069c672c6251ad678c8fe7e846ddf619b31a6f98cb72558f3d919410d16a9abfbc6e856dbd19cf5c6fdd6225b8aef8e666ec271a4f5c900d7008a4d663f0b6e92c90cdace507de3e0c9f", 0x125}, {&(0x7f0000001440)="e74908366df33851e35dbefda327dcabbe4bea2f2fb1d0b89713beef4c55e8d676ace96553a9085679fdf8b6b816e048f8536734f87f3dd119a4ed6ba53a5735dc0cdd9f1e01d47bb38b34f382d13d9ca4b8dbbd291322e566e998a6410eae7583123640cf371e33fe1f869518a7c26aa850945bda30f96492108fdce96b4f20ecca95b6c7b5d7896f8b29eae2e5fc805ae3763d219729badc08d2144980fd732d4800035a1f77e7cb37aa23746d03f27e9e065fc5cc54912b3cdb948a5b49053a759e03ac6bd497078c0a29a576a397deba1445cd79924f31d2b5bb867442318d0c482b137e67d7d9e7f8f74590f098bfdccfd77e269057a139deefc4444dbbe4e3435648c009f60a346484a8b76ca2cdad2f4bcbd593cc9c33471b1cf455257f41bc0457859c45d734ff40351258f21f08d8b9fd3c4693255b003621a7bb3f6ba3db97117a69c57c4dae73b6b83b2c304596b3f3b18f7e7359972271192660f88f6ace82b9b9ac441adb0f567c0c355f9911c3a7b4deec3a6cee967ccb9285359e9cdf46bab03bad3db08f38ba569dabcd9541c2856a2dd2ab54e0161798e48c8b3c719288b615b0523559c4e73f426a6010213add2c1b08256d61652ad6b2474c63874e874f3ecfab0c4dc76b7c8bd2013b73afac690b911c1321ac5ba9714c0ab0d34a31a9d726cbede591da77d59e1494d93a39b084c43f226f586280c14593738c9c542d73dd73a4b7077c7a041265e1db715c339eba31036ae06cd5c1a0a591be0d2bb8bdcfb5cdec65e084f959cacfd4c6dba66948e290f285cb958b7540250e70b5bfb89a4818e362a4cf3f3f228a775e192ee6f0b756f76990f02375397c04a62c0272dc32563b4a4dc5e5abe2bf9a80537150c0020a28643e5382e149ff656caf0b58e93222a6ad5d138bd99cd2945e838bcadf9ba956c990ef32aa896cb34296011db8069fd6b154b33c9d68486584b46d1dff48f87668725cc354a1a0df5958112a3a8fba860927957f03dba73eb748ece14f5e88f6b9178c695668b802288736d896ba06f607a8dc0455c248d26b73eb86c0f9df36668f4ea41d9e17eff8b1217cbc6e6396dd5b54ff5f4bf23859f1e559b0b8082f135081b47ab1688e4646f43b2bc55aa9e08304b47bb5ea5e38a07ae98f85705360a8121206a2f6e3532db37f5041dad583766454684517a334010d60f17938dc27b060b3228278d3266710381b543bfeafd633bdd1a58548d93af89fa6244e72309f73442768e7161f1c984984bf43403abd31738bb902fca2b34231b3ea69434d699c7e2eb534e40fc74908188d0f600e05bc2078413c5f65d2157577502911f0d8b4abcc0736cb1e3d60b138db584ff374a7bb5d6665479437444b96282536519badca1e9fbaedf868839a1f00edc1b00fb53736eba97a8893b40884eb9a1d0d9f8d68909133da5a21899cd91552a41da6d1b9042dc052cc25cc29a129cfc8c1b30d9b4bc3d340c0a82fb405bc06d09b90dc54b5b524173baf5185573ee706048af550be2c883590e277a1b47c6b012ed77db0269a7b301c03b278bf72b032370337aae7dbd1b4f76274ead496303f59a1b47219045dea2f5a06ca6a1fbe1c6b8598d3626263927391f7c7", 0x488}], 0x2}, 0x0) 44.987649211s ago: executing program 7 (id=2626): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x2c, r1, 0x401, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048810}, 0x8080) 44.763612196s ago: executing program 7 (id=2631): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 44.597665543s ago: executing program 7 (id=2636): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000002, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xfe, 0xc31, &(0x7f0000001380)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000809, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 44.082969338s ago: executing program 7 (id=2644): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000000c0)='hfsplus\x00', 0x0, 0x0) 43.381855005s ago: executing program 7 (id=2655): truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, &(0x7f00000001c0)=""/166, 0xa6, &(0x7f0000000140)={&(0x7f0000000300)={'crc32c\x00'}, &(0x7f0000000080)='h', 0x1}) 42.921011257s ago: executing program 34 (id=2655): truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, &(0x7f00000001c0)=""/166, 0xa6, &(0x7f0000000140)={&(0x7f0000000300)={'crc32c\x00'}, &(0x7f0000000080)='h', 0x1}) 24.54358664s ago: executing program 6 (id=2890): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @remote, 0x4e22, 0x4, 'lblc\x00', 0x0, 0xfffffefc}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) 24.444446579s ago: executing program 6 (id=2892): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000a00)={0xf, {"a2e3ad21ed0d1bf91b28090955f70e06d038e7ff7fc6e5539b0d650e8b089b3f36076d090890e0878f0e1ac6e7049b3360959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07450936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0xfffffffffffffd6a}}, 0x1006) 24.111353132s ago: executing program 6 (id=2899): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddb45250800000018000480130001"], 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x4000000) 23.880250278s ago: executing program 6 (id=2904): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@nobarrier}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 23.512400066s ago: executing program 6 (id=2912): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0xc0, &(0x7f0000000240)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB=',mode=00000000000000000000007,umask=00000000000000000177777,gid=forget,volume=00000000000000001023,noadinicb,novrs,lastblock=00000000000000000002,iocharset=cp936,gid=', @ANYRESDEC=0x0, @ANYBLOB], 0x1, 0xc32, &(0x7f0000009100)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b12455, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') 23.090672415s ago: executing program 6 (id=2918): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) 22.701717616s ago: executing program 35 (id=2918): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) 5.749115228s ago: executing program 0 (id=3123): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x30}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private2}}}}}}, 0x0) 5.439345719s ago: executing program 0 (id=3128): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) 3.801588122s ago: executing program 8 (id=3155): r0 = syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db26010203010902f50101030250070904"], &(0x7f0000000500)={0x0, 0x0, 0x12, 0x0, 0x20000298}) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 2.243611627s ago: executing program 0 (id=3182): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x481, &(0x7f0000000140)={[{@force}, {@gid}, {@nobarrier}, {@nobarrier}, {@nobarrier}, {@type={'type', 0x3d, "e39c9acc"}}, {}, {@part={'part', 0x3d, 0x8000}}, {@nls={'nls', 0x3d, 'iso8859-14'}}]}, 0x1, 0x6f8, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000400)=""/153, 0x99) 2.158921539s ago: executing program 2 (id=3185): r0 = memfd_create(&(0x7f0000001240)='[\v\xdbX\xae[\x1a\xad\xd1md\xc8\x85HX\xa9%\f\x1a,\xe2\x9c\xb4\xd7\xbc\xf1\xb3\x86\xe2/Op\xd0\xa2\x82\x1eb;(\xb5\xe1j\xc8\f\xe5\x89\x17\xee|J\x90=5\xed\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q%\x8a\xda\x05\x00f\xe3j%\x00\x00\x1c#\xc6\xd8\xdbD\x92P\xe16W\x10\xdau\xc7\x8f\xaa\x8d\xa9\x97\x9d\xcb\x1e\x80\xe7\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\xbdD\xcc\'\xa2\xaf`\xf6L\x0e\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecM\xe4H\xb7\xaf\xa8\x96dh\xa9\xab > \xac\x00O^\x14\xcbv\x17Hkb\xe7\xcb\x9d;\xd2\x9f\x05\xd1\x00\x8b\xd3\x9f\a\x99^v\xf7\xfa\xe5\xf0h\x87l\xd9\x15\xd2\x87~?\xb1\x9d\xc1\x92`\x8a\r\xfc\xeb\x14\xd1\x94\fv\x8a\xe3\x1d\x0fj}\x9f\xedsc\xd3\xee\xe6cXw\xa1\xbc\xd0o\xf9\x9cJ\b\x00\xd8;\\ik0+\xc8\xf2\x87\xdf\t\x97\x9dB\xc1\xa0\xa71\xf25GU|]A\x1eel \x8ff\xc6\nt\xd0\x91\x9d\x8c\xa4\xe5\xde\x06\x00\xffE\xf4\x96#\x92-9\xe5\xa7\xf8%\xb0I\xd4\x91r\xbf\x1bOS\xee}\x16\x87\x05\xf2\xb9\x81\x14\xe2NZ\\I\xd0[\xc4\xf2\"\x87\xf5\xb8\x95.M\xb1S\xbd\xe4i\x00\xc1b\t]?}0\t\xebV\xbci\xa5\x05\xca\xb6\xc22\x7fL\x89&\xa0\xcfMULr0rs\xb4\n\xa6)\xe23\xf0\x8d\x9dO\xb9\xc9\x83\xabS\x013\"\x1b\x97K\x17\x16\x89\a\xee\xc903\xad\x15\x1cH\xd2\x95\x91\xb4$\x1b\xbf\xaf\xf5\x9b\xc2\x85\xe7[\xe5\xfb}\x1d@f2\x11\x13Y\x98\xa4\xecWEE\x9eI\x05\v\x11\xad\x93!^T\xe5N\xf6LI\x9a6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x1a\xc9(a\x06>g\xe5\x00:\x9au\xef\x14\t\x1f8E\x86\xcb\xd0e\x17\xfb\xc1', 0x3) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.045379298s ago: executing program 0 (id=3186): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) 1.971616995s ago: executing program 9 (id=3187): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10040, &(0x7f0000000700)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303430312c71756965742c6469725f756d61736b3d30303030303030303030303030303030303030303031312c696f636861727365743d69736f383835392d312c636f6465706167653d6b6f69382d722c0004bf90d150c827c0f6431d7e711dbe7a1c300c406212d3a2881d87e6b47b613fbd6fdbed0fba58bf057ab59a9e3c64d18be7626a"], 0x11, 0x2bd, &(0x7f0000000200)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') pread64(r0, &(0x7f0000002240)=""/4096, 0x1000, 0xff) 1.971403419s ago: executing program 2 (id=3188): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007"], 0x38}}, 0x0) 1.77214047s ago: executing program 2 (id=3189): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) setreuid(0xee01, 0xee00) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) 1.697310749s ago: executing program 9 (id=3190): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000002a40), r0) 1.696555715s ago: executing program 0 (id=3191): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x444a, &(0x7f00000088c0)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x4, 0xffffffff, 0xfffffff7}}, 0x30) 1.615694544s ago: executing program 2 (id=3192): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x2) 1.615389399s ago: executing program 5 (id=3193): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001300)={0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000003e00)=0x4) 1.529616981s ago: executing program 9 (id=3194): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)=""/8) 1.449966277s ago: executing program 2 (id=3195): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300400a, &(0x7f0000000200), 0x3, 0x55a3, &(0x7f0000005600)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xca289435, &(0x7f0000000400)={0x0, 0x0, {0x1, @usage=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x0, 0x0, 0xb]}, {0x0, @struct={0x9, 0xbe0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) 1.430102761s ago: executing program 9 (id=3196): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x9236, 0x9f65, 0xc152, 0x1}, 0x8) sendmmsg$inet_sctp(r0, &(0x7f0000000f00)=[{&(0x7f0000000980)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000b40)=[{&(0x7f00000009c0)="0a88", 0x2}], 0x1, &(0x7f0000000b80)=[@init={0x18, 0x84, 0x0, {0xf3aa, 0x9, 0x7, 0xa}}], 0x18, 0x880}], 0x1, 0x44001) 1.298654634s ago: executing program 4 (id=3197): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000280)=0xffffffff, 0x4) 1.23101185s ago: executing program 8 (id=3198): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000006100010000000000620002000000000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x5}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x94) 1.051532979s ago: executing program 4 (id=3199): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) 1.030238934s ago: executing program 8 (id=3200): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) r1 = socket(0x2c, 0x3, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000001000)={0x3000a212}) 879.03912ms ago: executing program 4 (id=3201): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x10002, @private2={0xfc, 0x2, '\x00', 0xfd}, 0x8000ff}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000015c0)) 862.525184ms ago: executing program 8 (id=3202): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, 0x0}, 0x8000) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x3, @loopback, 0x2a}, 0x1c, 0x0}}], 0x1, 0x4010004) 857.311797ms ago: executing program 5 (id=3203): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="38000000010003", 0x7) 787.176714ms ago: executing program 8 (id=3204): syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x11, &(0x7f0000000400)=ANY=[], 0xfe, 0x228, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 653.298606ms ago: executing program 4 (id=3205): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000540)={0x101, 0x9, 0x2, {0x1, @sliced={0x6, [0x8df7, 0x5, 0x2, 0x6, 0x29, 0x40, 0xffc6, 0xf100, 0x5, 0x1, 0x1000, 0x8001, 0x0, 0x9, 0x3ff, 0xffff, 0x400, 0x9, 0x7, 0x3c, 0x600, 0xe128, 0x30e0, 0x9, 0x2, 0xa, 0x277, 0x3ff, 0xaf, 0x3, 0x5, 0x331, 0x5, 0x7, 0x4, 0x3, 0x8000, 0x401, 0x0, 0x4, 0xc, 0x4, 0xfffa, 0x8, 0x1, 0xc, 0x1, 0x1], 0x2}}, 0xdac}) 652.454583ms ago: executing program 5 (id=3206): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003680)={0x24, 0x16, 0xa01, 0x0, 0x1, {0x2}, [@nested={0x10, 0x122, 0x0, 0x1, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xe3, 0x0, 0x0, @pid}]}]}]}, 0x24}}, 0x0) 588.535028ms ago: executing program 9 (id=3207): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000003280)=""/76, &(0x7f00000002c0)=0x4c) 584.800081ms ago: executing program 8 (id=3208): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0xfa, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xf4f6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000500)={0x0, 0xa, 0x17, {0x17, 0x22, "6ff0bcb60b83a99350b28fa29f969dc5fbd973641a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 438.809384ms ago: executing program 4 (id=3209): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x80000002, 0x0, &(0x7f0000000000), 0x0) 388.226186ms ago: executing program 0 (id=3210): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'mpc624\x00', [0x8001, 0x4, 0x1, 0x0, 0x4, 0xcc7, 0x9, 0x7, 0x5, 0x8, 0x4be, 0x1, 0x8, 0x1100004, 0x6, 0x9, 0xfffffffe, 0x1a449, 0x3, 0x40000005, 0x87, 0x1, 0xf27, 0x6, 0x800b, 0x8, 0x7, 0x9, 0x8, 0x10000, 0xfffffffa]}) 340.165417ms ago: executing program 5 (id=3211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000) 339.438554ms ago: executing program 9 (id=3212): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 262.956938ms ago: executing program 4 (id=3213): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') 211.659231ms ago: executing program 2 (id=3214): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101081, 0x11e) fcntl$lock(r0, 0x7, &(0x7f0000000200)={0x0, 0x2}) 170.997776ms ago: executing program 5 (id=3215): r0 = syz_open_dev$dri(&(0x7f0000000540), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, &(0x7f00000004c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000680)={r1, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 5 (id=3216): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x3c, r1, 0x731, 0x4, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffa1, 0x73, 0x1}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x40400c1}, 0x8000) kernel console output (not intermixed with test programs): gnoring removed bh option [ 354.383282][T12543] EXT4-fs: Ignoring removed mblk_io_submit option [ 354.437944][T12543] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 354.451387][ T36] hfsplus: b-tree write err: -5, ino 4 [ 354.467484][T12543] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 354.511044][T12547] loop7: detected capacity change from 0 to 512 [ 354.520743][T12543] EXT4-fs (loop4): orphan cleanup on readonly fs [ 354.539953][T12547] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 354.588348][T12543] Quota error (device loop4): do_insert_tree: Free block already used in tree: block 4 [ 354.656848][T12543] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 354.660947][T12547] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.2465: invalid indirect mapped block 4294967295 (level 0) [ 354.706461][T12543] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2463: Failed to acquire dquot type 1 [ 354.729502][T12547] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.2465: invalid indirect mapped block 4294967295 (level 1) [ 354.787121][T12543] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2463: Invalid block bitmap block 0 in block_group 0 [ 354.833612][T12547] EXT4-fs (loop7): 1 orphan inode deleted [ 354.862181][T12547] EXT4-fs (loop7): 1 truncate cleaned up [ 354.889290][T12543] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2463: Invalid block bitmap block 0 in block_group 0 [ 354.905825][T12547] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.965164][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2472'. [ 354.989900][T12547] EXT4-fs error (device loop7): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.7.2465: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 355.002748][T12543] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2463: Invalid block bitmap block 0 in block_group 0 [ 355.084159][T12543] Quota error (device loop4): write_blk: dquota write failed [ 355.095129][T12543] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 355.146396][T12543] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2463: Failed to acquire dquot type 1 [ 355.199032][T12543] Quota error (device loop4): write_blk: dquota write failed [ 355.253963][T12543] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 355.270295][ T8629] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.341380][T12543] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2463: Failed to acquire dquot type 1 [ 355.372620][T12543] EXT4-fs (loop4): 1 orphan inode deleted [ 355.437796][T12543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 355.481349][T12571] loop7: detected capacity change from 0 to 1024 [ 355.533628][T12571] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.749453][ T8629] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.789631][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.944502][T12569] loop5: detected capacity change from 0 to 32768 [ 355.990722][T12569] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2475 (12569) [ 356.017100][ T5903] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 356.060310][T12569] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 356.083044][T12569] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 356.199737][ T5903] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.219138][ T5903] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.257215][ T5903] usb 3-1: config 0 interface 0 has no altsetting 0 [ 356.266648][ T5903] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 356.308671][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.344284][T12569] BTRFS info (device loop5): enabling ssd optimizations [ 356.387821][T12569] BTRFS info (device loop5): turning on async discard [ 356.390764][ T5903] usb 3-1: config 0 descriptor?? [ 356.404951][T12569] BTRFS info (device loop5): enabling free space tree [ 356.508385][T12569] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 356.701390][ T5834] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 356.863336][ T5903] uclogic 0003:145F:0212.0020: interface is invalid, ignoring [ 356.918567][T12623] loop6: detected capacity change from 0 to 16 [ 357.016293][T12623] erofs (device loop6): mounted with root inode @ nid 36. [ 357.048003][T12623] erofs (device loop6): read error -95 @ 8200 of nid 36 [ 357.098488][T12625] erofs (device loop6): read error -95 @ 8200 of nid 36 [ 357.126276][ T5903] usb 3-1: USB disconnect, device number 18 [ 357.287289][T12607] loop7: detected capacity change from 0 to 32768 [ 357.383214][T12637] loop5: detected capacity change from 0 to 16 [ 357.389713][T12607] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 357.426325][T12637] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 357.527626][T12607] XFS (loop7): Ending clean mount [ 357.570671][T12607] XFS (loop7): Quotacheck needed: Please wait. [ 357.652070][T12607] XFS (loop7): Quotacheck: Done. [ 357.681101][T12642] loop4: detected capacity change from 0 to 512 [ 357.702200][T12645] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2498'. [ 357.827629][ T8629] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 357.851430][T12642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.950084][T12642] ext4 filesystem being mounted at /418/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.069169][T12642] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 3: comm syz.4.2497: lblock 8 mapped to illegal pblock 3 (length 26) [ 358.212962][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.258458][T12661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2505'. [ 358.401445][T12665] loop7: detected capacity change from 0 to 1024 [ 358.813119][T12678] loop5: detected capacity change from 0 to 1024 [ 358.837344][T12678] EXT4-fs: Ignoring removed nomblk_io_submit option [ 358.934115][T12678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.105823][T12688] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 359.291012][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.300142][ T43] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 359.491583][ T43] usb 7-1: config 1 has an invalid interface descriptor of length 6, skipping [ 359.519681][ T43] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.546187][ T43] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 359.566172][ T43] usb 7-1: config 1 has no interface number 1 [ 359.585939][ T43] usb 7-1: string descriptor 0 read error: -22 [ 359.593372][T12672] loop4: detected capacity change from 0 to 32768 [ 359.602737][ T43] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 359.629062][T12672] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2510 (12672) [ 359.645465][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.695365][ T43] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 359.704403][T12672] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 359.731156][T12672] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 359.744520][ T43] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 359.783968][ T43] usb 7-1: MIDIStreaming interface descriptor not found [ 359.980299][T12672] BTRFS info (device loop4): enabling ssd optimizations [ 360.026288][T12672] BTRFS info (device loop4): turning on async discard [ 360.046814][T12672] BTRFS info (device loop4): enabling free space tree [ 360.051225][ T43] usb 7-1: USB disconnect, device number 8 [ 360.210457][T12672] BTRFS info (device loop4): setting incompat feature flag for DEFAULT_SUBVOL (0x2) [ 360.359679][ T5882] udevd[5882]: '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0' [12721] terminated by signal 33 (Unknown signal 33) [ 360.453288][ T5828] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 360.594385][T12692] loop0: detected capacity change from 0 to 32768 [ 360.639693][T12692] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 360.787303][T12692] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 360.850668][ T2115] (kworker/u8:5,2115,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 361.071930][ T5840] ocfs2: Unmounting device (7,0) on (node local) [ 361.455300][T12759] loop4: detected capacity change from 0 to 512 [ 361.487146][T12759] EXT4-fs: Ignoring removed bh option [ 361.519209][T12759] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 361.546370][T12759] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 361.591300][T12759] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 361.654431][T12759] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e018, mo2=0006] [ 361.687918][T12759] System zones: 0-2, 18-18, 34-35 [ 361.734013][T12759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.738319][T12744] loop6: detected capacity change from 0 to 32768 [ 361.795895][T12744] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 361.950079][T12744] XFS (loop6): Ending clean mount [ 361.965854][T12782] loop0: detected capacity change from 0 to 256 [ 362.023079][T12782] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 362.037667][T12760] loop5: detected capacity change from 0 to 32768 [ 362.055797][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.182776][ T7074] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 362.271834][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2550'. [ 362.301476][T12788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2550'. [ 362.614560][T12803] loop2: detected capacity change from 0 to 512 [ 362.685477][T12803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.726100][T12806] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2555'. [ 362.737032][T12806] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2555'. [ 362.746019][T12806] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2555'. [ 362.756010][T12803] ext4 filesystem being mounted at /462/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.847436][T12815] IPv6: NLM_F_CREATE should be specified when creating new route [ 362.847690][T12803] EXT4-fs error (device loop2): ext4_add_entry:2417: inode #12: comm syz.2.2560: Directory hole found for htree leaf block 0 [ 362.855584][T12815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 362.875643][T12815] IPv6: NLM_F_CREATE should be set when creating new route [ 362.882908][T12815] IPv6: NLM_F_CREATE should be set when creating new route [ 362.890135][T12815] IPv6: NLM_F_CREATE should be set when creating new route [ 362.940824][T12817] loop4: detected capacity change from 0 to 1024 [ 362.976943][T12819] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 363.014367][T12817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 363.040477][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.110921][T12826] sctp: [Deprecated]: syz.7.2566 (pid 12826) Use of int in max_burst socket option. [ 363.110921][T12826] Use struct sctp_assoc_value instead [ 363.127869][T12828] loop5: detected capacity change from 0 to 256 [ 363.230680][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 363.253648][T12828] FAT-fs (loop5): Directory bread(block 64) failed [ 363.274230][T12828] FAT-fs (loop5): Directory bread(block 65) failed [ 363.309345][T12828] FAT-fs (loop5): Directory bread(block 66) failed [ 363.315885][T12828] FAT-fs (loop5): Directory bread(block 67) failed [ 363.326467][T12828] FAT-fs (loop5): Directory bread(block 68) failed [ 363.348681][T12828] FAT-fs (loop5): Directory bread(block 69) failed [ 363.355377][T12828] FAT-fs (loop5): Directory bread(block 70) failed [ 363.363635][T12828] FAT-fs (loop5): Directory bread(block 71) failed [ 363.370656][T12828] FAT-fs (loop5): Directory bread(block 72) failed [ 363.381501][T12828] FAT-fs (loop5): Directory bread(block 73) failed [ 363.548061][T12843] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2575'. [ 363.608892][T12843] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2575'. [ 363.637517][T12843] netlink: 'syz.6.2575': attribute type 18 has an invalid length. [ 363.899880][T12831] loop0: detected capacity change from 0 to 32768 [ 363.942811][T12831] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 364.024375][T12831] XFS (loop0): Ending clean mount [ 364.025528][T12866] loop6: detected capacity change from 0 to 512 [ 364.090730][T12866] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.122717][T12866] ext4 filesystem being mounted at /400/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 364.182125][ T5840] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 364.206894][T12866] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #2: block 18: comm syz.6.2582: lblock 23 mapped to illegal pblock 18 (length 1) [ 364.279426][T12866] EXT4-fs (loop6): Remounting filesystem read-only [ 364.398423][ T7074] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.419321][T12847] loop4: detected capacity change from 0 to 32768 [ 364.454426][T12847] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2578 (12847) [ 364.458958][T12851] loop5: detected capacity change from 0 to 32768 [ 364.505294][ T30] audit: type=1326 audit(1763009009.379:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12848 comm="syz.2.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b558f6c9 code=0x7fc00000 [ 364.547600][T12847] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 364.583355][T12847] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 364.640723][T12851] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 364.774029][T12847] BTRFS info (device loop4): enabling ssd optimizations [ 364.786229][T12847] BTRFS info (device loop4): turning on async discard [ 364.793006][T12847] BTRFS info (device loop4): enabling free space tree [ 364.800974][T12847] BTRFS info (device loop4): use lzo compression, level 1 [ 364.802919][T12864] loop7: detected capacity change from 0 to 32768 [ 364.831726][T12895] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2587'. [ 364.860295][ T5834] ocfs2: Unmounting device (7,5) on (node local) [ 364.868801][T12864] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 364.906571][ T5828] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 364.948843][ T5928] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 365.066110][T12864] XFS (loop7): Ending clean mount [ 365.107239][ T5928] usb 7-1: Using ep0 maxpacket: 8 [ 365.128932][ T5928] usb 7-1: config 0 interface 0 altsetting 42 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.156378][ T5928] usb 7-1: config 0 interface 0 altsetting 42 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.182940][ T5928] usb 7-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 365.205878][T12912] loop0: detected capacity change from 0 to 512 [ 365.236907][ T5928] usb 7-1: config 0 interface 0 has no altsetting 0 [ 365.241976][ T8629] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 365.254768][ T5928] usb 7-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 365.274624][ T5928] usb 7-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 365.284909][T12912] EXT4-fs: Ignoring removed oldalloc option [ 365.297239][ T5928] usb 7-1: Manufacturer: syz [ 365.311309][T12912] EXT4-fs: Ignoring removed orlov option [ 365.323099][ T5928] usb 7-1: config 0 descriptor?? [ 365.372852][T12912] EXT4-fs: Invalid want_extra_isize 8 [ 365.636292][T12917] loop5: detected capacity change from 0 to 4096 [ 365.655919][T12921] loop0: detected capacity change from 0 to 128 [ 365.678623][T12917] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 365.726530][T12921] EXT4-fs (loop0): Test dummy encryption mode enabled [ 365.880298][T12921] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 365.924605][T12921] ext4 filesystem being mounted at /414/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 365.925147][T12917] ntfs3(loop5): ino=1e, "file1" fallocate(0x10) is not supported [ 365.954519][T12921] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 365.978738][ T5928] usb 7-1: USB disconnect, device number 9 [ 365.988589][ T30] audit: type=1800 audit(1763009010.869:68): pid=12921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2596" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 366.063658][ T5840] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 366.294374][T12942] loop7: detected capacity change from 0 to 128 [ 366.506301][T12952] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 366.689958][T12959] tipc: Started in network mode [ 366.694864][T12959] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 366.729972][T12959] tipc: Enabling of bearer rejected, failed to enable media [ 366.875420][T12973] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2618'. [ 366.971233][T12978] loop4: detected capacity change from 0 to 8 [ 367.021847][T12978] SQUASHFS error: Unable to read directory block [629:46] [ 367.243503][T12990] loop2: detected capacity change from 0 to 64 [ 367.274532][T12994] loop5: detected capacity change from 0 to 256 [ 367.315098][T12994] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 367.473876][T12998] loop4: detected capacity change from 0 to 8 [ 367.695965][T12968] loop0: detected capacity change from 0 to 32768 [ 367.707281][T13009] loop7: detected capacity change from 0 to 2048 [ 367.751198][T13009] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 367.786888][T13009] overlayfs: upper fs needs to support d_type. [ 367.793755][T12968] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 367.808194][T13009] overlayfs: cleanup of 'work/#7' failed (-2) [ 367.813827][ T43] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 367.837382][T13009] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 367.844351][T13009] overlayfs: failed to set xattr on upper [ 367.866360][T13009] overlayfs: ...falling back to redirect_dir=nofollow. [ 367.873358][T13009] overlayfs: ...falling back to index=off. [ 367.896460][T13009] overlayfs: ...falling back to uuid=null. [ 367.933985][T13026] binder: 13025:13026 ioctl c0306201 0 returned -14 [ 367.977018][ T43] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 367.985127][T12968] XFS (loop0): Ending clean mount [ 367.991544][ T43] usb 6-1: config 0 has no interface number 0 [ 368.005942][T12968] XFS (loop0): Quotacheck needed: Please wait. [ 368.012598][ T43] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.012633][ T43] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.012661][ T43] usb 6-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 368.012710][ T43] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 368.012737][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.015599][ T43] usb 6-1: config 0 descriptor?? [ 368.121286][ T8629] UDF-fs: error (device loop7): udf_read_inode: (ino 1317) failed !bh [ 368.137981][T12968] XFS (loop0): Quotacheck: Done. [ 368.152919][ T5928] hid_parser_main: 154 callbacks suppressed [ 368.152941][ T5928] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 368.182275][ T8629] UDF-fs: error (device loop7): udf_read_inode: (ino 1317) failed !bh [ 368.213900][ T5928] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz0] on syz0 [ 368.291543][ T5840] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 368.568651][T13047] loop6: detected capacity change from 0 to 64 [ 368.623998][ T30] audit: type=1326 audit(1763009013.499:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13048 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1958f6c9 code=0x7ffc0000 [ 368.675918][ T30] audit: type=1326 audit(1763009013.499:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13048 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1958f6c9 code=0x7ffc0000 [ 368.702174][T13051] loop4: detected capacity change from 0 to 512 [ 368.736959][ T43] usb 6-1: USB disconnect, device number 15 [ 368.759727][T13051] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 368.767766][ T30] audit: type=1326 audit(1763009013.499:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13048 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c1958f6c9 code=0x7ffc0000 [ 368.803992][ T30] audit: type=1326 audit(1763009013.499:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13048 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1958f6c9 code=0x7ffc0000 [ 368.828392][ T30] audit: type=1326 audit(1763009013.499:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13048 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1958f6c9 code=0x7ffc0000 [ 368.853548][ T30] audit: type=1326 audit(1763009013.499:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13048 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f9c1958f6c9 code=0x7ffc0000 [ 368.880767][ T30] audit: type=1326 audit(1763009013.499:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13048 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1958f6c9 code=0x7ffc0000 [ 368.886439][T13051] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, [ 368.903473][ T30] audit: type=1326 audit(1763009013.499:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13048 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1958f6c9 code=0x7ffc0000 [ 368.935246][T13051] block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 369.005965][T13051] EXT4-fs (loop4): 1 truncate cleaned up [ 369.016373][T13051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.070740][T13051] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.116033][ T51] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.278473][ T51] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.293748][T13067] comedi: valid board names for 8255 driver are: [ 369.325063][T13067] 8255 [ 369.346609][T13067] comedi: valid board names for vmk80xx driver are: [ 369.353249][T13067] vmk80xx [ 369.362319][T13067] comedi: valid board names for usbduxsigma driver are: [ 369.375300][T13067] usbduxsigma [ 369.385806][T13067] comedi: valid board names for usbduxfast driver are: [ 369.402975][T13067] usbduxfast [ 369.411930][T13067] comedi: valid board names for usbdux driver are: [ 369.436918][T13067] usbdux [ 369.444242][T13067] comedi: valid board names for ni6501 driver are: [ 369.464430][T13067] ni6501 [ 369.474141][T13067] comedi: valid board names for dt9812 driver are: [ 369.499028][T13067] dt9812 [ 369.505092][T13067] comedi: valid board names for ni_labpc_cs driver are: [ 369.539928][T13067] ni_labpc_cs [ 369.543342][T13067] comedi: valid board names for ni_daq_700 driver are: [ 369.586349][T13067] ni_daq_700 [ 369.604608][ T51] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.635218][T13067] comedi: valid board names for labpc_pci driver are: [ 369.662554][T13067] labpc_pci [ 369.686217][T13067] comedi: valid board names for adl_pci9118 driver are: [ 369.716227][T13067] pci9118dg [ 369.716900][ T49] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 369.719447][T13067] pci9118hg [ 369.762053][T13067] pci9118hr [ 369.765392][T13067] comedi: valid board names for 8255_pci driver are: [ 369.781781][T13067] 8255_pci [ 369.784902][T13067] comedi: valid board names for s526 driver are: [ 369.791784][T13067] s526 [ 369.795786][T13067] comedi: valid board names for multiq3 driver are: [ 369.808245][ T51] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.826390][T13067] multiq3 [ 369.829758][T13067] comedi: valid board names for pcmuio driver are: [ 369.848191][T13067] pcmuio48 [ 369.862447][T13079] sp0: Synchronizing with TNC [ 369.867306][T13067] pcmuio96 [ 369.870408][T13067] comedi: valid board names for pcmmio driver are: [ 369.893973][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.916944][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.926272][T13067] pcmmio [ 369.929847][T13067] comedi: valid board names for pcmda12 driver are: [ 369.936907][ T49] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 369.958181][T13067] pcmda12 [ 369.961436][T13081] loop0: detected capacity change from 0 to 4096 [ 369.970490][T13067] comedi: valid board names for pcmad driver are: [ 369.976454][T13081] EXT4-fs: Ignoring removed nomblk_io_submit option [ 369.983813][ T49] usb 6-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 369.995105][T13067] pcmad12 [ 370.011030][T13067] pcmad16 [ 370.024314][T13067] comedi: valid board names for ni_labpc driver are: [ 370.031284][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.047296][T13067] lab-pc-1200 [ 370.051587][T13081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.064816][T13067] lab-pc-1200ai [ 370.076893][T13067] lab-pc+ [ 370.085305][T13067] comedi: valid board names for atmio16 driver are: [ 370.093898][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 370.106954][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 370.115157][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 370.125722][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 370.127507][ T49] usb 6-1: config 0 descriptor?? [ 370.133815][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.170447][T13067] atmio16 [ 370.173508][T13067] atmio16d [ 370.176825][T13067] comedi: valid board names for ni_at_ao driver are: [ 370.183568][T13067] at-ao-6 [ 370.186644][T13067] at-ao-10 [ 370.189831][T13067] comedi: valid board names for ni_at_a2150 driver are: [ 370.196935][T13067] ni_at_a2150 [ 370.200370][T13067] comedi: valid board names for adq12b driver are: [ 370.208852][T13067] adq12b [ 370.211856][T13067] comedi: valid board names for mpc624 driver are: [ 370.218829][T13067] mpc624 [ 370.221834][T13067] comedi: valid board names for c6xdigio driver are: [ 370.228608][T13067] c6xdigio [ 370.231714][T13067] comedi: valid board names for aio_iiro_16 driver are: [ 370.239289][T13067] aio_iiro_16 [ 370.242654][T13067] comedi: valid board names for aio_aio12_8 driver are: [ 370.249710][T13067] aio_aio12_8 [ 370.253077][T13067] aio_ai12_8 [ 370.256458][T13067] aio_ao12_4 [ 370.259852][T13067] comedi: valid board names for fl512 driver are: [ 370.266305][T13067] fl512 [ 370.269145][T13067] comedi: valid board names for dmm32at driver are: [ 370.275909][T13067] dmm32at [ 370.297338][T13067] comedi: valid board names for dt282x driver are: [ 370.303851][T13067] dt2821 [ 370.326180][T13067] dt2821-f [ 370.329460][T13067] dt2821-g [ 370.329891][ T51] bridge_slave_1: left allmulticast mode [ 370.332555][T13067] dt2823 [ 370.332567][T13067] dt2824-pgh [ 370.332578][T13067] dt2824-pgl [ 370.359840][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.366216][T13067] dt2825 [ 370.371801][T13067] dt2827 [ 370.374738][T13067] dt2828 [ 370.376191][ T51] bridge_slave_1: left promiscuous mode [ 370.378857][T13067] dt2829 [ 370.393991][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.396306][T13067] dt21-ez [ 370.404424][T13067] dt23-ez [ 370.424574][T13067] dt24-ez [ 370.429505][T13067] dt24-ez-pgl [ 370.432888][T13067] comedi: valid board names for dt2817 driver are: [ 370.442098][ T51] bridge_slave_0: left allmulticast mode [ 370.450051][T13067] dt2817 [ 370.456638][ T51] bridge_slave_0: left promiscuous mode [ 370.463448][T13067] comedi: valid board names for dt2815 driver are: [ 370.470597][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.476290][T13067] dt2815 [ 370.483650][T13067] comedi: valid board names for dt2814 driver are: [ 370.497365][T13067] dt2814 [ 370.503844][T13067] comedi: valid board names for dt2811 driver are: [ 370.524102][T13067] dt2811-pgh [ 370.534224][T13067] dt2811-pgl [ 370.539160][T13067] comedi: valid board names for dt2801 driver are: [ 370.555874][T13067] dt2801 [ 370.576120][T13067] comedi: valid board names for das6402 driver are: [ 370.582793][T13067] das6402-12 [ 370.599688][T13067] das6402-16 [ 370.602987][T13067] comedi: valid board names for das1800 driver are: [ 370.624935][T13067] das-1701st [ 370.631435][T13089] loop0: detected capacity change from 0 to 64 [ 370.632188][ T49] pantherlord 0003:0810:0002.0024: item fetching failed at offset 5/7 [ 370.641152][T13067] das-1701st-da [ 370.666232][T13067] das-1702st [ 370.674980][ T49] pantherlord 0003:0810:0002.0024: parse failed [ 370.679897][T13067] das-1702st-da [ 370.695930][T13067] das-1702hr [ 370.696717][ T49] pantherlord 0003:0810:0002.0024: probe with driver pantherlord failed with error -22 [ 370.710761][T13067] das-1702hr-da [ 370.731021][T13067] das-1701ao [ 370.734322][T13067] das-1702ao [ 370.747986][T13067] das-1801st [ 370.752985][T13067] das-1801st-da [ 370.755075][T13075] loop4: detected capacity change from 0 to 32768 [ 370.765180][T13067] das-1802st [ 370.786660][T13067] das-1802st-da [ 370.790509][T13067] das-1802hr [ 370.796327][T13067] das-1802hr-da [ 370.801411][T13067] das-1801hc [ 370.804693][T13067] das-1802hc [ 370.810495][T13067] das-1801ao [ 370.822114][T13075] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 370.828582][T13067] das-1802ao [ 370.856910][T13067] comedi: valid board names for das800 driver are: [ 370.880722][T13067] das-800 [ 370.883776][T13067] cio-das800 [ 370.900913][ T5918] usb 6-1: USB disconnect, device number 16 [ 370.917008][T13067] das-801 [ 370.938961][T13067] cio-das801 [ 370.942268][T13067] das-802 [ 370.945241][T13099] loop0: detected capacity change from 0 to 256 [ 370.945412][T13067] cio-das802 [ 370.955159][T13067] cio-das802/16 [ 370.973187][T13067] comedi: valid board names for isa-das08 driver are: [ 370.981892][T13067] isa-das08 [ 370.985199][T13067] das08-pgm [ 370.993292][T13099] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 371.002541][T13067] das08-pgh [ 371.006114][T13075] XFS (loop4): Ending clean mount [ 371.008860][T13067] das08-pgl [ 371.028637][T13075] XFS (loop4): Quotacheck needed: Please wait. [ 371.029618][T13067] das08-aoh [ 371.038391][T13067] das08-aol [ 371.041669][T13067] das08-aom [ 371.058025][T13067] das08/jr-ao [ 371.061404][T13067] das08jr-16-ao [ 371.064934][T13067] pc104-das08 [ 371.065674][T13099] exFAT-fs (loop0): valid_size(150994954) is greater than size(10) [ 371.080174][T13067] das08jr/16 [ 371.083488][T13067] comedi: valid board names for das16m1 driver are: [ 371.090848][T13067] das16m1 [ 371.093926][T13067] comedi: valid board names for dac02 driver are: [ 371.101310][T13087] loop2: detected capacity change from 0 to 32768 [ 371.108357][T13075] XFS (loop4): Quotacheck: Done. [ 371.135368][T13067] dac02 [ 371.140887][T13067] comedi: valid board names for rti802 driver are: [ 371.162277][T13067] rti802 [ 371.165216][T13067] comedi: valid board names for rti800 driver are: [ 371.175622][ T5828] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 371.179124][T13067] rti800 [ 371.189104][T13067] rti815 [ 371.192692][T13067] comedi: valid board names for pcm3724 driver are: [ 371.199596][T13067] pcm3724 [ 371.202833][T13067] comedi: valid board names for pcl818 driver are: [ 371.213249][T13067] pcl818l [ 371.223173][T13067] pcl818h [ 371.228058][T13067] pcl818hd [ 371.231166][T13067] pcl818hg [ 371.234584][T13067] pcl818 [ 371.237851][T13067] pcl718 [ 371.240781][T13067] pcm3718 [ 371.243999][T13067] comedi: valid board names for pcl816 driver are: [ 371.251290][T13087] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 371.251914][T13067] pcl816 [ 371.263449][T13067] pcl814b [ 371.267143][T13067] comedi: valid board names for pcl812 driver are: [ 371.273746][T13067] pcl812 [ 371.278506][T13067] pcl812pg [ 371.281613][T13067] acl8112pg [ 371.284912][T13067] acl8112dg [ 371.288818][T13067] acl8112hg [ 371.292016][T13067] a821pgl [ 371.295138][T13067] a821pglnda [ 371.298793][T13067] a821pgh [ 371.301808][T13067] a822pgl [ 371.304821][T13067] a822pgh [ 371.308245][T13067] a823pgl [ 371.311262][T13067] a823pgh [ 371.314272][T13067] pcl813 [ 371.331302][T13067] pcl813b [ 371.336201][T13067] acl8113 [ 371.344930][T13067] iso813 [ 371.363556][T13067] acl8216 [ 371.384425][T13067] a826pg [ 371.389770][T13067] comedi: valid board names for pcl730 driver are: [ 371.411769][T13067] pcl730 [ 371.415561][T13067] iso730 [ 371.443469][T13067] acl7130 [ 371.452583][T13067] pcm3730 [ 371.455954][ T5835] ocfs2: Unmounting device (7,2) on (node local) [ 371.462829][T13067] pcl725 [ 371.465763][T13067] p8r8dio [ 371.479117][T13067] acl7225b [ 371.482232][T13067] p16r16dio [ 371.485419][T13067] pcl733 [ 371.536532][T13067] pcl734 [ 371.539501][T13067] opmm-1616-xt [ 371.542944][T13067] pearl-mm-p [ 371.565140][T13067] ir104-pbf [ 371.568424][T13067] comedi: valid board names for pcl726 driver are: [ 371.574911][T13067] pcl726 [ 371.596544][T13067] pcl727 [ 371.599511][T13067] pcl728 [ 371.602435][T13067] acl6126 [ 371.605451][T13067] acl6128 [ 371.633462][T13067] comedi: valid board names for pcl724 driver are: [ 371.663199][T13067] pcl724 [ 371.676228][T13067] pcl722 [ 371.679176][T13067] pcl731 [ 371.682103][T13067] acl7122 [ 371.685114][T13067] acl7124 [ 371.712502][T13067] pet48dio [ 371.715640][T13067] pcmio48 [ 371.727109][T13067] onyx-mm-dio [ 371.736194][T13067] comedi: valid board names for pcl711 driver are: [ 371.744062][T13067] pcl711 [ 371.757938][T13067] pcl711b [ 371.760972][T13067] acl8112hg [ 371.764162][T13067] acl8112dg [ 371.795611][T13067] comedi: valid board names for amplc_pc263 driver are: [ 371.812978][T13067] pc263 [ 371.826373][T13067] comedi: valid board names for amplc_pc236 driver are: [ 371.834897][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.836693][T13067] pc36at [ 371.858659][T13067] comedi: valid board names for amplc_dio200 driver are: [ 371.872405][T13067] pc212e [ 371.879877][T13067] pc214e [ 371.886406][T13067] pc215e [ 371.892728][T13067] pc218e [ 371.901932][T13067] pc272e [ 371.906086][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.908234][T13067] comedi: valid board names for comedi_parport driver are: [ 371.935037][ T51] bond0 (unregistering): Released all slaves [ 371.935356][T13067] comedi_parport [ 371.961163][T13067] comedi: valid board names for comedi_test driver are: [ 371.976072][T13067] comedi_test [ 371.986219][T13067] comedi: valid board names for comedi_bond driver are: [ 372.002167][T13067] comedi_bond [ 372.141536][ T51] tipc: Left network mode [ 372.229803][ T53] Bluetooth: hci0: command tx timeout [ 372.340945][T13103] loop0: detected capacity change from 0 to 40427 [ 372.371465][T13103] F2FS-fs (loop0): invalid crc value [ 372.495821][T13130] loop6: detected capacity change from 0 to 512 [ 372.552363][T13130] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.2684: bad orphan inode 15 [ 372.579534][T13103] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 372.589430][T13130] ext4_test_bit(bit=14, block=5) = 0 [ 372.594979][T13103] F2FS-fs (loop0): Start checkpoint disabled! [ 372.603574][T13130] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.631414][T13103] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 372.646806][T13103] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 372.773601][ T7074] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.802633][T13140] loop4: detected capacity change from 0 to 128 [ 372.868964][T13140] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 372.883244][T13140] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 372.956844][T13142] loop5: detected capacity change from 0 to 512 [ 372.963987][T13142] EXT4-fs: Ignoring removed mblk_io_submit option [ 373.036046][T13142] EXT4-fs: inline encryption not supported [ 373.058206][T13142] EXT4-fs: Ignoring removed mblk_io_submit option [ 373.066574][T13142] EXT4-fs (loop5): Test dummy encryption mode enabled [ 373.093516][T13142] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 373.113446][ T51] hsr_slave_0: left promiscuous mode [ 373.139048][T13142] EXT4-fs (loop5): 1 truncate cleaned up [ 373.163107][T13125] loop2: detected capacity change from 0 to 40427 [ 373.169972][ T51] hsr_slave_1: left promiscuous mode [ 373.173036][T13142] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.187064][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.194650][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.215708][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.227257][T13125] F2FS-fs (loop2): invalid crc value [ 373.236596][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.328987][T13142] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 13: comm syz.5.2689: bad entry in directory: rec_len % 4 != 0 - offset=12, inode=2, rec_len=1025, size=1024 fake=1 [ 373.336805][ T51] veth1_macvtap: left promiscuous mode [ 373.378655][ T51] veth0_macvtap: left promiscuous mode [ 373.384328][ T51] veth1_vlan: left promiscuous mode [ 373.409723][T13142] EXT4-fs (loop5): Remounting filesystem read-only [ 373.416324][ T51] veth0_vlan: left promiscuous mode [ 373.504764][T13125] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 373.521463][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.556533][T13125] F2FS-fs (loop2): Start checkpoint disabled! [ 373.598190][T13125] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 373.598458][T13153] loop4: detected capacity change from 0 to 4096 [ 373.632669][T13125] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 373.657226][T13153] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 373.754170][T13153] ntfs3(loop4): ino=1a, mi_enum_attr [ 373.773044][T13153] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 373.804550][T13153] ntfs3(loop4): ino=1a, mi_enum_attr [ 373.826239][T13153] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 373.846313][T13160] netlink: 'syz.0.2695': attribute type 11 has an invalid length. [ 373.867755][T13149] loop6: detected capacity change from 0 to 32768 [ 373.875312][T13160] netlink: 'syz.0.2695': attribute type 11 has an invalid length. [ 373.893524][ T12] kworker/u8:0: attempt to access beyond end of device [ 373.893524][ T12] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 373.914614][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 373.914646][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.914662][ T12] Workqueue: writeback wb_workfn (flush-7:2) [ 373.914700][ T12] Call Trace: [ 373.914710][ T12] [ 373.914720][ T12] dump_stack_lvl+0x189/0x250 [ 373.914763][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.914799][ T12] ? __pfx_queue_work_on+0x10/0x10 [ 373.914827][ T12] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 373.914863][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 373.914912][ T12] f2fs_handle_critical_error+0x37c/0x540 [ 373.914957][ T12] f2fs_write_end_io+0x886/0xb60 [ 373.915009][ T12] __submit_merged_bio+0x27a/0x6a0 [ 373.915052][ T12] ? up_write+0x1c4/0x420 [ 373.915091][ T12] __submit_merged_write_cond+0x44c/0x530 [ 373.915137][ T12] f2fs_sync_node_pages+0x1479/0x15e0 [ 373.915201][ T12] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 373.915237][ T12] ? __percpu_counter_sum+0x1c2/0x1e0 [ 373.915309][ T12] ? __lock_acquire+0xab9/0xd20 [ 373.915342][ T12] ? rcu_is_watching+0x15/0xb0 [ 373.915370][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 373.915397][ T12] ? blk_start_plug+0x52/0x1b0 [ 373.915441][ T12] f2fs_write_node_pages+0x303/0x6e0 [ 373.915487][ T12] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 373.915545][ T12] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 373.915582][ T12] do_writepages+0x32e/0x550 [ 373.915623][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 373.915651][ T12] ? reacquire_held_locks+0x127/0x1d0 [ 373.915679][ T12] ? writeback_sb_inodes+0x384/0x1010 [ 373.915730][ T12] __writeback_single_inode+0x145/0xff0 [ 373.915766][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 373.915794][ T12] ? do_raw_spin_unlock+0x122/0x240 [ 373.915837][ T12] writeback_sb_inodes+0x6c7/0x1010 [ 373.915875][ T12] ? __lock_acquire+0xab9/0xd20 [ 373.915933][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 373.916040][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 373.916068][ T12] ? rcu_is_watching+0x15/0xb0 [ 373.916098][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 373.916143][ T12] wb_writeback+0x43b/0xaf0 [ 373.916191][ T12] ? queue_io+0x371/0x590 [ 373.916231][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 373.916279][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.916324][ T12] wb_workfn+0x409/0xef0 [ 373.916376][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 373.916412][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 373.916439][ T12] ? __lock_acquire+0xab9/0xd20 [ 373.916480][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 373.916512][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 373.916545][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.916575][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 373.916600][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 373.916630][ T12] process_scheduled_works+0xae1/0x17b0 [ 373.916699][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 373.916740][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 373.916780][ T12] worker_thread+0x8a0/0xda0 [ 373.916849][ T12] kthread+0x711/0x8a0 [ 373.916889][ T12] ? __pfx_worker_thread+0x10/0x10 [ 373.916917][ T12] ? __pfx_kthread+0x10/0x10 [ 373.916947][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 373.916981][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.917012][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 373.917046][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.917079][ T12] ? __pfx_kthread+0x10/0x10 [ 373.917116][ T12] ret_from_fork+0x4bc/0x870 [ 373.917147][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 373.917186][ T12] ? __switch_to_asm+0x39/0x70 [ 373.917206][ T12] ? __switch_to_asm+0x33/0x70 [ 373.917226][ T12] ? __pfx_kthread+0x10/0x10 [ 373.917262][ T12] ret_from_fork_asm+0x1a/0x30 [ 373.917311][ T12] [ 374.290369][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 374.290430][T13160] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2695'. [ 374.301438][ T53] Bluetooth: hci0: command tx timeout [ 374.308779][T13149] ERROR: (device loop6): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 374.308779][T13149] [ 374.315760][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 374.315789][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 374.315806][ T12] Workqueue: writeback wb_workfn (flush-7:2) [ 374.315842][ T12] Call Trace: [ 374.315851][ T12] [ 374.315861][ T12] dump_stack_lvl+0x189/0x250 [ 374.315901][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.315935][ T12] ? __pfx_queue_work_on+0x10/0x10 [ 374.315962][ T12] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 374.315995][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 374.316041][ T12] f2fs_handle_critical_error+0x37c/0x540 [ 374.316085][ T12] f2fs_write_end_io+0x886/0xb60 [ 374.316135][ T12] __submit_merged_bio+0x27a/0x6a0 [ 374.316169][ T12] ? up_write+0x1c4/0x420 [ 374.316206][ T12] __submit_merged_write_cond+0x44c/0x530 [ 374.316250][ T12] f2fs_sync_node_pages+0x1479/0x15e0 [ 374.316313][ T12] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 374.316347][ T12] ? __percpu_counter_sum+0x1c2/0x1e0 [ 374.316412][ T12] ? __lock_acquire+0xab9/0xd20 [ 374.316442][ T12] ? rcu_is_watching+0x15/0xb0 [ 374.316470][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.316497][ T12] ? blk_start_plug+0x52/0x1b0 [ 374.316538][ T12] f2fs_write_node_pages+0x303/0x6e0 [ 374.316580][ T12] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 374.316632][ T12] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 374.316667][ T12] do_writepages+0x32e/0x550 [ 374.316705][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.316732][ T12] ? reacquire_held_locks+0x127/0x1d0 [ 374.316759][ T12] ? writeback_sb_inodes+0x384/0x1010 [ 374.316805][ T12] __writeback_single_inode+0x145/0xff0 [ 374.316840][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.316867][ T12] ? do_raw_spin_unlock+0x122/0x240 [ 374.316906][ T12] writeback_sb_inodes+0x6c7/0x1010 [ 374.316942][ T12] ? __lock_acquire+0xab9/0xd20 [ 374.316992][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 374.317074][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.317101][ T12] ? rcu_is_watching+0x15/0xb0 [ 374.317128][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.317166][ T12] wb_writeback+0x43b/0xaf0 [ 374.317209][ T12] ? queue_io+0x371/0x590 [ 374.317247][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 374.317296][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 374.317333][ T12] wb_workfn+0x409/0xef0 [ 374.317379][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 374.317413][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.317439][ T12] ? __lock_acquire+0xab9/0xd20 [ 374.317476][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.317506][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.317538][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 374.317568][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 374.317593][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 374.317622][ T12] process_scheduled_works+0xae1/0x17b0 [ 374.317684][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 374.317720][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.317758][ T12] worker_thread+0x8a0/0xda0 [ 374.317817][ T12] kthread+0x711/0x8a0 [ 374.317854][ T12] ? __pfx_worker_thread+0x10/0x10 [ 374.317881][ T12] ? __pfx_kthread+0x10/0x10 [ 374.317910][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.317942][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 374.317972][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.317999][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.318030][ T12] ? __pfx_kthread+0x10/0x10 [ 374.318064][ T12] ret_from_fork+0x4bc/0x870 [ 374.318093][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 374.318128][ T12] ? __switch_to_asm+0x39/0x70 [ 374.318147][ T12] ? __switch_to_asm+0x33/0x70 [ 374.318167][ T12] ? __pfx_kthread+0x10/0x10 [ 374.318201][ T12] ret_from_fork_asm+0x1a/0x30 [ 374.318241][ T12] [ 374.318289][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 374.326362][T13149] ERROR: (device loop6): remounting filesystem as read-only [ 374.673209][T13164] loop0: detected capacity change from 0 to 512 [ 374.676519][T13149] jfs_readdir: unexpected rc = -5 from dtReadNext [ 374.747544][T13164] EXT4-fs: Ignoring removed mblk_io_submit option [ 374.762224][T13164] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 374.765675][T13153] ntfs3: Cannot use different iocharset when remounting! [ 374.841866][T13164] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 374.906694][T13164] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a000e018, mo2=0002] [ 374.949131][T13164] System zones: 0-1, 15-15, 18-18, 34-34 [ 374.955130][T13164] EXT4-fs (loop0): orphan cleanup on readonly fs [ 375.013291][T13164] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #4: comm syz.0.2698: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 375.098897][T13164] EXT4-fs error (device loop0): ext4_quota_enable:7139: comm syz.0.2698: Bad quota inode: 4, type: 1 [ 375.166217][T13164] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 375.246191][T13164] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 375.258074][T13164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 375.259895][T13178] loop2: detected capacity change from 0 to 164 [ 375.371182][T13164] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz.0.2698: bad symlink. [ 375.403184][T13182] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz.0.2698: bad symlink. [ 375.571847][T13186] loop4: detected capacity change from 0 to 2048 [ 375.615517][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.677389][T13192] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 375.812923][T13192] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 375.847051][T13192] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 375.863367][ T5917] kernel read not supported for file /vga_arbiter (pid: 5917 comm: kworker/1:5) [ 375.889645][T13192] Remounting filesystem read-only [ 375.902382][ T5828] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 376.332574][ T51] team0 (unregistering): Port device team_slave_1 removed [ 376.377380][T13222] loop4: detected capacity change from 0 to 2048 [ 376.381263][ T53] Bluetooth: hci0: command tx timeout [ 376.399041][T13222] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 376.402679][T13224] loop0: detected capacity change from 0 to 128 [ 376.421922][T13222] overlayfs: upper fs needs to support d_type. [ 376.445470][T13224] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 376.446013][T13222] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 376.469404][T13222] overlayfs: failed to set xattr on upper [ 376.474502][ T51] team0 (unregistering): Port device team_slave_0 removed [ 376.475136][T13222] overlayfs: ...falling back to redirect_dir=nofollow. [ 376.475150][T13222] overlayfs: ...falling back to index=off. [ 376.497876][T13224] ext4 filesystem being mounted at /432/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 376.625203][ T5840] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 376.916326][T13237] nbd: must specify a size in bytes for the device [ 377.031875][T13239] loop5: detected capacity change from 0 to 164 [ 377.041468][T13239] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 377.126966][T13232] loop0: detected capacity change from 0 to 32768 [ 377.171354][T13232] JBD2: Ignoring recovery information on journal [ 377.207936][T13232] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 377.243045][ T30] audit: type=1800 audit(1763009022.119:77): pid=13232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2727" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 377.295363][T13084] chnl_net:caif_netlink_parms(): no params data found [ 377.318816][T13241] net_ratelimit: 41 callbacks suppressed [ 377.318835][T13241] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.327084][ T5840] ocfs2: Unmounting device (7,0) on (node local) [ 377.657705][T13248] loop2: detected capacity change from 0 to 4096 [ 377.701299][T13256] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 377.701920][T13248] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 377.753872][T13248] NILFS (loop2): mounting fs with errors [ 377.859459][T13084] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.876336][T13084] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.880624][ T30] audit: type=1326 audit(1763009022.719:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13262 comm="syz.5.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d498f6c9 code=0x7ffc0000 [ 377.895433][T13084] bridge_slave_0: entered allmulticast mode [ 377.921757][T13084] bridge_slave_0: entered promiscuous mode [ 377.931111][T13084] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.938373][T13084] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.941487][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.945525][T13084] bridge_slave_1: entered allmulticast mode [ 377.957898][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.959924][T13084] bridge_slave_1: entered promiscuous mode [ 377.991207][ T30] audit: type=1326 audit(1763009022.739:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13262 comm="syz.5.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d498f6c9 code=0x7ffc0000 [ 378.055651][ T30] audit: type=1326 audit(1763009022.819:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13262 comm="syz.5.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f67d498f6c9 code=0x7ffc0000 [ 378.086319][ T30] audit: type=1326 audit(1763009022.819:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13262 comm="syz.5.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d498f6c9 code=0x7ffc0000 [ 378.134479][T13269] loop4: detected capacity change from 0 to 512 [ 378.165193][ T30] audit: type=1326 audit(1763009022.839:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13262 comm="syz.5.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f67d498f6c9 code=0x7ffc0000 [ 378.226576][ T30] audit: type=1326 audit(1763009022.839:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13262 comm="syz.5.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d498f6c9 code=0x7ffc0000 [ 378.244377][T13269] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2740: inode has both inline data and extents flags [ 378.249892][ T30] audit: type=1326 audit(1763009022.839:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13262 comm="syz.5.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d498f6c9 code=0x7ffc0000 [ 378.300930][T13084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.344638][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2746'. [ 378.355323][T13269] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2740: couldn't read orphan inode 15 (err -117) [ 378.363959][T13281] loop0: detected capacity change from 0 to 1024 [ 378.374470][T13281] EXT4-fs: Ignoring removed mblk_io_submit option [ 378.398702][T13269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.398745][T13084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.429007][T13281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.456504][ T53] Bluetooth: hci0: command tx timeout [ 378.634076][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.676735][T13084] team0: Port device team_slave_0 added [ 378.678812][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.713997][T13084] team0: Port device team_slave_1 added [ 378.944561][T13084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.962345][T13084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.052686][T13084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.091693][T13084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.109103][T13084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.174405][T13314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2760'. [ 379.195358][T13084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.309215][T13309] loop6: detected capacity change from 0 to 8192 [ 379.324774][T13084] hsr_slave_0: entered promiscuous mode [ 379.369994][T13084] hsr_slave_1: entered promiscuous mode [ 379.398501][T13084] debugfs: 'hsr0' already exists in 'hsr' [ 379.404259][T13084] Cannot create hsr debugfs directory [ 379.735289][T13332] Bluetooth: MGMT ver 1.23 [ 379.920158][T13336] loop6: detected capacity change from 0 to 1024 [ 380.150727][T13342] UBIFS error (pid: 13342): cannot open "c:::", error -22 [ 380.159419][T13084] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 380.208630][T13084] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 380.241539][T13084] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 380.263294][T13322] loop2: detected capacity change from 0 to 32768 [ 380.274481][T13084] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 380.300909][T13347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.313946][T13322] JBD2: Ignoring recovery information on journal [ 380.357625][T13349] loop4: detected capacity change from 0 to 128 [ 380.391690][T13322] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 380.414380][T13349] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 380.452131][T13349] ext4 filesystem being mounted at /470/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 380.505618][T13084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.551817][T13084] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.583516][ T2115] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.590714][ T2115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.624507][ T5835] ocfs2: Unmounting device (7,2) on (node local) [ 380.643830][T13363] loop5: detected capacity change from 0 to 2048 [ 380.659661][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.666849][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.717300][ T5828] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 380.778609][T13363] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 380.788842][T13363] UDF-fs: Scanning with blocksize 512 failed [ 380.851104][T13363] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 381.168493][T13084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.336526][ T5917] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 381.456006][T13396] loop4: detected capacity change from 0 to 256 [ 381.483100][T13396] exfat: Deprecated parameter 'namecase' [ 381.492646][ T5917] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 381.512533][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.526513][T13396] exfat: Deprecated parameter 'namecase' [ 381.535899][ T5917] usb 3-1: config 0 descriptor?? [ 381.543852][ T5917] cp210x 3-1:0.0: cp210x converter detected [ 381.573561][T13396] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 381.709826][T13404] loop6: detected capacity change from 0 to 256 [ 381.734949][T13084] veth0_vlan: entered promiscuous mode [ 381.760979][ T5917] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 381.766280][T13404] FAT-fs (loop6): Directory bread(block 64) failed [ 381.777615][T13404] FAT-fs (loop6): Directory bread(block 65) failed [ 381.778276][ T5917] cp210x 3-1:0.0: querying part number failed [ 381.791020][T13404] FAT-fs (loop6): Directory bread(block 66) failed [ 381.792332][T13084] veth1_vlan: entered promiscuous mode [ 381.805332][T13404] FAT-fs (loop6): Directory bread(block 67) failed [ 381.808800][ T5917] usb 3-1: cp210x converter now attached to ttyUSB0 [ 381.816565][T13404] FAT-fs (loop6): Directory bread(block 68) failed [ 381.841116][T13404] FAT-fs (loop6): Directory bread(block 69) failed [ 381.848079][T13404] FAT-fs (loop6): Directory bread(block 70) failed [ 381.865099][T13404] FAT-fs (loop6): Directory bread(block 71) failed [ 381.873452][T13084] veth0_macvtap: entered promiscuous mode [ 381.888739][T13084] veth1_macvtap: entered promiscuous mode [ 381.902662][T13404] FAT-fs (loop6): Directory bread(block 72) failed [ 381.917324][T13404] FAT-fs (loop6): Directory bread(block 73) failed [ 381.925353][T13084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.945901][T13084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.965942][ T65] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.000428][ T65] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.023187][ T30] audit: type=1326 audit(1763009026.899:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13409 comm="syz.4.2795" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa87358f6c9 code=0x0 [ 382.059593][ T65] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.092148][ T65] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.225672][ T4385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.244962][ T4385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.288162][ T2115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.302939][ T2115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.310151][T13419] loop5: detected capacity change from 0 to 1024 [ 382.320672][T13419] EXT4-fs: inline encryption not supported [ 382.375530][T13419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.471691][T13425] loop8: detected capacity change from 0 to 1024 [ 382.478882][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.532272][T13425] hfsplus: bad catalog entry type [ 382.597496][ T2115] hfsplus: b-tree write err: -5, ino 4 [ 383.203114][T13455] loop5: detected capacity change from 0 to 256 [ 383.257284][T13455] exfat: Deprecated parameter 'namecase' [ 383.283688][T13455] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 383.287168][T13459] loop0: detected capacity change from 0 to 512 [ 383.358904][T13459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.378861][T13459] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.699719][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.824405][T13485] loop8: detected capacity change from 0 to 64 [ 384.003012][T13493] loop4: detected capacity change from 0 to 512 [ 384.023562][T13493] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 384.075468][T13493] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2831: bg 0: block 104: invalid block bitmap [ 384.121251][T13493] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 384.139793][T13500] loop8: detected capacity change from 0 to 16 [ 384.148068][T13500] erofs (device loop8): mounted with root inode @ nid 36. [ 384.167203][ T43] usb 3-1: USB disconnect, device number 19 [ 384.178171][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 384.186659][ T43] cp210x 3-1:0.0: device disconnected [ 384.196053][ T30] audit: type=1800 audit(1763009029.049:86): pid=13500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2833" name="file1" dev="loop8" ino=86 res=0 errno=0 [ 384.196252][T13493] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2831: invalid indirect mapped block 1 (level 1) [ 384.257882][T13493] EXT4-fs (loop4): 1 truncate cleaned up [ 384.280168][T13493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.347131][ T30] audit: type=1800 audit(1763009029.219:87): pid=13493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2831" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 384.408011][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.429666][T13506] netlink: 'syz.8.2836': attribute type 3 has an invalid length. [ 384.503095][T13476] loop5: detected capacity change from 0 to 32768 [ 384.520690][T13476] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 384.582811][T13476] XFS (loop5): Ending clean mount [ 384.790511][ T5834] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 384.841122][T13528] loop6: detected capacity change from 0 to 512 [ 384.857906][T13528] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 384.878967][T13528] EXT4-fs (loop6): 1 truncate cleaned up [ 384.887321][T13528] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.083126][ T7074] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.254175][T13547] netlink: 'syz.2.2853': attribute type 27 has an invalid length. [ 385.528345][T13562] loop6: detected capacity change from 0 to 128 [ 385.555574][T13562] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 385.603143][T13562] hpfs: filesystem error: improperly stopped [ 385.616933][T13562] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 385.631886][T13562] hpfs: You really don't want any checks? You are crazy... [ 385.639832][T13562] hpfs: hpfs_map_sector(): read error [ 385.645917][T13562] hpfs: code page support is disabled [ 385.652484][T13562] hpfs: hpfs_map_4sectors(): unaligned read [ 385.656563][T13568] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2862'. [ 385.659295][T13562] hpfs: hpfs_map_4sectors(): unaligned read [ 385.695711][T13562] hpfs: filesystem error: unable to find root dir [ 385.743338][ T5917] kernel write not supported for file /input/event2 (pid: 5917 comm: kworker/1:5) [ 385.831878][T13572] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2864'. [ 385.845125][T13572] netlink: 'syz.0.2864': attribute type 9 has an invalid length. [ 385.847534][ T43] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 385.857200][T13572] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2864'. [ 385.875893][T13572] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2864'. [ 385.925587][T13574] loop5: detected capacity change from 0 to 2048 [ 385.947559][T13574] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 386.087508][ T43] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 386.095939][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.146869][ T43] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 386.156655][ T43] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 386.164723][ T43] usb 3-1: Manufacturer: syz [ 386.192157][T13549] loop8: detected capacity change from 0 to 40427 [ 386.198931][ T43] usb 3-1: config 0 descriptor?? [ 386.222400][T13549] F2FS-fs (loop8): invalid crc value [ 386.242301][ T30] audit: type=1326 audit(1763009031.119:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13583 comm="syz.5.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d498f6c9 code=0x7ffc0000 [ 386.317821][ T30] audit: type=1326 audit(1763009031.119:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13583 comm="syz.5.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d498f6c9 code=0x7ffc0000 [ 386.366626][ T30] audit: type=1326 audit(1763009031.139:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13583 comm="syz.5.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f67d498f6c9 code=0x7ffc0000 [ 386.377368][T13592] loop6: detected capacity change from 0 to 2048 [ 386.398109][ T43] rc_core: IR keymap rc-hauppauge not found [ 386.404014][ T43] Registered IR keymap rc-empty [ 386.434140][ T43] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 386.444461][ T30] audit: type=1326 audit(1763009031.139:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13583 comm="syz.5.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d498f6c9 code=0x7ffc0000 [ 386.473256][T13592] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 386.492520][T13549] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 386.495336][ T43] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input23 [ 386.513318][T13594] loop5: detected capacity change from 0 to 1024 [ 386.523635][T13549] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 386.537127][T13597] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 386.612036][ T30] audit: type=1800 audit(1763009031.489:92): pid=13549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2854" name="file1" dev="loop8" ino=10 res=0 errno=0 [ 386.673689][ T4385] hfsplus: b-tree write err: -5, ino 4 [ 386.737459][T13084] syz-executor: attempt to access beyond end of device [ 386.737459][T13084] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 386.742567][T13598] rc rc0: two consecutive events of type space [ 386.759711][T13084] CPU: 1 UID: 0 PID: 13084 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 386.759742][T13084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 386.759759][T13084] Call Trace: [ 386.759768][T13084] [ 386.759779][T13084] dump_stack_lvl+0x189/0x250 [ 386.759826][T13084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.759861][T13084] ? __pfx_queue_work_on+0x10/0x10 [ 386.759890][T13084] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 386.759924][T13084] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 386.759972][T13084] f2fs_handle_critical_error+0x37c/0x540 [ 386.760019][T13084] f2fs_write_end_io+0x886/0xb60 [ 386.760072][T13084] __submit_merged_bio+0x27a/0x6a0 [ 386.760117][T13084] __submit_merged_write_cond+0x255/0x530 [ 386.760162][T13084] f2fs_write_data_pages+0x261d/0x3000 [ 386.760227][T13084] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 386.760307][T13084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.760336][T13084] ? stack_trace_save+0x9c/0xe0 [ 386.760370][T13084] ? __pfx_stack_trace_save+0x10/0x10 [ 386.760405][T13084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.760449][T13084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.760477][T13084] ? __lock_acquire+0xab9/0xd20 [ 386.760512][T13084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.760539][T13084] ? do_raw_spin_lock+0x121/0x290 [ 386.760581][T13084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.760613][T13084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.760641][T13084] ? do_raw_spin_unlock+0x122/0x240 [ 386.760676][T13084] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 386.760703][T13084] do_writepages+0x32e/0x550 [ 386.760743][T13084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.760776][T13084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.760810][T13084] ? do_raw_spin_unlock+0x122/0x240 [ 386.760850][T13084] filemap_fdatawrite+0x199/0x240 [ 386.760886][T13084] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 386.760967][T13084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.761001][T13084] ? do_raw_spin_unlock+0x122/0x240 [ 386.761050][T13084] f2fs_sync_dirty_inodes+0x31f/0x830 [ 386.761096][T13084] f2fs_write_checkpoint+0x93e/0x2440 [ 386.761123][T13084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.761150][T13084] ? __lock_acquire+0xab9/0xd20 [ 386.761208][T13084] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 386.761299][T13084] kill_f2fs_super+0x2cc/0x6d0 [ 386.761327][T13084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.761362][T13084] ? __pfx_kill_f2fs_super+0x10/0x10 [ 386.761408][T13084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.761436][T13084] ? shrinker_free+0x2ce/0x3e0 [ 386.761469][T13084] deactivate_locked_super+0xbc/0x130 [ 386.761505][T13084] cleanup_mnt+0x425/0x4c0 [ 386.761533][T13084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.761561][T13084] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.761601][T13084] task_work_run+0x1d4/0x260 [ 386.761643][T13084] ? __pfx_task_work_run+0x10/0x10 [ 386.761678][T13084] ? __x64_sys_umount+0x122/0x160 [ 386.761717][T13084] ? exit_to_user_mode_loop+0x40/0x130 [ 386.761746][T13084] exit_to_user_mode_loop+0xe9/0x130 [ 386.761771][T13084] do_syscall_64+0x2bd/0xfa0 [ 386.761806][T13084] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.761841][T13084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.761865][T13084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.761893][T13084] ? exc_page_fault+0xab/0x100 [ 386.761930][T13084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.761954][T13084] RIP: 0033:0x7fe36c5909f7 [ 386.761976][T13084] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 386.761997][T13084] RSP: 002b:00007fff65d471a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 386.762022][T13084] RAX: 0000000000000000 RBX: 00007fe36c611d7d RCX: 00007fe36c5909f7 [ 386.762046][T13084] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff65d47260 [ 386.762062][T13084] RBP: 00007fff65d47260 R08: 0000000000000000 R09: 0000000000000000 [ 386.762079][T13084] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff65d482f0 [ 386.762097][T13084] R13: 00007fe36c611d7d R14: 000000000005e631 R15: 00007fff65d48330 [ 386.762137][T13084] [ 386.762171][T13084] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 386.848800][T13607] loop0: detected capacity change from 0 to 64 [ 386.944386][ T43] usb 3-1: USB disconnect, device number 20 [ 386.981324][T13607] hfs: unable to locate alternate MDB [ 387.075737][T13611] loop6: detected capacity change from 0 to 256 [ 387.081196][T13607] hfs: continuing without an alternate MDB [ 387.174330][T13611] FAT-fs (loop6): Directory bread(block 1285) failed [ 387.240029][T13611] FAT-fs (loop6): Directory bread(block 1285) failed [ 387.633840][ T10] IPVS: starting estimator thread 0... [ 387.741754][T13631] IPVS: using max 25 ests per chain, 60000 per kthread [ 387.979593][T13645] loop8: detected capacity change from 0 to 128 [ 388.088367][T13651] loop5: detected capacity change from 0 to 256 [ 388.117519][T13652] ieee802154 phy0 wpan0: encryption failed: -126 [ 388.156093][T13651] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xd22393c8, utbl_chksum : 0xe619d30d) [ 388.290929][T13657] loop6: detected capacity change from 0 to 512 [ 388.318611][T13663] loop2: detected capacity change from 0 to 512 [ 388.332164][T13657] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 388.355548][T13663] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 388.394545][T13657] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.2904: bad orphan inode 131083 [ 388.406732][T13663] EXT4-fs (loop2): 1 truncate cleaned up [ 388.414223][T13663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.446263][T13657] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.484637][T13657] overlayfs: upper fs needs to support d_type. [ 388.516084][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.646589][ T5910] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 388.822797][ T5910] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 388.841606][ T5910] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 388.872495][ T5910] usb 9-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 388.891717][T13685] loop5: detected capacity change from 0 to 256 [ 388.896405][ T5910] usb 9-1: config 220 has no interface number 2 [ 388.905007][ T5910] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 388.907836][ T7074] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.952897][ T5910] usb 9-1: config 220 interface 0 has no altsetting 0 [ 388.968230][ T5910] usb 9-1: config 220 interface 76 has no altsetting 0 [ 388.975194][ T5910] usb 9-1: config 220 interface 1 has no altsetting 0 [ 388.985545][ T5910] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 389.017533][ T5910] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.036286][ T5910] usb 9-1: Product: syz [ 389.040469][ T5910] usb 9-1: Manufacturer: syz [ 389.076465][ T5910] usb 9-1: SerialNumber: syz [ 389.144370][ T65] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.299871][ T65] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.328923][ T5910] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 389.337877][ T5910] uvcvideo 9-1:220.0: No valid video chain found. [ 389.344362][ T5910] usb 9-1: selecting invalid altsetting 0 [ 389.386628][ T5910] usb 9-1: selecting invalid altsetting 0 [ 389.392396][ T5910] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 389.402795][ T65] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.436575][ T5910] usb 9-1: USB disconnect, device number 2 [ 389.464746][T13696] loop2: detected capacity change from 0 to 256 [ 389.535907][T13696] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 389.561967][ T65] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.601307][T13696] exFAT-fs (loop2): failed to exfat_utf8_to_utf16 (err : -22) nls len : 1 [ 389.698439][T13702] tipc: Enabling not permitted [ 389.736866][T13702] tipc: Enabling of bearer rejected, failed to enable media [ 389.956697][ T65] bridge_slave_1: left allmulticast mode [ 389.963435][ T65] bridge_slave_1: left promiscuous mode [ 389.981584][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.064364][ T65] bridge_slave_0: left allmulticast mode [ 390.081958][ T65] bridge_slave_0: left promiscuous mode [ 390.108624][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.126843][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 390.147751][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 390.173855][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 390.196818][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 390.212172][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 390.794273][T13746] loop5: detected capacity change from 0 to 512 [ 390.824219][T13746] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.841819][T13746] ext4 filesystem being mounted at /518/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.923838][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.994167][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.022878][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.038742][ T65] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 391.061476][ T65] bond0 (unregistering): Released all slaves [ 391.091118][T13727] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2936'. [ 391.179472][ T65] tipc: Disabling bearer [ 391.195128][ T65] tipc: Left network mode [ 391.390305][T13763] loop2: detected capacity change from 0 to 128 [ 391.410404][T13763] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 391.431117][T13763] hpfs: filesystem error: improperly stopped [ 391.463096][T13764] loop4: detected capacity change from 0 to 1024 [ 391.477838][T13763] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 391.485581][T13763] hpfs: You really don't want any checks? You are crazy... [ 391.531882][T13763] hpfs: hpfs_map_sector(): read error [ 391.537462][T13763] hpfs: code page support is disabled [ 391.551368][T13764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 391.553027][T13763] hpfs: hpfs_map_4sectors(): unaligned read [ 391.595744][T13764] ext4 filesystem being mounted at /488/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.596313][T13763] hpfs: hpfs_map_4sectors(): unaligned read [ 391.637881][T13763] hpfs: filesystem error: unable to find root dir [ 391.752419][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 391.806244][ T5903] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 391.870125][T13756] loop5: detected capacity change from 0 to 40427 [ 391.894239][T13756] F2FS-fs (loop5): build fault injection rate: 14 [ 391.917506][T13756] F2FS-fs (loop5): invalid crc value [ 391.969712][ T5903] usb 9-1: Using ep0 maxpacket: 16 [ 391.986974][ T5903] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.021415][ T5903] usb 9-1: config 0 interface 0 has no altsetting 0 [ 392.041659][ T5903] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 392.066226][ T5903] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.079921][ T65] hsr_slave_0: left promiscuous mode [ 392.089491][ T5903] usb 9-1: config 0 descriptor?? [ 392.104127][ T65] hsr_slave_1: left promiscuous mode [ 392.114449][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.127208][T13784] loop2: detected capacity change from 0 to 256 [ 392.131230][T13756] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 392.142769][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.153752][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.162001][T13756] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 392.169716][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.199345][T13789] loop0: detected capacity change from 0 to 256 [ 392.235178][T13789] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 392.235603][ T65] veth1_macvtap: left promiscuous mode [ 392.258216][ T65] veth0_macvtap: left promiscuous mode [ 392.264056][ T65] veth1_vlan: left promiscuous mode [ 392.270413][ T65] veth0_vlan: left promiscuous mode [ 392.308213][ T53] Bluetooth: hci2: command tx timeout [ 392.392178][T13789] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 392.446229][T13789] exFAT-fs (loop0): Filesystem has been set read-only [ 392.518838][ T5903] nzxt-smart2 0003:1E71:2009.0025: unknown main item tag 0x0 [ 392.556305][ T5903] nzxt-smart2 0003:1E71:2009.0025: unknown main item tag 0x0 [ 392.584085][ T5903] nzxt-smart2 0003:1E71:2009.0025: unknown main item tag 0x0 [ 392.614966][ T5903] nzxt-smart2 0003:1E71:2009.0025: unknown main item tag 0x0 [ 392.632959][ T5903] nzxt-smart2 0003:1E71:2009.0025: unknown main item tag 0x0 [ 392.668770][ T5903] nzxt-smart2 0003:1E71:2009.0025: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0 [ 392.699284][ T65] pim6reg (unregistering): left allmulticast mode [ 392.799858][ T5903] usb 9-1: USB disconnect, device number 3 [ 393.419400][T13822] loop0: detected capacity change from 0 to 256 [ 393.466973][T13822] exfat: Deprecated parameter 'utf8' [ 393.498591][T13822] exfat: Unknown parameter 'iocharseC' [ 393.539023][T13822] Invalid source name [ 393.650014][T13833] loop8: detected capacity change from 0 to 512 [ 393.671915][T13833] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 393.725502][T13833] EXT4-fs (loop8): 1 truncate cleaned up [ 393.878398][T13833] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.108731][T13848] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 394.124751][T13838] loop0: detected capacity change from 0 to 32768 [ 394.147768][T13838] gfs2: fsid=localflocks: Trying to join cluster "lock_nolock", "localflocks" [ 394.148481][T13084] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.156710][T13838] gfs2: fsid=localflocks: Now mounting FS (format 1801)... [ 394.173164][T13838] gfs2: fsid=localflocks.s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 394.188966][T13838] gfs2: fsid=localflocks.s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:6 [ 394.198347][T13838] gfs2: fsid=localflocks.s: H: s:SH f:eEcH e:0 p:13838 [syz.0.2982] init_journal+0x17f8/0x2260 [ 394.215142][T13838] gfs2: fsid=localflocks.s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:33554432 p:0 [ 394.224047][T13838] gfs2: fsid=localflocks.s: about to withdraw this file system [ 394.232367][T13838] gfs2: fsid=localflocks.s: Journal recovery skipped for jid 0 until next mount. [ 394.241630][T13838] gfs2: fsid=localflocks.s: Glock dequeues delayed: 0 [ 394.250354][T13838] gfs2: fsid=localflocks.s: File system withdrawn [ 394.256848][T13838] CPU: 1 UID: 0 PID: 13838 Comm: syz.0.2982 Not tainted syzkaller #0 PREEMPT(full) [ 394.256878][T13838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 394.256894][T13838] Call Trace: [ 394.256904][T13838] [ 394.256915][T13838] dump_stack_lvl+0x189/0x250 [ 394.256955][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.256988][T13838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.257024][T13838] ? __pfx__printk+0x10/0x10 [ 394.257051][T13838] ? kobject_uevent_env+0x36b/0x8c0 [ 394.257091][T13838] gfs2_withdraw+0xb30/0x1430 [ 394.257148][T13838] ? __pfx_gfs2_withdraw+0x10/0x10 [ 394.257186][T13838] ? __pfx_wake_up_bit+0x10/0x10 [ 394.257225][T13838] ? __pfx_wake_bit_function+0x10/0x10 [ 394.257263][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.257291][T13838] ? gfs2_consist_inode_i+0xf5/0x110 [ 394.257338][T13838] gfs2_jdesc_check+0x17d/0x2f0 [ 394.257385][T13838] check_journal_clean+0x158/0x310 [ 394.257423][T13838] ? __pfx_check_journal_clean+0x10/0x10 [ 394.257462][T13838] ? init_journal+0x17f8/0x2260 [ 394.257508][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.257536][T13838] ? do_raw_spin_unlock+0x122/0x240 [ 394.257575][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.257604][T13838] ? _raw_spin_unlock+0x28/0x50 [ 394.257634][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.257662][T13838] ? gfs2_jdesc_find+0xab/0xc0 [ 394.257705][T13838] init_journal+0x17f8/0x2260 [ 394.257755][T13838] ? init_inodes+0xdb/0x320 [ 394.257796][T13838] ? __pfx_init_journal+0x10/0x10 [ 394.257831][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.257860][T13838] ? vsnprintf+0xe11/0xf00 [ 394.257900][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.257933][T13838] ? snprintf+0xda/0x120 [ 394.257963][T13838] ? init_inodes+0xdb/0x320 [ 394.257998][T13838] ? __pfx_snprintf+0x10/0x10 [ 394.258027][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.258056][T13838] ? gfs2_glock_nq_num+0x13d/0x170 [ 394.258100][T13838] init_inodes+0xdb/0x320 [ 394.258139][T13838] gfs2_fill_super+0x1923/0x20d0 [ 394.258195][T13838] ? __pfx_gfs2_fill_super+0x10/0x10 [ 394.258228][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.258262][T13838] ? init_locking+0xb8/0x210 [ 394.258294][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.258329][T13838] ? sb_set_blocksize+0x104/0x180 [ 394.258369][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.258396][T13838] ? setup_bdev_super+0x4c1/0x5b0 [ 394.258439][T13838] get_tree_bdev_flags+0x40e/0x4d0 [ 394.258477][T13838] ? __pfx_gfs2_fill_super+0x10/0x10 [ 394.258513][T13838] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 394.258548][T13838] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 394.258579][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.258618][T13838] gfs2_get_tree+0x51/0x1e0 [ 394.258658][T13838] vfs_get_tree+0x92/0x2b0 [ 394.258698][T13838] do_new_mount+0x302/0xa10 [ 394.258737][T13838] ? apparmor_capable+0x137/0x1b0 [ 394.258772][T13838] ? __pfx_do_new_mount+0x10/0x10 [ 394.258811][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.258840][T13838] ? ns_capable+0x8a/0xf0 [ 394.258869][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.258899][T13838] ? kmem_cache_free+0x19b/0x690 [ 394.258951][T13838] __se_sys_mount+0x313/0x410 [ 394.258982][T13838] ? __pfx___se_sys_mount+0x10/0x10 [ 394.259012][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.259041][T13838] ? __x64_sys_mount+0x20/0xc0 [ 394.259068][T13838] do_syscall_64+0xfa/0xfa0 [ 394.259103][T13838] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.259140][T13838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.259164][T13838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.259194][T13838] ? exc_page_fault+0xab/0x100 [ 394.259239][T13838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.259264][T13838] RIP: 0033:0x7f9c19590e6a [ 394.259286][T13838] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.259308][T13838] RSP: 002b:00007f9c1a39de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 394.259341][T13838] RAX: ffffffffffffffda RBX: 00007f9c1a39def0 RCX: 00007f9c19590e6a [ 394.259361][T13838] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f9c1a39deb0 [ 394.259379][T13838] RBP: 0000200000000400 R08: 00007f9c1a39def0 R09: 0000000000210401 [ 394.259398][T13838] R10: 0000000000210401 R11: 0000000000000246 R12: 0000200000012500 [ 394.259415][T13838] R13: 00007f9c1a39deb0 R14: 0000000000012610 R15: 0000200000000000 [ 394.259456][T13838] [ 394.259466][T13838] gfs2: fsid=localflocks.s: Error checking journal for spectator mount. [ 394.386653][ T53] Bluetooth: hci2: command tx timeout [ 394.984184][T13860] loop2: detected capacity change from 0 to 64 [ 395.600741][ T65] team0 (unregistering): Port device team_slave_1 removed [ 395.714792][T13856] loop5: detected capacity change from 0 to 32768 [ 395.783560][ T65] team0 (unregistering): Port device team_slave_0 removed [ 395.840050][T13862] loop0: detected capacity change from 0 to 32768 [ 395.880141][T13858] loop8: detected capacity change from 0 to 32768 [ 395.892788][T13862] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 395.902703][T13858] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 396.006317][T13862] XFS (loop0): Ending clean mount [ 396.075632][T13870] loop2: detected capacity change from 0 to 32768 [ 396.086108][T13862] XFS (loop0): Quotacheck needed: Please wait. [ 396.149957][T13862] XFS (loop0): Quotacheck: Done. [ 396.170896][T13858] XFS (loop8): Ending clean mount [ 396.267077][ T5840] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 396.361023][T13084] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 396.783819][ T53] Bluetooth: hci2: command tx timeout [ 397.093367][T13915] loop2: detected capacity change from 0 to 512 [ 397.140833][T13915] EXT4-fs (loop2): orphan cleanup on readonly fs [ 397.147524][T13915] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 397.179967][T13915] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 397.239547][T13915] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.3011: attempt to clear invalid blocks 2 len 1 [ 397.289032][T13915] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3011: invalid indirect mapped block 1819239214 (level 0) [ 397.344328][T13900] loop5: detected capacity change from 0 to 32768 [ 397.351881][T13915] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3011: invalid indirect mapped block 1819239214 (level 1) [ 397.398874][T13915] EXT4-fs (loop2): 1 truncate cleaned up [ 397.412112][T13915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 397.795610][T13915] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.2.3011: bad entry in directory: inode out of bounds - offset=24, inode=85, rec_len=20, size=1024 fake=0 [ 397.951140][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.285486][T13720] chnl_net:caif_netlink_parms(): no params data found [ 398.447227][T13930] loop0: detected capacity change from 0 to 32768 [ 398.498606][T13939] netlink: 'syz.8.3021': attribute type 75 has an invalid length. [ 398.544994][T13945] netlink: 'syz.4.3023': attribute type 1 has an invalid length. [ 398.562310][T13947] loop5: detected capacity change from 0 to 64 [ 398.569992][T13930] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 398.605408][T13930] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 398.741733][T13720] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.765256][T13720] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.787254][T13959] program syz.4.3026 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 398.788186][T13720] bridge_slave_0: entered allmulticast mode [ 398.805096][T13720] bridge_slave_0: entered promiscuous mode [ 398.817564][ T5840] ocfs2: Unmounting device (7,0) on (node local) [ 398.833846][T13720] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.845322][T13720] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.861805][T13720] bridge_slave_1: entered allmulticast mode [ 398.883952][T13720] bridge_slave_1: entered promiscuous mode [ 398.886282][ T53] Bluetooth: hci2: command tx timeout [ 398.963152][T13962] loop2: detected capacity change from 0 to 64 [ 399.051578][ T65] IPVS: stop unused estimator thread 0... [ 399.062411][T13964] loop8: detected capacity change from 0 to 1024 [ 399.071534][T13720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.090748][T13962] hfs: request for non-existent node 1280 in B*Tree [ 399.102344][T13720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.126411][ T30] audit: type=1800 audit(1763009043.999:93): pid=13964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3030" name="file2" dev="loop8" ino=22 res=0 errno=0 [ 399.130089][T13962] hfs: request for non-existent node 1280 in B*Tree [ 399.316361][ T5918] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 399.349556][T13972] loop8: detected capacity change from 0 to 1024 [ 399.370823][T13720] team0: Port device team_slave_0 added [ 399.397182][T13979] usb usb8: usbfs: process 13979 (syz.0.3036) did not claim interface 0 before use [ 399.408944][T13720] team0: Port device team_slave_1 added [ 399.409016][T13972] syz.8.3033: attempt to access beyond end of device [ 399.409016][T13972] loop8: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 399.484234][T13972] Buffer I/O error on dev loop8, logical block 100663296, async page read [ 399.549516][T13972] syz.8.3033: attempt to access beyond end of device [ 399.549516][T13972] loop8: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 399.556377][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 399.574113][T13972] Buffer I/O error on dev loop8, logical block 100663296, async page read [ 399.598086][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.614709][ T5903] kernel write not supported for file /radio1 (pid: 5903 comm: kworker/1:4) [ 399.635961][T13720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.646094][ T5918] usb 6-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 399.662177][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.691374][T13720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.730584][ T5918] usb 6-1: config 0 descriptor?? [ 399.739733][T13720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.752822][T13720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.759848][T13720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.836463][ T30] audit: type=1326 audit(1763009044.709:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b558f6c9 code=0x7ffc0000 [ 399.858731][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.871820][T13720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.896688][ T30] audit: type=1326 audit(1763009044.709:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b558f6c9 code=0x7ffc0000 [ 399.976762][ T30] audit: type=1326 audit(1763009044.779:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f09b558f6c9 code=0x7ffc0000 [ 400.034158][ T30] audit: type=1326 audit(1763009044.779:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b558f6c9 code=0x7ffc0000 [ 400.056501][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.131221][ T30] audit: type=1326 audit(1763009044.779:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b558f6c9 code=0x7ffc0000 [ 400.144838][T13720] hsr_slave_0: entered promiscuous mode [ 400.170110][T13720] hsr_slave_1: entered promiscuous mode [ 400.183693][T13720] debugfs: 'hsr0' already exists in 'hsr' [ 400.204872][ T30] audit: type=1326 audit(1763009044.799:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f09b558f6c9 code=0x7ffc0000 [ 400.214785][T13720] Cannot create hsr debugfs directory [ 400.256573][ T30] audit: type=1326 audit(1763009044.799:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b558f6c9 code=0x7ffc0000 [ 400.265499][T14000] mkiss: ax0: crc mode is auto. [ 400.287688][T14003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3047'. [ 400.316599][ T5918] waltop 0003:172F:0500.0026: hidraw0: USB HID v0.00 Device [HID 172f:0500] on usb-dummy_hcd.5-1/input0 [ 400.327412][ T30] audit: type=1326 audit(1763009044.799:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b558f6c9 code=0x7ffc0000 [ 400.355836][T14005] loop0: detected capacity change from 0 to 2048 [ 400.405174][T14005] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.420671][T14005] ext4 filesystem being mounted at /491/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.475994][T14012] loop2: detected capacity change from 0 to 256 [ 400.494712][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.561092][T14012] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 400.582398][ T5903] usb 6-1: USB disconnect, device number 17 [ 400.813162][T14023] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3054'. [ 400.951817][T13720] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 400.984559][T13720] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 401.021419][T13720] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 401.064923][T13720] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 401.071084][T14033] loop2: detected capacity change from 0 to 4096 [ 401.204812][T14033] ntfs3(loop2): ino=1f, mi_enum_attr [ 401.227295][T14033] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 401.260114][ T53] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 401.269365][ T53] Bluetooth: hci0: Injecting HCI hardware error event [ 401.273142][T13720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.277911][ T53] Bluetooth: hci0: hardware error 0x00 [ 401.292843][T14044] ntfs3(loop2): ino=9, attr_set_size [ 401.307102][T13720] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.363093][ T2115] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.370301][ T2115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.421924][T14051] loop8: detected capacity change from 0 to 1024 [ 401.429736][ T2115] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.436924][ T2115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.568916][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3067'. [ 401.900873][T13720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.915596][T14070] loop2: detected capacity change from 0 to 256 [ 401.937533][T14070] exfat: Deprecated parameter 'utf8' [ 401.957852][T14070] exfat: Deprecated parameter 'namecase' [ 402.000807][T14070] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x8fca712e, utbl_chksum : 0xe619d30d) [ 402.018512][T14075] loop5: detected capacity change from 0 to 512 [ 402.065484][T14075] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.3074: inode has both inline data and extents flags [ 402.106639][T14075] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3074: couldn't read orphan inode 15 (err -117) [ 402.159415][T14075] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.257396][ T30] audit: type=1800 audit(1763009047.129:102): pid=14075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3074" name="file1" dev="loop5" ino=18 res=0 errno=0 [ 402.384720][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.387087][T14059] loop0: detected capacity change from 0 to 32768 [ 402.466015][T14059] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 402.517636][T14059] XFS (loop0): Ending clean mount [ 402.534980][T14059] XFS (loop0): Quotacheck needed: Please wait. [ 402.568900][T13720] veth0_vlan: entered promiscuous mode [ 402.609313][T14059] XFS (loop0): Quotacheck: Done. [ 402.626959][T13720] veth1_vlan: entered promiscuous mode [ 402.711067][T13720] veth0_macvtap: entered promiscuous mode [ 402.721274][ T5840] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 402.726186][T13720] veth1_macvtap: entered promiscuous mode [ 402.768482][T13720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.782090][T13720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.852493][ T2115] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.891132][ T2115] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.911755][ T2115] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.965193][ T2115] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.152720][ T2115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.178625][ T2115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.226466][ T5903] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 403.280948][ T2115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.303143][ T2115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.323361][T14086] loop8: detected capacity change from 0 to 32768 [ 403.345363][T14086] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 403.374281][T14086] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 403.414711][T14086] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 403.423252][ T53] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 403.437096][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.447340][ T5918] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 403.456528][ T5918] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 403.468894][ T5903] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 403.491622][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.527343][ T5903] usb 6-1: config 0 descriptor?? [ 403.604246][ T5918] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 147ms [ 403.614947][ T5918] gfs2: fsid=syz:syz.0: jid=0: Done [ 403.621055][T14086] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 403.651955][T14114] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.3084'. [ 403.851630][T14086] gfs2: fsid=syz:syz.0: found 1 quota changes [ 403.984763][ T5903] prodikeys 0003:041E:2801.0027: hidraw0: USB HID v0.02 Device [HID 041e:2801] on usb-dummy_hcd.5-1/input0 [ 404.028618][T14123] netlink: 14593 bytes leftover after parsing attributes in process `syz.9.3087'. [ 404.037978][T13084] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 404 [ 404.079789][T13084] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 404.106572][T13084] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:13084 [syz-executor] gfs2_quota_sync+0x359/0x460 [ 404.137256][T13084] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 404.158973][T13084] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 404.171576][ T5918] usb 6-1: USB disconnect, device number 18 [ 404.226696][T13084] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 404.246326][T13084] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 404.263255][T13084] gfs2: fsid=syz:syz.0: File system withdrawn [ 404.280770][T13084] CPU: 0 UID: 0 PID: 13084 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 404.280800][T13084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 404.280816][T13084] Call Trace: [ 404.280826][T13084] [ 404.280837][T13084] dump_stack_lvl+0x189/0x250 [ 404.280877][T13084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.280910][T13084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.280944][T13084] ? __pfx__printk+0x10/0x10 [ 404.280971][T13084] ? kobject_uevent_env+0x36b/0x8c0 [ 404.281011][T13084] gfs2_withdraw+0xb30/0x1430 [ 404.281067][T13084] ? __pfx_gfs2_withdraw+0x10/0x10 [ 404.281108][T13084] ? queue_delayed_work_on+0x11a/0x280 [ 404.281139][T13084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.281166][T13084] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.281203][T13084] ? preempt_schedule+0xae/0xc0 [ 404.281241][T13084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.281269][T13084] ? gfs2_consist_inode_i+0xf5/0x110 [ 404.281309][T13084] inode_go_instantiate+0xaf7/0x1260 [ 404.281351][T13084] ? preempt_schedule_thunk+0x16/0x30 [ 404.281379][T13084] ? __pfx_inode_go_instantiate+0x10/0x10 [ 404.281417][T13084] ? _raw_spin_unlock+0x3f/0x50 [ 404.281446][T13084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.281475][T13084] ? gfs2_glock_nq+0x10c7/0x1830 [ 404.281518][T13084] gfs2_instantiate+0x168/0x220 [ 404.281557][T13084] gfs2_glock_wait+0x1d4/0x2a0 [ 404.281598][T13084] do_sync+0x46f/0xc60 [ 404.281623][T13084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.281651][T13084] ? _raw_spin_unlock+0x28/0x50 [ 404.281681][T13084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.281709][T13084] ? gfs2_quota_sync+0x359/0x460 [ 404.281749][T13084] ? __pfx_do_sync+0x10/0x10 [ 404.281788][T13084] ? gfs2_quota_sync+0x359/0x460 [ 404.281814][T13084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.281847][T13084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.281875][T13084] ? do_raw_spin_unlock+0x122/0x240 [ 404.281917][T13084] gfs2_quota_sync+0x359/0x460 [ 404.281959][T13084] gfs2_sync_fs+0x4c/0xb0 [ 404.281986][T13084] sync_filesystem+0xee/0x230 [ 404.282018][T13084] generic_shutdown_super+0x6f/0x2c0 [ 404.282055][T13084] kill_block_super+0x44/0x90 [ 404.282098][T13084] deactivate_locked_super+0xbc/0x130 [ 404.282133][T13084] cleanup_mnt+0x425/0x4c0 [ 404.282161][T13084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.282190][T13084] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.282229][T13084] task_work_run+0x1d4/0x260 [ 404.282270][T13084] ? __pfx_task_work_run+0x10/0x10 [ 404.282305][T13084] ? __x64_sys_umount+0x122/0x160 [ 404.282346][T13084] ? exit_to_user_mode_loop+0x40/0x130 [ 404.282375][T13084] exit_to_user_mode_loop+0xe9/0x130 [ 404.282400][T13084] do_syscall_64+0x2bd/0xfa0 [ 404.282435][T13084] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.282470][T13084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.282494][T13084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.282522][T13084] ? exc_page_fault+0xab/0x100 [ 404.282560][T13084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.282584][T13084] RIP: 0033:0x7fe36c5909f7 [ 404.282606][T13084] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 404.282627][T13084] RSP: 002b:00007fff65d471a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 404.282653][T13084] RAX: 0000000000000000 RBX: 00007fe36c611d7d RCX: 00007fe36c5909f7 [ 404.282671][T13084] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff65d47260 [ 404.282688][T13084] RBP: 00007fff65d47260 R08: 0000000000000000 R09: 0000000000000000 [ 404.282704][T13084] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff65d482f0 [ 404.282722][T13084] R13: 00007fe36c611d7d R14: 000000000006297c R15: 00007fff65d48330 [ 404.282763][T13084] [ 404.675747][T14134] loop4: detected capacity change from 0 to 256 [ 404.683103][T14134] exfat: Deprecated parameter 'utf8' [ 404.725212][T14134] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 405.339030][T14156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3104'. [ 405.366644][T14158] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3105'. [ 405.429348][T14158] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3105'. [ 405.458921][T14136] loop2: detected capacity change from 0 to 40427 [ 405.520010][T14136] F2FS-fs (loop2): build fault injection rate: 14 [ 405.546258][T14136] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 405.580591][T14136] F2FS-fs (loop2): invalid crc value [ 405.607581][ C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 405.625486][ C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 405.661533][T14173] loop0: detected capacity change from 0 to 512 [ 405.670265][T14173] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 405.684120][T14173] EXT4-fs (loop0): 1 truncate cleaned up [ 405.686017][T14173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.690852][T14173] overlay: Unknown parameter '/Qx1pm{_}yS( Rrs>t^_jqܾv8 80 3c 28 00 74 08 4c 89 e7 e8 d8 12 71 f9 4d 8b 24 24 48 83 c3 [ 412.363445][T14453] RSP: 0018:ffffc90003b7fa40 EFLAGS: 00010216 [ 412.369503][T14453] RAX: 0000000000000005 RBX: ffff888062afaf00 RCX: 0000000000080000 [ 412.377458][T14453] RDX: ffffc90004aa2000 RSI: 00000000000003c0 RDI: 00000000000003c1 [ 412.385422][T14453] RBP: 0000000000000001 R08: ffff88814c8e412f R09: 1ffff1102991c825 [ 412.393379][T14453] R10: dffffc0000000000 R11: ffffffff88b48ce0 R12: 0000000000000028 [ 412.401342][T14453] R13: dffffc0000000000 R14: ffff88814c8e4000 R15: dffffc0000000000 [ 412.409302][T14453] FS: 00007f9c1a39e6c0(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 412.418218][T14453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.424784][T14453] CR2: 0000001b30c23ffc CR3: 0000000047284000 CR4: 0000000000350ef0 [ 412.432740][T14453] Call Trace: [ 412.436005][T14453] [ 412.438921][T14453] pcl818_detach+0x66/0xd0 [ 412.443338][T14453] comedi_device_detach_locked+0x178/0x750 [ 412.449143][T14453] comedi_unlocked_ioctl+0xcde/0x1020 [ 412.454504][T14453] ? kasan_quarantine_put+0xdd/0x220 [ 412.459790][T14453] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 412.465613][T14453] ? __fget_files+0x2a/0x420 [ 412.470192][T14453] ? srso_alias_return_thunk+0x5/0xfbef5 [ 412.475814][T14453] ? __fget_files+0x3a0/0x420 [ 412.480476][T14453] ? __fget_files+0x2a/0x420 [ 412.485052][T14453] ? srso_alias_return_thunk+0x5/0xfbef5 [ 412.490676][T14453] ? srso_alias_return_thunk+0x5/0xfbef5 [ 412.496306][T14453] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 412.502114][T14453] __se_sys_ioctl+0xfc/0x170 [ 412.506698][T14453] do_syscall_64+0xfa/0xfa0 [ 412.511204][T14453] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.516396][T14453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.522447][T14453] ? srso_alias_return_thunk+0x5/0xfbef5 [ 412.528068][T14453] ? exc_page_fault+0xab/0x100 [ 412.532834][T14453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.538713][T14453] RIP: 0033:0x7f9c1958f6c9 [ 412.543114][T14453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.562708][T14453] RSP: 002b:00007f9c1a39e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 412.571111][T14453] RAX: ffffffffffffffda RBX: 00007f9c197e5fa0 RCX: 00007f9c1958f6c9 [ 412.579066][T14453] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 412.587029][T14453] RBP: 00007f9c19611f91 R08: 0000000000000000 R09: 0000000000000000 [ 412.595006][T14453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.602972][T14453] R13: 00007f9c197e6038 R14: 00007f9c197e5fa0 R15: 00007ffe3ac25ac8 [ 412.610941][T14453] [ 412.613938][T14453] Modules linked in: [ 412.617939][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.625855][T14453] ---[ end trace 0000000000000000 ]--- [ 412.696490][T14453] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 412.729456][T14453] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 f9 12 71 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 d8 12 71 f9 4d 8b 24 24 48 83 c3 [ 412.760150][T14446] loop4: detected capacity change from 0 to 32768 [ 412.766395][T14453] RSP: 0018:ffffc90003b7fa40 EFLAGS: 00010216 [ 412.784226][T14453] RAX: 0000000000000005 RBX: ffff888062afaf00 RCX: 0000000000080000 [ 412.792667][T14453] RDX: ffffc90004aa2000 RSI: 00000000000003c0 RDI: 00000000000003c1 [ 412.807211][T14453] RBP: 0000000000000001 R08: ffff88814c8e412f R09: 1ffff1102991c825 [ 412.815396][T14453] R10: dffffc0000000000 R11: ffffffff88b48ce0 R12: 0000000000000028 [ 412.823936][T14453] R13: dffffc0000000000 R14: ffff88814c8e4000 R15: dffffc0000000000 [ 412.832219][T14453] FS: 00007f9c1a39e6c0(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 412.841577][T14453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.848462][T14453] CR2: 00007f09b57b4198 CR3: 0000000047284000 CR4: 0000000000350ef0 [ 412.857647][T14453] Kernel panic - not syncing: Fatal exception [ 412.863943][T14453] Kernel Offset: disabled [ 412.868262][T14453] Rebooting in 86400 seconds..