last executing test programs: 3m5.419365123s ago: executing program 1 (id=368): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r0, &(0x7f00000004c0)='\x00', 0x1) ppoll(&(0x7f0000000240)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 3m4.35159646s ago: executing program 1 (id=381): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r0, 0x1e67e000) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc397e) 3m4.093093893s ago: executing program 1 (id=384): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x59, &(0x7f00000003c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x20, 0x25dfdbfd, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 3m3.943593663s ago: executing program 1 (id=386): syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000c40), 0xff, 0x4b7, &(0x7f0000000640)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000000)=""/39, 0x27) 3m3.385432005s ago: executing program 1 (id=394): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r0, 0x1e67e000) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc397e) 3m1.855701041s ago: executing program 1 (id=419): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000040)={{&(0x7f00004be000/0x2000)=nil, 0x2000}, 0x1}) 3m1.540000462s ago: executing program 32 (id=419): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000040)={{&(0x7f00004be000/0x2000)=nil, 0x2000}, 0x1}) 2m38.596872973s ago: executing program 0 (id=614): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_test\x00', [0x26, 0x7ff, 0x1, 0xfffffffc, 0x0, 0xccc, 0x8, 0xb, 0xa, 0xfc, 0x2, 0x1, 0x8, 0x4, 0x6, 0x0, 0x7, 0x1a449, 0x3, 0x40000007, 0x100, 0x2, 0xf27, 0x3, 0x8, 0x8, 0x8, 0x7, 0x4, 0x10000, 0x6]}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x8020640d, 0x0) 2m38.267141726s ago: executing program 0 (id=617): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4000}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x14}]}]}, 0x5c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2m38.043917235s ago: executing program 0 (id=619): userfaultfd(0x80801) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_request}}}}}, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) 2m37.828358612s ago: executing program 0 (id=624): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x81, 0x4ac, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x128) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x6, 0x20000) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 2m37.409026667s ago: executing program 0 (id=630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x18, r1, 0x1, 0x20, 0x25dfdbfd, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 2m36.68632126s ago: executing program 0 (id=636): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000001400)=@newlink={0x2c, 0x10, 0x401, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r1, 0x4982}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x4}, @IFLA_XDP={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc10}, 0x200040c0) 2m36.367807541s ago: executing program 33 (id=636): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000001400)=@newlink={0x2c, 0x10, 0x401, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r1, 0x4982}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x4}, @IFLA_XDP={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc10}, 0x200040c0) 2m20.541808507s ago: executing program 6 (id=757): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000024000040020011"], 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000600)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "54607aa823262351a6f6e9f2ea60489ac596e374782d663c", "37122e715e3be2c4a90e74aff5bb5c6d00f4ebb1cb14c3e28d51ff67f8d87d53"}}}}}}, 0x0) 2m20.301285508s ago: executing program 6 (id=759): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xc}}}, 0x24}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 2m20.166468645s ago: executing program 6 (id=760): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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") creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x42b42, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x3) 2m19.627176654s ago: executing program 6 (id=766): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5515, &(0x7f00000079c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m17.620015562s ago: executing program 6 (id=784): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000240)=ANY=[], 0x1, 0x1236, &(0x7f000000ab00)="$eJzs3c9rXFUcB9Bv2kmapiYTtVZbkF50o5uxycKVmyApSAeUtim0gvBqJjrMZCbkDYEpYrNz698hLt0JIu6zceNacJeNK+lCfOK8afODFJrQ+rScs3mXeffz7rvMnYH7uHdm972v1ztreWMtG8SpiYmobUSkBylSnIrTUdqOt2/98uvrN27fubbUbC5fT+nq0s2Fd1NKc5d/+PiLb9/4cXDu1ndz35+JnflPdn9f/G3nws7F3b9uft7OUztPvf4gZeluvz/I7nZbabWddxopfdRtZXkrtXt5a/PA+bVuf2NjmLLe6uzMxmYrz1PWG6ZOa5gG/TTYHKbss6zdS41GI83OBCc3FSvfPCiKIqIoJmMqiqIozsZMnIsXYjbmoh7z8WK8FC/H+XglLsSr8VpcHNWq+s4BAAAAAAAAAAAAAAAAAADg+WL/PwAAAAAAAAAAAAAAAAAAAFTP/n8AAAAAAAAAAAAAAAAAAAConv3/AAAAAAAAAAAAAAAAAAAAUL0bt+9cW2o2l6+nNB2x/tXWytZKeSzPL61FO7rRiitRjz9jtPu/VJavftBcvpJG5uOd9fvj/P2tldMH8wujnxN4mJ+KffmFMp8O5s/EzP78YtTj/NHtLx6Zn4633tyXb0Q9fv40atGN1fgnu5f/ciGl9z9sHspfGtUDAACA50EjPbI3f6+V8/ez4zoT5eHQ/L588fHPB4r6oecDh+bXtbhUq6zbjOXDe52s221tPpXC9PiqT+2CjyuMh2Tc62SXnzj1cLidpNHJiHh23fkvFH56NCaePDV5ovEzbma78i7/XwrbR56afLYftH/1a4iK7L3pVd8JAAAAAAAAAAAAx3GMhYG1cr3t8ZcTHtnwH/5EHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgb3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqpKAAAA///zk9n6") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x14) 2m16.381807452s ago: executing program 6 (id=789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) close(r0) 2m15.901640984s ago: executing program 34 (id=789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) close(r0) 3.687696815s ago: executing program 7 (id=1922): sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16], 0x40}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 3.295659015s ago: executing program 4 (id=1927): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='+cpu '], 0xb) 3.091373032s ago: executing program 4 (id=1931): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES64=0x0], 0x1, 0x54f4, &(0x7f0000005600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x1020000, 0x2000003}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 2.707759681s ago: executing program 7 (id=1937): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 2.219668244s ago: executing program 2 (id=1939): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 2.070069693s ago: executing program 2 (id=1941): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x20042}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) 1.888414067s ago: executing program 2 (id=1944): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x3200c02, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa80, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) ftruncate(r0, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x49c0000000000000}, 0xf) 1.764560013s ago: executing program 3 (id=1945): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) 1.651631997s ago: executing program 5 (id=1946): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRES32=r0], 0xa) 1.577580486s ago: executing program 7 (id=1947): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x538, &(0x7f0000000600)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x242, 0x18e) lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000)=@v3={0x3000000, [{0x7fffffff, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) ftruncate(r0, 0x2) 1.483634658s ago: executing program 3 (id=1948): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01022dbd7000ffdbdf252100000009001f0070"], 0x34}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) 1.395743269s ago: executing program 5 (id=1949): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) 1.39551016s ago: executing program 2 (id=1950): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) socket$inet6(0xa, 0x3, 0x7) 1.39533216s ago: executing program 4 (id=1951): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 1.182840907s ago: executing program 3 (id=1952): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000871006001c001a80180004801400098008"], 0x3c}}, 0x0) 1.125738814s ago: executing program 2 (id=1953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private0}]}]}, 0xac}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000020000000000000000000114000400fc00000000000000000000000000000108000740000000012c00068014000500fe800000000000000000000400000031140004"], 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) 1.015576158s ago: executing program 2 (id=1954): epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4431, &(0x7f00000088c0)="$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") mkdir(&(0x7f0000000040)='./control\x00', 0x10) rmdir(&(0x7f0000000280)='./control\x00') 1.011885289s ago: executing program 5 (id=1955): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb", 0x7f}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) 972.548344ms ago: executing program 7 (id=1956): r0 = socket(0x1e, 0x1, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0, 0x200000c4}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 811.585815ms ago: executing program 3 (id=1957): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x2810880, &(0x7f0000000280)=ANY=[], 0x8b, 0x2bb, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/234, 0xea) getdents64(r0, 0x0, 0x0) 793.485307ms ago: executing program 5 (id=1958): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0), 0x60}}], 0x1a000, 0x8040) 688.394741ms ago: executing program 7 (id=1959): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000240)={0x5, 0x0, [{0x3, 0x0, 0x0, 0x8, 0x200000, 0xfffffffd, 0x1}, {0x0, 0x6, 0x6, 0x0, 0x7}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x333, 0x4, 0x80000001, 0x8}, {0x80000001, 0xffffffff, 0x7, 0x1008, 0x4, 0x110, 0x2}, {0x80000000, 0x5dd3, 0x6, 0x6, 0xe231, 0x1, 0x1ff}]}) 559.631547ms ago: executing program 3 (id=1960): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x2000002, &(0x7f0000000340), 0x9, 0x558, &(0x7f0000001a80)="$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") lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, r0, 0x0) 469.894579ms ago: executing program 4 (id=1961): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x8000, &(0x7f0000000100), 0x13f, 0x3}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a06000000975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) 344.955155ms ago: executing program 5 (id=1962): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01022dbd7000ffdbdf252100000009001f0070"], 0x34}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) 259.716776ms ago: executing program 7 (id=1963): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da09"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000d1de"], &(0x7f0000000180)='syzkaller\x00'}, 0x94) openat$mice(0xffffffffffffff9c, &(0x7f0000001100), 0x2) syz_usb_disconnect(r0) 259.549956ms ago: executing program 3 (id=1964): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@any, 0xffffffff}, 0x1, 0x0, 0xe}) 254.675436ms ago: executing program 4 (id=1965): r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000840) 214.9µs ago: executing program 5 (id=1966): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000007f000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0xfffffffffffffec9, 0x0}, 0x10) 0s ago: executing program 4 (id=1967): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x28880, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000093}]}) kernel console output (not intermixed with test programs): [ 190.340424][ T7764] F2FS-fs (loop5): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 190.370442][ T7764] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 190.398216][ T7768] loop3: detected capacity change from 0 to 32768 [ 190.411578][ T7764] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7 [ 190.419741][ T7764] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3ffff [ 190.450401][ T7787] loop7: detected capacity change from 0 to 8192 [ 190.536703][ T7764] F2FS-fs (loop5): invalid crc value [ 190.548339][ T7787] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 190.631046][ T7764] F2FS-fs (loop5): Found nat_bits in checkpoint [ 190.824417][ T7764] F2FS-fs (loop5): Start checkpoint disabled! [ 190.859597][ T7654] Set syz1 is full, maxelem 65536 reached [ 190.900422][ T7764] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 190.907668][ T7764] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 191.091443][ T7764] F2FS-fs (loop5): Checkpoint should be enabled. [ 191.344093][ T75] kworker/u4:4: attempt to access beyond end of device [ 191.344093][ T75] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 191.523628][ T7814] netlink: 'syz.3.1045': attribute type 12 has an invalid length. [ 191.583018][ T7814] netlink: 'syz.3.1045': attribute type 29 has an invalid length. [ 191.590898][ T7814] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1045'. [ 191.683101][ T7818] loop4: detected capacity change from 0 to 64 [ 191.750787][ T7818] hfs: unable to locate alternate MDB [ 191.785127][ T7818] hfs: continuing without an alternate MDB [ 192.089004][ T7827] loop4: detected capacity change from 0 to 512 [ 192.208937][ T7827] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 192.261141][ T7827] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.403493][ T7837] loop5: detected capacity change from 0 to 2048 [ 192.453776][ T7837] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 192.542553][ T7837] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 192.563466][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 192.601788][ T7837] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 192.612991][ T7837] UDF-fs: Scanning with blocksize 512 failed [ 192.653653][ T7843] loop7: detected capacity change from 0 to 2048 [ 192.684924][ T7837] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.713067][ T7843] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.816393][ T7851] loop4: detected capacity change from 0 to 8 [ 193.024180][ T7851] SQUASHFS error: Failed to read block 0x2fc: -5 [ 193.063127][ T7851] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 193.117943][ T7851] SQUASHFS error: Unable to read directory block [2fa:0] [ 193.153164][ T7858] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 193.242992][ T26] audit: type=1800 audit(1768677861.068:39): pid=7862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1058" name="file2" dev="loop7" ino=1048654 res=0 errno=0 [ 193.295161][ T7862] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 193.350665][ T7862] FAT-fs (loop7): Filesystem has been set read-only [ 193.548287][ T7875] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 193.572999][ T7875] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 193.609106][ T7875] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 193.637852][ T7875] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=6042e01c, mo2=0000] [ 193.659485][ T7875] EXT4-fs (loop3): failed to initialize system zone (-117) [ 193.701755][ T7875] EXT4-fs (loop3): mount failed [ 193.981333][ T5443] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 194.067798][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.074166][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.201298][ T5443] usb 6-1: Using ep0 maxpacket: 32 [ 194.219793][ T7895] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 194.230369][ T5443] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 194.266770][ T5443] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.266797][ T5443] usb 6-1: Product: syz [ 194.266812][ T5443] usb 6-1: Manufacturer: syz [ 194.266827][ T5443] usb 6-1: SerialNumber: syz [ 194.272558][ T5443] usb 6-1: config 0 descriptor?? [ 194.302203][ T7895] EXT4-fs (loop7): orphan cleanup on readonly fs [ 194.309879][ T7895] Quota error (device loop7): v2_read_file_info: Free block number 1 out of range (1, 6). [ 194.320314][ T7895] EXT4-fs warning (device loop7): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 194.320410][ T7895] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 194.337946][ T7895] EXT4-fs (loop7): 1 truncate cleaned up [ 194.337973][ T7895] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 194.338544][ T5443] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 194.462076][ T6860] EXT4-fs (loop7): unmounting filesystem. [ 194.628836][ T7902] set_capacity_and_notify: 3 callbacks suppressed [ 194.628851][ T7902] loop7: detected capacity change from 0 to 512 [ 194.798027][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1073'. [ 195.142372][ T5443] gspca_stk1135: reg_w 0x5 err -71 [ 195.148617][ T5443] gspca_stk1135: serial bus timeout: status=0x00 [ 195.165654][ T7916] sp0: Synchronizing with TNC [ 195.185513][ T5443] gspca_stk1135: Sensor write failed [ 195.190848][ T5443] gspca_stk1135: serial bus timeout: status=0x00 [ 195.198319][ T7915] [U] è`` [ 195.231713][ T5443] gspca_stk1135: Sensor write failed [ 195.250462][ T5443] gspca_stk1135: serial bus timeout: status=0x00 [ 195.271306][ T5443] gspca_stk1135: Sensor read failed [ 195.276572][ T5443] gspca_stk1135: serial bus timeout: status=0x00 [ 195.311824][ T5443] gspca_stk1135: Sensor read failed [ 195.321321][ T5443] gspca_stk1135: Detected sensor type unknown (0x0) [ 195.338929][ T5443] gspca_stk1135: serial bus timeout: status=0x00 [ 195.346392][ T5443] gspca_stk1135: Sensor read failed [ 195.365189][ T5443] gspca_stk1135: serial bus timeout: status=0x00 [ 195.381071][ T5443] gspca_stk1135: Sensor read failed [ 195.387486][ T5443] gspca_stk1135: serial bus timeout: status=0x00 [ 195.400987][ T5443] gspca_stk1135: Sensor write failed [ 195.406381][ T5443] gspca_stk1135: serial bus timeout: status=0x00 [ 195.420199][ T5443] gspca_stk1135: Sensor write failed [ 195.436098][ T5443] stk1135: probe of 6-1:0.0 failed with error -71 [ 195.461753][ T5443] usb 6-1: USB disconnect, device number 6 [ 196.141382][ T4498] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 196.331261][ T4498] usb 5-1: Using ep0 maxpacket: 8 [ 196.338425][ T4498] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 196.372106][ T4498] usb 5-1: config 179 has no interface number 0 [ 196.401038][ T4498] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 196.417912][ T4498] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 196.445927][ T4498] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 196.464400][ T4498] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 196.479125][ T4498] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 196.535529][ T4498] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 196.550991][ T4498] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.584802][ T7943] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 196.646736][ T7920] loop3: detected capacity change from 0 to 65536 [ 196.844563][ T7963] loop7: detected capacity change from 0 to 4096 [ 196.869783][ T7920] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 196.881472][ T7920] XFS (loop3): Mounting V5 Filesystem [ 196.895863][ T4498] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input11 [ 196.927991][ T7963] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 196.995312][ T7939] loop5: detected capacity change from 0 to 40427 [ 197.045830][ T7920] XFS (loop3): Ending clean mount [ 197.091302][ T4551] usb 5-1: USB disconnect, device number 10 [ 197.091313][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 197.091349][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 197.115410][ T7939] F2FS-fs (loop5): invalid crc value [ 197.146183][ T7939] F2FS-fs (loop5): Found nat_bits in checkpoint [ 197.156922][ T4551] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 197.239718][ T7963] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 197.302287][ T7939] F2FS-fs (loop5): Start checkpoint disabled! [ 197.384183][ T7939] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 197.812493][ T4272] XFS (loop3): Unmounting Filesystem [ 197.905878][ T7988] loop4: detected capacity change from 0 to 64 [ 197.948591][ T34] kworker/u4:2: attempt to access beyond end of device [ 197.948591][ T34] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 198.004728][ T26] audit: type=1800 audit(1768677865.828:40): pid=7988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1095" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 198.088986][ T7995] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1098'. [ 198.764707][ T8013] loop7: detected capacity change from 0 to 256 [ 198.843226][ T8013] exfat: Deprecated parameter 'namecase' [ 198.933160][ T8013] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 199.422570][ T8004] loop2: detected capacity change from 0 to 32768 [ 199.567246][ T8004] XFS (loop2): Mounting V5 Filesystem [ 199.633337][ T8007] loop4: detected capacity change from 0 to 32768 [ 199.682095][ T8004] XFS (loop2): Ending clean mount [ 199.726881][ T8004] XFS (loop2): Quotacheck needed: Please wait. [ 199.784080][ T8007] XFS (loop4): Mounting V5 Filesystem [ 199.935843][ T8004] XFS (loop2): Quotacheck: Done. [ 199.972155][ T8007] XFS (loop4): Ending clean mount [ 200.007304][ T8011] loop5: detected capacity change from 0 to 40427 [ 200.031926][ T8007] XFS (loop4): Quotacheck needed: Please wait. [ 200.109303][ T8007] XFS (loop4): Quotacheck: Done. [ 200.137200][ T8011] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 200.178291][ T4276] XFS (loop2): Unmounting Filesystem [ 200.188244][ T8011] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 200.308036][ T8011] F2FS-fs (loop5): Found nat_bits in checkpoint [ 200.365053][ T4278] XFS (loop4): Unmounting Filesystem [ 200.442629][ T8016] loop3: detected capacity change from 0 to 40427 [ 200.461627][ T8011] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 200.480602][ T8011] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 200.496300][ T8016] F2FS-fs (loop3): invalid crc value [ 200.542653][ T8016] F2FS-fs (loop3): Found nat_bits in checkpoint [ 200.742324][ T8060] loop7: detected capacity change from 0 to 2048 [ 200.761601][ T8016] F2FS-fs (loop3): Start checkpoint disabled! [ 200.790460][ T8060] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=3932051, location=3932051 [ 200.837451][ T8060] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.846439][ T8016] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 201.122245][ T46] kworker/u4:3: attempt to access beyond end of device [ 201.122245][ T46] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 201.654144][ T8079] loop3: detected capacity change from 0 to 512 [ 201.776413][ T8079] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 201.851971][ T8079] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.071837][ T8079] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #12: comm syz.3.1115: corrupted xattr block 6 [ 202.171811][ T8079] overlayfs: failed to get origin (-117) [ 202.192086][ T8079] EXT4-fs error (device loop3): ext4_xattr_block_find:1825: inode #12: comm syz.3.1115: corrupted xattr block 6 [ 202.208059][ T8102] loop5: detected capacity change from 0 to 4096 [ 202.263006][ T8079] overlayfs: failed to verify origin (/, ino=2, err=-117) [ 202.273448][ T8079] overlayfs: failed to verify upper root origin [ 202.334677][ T8102] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 202.447678][ T8111] mmap: syz.7.1121 (8111) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 202.488686][ T8102] ntfs3: loop5: ino=1e, "file1" The size of extended attributes must not exceed 64KiB [ 202.526810][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 202.696263][ T5654] ntfs3: loop5: ntfs_sync_fs r=9 failed, -22. [ 202.731532][ T5654] ntfs3: loop5: ntfs_evict_inode r=9 failed, -22. [ 202.826484][ T8122] input: syz1 as /devices/virtual/input/input12 [ 203.055364][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1127'. [ 203.296575][ T8104] loop4: detected capacity change from 0 to 32768 [ 204.150041][ T8134] loop2: detected capacity change from 0 to 131072 [ 204.176490][ T8148] loop3: detected capacity change from 0 to 736 [ 204.222697][ T8134] F2FS-fs (loop2): Found nat_bits in checkpoint [ 204.247117][ T8118] loop7: detected capacity change from 0 to 32768 [ 204.263389][ T8134] F2FS-fs (loop2): recover fsync data on readonly fs [ 204.271327][ T8134] F2FS-fs (loop2): Mounted with checkpoint version = 1b41e955 [ 204.412127][ T8118] XFS (loop7): Mounting V5 Filesystem [ 204.554611][ T8118] XFS (loop7): Ending clean mount [ 204.706668][ T6860] XFS (loop7): Unmounting Filesystem [ 204.891129][ T4342] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 205.073333][ T8174] loop3: detected capacity change from 0 to 2048 [ 205.094520][ T4342] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 205.123023][ T8174] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 205.136969][ T4342] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.174145][ T4342] usb 6-1: config 0 descriptor?? [ 205.185449][ T8174] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 205.231147][ T8174] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 205.265786][ T8174] UDF-fs: Scanning with blocksize 512 failed [ 205.307882][ T8174] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.559488][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1145'. [ 206.011360][ T4342] usb 6-1: Cannot set autoneg [ 206.016218][ T4342] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 [ 206.079698][ T4342] usb 6-1: USB disconnect, device number 7 [ 206.382256][ T8212] loop7: detected capacity change from 0 to 512 [ 206.427405][ T8212] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 206.494673][ T8212] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 206.553053][ T8212] EXT4-fs (loop7): 1 truncate cleaned up [ 206.558880][ T8212] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 206.620699][ T6860] EXT4-fs (loop7): unmounting filesystem. [ 206.916760][ T8224] loop7: detected capacity change from 0 to 4096 [ 206.946467][ T8224] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 207.075195][ T8224] ntfs3: loop7: Inode r=19 is not in use! [ 207.094966][ T8224] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 207.137239][ T8238] loop5: detected capacity change from 0 to 2048 [ 207.138557][ T8224] ntfs3: loop7: ino=1d, "file1" failed to open parent directory r=400 to update [ 207.215669][ T8238] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c118, mo2=0082] [ 207.237219][ T8238] System zones: 0-7 [ 207.251210][ T8224] ntfs3: loop7: ino=1d, "file1" failed to open parent directory r=400 to update [ 207.290468][ T8238] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 207.336899][ T8246] loop2: detected capacity change from 0 to 128 [ 207.370611][ T8246] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 207.410001][ T8246] hpfs: filesystem error: improperly stopped [ 207.451035][ T8246] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 207.482488][ T8246] hpfs: You really don't want any checks? You are crazy... [ 207.489979][ T8246] hpfs: hpfs_map_sector(): read error [ 207.503455][ T8247] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 207.560995][ T8246] hpfs: code page support is disabled [ 207.566624][ T8246] hpfs: hpfs_map_4sectors(): unaligned read [ 207.594072][ T8246] hpfs: hpfs_map_4sectors(): unaligned read [ 207.600024][ T8246] hpfs: filesystem error: unable to find root dir [ 207.747920][ T8251] loop7: detected capacity change from 0 to 1024 [ 207.768007][ T8251] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 207.797234][ T8251] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 207.845881][ T8251] EXT4-fs error (device loop7): ext4_get_journal_inode:5756: inode #5: comm syz.7.1169: unexpected bad inode w/o EXT4_IGET_BAD [ 207.941170][ T8251] EXT4-fs (loop7): no journal found [ 207.946416][ T8251] EXT4-fs (loop7): can't get journal size [ 208.010421][ T8251] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8800e11c, mo2=0102] [ 208.063269][ T8251] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 208.138892][ T8232] loop3: detected capacity change from 0 to 40427 [ 208.152529][ T8251] EXT4-fs error (device loop7): ext4_inlinedir_to_tree:1450: inode #12: block 16: comm syz.7.1169: path /60/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 208.158581][ T8261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1173'. [ 208.201417][ T8232] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 208.219396][ T8232] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 208.221106][ T4342] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 208.233615][ T8261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1173'. [ 208.248107][ T8232] F2FS-fs (loop3): invalid crc value [ 208.280002][ T8261] device team0 entered promiscuous mode [ 208.287143][ T8261] device team_slave_0 entered promiscuous mode [ 208.295139][ T8261] device team_slave_1 entered promiscuous mode [ 208.305134][ T8232] F2FS-fs (loop3): Found nat_bits in checkpoint [ 208.324412][ T8261] device team0 left promiscuous mode [ 208.325970][ T6860] EXT4-fs (loop7): unmounting filesystem. [ 208.329984][ T8261] device team_slave_0 left promiscuous mode [ 208.361213][ T8261] device team_slave_1 left promiscuous mode [ 208.414980][ T8232] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 208.422155][ T4342] usb 5-1: Using ep0 maxpacket: 8 [ 208.426002][ T4342] usb 5-1: unable to get BOS descriptor or descriptor too short [ 208.455955][ T4342] usb 5-1: config 4 interface 0 has no altsetting 0 [ 208.462888][ T8232] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 208.487255][ T4342] usb 5-1: string descriptor 0 read error: -22 [ 208.513172][ T4342] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 208.544536][ T4342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.600637][ T4342] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 208.630159][ T4342] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 208.699817][ T4342] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 208.720327][ T4342] usb 5-1: media controller created [ 208.779478][ T8273] loop7: detected capacity change from 0 to 64 [ 208.833871][ T4342] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 209.049287][ T4342] zl10353_read_register: readreg error (reg=127, ret==0) [ 209.141422][ T8283] 9pnet: p9_errstr2errno: server reported unknown error [ 209.160299][ T4342] usb 5-1: USB disconnect, device number 11 [ 209.410643][ T8288] program syz.2.1182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.867205][ T8302] loop4: detected capacity change from 0 to 256 [ 209.942191][ T8304] loop3: detected capacity change from 0 to 8 [ 210.052197][ T26] audit: type=1800 audit(1768677877.878:41): pid=8238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1162" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 210.469583][ T5654] EXT4-fs (loop5): unmounting filesystem. [ 210.518230][ T8293] loop7: detected capacity change from 0 to 32768 [ 210.577023][ T8296] loop2: detected capacity change from 0 to 32768 [ 210.657046][ T8296] XFS: ikeep mount option is deprecated. [ 210.883534][ T8296] XFS (loop2): Mounting V5 Filesystem [ 210.992001][ T8296] XFS (loop2): Ending clean mount [ 211.014209][ T8321] loop5: detected capacity change from 0 to 4096 [ 211.043113][ T8336] loop4: detected capacity change from 0 to 256 [ 211.200827][ T4276] XFS (loop2): Unmounting Filesystem [ 211.322791][ T5654] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 211.329254][ T5654] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 211.610231][ T26] audit: type=1326 audit(1768677879.428:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8346 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51d59acb9 code=0x7ffc0000 [ 211.680880][ T26] audit: type=1326 audit(1768677879.458:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8346 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51d59acb9 code=0x7ffc0000 [ 211.736299][ T26] audit: type=1326 audit(1768677879.458:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8346 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc51d59acb9 code=0x7ffc0000 [ 211.821174][ T4552] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 211.879658][ T26] audit: type=1326 audit(1768677879.458:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8346 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51d59acb9 code=0x7ffc0000 [ 211.951012][ T26] audit: type=1326 audit(1768677879.458:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8346 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51d59acb9 code=0x7ffc0000 [ 212.017380][ T4552] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 212.060970][ T4552] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 212.083236][ T4552] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 212.096603][ T26] audit: type=1326 audit(1768677879.458:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8346 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc51d59acb9 code=0x7ffc0000 [ 212.128933][ T4552] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 212.153251][ T4552] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 212.164653][ T26] audit: type=1326 audit(1768677879.458:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8346 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51d59acb9 code=0x7ffc0000 [ 212.205346][ T4552] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.245057][ T4552] usb 6-1: Product: syz [ 212.261990][ T4552] usb 6-1: Manufacturer: syz [ 212.270001][ T26] audit: type=1326 audit(1768677879.458:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8346 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51d59acb9 code=0x7ffc0000 [ 212.303049][ T4552] usb 6-1: SerialNumber: syz [ 212.329940][ T4552] usb 6-1: config 0 descriptor?? [ 212.356887][ T8374] cifs: Unknown parameter 'ÿ' [ 212.537957][ T8377] loop7: detected capacity change from 0 to 512 [ 212.544931][ T4552] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 212.598921][ T8377] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 212.688590][ T8377] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 212.698479][ T8377] ext4 filesystem being mounted at /68/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.748001][ T8347] usb 6-1: Couldn't submit interrupt_out_urb -90 [ 212.764631][ T8377] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 212.773451][ T4552] usb 6-1: USB disconnect, device number 8 [ 212.870400][ T6860] EXT4-fs (loop7): unmounting filesystem. [ 213.006091][ T8393] loop4: detected capacity change from 0 to 128 [ 213.087485][ T8393] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 213.146977][ T8393] hpfs: filesystem error: improperly stopped [ 213.171010][ T8393] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 213.191132][ T8393] hpfs: You really don't want any checks? You are crazy... [ 213.226340][ T8393] hpfs: hpfs_map_sector(): read error [ 213.244939][ T8405] loop7: detected capacity change from 0 to 2048 [ 213.251470][ T8393] hpfs: code page support is disabled [ 213.256979][ T8393] hpfs: hpfs_map_4sectors(): unaligned read [ 213.312949][ T8405] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.313223][ T8393] hpfs: hpfs_map_4sectors(): unaligned read [ 213.364951][ T8393] hpfs: filesystem error: unable to find root dir [ 213.441487][ T8393] hpfs: hpfs_map_4sectors(): unaligned read [ 213.450959][ T5510] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 213.493695][ T8411] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 213.656681][ T5510] usb 3-1: config 0 has an invalid interface number: 93 but max is 0 [ 213.679906][ T5510] usb 3-1: config 0 has no interface number 0 [ 213.719564][ T5510] usb 3-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 213.735195][ T5510] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 213.754371][ T5510] usb 3-1: Product: syz [ 213.779844][ T5510] usb 3-1: Manufacturer: syz [ 213.791405][ T5510] usb 3-1: SerialNumber: syz [ 213.821915][ T5510] usb 3-1: config 0 descriptor?? [ 213.853862][ T8419] loop4: detected capacity change from 0 to 136 [ 214.045149][ T5510] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 214.081819][ T5510] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 214.099140][ T5510] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 214.118494][ T5510] usb 3-1: media controller created [ 214.136327][ T5510] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.173373][ T8424] sctp: [Deprecated]: syz.5.1223 (pid 8424) Use of int in max_burst socket option. [ 214.173373][ T8424] Use struct sctp_assoc_value instead [ 214.371044][ T5510] DVB: Unable to find symbol dib7000p_attach() [ 214.380680][ T5510] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 214.430678][ T5510] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 214.460032][ T5510] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 214.499670][ T5510] usb 3-1: media controller created [ 214.522896][ T5510] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.569551][ T5510] dib0700: the master dib7090 has to be initialized first [ 214.601040][ T5510] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 214.935756][ T5510] rc_core: IR keymap rc-dib0700-rc5 not found [ 214.960950][ T5510] Registered IR keymap rc-empty [ 214.966062][ T5510] dvb-usb: could not initialize remote control. [ 215.011039][ T5510] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 215.073316][ T5510] usb 3-1: USB disconnect, device number 8 [ 215.148549][ T5510] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 215.311702][ T8428] loop7: detected capacity change from 0 to 40427 [ 215.338296][ T8428] F2FS-fs (loop7): invalid crc value [ 215.368816][ T8428] F2FS-fs (loop7): Found nat_bits in checkpoint [ 215.411117][ T5443] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 215.503225][ T8428] F2FS-fs (loop7): Start checkpoint disabled! [ 215.530516][ T8428] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 215.594450][ T8437] loop4: detected capacity change from 0 to 40427 [ 215.632788][ T5443] usb 4-1: config 0 has no interfaces? [ 215.639331][ T5443] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 215.654279][ T8437] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 215.695709][ T8469] loop5: detected capacity change from 0 to 512 [ 215.703521][ T5443] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.713634][ T8437] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 215.751241][ T4512] blk_print_req_error: 14 callbacks suppressed [ 215.751254][ T4512] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 215.752203][ T5443] usb 4-1: config 0 descriptor?? [ 215.786000][ T8437] F2FS-fs (loop4): invalid crc value [ 215.820843][ T8437] F2FS-fs (loop4): Found nat_bits in checkpoint [ 215.958046][ T8437] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 215.970959][ T8437] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 215.989133][ T9] kworker/u4:0: attempt to access beyond end of device [ 215.989133][ T9] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 216.191506][ T26] audit: type=1800 audit(1768677884.018:50): pid=8437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1227" name="file1" dev="loop4" ino=455 res=0 errno=0 [ 216.272585][ T5443] usb 4-1: USB disconnect, device number 7 [ 216.288137][ T8437] syz.4.1227: attempt to access beyond end of device [ 216.288137][ T8437] loop4: rw=2049, sector=77824, nr_sectors = 800 limit=40427 [ 216.302218][ T9] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 216.309622][ T9] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 217.054709][ T8500] loop7: detected capacity change from 0 to 1024 [ 217.091787][ T8500] EXT4-fs: Ignoring removed nobh option [ 217.132741][ T8500] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 217.200514][ T8500] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 217.245302][ T8481] loop5: detected capacity change from 0 to 40427 [ 217.272363][ T8481] F2FS-fs (loop5): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 217.283634][ T8506] loop4: detected capacity change from 0 to 2048 [ 217.291387][ T8481] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 217.299671][ T8481] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7 [ 217.360054][ T8481] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3ffff [ 217.394313][ T8506] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c118, mo2=0082] [ 217.421721][ T8506] System zones: 0-7 [ 217.426575][ T8506] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 217.467606][ T8481] F2FS-fs (loop5): invalid crc value [ 217.538415][ T8481] F2FS-fs (loop5): Found nat_bits in checkpoint [ 217.592625][ T6860] EXT4-fs (loop7): unmounting filesystem. [ 217.617447][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1247'. [ 217.629598][ T8524] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 217.647737][ T8520] device erspan0 left promiscuous mode [ 217.735090][ T8481] F2FS-fs (loop5): Start checkpoint disabled! [ 217.789616][ T8481] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 217.809730][ T8481] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 217.886762][ T8481] F2FS-fs (loop5): sanity_check_inode: corrupted inode i_blocks i_ino=b iblocks=0, run fsck to fix. [ 218.142135][ T8535] loop7: detected capacity change from 0 to 256 [ 218.176633][ T8535] exfat: Deprecated parameter 'namecase' [ 218.236037][ T34] kworker/u4:2: attempt to access beyond end of device [ 218.236037][ T34] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 218.277392][ T8535] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 219.121574][ T8565] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 219.163380][ T8560] loop2: detected capacity change from 0 to 8192 [ 219.193875][ T8560] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 219.227827][ T8560] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 219.239149][ T8560] REISERFS (device loop2): using ordered data mode [ 219.261187][ T8560] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 219.311906][ T8560] REISERFS (device loop2): checking transaction log (loop2) [ 219.336136][ T8560] REISERFS (device loop2): Using r5 hash to sort names [ 219.357416][ T8560] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 219.391181][ T8560] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 219.765013][ T8587] loop5: detected capacity change from 0 to 256 [ 220.039410][ T8591] kernel read not supported for file /file1 (pid: 8591 comm: syz.5.1270) [ 220.086723][ T26] audit: type=1800 audit(1768677887.908:51): pid=8591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1270" name="file1" dev="mqueue" ino=46981 res=0 errno=0 [ 220.177824][ T26] audit: type=1800 audit(1768677887.998:52): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1240" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 220.310799][ T8600] tipc: Started in network mode [ 220.331836][ T8600] tipc: Node identity type_len, cluster identity 4711 [ 220.355618][ T8600] tipc: Enabling of bearer rejected, failed to enable media [ 220.455433][ T8583] loop3: detected capacity change from 0 to 32768 [ 220.488167][ T8583] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1267 (8583) [ 220.536255][ T8583] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 220.566793][ T8583] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 220.598470][ T8583] BTRFS info (device loop3): using free space tree [ 220.789940][ T8583] BTRFS info (device loop3): enabling ssd optimizations [ 221.173899][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 221.357031][ T4272] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 221.821018][ T4552] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 221.836244][ T8653] loop7: detected capacity change from 0 to 256 [ 221.853487][ T4524] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop3 scanned by udevd (4524) [ 221.893522][ T8653] FAT-fs (loop7): Directory bread(block 64) failed [ 221.941204][ T8653] FAT-fs (loop7): Directory bread(block 65) failed [ 221.962031][ T8653] FAT-fs (loop7): Directory bread(block 66) failed [ 221.999640][ T8658] __sock_release: fasync list not empty! [ 222.009255][ T8653] FAT-fs (loop7): Directory bread(block 67) failed [ 222.022128][ T4552] usb 6-1: Using ep0 maxpacket: 16 [ 222.029816][ T4552] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 222.061105][ T4552] usb 6-1: config 0 has no interface number 0 [ 222.067261][ T4552] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 222.101102][ T8653] FAT-fs (loop7): Directory bread(block 68) failed [ 222.121127][ T4552] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 222.153802][ T8653] FAT-fs (loop7): Directory bread(block 69) failed [ 222.164755][ T8653] FAT-fs (loop7): Directory bread(block 70) failed [ 222.176390][ T4552] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 222.212832][ T4552] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.237822][ T8653] FAT-fs (loop7): Directory bread(block 71) failed [ 222.264885][ T8653] FAT-fs (loop7): Directory bread(block 72) failed [ 222.272138][ T4552] usb 6-1: Product: syz [ 222.285066][ T4552] usb 6-1: Manufacturer: syz [ 222.300227][ T8653] FAT-fs (loop7): Directory bread(block 73) failed [ 222.317296][ T4552] usb 6-1: SerialNumber: syz [ 222.337165][ T4552] usb 6-1: config 0 descriptor?? [ 222.361067][ T8646] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 222.368316][ T8646] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 222.603542][ T8646] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 222.651130][ T8646] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 223.179072][ T8698] loop7: detected capacity change from 0 to 128 [ 223.236840][ T8698] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 223.278436][ T8700] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 223.303474][ T8700] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 223.313742][ T4552] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 223.334040][ T4552] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 223.349424][ T8700] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 223.350385][ T8698] hpfs: filesystem error: improperly stopped [ 223.369259][ T8700] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 223.374689][ T8698] [ 223.381121][ T4552] asix: probe of 6-1:0.251 failed with error -71 [ 223.402479][ T8700] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 223.409568][ T8700] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 223.430320][ T8698] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 223.454576][ T4552] usb 6-1: USB disconnect, device number 9 [ 223.469254][ T8698] hpfs: You really don't want any checks? You are crazy... [ 223.486121][ T8698] hpfs: hpfs_map_sector(): read error [ 223.500702][ T8698] hpfs: code page support is disabled [ 223.517156][ T8700] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 223.537546][ T8698] hpfs: hpfs_map_4sectors(): unaligned read [ 223.567000][ T8698] hpfs: hpfs_map_4sectors(): unaligned read [ 223.589623][ T8698] hpfs: filesystem error: unable to find root dir [ 223.600674][ T8700] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 223.675954][ T8700] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 223.708410][ T8700] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 223.767585][ T8700] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 223.789545][ T8700] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 223.796800][ T8700] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 223.820547][ T8700] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 223.854842][ T8700] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 223.899612][ T8700] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 223.964590][ T8700] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 223.981189][ T8700] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 224.041249][ T8700] comedi comedi3: 8255: I/O port conflict (0x10002,4) [ 224.048842][ T8700] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 224.126686][ T8730] loop4: detected capacity change from 0 to 2048 [ 224.255486][ T8730] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 224.389969][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 224.471415][ T8748] loop2: detected capacity change from 0 to 64 [ 225.118639][ T8721] loop7: detected capacity change from 0 to 40427 [ 225.137025][ T8721] F2FS-fs (loop7): invalid crc value [ 225.165834][ T8721] F2FS-fs (loop7): Found nat_bits in checkpoint [ 225.298375][ T8721] F2FS-fs (loop7): Start checkpoint disabled! [ 225.326555][ T8721] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 225.416081][ T8779] loop3: detected capacity change from 0 to 4096 [ 225.447447][ T8779] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 225.683055][ T4272] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 225.733459][ T4272] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 225.740019][ T4272] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 226.014867][ T8797] loop5: detected capacity change from 0 to 512 [ 226.159462][ T8797] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 226.179812][ T8797] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.407252][ T5654] EXT4-fs (loop5): unmounting filesystem. [ 226.626526][ T8817] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1337'. [ 226.782767][ T8823] loop8: detected capacity change from 0 to 7 [ 226.821024][ T8823] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 226.849207][ T8823] loop8: partition table partially beyond EOD, truncated [ 226.865833][ T8823] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 226.902869][ T8823] loop8: p2 start 956478 is beyond EOD, truncated [ 226.999994][ T8828] loop5: detected capacity change from 0 to 256 [ 227.024399][ T4524] udevd[4524]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 227.078800][ T8828] FAT-fs (loop5): Directory bread(block 64) failed [ 227.109783][ T8828] FAT-fs (loop5): Directory bread(block 65) failed [ 227.161853][ T8828] FAT-fs (loop5): Directory bread(block 66) failed [ 227.168629][ T8828] FAT-fs (loop5): Directory bread(block 67) failed [ 227.204379][ T8828] FAT-fs (loop5): Directory bread(block 68) failed [ 227.221045][ T8828] FAT-fs (loop5): Directory bread(block 69) failed [ 227.263182][ T8828] FAT-fs (loop5): Directory bread(block 70) failed [ 227.269733][ T8828] FAT-fs (loop5): Directory bread(block 71) failed [ 227.309781][ T8828] FAT-fs (loop5): Directory bread(block 72) failed [ 227.335169][ T8828] FAT-fs (loop5): Directory bread(block 73) failed [ 227.346320][ T8809] loop3: detected capacity change from 0 to 40427 [ 227.367443][ T8809] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 227.430936][ T8809] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 227.517504][ T8809] F2FS-fs (loop3): Found nat_bits in checkpoint [ 227.726307][ T8809] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 227.739263][ T8851] loop7: detected capacity change from 0 to 164 [ 227.764104][ T8809] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 227.815459][ T8851] Unable to read rock-ridge attributes [ 227.861475][ T8851] Unable to read rock-ridge attributes [ 227.897397][ T8851] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 227.922054][ T26] audit: type=1800 audit(1768677895.748:53): pid=8809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1346" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 228.071976][ T4272] syz-executor: attempt to access beyond end of device [ 228.071976][ T4272] loop3: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 228.467061][ T8838] loop2: detected capacity change from 0 to 40427 [ 228.506796][ T8838] F2FS-fs (loop2): invalid crc value [ 228.530556][ T8838] F2FS-fs (loop2): Found nat_bits in checkpoint [ 228.677444][ T8838] F2FS-fs (loop2): Start checkpoint disabled! [ 228.717303][ T8838] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 229.159648][ T8887] loop4: detected capacity change from 0 to 2048 [ 229.184695][ T8887] EXT4-fs: Ignoring removed mblk_io_submit option [ 229.263220][ T8887] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 229.303677][ T8896] loop5: detected capacity change from 0 to 512 [ 229.325023][ T8887] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1359: bg 0: block 234: padding at end of block bitmap is not set [ 229.439286][ T8896] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 229.451245][ T8896] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.501549][ T8887] EXT4-fs (loop4): Remounting filesystem read-only [ 229.698445][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 229.736551][ T5654] EXT4-fs (loop5): unmounting filesystem. [ 230.397679][ T8906] loop2: detected capacity change from 0 to 32768 [ 230.469637][ T8906] I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.551038][ T8906] lbmIODone: I/O error in JFS log [ 230.577762][ T8906] *** Log Format Error ! *** [ 230.607047][ T8906] lmLogInit: exit(-22) [ 230.631444][ T8906] lmLogOpen: exit(-22) [ 230.696932][ T8930] loop4: detected capacity change from 0 to 2048 [ 230.788487][ T8930] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 230.808249][ T8906] jfs_dirty_inode called on read-only volume [ 230.833939][ T8930] UDF-fs: Scanning with blocksize 512 failed [ 230.840013][ T8906] Is remount racy? [ 230.901050][ T8930] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.156897][ T8915] loop5: detected capacity change from 0 to 40427 [ 231.278571][ T8915] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3ffff [ 231.305739][ T8915] F2FS-fs (loop5): invalid crc value [ 231.342248][ T8942] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1376'. [ 231.399537][ T8915] F2FS-fs (loop5): Found nat_bits in checkpoint [ 231.581504][ T8915] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 232.206647][ T8973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1396'. [ 232.464914][ T8986] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 232.547934][ T8990] loop2: detected capacity change from 0 to 64 [ 233.013776][ T9002] loop5: detected capacity change from 0 to 256 [ 233.178899][ T8971] loop3: detected capacity change from 0 to 32768 [ 233.346912][ T8971] XFS (loop3): Mounting V5 Filesystem [ 233.537839][ T8971] XFS (loop3): Ending clean mount [ 233.559875][ T8971] XFS (loop3): Quotacheck needed: Please wait. [ 233.626047][ T8971] XFS (loop3): Quotacheck: Done. [ 233.637372][ T8994] loop4: detected capacity change from 0 to 32768 [ 233.699324][ T8994] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1391 (8994) [ 233.767914][ T8994] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.785815][ T4272] XFS (loop3): Unmounting Filesystem [ 233.792284][ T8994] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 233.801156][ T8994] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 233.811650][ T8994] BTRFS info (device loop4): force zstd compression, level 3 [ 233.819185][ T8994] BTRFS info (device loop4): turning on sync discard [ 233.826613][ T8994] BTRFS info (device loop4): force clearing of disk cache [ 233.834995][ T8994] BTRFS info (device loop4): enabling disk space caching [ 233.843395][ T8994] BTRFS info (device loop4): turning off discard [ 233.849750][ T8994] BTRFS info (device loop4): disk space caching is enabled [ 233.911191][ T8994] BTRFS info (device loop4): enabling ssd optimizations [ 233.928349][ T8994] BTRFS info (device loop4): rebuilding free space tree [ 233.972703][ T8994] BTRFS info (device loop4): disabling free space tree [ 233.981986][ T8994] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 233.995205][ T9047] loop2: detected capacity change from 0 to 64 [ 234.039044][ T8994] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 234.249871][ T26] audit: type=1800 audit(1768677902.068:54): pid=8994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1391" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 234.518572][ T4278] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 234.664308][ T9060] loop7: detected capacity change from 0 to 1024 [ 234.735314][ T9060] EXT4-fs: Ignoring removed nobh option [ 234.772590][ T9060] EXT4-fs: Ignoring removed bh option [ 234.862406][ T9060] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 234.978879][ T9060] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 235.262417][ T6860] EXT4-fs (loop7): unmounting filesystem. [ 235.757447][ T9071] loop5: detected capacity change from 0 to 32768 [ 235.840508][ T9071] I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.880338][ T9071] lbmIODone: I/O error in JFS log [ 235.890993][ T9071] *** Log Format Error ! *** [ 235.911196][ T9071] lmLogInit: exit(-22) [ 235.921286][ T9071] lmLogOpen: exit(-22) [ 235.946782][ T9077] loop2: detected capacity change from 0 to 32768 [ 235.968722][ T9071] jfs_dirty_inode called on read-only volume [ 235.986844][ T9071] Is remount racy? [ 236.069020][ T9077] XFS (loop2): Mounting V5 Filesystem [ 236.178689][ T9077] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 236.241662][ T9077] XFS (loop2): Starting recovery (logdev: internal) [ 236.324997][ T9077] XFS (loop2): Ending recovery (logdev: internal) [ 236.349441][ T9077] XFS (loop2): Quotacheck needed: Please wait. [ 236.349620][ T9103] loop3: detected capacity change from 0 to 1024 [ 236.411777][ T9103] EXT4-fs: Ignoring removed nobh option [ 236.431612][ T9103] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.489717][ T9077] XFS (loop2): Quotacheck: Done. [ 236.502522][ T9103] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 236.644309][ T9103] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 236.811980][ T4276] XFS (loop2): Unmounting Filesystem [ 236.857968][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 236.948215][ T9114] loop7: detected capacity change from 0 to 256 [ 237.027792][ T9114] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.048288][ T9114] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 237.121205][ T9114] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 237.205649][ T9120] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1427'. [ 237.623530][ T9131] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1431'. [ 237.902936][ T9141] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 237.908831][ T9143] set_capacity_and_notify: 1 callbacks suppressed [ 237.908844][ T9143] loop2: detected capacity change from 0 to 512 [ 237.945789][ T9142] loop5: detected capacity change from 0 to 2048 [ 237.982206][ T9142] EXT4-fs: Ignoring removed mblk_io_submit option [ 238.003727][ T9143] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 238.035783][ T9143] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.080453][ T9123] loop4: detected capacity change from 0 to 32768 [ 238.115318][ T9142] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 238.166083][ T9123] [ 238.166083][ T9123] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.166083][ T9123] [ 238.221867][ T9123] [ 238.221867][ T9123] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.221867][ T9123] [ 238.273868][ T9154] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1436: bg 0: block 234: padding at end of block bitmap is not set [ 238.298440][ T9123] [ 238.298440][ T9123] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.298440][ T9123] [ 238.324299][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 238.326782][ T9154] EXT4-fs (loop5): Remounting filesystem read-only [ 238.368738][ T9154] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 238.391782][ T9154] EXT4-fs (loop5): Remounting filesystem read-only [ 238.408154][ T9158] loop3: detected capacity change from 0 to 64 [ 238.538546][ T9160] loop2: detected capacity change from 0 to 164 [ 238.613805][ T9162] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1445'. [ 238.643765][ T9160] Unable to read rock-ridge attributes [ 238.708336][ T5654] EXT4-fs (loop5): unmounting filesystem. [ 239.618549][ T9202] netlink: 'syz.4.1461': attribute type 5 has an invalid length. [ 239.897799][ T9214] team0: Device gtp0 is of different type [ 239.917965][ T9206] loop2: detected capacity change from 0 to 8192 [ 239.970267][ T9206] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 240.132970][ T9206] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 240.204763][ T9206] REISERFS (device loop2): using ordered data mode [ 240.282295][ T9206] reiserfs: using flush barriers [ 240.327220][ T9206] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 240.415504][ T9206] REISERFS (device loop2): checking transaction log (loop2) [ 240.460267][ T9200] loop3: detected capacity change from 0 to 40427 [ 240.491074][ T9206] REISERFS (device loop2): Using r5 hash to sort names [ 240.518685][ T9206] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 240.521415][ T9200] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 240.577401][ T9206] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 240.577956][ T9200] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 240.665266][ T9200] F2FS-fs (loop3): invalid crc value [ 240.737876][ T9200] F2FS-fs (loop3): Found nat_bits in checkpoint [ 240.909622][ T9245] netlink: 'syz.4.1476': attribute type 1 has an invalid length. [ 240.945734][ T9200] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 240.964798][ T9200] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 240.984394][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1476'. [ 241.164734][ T4272] syz-executor: attempt to access beyond end of device [ 241.164734][ T4272] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 241.220668][ T9250] loop2: detected capacity change from 0 to 16 [ 241.289484][ T9250] erofs: (device loop2): mounted with root inode @ nid 36. [ 241.338340][ T9253] loop7: detected capacity change from 0 to 256 [ 241.391374][ T9253] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 241.457008][ T9253] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 242.270710][ T9273] [U] ^G„ [ 242.281880][ T9272] [U] ^G [ 242.378778][ T9257] loop2: detected capacity change from 0 to 32768 [ 242.448377][ T9257] read_mapping_page failed! [ 242.477224][ T9257] ERROR: (device loop2): txCommit: [ 242.477224][ T9257] [ 242.533997][ T9280] read_mapping_page failed! [ 242.538542][ T9280] ERROR: (device loop2): txCommit: [ 242.538542][ T9280] [ 242.601119][ T129] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 242.716054][ T5715] read_mapping_page failed! [ 242.730984][ T5715] ERROR: (device loop2): txCommit: [ 242.730984][ T5715] [ 242.770332][ T5715] jfs_write_inode: jfs_commit_inode failed! [ 242.793556][ T129] usb 6-1: unable to get BOS descriptor or descriptor too short [ 242.810600][ T129] usb 6-1: config 129 has an invalid interface number: 135 but max is 0 [ 242.822916][ T129] usb 6-1: config 129 has an invalid interface number: 5 but max is 0 [ 242.831883][ T9266] XFS (loop4): Mounting V5 Filesystem [ 242.858604][ T129] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 242.930999][ T129] usb 6-1: config 129 has no interface number 0 [ 242.937290][ T129] usb 6-1: config 129 has no interface number 1 [ 242.961546][ T129] usb 6-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 243.015961][ T129] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 243.055798][ T129] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 243.068934][ T9279] set_capacity_and_notify: 1 callbacks suppressed [ 243.068945][ T9279] loop7: detected capacity change from 0 to 32768 [ 243.093210][ T9279] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10 [ 243.157006][ T129] usb 6-1: config 129 interface 135 has no altsetting 0 [ 243.187720][ T129] usb 6-1: config 129 interface 5 has no altsetting 0 [ 243.219423][ T9266] XFS (loop4): Ending clean mount [ 243.227784][ T129] usb 6-1: string descriptor 0 read error: -22 [ 243.247316][ T9266] XFS (loop4): Quotacheck needed: Please wait. [ 243.266061][ T129] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 243.301378][ T129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.327402][ T129] usb 6-1: MIDIStreaming interface descriptor not found [ 243.333948][ T9295] netlink: 'syz.7.1495': attribute type 1 has an invalid length. [ 243.372894][ T4399] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10 [ 243.384015][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1495'. [ 243.399145][ T9266] XFS (loop4): Quotacheck: Done. [ 243.581246][ T4278] XFS (loop4): Unmounting Filesystem [ 243.589434][ T5443] usb 6-1: USB disconnect, device number 10 [ 243.736189][ T9303] loop7: detected capacity change from 0 to 256 [ 244.007273][ T9291] loop2: detected capacity change from 0 to 32768 [ 244.010130][ T9307] loop3: detected capacity change from 0 to 256 [ 244.100298][ T26] audit: type=1800 audit(1768677911.918:55): pid=9307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1500" name="bus" dev="loop3" ino=1048667 res=0 errno=0 [ 244.225474][ T9310] Set syz1 is full, maxelem 0 reached [ 244.473060][ C1] sd 0:0:1:0: [sda] tag#8926 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 244.483526][ C1] sd 0:0:1:0: [sda] tag#8926 CDB: Write(6) 0a 00 00 00 00 00 [ 244.746066][ T9335] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1509'. [ 245.010694][ T9347] loop5: detected capacity change from 0 to 512 [ 245.204510][ T9351] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1515'. [ 245.733142][ T9340] loop3: detected capacity change from 0 to 32768 [ 245.779377][ T9340] [ 245.779377][ T9340] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.779377][ T9340] [ 245.863290][ T9374] loop4: detected capacity change from 0 to 512 [ 245.880386][ T26] audit: type=1800 audit(1768677913.698:56): pid=9340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1512" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 245.931673][ T9374] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 246.009680][ T9374] EXT4-fs (loop4): 1 truncate cleaned up [ 246.030676][ T9374] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 246.125657][ T26] audit: type=1800 audit(1768677913.948:57): pid=9374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1524" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 246.153659][ T9340] [ 246.153659][ T9340] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.153659][ T9340] [ 246.196371][ T9340] [ 246.196371][ T9340] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.196371][ T9340] [ 246.237285][ T9340] [ 246.237285][ T9340] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.237285][ T9340] [ 246.268117][ T9340] [ 246.268117][ T9340] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.268117][ T9340] [ 246.322205][ T108] ERROR: (device loop3): dbFree: error in block map [ 246.322205][ T108] [ 246.335050][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 246.349168][ T108] ERROR: (device loop3): remounting filesystem as read-only [ 246.359431][ T9384] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1528'. [ 246.389785][ T9340] [ 246.389785][ T9340] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.389785][ T9340] [ 246.835648][ T129] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 246.899078][ T9378] loop5: detected capacity change from 0 to 40427 [ 246.928224][ T9378] F2FS-fs (loop5): invalid crc value [ 246.952365][ T9378] F2FS-fs (loop5): Found nat_bits in checkpoint [ 247.037355][ T9378] F2FS-fs (loop5): Start checkpoint disabled! [ 247.041050][ T129] usb 3-1: Using ep0 maxpacket: 8 [ 247.054939][ T129] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 247.088971][ T9378] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 247.101576][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.140012][ T129] usb 3-1: Product: syz [ 247.150120][ T129] usb 3-1: Manufacturer: syz [ 247.154991][ T7] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 247.165282][ T129] usb 3-1: SerialNumber: syz [ 247.193600][ T129] usb 3-1: config 0 descriptor?? [ 247.215558][ T129] gspca_main: se401-2.14.0 probing 047d:5003 [ 247.341188][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 247.348534][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 247.357506][ T46] kworker/u4:3: attempt to access beyond end of device [ 247.357506][ T46] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 247.379264][ T7] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 247.408889][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.429171][ T7] usb 5-1: Product: syz [ 247.447420][ T7] usb 5-1: Manufacturer: syz [ 247.452329][ T7] usb 5-1: SerialNumber: syz [ 247.472975][ T7] usb 5-1: config 0 descriptor?? [ 247.619524][ T129] gspca_se401: ExtraFeatures: 1 [ 247.624582][ T129] gspca_se401: Frame size: 0x0 1/16th janggu [ 247.644872][ T9401] loop7: detected capacity change from 0 to 32768 [ 247.822980][ T129] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 247.871087][ T129] usb 3-1: USB disconnect, device number 9 [ 247.896971][ T7] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 248.193635][ T9416] loop7: detected capacity change from 0 to 128 [ 248.232590][ T9416] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 248.272611][ T9416] hpfs: filesystem error: improperly stopped [ 248.288823][ T9416] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 248.299067][ T7] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 248.310384][ T9416] hpfs: You really don't want any checks? You are crazy... [ 248.322167][ T7] gs_usb: probe of 5-1:0.0 failed with error -71 [ 248.348823][ T7] usb 5-1: USB disconnect, device number 12 [ 248.357612][ T9416] hpfs: hpfs_map_sector(): read error [ 248.377722][ T9416] hpfs: code page support is disabled [ 248.415083][ T9416] hpfs: hpfs_map_4sectors(): unaligned read [ 248.481022][ T9416] hpfs: hpfs_map_4sectors(): unaligned read [ 248.497158][ T9416] hpfs: filesystem error: unable to find root dir [ 248.528739][ T9416] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim [ 248.915136][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1549'. [ 249.109084][ T9439] loop2: detected capacity change from 0 to 256 [ 249.157062][ T9439] exfat: Deprecated parameter 'utf8' [ 249.216891][ T9439] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 249.263729][ T9442] loop5: detected capacity change from 0 to 164 [ 249.319907][ T26] audit: type=1800 audit(1768677917.138:58): pid=9439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1553" name="file1" dev="loop2" ino=1048668 res=0 errno=0 [ 249.320251][ T9442] Unable to read rock-ridge attributes [ 249.456341][ T9442] Unable to read rock-ridge attributes [ 249.941993][ T9407] loop3: detected capacity change from 0 to 131072 [ 249.976113][ T9407] F2FS-fs (loop3): invalid crc value [ 250.022502][ T9407] F2FS-fs (loop3): Found nat_bits in checkpoint [ 250.103185][ T9469] input: syz0 as /devices/virtual/input/input15 [ 250.120797][ T9445] loop4: detected capacity change from 0 to 32768 [ 250.242197][ T4386] read_mapping_page failed! [ 250.267421][ T4386] ERROR: (device loop4): txCommit: [ 250.267421][ T4386] [ 250.297670][ T4386] jfs_write_inode: jfs_commit_inode failed! [ 250.476849][ T9478] loop5: detected capacity change from 0 to 164 [ 250.514935][ T9478] Unable to read rock-ridge attributes [ 250.535816][ T9478] Unable to read rock-ridge attributes [ 250.633808][ T4327] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 250.662125][ T4551] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 250.688965][ T9480] loop5: detected capacity change from 0 to 512 [ 250.790031][ T9482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1572'. [ 250.834199][ T4327] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.852407][ T4551] usb 5-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 250.870973][ T4327] usb 4-1: config 0 interface 0 has no altsetting 0 [ 250.881247][ T4551] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.908864][ T4327] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 250.941517][ T4551] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.957895][ T4327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.976218][ T4327] usb 4-1: Product: syz [ 250.980403][ T4327] usb 4-1: Manufacturer: syz [ 250.991131][ T4551] usb 5-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 251.014797][ T4327] usb 4-1: SerialNumber: syz [ 251.025740][ T4327] usb 4-1: config 0 descriptor?? [ 251.030750][ T4551] usb 5-1: config 0 interface 0 has no altsetting 0 [ 251.045260][ T4327] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 251.056884][ T4551] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 251.084818][ T4551] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.101549][ T4327] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 251.122970][ T4551] usb 5-1: config 0 descriptor?? [ 251.152086][ T4327] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 251.160737][ T4327] usb 4-1: media controller created [ 251.241048][ T4327] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 251.622196][ T4327] DVB: Unable to find symbol tda10046_attach() [ 251.629527][ T4327] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 251.632554][ T9491] loop2: detected capacity change from 0 to 65536 [ 251.720412][ T4327] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 251.743120][ T9491] XFS (loop2): Mounting V5 Filesystem [ 251.867455][ T9511] loop5: detected capacity change from 0 to 164 [ 251.894689][ T9491] XFS (loop2): Ending clean mount [ 251.902235][ T9491] XFS (loop2): Unmounting Filesystem [ 251.908317][ T9511] Unable to read rock-ridge attributes [ 251.949442][ T4551] uclogic 0003:5543:004D.0009: failed retrieving Huion firmware version: -71 [ 251.966169][ T4551] uclogic 0003:5543:004D.0009: failed probing parameters: -71 [ 251.979491][ T9511] Unable to read rock-ridge attributes [ 251.992937][ T4551] uclogic: probe of 0003:5543:004D.0009 failed with error -71 [ 252.029953][ T4551] usb 5-1: USB disconnect, device number 13 [ 252.160796][ T4327] dvb_usb_m920x: probe of 4-1:0.0 failed with error -71 [ 252.170281][ T4327] usb 4-1: USB disconnect, device number 8 [ 252.449591][ T9517] loop5: detected capacity change from 0 to 256 [ 252.477739][ T9517] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x44702e96, utbl_chksum : 0xe619d30d) [ 252.502633][ T26] audit: type=1800 audit(1768677920.328:59): pid=9517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1584" name="file1" dev="loop5" ino=1048670 res=0 errno=0 [ 252.524032][ T9517] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 252.533558][ T9517] exFAT-fs (loop5): Filesystem has been set read-only [ 252.610394][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1585'. [ 252.740121][ T9523] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 252.770343][ T9523] EXT4-fs (loop4): shut down requested (1) [ 252.827892][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 252.952608][ T4327] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 253.188959][ T4327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.210328][ T4327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.230755][ T4327] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 253.260319][ T4327] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.280393][ T4327] usb 6-1: config 0 descriptor?? [ 253.394448][ T9530] set_capacity_and_notify: 1 callbacks suppressed [ 253.394461][ T9530] loop3: detected capacity change from 0 to 40427 [ 253.422710][ T9530] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x3ffff [ 253.431304][ T9530] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x724 [ 253.440384][ T9530] F2FS-fs (loop3): invalid crc value [ 253.516963][ T9530] F2FS-fs (loop3): Found nat_bits in checkpoint [ 253.571444][ T9549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1597'. [ 253.594257][ T9550] loop4: detected capacity change from 0 to 512 [ 253.611024][ T9530] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x432/0xa20 [ 253.684533][ T9530] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 253.702407][ T4327] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 253.732084][ T4327] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 253.739937][ T4327] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 253.757385][ T9550] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 253.760731][ T4327] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 253.779414][ T4327] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 253.791043][ T4327] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 253.798939][ T9530] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x12a/0x910 [ 253.817212][ T9550] ext4 filesystem being mounted at /336/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 253.817565][ T4327] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 253.839613][ T4327] hid-thrustmaster 0003:044F:B65D.000A: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 253.848751][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1599'. [ 253.851904][ T4327] hid-thrustmaster 0003:044F:B65D.000A: Wrong number of endpoints? [ 253.892607][ T9530] F2FS-fs (loop3) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x6eb/0x1b10 [ 253.911135][ T4274] Bluetooth: hci5: command 0x1003 tx timeout [ 253.920410][ T4285] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 253.926900][ T9555] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1599'. [ 253.941270][ C1] hid-thrustmaster 0003:044F:B65D.000A: Unknown packet type 0x0, unable to proceed further with wheel init [ 254.096222][ T4272] syz-executor: attempt to access beyond end of device [ 254.096222][ T4272] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 254.173571][ T4898] usb 6-1: USB disconnect, device number 11 [ 254.213673][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 254.612275][ T9576] loop2: detected capacity change from 0 to 512 [ 254.668991][ T9576] EXT4-fs: Ignoring removed nomblk_io_submit option [ 254.716569][ T9576] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 254.767508][ T9576] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 254.802068][ T9576] EXT4-fs (loop2): orphan cleanup on readonly fs [ 254.814697][ T9576] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 254.831061][ T9576] EXT4-fs warning (device loop2): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 254.850659][ T9576] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 254.898951][ T9576] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1609: bg 0: block 40: padding at end of block bitmap is not set [ 254.957909][ T9576] EXT4-fs (loop2): Remounting filesystem read-only [ 254.971073][ T9576] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 254.992812][ T9576] EXT4-fs (loop2): Remounting filesystem read-only [ 254.999487][ T9576] EXT4-fs (loop2): 1 truncate cleaned up [ 255.055982][ T9576] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 255.127025][ T9591] loop3: detected capacity change from 0 to 4096 [ 255.141580][ T9576] EXT4-fs (loop2): shut down requested (2) [ 255.245695][ T9596] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 255.271089][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 255.375164][ T9599] sctp: Trying to GSO but underlying device doesn't support it. [ 255.514646][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.528626][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.152097][ T9621] loop7: detected capacity change from 0 to 8192 [ 256.183815][ T9621] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 256.221374][ T9621] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 256.246246][ T9621] REISERFS (device loop7): using ordered data mode [ 256.287132][ T9621] reiserfs: using flush barriers [ 256.328116][ T9628] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1630'. [ 256.364997][ T9621] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 256.421410][ T9621] REISERFS (device loop7): checking transaction log (loop7) [ 256.437848][ T9621] REISERFS (device loop7): Using r5 hash to sort names [ 256.456184][ T9621] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 256.490521][ T9621] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 256.592728][ T9619] loop2: detected capacity change from 0 to 32768 [ 256.730125][ T9619] XFS (loop2): Mounting V5 Filesystem [ 256.809134][ T9619] XFS (loop2): Ending clean mount [ 256.848726][ T9619] XFS (loop2): Quotacheck needed: Please wait. [ 257.004865][ T9619] XFS (loop2): Quotacheck: Done. [ 257.077629][ T9619] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 257.105057][ T9619] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 257.189210][ T9651] delete_channel: no stack [ 257.245487][ T4276] XFS (loop2): Unmounting Filesystem [ 257.581017][ T4274] Bluetooth: hci0: command 0x0406 tx timeout [ 258.123592][ T9661] loop7: detected capacity change from 0 to 8192 [ 258.186045][ T9661] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 258.270869][ T9661] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 258.305566][ T9661] REISERFS (device loop7): using ordered data mode [ 258.319433][ T9659] loop2: detected capacity change from 0 to 32768 [ 258.336734][ T9661] reiserfs: using flush barriers [ 258.367048][ T9661] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 258.438304][ T9659] XFS (loop2): Mounting V5 Filesystem [ 258.463963][ T9661] REISERFS (device loop7): checking transaction log (loop7) [ 258.496763][ T9661] REISERFS (device loop7): Using r5 hash to sort names [ 258.555934][ T9661] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 258.676569][ T9659] XFS (loop2): Ending clean mount [ 258.678471][ T9661] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 258.748746][ T9659] XFS (loop2): Quotacheck needed: Please wait. [ 258.886389][ T9659] XFS (loop2): Quotacheck: Done. [ 259.052425][ T4276] XFS (loop2): Unmounting Filesystem [ 259.208926][ T9678] loop7: detected capacity change from 0 to 2048 [ 259.250744][ T9678] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.271840][ T9674] loop5: detected capacity change from 0 to 32768 [ 259.417261][ T9674] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 259.476813][ T9674] XFS (loop5): Mounting V5 Filesystem [ 259.722105][ T9674] XFS (loop5): Ending clean mount [ 259.750337][ T9674] XFS (loop5): Quotacheck needed: Please wait. [ 259.904920][ T9674] XFS (loop5): Quotacheck: Done. [ 260.132453][ T5654] XFS (loop5): Unmounting Filesystem [ 260.756391][ T9717] loop7: detected capacity change from 0 to 256 [ 260.833809][ T9717] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 261.121665][ T9726] loop2: detected capacity change from 0 to 64 [ 261.132081][ T9705] loop4: detected capacity change from 0 to 32768 [ 261.254864][ T4276] hfs: node 4:3 still has 1 user(s)! [ 261.392852][ T9705] XFS (loop4): Mounting V5 Filesystem [ 261.483369][ T9705] XFS (loop4): Ending clean mount [ 261.616167][ T4278] XFS (loop4): Unmounting Filesystem [ 261.857861][ T9749] loop2: detected capacity change from 0 to 1024 [ 261.998108][ T34] hfsplus: b-tree write err: -5, ino 4 [ 262.346362][ T9757] loop2: detected capacity change from 0 to 8192 [ 262.361110][ T9757] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 262.396825][ T9757] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 262.414515][ T9757] REISERFS (device loop2): using ordered data mode [ 262.430832][ T9757] reiserfs: using flush barriers [ 262.456788][ T9757] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 262.524155][ T9757] REISERFS (device loop2): checking transaction log (loop2) [ 262.549503][ T9757] REISERFS (device loop2): Using r5 hash to sort names [ 262.577372][ T9757] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 262.593950][ T4898] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 262.694443][ T9765] loop5: detected capacity change from 0 to 512 [ 262.767609][ T9765] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 262.782951][ T4898] usb 5-1: unable to get BOS descriptor or descriptor too short [ 262.821821][ T4898] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 262.850120][ T9765] EXT4-fs warning (device loop5): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 262.886760][ T4898] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 262.914709][ T4898] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 262.932757][ T9765] EXT4-fs (loop5): mount failed [ 262.973842][ T4898] usb 5-1: config 129 has no interface number 0 [ 262.980146][ T4898] usb 5-1: config 129 has no interface number 1 [ 263.001001][ T4898] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 263.021478][ T4898] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 263.033639][ T4898] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 263.057062][ T4898] usb 5-1: config 129 interface 135 has no altsetting 0 [ 263.088868][ T4898] usb 5-1: config 129 interface 5 has no altsetting 0 [ 263.125794][ T4898] usb 5-1: string descriptor 0 read error: -22 [ 263.174195][ T4898] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 263.204254][ T4898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.265107][ T4898] usb 5-1: MIDIStreaming interface descriptor not found [ 263.476720][ T9782] loop2: detected capacity change from 0 to 512 [ 263.501058][ T7] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 263.550153][ T4341] usb 5-1: USB disconnect, device number 14 [ 263.702497][ T7] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 263.710539][ T7] usb 8-1: config 0 has no interface number 0 [ 263.736954][ T7] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.778353][ T7] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.798556][ T7] usb 8-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.837229][ T7] usb 8-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 263.846943][ T7] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.873566][ T7] usb 8-1: config 0 descriptor?? [ 263.906614][ T9782] EXT4-fs (loop2): Test dummy encryption mode enabled [ 263.916435][ T9782] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 263.928556][ T9782] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 263.943303][ T9795] kvm [9794]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x5 [ 264.500976][ T7] input: HID 28bd:0042 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:28BD:0042.000B/input/input17 [ 264.619468][ T7] uclogic 0003:28BD:0042.000B: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.7-1/input1 [ 264.643445][ T7] usb 8-1: USB disconnect, device number 4 [ 264.646894][ T4552] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 264.712698][ T9813] loop4: detected capacity change from 0 to 32768 [ 264.871622][ T4552] usb 3-1: Using ep0 maxpacket: 32 [ 264.884092][ T4552] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 264.912590][ T4552] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.931920][ T4552] usb 3-1: Product: syz [ 264.941900][ T4552] usb 3-1: Manufacturer: syz [ 264.946559][ T4552] usb 3-1: SerialNumber: syz [ 264.962950][ T4552] usb 3-1: config 0 descriptor?? [ 264.991530][ T9824] fido_id[9824]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 265.184216][ T4552] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 010 [ 265.338457][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1705'. [ 265.358445][ T9821] loop3: detected capacity change from 0 to 32768 [ 265.405223][ T4327] usb 3-1: USB disconnect, device number 10 [ 265.451351][ T9821] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 265.480737][ T9821] JBD2: Ignoring recovery information on journal [ 265.500996][ T4552] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 265.569360][ T9839] loop5: detected capacity change from 0 to 256 [ 265.571487][ T9821] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 265.610389][ T26] audit: type=1800 audit(1768677933.428:60): pid=9821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1699" name="file2" dev="loop3" ino=17058 res=0 errno=0 [ 265.643044][ T9839] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 265.655393][ T9839] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 265.701544][ T9839] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 265.703240][ T4552] usb 8-1: unable to get BOS descriptor or descriptor too short [ 265.740558][ T4552] usb 8-1: config 129 has an invalid interface number: 135 but max is 0 [ 265.761008][ T5443] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 265.778002][ T4552] usb 8-1: config 129 has an invalid interface number: 5 but max is 0 [ 265.795853][ T4552] usb 8-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 265.806103][ T4272] ocfs2: Unmounting device (7,3) on (node local) [ 265.808895][ T4552] usb 8-1: config 129 has no interface number 0 [ 265.819080][ T4552] usb 8-1: config 129 has no interface number 1 [ 265.839848][ T4552] usb 8-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 265.886303][ T4552] usb 8-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 265.912929][ T4552] usb 8-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 265.956089][ T5443] usb 5-1: Using ep0 maxpacket: 16 [ 265.963532][ T5443] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.983448][ T4552] usb 8-1: config 129 interface 135 has no altsetting 0 [ 265.994725][ T5443] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 266.016075][ T4552] usb 8-1: config 129 interface 5 has no altsetting 0 [ 266.038584][ T5443] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 266.056674][ T5443] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 266.068962][ T5443] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.069155][ T4552] usb 8-1: string descriptor 0 read error: -22 [ 266.092542][ T5443] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 266.107557][ T4552] usb 8-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 266.117576][ T5443] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 266.131411][ T4552] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.140194][ T5443] usb 5-1: Manufacturer: syz [ 266.155604][ T5443] usb 5-1: config 0 descriptor?? [ 266.195215][ T4552] usb 8-1: MIDIStreaming interface descriptor not found [ 266.472561][ T4327] usb 8-1: USB disconnect, device number 5 [ 266.524287][ T5443] rc_core: IR keymap rc-hauppauge not found [ 266.530220][ T5443] Registered IR keymap rc-empty [ 266.555032][ T5443] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 266.601053][ T5443] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 266.641586][ T5443] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 266.665398][ T5443] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input18 [ 266.700339][ T9852] loop3: detected capacity change from 0 to 32768 [ 266.701787][ T5443] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 266.732291][ T9852] XFS (loop3): Mounting V5 Filesystem [ 266.761015][ T5443] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 266.799760][ T9852] XFS (loop3): Ending clean mount [ 266.801006][ T5443] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 266.818294][ T9852] XFS (loop3): Quotacheck needed: Please wait. [ 266.841087][ T5443] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 266.900989][ T5443] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 266.920351][ T9852] XFS (loop3): Quotacheck: Done. [ 266.951269][ T5443] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 266.991186][ T5443] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 267.031598][ T5443] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 267.061098][ T5443] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 267.101077][ T5443] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 267.132011][ T5443] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 267.149260][ T5443] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 267.165331][ T5443] usb 5-1: USB disconnect, device number 15 [ 267.219082][ T4272] XFS (loop3): Unmounting Filesystem [ 267.759302][ T4285] Bluetooth: hci3: link tx timeout [ 267.765962][ T4285] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 267.776011][ T4285] Bluetooth: hci3: link tx timeout [ 267.781217][ T4285] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 267.796044][ T4285] Bluetooth: hci3: link tx timeout [ 267.801209][ T4285] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 267.808885][ T4285] Bluetooth: hci3: link tx timeout [ 267.814276][ T4285] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 267.822033][ T4285] Bluetooth: hci3: link tx timeout [ 267.827171][ T4285] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 267.827349][ T9886] loop5: detected capacity change from 0 to 8192 [ 267.910569][ T9886] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 267.983258][ T9886] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 268.005255][ T9886] REISERFS (device loop5): using ordered data mode [ 268.035098][ T9886] reiserfs: using flush barriers [ 268.055530][ T9886] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 268.105590][ T9886] REISERFS (device loop5): checking transaction log (loop5) [ 268.134522][ T9886] REISERFS (device loop5): Using r5 hash to sort names [ 268.146933][ T9886] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 268.166259][ T9886] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 268.301936][ T5443] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 268.503357][ T5443] usb 4-1: unable to get BOS descriptor or descriptor too short [ 268.514467][ T5443] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 268.533338][ T5443] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 268.548010][ T5443] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 268.564592][ T5443] usb 4-1: config 129 has no interface number 0 [ 268.582576][ T5443] usb 4-1: config 129 has no interface number 1 [ 268.593305][ T5443] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 268.615765][ T5443] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 268.640964][ T5443] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 268.659317][ T5443] usb 4-1: config 129 interface 135 has no altsetting 0 [ 268.666462][ T5443] usb 4-1: config 129 interface 5 has no altsetting 0 [ 268.685805][ T5443] usb 4-1: string descriptor 0 read error: -22 [ 268.692159][ T5443] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 268.706891][ T5443] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.756590][ T5443] usb 4-1: MIDIStreaming interface descriptor not found [ 269.083829][ T7] usb 4-1: USB disconnect, device number 9 [ 269.209635][ T9939] loop5: detected capacity change from 0 to 8192 [ 269.243057][ T9939] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 269.273574][ T9939] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 269.289562][ T9932] loop4: detected capacity change from 0 to 8192 [ 269.297257][ T9939] REISERFS (device loop5): using ordered data mode [ 269.303856][ T9939] reiserfs: using flush barriers [ 269.310678][ T9939] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 269.320861][ T9932] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 269.328826][ T9939] REISERFS (device loop5): checking transaction log (loop5) [ 269.421321][ T9932] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 269.451796][ T9932] REISERFS (device loop4): using ordered data mode [ 269.458441][ T9932] reiserfs: using flush barriers [ 269.494482][ T9932] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 269.521187][ T9939] REISERFS (device loop5): Using tea hash to sort names [ 269.533915][ T9939] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 269.547897][ T9932] REISERFS (device loop4): checking transaction log (loop4) [ 269.575164][ T9932] REISERFS (device loop4): Using r5 hash to sort names [ 269.593507][ T9932] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 269.634531][ T9932] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 269.745833][ T9953] loop2: detected capacity change from 0 to 64 [ 269.821383][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 270.179722][ T9961] netlink: 'syz.5.1753': attribute type 10 has an invalid length. [ 270.224371][ T9965] loop7: detected capacity change from 0 to 256 [ 270.241064][ T9961] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.1753'. [ 270.295380][ T9965] FAT-fs (loop7): Directory bread(block 64) failed [ 270.348505][ T9965] FAT-fs (loop7): Directory bread(block 65) failed [ 270.381209][ T9965] FAT-fs (loop7): Directory bread(block 66) failed [ 270.387784][ T9965] FAT-fs (loop7): Directory bread(block 67) failed [ 270.415690][ T9965] FAT-fs (loop7): Directory bread(block 68) failed [ 270.442100][ T9965] FAT-fs (loop7): Directory bread(block 69) failed [ 270.478270][ T9965] FAT-fs (loop7): Directory bread(block 70) failed [ 270.493106][ T9978] loop5: detected capacity change from 0 to 128 [ 270.510805][ T9965] FAT-fs (loop7): Directory bread(block 71) failed [ 270.524568][ T9976] loop3: detected capacity change from 0 to 512 [ 270.531060][ T9965] FAT-fs (loop7): Directory bread(block 72) failed [ 270.537595][ T9965] FAT-fs (loop7): Directory bread(block 73) failed [ 270.669965][ T9976] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 270.732263][ T9976] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 270.847872][ T9976] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz.3.1762: invalid size [ 270.918949][ T9976] EXT4-fs (loop3): Remounting filesystem read-only [ 270.949965][ T9984] loop4: detected capacity change from 0 to 8192 [ 271.002060][ T9984] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 271.112096][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 271.136872][ T9984] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 271.187979][ T9984] REISERFS (device loop4): using ordered data mode [ 271.227287][ T9984] reiserfs: using flush barriers [ 271.277855][ T9984] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 271.331344][ T9984] REISERFS (device loop4): checking transaction log (loop4) [ 271.363342][ T9984] REISERFS (device loop4): Using r5 hash to sort names [ 271.395016][ T9984] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 271.439371][ T9984] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 271.836791][T10014] loop7: detected capacity change from 0 to 512 [ 271.863428][T10014] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 271.903674][T10014] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 271.926654][T10014] System zones: 1-12 [ 271.945890][T10014] EXT4-fs (loop7): orphan cleanup on readonly fs [ 271.988167][T10014] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1779: invalid indirect mapped block 12 (level 1) [ 272.128507][T10014] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1779: invalid indirect mapped block 2 (level 2) [ 272.163113][T10014] EXT4-fs (loop7): 1 truncate cleaned up [ 272.168799][T10014] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 272.350540][T10018] loop4: detected capacity change from 0 to 32768 [ 272.389878][ T6860] EXT4-fs (loop7): unmounting filesystem. [ 272.679178][T10007] loop2: detected capacity change from 0 to 32768 [ 272.777782][T10034] loop3: detected capacity change from 0 to 8192 [ 272.779506][T10007] XFS (loop2): Mounting V5 Filesystem [ 272.837118][T10034] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 272.888354][ T4497] kernel read not supported for file /video7 (pid: 4497 comm: kworker/0:13) [ 272.891037][T10034] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 272.910436][T10034] REISERFS (device loop3): using ordered data mode [ 272.917285][T10034] reiserfs: using flush barriers [ 272.951420][T10007] XFS (loop2): Ending clean mount [ 272.958305][T10034] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 272.980281][T10007] XFS (loop2): Quotacheck needed: Please wait. [ 273.093496][T10034] REISERFS (device loop3): checking transaction log (loop3) [ 273.107176][T10007] XFS (loop2): Quotacheck: Done. [ 273.152909][T10034] REISERFS (device loop3): Using r5 hash to sort names [ 273.165877][T10034] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 273.240849][T10034] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 273.289778][ T4276] XFS (loop2): Unmounting Filesystem [ 273.511918][T10065] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1796'. [ 273.836435][T10073] loop4: detected capacity change from 0 to 64 [ 274.058315][T10078] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 274.081091][ T4341] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 274.143377][T10080] netlink: 'syz.4.1802': attribute type 11 has an invalid length. [ 274.182884][T10080] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1802'. [ 274.271563][ T4341] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 274.289452][ T4341] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.341403][ T4341] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 274.372603][ T4341] usb 4-1: config 0 interface 0 has no altsetting 0 [ 274.405996][ T4341] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.435663][ T4341] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 274.468336][ T4341] usb 4-1: config 0 interface 0 has no altsetting 0 [ 274.500854][ T4341] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.530267][ T4341] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 274.559176][T10088] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1806'. [ 274.560942][ T4341] usb 4-1: config 0 interface 0 has no altsetting 0 [ 274.611083][ T4341] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.640267][ T4341] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 274.663529][ T4341] usb 4-1: config 0 interface 0 has no altsetting 0 [ 274.663984][ T4551] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 274.683351][ T4341] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.706414][ T4341] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 274.745959][ T4341] usb 4-1: config 0 interface 0 has no altsetting 0 [ 274.756787][T10077] set_capacity_and_notify: 2 callbacks suppressed [ 274.756798][T10077] loop5: detected capacity change from 0 to 32768 [ 274.770685][ T4341] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.794652][T10077] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 274.805235][ T4341] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 274.816911][ T4341] usb 4-1: config 0 interface 0 has no altsetting 0 [ 274.844654][ T4341] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.865105][ T4341] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 274.876819][ T4551] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 274.892711][ T4341] usb 4-1: config 0 interface 0 has no altsetting 0 [ 274.900310][ T4551] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.909506][ T4341] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.918751][T10090] loop7: detected capacity change from 0 to 8192 [ 274.935527][ T4551] usb 5-1: config 0 descriptor?? [ 274.959097][ T4551] cp210x 5-1:0.0: cp210x converter detected [ 274.962116][ T4341] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 274.969587][T10090] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 275.001151][T10090] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 275.020458][ T4341] usb 4-1: config 0 interface 0 has no altsetting 0 [ 275.028162][T10090] REISERFS (device loop7): using ordered data mode [ 275.091019][T10090] reiserfs: using flush barriers [ 275.102966][ T4341] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 275.124953][ T4524] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 275.135496][ T4341] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 275.162871][T10090] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 275.192311][ T4341] usb 4-1: Product: syz [ 275.196499][ T4341] usb 4-1: Manufacturer: syz [ 275.213386][ T4341] usb 4-1: SerialNumber: syz [ 275.225336][T10090] REISERFS (device loop7): checking transaction log (loop7) [ 275.267519][ T4341] usb 4-1: config 0 descriptor?? [ 275.293932][T10090] REISERFS (device loop7): Using r5 hash to sort names [ 275.312136][ T4341] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 275.343279][T10090] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 275.385131][T10090] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 275.566676][ T7] usb 4-1: USB disconnect, device number 10 [ 275.572969][ T4551] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 275.580669][ T4551] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 275.589190][ T7] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 275.635611][ T4551] usb 5-1: cp210x converter now attached to ttyUSB0 [ 275.685950][ T4551] usb 5-1: USB disconnect, device number 16 [ 275.723386][ T4551] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 275.732033][T10104] tap0: tun_chr_ioctl cmd 1074025677 [ 275.747756][T10104] tap0: linktype set to 1 [ 275.753179][ T4551] cp210x 5-1:0.0: device disconnected [ 276.058208][T10103] loop2: detected capacity change from 0 to 32768 [ 276.103602][T10103] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1814 (10103) [ 276.159317][T10103] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 276.159896][T10110] loop5: detected capacity change from 0 to 512 [ 276.203755][T10110] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 276.220691][T10103] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 276.253774][T10103] BTRFS info (device loop2): setting nodatasum [ 276.260020][T10103] BTRFS info (device loop2): force zlib compression, level 3 [ 276.261745][T10110] EXT4-fs (loop5): orphan cleanup on readonly fs [ 276.267667][T10103] BTRFS info (device loop2): metadata ratio 4 [ 276.279987][T10103] BTRFS info (device loop2): enabling ssd optimizations [ 276.296122][T10103] BTRFS info (device loop2): allowing degraded mounts [ 276.311099][T10103] BTRFS info (device loop2): using free space tree [ 276.370397][T10110] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1816: bg 0: block 248: padding at end of block bitmap is not set [ 276.379519][T10106] loop7: detected capacity change from 0 to 32768 [ 276.431896][T10110] Quota error (device loop5): write_blk: dquota write failed [ 276.489051][T10106] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 276.565080][ T5715] (kworker/u4:8,5715,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 276.594153][T10110] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 276.639437][T10110] EXT4-fs error (device loop5): ext4_acquire_dquot:6835: comm syz.5.1816: Failed to acquire dquot type 1 [ 276.678722][ T6860] (syz-executor,6860,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 70 [ 276.691391][ T6860] (syz-executor,6860,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 276.727742][T10142] netlink: 1708 bytes leftover after parsing attributes in process `syz.3.1821'. [ 276.773726][ T6860] ocfs2: Unmounting device (7,7) on (node local) [ 276.832947][T10110] EXT4-fs (loop5): 1 truncate cleaned up [ 276.889897][T10142] netlink: zone id is out of range [ 276.901114][T10110] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 276.933753][T10142] netlink: zone id is out of range [ 276.977518][T10142] netlink: zone id is out of range [ 277.010226][T10142] netlink: zone id is out of range [ 277.034128][ T4276] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 277.071075][T10142] netlink: zone id is out of range [ 277.090494][T10142] netlink: zone id is out of range [ 277.122633][ T5654] EXT4-fs (loop5): unmounting filesystem. [ 277.246335][T10142] netlink: zone id is out of range [ 277.307379][T10142] netlink: zone id is out of range [ 277.312382][T10151] loop5: detected capacity change from 0 to 128 [ 277.350694][T10146] loop7: detected capacity change from 0 to 8192 [ 277.431988][T10151] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 277.432291][T10142] netlink: zone id is out of range [ 277.453096][T10146] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 277.473448][T10151] ext4 filesystem being mounted at /262/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 277.518010][T10146] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 277.550446][T10142] netlink: zone id is out of range [ 277.566971][T10146] REISERFS (device loop7): using ordered data mode [ 277.570771][T10159] loop2: detected capacity change from 0 to 256 [ 277.590812][T10151] fscrypt (loop5, inode 12): Unsupported encryption flags (0x08) [ 277.617903][T10146] reiserfs: using flush barriers [ 277.670276][T10146] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 277.723899][ T5654] EXT4-fs (loop5): unmounting filesystem. [ 277.730368][T10146] REISERFS (device loop7): checking transaction log (loop7) [ 277.787573][T10146] REISERFS (device loop7): Using r5 hash to sort names [ 277.790215][T10161] loop4: detected capacity change from 0 to 64 [ 277.824516][T10146] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 277.903313][T10146] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 277.999350][T10167] loop2: detected capacity change from 0 to 256 [ 278.087808][ T26] audit: type=1800 audit(1768677945.908:61): pid=10167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1831" name="file1" dev="loop2" ino=1048676 res=0 errno=0 [ 278.440741][ T26] audit: type=1326 audit(1768677946.258:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10180 comm="syz.5.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f01b9acb9 code=0x7ffc0000 [ 278.527643][ T26] audit: type=1326 audit(1768677946.258:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10180 comm="syz.5.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f01b9acb9 code=0x7ffc0000 [ 278.656399][ T26] audit: type=1326 audit(1768677946.258:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10180 comm="syz.5.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3f01b9acb9 code=0x7ffc0000 [ 278.765177][ T26] audit: type=1326 audit(1768677946.258:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10180 comm="syz.5.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f01b9acb9 code=0x7ffc0000 [ 278.853653][ T26] audit: type=1326 audit(1768677946.258:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10180 comm="syz.5.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f01b9acb9 code=0x7ffc0000 [ 278.884712][T10194] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 278.933946][ T26] audit: type=1326 audit(1768677946.258:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10180 comm="syz.5.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f3f01b9acb9 code=0x7ffc0000 [ 278.966791][T10194] hpfs: filesystem error: improperly stopped [ 278.991631][T10194] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 279.033756][T10194] hpfs: You really don't want any checks? You are crazy... [ 279.041644][ T26] audit: type=1326 audit(1768677946.258:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10180 comm="syz.5.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f01b9acb9 code=0x7ffc0000 [ 279.074778][T10194] hpfs: hpfs_map_sector(): read error [ 279.080171][T10194] hpfs: code page support is disabled [ 279.105628][T10194] hpfs: hpfs_map_4sectors(): unaligned read [ 279.120587][T10194] hpfs: hpfs_map_4sectors(): unaligned read [ 279.150372][T10194] hpfs: filesystem error: unable to find root dir [ 279.241613][T10203] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 279.352591][T10198] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 279.496535][T10198] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 279.564966][T10198] REISERFS (device loop3): using ordered data mode [ 279.611885][T10198] reiserfs: using flush barriers [ 279.636702][T10198] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 279.708264][T10213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1851'. [ 279.730091][T10198] REISERFS (device loop3): checking transaction log (loop3) [ 279.883089][T10218] set_capacity_and_notify: 3 callbacks suppressed [ 279.883105][T10218] loop7: detected capacity change from 0 to 64 [ 280.057790][T10198] REISERFS (device loop3): Using tea hash to sort names [ 280.097547][T10198] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 280.395184][T10234] loop7: detected capacity change from 0 to 256 [ 280.800465][T10246] loop4: detected capacity change from 0 to 512 [ 280.853480][T10246] EXT4-fs: Ignoring removed mblk_io_submit option [ 280.873877][T10246] EXT4-fs: inline encryption not supported [ 280.884458][T10246] EXT4-fs: Ignoring removed mblk_io_submit option [ 280.917925][T10246] EXT4-fs (loop4): Test dummy encryption mode enabled [ 280.918771][T10254] loop7: detected capacity change from 0 to 16 [ 280.938540][T10246] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 280.988037][T10254] erofs: (device loop7): mounted with root inode @ nid 36. [ 281.013108][T10246] EXT4-fs (loop4): 1 truncate cleaned up [ 281.018780][T10246] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 281.019961][T10251] loop5: detected capacity change from 0 to 4096 [ 281.035606][T10251] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 281.065680][T10254] syz.7.1872: attempt to access beyond end of device [ 281.065680][T10254] loop7: rw=0, sector=8, nr_sectors = 16 limit=16 [ 281.188270][T10263] loop3: detected capacity change from 0 to 256 [ 281.582668][T10254] syz.7.1872 (10254): drop_caches: 2 [ 281.610001][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 281.957906][T10281] loop4: detected capacity change from 0 to 512 [ 282.008290][T10281] EXT4-fs: Ignoring removed orlov option [ 282.038464][T10258] loop2: detected capacity change from 0 to 32768 [ 282.050784][T10283] loop7: detected capacity change from 0 to 8 [ 282.061116][T10281] EXT4-fs: Ignoring removed nobh option [ 282.086925][T10286] loop5: detected capacity change from 0 to 512 [ 282.094267][T10258] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1873 (10258) [ 282.110328][T10281] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 282.147914][T10281] EXT4-fs (loop4): orphan cleanup on readonly fs [ 282.173971][T10258] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 282.253368][T10286] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 282.281168][T10258] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 282.289903][T10258] BTRFS info (device loop2): setting nodatacow, compression disabled [ 282.291111][T10286] System zones: [ 282.303177][T10258] BTRFS info (device loop2): enabling auto defrag [ 282.317084][T10281] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1884: bg 0: block 248: padding at end of block bitmap is not set [ 282.321671][T10258] BTRFS info (device loop2): max_inline at 0 [ 282.341034][T10286] 1-12 [ 282.344776][T10286] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.1886: Directory hole found for htree index block 0 [ 282.367257][T10258] BTRFS info (device loop2): using free space tree [ 282.406744][T10286] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 282.455804][T10286] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.1886: Directory hole found for htree index block 0 [ 282.521996][T10286] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 282.530701][T10281] __quota_error: 386 callbacks suppressed [ 282.530714][T10281] Quota error (device loop4): write_blk: dquota write failed [ 282.554839][T10286] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 282.579859][T10281] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 282.657929][T10286] EXT4-fs (loop5): shut down requested (1) [ 282.665262][T10281] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.1884: Failed to acquire dquot type 1 [ 282.686276][T10306] (syz.3.1892,10306,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 282.699972][T10306] (syz.3.1892,10306,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 282.749468][T10306] JBD2: Ignoring recovery information on journal [ 282.799873][ T5654] EXT4-fs (loop5): unmounting filesystem. [ 282.834376][T10281] EXT4-fs (loop4): 1 truncate cleaned up [ 282.863861][T10281] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 282.879103][T10281] EXT4-fs error (device loop4): __ext4_remount:6644: comm syz.4.1884: Abort forced by user [ 282.886788][T10306] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 282.900322][T10306] (syz.3.1892,10306,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xdf97dca5. Applying ECC. [ 282.937045][T10281] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 283.091429][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 283.110740][ T4272] ocfs2: Unmounting device (7,3) on (node local) [ 283.292769][ T4276] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 283.301628][T10330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1897'. [ 283.553276][T10335] SQUASHFS error: lzo decompression failed, data probably corrupt [ 283.592385][ T4524] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (4524) [ 283.678157][T10335] SQUASHFS error: Failed to read block 0x91: -5 [ 283.720998][T10335] SQUASHFS error: Unable to read metadata cache entry [8f] [ 283.750963][T10335] SQUASHFS error: Unable to read inode 0x11f [ 284.061668][T10349] use of bytesused == 0 is deprecated and will be removed in the future, [ 284.092469][T10349] use the actual size instead. [ 284.295835][T10353] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 284.326758][T10353] UDF-fs: Scanning with blocksize 512 failed [ 284.371426][T10353] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.674418][T10362] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 284.696121][T10362] UDF-fs: Scanning with blocksize 512 failed [ 284.730417][T10362] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.828966][T10368] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.837874][T10368] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.846746][T10368] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.855488][T10368] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.924308][T10356] set_capacity_and_notify: 5 callbacks suppressed [ 284.924323][T10356] loop4: detected capacity change from 0 to 32768 [ 284.971175][T10356] JBD2: Ignoring recovery information on journal [ 285.038450][T10356] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 285.076775][ T26] audit: type=1800 audit(1768677952.898:455): pid=10356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1908" name="file2" dev="loop4" ino=30722 res=0 errno=0 [ 285.102553][T10356] (syz.4.1908,10356,0):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -14 [ 285.218874][ T4278] ocfs2: Unmounting device (7,4) on (node local) [ 285.341156][T10382] netlink: 'syz.3.1921': attribute type 3 has an invalid length. [ 285.384802][T10382] netlink: 'syz.3.1921': attribute type 1 has an invalid length. [ 285.405131][T10382] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1921'. [ 285.637276][T10392] loop3: detected capacity change from 0 to 22 [ 285.652200][T10392] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 285.672859][T10392] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 285.814118][T10378] loop5: detected capacity change from 0 to 32768 [ 285.923409][T10378] XFS (loop5): Mounting V5 Filesystem [ 286.074228][T10378] XFS (loop5): Ending clean mount [ 286.098043][T10378] XFS (loop5): Quotacheck needed: Please wait. [ 286.182069][T10378] XFS (loop5): Quotacheck: Done. [ 286.308067][ T5654] XFS (loop5): Unmounting Filesystem [ 286.448399][T10420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1936'. [ 286.637086][T10425] loop2: detected capacity change from 0 to 2048 [ 286.723607][T10425] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 287.122800][T10410] loop4: detected capacity change from 0 to 40427 [ 287.195949][T10410] F2FS-fs (loop4): invalid crc value [ 287.237607][T10410] F2FS-fs (loop4): Found nat_bits in checkpoint [ 287.339539][T10443] loop2: detected capacity change from 0 to 2048 [ 287.403996][T10410] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 287.497246][T10410] syz.4.1931: attempt to access beyond end of device [ 287.497246][T10410] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 287.535811][T10449] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 287.568820][T10443] NILFS (loop2): error -2 truncating bmap (ino=16) [ 287.697884][ T4278] syz-executor: attempt to access beyond end of device [ 287.697884][ T4278] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 287.705394][T10451] loop7: detected capacity change from 0 to 1024 [ 287.742774][T10453] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1948'. [ 287.850234][ T4278] syz-executor: attempt to access beyond end of device [ 287.850234][ T4278] loop4: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 287.873478][T10451] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 287.879647][ T4278] syz-executor: attempt to access beyond end of device [ 287.879647][ T4278] loop4: rw=2051, sector=45112, nr_sectors = 57288 limit=40427 [ 287.900369][ T4278] F2FS-fs (loop4): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 287.900411][ T4278] F2FS-fs (loop4): Issue discard(5639, 5639, 7161) failed, ret: -5 [ 287.911348][T10451] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.136109][ T6860] EXT4-fs (loop7): unmounting filesystem. [ 288.343959][T10475] loop3: detected capacity change from 0 to 64 [ 288.577651][T10484] loop3: detected capacity change from 0 to 512 [ 288.663416][T10484] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 288.673181][T10484] ext4 filesystem being mounted at /378/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.694862][T10484] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 288.707066][T10484] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 288.716807][T10484] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.1960: Failed to acquire dquot type 0 [ 288.735725][T10484] Quota error (device loop3): do_check_range: Getting block 67108864 out of range 0-8 [ 288.817627][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 288.845451][T10469] loop2: detected capacity change from 0 to 32768 [ 288.910455][T10469] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 288.950675][T10493] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1962'. [ 288.952323][T10469] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 289.054732][T10500] [ 289.057097][T10500] ====================================================== [ 289.064115][T10500] WARNING: possible circular locking dependency detected [ 289.071145][T10500] syzkaller #0 Not tainted [ 289.075561][T10500] ------------------------------------------------------ [ 289.082577][T10500] syz.2.1954/10500 is trying to acquire lock: [ 289.088645][T10500] ffff888028e1a990 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x1a6/0x270 [ 289.098249][T10500] [ 289.098249][T10500] but task is already holding lock: [ 289.105617][T10500] ffff888057ef64e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0 [ 289.115900][T10500] [ 289.115900][T10500] which lock already depends on the new lock. [ 289.115900][T10500] [ 289.126303][T10500] [ 289.126303][T10500] the existing dependency chain (in reverse order) is: [ 289.135316][T10500] [ 289.135316][T10500] -> #5 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 289.143850][T10500] down_read+0x42/0x2d0 [ 289.148538][T10500] ocfs2_start_trans+0x3a4/0x6f0 [ 289.154010][T10500] ocfs2_modify_bh+0xe0/0x4c0 [ 289.159231][T10500] ocfs2_local_read_info+0x13c8/0x1750 [ 289.165226][T10500] dquot_load_quota_sb+0x756/0xac0 [ 289.170870][T10500] dquot_load_quota_inode+0x2d8/0x5d0 [ 289.176769][T10500] ocfs2_enable_quotas+0x1c5/0x490 [ 289.182422][T10500] ocfs2_fill_super+0x43b5/0x5090 [ 289.187981][T10500] mount_bdev+0x287/0x3c0 [ 289.192843][T10500] legacy_get_tree+0xe6/0x180 [ 289.198054][T10500] vfs_get_tree+0x88/0x270 [ 289.203015][T10500] do_new_mount+0x24a/0xa40 [ 289.208054][T10500] __se_sys_mount+0x2e3/0x3d0 [ 289.213267][T10500] do_syscall_64+0x4c/0xa0 [ 289.218226][T10500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.224660][T10500] [ 289.224660][T10500] -> #4 (sb_internal#6){.+.+}-{0:0}: [ 289.232162][T10500] ocfs2_start_trans+0x2a5/0x6f0 [ 289.237629][T10500] ocfs2_acquire_dquot+0x681/0xb20 [ 289.243271][T10500] dqget+0x778/0xeb0 [ 289.247682][T10500] __dquot_initialize+0x3c3/0xcd0 [ 289.253222][T10500] ocfs2_get_init_inode+0x144/0x1b0 [ 289.258939][T10500] ocfs2_mknod+0x8c8/0x25b0 [ 289.263954][T10500] ocfs2_create+0x1b6/0x4b0 [ 289.268968][T10500] path_openat+0x1181/0x2ee0 [ 289.274068][T10500] do_filp_open+0x1f1/0x430 [ 289.279082][T10500] do_sys_openat2+0x150/0x4b0 [ 289.284271][T10500] __x64_sys_creat+0x8c/0xb0 [ 289.289376][T10500] do_syscall_64+0x4c/0xa0 [ 289.294311][T10500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.300718][T10500] [ 289.300718][T10500] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 289.309567][T10500] down_write+0x36/0x60 [ 289.314234][T10500] ocfs2_create_local_dquot+0x1a5/0x18e0 [ 289.320378][T10500] ocfs2_acquire_dquot+0x7c6/0xb20 [ 289.326000][T10500] dqget+0x778/0xeb0 [ 289.330404][T10500] __dquot_initialize+0x3c3/0xcd0 [ 289.335937][T10500] ocfs2_get_init_inode+0x144/0x1b0 [ 289.341651][T10500] ocfs2_mknod+0x8c8/0x25b0 [ 289.346668][T10500] ocfs2_create+0x1b6/0x4b0 [ 289.351682][T10500] path_openat+0x1181/0x2ee0 [ 289.356792][T10500] do_filp_open+0x1f1/0x430 [ 289.361813][T10500] do_sys_openat2+0x150/0x4b0 [ 289.367005][T10500] __x64_sys_creat+0x8c/0xb0 [ 289.372108][T10500] do_syscall_64+0x4c/0xa0 [ 289.377042][T10500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.383450][T10500] [ 289.383450][T10500] -> #2 (&dquot->dq_lock){+.+.}-{3:3}: [ 289.391086][T10500] __mutex_lock+0x12d/0xaf0 [ 289.396111][T10500] dquot_commit+0x5a/0x410 [ 289.401044][T10500] ext4_write_dquot+0x1f0/0x360 [ 289.406405][T10500] mark_all_dquot_dirty+0xf9/0x400 [ 289.412026][T10500] __dquot_alloc_space+0x5fc/0xe60 [ 289.417654][T10500] ext4_mb_new_blocks+0xf8d/0x4760 [ 289.423287][T10500] ext4_ext_map_blocks+0x195b/0x6810 [ 289.429087][T10500] ext4_map_blocks+0x9de/0x1b70 [ 289.434457][T10500] ext4_getblk+0x1cc/0x6f0 [ 289.439390][T10500] ext4_bread+0x26/0x170 [ 289.444148][T10500] ext4_append+0x2be/0x560 [ 289.449339][T10500] ext4_init_new_dir+0x2b8/0x570 [ 289.454805][T10500] ext4_mkdir+0x4fb/0xce0 [ 289.459661][T10500] vfs_mkdir+0x387/0x570 [ 289.464416][T10500] do_mkdirat+0x1d8/0x440 [ 289.469254][T10500] __x64_sys_mkdirat+0x85/0x90 [ 289.474527][T10500] do_syscall_64+0x4c/0xa0 [ 289.479461][T10500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.485868][T10500] [ 289.485868][T10500] -> #1 (&ei->i_data_sem){++++}-{3:3}: [ 289.493503][T10500] down_write+0x36/0x60 [ 289.498164][T10500] ext4_truncate+0x999/0x1240 [ 289.503363][T10500] ext4_setattr+0x10cb/0x19f0 [ 289.508551][T10500] notify_change+0xc74/0xf40 [ 289.513652][T10500] do_truncate+0x1ac/0x240 [ 289.518579][T10500] do_sys_ftruncate+0x312/0x3c0 [ 289.523943][T10500] do_syscall_64+0x4c/0xa0 [ 289.528875][T10500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.535282][T10500] [ 289.535282][T10500] -> #0 (jbd2_handle){++++}-{0:0}: [ 289.542575][T10500] __lock_acquire+0x2d07/0x7d10 [ 289.547944][T10500] lock_acquire+0x1bb/0x4a0 [ 289.552965][T10500] wait_transaction_locked+0x1bf/0x270 [ 289.558936][T10500] start_this_handle+0x7ec/0x2230 [ 289.564478][T10500] jbd2__journal_start+0x2b7/0x5a0 [ 289.570109][T10500] jbd2_journal_start+0x26/0x30 [ 289.575477][T10500] ocfs2_start_trans+0x3b0/0x6f0 [ 289.580923][T10500] ocfs2_evict_inode+0x1721/0x4630 [ 289.586550][T10500] evict+0x4c9/0x8d0 [ 289.590955][T10500] vfs_rmdir+0x397/0x4d0 [ 289.595707][T10500] do_rmdir+0x29a/0x5c0 [ 289.600372][T10500] __x64_sys_rmdir+0x45/0x50 [ 289.605468][T10500] do_syscall_64+0x4c/0xa0 [ 289.610400][T10500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.616805][T10500] [ 289.616805][T10500] other info that might help us debug this: [ 289.616805][T10500] [ 289.627024][T10500] Chain exists of: [ 289.627024][T10500] jbd2_handle --> sb_internal#6 --> &journal->j_trans_barrier [ 289.627024][T10500] [ 289.640398][T10500] Possible unsafe locking scenario: [ 289.640398][T10500] [ 289.647833][T10500] CPU0 CPU1 [ 289.653183][T10500] ---- ---- [ 289.658530][T10500] lock(&journal->j_trans_barrier); [ 289.663803][T10500] lock(sb_internal#6); [ 289.670570][T10500] lock(&journal->j_trans_barrier); [ 289.678411][T10500] lock(jbd2_handle); [ 289.682488][T10500] [ 289.682488][T10500] *** DEADLOCK *** [ 289.682488][T10500] [ 289.690631][T10500] 7 locks held by syz.2.1954/10500: [ 289.695811][T10500] #0: ffff8880775e0460 (sb_writers#29){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 289.705041][T10500] #1: ffff8880521a9808 (&type->i_mutex_dir_key#24/1){+.+.}-{3:3}, at: do_rmdir+0x1b7/0x5c0 [ 289.715141][T10500] #2: ffff8880784bcab0 (&osb->nfs_sync_rwlock){.+.+}-{3:3}, at: ocfs2_nfs_sync_lock+0x103/0x270 [ 289.725664][T10500] #3: ffff8880522142c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}, at: ocfs2_evict_inode+0xe9c/0x4630 [ 289.738274][T10500] #4: ffff888052212648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_evict_inode+0x163f/0x4630 [ 289.751154][T10500] #5: ffff8880775e0650 (sb_internal#6){.+.+}-{0:0}, at: ocfs2_evict_inode+0x1721/0x4630 [ 289.760987][T10500] #6: ffff888057ef64e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0 [ 289.771673][T10500] [ 289.771673][T10500] stack backtrace: [ 289.777557][T10500] CPU: 0 PID: 10500 Comm: syz.2.1954 Not tainted syzkaller #0 [ 289.785002][T10500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 289.795052][T10500] Call Trace: [ 289.798326][T10500] [ 289.801254][T10500] dump_stack_lvl+0x188/0x24e [ 289.805929][T10500] ? load_image+0x400/0x400 [ 289.810425][T10500] ? show_regs_print_info+0x12/0x12 [ 289.815624][T10500] ? print_circular_bug+0x12b/0x1a0 [ 289.820823][T10500] check_noncircular+0x296/0x330 [ 289.825761][T10500] ? add_chain_block+0x940/0x940 [ 289.830693][T10500] ? lockdep_lock+0xf1/0x1f0 [ 289.835280][T10500] ? _find_first_zero_bit+0xcf/0x100 [ 289.840554][T10500] __lock_acquire+0x2d07/0x7d10 [ 289.845410][T10500] ? verify_lock_unused+0x140/0x140 [ 289.850602][T10500] ? mark_lock+0x94/0x320 [ 289.854926][T10500] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 289.860903][T10500] lock_acquire+0x1bb/0x4a0 [ 289.865397][T10500] ? wait_transaction_locked+0x1a6/0x270 [ 289.871023][T10500] ? __lock_acquire+0x7d10/0x7d10 [ 289.876040][T10500] ? read_lock_is_recursive+0x10/0x10 [ 289.881409][T10500] ? prepare_to_wait_exclusive+0x7e/0x220 [ 289.887133][T10500] ? wait_transaction_locked+0x1a6/0x270 [ 289.892755][T10500] wait_transaction_locked+0x1bf/0x270 [ 289.898204][T10500] ? wait_transaction_locked+0x1a6/0x270 [ 289.903823][T10500] ? jbd2_journal_begin_ordered_truncate+0x150/0x150 [ 289.910484][T10500] ? stack_trace_save+0xa6/0xf0 [ 289.915329][T10500] ? wake_bit_function+0x200/0x200 [ 289.920437][T10500] start_this_handle+0x7ec/0x2230 [ 289.925458][T10500] ? slab_post_alloc_hook+0x4b/0x480 [ 289.930733][T10500] ? kmem_cache_alloc+0x123/0x2f0 [ 289.935745][T10500] ? jbd2__journal_start+0x13c/0x5a0 [ 289.941037][T10500] ? jbd2__journal_start+0x5a0/0x5a0 [ 289.946329][T10500] ? __kasan_slab_alloc+0x6b/0x80 [ 289.951350][T10500] ? slab_post_alloc_hook+0x67/0x480 [ 289.956621][T10500] ? slab_pre_alloc_hook+0x59/0x310 [ 289.961810][T10500] ? rcu_is_watching+0x11/0xa0 [ 289.966570][T10500] ? kmem_cache_alloc+0x151/0x2f0 [ 289.971586][T10500] ? jbd2__journal_start+0x13c/0x5a0 [ 289.976869][T10500] jbd2__journal_start+0x2b7/0x5a0 [ 289.981976][T10500] jbd2_journal_start+0x26/0x30 [ 289.986823][T10500] ocfs2_start_trans+0x3b0/0x6f0 [ 289.991750][T10500] ? ocfs2_recovery_exit+0x50/0x50 [ 289.996851][T10500] ocfs2_evict_inode+0x1721/0x4630 [ 290.001976][T10500] ? ocfs2_sync_blockdev+0x40/0x40 [ 290.007097][T10500] ? is_bpf_text_address+0x28b/0x2a0 [ 290.012387][T10500] ? is_bpf_text_address+0x22/0x2a0 [ 290.017583][T10500] ? kernel_text_address+0x9c/0xd0 [ 290.022691][T10500] ? __kernel_text_address+0x9/0x30 [ 290.027888][T10500] ? unwind_get_return_address+0x49/0x80 [ 290.033516][T10500] ? stack_trace_save+0xf0/0xf0 [ 290.038358][T10500] ? arch_stack_walk+0xf2/0x140 [ 290.043209][T10500] ? mark_lock+0x94/0x320 [ 290.047535][T10500] ? __lock_acquire+0x13cf/0x7d10 [ 290.052563][T10500] ? __lock_acquire+0x13cf/0x7d10 [ 290.057580][T10500] ? verify_lock_unused+0x140/0x140 [ 290.062785][T10500] ? inode_wait_for_writeback+0x1df/0x220 [ 290.068500][T10500] ? __lock_acquire+0x7d10/0x7d10 [ 290.073518][T10500] ? do_raw_spin_lock+0x128/0x2f0 [ 290.078542][T10500] ? __rwlock_init+0x140/0x140 [ 290.083308][T10500] ? do_raw_spin_unlock+0x11d/0x230 [ 290.088506][T10500] ? _raw_spin_unlock+0x24/0x40 [ 290.093351][T10500] ? inode_wait_for_writeback+0x1df/0x220 [ 290.099071][T10500] ? sb_clear_inode_writeback+0x3c0/0x3c0 [ 290.104784][T10500] ? do_raw_spin_lock+0x128/0x2f0 [ 290.109806][T10500] ? bit_waitqueue+0x30/0x30 [ 290.114395][T10500] ? do_raw_spin_unlock+0x11d/0x230 [ 290.119590][T10500] ? ocfs2_sync_blockdev+0x40/0x40 [ 290.124698][T10500] evict+0x4c9/0x8d0 [ 290.128590][T10500] ? proc_nr_inodes+0x2f0/0x2f0 [ 290.133432][T10500] ? do_raw_spin_unlock+0x11d/0x230 [ 290.138626][T10500] ? _raw_spin_unlock+0x24/0x40 [ 290.143469][T10500] ? iput+0x768/0x980 [ 290.147441][T10500] vfs_rmdir+0x397/0x4d0 [ 290.151675][T10500] do_rmdir+0x29a/0x5c0 [ 290.155818][T10500] ? __check_object_size+0x500/0xa40 [ 290.161093][T10500] ? d_delete_notify+0x150/0x150 [ 290.166023][T10500] ? getname_flags+0x206/0x500 [ 290.170784][T10500] __x64_sys_rmdir+0x45/0x50 [ 290.175371][T10500] do_syscall_64+0x4c/0xa0 [ 290.179785][T10500] ? clear_bhb_loop+0x60/0xb0 [ 290.184456][T10500] ? clear_bhb_loop+0x60/0xb0 [ 290.189129][T10500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.195015][T10500] RIP: 0033:0x7ff7d0f9acb9 [ 290.199429][T10500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.219027][T10500] RSP: 002b:00007ff7d1d7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 290.227433][T10500] RAX: ffffffffffffffda RBX: 00007ff7d1216090 RCX: 00007ff7d0f9acb9 [ 290.235393][T10500] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 290.243355][T10500] RBP: 00007ff7d1008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 290.251320][T10500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.259278][T10500] R13: 00007ff7d1216128 R14: 00007ff7d1216090 R15: 00007ffe87356b98 [ 290.267243][T10500] [ 290.323710][ T4276] ocfs2: Unmounting device (7,2) on (node local)