last executing test programs: 7m49.919243223s ago: executing program 32 (id=1619): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) 5m55.909342276s ago: executing program 0 (id=2524): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x7, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d00000081000000040000000100000000000000", @ANYRES32=r0], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r1, &(0x7f0000000d40), 0x0}, 0x20) 5m55.667218469s ago: executing program 0 (id=2517): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 5m55.272430743s ago: executing program 0 (id=2521): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000a13de30840205029f1850102030109022d0002000000000904210001d553e5000905060500000000000904000001f238"], 0x0) 5m53.556417252s ago: executing program 0 (id=2537): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="a5e6efc35603e7564b7345d63ddd28921043052db1e8293a3cccdcbbfe66420d245c069405350a418630348ac28237dffd6396393abb1c54e8b62fa09afa9dd6143056389d59d83d642d9c199a7ee26b39bb83b6c59ab057c4cdda6edf7b8eac48ee1f2a5e0c4e0ccc25cf9b5449", @ANYRES8, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESHEX, @ANYRES8, @ANYRES32, @ANYRES64], 0x1, 0x5de, &(0x7f0000000a00)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 5m53.084323317s ago: executing program 0 (id=2539): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0xf1e, &(0x7f0000000f40)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80) getdents(r0, &(0x7f0000001fc0)=""/184, 0x2000208e) 5m52.624400523s ago: executing program 0 (id=2542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) 5m52.019829129s ago: executing program 33 (id=2542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) 3m48.144828392s ago: executing program 2 (id=3407): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2012050000000501007406"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3m46.176252634s ago: executing program 2 (id=3417): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x4, 0x25dfdbfb, {0xa, 0x40, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x13}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) 3m45.838187897s ago: executing program 2 (id=3421): r0 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\xef\xd4Z\x19\xc1\xc1\x80\xd3\x90\x1ei\xfd\xb0\x1e\v;2\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbs\vT\xb9\xc9f\xa0\xf3\xb9\xc7M%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000080)='\xf6\x98l_\xf5<\x1a_6:', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f0000000680)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000000)='\xc1r\x9dnyb`\x00\xa2\xabCg\x13\b\x8f*\xdaA\x822\xf7\xaf\xf6U\xad\xb0\xb2\f\x88s\x19\xa3D\xa9\x82\x8a\xa3\x94\xab\"|\xcf\x1f\x12\x8d\xe1\xe5\xc3\x01\x03\x003\xa9p^\x01^\x16>tnF', &(0x7f00000007c0)='\x00', &(0x7f0000000900)='\x01-\x00\xb6\xb7\xe1\x7fl\xd5\xf8G\xfdQ=\xc3\xd4\x02RP\xb2\xbf\x99\xfc\x10\" \x93)\xc5\x93\x98\x11\xe0\xd4\x14\x9a\f#LU\xda\xeb\f\x03\xa4\xf7\x85\xddYL\xf7\xf2\xc4\xff@+\x04^\xcc\xc8\xa1\x9f\xa7p\xd2\xaa\xa2^\xa6\xd1\v\xd1\xdd+o\x91\xc8\x90\xeebUCE\xdc=\x89\x86\x81S\x038', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f00000008c0)='-\xf3\x00', &(0x7f0000000980)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000780)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f0000000a80)='::-$[]#:{\x00']}, &(0x7f0000001040)={[&(0x7f00000000c0)='-\xf3\x00', &(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f0000001000)='\xb7\xe8\x00']}) 3m32.462961905s ago: executing program 36 (id=3494): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000ac0)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000080)='\xf6\x98l_\xf5<\x1a_6:', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f0000000680)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000000)='\xc1r\x9dnyb`\x00\xa2\xabCg\x13\b\x8f*\xdaA\x822\xf7\xaf\xf6U\xad\xb0\xb2\f\x88s\x19\xa3D\xa9\x82\x8a\xa3\x94\xab\"|\xcf\x1f\x12\x8d\xe1\xe5\xc3\x01\x03\x003\xa9p^\x01^\x16>tnF', &(0x7f00000007c0)='\x00', &(0x7f0000000900)='\x01-\x00\xb6\xb7\xe1\x7fl\xd5\xf8G\xfdQ=\xc3\xd4\x02RP\xb2\xbf\x99\xfc\x10\" \x93)\xc5\x93\x98\x11\xe0\xd4\x14\x9a\f#LU\xda\xeb\f\x03\xa4\xf7\x85\xddYL\xf7\xf2\xc4\xff@+\x04^\xcc\xc8\xa1\x9f\xa7p\xd2\xaa\xa2^\xa6\xd1\v\xd1\xdd+o\x91\xc8\x90\xeebUCE\xdc=\x89\x86\x81S\x038', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f00000008c0)='-\xf3\x00', &(0x7f0000000980)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000780)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f0000000a80)='::-$[]#:{\x00']}, &(0x7f0000001040)={[&(0x7f00000000c0)='-\xf3\x00', &(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f0000001000)='\xb7\xe8\x00']}) 2m1.181656827s ago: executing program 7 (id=4011): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="900000001a00010027bd700002dcdf2502202001000000000020000008000200ffffffff08000100ac1e0101630008"], 0x90}}, 0x4040000) 2m0.94506467s ago: executing program 7 (id=4014): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000900)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x1) 2m0.687469172s ago: executing program 7 (id=4017): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1m57.435588669s ago: executing program 7 (id=4034): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@jqfmt_vfsold}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) 1m56.728960746s ago: executing program 7 (id=4042): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 1m56.028450644s ago: executing program 7 (id=4046): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@init_itable}]}, 0x82, 0x48f, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r0, r0, 0x0, 0xe3aa6ea) 1m55.304275762s ago: executing program 37 (id=4046): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@init_itable}]}, 0x82, 0x48f, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r0, r0, 0x0, 0xe3aa6ea) 1m46.095924004s ago: executing program 6 (id=4098): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600156ffffff7000000000000000000", @ANYRES32=0x0, @ANYBLOB="140001"], 0x2c}, 0x1, 0x0, 0x0, 0x620080d4}, 0x24080) 1m45.834313697s ago: executing program 6 (id=4101): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2000000, &(0x7f0000000140)=ANY=[@ANYBLOB="63726561746f723d05f343e92c6469725f756d61736b3d30303030303030303030303030303030303130303030312c636f6465706167653d63703836332c63726561746f723d32c9459b2c696f636861727365743d6d6163637972696c6c69632c00"], 0x7f, 0x322, &(0x7f0000000980)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000000b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1802a53, 0x0, 0xfa, 0x0, &(0x7f00000000c0)) unlinkat(0xffffffffffffff9c, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200) 1m45.417151742s ago: executing program 6 (id=4103): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000240)='./bus\x00', 0xc3, &(0x7f00000002c0)={[{@user_xattr}, {@usrjquota_file, 0x4}, {@acl}, {@data_journal}, {@usrjquota, 0x3d}]}, 0x2, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=") bind$isdn(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000100)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1m44.108065076s ago: executing program 6 (id=4108): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m43.528857183s ago: executing program 6 (id=4114): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0x9}, [@IFA_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x2c}}, 0x0) 1m42.992346318s ago: executing program 6 (id=4117): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, r0, 0x701, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x75}}}}}, 0x20}}, 0x0) 1m42.238355607s ago: executing program 38 (id=4117): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, r0, 0x701, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x75}}}}}, 0x20}}, 0x0) 5.101930153s ago: executing program 8 (id=4739): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x218002, &(0x7f0000000080), 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4027e, 0xe7) fallocate(r0, 0x0, 0x0, 0x8800003) 4.51916112s ago: executing program 8 (id=4746): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x1, "0400"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 2.771901139s ago: executing program 1 (id=4754): syz_io_uring_setup(0x12ac, &(0x7f00000002c0)={0x0, 0x7d4d, 0x8, 0x0, 0x38b}, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000002000100240012800b00010065727370616e0000140002800600020030000000080004"], 0x44}}, 0x0) 2.510318712s ago: executing program 9 (id=4756): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r0, 0x20, &(0x7f0000001080)={0x0, 0x42, 0x0, 0x0}}, 0x10) 2.468077573s ago: executing program 1 (id=4757): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000010000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 2.307779204s ago: executing program 4 (id=4758): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, 0x0, 0x0) 2.243998765s ago: executing program 8 (id=4759): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000200)={0xcd, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.201561095s ago: executing program 9 (id=4760): r0 = io_uring_setup(0x5880, &(0x7f0000000540)={0x0, 0x101000, 0x3000, 0x1, 0xfefffffd}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x7ffffffe, r0, &(0x7f0000000300)={0x10000008}) 2.169411006s ago: executing program 1 (id=4761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)={0x54, r1, 0x1, 0xffffffff, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x10001}, {0xc, 0x90, 0x1ff}}]}, 0x54}}, 0x0) 1.939929898s ago: executing program 1 (id=4762): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"a2e3ad0e090d07f91b5e1a1887f707061f38e7ff7fc6e5539b0d3c0a8b089b3f32356c030890e0879b0a4cc6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07732f0acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1d2f87b70f1fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000108000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55603d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000068c200", 0x1000}}, 0x1006) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}}) 1.931766628s ago: executing program 9 (id=4763): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010028bd7000f6dbdf250900020073797a31001800000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, 0x1402, 0x1, 0x70bd2a, 0x25dfdc01, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 1.681752171s ago: executing program 8 (id=4764): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000b708000000000000dbaaf8fff1000000b5080000020000087b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 1.659758272s ago: executing program 1 (id=4765): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.421867964s ago: executing program 8 (id=4766): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="98cabca5", 0x4) 1.334776195s ago: executing program 4 (id=4767): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000700)={0x0, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x4, @private0, 0x97b}, @in6={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x35}}, @in6={0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}]}, &(0x7f0000000740)=0x10) 1.168026917s ago: executing program 8 (id=4768): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='memory=low,background_gc=off,noquota,inline_dentry,data_flush,disable_roll_forward,noinline_xattr,discard,checkpoint=disable,user_xattr,atgc,resuid=', @ANYRESDEC=0x0, @ANYBLOB="2c6a71666d743d76667376312c7573726a71756f74613d2d29242d2e25272a2c2c00a40988e362019a69db5cb2a8b125934e5652c7c1af7aa1b29a3326b2ca0000000000"], 0xff, 0x5512, &(0x7f00000079c0)="$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") syz_open_procfs(0x0, &(0x7f0000000480)='net/dev_mcast\x00') syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x1a62cb5, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 1.013976249s ago: executing program 4 (id=4769): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x1, 0xffffffff, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x80002, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x9, 0xb, 0x9, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xe, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x3, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0x6, 0x8, 0x0, 0x0, 0x1, 0x4, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x800009, 0x0, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xb9, 0xf81e, 0x1, 0x0, 0x7, 0x8, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0xffffffff, 0x0, 0x9, 0x1, 0x7, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x2, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0xaa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x26c, 0x4, 0x7, 0x102, 0x0, 0xb, 0xfffffffd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x500007f, 0x2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 983.216619ms ago: executing program 9 (id=4770): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x8, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 712.506512ms ago: executing program 9 (id=4771): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYBLOB='\x00\x00\x00@'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa0}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 463.887735ms ago: executing program 4 (id=4772): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) 389.866415ms ago: executing program 4 (id=4773): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) 249.514507ms ago: executing program 9 (id=4774): unshare(0x400) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32=r0], 0x10) 126.605818ms ago: executing program 4 (id=4775): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0xfffffffffffffd05) 0s ago: executing program 1 (id=4776): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x0) kernel console output (not intermixed with test programs): 4 using dummy_hcd [ 612.738402][T13668] usb 7-1: Using ep0 maxpacket: 16 [ 612.762843][T13668] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 612.778021][T13668] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 612.831532][T13668] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 612.899557][T13668] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 612.909309][T13668] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.917373][T13668] usb 7-1: Product: syz [ 612.930108][T13668] usb 7-1: Manufacturer: syz [ 612.934808][T13668] usb 7-1: SerialNumber: syz [ 613.176423][T13668] usb 7-1: 0:2 : does not exist [ 613.209147][T13668] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 613.284899][T13668] usb 7-1: USB disconnect, device number 4 [ 613.332089][T15617] udevd[15617]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 613.958118][T16616] loop8: detected capacity change from 0 to 40427 [ 614.008151][T16616] F2FS-fs (loop8): invalid crc value [ 614.096069][T16616] F2FS-fs (loop8): Found nat_bits in checkpoint [ 614.303512][T16616] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 614.520603][T15029] syz-executor: attempt to access beyond end of device [ 614.520603][T15029] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 614.538866][T15029] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 615.032811][T16675] loop6: detected capacity change from 0 to 8 [ 615.148952][T16675] SQUASHFS error: lzo decompression failed, data probably corrupt [ 615.188416][T16675] SQUASHFS error: Failed to read block 0x202: -5 [ 615.194841][T16675] SQUASHFS error: Unable to read metadata cache entry [200] [ 616.154089][T16708] loop8: detected capacity change from 0 to 128 [ 616.200969][T16710] loop7: detected capacity change from 0 to 16 [ 616.227699][T16708] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 616.238568][T16710] erofs: (device loop7): mounted with root inode @ nid 36. [ 616.317157][T16708] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 616.459231][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 320 @ nid 36 [ 616.495503][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 299 @ nid 36 [ 616.527683][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 298 @ nid 36 [ 616.557650][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 297 @ nid 36 [ 616.608742][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 296 @ nid 36 [ 616.639538][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 288 @ nid 36 [ 616.660722][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 280 @ nid 36 [ 616.704021][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 186 @ nid 36 [ 616.735564][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 185 @ nid 36 [ 616.763628][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 184 @ nid 36 [ 616.793351][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 155 @ nid 36 [ 616.816916][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 154 @ nid 36 [ 616.837505][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 153 @ nid 36 [ 616.862925][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 152 @ nid 36 [ 616.883297][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 139 @ nid 36 [ 616.916927][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 138 @ nid 36 [ 616.937270][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 137 @ nid 36 [ 616.952287][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 136 @ nid 36 [ 616.972414][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 128 @ nid 36 [ 616.984291][T16695] loop6: detected capacity change from 0 to 32768 [ 616.995284][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 120 @ nid 36 [ 617.030478][T16695] JBD2: Ignoring recovery information on journal [ 617.098441][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 82 @ nid 36 [ 617.152431][T16695] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 617.158763][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 81 @ nid 36 [ 617.188857][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 80 @ nid 36 [ 617.222063][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 617.239530][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 64 @ nid 36 [ 617.277860][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 48 @ nid 36 [ 617.328394][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 617.337702][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 617.389818][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 37 @ nid 36 [ 617.419979][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 617.434163][T16726] loop4: detected capacity change from 0 to 256 [ 617.464785][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 35 @ nid 36 [ 617.502255][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 34 @ nid 36 [ 617.518689][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 33 @ nid 36 [ 617.568503][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 32 @ nid 36 [ 617.630229][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 617.678355][T14884] ocfs2: Unmounting device (7,6) on (node local) [ 617.684991][T16710] erofs: (device loop7): z_erofs_readahead: readahead error at folio 16 @ nid 36 [ 617.741735][T16710] syz.7.3933: attempt to access beyond end of device [ 617.741735][T16710] loop7: rw=524288, sector=1049272, nr_sectors = 32 limit=16 [ 617.791212][T16710] syz.7.3933: attempt to access beyond end of device [ 617.791212][T16710] loop7: rw=524288, sector=376, nr_sectors = 32 limit=16 [ 617.808394][T16734] loop8: detected capacity change from 0 to 64 [ 617.850161][T16710] syz.7.3933: attempt to access beyond end of device [ 617.850161][T16710] loop7: rw=524288, sector=384, nr_sectors = 32 limit=16 [ 617.952672][T16710] syz.7.3933: attempt to access beyond end of device [ 617.952672][T16710] loop7: rw=524288, sector=720, nr_sectors = 32 limit=16 [ 618.042807][T16710] syz.7.3933: attempt to access beyond end of device [ 618.042807][T16710] loop7: rw=524288, sector=728, nr_sectors = 32 limit=16 [ 618.132732][T16710] syz.7.3933: attempt to access beyond end of device [ 618.132732][T16710] loop7: rw=524288, sector=525144, nr_sectors = 32 limit=16 [ 618.227105][T16710] syz.7.3933: attempt to access beyond end of device [ 618.227105][T16710] loop7: rw=524288, sector=525152, nr_sectors = 32 limit=16 [ 618.290686][T16710] syz.7.3933: attempt to access beyond end of device [ 618.290686][T16710] loop7: rw=524288, sector=13478624032, nr_sectors = 32 limit=16 [ 618.364349][T16710] syz.7.3933: attempt to access beyond end of device [ 618.364349][T16710] loop7: rw=524288, sector=13478624040, nr_sectors = 32 limit=16 [ 618.546509][T16752] loop6: detected capacity change from 0 to 128 [ 618.673534][T16752] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 618.788048][T16752] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 619.060091][T14884] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 619.384151][T16777] loop8: detected capacity change from 0 to 1024 [ 619.530845][T16777] hfsplus: xattr searching failed [ 619.621200][T16748] loop4: detected capacity change from 0 to 32768 [ 619.664357][T16782] loop6: detected capacity change from 0 to 16 [ 619.673383][T16748] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 619.713076][T16782] erofs: (device loop6): mounted with root inode @ nid 36. [ 619.818502][T16784] erofs: (device loop7): mounted with root inode @ nid 36. [ 619.849625][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 320 @ nid 36 [ 619.897136][T16784] erofs: (device loop7): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 619.922877][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 299 @ nid 36 [ 619.923598][T16784] bio_check_eod: 34 callbacks suppressed [ 619.923633][T16784] syz.7.3954: attempt to access beyond end of device [ 619.923633][T16784] loop7: rw=0, sector=296, nr_sectors = 8 limit=16 [ 619.970066][T15125] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 619.996705][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 298 @ nid 36 [ 620.058690][T16784] erofs: (device loop7): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 620.079074][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 297 @ nid 36 [ 620.112371][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 296 @ nid 36 [ 620.128023][T16784] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 620.148252][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 288 @ nid 36 [ 620.184761][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 280 @ nid 36 [ 620.240908][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 186 @ nid 36 [ 620.298140][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 185 @ nid 36 [ 620.309540][T16793] bridge: RTM_NEWNEIGH with invalid ether address [ 620.339098][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 184 @ nid 36 [ 620.388317][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 155 @ nid 36 [ 620.441898][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 154 @ nid 36 [ 620.518036][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 153 @ nid 36 [ 620.527372][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 152 @ nid 36 [ 620.648133][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 139 @ nid 36 [ 620.657433][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 138 @ nid 36 [ 620.676251][T16797] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3958'. [ 620.744718][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 137 @ nid 36 [ 620.785177][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 136 @ nid 36 [ 620.818863][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 128 @ nid 36 [ 620.857456][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 120 @ nid 36 [ 620.875658][T16803] set_capacity_and_notify: 1 callbacks suppressed [ 620.875676][T16803] loop8: detected capacity change from 0 to 512 [ 620.883327][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 82 @ nid 36 [ 620.932997][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 81 @ nid 36 [ 621.004230][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 80 @ nid 36 [ 621.034434][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 621.038304][T16803] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.055353][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 64 @ nid 36 [ 621.086510][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 48 @ nid 36 [ 621.108281][T16803] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.128459][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 621.158029][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 621.212626][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 37 @ nid 36 [ 621.237320][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 621.262934][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 35 @ nid 36 [ 621.289735][T16803] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 621.312907][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 34 @ nid 36 [ 621.348097][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 33 @ nid 36 [ 621.365146][T16815] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 621.388479][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 32 @ nid 36 [ 621.419266][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 621.477884][T16782] erofs: (device loop6): z_erofs_readahead: readahead error at folio 16 @ nid 36 [ 621.487815][T16782] syz.6.3953: attempt to access beyond end of device [ 621.487815][T16782] loop6: rw=524288, sector=1049272, nr_sectors = 32 limit=16 [ 621.521197][T15029] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.536521][T16782] syz.6.3953: attempt to access beyond end of device [ 621.536521][T16782] loop6: rw=524288, sector=376, nr_sectors = 32 limit=16 [ 621.562448][T16782] syz.6.3953: attempt to access beyond end of device [ 621.562448][T16782] loop6: rw=524288, sector=384, nr_sectors = 32 limit=16 [ 621.599957][T16782] syz.6.3953: attempt to access beyond end of device [ 621.599957][T16782] loop6: rw=524288, sector=720, nr_sectors = 32 limit=16 [ 621.634835][T16782] syz.6.3953: attempt to access beyond end of device [ 621.634835][T16782] loop6: rw=524288, sector=728, nr_sectors = 32 limit=16 [ 621.709341][T16782] syz.6.3953: attempt to access beyond end of device [ 621.709341][T16782] loop6: rw=524288, sector=525144, nr_sectors = 32 limit=16 [ 621.729636][T16782] syz.6.3953: attempt to access beyond end of device [ 621.729636][T16782] loop6: rw=524288, sector=525152, nr_sectors = 32 limit=16 [ 621.778865][T16782] syz.6.3953: attempt to access beyond end of device [ 621.778865][T16782] loop6: rw=524288, sector=13478624032, nr_sectors = 32 limit=16 [ 621.868620][T16782] syz.6.3953: attempt to access beyond end of device [ 621.868620][T16782] loop6: rw=524288, sector=13478624040, nr_sectors = 32 limit=16 [ 622.284551][T16836] vivid-000: disconnect [ 622.307625][T16831] vivid-000: reconnect [ 622.617539][T16844] loop7: detected capacity change from 0 to 64 [ 622.749873][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 622.749893][ T28] audit: type=1800 audit(1777976197.432:298): pid=16844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3970" name="file1" dev="loop7" ino=21 res=0 errno=0 [ 623.054002][T16824] loop4: detected capacity change from 0 to 32768 [ 623.149925][T16824] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 623.207397][T16824] JBD2: Ignoring recovery information on journal [ 623.369874][T16824] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 623.397204][T16827] loop8: detected capacity change from 0 to 32768 [ 623.551865][T16827] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 623.809636][T16827] XFS (loop8): Ending clean mount [ 623.899916][T16827] XFS (loop8): Quotacheck needed: Please wait. [ 623.934532][ T9930] ocfs2: Unmounting device (7,4) on (node local) [ 624.066771][T16827] XFS (loop8): Quotacheck: Done. [ 624.321068][T15029] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 624.598794][T16851] loop7: detected capacity change from 0 to 32768 [ 624.603576][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.646694][T16851] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 12 [ 624.934194][T15125] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 12 [ 624.992014][T16890] loop4: detected capacity change from 0 to 128 [ 625.203282][T16870] loop6: detected capacity change from 0 to 32768 [ 625.252552][T16870] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 625.814784][T16909] loop4: detected capacity change from 0 to 256 [ 625.906668][T16909] FAT-fs (loop4): Directory bread(block 64) failed [ 625.909591][T16910] loop7: detected capacity change from 0 to 1764 [ 625.920770][T16909] FAT-fs (loop4): Directory bread(block 65) failed [ 625.927462][T16909] FAT-fs (loop4): Directory bread(block 66) failed [ 625.988268][T16909] FAT-fs (loop4): Directory bread(block 67) failed [ 625.994990][T16909] FAT-fs (loop4): Directory bread(block 68) failed [ 626.046957][T16909] FAT-fs (loop4): Directory bread(block 69) failed [ 626.084271][T16909] FAT-fs (loop4): Directory bread(block 70) failed [ 626.120490][T16909] FAT-fs (loop4): Directory bread(block 71) failed [ 626.160110][T16909] FAT-fs (loop4): Directory bread(block 72) failed [ 626.191438][T16909] FAT-fs (loop4): Directory bread(block 73) failed [ 626.974589][T16937] netlink: 'syz.8.3996': attribute type 3 has an invalid length. [ 627.446886][T16921] loop6: detected capacity change from 0 to 40427 [ 627.512952][T16921] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x7ffff [ 627.555493][T16921] F2FS-fs (loop6): invalid crc value [ 627.590974][T16921] F2FS-fs (loop6): Found nat_bits in checkpoint [ 627.748358][T16921] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 627.758225][T13668] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 627.958515][T13668] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 627.982332][T13668] usb 9-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 628.009773][T13668] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.027690][T14884] F2FS-fs (loop6): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0 [ 628.041687][T13668] usb 9-1: Product: syz [ 628.048723][T13668] usb 9-1: Manufacturer: syz [ 628.051095][T14884] F2FS-fs (loop6): invalid blkaddr: 516, type: 10, run fsck to fix. [ 628.059537][T13668] usb 9-1: SerialNumber: syz [ 628.087546][T13668] usb 9-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 628.583459][T16952] loop4: detected capacity change from 0 to 40427 [ 628.606404][T16952] F2FS-fs (loop4): invalid crc value [ 628.643473][T16952] F2FS-fs (loop4): Found nat_bits in checkpoint [ 628.725279][T13668] usb 9-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 628.785688][T13668] usb 9-1: USB disconnect, device number 3 [ 628.863882][T16952] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 629.096190][ T9930] bio_check_eod: 34 callbacks suppressed [ 629.096209][ T9930] syz-executor: attempt to access beyond end of device [ 629.096209][ T9930] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 629.149730][ T9930] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 629.331472][T16982] netlink: 'syz.7.4005': attribute type 1 has an invalid length. [ 630.580393][T17017] loop8: detected capacity change from 0 to 2048 [ 630.701459][T17017] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 630.867008][T15029] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.987587][T16995] loop6: detected capacity change from 0 to 40427 [ 631.040774][T16995] F2FS-fs (loop6): invalid crc value [ 631.086264][T16995] F2FS-fs (loop6): Found nat_bits in checkpoint [ 631.275861][T16995] F2FS-fs (loop6): Start checkpoint disabled! [ 631.311274][T16995] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 631.526375][T17013] loop4: detected capacity change from 0 to 32768 [ 631.819122][ T12] kworker/u4:1: attempt to access beyond end of device [ 631.819122][ T12] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 631.878103][ T12] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 631.885363][ T12] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 632.193233][T17055] loop4: detected capacity change from 0 to 256 [ 632.284355][T17055] FAT-fs (loop4): Directory bread(block 64) failed [ 632.313989][T17055] FAT-fs (loop4): Directory bread(block 65) failed [ 632.340938][T17055] FAT-fs (loop4): Directory bread(block 66) failed [ 632.378967][T17055] FAT-fs (loop4): Directory bread(block 67) failed [ 632.395984][T17055] FAT-fs (loop4): Directory bread(block 68) failed [ 632.424099][T17055] FAT-fs (loop4): Directory bread(block 69) failed [ 632.437604][T17055] FAT-fs (loop4): Directory bread(block 70) failed [ 632.470127][T17055] FAT-fs (loop4): Directory bread(block 71) failed [ 632.494567][T17055] FAT-fs (loop4): Directory bread(block 72) failed [ 632.548004][T17055] FAT-fs (loop4): Directory bread(block 73) failed [ 632.929704][T17065] loop6: detected capacity change from 0 to 4096 [ 632.985589][T17065] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.051343][T17065] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 633.108113][T15244] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 633.327352][ T5787] Bluetooth: hci2: unknown advertising packet type: 0x69 [ 633.327449][ T5787] Bluetooth: hci2: Dropping invalid advertising data [ 633.343990][ T5787] Bluetooth: hci2: Malformed LE Event: 0x02 [ 633.354102][T15244] usb 9-1: unable to get BOS descriptor or descriptor too short [ 633.374023][T15244] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 633.384207][T15244] usb 9-1: can't read configurations, error -71 [ 633.423233][T14884] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.749242][T17088] loop7: detected capacity change from 0 to 512 [ 633.767214][T17088] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 633.876423][T17088] EXT4-fs (loop7): 1 truncate cleaned up [ 633.919557][T17088] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.245134][T17094] loop6: detected capacity change from 0 to 4096 [ 634.263888][T17094] ntfs3: loop6: Different NTFS sector size (1024) and media sector size (512). [ 634.354890][T15026] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 634.452991][T15026] EXT4-fs (loop7): Remounting filesystem read-only [ 634.965515][T15026] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.159605][T17128] loop8: detected capacity change from 0 to 8 [ 635.201157][ T2939] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.339359][T17128] SQUASHFS error: Failed to read block 0x2d0: -5 [ 635.346680][T17128] SQUASHFS error: Unable to read metadata cache entry [2ce] [ 635.380003][T17128] SQUASHFS error: Unable to read directory block [2ce:0] [ 635.521254][ T2939] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.667209][ T2939] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.820667][ T2939] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.833551][T17140] loop8: detected capacity change from 0 to 128 [ 635.850027][T17140] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 635.899544][T17140] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 636.140230][T17145] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 636.199869][ T59] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 636.754798][T17156] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4054'. [ 636.924812][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 636.958811][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 636.983288][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 637.003364][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 637.011336][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 637.019492][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 637.534583][T17149] loop8: detected capacity change from 0 to 32768 [ 639.004487][T17209] netlink: 296 bytes leftover after parsing attributes in process `syz.6.4067'. [ 639.035166][T17212] loop8: detected capacity change from 0 to 16 [ 639.074778][T17212] erofs: (device loop8): mounted with root inode @ nid 36. [ 639.128479][ T5787] Bluetooth: hci0: command tx timeout [ 639.705183][T17232] loop4: detected capacity change from 0 to 1024 [ 639.717042][T17232] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 639.724192][T17232] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 2: comm syz.4.4075: lblock 2 mapped to illegal pblock 2 (length 1) [ 639.724538][T17232] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 639.724585][T17232] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 48: comm syz.4.4075: lblock 0 mapped to illegal pblock 48 (length 1) [ 639.725595][T17232] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 639.725805][T17232] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.4075: Failed to acquire dquot type 0 [ 639.727249][T17232] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 639.730998][T17232] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.4075: mark_inode_dirty error [ 639.732136][T17232] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 639.732232][T17232] EXT4-fs (loop4): 1 orphan inode deleted [ 639.734035][T17232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.738208][ T136] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 639.738662][ T136] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 639.738703][ T136] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:5: Failed to release dquot type 0 [ 639.773599][T17159] chnl_net:caif_netlink_parms(): no params data found [ 639.781161][T17232] EXT4-fs error (device loop4): __ext4_get_inode_loc:4496: comm syz.4.4075: Invalid inode table block 1 in block_group 0 [ 639.960581][ T9930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.960802][ T9930] EXT4-fs error (device loop4): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 639.961065][ T9930] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 639.968041][ T9930] EXT4-fs error (device loop4): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 640.085912][ T2939] hsr_slave_0: left promiscuous mode [ 640.144671][ T2939] hsr_slave_1: left promiscuous mode [ 640.147630][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.147669][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.148702][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.148733][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.154845][ T2939] bridge_slave_1: left allmulticast mode [ 640.154871][ T2939] bridge_slave_1: left promiscuous mode [ 640.155062][ T2939] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.191914][ T2939] bridge_slave_0: left allmulticast mode [ 640.191941][ T2939] bridge_slave_0: left promiscuous mode [ 640.192148][ T2939] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.656786][ T2939] veth1_macvtap: left promiscuous mode [ 640.656964][ T2939] veth0_macvtap: left promiscuous mode [ 640.657202][ T2939] veth1_vlan: left promiscuous mode [ 640.657331][ T2939] veth0_vlan: left promiscuous mode [ 640.936510][T17257] loop4: detected capacity change from 0 to 4096 [ 640.938480][T17257] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 640.980147][T17257] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 640.980174][T17257] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 640.980206][T17257] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 640.980273][T17257] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 641.040142][T17257] ntfs: volume version 3.1. [ 641.056281][T17259] Bluetooth: MGMT ver 1.22 [ 641.205845][T17257] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-13. You might want to try to use the mount option nls=utf8. [ 641.205937][T17257] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 641.208544][ T5783] Bluetooth: hci0: command tx timeout [ 641.505393][T17229] tty tty3: ldisc open failed (-12), clearing slot 2 [ 641.841534][T17270] loop4: detected capacity change from 0 to 128 [ 642.231050][T17274] autofs4:pid:17274:autofs_fill_super: called with bogus options [ 643.130096][ T5787] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 643.288492][ T5787] Bluetooth: hci0: command 0x040f tx timeout [ 643.483634][ T2939] team0 (unregistering): Port device team_slave_1 removed [ 643.566290][ T2939] team0 (unregistering): Port device team_slave_0 removed [ 643.654323][ T2939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 643.755380][ T2939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.381107][ T2939] bond0 (unregistering): Released all slaves [ 644.566312][T17265] bond0: option ad_select: unable to set because the bond device is up [ 644.587609][T17288] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4094'. [ 644.605568][T17288] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4094'. [ 644.861748][T17159] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.908397][T17159] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.915821][T17159] bridge_slave_0: entered allmulticast mode [ 644.975623][T17159] bridge_slave_0: entered promiscuous mode [ 645.001738][T17159] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.027111][T17159] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.068560][T17159] bridge_slave_1: entered allmulticast mode [ 645.103304][T17159] bridge_slave_1: entered promiscuous mode [ 645.135059][T17300] netlink: 'syz.6.4098': attribute type 1 has an invalid length. [ 645.282479][T17159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.342216][T17159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.373052][ T5787] Bluetooth: hci0: command 0x040f tx timeout [ 645.379305][ T5775] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 645.393149][T17308] loop6: detected capacity change from 0 to 64 [ 645.551654][T17159] team0: Port device team_slave_0 added [ 645.585395][T17159] team0: Port device team_slave_1 added [ 645.593365][ T5775] usb 9-1: config 0 has an invalid interface number: 133 but max is 0 [ 645.645671][ T5775] usb 9-1: config 0 has no interface number 0 [ 645.681200][ T5775] usb 9-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 645.704812][ T5775] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.780033][ T5775] usb 9-1: Product: syz [ 645.784281][ T5775] usb 9-1: Manufacturer: syz [ 645.814605][ T5775] usb 9-1: SerialNumber: syz [ 645.823671][ T5775] usb 9-1: config 0 descriptor?? [ 645.861846][T17159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.878464][T17159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.967998][T17159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.004587][T17159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.027580][T17159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.094019][ T5775] keyspan 9-1:0.133: Keyspan 1 port adapter converter detected [ 646.117518][ T5775] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 81 [ 646.125820][T17159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.150982][T17319] loop6: detected capacity change from 0 to 8192 [ 646.152932][T17325] loop4: detected capacity change from 0 to 64 [ 646.198421][ T5775] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 1 [ 646.214890][T17319] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 646.271676][T17319] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 646.286867][ T5775] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 2 [ 646.294713][T17319] REISERFS (device loop6): using journaled data mode [ 646.294779][T17319] reiserfs: using flush barriers [ 646.323517][ T5775] usb 9-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 646.403493][T17159] hsr_slave_0: entered promiscuous mode [ 646.414020][T17319] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 646.469127][T17159] hsr_slave_1: entered promiscuous mode [ 646.486566][T17159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 646.505664][T17319] REISERFS (device loop6): checking transaction log (loop6) [ 646.515881][T15242] usb 9-1: USB disconnect, device number 6 [ 646.533689][T17159] Cannot create hsr debugfs directory [ 646.546671][T15242] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 646.590034][T15242] keyspan 9-1:0.133: device disconnected [ 646.611394][T17319] REISERFS (device loop6): Using r5 hash to sort names [ 646.709549][T17319] reiserfs: enabling write barrier flush mode [ 646.756202][T17319] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 646.801963][T17319] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 647.448097][ T5787] Bluetooth: hci0: command 0x040f tx timeout [ 647.527831][T17348] loop8: detected capacity change from 0 to 256 [ 647.537767][T17159] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 647.570677][T17348] exfat: Deprecated parameter 'utf8' [ 647.590796][T17159] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 647.624142][T17348] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 647.647887][T17159] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 647.685668][T17350] QAT: Invalid ioctl 21531 [ 647.696875][T17159] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 648.271810][T17366] loop8: detected capacity change from 0 to 128 [ 648.300580][T17366] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 648.407661][T17366] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 648.421820][ T994] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.678454][T17315] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 648.784102][ T994] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.991440][ T994] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.187319][ T994] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.270230][T17159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.387673][T17159] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.476143][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.483416][ T1317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.531131][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.538380][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.722636][T17387] loop4: detected capacity change from 0 to 512 [ 649.780555][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 649.794998][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 649.808261][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 649.824885][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 649.837450][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 649.851493][T17387] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4127: invalid indirect mapped block 10 (level 1) [ 649.872926][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 649.877790][T17387] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4127: invalid indirect mapped block 8 (level 1) [ 650.031226][T17387] EXT4-fs (loop4): 1 truncate cleaned up [ 650.058825][T17387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.180680][ T994] tipc: Left network mode [ 650.259871][T17387] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 213 vs 220 free clusters [ 650.494767][ T9930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.467207][T17159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.855719][T17435] loop8: detected capacity change from 0 to 4096 [ 651.904335][T17435] EXT4-fs: Ignoring removed orlov option [ 651.947725][T17390] chnl_net:caif_netlink_parms(): no params data found [ 651.971285][T17435] EXT4-fs (loop8): Test dummy encryption mode enabled [ 652.008536][ T5783] Bluetooth: hci3: command tx timeout [ 652.061183][T17435] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.083680][ T28] audit: type=1800 audit(1777976226.772:299): pid=17435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4139" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 652.121245][T17435] fs-verity (loop8, inode 15): Error -22 reading file data [ 652.130694][T17435] fs-verity (loop8, inode 15): Error -22 building Merkle tree [ 652.183025][T15029] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.315975][T17443] loop8: detected capacity change from 0 to 512 [ 652.331793][T17425] loop4: detected capacity change from 0 to 32768 [ 652.440870][T17425] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 652.512376][T17443] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.564692][T17443] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.714128][T17425] XFS (loop4): Ending clean mount [ 652.824595][T15029] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.884387][T17390] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.920172][ T9930] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 652.932996][T17390] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.978457][T17390] bridge_slave_0: entered allmulticast mode [ 652.985550][T17390] bridge_slave_0: entered promiscuous mode [ 653.278185][T17390] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.285390][T17390] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.347465][T17390] bridge_slave_1: entered allmulticast mode [ 653.359910][T17390] bridge_slave_1: entered promiscuous mode [ 653.425742][T17472] loop8: detected capacity change from 0 to 2048 [ 653.546796][T17390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.572936][T17472] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.645134][T17390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.846004][T15029] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.986868][T17484] loop4: detected capacity change from 0 to 256 [ 654.088512][ T5783] Bluetooth: hci3: command tx timeout [ 654.231736][T17390] team0: Port device team_slave_0 added [ 654.263191][T17159] veth0_vlan: entered promiscuous mode [ 654.311381][ T994] hsr_slave_0: left promiscuous mode [ 654.330851][ T994] hsr_slave_1: left promiscuous mode [ 654.337470][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.350706][ T994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.371182][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.386157][ T994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.404672][ T994] bridge_slave_1: left allmulticast mode [ 654.415838][ T994] bridge_slave_1: left promiscuous mode [ 654.424699][ T994] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.441696][ T994] bridge_slave_0: left allmulticast mode [ 654.453809][ T994] bridge_slave_0: left promiscuous mode [ 654.460167][ T994] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.505762][ T994] veth1_macvtap: left promiscuous mode [ 654.513060][ T994] veth0_macvtap: left promiscuous mode [ 654.519077][ T994] veth1_vlan: left promiscuous mode [ 654.524560][ T994] veth0_vlan: left promiscuous mode [ 655.810574][ T994] team0 (unregistering): Port device team_slave_1 removed [ 655.895747][ T994] team0 (unregistering): Port device team_slave_0 removed [ 655.972335][ T994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.052361][ T994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.188409][ T5783] Bluetooth: hci3: command tx timeout [ 656.708929][ T994] bond0 (unregistering): Released all slaves [ 656.870787][T17390] team0: Port device team_slave_1 added [ 656.899355][T17159] veth1_vlan: entered promiscuous mode [ 656.906983][T17493] tipc: Enabled bearer , priority 10 [ 657.064509][T17390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.095144][T17390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.141988][T17390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.155351][T17505] netlink: 'syz.8.4154': attribute type 1 has an invalid length. [ 657.175543][T17390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.194273][T17390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.274692][T17390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.386205][T17159] veth0_macvtap: entered promiscuous mode [ 657.517704][T17159] veth1_macvtap: entered promiscuous mode [ 657.650334][T17390] hsr_slave_0: entered promiscuous mode [ 657.663638][T17390] hsr_slave_1: entered promiscuous mode [ 657.686270][T17390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 657.704854][T17390] Cannot create hsr debugfs directory [ 657.755998][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.780083][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.808042][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.828020][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.849864][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.867259][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.877644][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.889319][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.925555][T17159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.951976][T15243] tipc: Node number set to 2887052253 [ 658.057046][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.086543][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.104365][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.115290][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.138146][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.191344][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.208301][T17159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.228326][T17159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.248946][ T5783] Bluetooth: hci3: command tx timeout [ 658.280421][T17159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.311216][T17520] netlink: 'syz.4.4159': attribute type 9 has an invalid length. [ 658.355875][T17159] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.404151][T17159] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.447073][T17159] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.468323][T17159] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.488175][ T28] audit: type=1326 audit(1777976233.172:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17529 comm="syz.4.4161" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1ed19cdd9 code=0x0 [ 658.924945][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.944848][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.023022][T17524] loop8: detected capacity change from 0 to 32768 [ 659.066396][T17524] XFS (loop8): DAX unsupported by block device. Turning off DAX. [ 659.081435][T17524] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 659.214052][T17524] XFS (loop8): Ending clean mount [ 659.241546][T17524] XFS (loop8): Quotacheck needed: Please wait. [ 659.329247][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.337148][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.469727][T17524] XFS (loop8): Quotacheck: Done. [ 659.783227][T15029] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 660.767692][T17544] loop4: detected capacity change from 0 to 40427 [ 660.808970][T17544] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 660.845973][T17544] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 660.917113][T17544] F2FS-fs (loop4): Found nat_bits in checkpoint [ 661.006281][T17571] netlink: 'syz.8.4167': attribute type 8 has an invalid length. [ 661.040431][T17573] loop9: detected capacity change from 0 to 512 [ 661.071089][T17544] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 661.083005][T17544] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 661.198515][T17573] EXT4-fs (loop9): 1 truncate cleaned up [ 661.205804][T17573] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 661.285629][T17390] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 661.349790][T17390] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 661.375136][T17573] EXT4-fs error (device loop9): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.9.4168: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 661.412437][T17390] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 661.436409][ T9930] syz-executor: attempt to access beyond end of device [ 661.436409][ T9930] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 661.464136][T17573] EXT4-fs (loop9): Remounting filesystem read-only [ 661.481335][T17390] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 661.518598][ T9930] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 661.606331][T17159] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.862506][T17390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.912521][T17390] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.031951][T17315] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.039208][T17315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.092798][T17315] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.100036][T17315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.261849][T17578] loop8: detected capacity change from 0 to 32768 [ 662.283370][T17578] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop8 scanned by syz.8.4169 (17578) [ 662.307826][T17578] BTRFS info (device loop8): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 662.326679][T17578] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 662.382705][T17578] BTRFS info (device loop8): using free space tree [ 662.619596][T17578] BTRFS info (device loop8): enabling ssd optimizations [ 662.626672][T17578] BTRFS info (device loop8): auto enabling async discard [ 662.905087][T17610] loop9: detected capacity change from 0 to 1024 [ 663.101916][T15029] BTRFS info (device loop8): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 663.128523][ T28] audit: type=1326 audit(1777976237.822:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17611 comm="syz.4.4170" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1ed19cdd9 code=0x0 [ 663.327367][T17390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.626198][T17390] veth0_vlan: entered promiscuous mode [ 663.703605][T17390] veth1_vlan: entered promiscuous mode [ 663.829598][T17390] veth0_macvtap: entered promiscuous mode [ 663.861947][T17390] veth1_macvtap: entered promiscuous mode [ 663.956228][T17390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.016526][T17390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.046045][T17390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.062589][T17390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.079446][T17390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.090999][T17390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.102771][T17390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.113515][T17390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.123435][T17390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.134581][T17390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.146543][T17390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.184593][T17390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.198827][T17390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.230706][T17390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.264201][T17390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.298042][T17390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.318943][T17627] loop4: detected capacity change from 0 to 64 [ 664.325299][T17390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.365757][T17390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.401311][T17390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.448099][T17390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.460664][T17390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.473733][T17390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.545719][T17390] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.573642][T17390] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.607402][T17390] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.635120][T17631] loop4: detected capacity change from 0 to 1024 [ 664.654940][T17390] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.665971][T17631] EXT4-fs: inline encryption not supported [ 664.699294][T17631] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 664.726769][T17635] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4186'. [ 664.821257][T17631] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.4184: Freeing blocks not in datazone - block = 0, count = 4096 [ 664.953072][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.976434][T17631] EXT4-fs (loop4): Remounting filesystem read-only [ 665.010776][T17631] EXT4-fs (loop4): 1 orphan inode deleted [ 665.018089][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.029917][ T49] EXT4-fs (loop4): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 665.052294][T17631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.085611][ T49] Quota error (device loop4): write_blk: dquota write failed [ 665.114474][ T49] Quota error (device loop4): remove_free_dqentry: Can't write block (2) with free entries [ 665.168582][ T49] EXT4-fs (loop4): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 665.193513][ T49] Quota error (device loop4): write_blk: dquota write failed [ 665.201484][ T49] Quota error (device loop4): free_dqentry: Can't move quota data block (2) to free list [ 665.232553][ T49] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 665.259134][T17315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.271028][ T49] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 665.285565][T17315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.334466][ T9930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.530484][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 665.959849][T17661] loop8: detected capacity change from 0 to 64 [ 666.227814][T17659] loop4: detected capacity change from 0 to 8192 [ 666.914976][T17686] 9p: Unknown Cache mode or invalid value m [ 667.329751][T17698] fuse: Unexpected value for 'default_permissions' [ 667.523742][T17708] loop8: detected capacity change from 0 to 64 [ 667.618913][T17708] syz.8.4213: attempt to access beyond end of device [ 667.618913][T17708] loop8: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 667.658125][T17708] Buffer I/O error on dev loop8, logical block 134217734, lost async page write [ 668.278208][T13668] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 668.472304][T13668] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.535285][T13668] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.566522][T13668] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 668.606365][T13668] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.634796][T13668] usb 9-1: config 0 descriptor?? [ 668.955278][T17738] loop4: detected capacity change from 0 to 512 [ 668.987240][T17738] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 669.040084][T17738] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 669.113854][T17727] loop1: detected capacity change from 0 to 32768 [ 669.132690][T17738] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.4221: bad orphan inode 4 [ 669.162780][T17738] EXT4-fs (loop4): Remounting filesystem read-only [ 669.191523][T17738] EXT4-fs (loop4): 1 orphan inode deleted [ 669.203365][T17727] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 669.221887][T17738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 669.314301][T13668] hid-led: probe of 0003:27B8:01ED.0024 failed with error -71 [ 669.328435][T13668] usb 9-1: USB disconnect, device number 7 [ 669.363047][T17727] XFS (loop1): Ending clean mount [ 669.515079][T17390] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 669.557808][ T9930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.158114][T17774] loop8: detected capacity change from 0 to 1024 [ 670.282987][T17774] hfsplus: bad catalog entry type [ 670.489100][ T994] hfsplus: b-tree write err: -5, ino 25 [ 670.494975][ T994] hfsplus: b-tree write err: -5, ino 4 [ 670.521127][ T994] hfsplus: b-tree write err: -5, ino 2 [ 670.560161][T17779] loop4: detected capacity change from 0 to 512 [ 670.659524][T17779] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #11: comm syz.4.4230: unexpected EA_INODE flag [ 670.800909][T17779] EXT4-fs (loop4): Remounting filesystem read-only [ 670.839185][T17779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 670.995310][T17792] loop1: detected capacity change from 0 to 1024 [ 671.554639][ T9930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.889643][T17804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4236'. [ 671.904300][T17789] loop8: detected capacity change from 0 to 40427 [ 671.939284][T17789] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 671.939573][ T2939] bond0: (slave bond_slave_0): interface is now down [ 671.946593][T17789] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 672.002521][ T2939] bond0: (slave bond_slave_1): interface is now down [ 672.010168][T17789] F2FS-fs (loop8): heap/no_heap options were deprecated [ 672.051088][T17789] F2FS-fs (loop8): invalid crc value [ 672.094029][ T2939] bond0: now running without any active interface! [ 672.135245][T17789] F2FS-fs (loop8): Found nat_bits in checkpoint [ 672.403032][T17789] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 672.421103][T17789] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 672.564046][ T5841] hid-generic 0004:00A9:0000.0025: unknown main item tag 0x0 [ 672.585572][ T5841] hid-generic 0004:00A9:0000.0025: unknown main item tag 0x2 [ 672.638259][ T5841] hid-generic 0004:00A9:0000.0025: unknown main item tag 0xe [ 672.684168][ T5841] hid-generic 0004:00A9:0000.0025: hidraw0: HID v1.01 Device [syz1] on syz0 [ 672.965642][T17826] fido_id[17826]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 673.301702][T17837] loop4: detected capacity change from 0 to 512 [ 673.408704][T17837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.573488][T17819] loop1: detected capacity change from 0 to 32768 [ 673.579797][T17819] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 673.623207][ T9930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.228305][ T5813] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 674.443856][ T5813] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 674.470927][ T5813] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.502897][ T5813] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.523579][ T5813] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 674.557611][ T5813] usb 9-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 674.568793][ T5813] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.581575][ T5813] usb 9-1: config 0 descriptor?? [ 675.033830][ T5813] holtek_kbd 0003:04D9:A055.0026: unknown main item tag 0x0 [ 675.065583][ T5813] holtek_kbd 0003:04D9:A055.0026: unknown main item tag 0x0 [ 675.090419][ T5813] holtek_kbd 0003:04D9:A055.0026: unknown main item tag 0x0 [ 675.097820][ T5813] holtek_kbd 0003:04D9:A055.0026: unknown main item tag 0x0 [ 675.125855][ T5813] holtek_kbd 0003:04D9:A055.0026: unknown main item tag 0x0 [ 675.146944][ T5813] holtek_kbd 0003:04D9:A055.0026: unknown main item tag 0x0 [ 675.168410][ T5813] holtek_kbd 0003:04D9:A055.0026: unknown main item tag 0x0 [ 675.197043][ T5813] holtek_kbd 0003:04D9:A055.0026: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.8-1/input0 [ 675.277299][ T5813] usb 9-1: USB disconnect, device number 8 [ 675.433034][T17876] fido_id[17876]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 675.757465][T17890] loop9: detected capacity change from 0 to 128 [ 675.767721][T17892] netlink: 67 bytes leftover after parsing attributes in process `syz.1.4258'. [ 675.792305][T17892] IPv6: NLM_F_REPLACE set, but no existing node found! [ 675.884568][T17890] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 675.950634][T17890] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 676.025078][T17897] loop8: detected capacity change from 0 to 256 [ 676.069478][T17897] exfat: Deprecated parameter 'utf8' [ 676.124941][T17897] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xf8a64500, utbl_chksum : 0xe619d30d) [ 676.140751][ T28] audit: type=1800 audit(1777976250.822:302): pid=17890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4257" name="file1" dev="loop9" ino=12 res=0 errno=0 [ 676.476357][T17159] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 678.285902][T17929] loop4: detected capacity change from 0 to 32768 [ 678.409233][T17929] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 678.698465][T17929] XFS (loop4): Ending clean mount [ 678.709894][T17929] XFS (loop4): Quotacheck needed: Please wait. [ 678.856988][T17968] loop1: detected capacity change from 0 to 4096 [ 678.898316][T17929] XFS (loop4): Quotacheck: Done. [ 678.922634][T17968] EXT4-fs: inline encryption not supported [ 679.005784][T17968] EXT4-fs (loop1): Test dummy encryption mode enabled [ 679.043713][T17968] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 679.084227][T17968] System zones: 0-5 [ 679.111169][T17968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 679.150016][T17968] EXT4-fs: Ignoring sb option on remount [ 679.157087][T17968] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 679.175521][T17968] EXT4-fs: Cannot change journaled quota options when quota turned on [ 679.191777][T17946] loop8: detected capacity change from 0 to 32768 [ 679.360843][T17390] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.479664][ T9930] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 680.552286][T17965] loop9: detected capacity change from 0 to 32768 [ 680.643889][T17965] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 680.704342][T17965] XFS (loop9): Ending clean mount [ 680.821933][T17965] XFS (loop9): syz.9.4276 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 680.917363][T17159] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 681.310086][T18019] loop9: detected capacity change from 0 to 64 [ 681.769473][T18030] loop1: detected capacity change from 0 to 256 [ 681.881016][T18035] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4293'. [ 682.162842][T18039] loop8: detected capacity change from 0 to 1024 [ 682.226229][T18039] EXT4-fs: Ignoring removed orlov option [ 682.345305][T18039] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 682.442794][T18039] System zones: 0-1, 3-12 [ 682.471164][T18039] EXT4-fs (loop8): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 682.643501][T18057] loop1: detected capacity change from 0 to 256 [ 682.744745][T18057] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 682.782292][T15029] EXT4-fs (loop8): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 682.922181][T18064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4305'. [ 683.503387][T18080] loop9: detected capacity change from 0 to 256 [ 683.601118][T18080] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x25f3d2c1, utbl_chksum : 0xe619d30d) [ 683.849054][T13668] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 684.048204][T13668] usb 2-1: Using ep0 maxpacket: 8 [ 684.060482][T13668] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.094089][T13668] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.141977][T13668] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 684.181980][T13668] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.215153][T13668] usb 2-1: config 0 descriptor?? [ 684.586599][T18086] loop8: detected capacity change from 0 to 32768 [ 684.652113][T13668] logitech 0003:046D:C20E.0027: rdesc size test failed for formula gp [ 684.686989][T13668] logitech 0003:046D:C20E.0027: unknown main item tag 0x0 [ 684.703271][T13668] logitech 0003:046D:C20E.0027: unknown main item tag 0x0 [ 684.712347][T13668] logitech 0003:046D:C20E.0027: unknown main item tag 0x0 [ 684.746449][T13668] logitech 0003:046D:C20E.0027: unknown main item tag 0x0 [ 684.794470][T13668] logitech 0003:046D:C20E.0027: unknown main item tag 0x0 [ 684.831240][T13668] logitech 0003:046D:C20E.0027: unknown main item tag 0x0 [ 684.875189][T13668] logitech 0003:046D:C20E.0027: unknown main item tag 0x0 [ 684.895127][T13668] logitech 0003:046D:C20E.0027: unknown main item tag 0x0 [ 684.912567][T13668] logitech 0003:046D:C20E.0027: unknown main item tag 0x0 [ 684.930519][T13668] logitech 0003:046D:C20E.0027: unknown main item tag 0x0 [ 684.939440][T13668] logitech 0003:046D:C20E.0027: unknown main item tag 0x0 [ 684.956475][T13668] logitech 0003:046D:C20E.0027: hidraw0: USB HID v0.00 Device [HID 046d:c20e] on usb-dummy_hcd.1-1/input0 [ 685.017016][T13668] usb 2-1: USB disconnect, device number 11 [ 685.183086][T18108] fido_id[18108]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 685.349774][T18113] loop4: detected capacity change from 0 to 256 [ 685.431775][T18113] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 685.845189][T18119] loop8: detected capacity change from 0 to 8192 [ 685.888824][T18119] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 686.007368][T18119] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal [ 686.027784][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.070134][T18119] REISERFS (device loop8): using ordered data mode [ 686.099087][T18119] reiserfs: using flush barriers [ 686.142327][T18119] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 686.204812][T18119] REISERFS (device loop8): checking transaction log (loop8) [ 686.222744][T18137] loop1: detected capacity change from 0 to 64 [ 686.247480][T18119] REISERFS (device loop8): Using r5 hash to sort names [ 686.275610][T18119] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 686.370581][T18119] REISERFS warning (device loop8): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=129, len=7 - odd [ 686.568656][T18142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4327'. [ 686.804397][T18148] loop9: detected capacity change from 0 to 1024 [ 687.111215][T18153] loop8: detected capacity change from 0 to 4096 [ 687.278413][T18164] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 687.725368][T18178] loop1: detected capacity change from 0 to 512 [ 687.756458][T18178] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 687.840307][T18178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 688.029227][T18187] loop8: detected capacity change from 0 to 512 [ 688.062404][T18187] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 688.120373][T18187] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 688.180068][T18187] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.4341: invalid indirect mapped block 2683928664 (level 1) [ 688.234881][T18187] EXT4-fs (loop8): Remounting filesystem read-only [ 688.246365][T17390] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.267525][T18187] EXT4-fs (loop8): 1 truncate cleaned up [ 688.290833][T18187] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 688.408980][T18187] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 688.424996][T18163] loop9: detected capacity change from 0 to 32768 [ 688.434086][T18163] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 9 [ 688.447238][T18187] EXT4-fs (loop8): changing journal_checksum during remount not supported; ignoring [ 688.556241][T15029] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.633936][T18194] bridge0: entered promiscuous mode [ 688.667729][T18194] bridge0: port 3(vlan2) entered blocking state [ 688.705975][T18194] bridge0: port 3(vlan2) entered disabled state [ 688.723671][T18194] vlan2: entered allmulticast mode [ 688.741661][T18194] bridge0: entered allmulticast mode [ 688.760130][T18194] vlan2: left allmulticast mode [ 688.765276][T18194] bridge0: left allmulticast mode [ 688.796364][T18194] bridge0: left promiscuous mode [ 689.634578][T18218] netlink: 'syz.1.4349': attribute type 1 has an invalid length. [ 689.692256][T18221] loop8: detected capacity change from 0 to 1024 [ 689.764709][T18221] hfsplus: bad catalog entry type [ 689.889756][ T49] hfsplus: b-tree write err: -5, ino 25 [ 689.895602][ T49] hfsplus: b-tree write err: -5, ino 4 [ 689.918373][ T49] hfsplus: b-tree write err: -5, ino 2 [ 690.558029][ T5775] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 690.676093][T18254] loop9: detected capacity change from 0 to 2048 [ 690.715487][T18254] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 690.751036][T18254] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 690.768239][ T5775] usb 9-1: Using ep0 maxpacket: 32 [ 690.795739][T18254] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 690.805876][ T5775] usb 9-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 690.836014][ T5775] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.845337][ T5775] usb 9-1: Product: syz [ 690.888135][ T5775] usb 9-1: Manufacturer: syz [ 690.909801][ T5775] usb 9-1: SerialNumber: syz [ 690.961536][ T5775] usb 9-1: config 0 descriptor?? [ 691.348746][T18260] loop9: detected capacity change from 0 to 4096 [ 691.364801][T18260] EXT4-fs: inline encryption not supported [ 691.387843][T18260] EXT4-fs (loop9): Test dummy encryption mode enabled [ 691.438137][T18260] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 691.487010][T18260] System zones: 0-5 [ 691.580163][T18260] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 691.610552][ T5775] peak_usb 9-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 691.743691][T18260] EXT4-fs: Ignoring sb option on remount [ 691.760540][T18260] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 691.780543][T18260] EXT4-fs: Cannot change journaled quota options when quota turned on [ 691.843448][ T5775] peak_usb: probe of 9-1:0.0 failed with error -71 [ 691.886764][ T5775] usb 9-1: USB disconnect, device number 9 [ 691.917702][T17159] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.931871][T15125] udevd[15125]: setting owner of /dev/bus/usb/009/009 to uid=0, gid=0 failed: No such file or directory [ 692.244869][T18284] loop9: detected capacity change from 0 to 2048 [ 692.345900][T18284] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 692.402911][T18284] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 692.454443][T18292] loop8: detected capacity change from 0 to 512 [ 692.542387][T18292] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 692.602833][T18292] EXT4-fs (loop8): orphan cleanup on readonly fs [ 692.625565][T17159] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.675197][T18292] Quota error (device loop8): dq_insert_tree: Quota tree root isn't allocated! [ 692.708956][T18292] Quota error (device loop8): qtree_write_dquot: Error -5 occurred while creating quota [ 692.747628][T18292] EXT4-fs error (device loop8): ext4_acquire_dquot:6953: comm syz.8.4371: Failed to acquire dquot type 1 [ 692.804159][T18292] EXT4-fs error (device loop8): ext4_validate_block_bitmap:439: comm syz.8.4371: bg 0: block 40: padding at end of block bitmap is not set [ 692.817305][T18301] tipc: Invalid UDP bearer configuration [ 692.831394][T18301] tipc: Enabling of bearer rejected, failed to enable media [ 692.885142][T18292] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 692.905804][T18292] EXT4-fs (loop8): 1 truncate cleaned up [ 692.934685][T18292] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 693.093773][T18307] can0: slcan on ttynull. [ 693.126275][T15029] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.268530][T18312] tipc: Started in network mode [ 693.284879][T18312] tipc: Node identity , cluster identity 4711 [ 693.300237][T18306] can0 (unregistered): slcan off ttynull. [ 693.318167][T18312] tipc: Failed to obtain node identity [ 693.328868][T18312] tipc: Enabling of bearer rejected, failed to enable media [ 693.517267][T18321] loop4: detected capacity change from 0 to 512 [ 693.623368][T18321] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.4379: invalid block [ 693.658491][T18321] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4379: invalid indirect mapped block 4294967295 (level 1) [ 693.682985][T18329] netlink: 'syz.1.4382': attribute type 1 has an invalid length. [ 693.728992][T18321] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4379: invalid indirect mapped block 4294967295 (level 1) [ 693.773168][T18321] EXT4-fs (loop4): 2 truncates cleaned up [ 693.787465][T18321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 694.000711][ T9930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.094191][T18336] loop8: detected capacity change from 0 to 512 [ 694.207504][T18336] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 694.526336][T18349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4389'. [ 694.832733][T18357] loop4: detected capacity change from 0 to 2048 [ 694.859224][T15029] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.916030][T18357] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 695.096981][T18364] loop9: detected capacity change from 0 to 512 [ 695.202501][T18364] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm syz.9.4394: EA inode hash validation failed [ 695.249255][T18364] EXT4-fs error (device loop9): ext4_do_update_inode:5255: inode #15: comm syz.9.4394: corrupted inode contents [ 695.378550][T18364] EXT4-fs error (device loop9): ext4_dirty_inode:6143: inode #15: comm syz.9.4394: mark_inode_dirty error [ 695.421313][T18364] EXT4-fs error (device loop9): ext4_do_update_inode:5255: inode #15: comm syz.9.4394: corrupted inode contents [ 695.487786][T18364] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2998: inode #15: comm syz.9.4394: mark_inode_dirty error [ 695.528237][T18364] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3001: inode #15: comm syz.9.4394: mark inode dirty (error -117) [ 695.594300][T18364] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -117) [ 695.603853][T18364] EXT4-fs (loop9): 1 orphan inode deleted [ 695.627771][T18364] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 695.772244][T18380] loop4: detected capacity change from 0 to 128 [ 695.834272][T17159] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.854320][T18380] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 695.948609][T18380] ext4 filesystem being mounted at /745/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 696.065940][T18347] loop1: detected capacity change from 0 to 40427 [ 696.158051][T18347] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 696.203460][T18347] F2FS-fs (loop1): invalid crc value [ 696.231216][T18347] F2FS-fs (loop1): Found nat_bits in checkpoint [ 696.302977][ T9930] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 696.448628][T18347] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 696.577712][T18398] loop8: detected capacity change from 0 to 16 [ 696.629938][T18398] erofs: (device loop8): mounted with root inode @ nid 36. [ 696.690975][ T28] audit: type=1800 audit(1777976271.382:303): pid=18398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4404" name="file1" dev="loop8" ino=86 res=0 errno=0 [ 696.847377][T17390] syz-executor: attempt to access beyond end of device [ 696.847377][T17390] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 696.868409][T17390] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 698.691369][T18429] loop8: detected capacity change from 0 to 32768 [ 698.822451][T18429] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 699.071396][T18429] XFS (loop8): Ending clean mount [ 699.249676][T18480] netlink: 'syz.9.4425': attribute type 4 has an invalid length. [ 699.386417][T15029] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 699.573402][T18488] loop1: detected capacity change from 0 to 1024 [ 699.725731][T18491] netlink: 'syz.4.4431': attribute type 46 has an invalid length. [ 699.900131][ T2939] hfsplus: b-tree write err: -5, ino 25 [ 699.906408][ T2939] hfsplus: b-tree write err: -5, ino 4 [ 699.951600][ T2939] hfsplus: b-tree write err: -5, ino 2 [ 700.051062][T18497] vivid-007: disconnect [ 700.080964][T18497] vivid-007: reconnect [ 700.443865][T18506] loop4: detected capacity change from 0 to 1024 [ 700.610901][T18506] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 700.786557][ T2960] hfsplus: b-tree write err: -5, ino 25 [ 700.792888][ T2960] hfsplus: b-tree write err: -5, ino 4 [ 700.805349][ T2960] hfsplus: b-tree write err: -5, ino 2 [ 701.266461][T18494] loop9: detected capacity change from 0 to 40427 [ 701.306934][T18494] F2FS-fs (loop9): build fault injection attr: rate: 690, type: 0x7ffff [ 701.311494][T18494] F2FS-fs (loop9): invalid crc value [ 701.336187][T18494] F2FS-fs (loop9): Found nat_bits in checkpoint [ 701.575055][T18494] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 701.623619][T18536] loop8: detected capacity change from 0 to 64 [ 701.947808][T18515] loop1: detected capacity change from 0 to 32768 [ 702.109634][T18515] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 702.401315][T17390] ocfs2: Unmounting device (7,1) on (node local) [ 703.118047][ T5775] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 703.343623][ T5775] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 703.368546][ T5775] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.397174][ T5775] usb 10-1: Product: syz [ 703.403324][ T5775] usb 10-1: Manufacturer: syz [ 703.428314][ T5775] usb 10-1: SerialNumber: syz [ 703.444748][ T5775] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 703.535739][ T5813] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 703.539794][T18548] loop4: detected capacity change from 0 to 40427 [ 703.637670][T18548] F2FS-fs (loop4): invalid crc value [ 703.712823][T18548] F2FS-fs (loop4): Found nat_bits in checkpoint [ 703.928940][T18548] F2FS-fs (loop4): Start checkpoint disabled! [ 703.963968][T18555] loop8: detected capacity change from 0 to 32768 [ 703.992438][T18548] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 704.064264][T18560] loop1: detected capacity change from 0 to 32768 [ 704.114488][T18555] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 704.129091][T18548] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4447'. [ 704.139640][T18548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4447'. [ 704.303232][T15243] usb 10-1: USB disconnect, device number 2 [ 704.388096][T18555] XFS (loop8): Ending clean mount [ 704.442780][T18555] XFS (loop8): Quotacheck needed: Please wait. [ 704.578978][T18555] XFS (loop8): Quotacheck: Done. [ 704.784941][T15029] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 704.976999][ T5813] usb 10-1: Service connection timeout for: 256 [ 704.999011][ T5813] ath9k_htc 10-1:1.0: ath9k_htc: Unable to initialize HTC services [ 705.043474][ T5813] ath9k_htc: Failed to initialize the device [ 705.110901][T15243] usb 10-1: ath9k_htc: USB layer deinitialized [ 705.168059][T18593] loop9: detected capacity change from 0 to 256 [ 705.175399][T18593] exfat: Deprecated parameter 'utf8' [ 705.240101][T18593] exfat: Deprecated parameter 'utf8' [ 705.245642][T18593] exfat: Deprecated parameter 'utf8' [ 705.376949][T18593] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 705.878793][T18617] loop8: detected capacity change from 0 to 256 [ 705.926124][T18617] exfat: Deprecated parameter 'namecase' [ 705.958103][T18617] exfat: Deprecated parameter 'utf8' [ 705.963513][T18617] exfat: Deprecated parameter 'namecase' [ 706.061019][T18617] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 706.064055][T18625] loop4: detected capacity change from 0 to 64 [ 706.479166][T18632] loop8: detected capacity change from 0 to 64 [ 706.646535][T18637] loop1: detected capacity change from 0 to 512 [ 706.665787][T18632] syz.8.4465: attempt to access beyond end of device [ 706.665787][T18632] loop8: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 706.699957][T18637] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 706.720323][T18632] Buffer I/O error on dev loop8, logical block 134217734, lost async page write [ 706.770858][T18637] EXT4-fs (loop1): 1 truncate cleaned up [ 706.797246][T18639] syz.8.4465: attempt to access beyond end of device [ 706.797246][T18639] loop8: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 706.837486][T18637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 706.868281][T18639] Buffer I/O error on dev loop8, logical block 134217734, lost async page write [ 706.949212][T18637] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.1.4468: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 707.081033][T18637] EXT4-fs (loop1): Remounting filesystem read-only [ 707.087733][T18637] EXT4-fs warning (device loop1): ext4_rename_delete:3778: inode #2: comm syz.1.4468: Deleting old file: nlink 5, error=-117 [ 707.242386][T18653] mkiss: ax0: crc mode is auto. [ 707.335753][T17390] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.376315][T18658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4472'. [ 708.008696][T18677] loop8: detected capacity change from 0 to 1024 [ 708.269865][ T2939] hfsplus: b-tree write err: -5, ino 8 [ 708.446088][T18691] loop4: detected capacity change from 0 to 64 [ 708.514627][T18691] syz.4.4485: attempt to access beyond end of device [ 708.514627][T18691] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 708.514825][T18691] Buffer I/O error on dev loop4, logical block 512, async page read [ 708.514952][T18691] syz.4.4485: attempt to access beyond end of device [ 708.514952][T18691] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 708.514977][T18691] Buffer I/O error on dev loop4, logical block 56576, async page read [ 708.711181][T18698] loop8: detected capacity change from 0 to 128 [ 708.738550][T18698] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 708.770190][T18698] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 709.199502][T18709] loop8: detected capacity change from 0 to 128 [ 709.298287][ T28] audit: type=1800 audit(1777976283.982:304): pid=18709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4490" name="file1" dev="loop8" ino=1049046 res=0 errno=0 [ 709.323721][T18709] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fff0000) [ 709.363072][T18709] FAT-fs (loop8): Filesystem has been set read-only [ 709.448389][T18709] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fff0000) [ 709.853287][T18723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4495'. [ 710.181576][T18732] netlink: 'syz.1.4499': attribute type 1 has an invalid length. [ 710.204960][T18732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4499'. [ 710.254831][T18705] loop9: detected capacity change from 0 to 32768 [ 710.318816][T18705] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop9 scanned by syz.9.4489 (18705) [ 710.380480][T18705] BTRFS info (device loop9): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 710.418387][T18705] BTRFS info (device loop9): using xxhash64 (xxhash64-generic) checksum algorithm [ 710.448990][T18705] BTRFS info (device loop9): force zlib compression, level 3 [ 710.456461][T18705] BTRFS info (device loop9): force clearing of disk cache [ 710.495851][T18705] BTRFS info (device loop9): use zlib compression, level 3 [ 710.520054][T18705] BTRFS info (device loop9): allowing degraded mounts [ 710.538390][T18705] BTRFS info (device loop9): turning on sync discard [ 710.545156][T18705] BTRFS info (device loop9): using free space tree [ 710.818544][T18705] BTRFS info (device loop9): enabling ssd optimizations [ 710.849700][T18705] BTRFS info (device loop9): rebuilding free space tree [ 711.137847][T18769] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4505'. [ 711.659028][T17159] BTRFS info (device loop9): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 711.700323][T18736] loop8: detected capacity change from 0 to 32768 [ 711.843100][T18736] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 712.059161][T18736] XFS (loop8): Ending clean mount [ 712.079350][T18736] XFS (loop8): Quotacheck needed: Please wait. [ 712.189571][T18797] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4510'. [ 712.344844][T18736] XFS (loop8): Quotacheck: Done. [ 712.510025][T15029] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 712.538249][T18800] loop1: detected capacity change from 0 to 4096 [ 713.799513][T18836] loop9: detected capacity change from 0 to 2048 [ 713.872042][T18836] UDF-fs: warning (device loop9): udf_fill_super: No fileset found [ 714.218874][T18847] IPVS: ip_vs_edit_dest(): server weight less than zero [ 714.226113][ T5841] IPVS: starting estimator thread 0... [ 714.339573][T18849] IPVS: using max 16 ests per chain, 38400 per kthread [ 714.981885][T18874] loop9: detected capacity change from 0 to 128 [ 715.972455][T18870] loop8: detected capacity change from 0 to 32768 [ 716.002652][T18870] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 scanned by syz.8.4534 (18870) [ 716.067861][T18870] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 716.106522][T18870] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 716.146838][T18870] BTRFS info (device loop8): using free space tree [ 716.521344][T18870] BTRFS info (device loop8): enabling ssd optimizations [ 716.558076][T18870] BTRFS info (device loop8): auto enabling async discard [ 716.808677][T18883] loop9: detected capacity change from 0 to 40427 [ 716.823363][T18935] loop4: detected capacity change from 0 to 64 [ 716.847840][T18883] F2FS-fs (loop9): build fault injection attr: rate: 684, type: 0x7ffff [ 716.882515][T18883] F2FS-fs (loop9): build fault injection attr: rate: 0, type: 0x35f7 [ 716.910447][T18883] F2FS-fs (loop9): Image doesn't support compression [ 716.951270][T18883] F2FS-fs (loop9): invalid crc value [ 717.023835][T18883] F2FS-fs (loop9): Found nat_bits in checkpoint [ 717.121296][T15029] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 717.256318][ C0] vkms_vblank_simulate: vblank timer overrun [ 717.328779][T18883] F2FS-fs (loop9): Start checkpoint disabled! [ 717.436981][T18883] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 717.506810][ C0] vkms_vblank_simulate: vblank timer overrun [ 717.656450][ C0] vkms_vblank_simulate: vblank timer overrun [ 717.936704][ T2939] kworker/u4:8: attempt to access beyond end of device [ 717.936704][ T2939] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 718.011806][ T2939] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 718.049351][ T2939] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 718.146824][T18962] loop1: detected capacity change from 0 to 128 [ 718.158283][T18962] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 718.198075][T18962] hpfs: filesystem error: improperly stopped [ 718.204172][T18962] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 718.218566][T18962] hpfs: You really don't want any checks? You are crazy... [ 718.226306][T18962] hpfs: hpfs_map_sector(): read error [ 718.271949][T18957] loop4: detected capacity change from 0 to 4096 [ 718.291503][T18962] hpfs: code page support is disabled [ 718.358047][T18962] hpfs: hpfs_map_4sectors(): unaligned read [ 718.364169][T18962] hpfs: hpfs_map_4sectors(): unaligned read [ 718.441764][T18962] hpfs: filesystem error: unable to find root dir [ 718.509082][T18962] hpfs: hpfs_map_4sectors(): unaligned read [ 718.753980][T18957] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 718.820978][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 718.874055][T18974] loop1: detected capacity change from 0 to 1024 [ 718.901564][T18975] loop8: detected capacity change from 0 to 256 [ 718.909721][T18975] exfat: Deprecated parameter 'utf8' [ 718.915782][T18975] exfat: Deprecated parameter 'namecase' [ 719.009363][T18957] ntfs3: loop4: failed to convert "0000" to iso8859-1 [ 719.063685][T18975] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 719.068726][T18957] ntfs3: loop4: failed to convert name for inode 1e. [ 719.108308][ T2960] hfsplus: b-tree write err: -5, ino 25 [ 719.114147][ T2960] hfsplus: b-tree write err: -5, ino 4 [ 719.178310][ T2960] hfsplus: b-tree write err: -5, ino 2 [ 719.685847][T18984] loop9: detected capacity change from 0 to 4096 [ 720.328317][T15206] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 720.532975][T15206] usb 9-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 720.550292][T15206] usb 9-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.580815][T19018] loop9: detected capacity change from 0 to 256 [ 720.588060][T15206] usb 9-1: config 2 interface 0 has no altsetting 0 [ 720.597041][T15206] usb 9-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 720.626598][T15206] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.750874][T19018] FAT-fs (loop9): Directory bread(block 64) failed [ 720.768031][T19018] FAT-fs (loop9): Directory bread(block 65) failed [ 720.774798][T19018] FAT-fs (loop9): Directory bread(block 66) failed [ 720.808987][T19018] FAT-fs (loop9): Directory bread(block 67) failed [ 720.817519][T19018] FAT-fs (loop9): Directory bread(block 68) failed [ 720.824895][T19018] FAT-fs (loop9): Directory bread(block 69) failed [ 720.834977][T19018] FAT-fs (loop9): Directory bread(block 70) failed [ 720.846896][T19018] FAT-fs (loop9): Directory bread(block 71) failed [ 720.879137][T19018] FAT-fs (loop9): Directory bread(block 72) failed [ 720.890346][T19018] FAT-fs (loop9): Directory bread(block 73) failed [ 721.088655][T15206] elo 0003:04E7:0009.0028: hidraw0: USB HID vff.ff Device [HID 04e7:0009] on usb-dummy_hcd.8-1/input0 [ 721.311501][T19029] loop9: detected capacity change from 0 to 16 [ 721.348301][T19029] erofs: (device loop9): mounted with root inode @ nid 36. [ 721.358101][ T787] usb 9-1: USB disconnect, device number 10 [ 721.399017][T19025] fido_id[19025]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:2.0/0003:04E7:0009.0028/report_descriptor': No such device [ 721.644670][T19034] loop9: detected capacity change from 0 to 512 [ 721.710612][T19034] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 721.723975][T19034] EXT4-fs error (device loop9): ext4_iget_extra_inode:4739: inode #15: comm syz.9.4580: corrupted in-inode xattr: e_value size too large [ 721.739382][T19034] EXT4-fs error (device loop9): ext4_orphan_get:1409: comm syz.9.4580: couldn't read orphan inode 15 (err -117) [ 721.757259][T19034] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.896288][T17159] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.359140][T15206] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 722.600501][T15206] usb 9-1: config 127 has an invalid interface number: 84 but max is 0 [ 722.627606][T15206] usb 9-1: config 127 has no interface number 0 [ 722.646274][T15206] usb 9-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=9c.e5 [ 722.664620][T15206] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.684480][T15206] usb 9-1: Product: syz [ 722.691620][T15206] usb 9-1: Manufacturer: syz [ 722.696305][T15206] usb 9-1: SerialNumber: syz [ 722.989674][T15206] gspca_main: spca501-2.14.0 probing 040a:0002 [ 723.182114][T19071] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4592'. [ 723.412053][T15206] gspca_spca501: reg write: error -71 [ 723.417518][T15206] spca501 9-1:127.84: Reg write failed for 0x00,0x02,0x01 [ 723.462003][T15206] spca501: probe of 9-1:127.84 failed with error -22 [ 723.485255][T15206] usb 9-1: USB disconnect, device number 11 [ 723.702726][T19082] loop4: detected capacity change from 0 to 1024 [ 723.734165][T19084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 723.741561][T19084] IPv6: NLM_F_CREATE should be set when creating new route [ 723.749009][T19084] IPv6: NLM_F_CREATE should be set when creating new route [ 723.756316][T19084] IPv6: NLM_F_CREATE should be set when creating new route [ 723.858569][T19082] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 724.029692][T19089] loop9: detected capacity change from 0 to 256 [ 724.564333][T19097] loop4: detected capacity change from 0 to 2048 [ 724.635415][T19097] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 724.687074][T19097] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 726.023150][T19111] loop1: detected capacity change from 0 to 32768 [ 726.072009][T19111] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.4604 (19111) [ 726.156744][T19111] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 726.224098][T19111] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 726.278128][T19111] BTRFS info (device loop1): force zlib compression, level 3 [ 726.285961][T19111] BTRFS info (device loop1): force clearing of disk cache [ 726.365446][T19111] BTRFS info (device loop1): use zlib compression, level 3 [ 726.388746][T19111] BTRFS info (device loop1): allowing degraded mounts [ 726.395598][T19111] BTRFS info (device loop1): turning on sync discard [ 726.448503][T19111] BTRFS info (device loop1): using free space tree [ 726.460619][T19151] loop9: detected capacity change from 0 to 16 [ 726.509564][T19151] erofs: (device loop9): mounted with root inode @ nid 36. [ 726.581551][T19151] erofs: (device loop9): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 726.758400][T19111] BTRFS info (device loop1): enabling ssd optimizations [ 726.772113][T19111] BTRFS info (device loop1): rebuilding free space tree [ 726.982349][T19129] loop8: detected capacity change from 0 to 32768 [ 726.992627][T19171] loop9: detected capacity change from 0 to 1024 [ 727.129163][T19129] ERROR: (device loop8): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 727.129163][T19129] [ 727.244113][ T2939] hfsplus: b-tree write err: -5, ino 25 [ 727.244757][T19129] ERROR: (device loop8): remounting filesystem as read-only [ 727.288246][ T2939] hfsplus: b-tree write err: -5, ino 4 [ 727.297454][ T2939] hfsplus: b-tree write err: -5, ino 2 [ 727.314953][T19129] ERROR: (device loop8): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3 [ 727.314953][T19129] [ 727.365934][T19129] ERROR: (device loop8): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 727.365934][T19129] [ 727.460034][T17390] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 727.638147][T19182] loop4: detected capacity change from 0 to 1024 [ 727.964204][ T12] hfsplus: b-tree write err: -5, ino 25 [ 727.984363][ T12] hfsplus: b-tree write err: -5, ino 4 [ 728.028084][ T12] hfsplus: b-tree write err: -5, ino 2 [ 728.429896][T19197] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 728.437564][T19197] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 728.522156][T19197] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 728.528737][T19197] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 728.644310][T19197] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 728.650876][T19197] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 728.748474][T19197] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 728.755061][T19197] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 728.833541][T19197] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 728.840101][T19197] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 729.154477][T19214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4631'. [ 729.417155][T19193] loop9: detected capacity change from 0 to 32768 [ 729.526706][T19193] ocfs2: Mounting device (7,9) on (node local, slot 0) with writeback data mode. [ 729.901990][T17159] ocfs2: Unmounting device (7,9) on (node local) [ 730.210813][T19244] mkiss: ax0: crc mode is auto. [ 730.546055][T19249] loop9: detected capacity change from 0 to 4096 [ 730.987114][T19249] ntfs3: loop9: failed to convert "0080" to koi8-ru [ 731.027264][T19249] ntfs3: loop9: failed to convert name for inode 1e. [ 731.033548][T19235] loop4: detected capacity change from 0 to 32768 [ 731.422603][T19265] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4646'. [ 731.629684][T19247] loop8: detected capacity change from 0 to 32768 [ 731.728552][T19247] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 731.739295][T19278] loop1: detected capacity change from 0 to 128 [ 731.766186][T19278] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 731.852173][T19278] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 731.942302][T19247] XFS (loop8): Ending clean mount [ 732.308140][T15029] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 732.327513][T19291] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4655'. [ 732.604438][T19302] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4659'. [ 732.736022][T19305] loop9: detected capacity change from 0 to 64 [ 732.993373][T19315] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4663'. [ 733.142000][T19318] loop9: detected capacity change from 0 to 512 [ 733.166217][T19318] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 733.225027][T19318] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 733.275101][T19318] Quota error (device loop9): write_blk: dquota write failed [ 733.308223][T19318] Quota error (device loop9): find_free_dqentry: Can't write quota data block 5 [ 733.317463][T19318] Quota error (device loop9): write_blk: dquota write failed [ 733.343533][T19318] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 733.364323][T19318] EXT4-fs error (device loop9): ext4_acquire_dquot:6953: comm syz.9.4664: Failed to acquire dquot type 1 [ 733.399888][T19318] EXT4-fs (loop9): 1 truncate cleaned up [ 733.407131][T19318] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.641405][T17159] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.886440][T19311] loop1: detected capacity change from 0 to 40427 [ 733.919061][T19311] F2FS-fs (loop1): invalid crc value [ 733.960641][T19311] F2FS-fs (loop1): Found nat_bits in checkpoint [ 734.218276][T19311] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 734.329287][T17390] syz-executor: attempt to access beyond end of device [ 734.329287][T17390] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 734.364222][T17390] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 734.401555][ T787] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 734.601008][ T787] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 734.610912][ T787] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.632656][ T787] usb 10-1: config 0 descriptor?? [ 735.158522][ T5775] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 735.282979][ T787] usb 10-1: Cannot set autoneg [ 735.289313][ T787] MOSCHIP usb-ethernet driver: probe of 10-1:0.0 failed with error -71 [ 735.321294][ T787] usb 10-1: USB disconnect, device number 3 [ 735.370267][ T5775] usb 9-1: Using ep0 maxpacket: 16 [ 735.397091][ T5775] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.406743][T19368] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 735.417231][ T5775] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.438712][ T5775] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 735.453691][ T5775] usb 9-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 735.463388][ T5775] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.490698][ T5775] usb 9-1: config 0 descriptor?? [ 735.879574][T19379] mkiss: ax0: crc mode is auto. [ 735.936031][ T5775] elecom 0003:056E:010C.0029: report_id 0 is invalid [ 735.967999][ T5775] elecom 0003:056E:010C.0029: item 0 0 1 8 parsing failed [ 735.999531][ T5775] elecom: probe of 0003:056E:010C.0029 failed with error -22 [ 736.154751][T19388] loop1: detected capacity change from 0 to 512 [ 736.155685][ T5775] usb 9-1: USB disconnect, device number 12 [ 736.302499][T19388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.409041][T19388] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 736.692587][T17390] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.163597][ T5775] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 737.198040][ T8] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 737.380547][ T5775] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 737.391862][ T8] usb 9-1: Using ep0 maxpacket: 16 [ 737.433301][ T5775] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 737.448219][ T8] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 737.457190][ T8] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.488799][ T8] usb 9-1: config 0 has no interface number 0 [ 737.495249][ T5775] usb 2-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00 [ 737.516140][ T5775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.540726][ T8] usb 9-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 737.562182][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.571629][ T5775] usb 2-1: config 0 descriptor?? [ 737.579049][T19417] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 737.595320][ T8] usb 9-1: Product: syz [ 737.608485][ T8] usb 9-1: Manufacturer: syz [ 737.623343][ T8] usb 9-1: SerialNumber: syz [ 737.647633][ T8] usb 9-1: config 0 descriptor?? [ 737.881751][T19413] loop4: detected capacity change from 0 to 40427 [ 737.916262][ T8] usb 9-1: Found UVC 0.00 device syz (046d:08f3) [ 737.940903][ T8] usb 9-1: No valid video chain found. [ 737.968215][T19413] F2FS-fs (loop4): invalid crc value [ 737.993237][T19413] F2FS-fs (loop4): Found nat_bits in checkpoint [ 738.057774][ T5775] wacom 0003:056A:4001.002A: unknown main item tag 0x3 [ 738.081572][ T5775] wacom 0003:056A:4001.002A: unknown main item tag 0x0 [ 738.121896][ T5775] wacom 0003:056A:4001.002A: unknown main item tag 0x0 [ 738.148481][ T5775] wacom 0003:056A:4001.002A: unknown main item tag 0x0 [ 738.174735][T15206] usb 9-1: USB disconnect, device number 13 [ 738.186738][ T5775] wacom 0003:056A:4001.002A: unknown main item tag 0x0 [ 738.203975][ T5775] wacom 0003:056A:4001.002A: unknown main item tag 0x0 [ 738.228468][ T5775] wacom 0003:056A:4001.002A: unknown main item tag 0x0 [ 738.229073][T19413] F2FS-fs (loop4): Start checkpoint disabled! [ 738.292061][ T5775] wacom 0003:056A:4001.002A: unknown main item tag 0x0 [ 738.335374][ T5775] wacom 0003:056A:4001.002A: hidraw0: USB HID v0.05 Device [HID 056a:4001] on usb-dummy_hcd.1-1/input0 [ 738.349991][T19413] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 738.358852][ T5775] usb 2-1: USB disconnect, device number 12 [ 738.588421][T19413] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 738.636954][T19447] fido_id[19447]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 739.466191][T19473] loop4: detected capacity change from 0 to 512 [ 739.518346][T19473] EXT4-fs: Ignoring removed bh option [ 739.630667][T19473] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e018, mo2=0003] [ 739.658588][T19473] System zones: 1-12 [ 739.670089][T19473] EXT4-fs (loop4): orphan cleanup on readonly fs [ 739.684011][T19473] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 33619980: comm syz.4.4694: invalid block [ 739.704319][T19473] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4694: invalid indirect mapped block 1819239214 (level 1) [ 739.798440][T19473] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.4694: bg 0: block 361: padding at end of block bitmap is not set [ 739.898731][T19473] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 739.968990][T19473] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.4694: attempt to clear invalid blocks 33619980 len 1 [ 740.005161][T19473] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4694: invalid indirect mapped block 1819239214 (level 0) [ 740.039028][T19473] EXT4-fs (loop4): 1 truncate cleaned up [ 740.046211][T19473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 740.244443][T19473] EXT4-fs: Ignoring removed orlov option [ 740.262993][T19473] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 740.288671][T19473] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 740.292404][T19473] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=802e11c, mo2=0003] [ 740.292460][T19473] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 740.404722][ T9930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.960514][T19510] loop8: detected capacity change from 0 to 256 [ 741.093043][T19513] Bluetooth: MGMT ver 1.22 [ 741.151927][T19510] FAT-fs (loop8): Directory bread(block 64) failed [ 741.191143][T19510] FAT-fs (loop8): Directory bread(block 65) failed [ 741.237307][T19510] FAT-fs (loop8): Directory bread(block 66) failed [ 741.256495][T19510] FAT-fs (loop8): Directory bread(block 67) failed [ 741.278897][T19510] FAT-fs (loop8): Directory bread(block 68) failed [ 741.285535][T19510] FAT-fs (loop8): Directory bread(block 69) failed [ 741.323441][T19510] FAT-fs (loop8): Directory bread(block 70) failed [ 741.352062][T19510] FAT-fs (loop8): Directory bread(block 71) failed [ 741.368826][T19510] FAT-fs (loop8): Directory bread(block 72) failed [ 741.375595][T19510] FAT-fs (loop8): Directory bread(block 73) failed [ 741.690056][T19523] loop1: detected capacity change from 0 to 2048 [ 741.728540][T19493] loop9: detected capacity change from 0 to 40427 [ 741.761527][T19493] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 741.790671][T19493] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 741.807231][T19527] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 741.851071][T19493] F2FS-fs (loop9): invalid crc_offset: 33558524 [ 741.877021][T19523] NILFS error (device loop1): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 741.907057][T19523] Remounting filesystem read-only [ 741.908337][T19493] F2FS-fs (loop9): Found nat_bits in checkpoint [ 742.014948][T17390] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 742.069790][T17390] NILFS (loop1): discard dirty page: offset=0, ino=18 [ 742.076649][T17390] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 742.148062][T17390] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 742.200112][T17390] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 742.218089][T19493] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 742.224304][T17390] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 742.225266][T19493] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 742.299306][T17390] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 742.306077][T17390] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 742.357941][T17390] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 742.397685][T17390] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 742.447844][T17390] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 742.457225][T17390] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 742.500854][T17390] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 742.517971][T17390] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 742.532033][T17390] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 742.547956][T17390] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 742.614511][T19517] loop4: detected capacity change from 0 to 32768 [ 742.621954][T17390] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 742.639793][T17390] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 742.647160][T17390] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 742.687400][T17390] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 742.707849][T17390] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 742.764255][T17390] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 742.781982][ T28] audit: type=1800 audit(1777976317.472:305): pid=19517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4714" name="file2" dev="loop4" ino=5 res=0 errno=0 [ 742.791490][T17390] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 742.888280][T17390] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 742.917592][T17390] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 742.956685][T17390] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 742.990779][T17390] NILFS (loop1): discard dirty page: offset=65536, ino=3 [ 743.019167][T17390] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 743.031419][T19517] read_mapping_page failed! [ 743.033207][T17390] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 743.108132][T17390] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 743.148033][T17390] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 743.998929][T19571] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 744.111520][T19575] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 744.593653][T19581] loop4: detected capacity change from 0 to 8192 [ 744.618949][T19581] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 744.659787][T19581] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 744.669524][T19581] REISERFS (device loop4): using ordered data mode [ 744.676081][T19581] reiserfs: using flush barriers [ 744.683197][T19581] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 744.701689][T19581] REISERFS (device loop4): checking transaction log (loop4) [ 744.727324][T19556] loop1: detected capacity change from 0 to 32768 [ 744.875074][T19581] REISERFS (device loop4): Using tea hash to sort names [ 744.898387][T19556] non-latin1 character 0x200 found in JFS file name [ 744.900711][T19581] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 744.905125][T19556] mount with iocharset=utf8 to access [ 745.310975][T19596] loop9: detected capacity change from 0 to 8192 [ 745.364786][T19596] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 745.413095][T19596] REISERFS (device loop9): found reiserfs format "3.6" with non-standard journal [ 745.423961][T19596] REISERFS (device loop9): using ordered data mode [ 745.430959][T19596] reiserfs: using flush barriers [ 745.518161][T19596] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 745.578992][T19596] REISERFS (device loop9): checking transaction log (loop9) [ 745.624826][T19596] REISERFS (device loop9): Using r5 hash to sort names [ 745.651719][T19596] REISERFS warning (device loop9): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 745.731233][T19596] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 745.760748][T19611] tipc: Started in network mode [ 745.799317][T19611] tipc: Node identity 2e0000000000000002, cluster identity 4711 [ 746.169446][T19617] loop8: detected capacity change from 0 to 1024 [ 746.261381][T19617] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 746.611491][T15029] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.008249][T19636] loop1: detected capacity change from 0 to 8192 [ 747.058238][T19636] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 747.088287][T15244] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 747.137257][T19636] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 747.189792][T19636] REISERFS (device loop1): using ordered data mode [ 747.228007][T19636] reiserfs: using flush barriers [ 747.263666][T19636] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 747.289335][T15244] usb 9-1: Using ep0 maxpacket: 16 [ 747.308750][T19636] REISERFS (device loop1): checking transaction log (loop1) [ 747.316783][T15244] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.339023][T15244] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 747.363474][T15244] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 747.383152][T15244] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.395906][T19636] REISERFS (device loop1): Using r5 hash to sort names [ 747.428616][T19636] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 747.456027][T19636] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 747.463473][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.483940][T15244] usb 9-1: config 0 descriptor?? [ 747.568530][T19636] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 747.932272][T15244] microsoft 0003:045E:07DA.002B: item 0 4 0 8 parsing failed [ 747.957688][T15244] microsoft 0003:045E:07DA.002B: parse failed [ 747.997669][T15244] microsoft: probe of 0003:045E:07DA.002B failed with error -22 [ 748.046684][T19641] loop4: detected capacity change from 0 to 40427 [ 748.084653][T19641] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 748.100020][T19641] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 748.140928][T19641] F2FS-fs (loop4): invalid crc value [ 748.149015][T15244] usb 9-1: USB disconnect, device number 14 [ 748.508963][T19641] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 748.535816][T19641] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 748.700421][T19641] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 749.305384][T19696] lo speed is unknown, defaulting to 1000 [ 749.327718][T19696] lo speed is unknown, defaulting to 1000 [ 749.369164][T19696] lo speed is unknown, defaulting to 1000 [ 749.469766][T19696] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 749.599056][T19696] lo speed is unknown, defaulting to 1000 [ 749.629330][T19696] lo speed is unknown, defaulting to 1000 [ 749.656682][T19696] lo speed is unknown, defaulting to 1000 [ 749.690146][T19696] lo speed is unknown, defaulting to 1000 [ 749.706841][T19696] lo speed is unknown, defaulting to 1000 [ 749.761327][T19696] lo speed is unknown, defaulting to 1000 [ 749.876957][T19702] loop1: detected capacity change from 0 to 8192 [ 749.934604][T19702] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 749.983934][T19702] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 750.058117][T19702] REISERFS (device loop1): using ordered data mode [ 750.064710][T19702] reiserfs: using flush barriers [ 750.141764][T19702] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 750.195900][T19702] REISERFS (device loop1): checking transaction log (loop1) [ 750.233471][T19702] REISERFS (device loop1): Using r5 hash to sort names [ 750.243817][T19718] sch_tbf: burst 25 is lower than device ip6gre0 mtu (1448) ! [ 750.290969][T19702] reiserfs: enabling write barrier flush mode [ 750.360819][T19702] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 750.411690][T19702] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 750.483865][T19702] REISERFS (device loop1): Remounting filesystem read-only [ 750.524239][T19702] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 750.558270][T19702] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 750.603426][T19702] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 750.677456][T19702] REISERFS error (device loop1): zam-7001 reiserfs_find_entry: io error [ 750.759254][T19702] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 750.800782][T19702] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 750.827996][T19702] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 750.858902][T19702] REISERFS warning (device loop1): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 751.044267][T17390] ------------[ cut here ]------------ [ 751.050745][T17390] kernel BUG at fs/reiserfs/journal.c:1916! [ 751.087042][T17390] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 751.093200][T17390] CPU: 1 PID: 17390 Comm: syz-executor Not tainted syzkaller #0 [ 751.100880][T17390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 751.110994][T17390] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 751.116869][T17390] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 14 db b5 ff e9 f9 fc ff ff e8 fa a3 5d ff <0f> 0b e8 f3 a3 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 751.136532][T17390] RSP: 0018:ffffc90003377b00 EFLAGS: 00010293 [ 751.142652][T17390] RAX: ffffffff82297e06 RBX: 1ffff9200066ef64 RCX: ffff88802b998000 [ 751.150669][T17390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 751.158666][T17390] RBP: ffffc90003377bf8 R08: ffffc90003377b77 R09: 0000000000000000 [ 751.166661][T17390] R10: ffffc90003377b40 R11: fffff5200066ef6f R12: ffffc900121df000 [ 751.174664][T17390] R13: dffffc0000000000 R14: ffff88807ea48630 R15: 0000000000000000 [ 751.182749][T17390] FS: 000055558b5ca500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 751.191700][T17390] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 751.198306][T17390] CR2: 00007fff8649ac5c CR3: 000000007760c000 CR4: 00000000003506e0 [ 751.206304][T17390] Call Trace: [ 751.209604][T17390] [ 751.212651][T17390] ? journal_release+0x30/0x30 [ 751.217453][T17390] journal_release+0x1f/0x30 [ 751.222069][T17390] reiserfs_put_super+0x26b/0x510 [ 751.227132][T17390] ? hook_inode_free_security+0xb0/0xb0 [ 751.232701][T17390] ? evict_inodes+0x63c/0x6a0 [ 751.237406][T17390] ? reiserfs_dirty_inode+0x270/0x270 [ 751.242816][T17390] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 751.248496][T17390] ? reiserfs_dirty_inode+0x270/0x270 [ 751.253909][T17390] generic_shutdown_super+0x134/0x2b0 [ 751.259398][T17390] kill_block_super+0x44/0x90 [ 751.264100][T17390] deactivate_locked_super+0x97/0x100 [ 751.269493][T17390] cleanup_mnt+0x43b/0x4d0 [ 751.273943][T17390] task_work_run+0x1d4/0x260 [ 751.278562][T17390] ? task_work_cancel+0x220/0x220 [ 751.283622][T17390] ? exit_to_user_mode_loop+0x3b/0x110 [ 751.289110][T17390] exit_to_user_mode_loop+0xe6/0x110 [ 751.294424][T17390] exit_to_user_mode_prepare+0xee/0x180 [ 751.300000][T17390] syscall_exit_to_user_mode+0x1a/0x50 [ 751.305492][T17390] do_syscall_64+0x61/0xa0 [ 751.309937][T17390] ? clear_bhb_loop+0x40/0x90 [ 751.314643][T17390] ? clear_bhb_loop+0x40/0x90 [ 751.319350][T17390] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 751.325266][T17390] RIP: 0033:0x7fd7f499e017 [ 751.329734][T17390] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 751.349372][T17390] RSP: 002b:00007ffc2881d238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 751.357813][T17390] RAX: 0000000000000000 RBX: 00007fd7f4a32120 RCX: 00007fd7f499e017 [ 751.365807][T17390] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2881d2f0 [ 751.373810][T17390] RBP: 00007ffc2881d2f0 R08: 00007ffc2881e2f0 R09: 00000000ffffffff [ 751.381894][T17390] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc2881e380 [ 751.389904][T17390] R13: 00007fd7f4a32120 R14: 00000000000b753f R15: 00007ffc2881e3c0 [ 751.397926][T17390] [ 751.400978][T17390] Modules linked in: [ 751.425541][T17390] ---[ end trace 0000000000000000 ]--- [ 751.431185][T17390] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 751.437589][T17390] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 14 db b5 ff e9 f9 fc ff ff e8 fa a3 5d ff <0f> 0b e8 f3 a3 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 751.459938][T17390] RSP: 0018:ffffc90003377b00 EFLAGS: 00010293 [ 751.466078][T17390] RAX: ffffffff82297e06 RBX: 1ffff9200066ef64 RCX: ffff88802b998000 [ 751.474298][T17390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 751.482342][T17390] RBP: ffffc90003377bf8 R08: ffffc90003377b77 R09: 0000000000000000 [ 751.490933][T17390] R10: ffffc90003377b40 R11: fffff5200066ef6f R12: ffffc900121df000 [ 751.499002][T17390] R13: dffffc0000000000 R14: ffff88807ea48630 R15: 0000000000000000 [ 751.507179][T17390] FS: 000055558b5ca500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 751.516699][T17390] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 751.543100][T17390] CR2: 000020000000cf3d CR3: 000000007760c000 CR4: 00000000003506f0 [ 751.558355][T17390] Kernel panic - not syncing: Fatal exception [ 751.565046][T17390] Kernel Offset: disabled [ 751.569408][T17390] Rebooting in 86400 seconds..