last executing test programs: 34.946826566s ago: executing program 0 (id=1277): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x1}], 0x1}}], 0x484, 0x24048084) 34.652126261s ago: executing program 0 (id=1280): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2d, @remote, 0x2a0}, 0x1c) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 34.448036644s ago: executing program 0 (id=1281): openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$binfmt_script(r0, 0x0, 0x0) 33.50601736s ago: executing program 0 (id=1295): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x101c08a, &(0x7f0000000440)={[{@numtail}, {@numtail}, {@fat=@nfs}, {@uni_xlateno}, {@utf8no}, {@fat=@quiet}, {@shortname_lower}, {@uni_xlate}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@utf8no}, {@utf8no}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@numtail}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@uni_xlateno}]}, 0x6, 0x2b8, &(0x7f0000000640)="$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") syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x286c188, 0x0, 0xff, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 33.125051757s ago: executing program 0 (id=1300): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x4100, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x1, 0x100000000000000, 0x7}) 32.482054428s ago: executing program 0 (id=1310): r0 = memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb', 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x400) pipe2$watch_queue(&(0x7f00000021c0), 0x80) 32.36513076s ago: executing program 32 (id=1310): r0 = memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb', 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x400) pipe2$watch_queue(&(0x7f00000021c0), 0x80) 7.348377125s ago: executing program 4 (id=1557): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x2, 0x0, 0x1}, [@mark={0xc, 0x15, {0x0, 0xffff}}]}, 0xc4}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8"], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7.265848986s ago: executing program 4 (id=1560): unshare(0x8040480) r0 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r0, &(0x7f0000000200)) mq_notify(r0, 0x0) 7.192090957s ago: executing program 4 (id=1562): syz_mount_image$jfs(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000240)={[{@discard}, {@quota}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@errors_remount}, {@quota}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}, 0x0}, {@errors_remount}, {@errors_remount}, {@quota}, {@resize_size={'resize', 0x3d, 0xfffffffffffffffe}}, {@errors_continue}, {@usrquota}, {@discard}]}, 0x1, 0x61ae, &(0x7f0000001040)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) 6.221250874s ago: executing program 4 (id=1573): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x451, &(0x7f0000000480)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000a80)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) 5.378300718s ago: executing program 4 (id=1580): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x4000172, 0xffffffffffffffff, 0x0) 4.69910544s ago: executing program 4 (id=1589): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x1, 0x800, 0x1, 0x4, 0x8, 0x760]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000110}, 0x0) 4.501561393s ago: executing program 33 (id=1589): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x1, 0x800, 0x1, 0x4, 0x8, 0x760]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000110}, 0x0) 3.175159236s ago: executing program 1 (id=1601): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x1, 0x3, 0x4, 0x4, 0x7f, 0x3, 0x8}, 0x20) 3.009162589s ago: executing program 1 (id=1602): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/4\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2.309188141s ago: executing program 3 (id=1608): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 2.099570324s ago: executing program 1 (id=1609): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000340)="10008100", 0x4, 0x0, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x1}, 0x14) 2.099320164s ago: executing program 3 (id=1610): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r1) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r2, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 2.045610525s ago: executing program 2 (id=1611): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$eJzs3M1rXFUUAPDzXj7bRicVEeumEZEWxGlaSbFFsJWKGxeCboWGdFJCph8kkZo0i4n+A6KuBTeCWpQu7LobBbdutG4tLoQisVEQ0cibjyQ2M0naTvJq8vvBzbt3zpvcc/KYeffCTALYsQayH2nEvog4nUQU6o+nEdFd7fVGVGrnLczPjvwxPzuSxOLi678mkUTE7fnZkcbvSurHPfVBb0R891ISj7y7et7J6Znx4XK5NFEfH5o6d/HQ5PTMs2Pnhs+WzpbOHz76/NCRoaODx4baVuufP5249vuTr/xc+euzv6/89sEnSZyIvnpsZR3tMhADS3+TlTojYrjdk+Wko17PyjqTznWelG5yUgAAtJSuWMM9FoXoiOXFWyG+/j7X5AAAAIC2WOyIWAQAAAC2ucT+HwAAALa5xucAbs/PjjRavp9I2Fq3TkZEf63+hXqrRTqjUj32RldE7L6dxMqvtSa1p923gYi4+eOxL7MWm/Q95LVU5iLi8WbXP6nW31/9Fvfq+tOIGGzD/AN3jP9P9Z9ow/x51w/AznT9ZO1Gtvr+ly6tf6LJ/a+zyb3rXuR9/2us/xZWrf+W6+9osf57bYNzXP70o0utYln9L1x7+YtGy+bPjvdV1F24NRfxRGez+pOl+pMW9Z/e4ByFfy6VWsXyrn/x44gD0bz+hmTt/090aHSsXBqs/Ww6x9y3Q5+3mj/v+rPrv7tF/etd/4sbnOPNU6eutoqtX3/6S3fyRrXXXX/k7eGpqYnDEd3Jq6sfP7J2Lo1zGr8jq//gU2u//pvVn70nVOp/h2wvMFc/ZuN37pjzxSuXv1qr/mzvl+f1P3OP1/+9Dc7x9DfvH2wVW7n/zVo2/82kthcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIY0IvoiSYtL/TQtFiP2RMSjsTstX5icemb0wlvnz2SxiP7oSkfHyqXBiCjUxkk2PlztL4+P3DF+LiL2RsSHhV3VcXHkQvlM3sUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwZE9E9EWSFiMijYiFQpoWi3lnBQAAALRdf94JAAAAAJvO/h8AAAC2P/t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANtne/ddvJBFROb6r2jLd9VhXrpkBmy3NOwEgNx15JwDkpjPvBIDc3OUe33IBtqFknXhvy0hP23MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MF1YN/1G0lEVI7vqrZMdz3W1fQZ+7cwO2AzpXknAOSmY61g59blAWw9L3HYuZrv8YGdJFkn3rt8TuW/kZ5NywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB09ftSVpMSLSaj9Ni8WIhyKiP7qS0bFyaTAiHo6IHwpdPdm4J++kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLvJ6Znx4XK5NKGjo5NvJ3kw0qh18n5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD5PTM+PD5XJpYjLvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC8TU7PjA+Xy6WJDXSu3s3JKzp51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DQAA//+LYA3r") unshare(0x22020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x400c6615, 0x0) 1.993934026s ago: executing program 3 (id=1612): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f0000000580)={[{@shortad}, {@gid}, {@uid_forget}, {@gid_forget}, {@volume={'volume', 0x3d, 0x3ff}}, {@utf8}, {@noadinicb}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp869'}}]}, 0x1, 0xc32, &(0x7f000001fd40)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x84c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80000, 0x0, 0x1, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./bus\x00') 1.905834218s ago: executing program 1 (id=1613): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000080)={0x51, 0xf7e, 0x76, {0x2000, 0xac5}, {0xffff, 0x2}, @ramp={0x6, 0x0, {0x8, 0x5, 0x3, 0x17c}}}) 1.692334211s ago: executing program 3 (id=1614): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/122}, {&(0x7f0000000380)=""/126}, {&(0x7f00000004c0)=""/68}, {&(0x7f0000000540)=""/195}, {&(0x7f0000000640)=""/182}, {&(0x7f0000000700)=""/102}, {&(0x7f0000000180)=""/56}, {&(0x7f0000001000)=""/193}, {&(0x7f0000000880)=""/242}], 0x0, &(0x7f0000000a40)=""/126}, 0xe4}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000440)}, {&(0x7f0000000ac0)=""/166}, {&(0x7f0000000b80)=""/173}, {&(0x7f0000000c40)=""/221}, {&(0x7f0000000d40)=""/236}, {&(0x7f0000000e40)=""/60}], 0x24, &(0x7f0000000f00)=""/80}, 0x1}], 0x2a, 0x40012020, 0x0) 1.526026444s ago: executing program 3 (id=1616): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}}, 0x0) 1.525213864s ago: executing program 2 (id=1617): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x3c, r2, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0d}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "4811e10d34"}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 1.482257315s ago: executing program 5 (id=1618): r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1.447500745s ago: executing program 5 (id=1619): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x153}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x4040) 978.595573ms ago: executing program 3 (id=1620): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x31) 863.204985ms ago: executing program 5 (id=1621): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001800)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r1, 0x0) 863.000835ms ago: executing program 2 (id=1622): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x44000000) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x20000003) 750.665557ms ago: executing program 2 (id=1623): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) 692.873858ms ago: executing program 5 (id=1624): r0 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x40002119, 0x400, 0x1}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 518.184621ms ago: executing program 2 (id=1625): r0 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x40045532, &(0x7f0000003f80)=""/4086) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x0, 0x80880) 515.482121ms ago: executing program 5 (id=1626): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000100)={0x77359400}) read(r0, &(0x7f00000002c0)=""/114, 0x72) 420.551163ms ago: executing program 2 (id=1627): pipe2$watch_queue(&(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "18ade3a75d4d7836521099b0402f3db73b63067aa4a543e9569324623fd1db740ea2ff900dfa9218ebd7541d9194f2f255d66625a5527d15da161125a089d489"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) keyctl$invalidate(0x15, r1) 282.264675ms ago: executing program 5 (id=1628): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0x4a, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) 10.186459ms ago: executing program 1 (id=1629): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 0s ago: executing program 1 (id=1630): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_mount_image$gfs2(&(0x7f0000000240), &(0x7f0000001c00)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x21, 0x125b0, &(0x7f0000037080)="$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") utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): h-speed USB device number 8 using dummy_hcd [ 150.820458][ T6528] BTRFS info (device loop3): enabling ssd optimizations [ 150.822209][ T4178] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 150.868934][ T6579] loop1: detected capacity change from 0 to 256 [ 150.901567][ T6579] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 150.992482][ T1325] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.037253][ T1325] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 62, changing to 9 [ 151.073869][ T6561] loop4: detected capacity change from 0 to 32768 [ 151.219667][ T6582] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 151.221341][ T6561] ERROR: (device loop4): duplicateIXtree: [ 151.221341][ T6561] [ 151.232514][ T1325] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.249217][ T1325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.262738][ T4178] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.277991][ T1325] usb 3-1: Product: syz [ 151.282121][ T4178] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.288993][ T1325] usb 3-1: Manufacturer: syz [ 151.297272][ T6561] ERROR: (device loop4): remounting filesystem as read-only [ 151.327684][ T1325] usb 3-1: SerialNumber: syz [ 151.338759][ T6584] loop1: detected capacity change from 0 to 128 [ 151.396043][ T1325] usb 3-1: bad CDC descriptors [ 151.407408][ T4178] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 151.426949][ T4178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 151.451299][ T4178] usb 1-1: SerialNumber: syz [ 151.472495][ T6584] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 151.505194][ T6584] sysv_free_block: trying to free block not in datazone [ 151.592455][ T6584] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 151.620688][ T5384] usb 3-1: USB disconnect, device number 8 [ 151.815201][ T4178] usb 1-1: 0:2 : does not exist [ 151.932277][ T4178] usb 1-1: USB disconnect, device number 8 [ 152.054448][ T6586] loop3: detected capacity change from 0 to 32768 [ 152.187865][ T6586] XFS (loop3): Mounting V5 Filesystem [ 152.236420][ T4856] udevd[4856]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.330138][ T6611] loop2: detected capacity change from 0 to 256 [ 152.474660][ T6586] XFS (loop3): Ending clean mount [ 152.492223][ T4900] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 152.558663][ T4175] XFS (loop3): Unmounting Filesystem [ 152.862364][ T4900] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 152.887778][ T4900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.921703][ T4900] usb 5-1: config 0 descriptor?? [ 152.927803][ T6603] loop1: detected capacity change from 0 to 40427 [ 153.003502][ T6603] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 153.011451][ T6603] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 153.106858][ T6603] F2FS-fs (loop1): Found nat_bits in checkpoint [ 153.264089][ T6603] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 153.292297][ T6603] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 153.300168][ T6645] loop3: detected capacity change from 0 to 512 [ 153.422622][ T6645] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.698000][ T6662] loop0: detected capacity change from 0 to 64 [ 153.745292][ T6665] Set syz1 is full, maxelem 65536 reached [ 153.852382][ T4900] usb 5-1: Cannot set autoneg [ 153.857333][ T4900] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 153.905595][ T4900] usb 5-1: USB disconnect, device number 8 [ 154.036364][ T6676] loop2: detected capacity change from 0 to 512 [ 154.109394][ T6675] loop3: detected capacity change from 0 to 4096 [ 154.171135][ T6676] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.866: inode #1: comm syz.2.866: iget: illegal inode # [ 154.198788][ T6676] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.866: error while reading EA inode 1 err=-117 [ 154.218165][ T6676] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.866: inode #1: comm syz.2.866: iget: illegal inode # [ 154.239420][ T6676] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.866: error while reading EA inode 1 err=-117 [ 154.308691][ T6676] EXT4-fs (loop2): 1 orphan inode deleted [ 154.349115][ T6676] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 154.386358][ T6689] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.179322][ T6709] netlink: 28 bytes leftover after parsing attributes in process `syz.1.879'. [ 155.207133][ T6709] netlink: 28 bytes leftover after parsing attributes in process `syz.1.879'. [ 155.379490][ T4178] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 155.521258][ T6698] loop4: detected capacity change from 0 to 131072 [ 155.611830][ T6693] loop0: detected capacity change from 0 to 40427 [ 155.648666][ T6698] XFS (loop4): Mounting V5 Filesystem [ 155.662286][ T4178] usb 4-1: Using ep0 maxpacket: 16 [ 155.671802][ T6693] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 155.692401][ T6693] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 155.751732][ T6693] F2FS-fs (loop0): Found nat_bits in checkpoint [ 155.754987][ T6698] XFS (loop4): Starting recovery (logdev: internal) [ 155.783239][ T6698] XFS (loop4): Ending recovery (logdev: internal) [ 155.794778][ T6698] XFS (loop4): Unmounting Filesystem [ 155.813438][ T4178] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.824772][ T4178] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.835871][ T4178] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 155.852515][ T4178] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.870528][ T4178] usb 4-1: config 0 descriptor?? [ 155.888551][ T6693] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 155.896164][ T6693] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 155.933590][ T2331] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 156.204326][ T6732] loop2: detected capacity change from 0 to 1024 [ 156.337509][ T4178] corsair 0003:1B1C:1B02.000C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 156.361589][ T6732] EXT4-fs (loop2): Ignoring removed orlov option [ 156.371544][ T2331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.392208][ T2331] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 156.436055][ T2331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.436733][ T6734] tipc: New replicast peer: 255.255.255.255 [ 156.453367][ T2331] usb 2-1: config 0 descriptor?? [ 156.459959][ T6732] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,quota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,lazytime,noauto_da_alloc,stripe=0x0000000000000005,orlov,,errors=continue. Quota mode: writeback. [ 156.479282][ T6734] tipc: Enabled bearer , priority 10 [ 156.483057][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.542612][ T4178] corsair 0003:1B1C:1B02.000C: Read invalid backlight brightness: d7. [ 156.601091][ T6732] EXT4-fs error (device loop2): ext4_check_all_de:664: inode #12: block 7: comm syz.2.885: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 156.775621][ T4900] usb 4-1: USB disconnect, device number 6 [ 156.791068][ T26] audit: type=1326 audit(1743228653.579:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.4.888" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76137b2169 code=0x0 [ 156.945948][ T2331] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 156.960907][ T2331] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000D/input/input10 [ 156.991030][ T6739] loop0: detected capacity change from 0 to 32768 [ 157.059236][ T6739] XFS: ikeep mount option is deprecated. [ 157.070453][ T2331] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 157.103916][ T6739] XFS (loop0): Mounting V5 Filesystem [ 157.195574][ T6739] XFS (loop0): Ending clean mount [ 157.210129][ T6739] XFS (loop0): Quotacheck needed: Please wait. [ 157.255591][ T6739] XFS (loop0): Quotacheck: Done. [ 157.346684][ T4170] XFS (loop0): Unmounting Filesystem [ 157.465655][ T2331] tipc: Node number set to 2886997162 [ 157.488013][ T2331] kernel read not supported for file /dsp1 (pid: 2331 comm: kworker/0:3) [ 157.619831][ T6762] kernel read not supported for file /eth0 (pid: 6762 comm: syz.2.894) [ 157.635577][ T26] audit: type=1800 audit(1743228654.429:32): pid=6762 uid=0 auid=0 ses=1 subj=unconfined op=collect_data cause=failed comm="syz.2.894" name="eth0" dev="mqueue" ino=39867 res=0 errno=0 [ 157.737692][ T4178] usb 2-1: USB disconnect, device number 9 [ 157.838714][ T6771] loop4: detected capacity change from 0 to 47 [ 157.855518][ T6773] loop2: detected capacity change from 0 to 512 [ 157.878919][ T6774] loop3: detected capacity change from 0 to 256 [ 157.900767][ T6776] loop0: detected capacity change from 0 to 164 [ 157.976050][ T6773] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.898: corrupted inode contents [ 157.983754][ T6771] MINIX-fs: deleted inode referenced: 9 [ 158.003729][ T6771] MINIX-fs: deleted inode referenced: 9 [ 158.016575][ T6771] MINIX-fs: deleted inode referenced: 9 [ 158.020408][ T6773] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #3: comm syz.2.898: mark_inode_dirty error [ 158.023241][ T6771] MINIX-fs: deleted inode referenced: 9 [ 158.041123][ T6773] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.898: corrupted inode contents [ 158.060146][ T6773] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.898: mark_inode_dirty error [ 158.104862][ T6773] Quota error (device loop2): write_blk: dquota write failed [ 158.114527][ T6773] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 158.124931][ T6773] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.898: Failed to acquire dquot type 0 [ 158.151779][ T6773] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.898: corrupted inode contents [ 158.179488][ T6773] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #16: comm syz.2.898: mark_inode_dirty error [ 158.199038][ T6784] netlink: 836 bytes leftover after parsing attributes in process `syz.0.902'. [ 158.208787][ T6785] loop4: detected capacity change from 0 to 164 [ 158.216223][ T6773] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.898: corrupted inode contents [ 158.239049][ T6773] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.898: mark_inode_dirty error [ 158.256188][ T6773] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.898: corrupted inode contents [ 158.306701][ T6773] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 158.328490][ T6773] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.898: corrupted inode contents [ 158.353534][ T6773] EXT4-fs error (device loop2): ext4_truncate:4272: inode #16: comm syz.2.898: mark_inode_dirty error [ 158.392680][ T6773] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 158.456095][ T6773] EXT4-fs (loop2): 1 truncate cleaned up [ 158.461784][ T6773] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 158.462248][ T6793] loop3: detected capacity change from 0 to 128 [ 158.493943][ T6773] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.614491][ T6802] loop4: detected capacity change from 0 to 1024 [ 158.665314][ T6804] loop1: detected capacity change from 0 to 1024 [ 158.703467][ T6804] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.759404][ T6802] hfsplus: xattr searching failed [ 158.773204][ T6802] hfsplus: bad catalog file entry [ 158.832221][ T2331] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 158.846160][ T4212] hfsplus: b-tree write err: -5, ino 3 [ 158.853715][ T4212] hfsplus: bad catalog file entry [ 159.099831][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.918'. [ 159.149546][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.918'. [ 159.272587][ T2331] usb 1-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 159.281722][ T2331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.347819][ T2331] usb 1-1: config 0 descriptor?? [ 159.484604][ T6829] input: syz1 as /devices/virtual/input/input11 [ 159.748343][ T2331] usbhid 1-1:0.0: can't add hid device: -71 [ 159.762141][ T2331] usbhid: probe of 1-1:0.0 failed with error -71 [ 159.800574][ T2331] usb 1-1: USB disconnect, device number 9 [ 159.920393][ T6814] loop4: detected capacity change from 0 to 40427 [ 159.966096][ T6814] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 159.988705][ T6814] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 160.010134][ T6814] F2FS-fs (loop4): inline encryption not supported [ 160.041487][ T6814] F2FS-fs (loop4): invalid crc value [ 160.105808][ T6814] F2FS-fs (loop4): Found nat_bits in checkpoint [ 160.237328][ T6814] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 160.253866][ T6814] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 160.259900][ T6827] loop1: detected capacity change from 0 to 32768 [ 160.402361][ T6827] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 160.414063][ T6836] loop2: detected capacity change from 0 to 32768 [ 160.447383][ T4167] attempt to access beyond end of device [ 160.447383][ T4167] loop4: rw=2049, want=45112, limit=40427 [ 160.489822][ T4166] ocfs2: Unmounting device (7,1) on (node local) [ 160.522153][ T4178] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 160.607668][ T6836] XFS (loop2): Mounting V5 Filesystem [ 160.721696][ T6836] XFS (loop2): Ending clean mount [ 160.802499][ T4178] usb 1-1: Using ep0 maxpacket: 16 [ 160.823713][ T4174] XFS (loop2): Unmounting Filesystem [ 160.850382][ T6846] loop3: detected capacity change from 0 to 40427 [ 160.893041][ T6861] loop1: detected capacity change from 0 to 512 [ 160.929576][ T6846] F2FS-fs (loop3): invalid crc value [ 160.979531][ T4178] usb 1-1: config 4 has an invalid interface number: 52 but max is 1 [ 160.988175][ T4178] usb 1-1: config 4 has an invalid interface number: 52 but max is 1 [ 160.996515][ T6846] F2FS-fs (loop3): Found nat_bits in checkpoint [ 161.028261][ T4178] usb 1-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 161.046627][ T6861] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.934: casefold flag without casefold feature [ 161.062273][ T6861] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.934: couldn't read orphan inode 15 (err -117) [ 161.082420][ T6861] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 161.088513][ T4178] usb 1-1: config 4 has no interface number 0 [ 161.132282][ T4178] usb 1-1: config 4 interface 52 altsetting 62 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 161.147816][ T4178] usb 1-1: config 4 interface 52 has no altsetting 0 [ 161.159487][ T4178] usb 1-1: config 4 interface 52 has no altsetting 1 [ 161.169173][ T6846] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 161.197008][ T6846] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 161.306145][ T26] audit: type=1800 audit(1743228658.089:33): pid=6846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.930" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 161.401673][ T4175] attempt to access beyond end of device [ 161.401673][ T4175] loop3: rw=2049, want=45104, limit=40427 [ 161.419651][ T4178] usb 1-1: New USB device found, idVendor=0b95, idProduct=7720, bcdDevice=18.78 [ 161.439916][ T4178] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.480397][ T4178] usb 1-1: Product: syz [ 161.490506][ T4178] usb 1-1: Manufacturer: syz [ 161.500626][ T4178] usb 1-1: SerialNumber: syz [ 161.593868][ T6883] loop4: detected capacity change from 0 to 2048 [ 161.643886][ T6883] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.689017][ T6885] loop9: detected capacity change from 0 to 8 [ 161.706933][ T6885] Dev loop9: unable to read RDB block 8 [ 161.717195][ T5384] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 161.726250][ T6885] loop9: unable to read partition table [ 161.733884][ T6885] loop9: partition table beyond EOD, truncated [ 161.748549][ T6885] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 161.812572][ T4178] asix 1-1:4.52 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 161.838590][ T4178] asix: probe of 1-1:4.52 failed with error -71 [ 161.886558][ T4178] usb 1-1: USB disconnect, device number 10 [ 162.022493][ T5384] usb 2-1: Using ep0 maxpacket: 16 [ 162.044025][ T6893] loop4: detected capacity change from 0 to 16 [ 162.157112][ T6893] erofs: (device loop4): mounted with root inode @ nid 36. [ 162.165080][ T5384] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 162.182143][ T5384] usb 2-1: config 0 has no interface number 0 [ 162.193665][ T5384] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 162.236981][ T5384] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 162.412639][ T5384] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 162.421815][ T5384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.444058][ T5384] usb 2-1: Product: syz [ 162.448333][ T5384] usb 2-1: Manufacturer: syz [ 162.482085][ T5384] usb 2-1: SerialNumber: syz [ 162.504634][ T5384] usb 2-1: config 0 descriptor?? [ 162.542458][ T6877] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 162.549565][ T6877] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 162.627482][ T6909] loop3: detected capacity change from 0 to 4096 [ 162.631251][ T6914] loop4: detected capacity change from 0 to 1024 [ 162.740628][ T6891] loop2: detected capacity change from 0 to 40427 [ 162.803393][ T6891] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 162.819856][ T6877] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 162.832537][ T6891] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 162.857735][ T6877] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 162.893223][ T4212] hfsplus: b-tree write err: -5, ino 4 [ 162.914613][ T6891] F2FS-fs (loop2): Found nat_bits in checkpoint [ 163.093427][ T6891] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 163.117359][ T6891] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 163.124918][ T6912] loop0: detected capacity change from 0 to 32768 [ 163.245166][ T6912] XFS (loop0): Mounting V5 Filesystem [ 163.302303][ T5384] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 163.322124][ T5384] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 163.334271][ T5384] asix: probe of 2-1:0.251 failed with error -71 [ 163.345202][ T5384] usb 2-1: USB disconnect, device number 10 [ 163.374282][ T6912] XFS (loop0): Ending clean mount [ 163.397631][ T6912] XFS (loop0): Quotacheck needed: Please wait. [ 163.460000][ T6921] loop3: detected capacity change from 0 to 32768 [ 163.485076][ T6912] XFS (loop0): Quotacheck: Done. [ 163.560243][ T6921] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 163.575299][ T4170] XFS (loop0): Unmounting Filesystem [ 163.728606][ T4175] ocfs2: Unmounting device (7,3) on (node local) [ 164.256736][ T26] audit: type=1326 audit(1743228661.049:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.3.966" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d2d6169 code=0x0 [ 164.367257][ T6966] loop0: detected capacity change from 0 to 64 [ 164.562132][ T4178] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 164.626635][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.973'. [ 164.777841][ T6982] ipt_CLUSTERIP: Please specify destination IP [ 164.852341][ T4178] usb 5-1: Using ep0 maxpacket: 8 [ 164.983298][ T4178] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 164.997575][ T4178] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.009755][ T4178] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 165.025865][ T4178] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 165.038081][ T4178] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.064374][ T4178] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 165.091234][ T6987] loop1: detected capacity change from 0 to 1024 [ 165.108062][ T4178] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.210778][ T6983] loop0: detected capacity change from 0 to 32768 [ 165.327720][ T6983] XFS (loop0): Mounting V5 Filesystem [ 165.362214][ T4178] usb 5-1: GET_CAPABILITIES returned 0 [ 165.367749][ T4178] usbtmc 5-1:16.0: can't read capabilities [ 165.571658][ T6983] XFS (loop0): Ending clean mount [ 165.580707][ T6983] XFS (loop0): Quotacheck needed: Please wait. [ 165.612939][ T144] hfsplus: b-tree write err: -5, ino 4 [ 165.622354][ T6961] usb 5-1: usbtmc_ioctl_clear_in_halt returned -32 [ 165.636176][ T4178] usb 5-1: USB disconnect, device number 9 [ 165.694069][ T6991] loop2: detected capacity change from 0 to 32768 [ 165.702610][ T6983] XFS (loop0): Quotacheck: Done. [ 165.750069][ T6993] loop3: detected capacity change from 0 to 32768 [ 165.768500][ T6991] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.983 (6991) [ 165.809820][ T6993] [ 165.809820][ T6993] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.809820][ T6993] [ 165.836161][ T6991] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 165.852886][ T6991] BTRFS info (device loop2): setting nodatacow, compression disabled [ 165.871838][ T7004] loop1: detected capacity change from 0 to 2048 [ 165.889456][ T6991] BTRFS info (device loop2): max_inline at 0 [ 165.906569][ T6991] BTRFS info (device loop2): enabling disk space caching [ 165.921522][ T6991] BTRFS info (device loop2): turning off barriers [ 165.939142][ T6991] BTRFS info (device loop2): turning on flush-on-commit [ 165.960599][ T6991] BTRFS info (device loop2): doing ref verification [ 165.978911][ T496] ERROR: (device loop3): diWrite: ixpxd invalid [ 165.978911][ T496] [ 166.002551][ T7005] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.033820][ T6991] BTRFS info (device loop2): force clearing of disk cache [ 166.042907][ T496] ERROR: (device loop3): txCommit: [ 166.042907][ T496] [ 166.054556][ T7004] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 166.081147][ T6991] BTRFS info (device loop2): enabling ssd optimizations [ 166.082543][ T496] jfs_write_inode: jfs_commit_inode failed! [ 166.110050][ T4175] [ 166.110050][ T4175] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 166.110050][ T4175] [ 166.134502][ T6991] BTRFS info (device loop2): max_inline at 4096 [ 166.140798][ T6991] BTRFS info (device loop2): disk space caching is enabled [ 166.166036][ T4175] [ 166.166036][ T4175] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 166.166036][ T4175] [ 166.198246][ T7004] Remounting filesystem read-only [ 166.204210][ T6991] BTRFS info (device loop2): has skinny extents [ 166.225382][ T7004] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 166.278052][ T26] audit: type=1326 audit(1743228663.069:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76137b2169 code=0x7ffc0000 [ 166.311074][ T6983] overlayfs: conflicting lowerdir path [ 166.398892][ T26] audit: type=1326 audit(1743228663.139:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f76137b2169 code=0x7ffc0000 [ 166.423629][ T4170] XFS (loop0): Unmounting Filesystem [ 166.429199][ T26] audit: type=1326 audit(1743228663.139:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76137b2169 code=0x7ffc0000 [ 166.452355][ T26] audit: type=1326 audit(1743228663.139:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76137b2169 code=0x7ffc0000 [ 166.491252][ T7022] loop4: detected capacity change from 0 to 256 [ 166.508053][ T26] audit: type=1326 audit(1743228663.139:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f76137b2169 code=0x7ffc0000 [ 166.539309][ T26] audit: type=1326 audit(1743228663.139:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76137b2169 code=0x7ffc0000 [ 166.540164][ T7024] loop1: detected capacity change from 0 to 128 [ 166.563077][ T26] audit: type=1326 audit(1743228663.139:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76137b2169 code=0x7ffc0000 [ 166.645037][ T7024] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 166.661686][ T7022] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 166.689880][ T26] audit: type=1326 audit(1743228663.139:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f76137b2169 code=0x7ffc0000 [ 166.757141][ T26] audit: type=1326 audit(1743228663.139:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76137b2169 code=0x7ffc0000 [ 166.760411][ T6991] BTRFS info (device loop2): clearing free space tree [ 166.798801][ T7024] FAT-fs (loop1): FAT read failed (blocknr 128) [ 166.841132][ T6991] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 166.852477][ T6991] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 166.982282][ T9] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 167.532901][ T7048] loop1: detected capacity change from 0 to 2048 [ 167.732315][ T7038] loop4: detected capacity change from 0 to 32768 [ 167.740875][ T7048] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.875182][ T7046] loop0: detected capacity change from 0 to 32768 [ 167.940667][ T7038] XFS (loop4): Mounting V5 Filesystem [ 167.959507][ T7046] non-latin1 character 0x172 found in JFS file name [ 167.977806][ T7046] mount with iocharset=utf8 to access [ 167.983412][ T7046] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 0 [ 167.983412][ T7046] [ 168.010063][ T7046] ERROR: (device loop0): remounting filesystem as read-only [ 168.029797][ T7046] read_mapping_page failed! [ 168.034951][ T7046] bread failed! [ 168.190803][ T7038] XFS (loop4): Ending clean mount [ 168.226729][ T7038] XFS (loop4): Quotacheck needed: Please wait. [ 168.320195][ T7038] XFS (loop4): Quotacheck: Done. [ 168.375760][ T7061] loop2: detected capacity change from 0 to 32768 [ 168.424815][ T4167] XFS (loop4): Unmounting Filesystem [ 168.593769][ T7061] XFS (loop2): Mounting V5 Filesystem [ 168.743944][ T7092] loop3: detected capacity change from 0 to 16 [ 168.763283][ T7061] XFS (loop2): Ending clean mount [ 168.786159][ T7061] XFS (loop2): Quotacheck needed: Please wait. [ 168.793898][ T7092] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 168.912436][ T7061] XFS (loop2): Quotacheck: Done. [ 169.292787][ T4174] XFS (loop2): Unmounting Filesystem [ 169.752118][ T6202] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 169.854391][ T7094] loop0: detected capacity change from 0 to 40427 [ 169.931935][ T7094] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 169.972280][ T7094] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 170.020644][ T7094] F2FS-fs (loop0): Found nat_bits in checkpoint [ 170.129784][ T7094] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 170.139419][ T7094] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 170.152483][ T6202] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.173853][ T6202] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 170.206577][ T6202] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 170.223898][ T6202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.241700][ T6202] usb 2-1: config 0 descriptor?? [ 170.293336][ T6202] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 170.307990][ T6202] dvb-usb: bulk message failed: -22 (3/0) [ 170.339065][ T6202] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 170.372390][ T6202] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 170.404969][ T6202] usb 2-1: media controller created [ 170.425175][ T6202] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.462484][ T6202] dvb-usb: bulk message failed: -22 (6/0) [ 170.475916][ T6202] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 170.519972][ T7113] loop1: detected capacity change from 0 to 2048 [ 170.543593][ T6202] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 170.577640][ T6202] dvb-usb: schedule remote query interval to 150 msecs. [ 170.599639][ T7113] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 170.656587][ T6202] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 170.681406][ T7150] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.692863][ T7113] attempt to access beyond end of device [ 170.692863][ T7113] loop1: rw=524288, want=33554432, limit=2048 [ 170.812222][ T6202] dvb-usb: bulk message failed: -22 (1/0) [ 170.818034][ T6202] dvb-usb: error while querying for an remote control event. [ 170.861776][ T6202] usb 2-1: USB disconnect, device number 11 [ 170.938771][ T6202] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 171.119717][ T7165] loop3: detected capacity change from 0 to 1024 [ 171.169732][ T7164] loop2: detected capacity change from 0 to 4096 [ 171.195849][ T7148] loop4: detected capacity change from 0 to 32768 [ 171.234464][ T7165] EXT4-fs error (device loop3): ext4_map_blocks:738: inode #3: block 2: comm syz.3.1033: lblock 2 mapped to illegal pblock 2 (length 1) [ 171.249073][ T7165] __quota_error: 2 callbacks suppressed [ 171.249091][ T7165] Quota error (device loop3): write_blk: dquota write failed [ 171.262690][ T7165] Quota error (device loop3): find_free_dqentry: Can't write quota data block 2 [ 171.280382][ T7165] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 171.296545][ T7165] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.1033: Failed to acquire dquot type 0 [ 171.359791][ T7165] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #3: block 2: comm syz.3.1033: lblock 2 mapped to illegal pblock 2 (length 1) [ 171.393080][ T7165] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 171.403714][ T7165] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.1033: Failed to acquire dquot type 0 [ 171.479855][ T7148] XFS (loop4): Mounting V5 Filesystem [ 171.510907][ T7165] EXT4-fs error (device loop3): ext4_free_blocks:6223: comm syz.3.1033: Freeing blocks not in datazone - block = 0, count = 4096 [ 171.574197][ T4174] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 171.595398][ T7165] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #3: block 2: comm syz.3.1033: lblock 2 mapped to illegal pblock 2 (length 1) [ 171.633361][ T4174] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 171.690784][ T7165] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 171.693602][ T7148] XFS (loop4): Ending clean mount [ 171.716238][ T7148] XFS (loop4): Quotacheck needed: Please wait. [ 171.742301][ T7165] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.1033: Failed to acquire dquot type 0 [ 171.800105][ T7165] EXT4-fs (loop3): 1 orphan inode deleted [ 171.817389][ T7148] XFS (loop4): Quotacheck: Done. [ 171.852648][ T7165] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 171.921024][ T26] audit: type=1800 audit(1743228668.709:46): pid=7148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1028" name="file1" dev="loop4" ino=9284 res=0 errno=0 [ 171.961876][ T7165] EXT4-fs (loop3): shut down requested (1) [ 172.087142][ T4167] XFS (loop4): Unmounting Filesystem [ 172.236923][ T7179] loop1: detected capacity change from 0 to 32768 [ 172.331717][ T7187] loop2: detected capacity change from 0 to 8192 [ 172.420551][ T7179] XFS (loop1): Mounting V5 Filesystem [ 172.449045][ T7187] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 172.462292][ T7187] REISERFS (device loop2): using ordered data mode [ 172.471422][ T7187] reiserfs: using flush barriers [ 172.519578][ T7187] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 172.572978][ T7187] REISERFS (device loop2): checking transaction log (loop2) [ 172.619197][ T7187] REISERFS (device loop2): Using r5 hash to sort names [ 172.660619][ T7187] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 172.697359][ T7185] loop0: detected capacity change from 0 to 32768 [ 172.711224][ T7179] XFS (loop1): Ending clean mount [ 172.718921][ T7179] XFS (loop1): Quotacheck needed: Please wait. [ 172.836049][ T7189] loop3: detected capacity change from 0 to 40427 [ 172.836368][ T7179] XFS (loop1): Quotacheck: Done. [ 172.849981][ T7185] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1048 (7185) [ 172.899999][ T7185] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 172.921666][ T7185] BTRFS info (device loop0): using free space tree [ 172.928910][ T7185] BTRFS info (device loop0): has skinny extents [ 172.929141][ T7189] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 172.945745][ T7189] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 173.073972][ T7189] F2FS-fs (loop3): Found nat_bits in checkpoint [ 173.118383][ T7179] overlayfs: conflicting lowerdir path [ 173.162200][ T4166] XFS (loop1): Unmounting Filesystem [ 173.168258][ T7189] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 173.182517][ T7189] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 173.292689][ T7185] BTRFS info (device loop0): enabling ssd optimizations [ 173.928670][ T7221] loop2: detected capacity change from 0 to 40427 [ 173.999690][ T7221] F2FS-fs (loop2): invalid crc value [ 174.075055][ T7221] F2FS-fs (loop2): Found nat_bits in checkpoint [ 174.169694][ T7221] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 174.257173][ T7242] loop0: detected capacity change from 0 to 256 [ 174.274801][ T7221] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 174.366766][ T7242] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 174.450129][ T26] audit: type=1800 audit(1743228671.239:47): pid=7221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1041" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 174.539560][ T4174] attempt to access beyond end of device [ 174.539560][ T4174] loop2: rw=2049, want=45104, limit=40427 [ 174.683454][ T7252] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 174.719467][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1053'. [ 174.976928][ T7239] loop1: detected capacity change from 0 to 32768 [ 175.027905][ T7239] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1046 (7239) [ 175.058188][ T7264] loop0: detected capacity change from 0 to 2048 [ 175.115387][ T7239] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 175.135601][ T7239] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 175.170896][ T7264] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,minixdf,journal_dev=0x0000000000000003,barrier,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 175.215879][ T7239] BTRFS info (device loop1): trying to use backup root at mount time [ 175.224823][ T7264] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.254419][ T7239] BTRFS info (device loop1): use zlib compression, level 3 [ 175.262566][ T7239] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 175.273770][ T7239] BTRFS info (device loop1): trying to use backup root at mount time [ 175.281864][ T7239] BTRFS info (device loop1): turning off barriers [ 175.290169][ T7239] BTRFS info (device loop1): using free space tree [ 175.297180][ T7239] BTRFS info (device loop1): has skinny extents [ 175.438250][ T7239] BTRFS info (device loop1): enabling ssd optimizations [ 175.522124][ T6202] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 175.695853][ T7273] loop2: detected capacity change from 0 to 32768 [ 175.782090][ T6202] usb 1-1: Using ep0 maxpacket: 16 [ 175.892487][ T7273] XFS (loop2): Mounting V5 Filesystem [ 175.902298][ T6202] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 175.910500][ T6202] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.934472][ T6202] usb 1-1: config 0 has no interface number 0 [ 175.980643][ T7273] XFS (loop2): Ending clean mount [ 175.988642][ T7273] XFS (loop2): Quotacheck needed: Please wait. [ 176.028998][ T7273] XFS (loop2): Quotacheck: Done. [ 176.079853][ T4174] XFS (loop2): Unmounting Filesystem [ 176.096158][ T6202] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 176.119913][ T7304] loop3: detected capacity change from 0 to 1024 [ 176.130133][ T6202] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.138718][ T6202] usb 1-1: Product: syz [ 176.143980][ T6202] usb 1-1: Manufacturer: syz [ 176.148917][ T6202] usb 1-1: SerialNumber: syz [ 176.183380][ T7306] loop1: detected capacity change from 0 to 1024 [ 176.191973][ T6202] usb 1-1: config 0 descriptor?? [ 176.201087][ T7304] hfsplus: bad catalog entry type [ 176.221606][ T144] hfsplus: b-tree write err: -5, ino 4 [ 176.250679][ T26] audit: type=1800 audit(1743228673.039:48): pid=7306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1064" name="bus" dev="loop1" ino=26 res=0 errno=0 [ 176.383517][ T4849] hfsplus: b-tree write err: -5, ino 4 [ 176.402163][ T5384] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 176.417925][ T7167] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 176.448860][ T4898] usb 1-1: USB disconnect, device number 11 [ 176.661016][ T7312] loop1: detected capacity change from 0 to 8192 [ 176.703940][ T7308] loop3: detected capacity change from 0 to 32768 [ 176.712541][ T5384] usb 5-1: Using ep0 maxpacket: 8 [ 177.049554][ T5384] usb 5-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 177.069810][ T5384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 177.090125][ T5384] usb 5-1: Product: syz [ 177.104974][ T5384] usb 5-1: Manufacturer: syz [ 177.117205][ T5384] usb 5-1: SerialNumber: syz [ 177.138911][ T5384] usb 5-1: config 0 descriptor?? [ 177.168932][ T7321] loop0: detected capacity change from 0 to 128 [ 177.212980][ T5384] usbtest 5-1:0.0: FX2 device [ 177.217719][ T5384] usbtest 5-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 177.312667][ T7321] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 177.429459][ T7321] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.439058][ T5379] usb 5-1: USB disconnect, device number 10 [ 177.707785][ T7326] loop0: detected capacity change from 0 to 2048 [ 177.724725][ T7322] loop3: detected capacity change from 0 to 32768 [ 177.766065][ T7322] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1073 (7322) [ 177.833429][ T7332] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.879305][ T7326] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 177.889140][ T7322] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 177.908969][ T7322] BTRFS info (device loop3): force zlib compression, level 3 [ 177.918858][ T7326] Remounting filesystem read-only [ 177.933048][ T7326] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 177.959175][ T7322] BTRFS info (device loop3): force clearing of disk cache [ 177.994580][ T7322] BTRFS info (device loop3): setting nodatasum [ 178.000822][ T7322] BTRFS info (device loop3): allowing degraded mounts [ 178.032194][ T7322] BTRFS info (device loop3): enabling disk space caching [ 178.039278][ T7322] BTRFS info (device loop3): disk space caching is enabled [ 178.108758][ T7322] BTRFS info (device loop3): has skinny extents [ 178.216795][ T7344] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 178.429117][ T7330] loop1: detected capacity change from 0 to 32768 [ 178.457673][ T7322] BTRFS info (device loop3): clearing free space tree [ 178.482155][ T7322] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 178.497465][ T7322] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 178.525111][ T7330] JBD2: Ignoring recovery information on journal [ 178.661071][ T7346] loop4: detected capacity change from 0 to 32768 [ 178.672490][ T7330] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 178.762672][ T7346] ERROR: (device loop4): dbAllocNext: Corrupt dmap page [ 178.762672][ T7346] [ 178.825959][ T7346] ERROR: (device loop4): remounting filesystem as read-only [ 178.926699][ T7346] ialloc: diAlloc returned -5! [ 178.962441][ T7370] ERROR: (device loop4): dbAllocAG: unable to allocate blocks [ 178.962441][ T7370] [ 179.012526][ T7370] ERROR: (device loop4): dbDiscardAG: -EIO [ 179.012526][ T7370] [ 179.243101][ T4166] ocfs2: Unmounting device (7,1) on (node local) [ 179.247149][ T7338] loop2: detected capacity change from 0 to 32768 [ 179.344032][ T7338] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1078 (7338) [ 179.426159][ T7338] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 179.462207][ T7338] BTRFS info (device loop2): using free space tree [ 179.487906][ T7338] BTRFS info (device loop2): has skinny extents [ 179.679148][ T7398] loop4: detected capacity change from 0 to 1024 [ 179.712695][ T7395] loop1: detected capacity change from 0 to 1024 [ 179.760490][ T7404] loop3: detected capacity change from 0 to 1024 [ 179.769180][ T7338] BTRFS info (device loop2): enabling ssd optimizations [ 179.794053][ T7395] EXT4-fs (loop1): inline encryption not supported [ 179.801625][ T7395] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 179.806936][ T7398] EXT4-fs error (device loop4): ext4_map_blocks:738: inode #3: block 2: comm syz.4.1086: lblock 2 mapped to illegal pblock 2 (length 1) [ 179.810032][ T7395] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 179.875513][ T7395] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,user_xattr,inlinecrypt,i_version,dioread_nolock,journal_ioprio=0x0000000000000003,min_batch_time=0x0000000000000000,nolazytime,nomblk_io_submit,,errors=continue. Quota mode: none. [ 179.894477][ T7416] loop0: detected capacity change from 0 to 512 [ 179.918955][ T7398] Quota error (device loop4): write_blk: dquota write failed [ 179.944305][ T7398] Quota error (device loop4): find_free_dqentry: Can't write quota data block 2 [ 179.961745][ T144] hfsplus: b-tree write err: -5, ino 4 [ 180.002368][ T7416] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 180.022473][ T7398] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 180.136857][ T7398] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.1086: Failed to acquire dquot type 0 [ 180.175690][ T7416] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1093: invalid indirect mapped block 10 (level 1) [ 180.216481][ T7398] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #3: block 2: comm syz.4.1086: lblock 2 mapped to illegal pblock 2 (length 1) [ 180.248324][ T7398] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 180.260813][ T7416] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1093: invalid indirect mapped block 8 (level 1) [ 180.283509][ T7398] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.1086: Failed to acquire dquot type 0 [ 180.306085][ T7416] EXT4-fs (loop0): 1 truncate cleaned up [ 180.311931][ T7398] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.1086: Freeing blocks not in datazone - block = 0, count = 4096 [ 180.328712][ T7416] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 180.344659][ T7398] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #3: block 2: comm syz.4.1086: lblock 2 mapped to illegal pblock 2 (length 1) [ 180.407177][ T7398] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 180.440629][ T7398] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.1086: Failed to acquire dquot type 0 [ 180.461205][ T7398] EXT4-fs (loop4): 1 orphan inode deleted [ 180.468012][ T7398] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 180.586779][ T7398] EXT4-fs (loop4): shut down requested (1) [ 181.444440][ T26] audit: type=1326 audit(1743228678.239:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.0.1108" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f78382b2169 code=0x0 [ 181.467131][ T7456] program syz.3.1109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.830800][ T7468] loop3: detected capacity change from 0 to 512 [ 181.901061][ T7468] EXT4-fs (loop3): Ignoring removed nobh option [ 181.997638][ T7468] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.1115: corrupted inode contents [ 182.032399][ T7468] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #16: comm syz.3.1115: mark_inode_dirty error [ 182.059657][ T7468] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.1115: corrupted inode contents [ 182.083198][ T7468] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.1115: mark_inode_dirty error [ 182.103294][ T7468] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.1115: corrupted inode contents [ 182.132476][ T7468] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 182.148500][ T7468] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.1115: corrupted inode contents [ 182.239479][ T7468] EXT4-fs error (device loop3): ext4_truncate:4272: inode #16: comm syz.3.1115: mark_inode_dirty error [ 182.317197][ T7468] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 182.392494][ T7468] EXT4-fs (loop3): 1 truncate cleaned up [ 182.398189][ T7468] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc,nobh,,errors=continue. Quota mode: writeback. [ 182.470967][ T7468] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.619431][ T7499] EXT4-fs (loop3): shut down requested (1) [ 182.654957][ T26] audit: type=1800 audit(1743228679.449:50): pid=7468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1115" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 182.758242][ T4281] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 182.769023][ T4281] Quota error (device loop3): write_blk: dquota write failed [ 182.782416][ T5379] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 182.784934][ T4281] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 182.805944][ T4281] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 182.838324][ T4281] Quota error (device loop3): write_blk: dquota write failed [ 182.851836][ T4281] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 182.902327][ T4281] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 183.160733][ T7512] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1130'. [ 183.202637][ T5379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.228443][ T5379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.261632][ T5379] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 183.282821][ T5379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.321185][ T7518] netlink: 'syz.4.1134': attribute type 2 has an invalid length. [ 183.346812][ T5379] usb 1-1: config 0 descriptor?? [ 183.368964][ T7518] netlink: 'syz.4.1134': attribute type 2 has an invalid length. [ 183.458933][ T7524] sch_tbf: burst 9 is lower than device veth0_to_bridge mtu (1514) ! [ 183.864504][ T5379] logitech 0003:046D:C293.000E: unbalanced collection at end of report description [ 183.880457][ T5379] logitech 0003:046D:C293.000E: parse failed [ 183.894813][ T5379] logitech: probe of 0003:046D:C293.000E failed with error -22 [ 184.099903][ T5379] usb 1-1: USB disconnect, device number 12 [ 184.281369][ T7548] loop2: detected capacity change from 0 to 8192 [ 184.342582][ T7548] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 184.375449][ T7548] REISERFS (device loop2): using journaled data mode [ 184.394178][ T7548] reiserfs: using flush barriers [ 184.454736][ T7548] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 184.479871][ T7548] REISERFS (device loop2): checking transaction log (loop2) [ 184.498088][ T7548] REISERFS (device loop2): Using r5 hash to sort names [ 184.533856][ T7548] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 184.573505][ T7548] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 184.741759][ T7563] loop0: detected capacity change from 0 to 256 [ 184.759225][ T7550] loop1: detected capacity change from 0 to 32768 [ 184.803990][ T7550] XFS: ikeep mount option is deprecated. [ 184.810351][ T7550] XFS: noikeep mount option is deprecated. [ 184.837880][ T7563] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 184.920246][ T7550] XFS (loop1): Mounting V5 Filesystem [ 184.920866][ T7567] input: syz1 as /devices/virtual/input/input13 [ 185.135271][ T7550] XFS (loop1): Ending clean mount [ 185.145248][ T7550] XFS (loop1): Quotacheck needed: Please wait. [ 185.290706][ T7550] XFS (loop1): Quotacheck: Done. [ 185.440860][ T7594] loop0: detected capacity change from 0 to 64 [ 185.501142][ T4166] XFS (loop1): Unmounting Filesystem [ 185.505380][ T7596] loop3: detected capacity change from 0 to 64 [ 185.552125][ T1111] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 185.577077][ T7594] hfs: bad catalog entry type 0 [ 185.833405][ T1111] usb 5-1: Using ep0 maxpacket: 16 [ 185.968329][ T7598] autofs4:pid:7598:autofs_fill_super: pipe file descriptor does not contain proper ops [ 185.972446][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 186.012382][ T1111] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 186.017126][ T4178] Bluetooth: hci3: command 0x0406 tx timeout [ 186.036351][ T1111] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 186.067093][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.082689][ T4178] Bluetooth: hci0: command 0x0406 tx timeout [ 186.109012][ T1111] usb 5-1: config 0 descriptor?? [ 186.109232][ T4178] Bluetooth: hci2: command 0x0406 tx timeout [ 186.131965][ T4178] Bluetooth: hci4: command 0x0406 tx timeout [ 186.162600][ T4178] Bluetooth: hci1: command 0x0406 tx timeout [ 186.225397][ T7591] loop2: detected capacity change from 0 to 32768 [ 186.310803][ T7591] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1162 (7591) [ 186.379704][ T7591] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 186.388503][ T7591] BTRFS info (device loop2): force clearing of disk cache [ 186.395907][ T7591] BTRFS info (device loop2): force zlib compression, level 3 [ 186.412264][ T7591] BTRFS info (device loop2): enabling auto defrag [ 186.429007][ T7591] BTRFS info (device loop2): max_inline at 0 [ 186.439121][ T7591] BTRFS info (device loop2): enabling disk space caching [ 186.455662][ T7591] BTRFS info (device loop2): disk space caching is enabled [ 186.472081][ T7591] BTRFS info (device loop2): has skinny extents [ 186.604239][ T1111] kovaplus 0003:1E7D:2D50.000F: unknown main item tag 0x1 [ 186.611424][ T1111] kovaplus 0003:1E7D:2D50.000F: item fetching failed at offset 1/3 [ 186.652439][ T7591] BTRFS info (device loop2): enabling ssd optimizations [ 186.656324][ T1111] kovaplus 0003:1E7D:2D50.000F: parse failed [ 186.690262][ T1111] kovaplus: probe of 0003:1E7D:2D50.000F failed with error -22 [ 186.699545][ T7591] BTRFS info (device loop2): clearing free space tree [ 186.732126][ T7591] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 186.784233][ T7591] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 186.826110][ T1111] usb 5-1: USB disconnect, device number 11 [ 187.024347][ T7591] BTRFS info (device loop2): balance: start -sprofiles=data|system|single|raid10|raid1|dup|raid0|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,drange=8..5,limit=141,limit=141..0 [ 187.090189][ T7591] BTRFS info (device loop2): balance: ended with status: 0 [ 187.569942][ T7602] loop1: detected capacity change from 0 to 40427 [ 187.622669][ T7640] device bridge0 entered promiscuous mode [ 187.661569][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 187.698044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 187.722361][ T7602] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 187.787378][ T7602] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 187.947582][ T7602] F2FS-fs (loop1): Found nat_bits in checkpoint [ 188.180409][ T7602] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 188.180443][ T7602] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 188.992598][ T7660] loop3: detected capacity change from 0 to 32768 [ 189.035399][ T7667] loop4: detected capacity change from 0 to 32768 [ 189.053379][ T7660] XFS: attr2 mount option is deprecated. [ 189.098256][ T7660] XFS: ikeep mount option is deprecated. [ 189.104081][ T7660] XFS: noikeep mount option is deprecated. [ 189.211954][ T7660] XFS (loop3): Mounting V5 Filesystem [ 189.343723][ T7660] XFS (loop3): Ending clean mount [ 189.351851][ T7660] XFS (loop3): Quotacheck needed: Please wait. [ 189.531151][ T7660] XFS (loop3): Quotacheck: Done. [ 189.638876][ T7715] loop1: detected capacity change from 0 to 512 [ 189.746341][ T4175] XFS (loop3): Unmounting Filesystem [ 189.758935][ T7715] EXT4-fs (loop1): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 190.228840][ T7711] loop2: detected capacity change from 0 to 32768 [ 190.318299][ T7711] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1202 (7711) [ 190.358702][ T7711] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 190.386098][ T7711] BTRFS info (device loop2): using free space tree [ 190.438177][ T7711] BTRFS info (device loop2): has skinny extents [ 190.517573][ T7717] loop0: detected capacity change from 0 to 32768 [ 190.588159][ T7725] loop4: detected capacity change from 0 to 1024 [ 190.608611][ T7717] XFS: ikeep mount option is deprecated. [ 190.617654][ T7717] XFS: noikeep mount option is deprecated. [ 190.723663][ T7711] BTRFS info (device loop2): enabling ssd optimizations [ 190.807146][ T7725] hfsplus: xattr searching failed [ 190.938966][ T7717] XFS (loop0): Mounting V5 Filesystem [ 191.615387][ T7717] XFS (loop0): Ending clean mount [ 191.627662][ T7717] XFS (loop0): Quotacheck needed: Please wait. [ 191.866997][ T7717] XFS (loop0): Quotacheck: Done. [ 191.951688][ T4170] XFS (loop0): Unmounting Filesystem [ 191.960440][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1226'. [ 191.989124][ T7789] loop2: detected capacity change from 0 to 1024 [ 192.106766][ T7789] hfsplus: xattr searching failed [ 192.347340][ T7797] loop1: detected capacity change from 0 to 512 [ 192.481889][ T7803] loop2: detected capacity change from 0 to 512 [ 192.492996][ T7797] EXT4-fs (loop1): inline encryption not supported [ 192.596532][ T7803] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nolazytime,minixdf,,errors=continue. Quota mode: writeback. [ 192.632667][ T7803] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.683788][ T7797] EXT4-fs (loop1): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 192.755131][ T7797] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.890399][ T7797] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #2: comm syz.1.1230: corrupted inode contents [ 193.045971][ T7797] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #2: comm syz.1.1230: mark_inode_dirty error [ 193.107077][ T7797] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #2: comm syz.1.1230: corrupted inode contents [ 193.189706][ T7824] input: syz0 as /devices/virtual/input/input14 [ 193.202399][ T7797] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.1230: mark_inode_dirty error [ 193.275473][ T7817] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #18: comm syz.1.1230: directory missing '.' [ 193.308388][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 193.308406][ T26] audit: type=1400 audit(1743228690.099:51): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3A2020202030202020313520202020302020202030202020202030202020202020203020202020202020202020300A65727370616E303A202020202020203020202020202020302020202030202020203020202020302020202020302020202020202020202030202020202020202020302020202020202020302020202020202030202020313220202020302020202030202020202030202020202020203020202020202020202020300A69705F767469303A202020202020203020202020202020302020202030202020203020202020302020202020302020202020202020202030202020202020202020302020202020202020302020202020202030202020203020202020302020202030202020202030202020202020203020202020202020202020300A6970365F767469303A20202020202020302020202020202030202020203020202020302020202030202020202030202020202020202020203020202020202020202030202020202020202030202020202020203020203337352020333735202020203020202020203020202020203337352020202020202 [ 193.650492][ T7837] loop4: detected capacity change from 0 to 4096 [ 193.930392][ T7837] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 194.181856][ T7] kernel write not supported for file /491/oom_score_adj (pid: 7 comm: kworker/0:0) [ 194.182688][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.198688][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.296591][ T7848] loop3: detected capacity change from 0 to 8192 [ 194.385522][ T7848] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 194.444879][ T7848] REISERFS (device loop3): using journaled data mode [ 194.453375][ T7848] reiserfs: using flush barriers [ 194.476832][ T7848] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 194.524092][ T7848] REISERFS (device loop3): checking transaction log (loop3) [ 194.550114][ T7870] loop0: detected capacity change from 0 to 128 [ 194.558262][ T7848] REISERFS (device loop3): Using r5 hash to sort names [ 194.566754][ T7848] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 194.581059][ T7848] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 194.602434][ T4216] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 194.875124][ T4216] usb 2-1: Using ep0 maxpacket: 8 [ 194.898448][ T7882] loop2: detected capacity change from 0 to 512 [ 195.014783][ T4216] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 195.029981][ T4216] usb 2-1: config 0 has no interface number 0 [ 195.228729][ T4216] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 195.240335][ T7882] EXT4-fs (loop2): Test dummy encryption mode enabled [ 195.252376][ T7882] EXT4-fs (loop2): Test dummy encryption mode enabled [ 195.257479][ T4216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.259324][ T7882] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 195.298344][ T4216] usb 2-1: Product: syz [ 195.311772][ T4216] usb 2-1: Manufacturer: syz [ 195.328718][ T4216] usb 2-1: SerialNumber: syz [ 195.330371][ T7882] EXT4-fs (loop2): 1 truncate cleaned up [ 195.349071][ T7882] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,test_dummy_encryption,noauto_da_alloc,minixdf,errors=remount-ro,quota,. Quota mode: writeback. [ 195.371711][ T4216] usb 2-1: config 0 descriptor?? [ 195.396409][ T7909] loop3: detected capacity change from 0 to 256 [ 195.414579][ T7882] EXT4-fs (loop2): Test dummy encryption mode enabled [ 195.421604][ T7882] EXT4-fs (loop2): journaled quota format not specified [ 195.456957][ T4174] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=0, size=1024 fake=0 [ 195.480527][ T4174] EXT4-fs (loop2): Remounting filesystem read-only [ 195.489352][ T4174] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 195.509093][ T4174] EXT4-fs (loop2): Remounting filesystem read-only [ 195.551576][ T7909] FAT-fs (loop3): Directory bread(block 1285) failed [ 195.596310][ T7909] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 195.669974][ T7917] loop2: detected capacity change from 0 to 1024 [ 195.692646][ T4216] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 195.700662][ T4216] usb 2-1: No valid video chain found. [ 195.721820][ T4216] usb 2-1: USB disconnect, device number 12 [ 195.798812][ T7915] loop4: detected capacity change from 0 to 8192 [ 195.816946][ T7917] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,journal_ioprio=0x0000000000000000,acl,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 195.953208][ T7915] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 195.983562][ T7915] REISERFS (device loop4): using journaled data mode [ 196.008338][ T7919] loop3: detected capacity change from 0 to 8192 [ 196.026734][ T7915] reiserfs: using flush barriers [ 196.046240][ T7915] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 196.080731][ T7915] REISERFS (device loop4): checking transaction log (loop4) [ 196.116121][ T7919] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 196.131415][ T7915] REISERFS (device loop4): Using r5 hash to sort names [ 196.141971][ T7919] REISERFS (device loop3): using ordered data mode [ 196.164310][ T7919] reiserfs: using flush barriers [ 196.182398][ T7915] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 196.218303][ T7919] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 196.291514][ T7919] REISERFS (device loop3): checking transaction log (loop3) [ 196.310926][ T7915] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 196.321934][ T7919] REISERFS (device loop3): Using r5 hash to sort names [ 196.349109][ T7919] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 196.603812][ T7929] loop2: detected capacity change from 0 to 32768 [ 196.718382][ T7929] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1279 (7929) [ 196.787099][ T7929] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 196.815848][ T7929] BTRFS info (device loop2): using free space tree [ 196.830492][ T7949] loop3: detected capacity change from 0 to 256 [ 196.832250][ T7774] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 196.846872][ T7929] BTRFS info (device loop2): has skinny extents [ 196.890579][ T7949] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 196.929414][ T7957] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.936629][ T7957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.111670][ T7774] usb 2-1: Using ep0 maxpacket: 32 [ 197.204491][ T7929] BTRFS info (device loop2): enabling ssd optimizations [ 197.232182][ T7774] usb 2-1: config 0 has no interfaces? [ 197.291552][ T7982] loop0: detected capacity change from 0 to 256 [ 197.392704][ T7774] usb 2-1: New USB device found, idVendor=ff7a, idProduct=007f, bcdDevice=a6.00 [ 197.406657][ T7774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.421706][ T7774] usb 2-1: Product: syz [ 197.426400][ T7774] usb 2-1: Manufacturer: syz [ 197.431107][ T7774] usb 2-1: SerialNumber: syz [ 197.439804][ T7774] usb 2-1: config 0 descriptor?? [ 197.507134][ T4170] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 197.551187][ T4170] FAT-fs (loop0): Filesystem has been set read-only [ 197.578324][ T4170] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 197.697136][ T4901] usb 2-1: USB disconnect, device number 13 [ 198.552304][ T8026] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 198.608138][ T8029] loop2: detected capacity change from 0 to 1024 [ 198.817027][ T8035] input: syz0 as /devices/virtual/input/input15 [ 199.011275][ T8040] raw_sendmsg: syz.3.1323 forgot to set AF_INET. Fix it! [ 199.043121][ T8044] loop2: detected capacity change from 0 to 256 [ 199.122388][ T8044] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 199.220628][ T8030] chnl_net:caif_netlink_parms(): no params data found [ 199.496897][ T8030] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.499600][ T8042] loop4: detected capacity change from 0 to 32768 [ 199.534821][ T8030] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.555762][ T8030] device bridge_slave_0 entered promiscuous mode [ 199.581701][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1331'. [ 199.632718][ T8030] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.690410][ T8030] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.705508][ T8065] loop3: detected capacity change from 0 to 256 [ 199.725943][ T8030] device bridge_slave_1 entered promiscuous mode [ 199.753345][ T8042] XFS (loop4): Mounting V5 Filesystem [ 199.786590][ T8030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.802900][ T8065] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 199.832926][ T8030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.868412][ T8065] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.886342][ T8030] team0: Port device team_slave_0 added [ 199.895170][ T8030] team0: Port device team_slave_1 added [ 199.962820][ T8058] loop1: detected capacity change from 0 to 32768 [ 199.977319][ T8042] XFS (loop4): Ending clean mount [ 200.002119][ T8058] XFS: attr2 mount option is deprecated. [ 200.003660][ T8030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.012331][ T8058] XFS: ikeep mount option is deprecated. [ 200.024135][ T8058] XFS: noikeep mount option is deprecated. [ 200.035703][ T8042] XFS (loop4): Quotacheck needed: Please wait. [ 200.043645][ T4892] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 200.052158][ T8030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.079247][ T8030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.094488][ T8030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.101562][ T8030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.162307][ T8042] XFS (loop4): Quotacheck: Done. [ 200.189368][ T8058] XFS (loop1): Mounting V5 Filesystem [ 200.229912][ T8030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.243376][ T4167] XFS (loop4): Unmounting Filesystem [ 200.302233][ T4892] usb 3-1: Using ep0 maxpacket: 32 [ 200.360697][ T8058] XFS (loop1): Ending clean mount [ 200.373913][ T8058] XFS (loop1): Quotacheck needed: Please wait. [ 200.407855][ T8030] device hsr_slave_0 entered promiscuous mode [ 200.418806][ T8030] device hsr_slave_1 entered promiscuous mode [ 200.425512][ T4892] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 200.436556][ T4892] usb 3-1: config 0 has no interface number 0 [ 200.466185][ T8058] XFS (loop1): Quotacheck: Done. [ 200.482839][ T8030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.490475][ T8030] Cannot create hsr debugfs directory [ 200.519999][ T8087] loop3: detected capacity change from 0 to 164 [ 200.580003][ T8087] Unable to read rock-ridge attributes [ 200.602293][ T4892] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 200.611371][ T4892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.633941][ T4166] XFS (loop1): Unmounting Filesystem [ 200.641787][ T4892] usb 3-1: Product: syz [ 200.653256][ T4892] usb 3-1: Manufacturer: syz [ 200.657887][ T4892] usb 3-1: SerialNumber: syz [ 200.665316][ T8087] Unable to read rock-ridge attributes [ 200.669435][ T4892] usb 3-1: config 0 descriptor?? [ 200.717055][ T4892] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 200.734475][ T4900] Bluetooth: hci2: command 0x0409 tx timeout [ 200.906760][ T8030] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 200.934772][ T4892] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 200.937084][ T8030] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 200.956436][ T4892] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 201.008930][ T8030] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 201.055145][ T8030] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 201.081509][ T8101] mkiss: ax0: crc mode is auto. [ 201.152107][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 201.244863][ T8030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.269474][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.278492][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.293475][ T8030] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.308111][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.318355][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.328522][ T4849] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.335660][ T4849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.344692][ T7] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 201.352139][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 201.357521][ T5394] usb 3-1: USB disconnect, device number 9 [ 201.373848][ T5394] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 201.393421][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.411453][ T5394] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 201.426372][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.435459][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.448030][ T5394] quatech2 3-1:0.51: device disconnected [ 201.455120][ T4849] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.462358][ T4849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.488606][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.508190][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.525398][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.543295][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.561917][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.580487][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.590893][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.604072][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 201.621472][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.637269][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.647487][ T8108] loop3: detected capacity change from 0 to 32768 [ 201.649031][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.665335][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.675029][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.684684][ T8108] XFS: ikeep mount option is deprecated. [ 201.720835][ T8108] XFS (loop3): Mounting V5 Filesystem [ 201.742706][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.755825][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.766661][ T7] usb 5-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 201.776564][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.801952][ T7] usb 5-1: config 0 descriptor?? [ 201.910995][ T8108] XFS (loop3): Ending clean mount [ 201.952883][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.960433][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.975786][ T8108] XFS (loop3): Quotacheck needed: Please wait. [ 201.987938][ T8030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.143608][ T8108] XFS (loop3): Quotacheck: Done. [ 202.276364][ T4175] XFS (loop3): Unmounting Filesystem [ 202.294608][ T8103] loop4: detected capacity change from 0 to 128 [ 202.431192][ T8103] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 202.558657][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 202.581406][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 202.628146][ T8030] device veth0_vlan entered promiscuous mode [ 202.651273][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 202.672905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.686614][ T7] elecom 0003:056E:00FC.0010: collection stack underflow [ 202.702947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.710344][ T7] elecom 0003:056E:00FC.0010: item 0 0 0 12 parsing failed [ 202.729033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.737485][ T7] elecom: probe of 0003:056E:00FC.0010 failed with error -22 [ 202.765441][ T8030] device veth1_vlan entered promiscuous mode [ 202.845906][ T4892] Bluetooth: hci2: command 0x041b tx timeout [ 202.863475][ T7] usb 5-1: USB disconnect, device number 12 [ 202.917687][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 202.933277][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 202.962943][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.982499][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 203.004713][ T8030] device veth0_macvtap entered promiscuous mode [ 203.021512][ T8131] loop1: detected capacity change from 0 to 32768 [ 203.026234][ T8030] device veth1_macvtap entered promiscuous mode [ 203.085773][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.100246][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.147113][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.169370][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.185575][ T8131] XFS (loop1): Mounting V5 Filesystem [ 203.188208][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.211074][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.255166][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.270956][ T8138] loop2: detected capacity change from 0 to 32768 [ 203.277907][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.288673][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.300435][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.312308][ T8030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.323690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 203.338625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 203.347219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.348146][ T8131] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 203.358657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.383135][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.398124][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.451497][ T8131] XFS (loop1): Starting recovery (logdev: internal) [ 203.465336][ T8138] XFS (loop2): Mounting V5 Filesystem [ 203.484574][ T8131] XFS (loop1): Ending recovery (logdev: internal) [ 203.490880][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.503834][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.515258][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.526006][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.542063][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.556443][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.567496][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.608180][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.624302][ T8030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.633275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.660040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.672965][ T8138] XFS (loop2): Ending clean mount [ 203.694867][ T8030] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.707575][ T8030] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.720183][ T8030] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.742070][ T8030] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.783994][ T4174] XFS (loop2): Unmounting Filesystem [ 203.807711][ T4166] XFS (loop1): Unmounting Filesystem [ 204.108153][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.109535][ T8172] loop3: detected capacity change from 0 to 128 [ 204.126001][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.183682][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 204.240006][ T4281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.285119][ T4281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.358259][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 204.586506][ T8180] binder: 8177:8180 ioctl c018620c 200000000040 returned -22 [ 204.912371][ T4224] Bluetooth: hci2: command 0x040f tx timeout [ 205.172171][ T4901] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 205.422185][ T4901] usb 6-1: Using ep0 maxpacket: 32 [ 205.511428][ T8223] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.542337][ T4901] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 205.551425][ T4901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.554153][ T8225] loop2: detected capacity change from 0 to 128 [ 205.583144][ T4901] usb 6-1: config 0 descriptor?? [ 205.602702][ T8221] loop3: detected capacity change from 0 to 4096 [ 205.628307][ T4901] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 205.637808][ T8221] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 205.687510][ T8225] EXT4-fs (loop2): Test dummy encryption mode enabled [ 205.712631][ T8225] EXT4-fs (loop2): Test dummy encryption mode enabled [ 205.750548][ T8221] ntfs: volume version 3.1. [ 205.781061][ T8225] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 205.797475][ T8225] ext4 filesystem being mounted at /255/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.931003][ T8207] loop4: detected capacity change from 0 to 40427 [ 206.021601][ T8207] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 206.046225][ T8207] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 206.095764][ T8207] F2FS-fs (loop4): invalid crc value [ 206.152284][ T8207] F2FS-fs (loop4): Found nat_bits in checkpoint [ 206.173987][ T8240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.183654][ T8240] bond0: (slave bond1): Enslaving as an active interface with an up link [ 206.303360][ T8225] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 206.312962][ T8207] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 206.328943][ T8207] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 206.371566][ T8225] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 206.492597][ T4901] gspca_nw80x: reg_r err -71 [ 206.497392][ T4901] nw80x: probe of 6-1:0.0 failed with error -71 [ 206.502993][ T4167] attempt to access beyond end of device [ 206.502993][ T4167] loop4: rw=2049, want=40968, limit=40427 [ 206.515679][ T4901] usb 6-1: USB disconnect, device number 2 [ 206.734614][ T4281] Bluetooth: hci5: Frame reassembly failed (-84) [ 206.756481][ T8260] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 206.782787][ T4281] Bluetooth: hci5: Frame reassembly failed (-84) [ 206.853111][ T8250] loop1: detected capacity change from 0 to 32768 [ 206.893225][ T8250] XFS: ikeep mount option is deprecated. [ 206.978384][ T4901] Bluetooth: hci2: command 0x0419 tx timeout [ 207.029007][ T8250] XFS (loop1): Mounting V5 Filesystem [ 207.109298][ T8250] XFS (loop1): Ending clean mount [ 207.143491][ T8250] XFS (loop1): Quotacheck needed: Please wait. [ 207.211503][ T8276] loop5: detected capacity change from 0 to 256 [ 207.258557][ T8250] XFS (loop1): Quotacheck: Done. [ 207.260134][ T8278] netlink: 47 bytes leftover after parsing attributes in process `syz.3.1395'. [ 207.416800][ T4166] XFS (loop1): Unmounting Filesystem [ 207.472695][ T8284] loop4: detected capacity change from 0 to 256 [ 207.555792][ T8287] loop5: detected capacity change from 0 to 4096 [ 207.621840][ T8284] FAT-fs (loop4): Directory bread(block 64) failed [ 207.632148][ T8284] FAT-fs (loop4): Directory bread(block 65) failed [ 207.638805][ T8284] FAT-fs (loop4): Directory bread(block 66) failed [ 207.652489][ T8287] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 207.661120][ T8284] FAT-fs (loop4): Directory bread(block 67) failed [ 207.722790][ T8284] FAT-fs (loop4): Directory bread(block 68) failed [ 207.769984][ T8284] FAT-fs (loop4): Directory bread(block 69) failed [ 207.797854][ T8284] FAT-fs (loop4): Directory bread(block 70) failed [ 207.813889][ T8284] FAT-fs (loop4): Directory bread(block 71) failed [ 207.833679][ T8284] FAT-fs (loop4): Directory bread(block 72) failed [ 207.855507][ T8284] FAT-fs (loop4): Directory bread(block 73) failed [ 207.869955][ T8296] loop3: detected capacity change from 0 to 764 [ 207.982720][ T8296] rock: directory entry would overflow storage [ 208.002877][ T8296] rock: sig=0x4654, size=5, remaining=4 [ 208.218591][ T8302] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.227310][ T8302] bond0: (slave bond1): Enslaving as an active interface with an up link [ 208.302831][ T8306] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 208.392236][ T7] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 208.607013][ T8322] loop4: detected capacity change from 0 to 2048 [ 208.672356][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 208.681348][ T8324] loop3: detected capacity change from 0 to 4096 [ 208.732167][ T4216] Bluetooth: hci5: command 0x1003 tx timeout [ 208.743475][ T4173] Bluetooth: hci5: sending frame failed (-49) [ 208.760643][ T8333] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.799054][ T8332] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.814595][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.828169][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.844676][ T8334] NILFS error (device loop4): nilfs_dotdot: directory #12 missing '..' [ 208.879739][ T7] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 208.895924][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.909066][ T8334] Remounting filesystem read-only [ 208.916462][ T7] usb 2-1: config 0 descriptor?? [ 209.072513][ T5384] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 209.099408][ T8336] loop4: detected capacity change from 0 to 4096 [ 209.195836][ T8343] loop3: detected capacity change from 0 to 8 [ 209.208654][ T8336] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 209.256338][ T8336] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 209.269625][ T26] audit: type=1800 audit(1743228706.059:52): pid=8336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1421" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 209.326342][ T8343] SQUASHFS error: zlib decompression failed, data probably corrupt [ 209.336597][ T8343] SQUASHFS error: Failed to read block 0x4de: -5 [ 209.343768][ T8343] SQUASHFS error: Failed to read block 0x4e2: -5 [ 209.350358][ T8343] SQUASHFS error: Failed to read block 0x9ca: -5 [ 209.352584][ T5384] usb 6-1: Using ep0 maxpacket: 8 [ 209.358886][ T8343] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 209.368789][ T8343] SQUASHFS error: Failed to read block 0x35f2: -5 [ 209.402616][ T26] audit: type=1800 audit(1743228706.189:53): pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1423" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 209.416024][ T7] elo 0003:04E7:0009.0011: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.1-1/input0 [ 209.512818][ T5384] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.536378][ T5384] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.617354][ T7] usb 2-1: USB disconnect, device number 14 [ 209.631634][ T8352] loop3: detected capacity change from 0 to 1024 [ 209.644859][ T8350] loop4: detected capacity change from 0 to 2048 [ 209.666831][ T4212] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.682359][ T8352] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 209.707065][ T8350] EXT4-fs (loop4): Ignoring removed nobh option [ 209.721521][ T8352] EXT4-fs error (device loop3): ext4_get_journal_inode:5160: inode #32: comm syz.3.1425: iget: special inode unallocated [ 209.751635][ T8352] EXT4-fs (loop3): no journal found [ 209.759798][ T8352] EXT4-fs (loop3): can't get journal size [ 209.771023][ T8350] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,minixdf,minixdf,acl,,errors=continue. Quota mode: none. [ 209.774812][ T8352] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,noblock_validity,sysvgroups,,errors=continue. Quota mode: none. [ 209.784333][ T8350] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.798692][ T5384] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.823117][ T4212] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.837622][ T5384] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.854627][ T5384] usb 6-1: Product: syz [ 209.858920][ T5384] usb 6-1: Manufacturer: syz [ 209.864121][ T5384] usb 6-1: SerialNumber: syz [ 209.960336][ T4212] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.042585][ T8357] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1428'. [ 210.060021][ T8358] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1428'. [ 210.138422][ T4212] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.240963][ T8364] loop1: detected capacity change from 0 to 256 [ 210.302877][ T8364] exfat: Deprecated parameter 'namecase' [ 210.362710][ T5384] usb 6-1: cannot find UAC_HEADER [ 210.370948][ T8364] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 210.460682][ T5384] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 210.552698][ T4212] tipc: Left network mode [ 210.582343][ T4856] udevd[4856]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.583882][ T5394] usb 6-1: USB disconnect, device number 3 [ 211.514613][ T8362] loop3: detected capacity change from 0 to 40427 [ 211.523389][ T8360] loop4: detected capacity change from 0 to 40427 [ 211.599053][ T8360] F2FS-fs (loop4): Wrong NAT boundary, start(2560) end(462336) blocks(1024) [ 211.635171][ T8371] loop1: detected capacity change from 0 to 131072 [ 211.647497][ T4216] Bluetooth: hci5: command 0x1001 tx timeout [ 211.653647][ T4173] Bluetooth: hci5: sending frame failed (-49) [ 211.657408][ T8360] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 211.686720][ T8362] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 211.703536][ T8362] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 211.798335][ T8362] F2FS-fs (loop3): invalid crc value [ 211.807255][ T8360] F2FS-fs (loop4): Found nat_bits in checkpoint [ 211.823382][ T8371] F2FS-fs (loop1): Found nat_bits in checkpoint [ 211.876455][ T8371] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 211.884402][ T8362] F2FS-fs (loop3): Found nat_bits in checkpoint [ 212.027762][ T8360] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 212.039799][ T8360] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 212.069874][ T8362] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 212.094885][ T8406] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1436'. [ 212.109513][ T8362] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 212.378858][ T4175] attempt to access beyond end of device [ 212.378858][ T4175] loop3: rw=2049, want=40968, limit=40427 [ 212.632366][ T4892] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 212.990762][ T4212] device hsr_slave_0 left promiscuous mode [ 213.005214][ T4892] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 213.022494][ T4892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.049628][ T4892] usb 6-1: config 0 descriptor?? [ 213.103104][ T4212] device hsr_slave_1 left promiscuous mode [ 213.117156][ T4212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.126071][ T4892] cp210x 6-1:0.0: cp210x converter detected [ 213.145562][ T4212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.173889][ T4212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.181356][ T4212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.219420][ T8438] loop3: detected capacity change from 0 to 47 [ 213.250595][ T4212] device bridge_slave_1 left promiscuous mode [ 213.261239][ T4212] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.305640][ T4212] device bridge_slave_0 left promiscuous mode [ 213.320541][ T4212] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.458885][ T4212] device veth1_macvtap left promiscuous mode [ 213.475482][ T4212] device veth0_macvtap left promiscuous mode [ 213.486081][ T4212] device veth1_vlan left promiscuous mode [ 213.490930][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1445'. [ 213.492772][ T4212] device veth0_vlan left promiscuous mode [ 213.700546][ T4216] Bluetooth: hci5: command 0x1009 tx timeout [ 213.779602][ T8461] Set syz0 is full, maxelem 0 reached [ 213.802204][ T4892] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 213.811616][ T4892] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 213.835121][ T4892] usb 6-1: cp210x converter now attached to ttyUSB0 [ 213.871079][ T4892] usb 6-1: USB disconnect, device number 4 [ 213.948715][ T4892] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 213.977396][ T4892] cp210x 6-1:0.0: device disconnected [ 214.065383][ T4212] team0 (unregistering): Port device team_slave_1 removed [ 214.080031][ T4212] team0 (unregistering): Port device team_slave_0 removed [ 214.098513][ T4212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.117380][ T4212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.233990][ T4212] bond0 (unregistering): Released all slaves [ 214.908094][ T26] audit: type=1326 audit(1743228711.699:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.5.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdcbaa6169 code=0x7ffc0000 [ 214.948393][ T26] audit: type=1326 audit(1743228711.729:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.5.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efdcbaa6169 code=0x7ffc0000 [ 214.971835][ T26] audit: type=1326 audit(1743228711.729:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.5.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdcbaa6169 code=0x7ffc0000 [ 214.994849][ T26] audit: type=1326 audit(1743228711.729:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.5.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7efdcbaa6169 code=0x7ffc0000 [ 215.106955][ T26] audit: type=1326 audit(1743228711.729:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.5.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdcbaa6169 code=0x7ffc0000 [ 215.266719][ T8511] loop5: detected capacity change from 0 to 1024 [ 215.778682][ T8528] loop3: detected capacity change from 0 to 512 [ 215.888109][ T8528] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 215.916384][ T8528] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 216.011910][ T8528] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 216.031870][ T8528] System zones: 1-12 [ 216.039296][ T8533] loop4: detected capacity change from 0 to 4096 [ 216.067957][ T8528] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.1473: corrupted in-inode xattr [ 216.084200][ T8528] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1473: couldn't read orphan inode 15 (err -117) [ 216.131411][ T8528] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 216.228130][ T8548] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 216.282396][ T4216] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 216.706597][ T4216] usb 2-1: config 0 interface 0 has no altsetting 0 [ 216.737245][ T4216] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 216.762295][ T4216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.807765][ T4216] usb 2-1: config 0 descriptor?? [ 216.840923][ T8561] loop4: detected capacity change from 0 to 4096 [ 216.924184][ T8561] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 217.013374][ T8561] ntfs: volume version 3.1. [ 217.256206][ T8572] hpfs: Bad magic ... probably not HPFS [ 217.441547][ T8580] loop4: detected capacity change from 0 to 256 [ 217.441620][ T8551] loop5: detected capacity change from 0 to 40427 [ 217.498264][ T8582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1489'. [ 217.614405][ T8551] F2FS-fs (loop5): Wrong NAT boundary, start(2560) end(462336) blocks(1024) [ 217.648392][ T8580] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 217.671239][ T8551] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 217.760047][ T8551] F2FS-fs (loop5): Found nat_bits in checkpoint [ 217.767020][ T4216] video4linux radio48: keene_cmd_main failed (-71) [ 217.775773][ T8594] loop2: detected capacity change from 0 to 2048 [ 217.807908][ T4216] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 217.837908][ T4216] usb 2-1: USB disconnect, device number 15 [ 217.922931][ T8605] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.064130][ T8608] NILFS error (device loop2): nilfs_dotdot: directory #12 missing '..' [ 218.087712][ T8551] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 218.111555][ T8608] Remounting filesystem read-only [ 218.115244][ T8551] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 218.211180][ T8614] loop4: detected capacity change from 0 to 512 [ 218.233594][ T5394] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 218.326742][ T8614] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 218.427887][ T8614] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c028, mo2=0002] [ 218.449900][ T8614] System zones: 0-2, 18-18, 34-35 [ 218.518139][ T8614] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,errors=remount-ro,. Quota mode: writeback. [ 218.606504][ T8614] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz.4.1497: path /318/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 218.673583][ T5394] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 218.695671][ T5394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.704754][ T8614] EXT4-fs (loop4): Remounting filesystem read-only [ 218.738355][ T5394] usb 4-1: config 0 descriptor?? [ 218.802209][ T4167] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 219.422952][ T8652] smc: net device bond0 applied user defined pnetid SYZ0 [ 219.478323][ T8652] smc: net device bond0 erased user defined pnetid SYZ0 [ 219.682522][ T5394] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 219.732093][ T5394] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 219.762804][ T8618] loop2: detected capacity change from 0 to 32768 [ 219.769799][ T5394] asix: probe of 4-1:0.0 failed with error -71 [ 219.802969][ T5394] usb 4-1: USB disconnect, device number 7 [ 219.814032][ T8646] loop4: detected capacity change from 0 to 32768 [ 219.832953][ T8618] XFS: ikeep mount option is deprecated. [ 219.912967][ T8646] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1506 (8646) [ 219.997839][ T8618] XFS (loop2): Mounting V5 Filesystem [ 220.031766][ T8646] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 220.045701][ T8646] BTRFS info (device loop4): setting nodatacow, compression disabled [ 220.072621][ T8646] BTRFS info (device loop4): setting datacow [ 220.078669][ T8646] BTRFS info (device loop4): doing ref verification [ 220.095620][ T8646] BTRFS info (device loop4): force clearing of disk cache [ 220.112300][ T8646] BTRFS info (device loop4): turning off barriers [ 220.118963][ T8646] BTRFS info (device loop4): enabling ssd optimizations [ 220.133627][ T8646] BTRFS info (device loop4): using spread ssd allocation scheme [ 220.158774][ T8646] BTRFS info (device loop4): using free space tree [ 220.172385][ T7] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 220.180009][ T8646] BTRFS info (device loop4): has skinny extents [ 220.191469][ T8618] XFS (loop2): Ending clean mount [ 220.204159][ T8618] XFS (loop2): Quotacheck needed: Please wait. [ 220.376196][ T8618] XFS (loop2): Quotacheck: Done. [ 220.467396][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 220.561259][ T8646] BTRFS info (device loop4): clearing free space tree [ 220.570498][ T4174] XFS (loop2): Unmounting Filesystem [ 220.599970][ T8646] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 220.612440][ T7] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 220.621003][ T7] usb 6-1: config 0 has no interface number 0 [ 220.642763][ T8646] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 220.709889][ T8646] BTRFS info (device loop4): creating free space tree [ 220.735033][ T8646] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 220.794115][ T8726] netlink: 296 bytes leftover after parsing attributes in process `syz.3.1520'. [ 220.798827][ T8646] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 220.827278][ T7] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 220.847652][ T8726] unsupported nlmsg_type 40 [ 220.856991][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.869270][ T7] usb 6-1: Product: syz [ 220.889478][ T7] usb 6-1: Manufacturer: syz [ 220.894464][ T7] usb 6-1: SerialNumber: syz [ 220.929937][ T7] usb 6-1: config 0 descriptor?? [ 220.950464][ T8731] loop3: detected capacity change from 0 to 1024 [ 221.004143][ T7] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 221.131905][ T26] audit: type=1800 audit(1743228717.919:59): pid=8646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1506" name="file0" dev="loop4" ino=258 res=0 errno=0 [ 221.217197][ T144] hfsplus: b-tree write err: -5, ino 4 [ 221.223556][ T7] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 221.265409][ T7] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 221.554112][ T8745] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1528'. [ 221.662329][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 221.676399][ T8748] loop3: detected capacity change from 0 to 736 [ 221.920044][ T8748] Symlink component flag not implemented [ 221.936091][ T8748] Symlink component flag not implemented (122) [ 222.060386][ T5379] usb 6-1: USB disconnect, device number 5 [ 222.070527][ T5379] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 222.084955][ T5379] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 222.100786][ T5379] quatech2 6-1:0.51: device disconnected [ 222.262261][ T8767] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 222.278941][ T8772] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 222.434437][ T8778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1539'. [ 222.634793][ T8788] loop4: detected capacity change from 0 to 512 [ 222.736709][ T8788] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 222.811043][ T8788] EXT4-fs (loop4): 1 truncate cleaned up [ 222.826265][ T8788] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noquota,data_err=ignore,,errors=continue. Quota mode: none. [ 222.962070][ T4892] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 223.084420][ T8784] loop1: detected capacity change from 0 to 32768 [ 223.173629][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1555'. [ 223.180205][ T8784] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 223.180205][ T8784] [ 223.202601][ T5379] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 223.223650][ T8784] xtLookup: xtSearch returned -5 [ 223.228969][ T8784] free_index: error reading directory table [ 223.347219][ T4892] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.364132][ T4892] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 223.378934][ T8818] loop3: detected capacity change from 0 to 128 [ 223.383292][ T4892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.453123][ T4892] usb 6-1: config 0 descriptor?? [ 223.462355][ T5379] usb 3-1: Using ep0 maxpacket: 32 [ 223.516006][ T8818] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 223.567296][ T8818] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.582453][ T5379] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.608133][ T5379] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.619919][ T5379] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 223.637636][ T5379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.642322][ T4892] usb 6-1: reset high-speed USB device number 6 using dummy_hcd [ 223.668941][ T5379] usb 3-1: config 0 descriptor?? [ 223.815797][ T8831] loop1: detected capacity change from 0 to 736 [ 223.966250][ T8831] Symlink component flag not implemented [ 223.977938][ T8831] Symlink component flag not implemented (122) [ 224.154593][ T5379] koneplus 0003:1E7D:2D51.0012: unbalanced delimiter at end of report description [ 224.179279][ T5379] koneplus 0003:1E7D:2D51.0012: parse failed [ 224.198627][ T5379] koneplus: probe of 0003:1E7D:2D51.0012 failed with error -22 [ 224.237608][ T8826] loop4: detected capacity change from 0 to 32768 [ 224.315401][ T8846] overlayfs: './file0' not a directory [ 224.374245][ T8844] loop3: detected capacity change from 0 to 8192 [ 224.382093][ T4892] usb 6-1: device descriptor read/64, error -71 [ 224.393140][ T4883] usb 3-1: USB disconnect, device number 10 [ 224.485334][ T8844] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 224.513303][ T8844] REISERFS (device loop3): using ordered data mode [ 224.527069][ T8844] reiserfs: using flush barriers [ 224.533708][ T8844] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 224.551111][ T8844] REISERFS (device loop3): checking transaction log (loop3) [ 224.649909][ T8855] binder: 8854:8855 ioctl 400c620e 0 returned -14 [ 224.656633][ T4892] usb 6-1: reset high-speed USB device number 6 using dummy_hcd [ 224.700502][ T8844] REISERFS (device loop3): Using tea hash to sort names [ 224.709569][ T8844] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 224.724094][ T8844] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 224.747277][ T8844] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 224.769636][ T8844] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 224.846103][ T8857] loop1: detected capacity change from 0 to 1024 [ 225.040561][ T8861] loop4: detected capacity change from 0 to 512 [ 225.107688][ T8861] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 225.155295][ T8861] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 225.182910][ T8861] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1573: invalid indirect mapped block 2683928664 (level 1) [ 225.204540][ T8861] EXT4-fs (loop4): Remounting filesystem read-only [ 225.252629][ T8861] EXT4-fs (loop4): 1 truncate cleaned up [ 225.258318][ T8861] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 225.262165][ T4883] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 225.306339][ T4167] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 225.331130][ T4167] EXT4-fs (loop4): Remounting filesystem read-only [ 225.356420][ T4167] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz-executor: Invalid block bitmap block 3 in block_group 0 [ 225.381479][ T4167] EXT4-fs (loop4): Remounting filesystem read-only [ 225.381506][ T4898] usb 6-1: USB disconnect, device number 6 [ 225.393693][ T4167] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 225.404938][ T4167] EXT4-fs (loop4): Remounting filesystem read-only [ 225.422375][ T4167] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz-executor: corrupted in-inode xattr [ 225.441832][ T4167] EXT4-fs (loop4): Remounting filesystem read-only [ 225.449533][ T4167] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz-executor: corrupted in-inode xattr [ 225.476449][ T4167] EXT4-fs (loop4): Remounting filesystem read-only [ 225.559899][ T8875] loop3: detected capacity change from 0 to 256 [ 225.572149][ T4883] usb 3-1: Using ep0 maxpacket: 32 [ 225.636784][ T8875] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 225.692182][ T4883] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.709021][ T4883] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.842597][ T4883] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 225.854517][ T4849] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.885620][ T4883] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 225.906730][ T4883] usb 3-1: Product: syz [ 225.910968][ T4883] usb 3-1: Manufacturer: syz [ 225.961444][ T4883] hub 3-1:4.0: USB hub found [ 225.995518][ T8883] loop5: detected capacity change from 0 to 1024 [ 225.997200][ T4849] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.052423][ T5395] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 226.073888][ T8885] loop1: detected capacity change from 0 to 256 [ 226.110702][ T8885] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 226.155699][ T4849] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.169594][ T8885] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 226.185534][ T4883] hub 3-1:4.0: 2 ports detected [ 226.216456][ T8885] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 226.318741][ T4849] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.355937][ T5395] usb 4-1: Using ep0 maxpacket: 32 [ 226.492755][ T5395] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 226.516735][ T5395] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 226.561434][ T5395] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 226.622650][ T5395] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 226.683280][ T5395] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 226.703446][ T4849] tipc: Disabling bearer [ 226.722065][ T5395] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 226.726693][ T4849] tipc: Left network mode [ 226.803789][ T5395] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 226.835663][ T5395] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.848930][ T5395] usb 4-1: config 0 descriptor?? [ 226.864909][ T4883] usb 3-1: USB disconnect, device number 11 [ 227.054562][ T8906] loop5: detected capacity change from 0 to 8192 [ 227.136063][ T5395] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 227.153526][ T8906] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 227.171432][ T8906] REISERFS (device loop5): using ordered data mode [ 227.178511][ T8906] reiserfs: using flush barriers [ 227.184972][ T8906] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 227.201869][ T8906] REISERFS (device loop5): checking transaction log (loop5) [ 227.235290][ T8897] chnl_net:caif_netlink_parms(): no params data found [ 227.398569][ T8906] REISERFS (device loop5): Using tea hash to sort names [ 227.433756][ T5384] usb 4-1: USB disconnect, device number 8 [ 227.451249][ T5384] usblp0: removed [ 227.482966][ T8906] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 227.561820][ T8934] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 227.651775][ T8897] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.667128][ T8897] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.677645][ T8897] device bridge_slave_0 entered promiscuous mode [ 227.690345][ T8897] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.697919][ T8897] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.706094][ T8897] device bridge_slave_1 entered promiscuous mode [ 227.817321][ T8897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.825289][ T8942] loop2: detected capacity change from 0 to 1764 [ 227.850513][ T8897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.128073][ T8897] team0: Port device team_slave_0 added [ 228.153309][ T8897] team0: Port device team_slave_1 added [ 228.320627][ T8897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.329640][ T8897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.388111][ T8897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.419017][ T8897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.427835][ T8897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.455478][ T8897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.530821][ T4849] device hsr_slave_0 left promiscuous mode [ 228.560920][ T4849] device hsr_slave_1 left promiscuous mode [ 228.575046][ T4849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.585938][ T4849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.605143][ T4849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.616921][ T4849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.645735][ T4849] device bridge_slave_1 left promiscuous mode [ 228.667795][ T4849] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.688072][ T4883] Bluetooth: hci0: command 0x0409 tx timeout [ 228.699503][ T4849] device bridge_slave_0 left promiscuous mode [ 228.710312][ T4849] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.770997][ T8978] loop3: detected capacity change from 0 to 2048 [ 228.788199][ T8976] loop2: detected capacity change from 0 to 4096 [ 228.801355][ T4849] device veth1_macvtap left promiscuous mode [ 228.813271][ T4849] device veth0_macvtap left promiscuous mode [ 228.819427][ T4849] device veth1_vlan left promiscuous mode [ 228.831717][ T4849] device veth0_vlan left promiscuous mode [ 228.831781][ T8976] EXT4-fs (loop2): Test dummy encryption mode enabled [ 228.870140][ T8978] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.897853][ T8976] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 229.084280][ T4883] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 229.322238][ T4883] usb 2-1: Using ep0 maxpacket: 8 [ 229.375537][ T4849] team0 (unregistering): Port device team_slave_1 removed [ 229.395591][ T4849] team0 (unregistering): Port device team_slave_0 removed [ 229.408406][ T4849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.426165][ T4849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.442269][ T4883] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 229.450560][ T4883] usb 2-1: config 179 has no interface number 0 [ 229.472092][ T4883] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 229.492048][ T4883] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 229.531978][ T4883] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 229.543884][ T4883] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 229.555354][ T4883] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 229.568817][ T4883] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 229.569890][ T4849] bond0 (unregistering): Released all slaves [ 229.578825][ T4883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.612435][ T8980] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 229.684971][ T8993] device team0 entered promiscuous mode [ 229.705571][ T8993] device team_slave_0 entered promiscuous mode [ 229.712894][ T8993] device team_slave_1 entered promiscuous mode [ 229.722720][ T8993] device macvlan2 entered promiscuous mode [ 229.744238][ T8993] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 229.759663][ T8897] device hsr_slave_0 entered promiscuous mode [ 229.790710][ T8997] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 229.801752][ T8897] device hsr_slave_1 entered promiscuous mode [ 229.804246][ T496] Bluetooth: hci5: Frame reassembly failed (-84) [ 229.822309][ T496] Bluetooth: hci5: Frame reassembly failed (-84) [ 229.834779][ T8897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.844982][ T8897] Cannot create hsr debugfs directory [ 229.906329][ T4892] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input16 [ 230.087692][ T4216] usb 2-1: USB disconnect, device number 16 [ 230.102096][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 230.112305][ T4216] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 230.374924][ T8897] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 231.032443][ T9021] loop1: detected capacity change from 0 to 32768 [ 231.862887][ T5395] Bluetooth: hci5: command 0x1003 tx timeout [ 231.869825][ T4173] Bluetooth: hci5: sending frame failed (-49) [ 233.962454][ T5395] Bluetooth: hci5: command 0x1001 tx timeout [ 233.968661][ T4173] Bluetooth: hci5: sending frame failed (-49) [ 236.013450][ T5395] Bluetooth: hci5: command 0x1009 tx timeout [ 335.311977][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 335.319000][ C0] rcu: 1-...0: (1 GPs behind) idle=34b/1/0x4000000000000000 softirq=27572/27573 fqs=2095 [ 335.331051][ C0] (detected by 0, t=10506 jiffies, g=37997, q=903) [ 335.337671][ C0] Sending NMI from CPU 0 to CPUs 1: [ 335.342899][ C1] NMI backtrace for cpu 1 [ 335.342918][ C1] CPU: 1 PID: 4174 Comm: syz-executor Not tainted 5.15.179-syzkaller #0 [ 335.342936][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 335.342949][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x4/0x80 [ 335.342985][ C1] Code: 89 f8 89 f6 48 c7 44 0a 08 03 00 00 00 48 89 44 0a 10 48 89 74 0a 18 4c 89 44 0a 20 49 ff c1 4c 89 09 c3 0f 1f 00 4c 8b 04 24 <65> 48 8b 15 94 cf 81 7e 65 8b 05 95 cf 81 7e 25 00 01 ff 00 74 10 [ 335.343002][ C1] RSP: 0018:ffffc90000dd0cb8 EFLAGS: 00000046 [ 335.343017][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffff88802628bb80 [ 335.343028][ C1] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 335.343039][ C1] RBP: ffff888075571ae8 R08: ffffffff888d2a67 R09: 0000000000000003 [ 335.343051][ C1] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff888075571800 [ 335.343063][ C1] R13: ffff888075571b40 R14: dffffc0000000000 R15: ffff88802628c658 [ 335.343076][ C1] FS: 000055555fac8500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 335.343090][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 335.343102][ C1] CR2: 00007fffa9091a1c CR3: 000000006511a000 CR4: 00000000003506e0 [ 335.343117][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 335.343126][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 335.343136][ C1] Call Trace: [ 335.343143][ C1] [ 335.343151][ C1] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 335.343169][ C1] ? read_lock_is_recursive+0x10/0x10 [ 335.343188][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 335.343205][ C1] ? unknown_nmi_error+0xd0/0xd0 [ 335.343231][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 335.343248][ C1] ? nmi_handle+0xf7/0x370 [ 335.343266][ C1] ? __sanitizer_cov_trace_const_cmp4+0x4/0x80 [ 335.343285][ C1] ? default_do_nmi+0x62/0x150 [ 335.343305][ C1] ? exc_nmi+0xa8/0x100 [ 335.343321][ C1] ? end_repeat_nmi+0x16/0x31 [ 335.343341][ C1] ? advance_sched+0x57/0x940 [ 335.343360][ C1] ? __sanitizer_cov_trace_const_cmp4+0x4/0x80 [ 335.343380][ C1] ? __sanitizer_cov_trace_const_cmp4+0x4/0x80 [ 335.343400][ C1] ? __sanitizer_cov_trace_const_cmp4+0x4/0x80 [ 335.343419][ C1] [ 335.343423][ C1] [ 335.343428][ C1] advance_sched+0x57/0x940 [ 335.343445][ C1] ? _raw_spin_unlock+0x40/0x40 [ 335.343464][ C1] ? taprio_free_sched_cb+0x1a0/0x1a0 [ 335.343482][ C1] __hrtimer_run_queues+0x598/0xcf0 [ 335.343509][ C1] ? hrtimer_interrupt+0x980/0x980 [ 335.343529][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 335.343551][ C1] hrtimer_interrupt+0x392/0x980 [ 335.343579][ C1] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 335.343598][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 335.343618][ C1] [ 335.343622][ C1] [ 335.343627][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 335.343645][ C1] RIP: 0010:kasan_check_range+0x1ac/0x290 [ 335.343663][ C1] Code: 4c 89 d5 48 8d 5d 07 48 85 ed 48 0f 49 dd 48 83 e3 f8 48 29 dd 74 12 41 80 39 00 0f 85 a2 00 00 00 49 ff c1 48 ff cd 75 ee 5b <41> 5e 41 5f 5d c3 45 84 f6 75 61 41 f7 c6 00 ff 00 00 75 5d 41 f7 [ 335.343676][ C1] RSP: 0018:ffffc90002f2fa60 EFLAGS: 00000256 [ 335.343690][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff8162e19c [ 335.343700][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e0a9fa8 [ 335.343710][ C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff1c153f6 [ 335.343722][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920005e5f58 [ 335.343733][ C1] R13: dffffc0000000000 R14: fffffbfff1c153f6 R15: dffffc0000000000 [ 335.343750][ C1] ? lock_acquire+0xcc/0x4f0 [ 335.343769][ C1] lock_acquire+0xcc/0x4f0 [ 335.343789][ C1] ? read_lock_is_recursive+0x10/0x10 [ 335.343810][ C1] ? read_lock_is_recursive+0x10/0x10 [ 335.343828][ C1] ? __might_sleep+0xc0/0xc0 [ 335.343848][ C1] _raw_spin_lock+0x2a/0x40 [ 335.343863][ C1] ? lockref_put_or_lock+0x22/0xb0 [ 335.343877][ C1] lockref_put_or_lock+0x22/0xb0 [ 335.343895][ C1] fast_dput+0x15d/0x290 [ 335.343915][ C1] dput+0xb7/0x1a0 [ 335.343932][ C1] path_put+0x35/0x60 [ 335.343950][ C1] vfs_statx+0x2bf/0x3b0 [ 335.343971][ C1] ? vfs_fstatat+0x40/0x40 [ 335.343992][ C1] __x64_sys_newfstatat+0x12c/0x1b0 [ 335.344012][ C1] ? __ia32_sys_newlstat+0x160/0x160 [ 335.344035][ C1] ? vtime_user_exit+0x2d1/0x400 [ 335.344057][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 335.344073][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 335.344092][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 335.344110][ C1] do_syscall_64+0x3b/0xb0 [ 335.344127][ C1] ? clear_bhb_loop+0x15/0x70 [ 335.344143][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 335.344160][ C1] RIP: 0033:0x7f23aea8e97a [ 335.344177][ C1] Code: 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 0b 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 90 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 [ 335.344190][ C1] RSP: 002b:00007fffa9091948 EFLAGS: 00000206 ORIG_RAX: 0000000000000106 [ 335.344206][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f23aea8e97a [ 335.344217][ C1] RDX: 00007fffa9091950 RSI: 00007f23aeb4d6c2 RDI: 0000000000000003 [ 335.344228][ C1] RBP: 00007fffa9091950 R08: 0000000000000000 R09: 0000000000000000 [ 335.344238][ C1] R10: 0000000000001000 R11: 0000000000000206 R12: 00007fffa9092b50 [ 335.344249][ C1] R13: 00007f23aeb1108c R14: 0000000000038333 R15: 00007fffa9092b90 [ 335.344269][ C1] [ 337.564968][ T5394] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-... } 10720 jiffies s: 10721 root: 0x2/. [ 337.583896][ T5394] rcu: blocking rcu_node structures (internal RCU debug): [ 337.591044][ T5394] Task dump for CPU 1: [ 337.595265][ T5394] task:syz-executor state:R running task stack:20448 pid: 4174 ppid: 4163 flags:0x00000008 [ 337.606494][ T5394] Call Trace: [ 337.609782][ T5394] [ 337.613302][ T5394] ? lock_acquire+0xcc/0x4f0 [ 337.617915][ T5394] ? kasan_check_range+0x1ac/0x290 [ 337.623072][ T5394] ? lock_acquire+0xcc/0x4f0 [ 337.627682][ T5394] ? read_lock_is_recursive+0x10/0x10 [ 337.633097][ T5394] ? read_lock_is_recursive+0x10/0x10 [ 337.638509][ T5394] ? __might_sleep+0xc0/0xc0 [ 337.643141][ T5394] ? _raw_spin_lock+0x2a/0x40 [ 337.647828][ T5394] ? lockref_put_or_lock+0x22/0xb0 [ 337.652977][ T5394] ? lockref_put_or_lock+0x22/0xb0 [ 337.658113][ T5394] ? fast_dput+0x15d/0x290 [ 337.662579][ T5394] ? dput+0xb7/0x1a0 [ 337.666487][ T5394] ? path_put+0x35/0x60 [ 337.670654][ T5394] ? vfs_statx+0x2bf/0x3b0 [ 337.675109][ T5394] ? vfs_fstatat+0x40/0x40 [ 337.679551][ T5394] ? __x64_sys_newfstatat+0x12c/0x1b0 [ 337.685048][ T5394] ? __ia32_sys_newlstat+0x160/0x160 [ 337.690366][ T5394] ? vtime_user_exit+0x2d1/0x400 [ 337.695345][ T5394] ? syscall_enter_from_user_mode+0x2e/0x240 [ 337.701338][ T5394] ? lockdep_hardirqs_on+0x94/0x130 [ 337.706593][ T5394] ? syscall_enter_from_user_mode+0x2e/0x240 [ 337.712637][ T5394] ? do_syscall_64+0x3b/0xb0 [ 337.717236][ T5394] ? clear_bhb_loop+0x15/0x70 [ 337.721954][ T5394] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 337.728047][ T5394]