last executing test programs: 4m0.337298039s ago: executing program 5 (id=28): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x86}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 3m59.833671701s ago: executing program 5 (id=35): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@mcast2, 0x20000000, r1}) 3m59.503041816s ago: executing program 5 (id=40): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)="a9", 0x1}], 0x1, 0x13, 0x0) 3m59.175033804s ago: executing program 5 (id=43): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000811, &(0x7f0000000540)=ANY=[@ANYBLOB='keep_last_dots,dmask=00000000000000000000104,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=koi8-u,fmask=00000000000000000000005,discard,allow_utime=00000000000000000000002,iocharset=macceltic,allow_utime=00000000000000000000004,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c857466382c6f626a5f6c6f775f4ad7696d652c666f00"/34, @ANYRESDEC=0x0, @ANYBLOB=',dont_hash,dont_appraise,smackfsroot=fowner<,\x00'], 0x1, 0x1524, &(0x7f0000002280)="$eJzs3AuYTlXbOPD7XmvtMSbpaZLDsNa6N09yWCZJckiSQ5IkSZJTQtIkryQkhpyShiQkhyE5DCE5TEwa5/P5kJAkTZKE5JSs/yX8vb31fu/7fm/f67u+uX/XtS/rfva+1773cz+HvbeZ+a7zkBqNalZtQETwb8GL/yQDQCwADACA6wAgAICy8WXjL6zPKTH539sJ+3M9kna1K2BXE/c/e+P+Z2/c/+yN+5+9cf+zN+5/9sb9z964/4xlZ5umFbiel+y78P3/7Iy///8PySo15qs1pW7sAhDzz6Zw/7M37v//WcE/sxH3P3vj/mdXsVe7APa/AL//s4Mcf3cN9z974/4zlp1d7fvPV3uBSPZ+Dq72648xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWPZw2l+hAODy+GrXxRhjjDHGGGOMsT+Pz3G1K2CMMcYYY4wxxtj/PAQBEhQEEAM5IBZyQhwIALgWcsN1EIHrIR5ugDxwI+SFfJAfCkACFIRCoMGABYIQCkMRiMJNUBRuhmJQHEpASXBQChLhFigNt0IZuA3Kwu1QDu6A8lABKkIluBMqw11QBe6GqnAPVIPqUANqwr1QC+6D2nA/1IEHoC48CPXgIagPD0MDeAQawqPQCB6DxvA4NIGm0AyaQ4v/Vv5L0B1ehh7QE5KhF/SGV6AP9IV+0B8GwKswEF6DQfA6pMBgGAJvwFB4E4bBWzAcRsBIeBtGwTswGsbAWBgHqTAeJsC7MBHeg0kwGabAVEiDaTAd3ocZMBNmwQcwGz6EOTAX5sF8SIePYAEshAz4GBbBJ5AJi2EJLIVlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW2wHXbAp7ATPoNdsBv2wOewF774F/NP/U1+FwQEFChQocIYjMFYjMU4jMNcmAtzY26MYATjMR7zYB7Mi3kxP+bHBEzAQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOkzERCyNt2IZLINlsSyWw3JYHitgBayElbAyVsYqWAWrYlWshtWwBtbAe/Fe7IW1sTbWwTpYF+tevj2FDbABNsSG2AgbYWNsjE2wCTbDZtgCW2BLbImtsBW2wTbYFttiO2yHSZiE7bE9dsAO2BE7YifshJ2xM3bBrtg166UcgC/jy9gTq4le2Bt7Yx9MydEP+2N/fBUH4mv4Gr6OKTgYh+Ab+Aa+icPwJA7HETgSR2Jl8Q6OxjFIYhymYipOwAk4ESfiJJyMk3EqpuE0nI7TcQbOxJn4Ac7GD/FDnItzcT6mYzouwIWYgRm4CE9hJi7GJbgUl+FyXIYrcRWuxDW4FtfgelyPG3EjbsbNuBW34nbcjp+iAsDPcDfuxhTci3txH+7D/bgfD+ABzMIsPIgH8RAewsN4GI/gETyKx/A4HsMTeAJP4ik8jafxLJ7Fc/hCwjcNPy2+OgXEBUooESNiRKyIFXEiTuQSuURukVtERETEi3iRR+QReUVekV/kFwkiQRQShYQRRpAIYwBAREVUFBVFRTFRTJQQJYQTTiSKRFFalBZlRBlRVtwuyok7RHlRQbR2lUQlUVm0cVXE3aKqqCqqieqihqgpaopaopaoLWqLOqKOqCvqinriIVFf9MJ++Ii40JlGYjA2FkOwiWgq5KVPsJZiGLYSrUUb8ZQYgcOxnWjpksSzor0YjR3EX8QYfF50EuOws3hRdBFdRTfxkuguWrkeoqeYhL1EbzEV+4i+op/oL2ZgdfEBzs5ZQ7wuUsRgMUS8Iebjm2KYeEsMFyPESPG2GCXeEaPFGDFWjBOpYryYIN4VE8V7YpKYLKaIqSJNTBPTxftihpgpZokPxGzxoZgj5op5Yr5IFx+JBWKhyBAfi0XiE5EpFoslYqlYJpaLFWKlWCVWizVirVgn1osNYqPYJDaLLWKr2Ca2ix3iU7FTfCZ2id1ij/hc7BVfiH3iS7FffCUOiK9FlvhGHBTfikPiO3FYfC+OiB/EUXFMHBc/ihPiJ3FSnBKnxRlxVvwszolfxHnhBUiUQkqpZCBjZA4ZK3PKOHmNzCWDS8/u9TJe3iDzyBtlXplP5pcFZIIsKAtJLY20kmQoC8siMipvkkXlzbKYLC5LyJLSyVIyUd4iS8tbZRl5mywrb5fl5B2yvKwgK8pK8k5ZWd4lIXJxH9VkdVlD1pT3ymS4T9aW98s68gFZVz4o68mHZH35sGwgH5EN5aOykXxMNpaPyyayqWwmm8sW8gnZUj4pW8nWso18SraVT8t28hmZJJ+V7aW/9BJ5XnaSL8jO8kXZRXaV3eQv8rz0sofsKaEXyN7yFdlH9pX9ZH85QL4qB8rX5CD5ukyRg+UQ+YYcKt+Uw+RbcrgcIUfKt+Uo+Y4cLcfIsXKcTJXj5QT5rpwo35OT5GQ5RU6VaXKa7HdppllS/sP8d/8gf9Cve98oN8nNcovcKrfJ7XKH/FTulDvlLrlL7pF75F65V+6T++R+uV8ekAdklsySB+VBeUgekoflYXlEHpFH5TF5Rv4oT8if5El5Sp6SZ+RZeVaeu/QcgEIllFRKBSpG5VCxKqeKU9eoXOpalVtdpyLqehWvblB51I0qr8qn8qsCKkEVVIWUVkZZRSpUhVURFVU34aUXjCqhSiqnSqlEdcu/kq+KqptVMVX8N/mX60v+O/W1UC1US9VStVKtVBvVRrVVbVU71U4lqSTVXrVXHVQH1VF1VJ1UJ9VZdVZdVBfVTXVT3VV31UP1UMkqWfVWr6g+qq/qp/qrAepVNVANVIPUIJWiUtQQNUQNVUPVMDVMDVfD1Ug1Uo1So9RoNVqNVWNVqkpVE9QENVFNVJPUJDVFTVFpKk1NV9PVDDVDzVKz1Gw1W81Rc9Q8NU+lq3S1QC1QGSpDLVKLVKZarBarpWqpWq6Wq5VqpVqtVqu1aq1ar9arTLVJbVJb1Ba1TW1TO9QOtVPtVLvULrVH7VF71V61T+1T+9V+dUAdUFkqSx1UB9UhdUgdVofVEXVEHVVH1XF1XJ1QJ9RJdVKdVqfVWXVWnVPn1Hl1/sJpXyACEahABTFBTBAbxAZxQVyQK8gV5A5yB5EgEsQH8UGe4MYgb5AvyB8UCBKCgkGhQAcmsIG41PRocFNQNLg5KBYUD0oEJQMXlAoSg1uC0sGtQZngtqBscHtQLrgjKB9UCCoGlYI7g8rBXUGV4O6ganBPUC2oHtQIagb3BrWC+4Lawf1BneCBoG7wYFAveCioHzwcNAgeCRoGjwaNgseCxsHjQZOgadAsaB60+FPn9/5kviddD91TJ+teurd+RffRfXU/3V8P0K/qgfo1PUi/rlP0YD1Ev6GH6jf1MP2WHq5H6JH6bT1Kv6NH6zF6rB6nU/V4PUG/qyfq9/QkPVlP0VN1mp6mp+v39Qw9U8/SH+jZ+kM9R8/V8/R8na4/0gv0Qp2hP9aL9Cc6Uy/WS/RSvUwv1yv0Sr1Kr9Zr9Fq9Tq/XG/RGvUlv1lv0Vr1Nb9c79Kd6p/5M79K79R79ud6rv9D79Jd6v/5KH9Bf6yz9jT6ov9WH9Hf6sP5eH9E/6KP6mD6uf9Qn9E/6pD6lT+sz+qz+WZ/Tv+jz2l84ub/w9W6UUSbGxJhYE2viTJzJZXKZ3Ca3iZiIiTfxJo/JY/KavCa/yW8STIIpZAqZC8iQKWwKm6iJmqKmqClmipkSpoRxxplEk2hKm9KmjCljypqyppwpZ8qb8qaiqWjuNHeau8xd5m5zt7nH3GOqm+qmpqlpaplaprapbeqYOqauqWvqmXqmvqlvGpgGpqFpaBqZRqaxaWyamCammWlmWpgWpqVpaVqZVqaNaWPamramnWlnkkySaW/amw6mg+loOppOppPpbDqbLqaL6Wa6me6mu+lhephkk2x6m96mj+lj+pl+ZoAZYAaagWaQGWRSTIoZYoaYoWaoGWaGmeFmhBl54UTVvGNGmzFmrBlnUk2qmWAmmIlmoplkJpkpZopJM2lmupluZpgZZpaZZWab2WaOmWPmmXkm3aSbBWaByTAZZpFZZDJNpllilphlZplZYVaYVWaVWWPWmHWwzmwwG8wms8lsMVvMNrPN7DA7zE6z0+wyu8wes8fsNXvNPrPP7Df7zQFzwGSZLHPQHDSHzCFz2Bw2R8wRc9QcNcfNcXPCnDAnzUlz2pw2Z02+S9+X3sTanDbOXmNz2Wttbnud/ds4vy1gE2xBW8hqm9fm+01srLXFbHFbwpa0zpayifaW38XlbQVb0Vayd9rK9i5b5XdxLXufrW3vt3XsA7amvfc3cV37oK1nH7P1EQFsU9vQNreN7GO2sX3cNrFNbTPb3La1T9t29hmbZJ+17e1zv4sX2IV2lV1t19i1dpfdbU/bM/aQ/c6etT/bHranHWBftQPta3aQfd2m2MG/i0fat+0o+44dbcfYsXbc7+IpdqpNs9PsdPu+nWFn/i5Otx/Z2TbDzrFz7Tw7/9f4Qk0Z9mO7yH5iM20AS+xSu8wutyvsyv9f61K73m6wG+1O+5ndYrfabXa73XH5RNjutnvs53av/cIetN/a/fYre8Aetln2m1/jC8d32H5vj9gf7FF7zB63P9oT9id1OfvCsf9of7HnrbdASECSFAUUQzkolnJSHF1Duehayk3XUYSup3i6gfLQjZSX8lF+KkAJVJAKkSZDlohCKkxFKEo30eXySlBJclSKEukWKk23Uhm6jcrS7VSO7qDyVIEqUiW6kyrTXVSF7qaqdA9Vo+pUg2rSvVSL7qPadD/VoQeoLj1I9eghqk8PUwN6hBrSo9SIHqPG9Dg1oabUjJpTC3qCWtKT1IpaUxt6itrS09SOnqEkepba03PUgf5CHel56kQvUGd6kbpQV+pGL1F3epl6UE9Kpl7Um16hPtSX+lF/GkCv0kB6jQbR65RCg2kIvUFD6U0aRm/RcBpBI+ltGkXv0GgaQ2NpHKXSeJpA79JEeo8m0WSaQlMpjabRdHqfZtBMmkUf0Gz6kObQXJpH8ymdPqIFtJAy6GNaRJ9QJi2mJbSUltFyWkEraRWtpjW0ltbRetpAG2kTbaYttJW20XbaQZ/STvqMdtFu2kOf0176gvbRl7SfvqID9DVl0Td0kL6lQ/QdHabvfU/6gY7SMTpOP9IJ+olO0ik6TWfoLP1M5+gXOk+eIMRQhDJUYRDGhDnC2DBnGBdeE+YKrw1zh9eFkfD6MD68IcwT3hjmDfOF+cMCYUJYMCwU6tCENqQwDAuHRcJoeFNYNLw5LBYWD0uEJUMXlgoTw1vC0uGtYZnwtrBseHtYLrwjLB9WCB97oFJ4Z1g5vCusEt4dVg3vCauF1cMaYc3w3rBWeF9YO7w/rBM+EJYJHwzrhQ+F9cOHwwbhI2HD8NGwUfhY2Dh8PGwSNg2bhc3DFuETYcvwybBV2DpsEz4Vtg2fDtuFz4RJ4bNh+/C5X9c/uPDvr08Oe4W9w1fCV0Lv75fzovOj6dGPoguiC6MZ0Y+ji6KfRDOji6NLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohuj3tfMAQ6dcNIpF7gYl8PFupwuzl3jcrlrXW53nYu46128u8HlcTe6vC6fy+8KuARX0BVy2hlnHbnQFXZFXNTd5Iq6m10xV9yVcCWdc6VcomvuWrgWrqV70rVyrV0b95R7yj3tnnbPuGfcs669e851cH9xHd3zrpN7wb3gXnRdXFfXzb3kurvxuS++J5Ndb9fb9XF9XD/Xzw1wA9xAN9ANcoNciktxQ9wQN9QNdcPcMDfcDXcj3Ug3yo1yo91oN9aNdaku1U1wE9xEN9FNcpPcFDfFpbk0N91NdzPcDFd55sW9zHFz3Dw3z6W7dLfAXThnzHCL3CKX6TLdErfELXPL3Aq3wq1yq9wat8atc+vcBrfBbXKb3Ba3xW1z29wOt8PtdDvdLn/dxUndXrfP7XP73X53wH3tstw37qD71h1y37nD7nt3xP3gjrpj7rj70Z1wP7mT7pQ77c64s+5nd8794s4771Ij4yMTIu9GJkbei0yKTI5MiUyNpEWmRaZH3o/MiMyMzIp8EJkd+TAyJzI3Mi8yP5Ie+SiyILIwkhH5OLIo8kkkM7I4siSyNLIssjzifcEtoS/si/iov8kX9Tf7Yr64L+FLeudL+UR/iy/tb/Vl/G2+rL/dl/N3+PK+gq/oH/dNfFPfzDf3LfwTvqV/0rfyrX0b/5Rv65/27fwzPsk/69v753wH/xff0T/vO/kXfGf/ou/iu/pu/iXf3b/se/iePtn38r39K76P7+v7+f5+gH/VD/Sv+UH+dZ/iB/sh/g0/1L/ph/m3/HA/wo+MeduPunyJDON8qh/vJ/h3/UT/np/kJ/spfqpP89P8dP++n+Fn+ln+Az/bf+jn+Ll+np/v0/1HfoFf6DP8x36R/8Rn+sWXbyr7FX6lX+VX+zV+rV/n1/sNfqPf5Df7LX6r3+a3+x3+U7/Tf+Z3+d1+j//c7/Vf+H3+S7/ff+UP+K99lv/GH/Tf+kP+O3/Yf++P+B/8UX/MH/c/+hP+J3/Sn/Kn/Rl/1v/sz/lf/Hn+nTXGGGOMsX/K+CtD8ds1F2/n9/qDHPFXG/cGgGu3Fsj66/UXzijX5b047isS2kYA4NmenR+5vFSrlpycfGnbTAlBkbkAl/8n6IIYuBIvhjbwNCRBayj9h/X3FV3P0j+YP3o7QNxf5cTClfjK/F8CYPIfzP/EUyMXlAtPx/8X888FKFbkSk5OuBIvhja/3l9pDWX+Tv35Wv6D+nN+lQrQ6q9ycsGV+Er9ifAkPAdJv9mSMcYYY4wxxhi7qK+o2PHy9efln/j8o+vzBHUlJwdcif/R9TljjDHGGGOMMcauvue7dnvmiaSk1h3/9UGV/1bWPz1oDP9TM/PgDwfeA1x+RAHAvzkhwIWB/E8exeb/yL5SLr11/nbVsjM+gP8drfwzBlf5g4kxxhhjjDH2p7ty0v/bx9XVKogxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMuG/hN/TuxqHyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2/AAAA//9IVQM5") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) 3m58.467563572s ago: executing program 5 (id=51): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbb80}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}]}}]}, 0xb0}}, 0x0) 3m57.538149125s ago: executing program 5 (id=62): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [{0x20, '\t'}, {0x20, '[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xbd\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x1d-s\x16\xe5\xdc\xb7\xc8\'\xae0{LX>m\xeeG\x81\xd6\'\b\xc6\\\xf1\x1bJ:\x9d\xe60\xab\f\x90\x85r\xb8\x92\xd4\x00:jA\xc90\xec\xc2*|\xc2?\xab\xf2\x03@\x19\xd1L\xc0\xedB\xf4\x06\x85\bXJ\xb8\xb4\xf4)\x8cfXC\x10\xdf\xd5\xc6\xed\x8b\xa0\x80\xca\x9b\xfat\x10\xcd\x0f\x12\x1b\x8ft$\xacS\x01\xbee>\xdd\xb5\x19^\x11\xf0om\xab\x16`F\xd9\x1b\xd6\xd3\x1dl\x86\x1b'}]}, 0x104) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3m56.794992517s ago: executing program 32 (id=62): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [{0x20, '\t'}, {0x20, '[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xbd\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x1d-s\x16\xe5\xdc\xb7\xc8\'\xae0{LX>m\xeeG\x81\xd6\'\b\xc6\\\xf1\x1bJ:\x9d\xe60\xab\f\x90\x85r\xb8\x92\xd4\x00:jA\xc90\xec\xc2*|\xc2?\xab\xf2\x03@\x19\xd1L\xc0\xedB\xf4\x06\x85\bXJ\xb8\xb4\xf4)\x8cfXC\x10\xdf\xd5\xc6\xed\x8b\xa0\x80\xca\x9b\xfat\x10\xcd\x0f\x12\x1b\x8ft$\xacS\x01\xbee>\xdd\xb5\x19^\x11\xf0om\xab\x16`F\xd9\x1b\xd6\xd3\x1dl\x86\x1b'}]}, 0x104) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3m54.479223278s ago: executing program 0 (id=79): r0 = fsopen(&(0x7f0000000100)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='/dev/nullb0\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c) 3m54.152956452s ago: executing program 0 (id=81): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b34, 0x3bf) ioctl$KDDISABIO(r0, 0x4b37) 3m53.889903985s ago: executing program 0 (id=82): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f00000001c0)={0x2, 0xffffffffffffffff, 0x2}) 3m53.790880423s ago: executing program 0 (id=83): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 3m53.165583911s ago: executing program 0 (id=87): newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000012c0), 0x1000) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) preadv2(r0, &(0x7f0000000140), 0x10000000000002dd, 0x10001, 0xa78, 0x0) 3m51.746163448s ago: executing program 0 (id=101): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ftruncate(r1, 0x10000000000008) 3m51.136249673s ago: executing program 33 (id=101): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ftruncate(r1, 0x10000000000008) 3m1.687764722s ago: executing program 3 (id=486): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) connect$netlink(r0, &(0x7f0000000300)=@unspec, 0xc) 3m1.106429845s ago: executing program 3 (id=489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r1, 0x701, 0x0, 0x0, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) 3m0.537409164s ago: executing program 3 (id=493): syz_mount_image$jfs(&(0x7f0000000380), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x320c088, &(0x7f0000002440)=ANY=[], 0x1, 0x5e97, &(0x7f0000005e00)="$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") setxattr$incfs_metadata(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f00000002c0)="54c11dc7f07af229", 0x8, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50) 2m58.287413817s ago: executing program 3 (id=510): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000f00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 2m57.076772065s ago: executing program 3 (id=519): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8000, 0x2) 2m56.744172296s ago: executing program 3 (id=522): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) 2m41.598721725s ago: executing program 34 (id=522): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) 7.323888799s ago: executing program 7 (id=2227): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x80) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xfe) 6.956317429s ago: executing program 7 (id=2232): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) 6.629240625s ago: executing program 7 (id=2236): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005880)={[{@jqfmt_vfsv1}, {@heap}, {@nogc_merge}, {@six_active_logs}, {@heap}, {@alloc_mode_def}, {@discard}, {@noacl}, {@fsync_mode_posix}, {@alloc_mode_def}, {@block_mode}, {@jqfmt_vfsold}, {@noinline_dentry}, {@jqfmt_vfsv1}, {@grpjquota={'grpjquota', 0x3d, '+^'}}, {@nogc_merge}]}, 0x1, 0x5505, &(0x7f0000000340)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x7a000}], 0x1, 0x33000, 0x0, 0x3) 3.580960903s ago: executing program 6 (id=2274): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x444a, &(0x7f00000088c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183641, 0x18) rename(&(0x7f0000000200)='./file1\x00', &(0x7f0000001cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.513495815s ago: executing program 1 (id=2275): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1532, 0x11d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x50, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4, 0x18, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4e, 0xf5, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002205000000c7"], 0x0}, 0x0) 3.475420148s ago: executing program 7 (id=2277): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x40004) 2.402347718s ago: executing program 2 (id=2283): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x6}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.385517083s ago: executing program 4 (id=2284): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x38, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 2.178101687s ago: executing program 8 (id=2285): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x5818048, &(0x7f00000003c0)=ANY=[], 0x1, 0x1523, &(0x7f00000029c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x101000, 0x1e) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.142832419s ago: executing program 2 (id=2286): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000080)=0xb) 2.137901965s ago: executing program 4 (id=2287): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x12}, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 2.009076636s ago: executing program 6 (id=2288): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) mq_getsetattr(r0, 0x0, 0x0) 1.723336832s ago: executing program 4 (id=2289): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000000000000000005,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB=',fmask=00000000000000000000010,discard\x00\x00mask=00000000000000000000006,iocharset=euc-jp,errors=continue,allow_utime=00000000000000000147070,\x00'], 0x1, 0x1528, &(0x7f00000037c0)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiRJkuSWkDTJkYTEEJI0JCG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+FxOnX+p/M7/XKe37yf59mP9X73ftd+9/f9XvbeZubbrkNrNaldvRERwX8EL/yTBACxADAQAPICQAAA5ePKx2Wtzykx6T/bCftzPZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/D9/+yMv///D8ksM/bLNWWu6wYQ80dTuP/ZG/f//6zgj2zE/c/euP/ZVeyVLoD9F+D3f3aQ45+u4f5nb9x/xrKzK33/+UovEPkvew6O5LzQmL/q+BljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsb/AaX+ZAoBL4ytdF2OMMcYYY4wxxv48PseVroAxxhhjjDHGGGP/+xAESFAQQAzkgFjICblAAMDVkAfyQgSugTi4FvLBdZAfCkBBKATxUBiKgAYDFghCKArFIArXQ3G4AUpASSgFpcFBGUiAG6Es3ATl4GYoD7dABbgVKkIlqAxV4DaoCrdDNbgDqsOdUANqQi2oDXdBHbgb6sI9UA/uhfpwHzSA+6EhPACN4EFoDA9BE3gYmsIj0AyaQwtoCa3+R/nPQ094AXpBb0iCPtAXXoR+0B8GwEswEF6GQfAKDIZXIRmGwFB4DYbB6zAc3oARMBJGwZswGt6CMTAWxsF4SIEJMBHehknwDkyGd2EKTIVUmAbT4T2YATNhFrwPs+EDmANzYR7MhzT4EBbAQkiHj2ARfAwZsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG22EHfAI74VPYBbthD3wGe+HzfzP/1D/kd0NAQIECFSqMwRiMxVjMhbkwN+bGPJgHIxjBOIzDfJgP82N+LIgFMR7jsQgWQYMGCQmLYlGMYhSLY3EsgSWwFJZChw4TMAHL4k1YDstheSyPFbACVsRKWAmrYBWsilWxGlbD6lgda2ANrIW18C68C/tgXayL9bAe1sf6l25PYSNshI2xMTbBJtgUm2IzbIYtsAW2wlbYGltjG2yD7bAdtsf22AE7YCImYkfsiJ2wE3bGztgFu2BX7IrdsDt2z3w+B+AL+AL2xhqiD/bFvtgPk3MMwJfwJXwZB+Er+Aq+isk4BIfia/gavo7D8SSOwJE4CkdhVfEWjsGxSGI8pmAKTsSJOAknYVah7+JUTMVpOB2n4wyciTPxfZyNH+AHOBfn4nxMwzRcgAsxHdNxEZ7CDFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9BBYCf4m7cjcm4F/fiPtyH+3E/HsADmImZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/DZ+K8bf1JydTKILEooESNiRKyIFblELpFb5BZ5RB4RERERJ+JEPpFP5Bf5RUFRUMSLeFFEFBFGGEEijAEAERVRUVwUFyVECVFKlBJOOJEgEkRZUVaUE+VEeXGLqCBuFRVFJdHWVRFVRFXRzlUTd4jqorqoIWqKWqK2qC3qiDqirqgr6ol6or6oLxqI+0VD0QcH4IMiqzNNxBBsKoZiM9FcyIufYK3FcGwj2op24nExEkdgB9HaJYqnREcxBjuJv4mx+IzoIsZjV/Gc6Ca6ix7iedFTtHG9RG8xGfuIvmIq9hP9xQDxkpiBNcX7ODtnLfGqSBZDxFDxmpiPr4vh4g0xQowUo8SbYrR4S4wRY8U4MV6kiAlionhbTBLviMniXTFFTBWpYpqYLt4TM8RMMUu8L2aLD8QcMVfME/NFmvhQLBALRbr4SCwSH4sMsVgsEUvFMrFcrBArxSqxWqwRa8U6sV5sEBvFJrFZbBFbxTaxXewQn4id4lOxS+wWe8RnYq/4XOwTX4j94ktxQHwlMsXX4qD4RhwS34rD4jtxRHwvjopj4rj4QZwQP4qT4pQ4Lc6Is+IncU78LM4LL0CiFFJKJQMZI3PIWJlT5pJXydwyuPjsXiPj5LUyn7xO5pcFZEFZSMbLwrKI1NJIK0mGsqgsJqPyellc3iBLyJKylCwtnSwjE+SNsqy8SZaTN8vy8hZZQd4qK8pKsrKsIm+TVeXtEiIX9lFD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6iy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeW/zH/7d/IH/7L3jXKT3Cy3yK1ym9wud8hP5E65U+6Su+QeuUfulXvlPrlP7pf75QF5QGbKTHlQHpSH5CF5WB6WR+QReVQek2fkD/KE/FGelKfkKXlGnpVn5bmLzwEoVEJJpVSgYlQOFatyqlzqKpVbXa3yqLwqoq5RcepalU9dp/KrAqqgKqTiVWFVRGlllFWkQlVUFVNRdT1efMGoUqq0cqqMSlA3/jv5qri6QZVQJX+Vf6m+pH9SXyvVSrVWrVUb1Ua1U+1Ue9VedVAdVKJKVB1VR9VJdVKdVWfVRXVRXVVX1U11Uz1UD9VT9VS9VC+VpJJUX/Wi6qf6qwHqJTVQvawGqUFqsBqsklWyGqqGqmFqmBquhqsRaoQapUap0Wq0GqPGqHFqnEpRKWqimqgmqUlqspqspqgpKlWlqulqupqhZqhZapaarWarOWqOmqfmqTSVphaoBSpdpatFapHKUIvVYrVULVXL1XK1Uq1Uq9VqtVatVevVepWhNqlNaovaorapbWqH2qF2qp1ql9ql9qg9aq/aq/apfWq/2q8OqAMqU2Wqg+qgOqQOqcPqsDqijqij6qg6ro6rE+qEOqlOqtPqtDqrzqpz6pw6r85nnfYFIhCBClQQE8QEsUFskCvIFeQOcgd5gjxBJIgEcUFckC+4LsgfFAgKBoWC+KBwUCTQgQlsIC42PRpcHxQPbghKBCWDUkHpwAVlgoTgxqBscFNQLrg5KB/cElQIbg0qBpWCykGV4LaganB7UC24I6ge3BnUCGoGtYLawV1BneDuoG5wT1AvuDeoH9wXNAjuDxoGDwSNggeDxsFDQZPg4aBp8EjQLGgetAhaBq3+1Pm9P1ngMddL99ZJuo/uq1/U/XR/PUC/pAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erJ+V0/RU3Wqnqan6/f0DD1Tz9Lv69n6Az1Hz9Xz9Hydpj/UC/RCna4/0ov0xzpDL9ZL9FK9TC/XK/RKvUqv1mv0Wr1Or9cb9Ea9SW/WW/RWvU1v1zv0J3qn/lTv0rv1Hv2Z3qs/1/v0F3q//lIf0F/pTP21Pqi/0Yf0t/qw/k4f0d/ro/qYPq5/0Cf0j/qkPqVP6zP6rP5Jn9M/6/PaZ53cZ329G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emn8ln8pv8pqApaOJNvCliipgsZMgUNUVN1ERNcVPclDAlTClTyjjjTIJJMGVNWVPOlDPlTXlTwVQwFU1FU9lUNreZ28zt5nZzh7nD3GnuNDVNTVPb1DZ1TB1T19Q19Uw9U9/UNw1MA9PQNDSNTCPT2DQ2TUwT09Q0Nc1MM9PCtDCtTCvT2rQ2bUwb0860M+1Ne9PBdDCJJtF0NB1NJ9PJdDadTRfTxXQ1XU030830MD1MT9PT9DK9TJJJMn1NX9PP9DMDzAAz0Aw0g8wgM9gMNskm2Qw1Q80wM8wMN8PNCDPSjMo6UTVvmTFmrBlnxpsUk2ImmolmkplkJpvJZoqZYlJNqpluppsZZoaZZWaZ2Wa2mWPmmHlmnkkzaWaBWWDSTbpZZBaZDJNhlpglZplZZlaYFWaVWWXWmDVmHawzG8wGs8lsMlvMFrPNbDM7zA6z0+w0u8wus8fsMXvNXrPP7DP7zX5zwBwwmSbTHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81ZU+Di96U3sTanzWWvsrnt1TaPzWv/MS5oC9l4W9gWsdrmtwV+FRtrbQlb0paypa2zZWyCvfE3cUVbyVa2Vexttqq93Vb7TVzH3m3r2ntsPXuvrW3v+lVc395nG9iHbUNEANvcNrYtbRP7sG1qH7HNbHPbwra07e0TtoN90ibap2xH+/Rv4gV2oV1lV9s1dq3dZXfb0/aMPWS/tWftT7aX7W0H2pftIPuKHWxftcl2yG/iUfZNO9q+ZcfYsXacHf+beIqdalPtNDvdvmdn2Jm/idPsh3a2Tbdz7Fw7z87/Jc6qKd1+ZBfZj22GDWCJXWqX2eV2hV15qVaf1663G+xGu9N+arfYrXab3W53XDoRtrvtHvuZ3Ws/twftN3a//dIesIdtpv36lzjr+A7b7+wR+709ao/Z4/YHe8L+qC5lZx37D/Zne956C4QEJElRQDGUg2IpJ+Wiqyg3XU15KC9F6BqKo2spH11H+akAFaRCFE+FqQhpMmSJKKSiVIyidD1dKq8UlSZHZSiBbqSydBOVo5upPN1CFehWqkiVqDJVoduoKt1O1egOqk53Ug2qSbWoNt1Fdehuqkv3UD26l+rTfdSA7qeG9AA1ogepMT1ETehhakqPUDNqTi2oJbWiR6k1PUZtqC21o8epPT1BHehJSqSnqCM9TZ3ob9SZnqEu9Cx1peeoG3WnHvQ89aQXqBf1piTqQ33pRepH/WkAvUQD6WUaRK/QYHqVkmkIDaXXaBi9TsPpDRpBI2kUvUmj6S0aQ2NpHI2nFJpAE+ltmkTv0GR6l6bQVEqlaTSd3qMZNJNm0fs0mz6gOTSX5tF8SqMPaQEtpHT6iBbRx5RBi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQJ7STPqVdtJv20Ge0lz6nffQF7acv6QB9RZn0NR2kb+gQfUuH6Tvfm76no3SMjtMPdIJ+pJN0ik7TGTpLP9E5+pnOkycIMRShDFUYhDFhjjA2zBnmCq8Kc4dXh3nCvGEkvCaMC68N84XXhfnDAmHBsFAYHxYOi4Q6NKENKQzDomGxMBpeHxYPbwhLhCXDUmHp0IVlwoTwxrBseFNYLrw5LB/eElYIbw0rhpXCh++tEt4WVg1vD6uFd4TVwzvDGmHNsFZYO7wrrBPeHdYN7wnrhfeG5cL7wgbh/WHD8IGwUfhg2Dh8KGwSPhw2DR8Jm4XNwxZhy7BV+GjYOnwsbBO2DduFj4ftwyfCDuGTYWL4VNgxfPqX9fct/Ofrk8I+Yd/wxfDF0Pt75Lzo/Gha9MPogujCaHr0o+ii6MfRjOji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxqj3tXOAQyecdMoFLsblcLEup8vlrnK53dUuj8vrIu4aF+eudfncdS6/K+AKukIu3hV2RZx2xllHLnRFXTEXdde74u4GV8KVdKVcaedcGZfgWrpWrpVr7R5zbVxb18497h53T7gn3JPuSfeU6+iedp3c31xn94zr4p51z7rnXDfX3fVwz7uebkKeC+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ15YS9z3Bw3z81zaS7NLXBZ54zpbpFb5DJchlvilrhlbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vl816Y1O11+9w+t9/tdwfcVy7Tfe0Oum/cIfetO+y+c0fc9+6oO+aOux/cCfejO+lOudPujDvrfnLn3M/uvPMuJTIhMjHydmRS5J3I5Mi7kSmRqZHUyLTI9Mh7kRmRmZFZkfcjsyMfROZE5kbmReZH0iIfRhZEFkbSIx9FFkU+jmREFkeWRJZGlkWWR7wvvCX0RX0xH/XX++L+Bl/Cl/SlfGnvfBmf4G/0Zf1Nvpy/2Zf3t/gK/lZf0Vfylf0jvplv7lv4lr6Vf9S39o/5Nr6tb+cf9+39E76Df9In+qd8R/+07+T/5jv7Z3wX/6zv6p/z3Xx338M/73v6F3wv39sn+T6+r3/R9/P9/QD/kh/oX/aD/Ct+sH/VJ/shfqh/zQ/zr/vh/g0/wo/0o2Le9KMvXSLDeJ/iJ/iJ/m0/yb/jJ/t3/RQ/1af6aX66f8/P8DP9LP++n+0/8HP8XD/Pz/dp/kO/wC/06f4jv8h/7DP84ks3lf0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dv+J3+k/9bv8br/Hf+b3+s/9Pv+F3++/9Af8Vz7Tf+0P+m/8If+tP+y/80f89/6oP+aP+x/8Cf+jP+lP+dP+jD/rf/Ln/M/+PP/OGmOMMcbYHzLh8lD8es2F2/l9fidH/N3GfQHg6q2FMv9+fdYZ5br8F8b9RXz7CAA81bvrg5eWGjWSkpIubpshISg2F+DS/wRliYHL8WJoB09AIrSFsr9bf3/R/Sz9i/mjtwDk+rucWLgcX57/CwBM+p35H3181IIK4em4/8/8cwFKFLuckxMux4uh3S/3V9pCuX9Sf4HW/6L+nF+mALT5u5zccDm+XH8CPAZPQ+KvtmSMMcYYY4wxxi7oLyp3vnT9eeknPn/v+jxeXc7JAZfjf3V9zhhjjDHGGGOMsSvvme49nnw0MbFt539/UO1/lPWHB03hf2tmHvzuwHuAS48oAPgPJwTIGsi/8ig2/yX7Sr741vnHVcvO+AD+O1r5Zwyu8AcTY4wxxhhj7E93+aT/14+rK1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWDf0Vf07sSh8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9vwAAAP//kfb+pw==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r0, &(0x7f0000001000)=""/4096, 0x1000) 1.533293653s ago: executing program 8 (id=2290): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x5, 0xe0, 0x0, 0xfffff801, 0x0}) 1.492935246s ago: executing program 6 (id=2291): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x3}]}}]}, 0x40}}, 0x4048000) 1.367815513s ago: executing program 2 (id=2292): r0 = socket$kcm(0x2d, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x3, @loopback, 0x4}}}, 0x108) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) 1.194315571s ago: executing program 8 (id=2293): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@loopback, @in=@private=0xa010100, 0x0, 0xfffb, 0x0, 0xf, 0xa, 0x0, 0x0, 0x6}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x2}}, {{@in=@private=0xa010102, 0x4d4, 0x2b}, 0x0, @in=@multicast1}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 1.194007971s ago: executing program 1 (id=2294): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}}, 0x0) 1.149686476s ago: executing program 4 (id=2295): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001380)=ANY=[], 0x38}], 0x1, 0x0, 0x0, 0x24064855}, 0x8010) 1.089621853s ago: executing program 6 (id=2296): r0 = socket$kcm(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/109, 0x6d}, {&(0x7f00000027c0)=""/4047, 0xfcf}, {&(0x7f00000037c0)=""/4079, 0xfef}, {&(0x7f00000002c0)=""/244, 0xf4}, {&(0x7f00000012c0)=""/148, 0x94}], 0x5}, 0x40000100) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046bf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe8600000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 1.030434436s ago: executing program 1 (id=2297): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x4004551e, &(0x7f00000004c0)={0x0, 0x1, "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"}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)={0x7, 0xffff}) 951.669045ms ago: executing program 7 (id=2298): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001840), 0x2, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x17) 846.273643ms ago: executing program 8 (id=2299): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r0) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r1, 0x5953a6d8b15e6715}, 0x14}}, 0x0) 834.677637ms ago: executing program 2 (id=2300): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan0\x00'}) 833.131409ms ago: executing program 4 (id=2301): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file1\x00', 0x2, &(0x7f0000000400)=ANY=[], 0x1, 0xf0d, &(0x7f0000001e80)="$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") chdir(&(0x7f00000001c0)='./file0\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) 743.006926ms ago: executing program 1 (id=2302): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x54, r1, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0xffffffffffffff3f, 0x6, 0x10}]}]}, 0x54}}, 0x0) 664.335602ms ago: executing program 7 (id=2303): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_disconnect(r0) 609.194936ms ago: executing program 2 (id=2304): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x25f, &(0x7f0000000b00)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) 503.212378ms ago: executing program 8 (id=2305): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr\x00') getdents64(r0, &(0x7f00000001c0)=""/24, 0x18) getdents64(r0, 0x0, 0x36) 502.830884ms ago: executing program 6 (id=2306): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRES64, @ANYRESOCT], 0x1, 0x273, &(0x7f0000001200)="$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") mkdir(&(0x7f0000000140)='./control\x00', 0x191) rmdir(&(0x7f0000000100)='./control\x00') 385.37908ms ago: executing program 1 (id=2307): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xb000001c}) 288.668669ms ago: executing program 8 (id=2308): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f00000004c0)=ANY=[@ANYBLOB='shortname=mixed,sys_immutable,nfs,iocharset=cp936,shortname=lower,rodir,nocase,codepage=860,shortname=lower,shortname=lower,shortname=win95,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x43, 0x357, &(0x7f0000000140)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000001f80)=""/4097, 0x1001) 38.371465ms ago: executing program 4 (id=2309): r0 = epoll_create(0x4) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002640), 0x80800, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002680)={0x2}) 19.806355ms ago: executing program 1 (id=2310): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="290626bd7000fbdbdf251d00000034000180140002007465616d5f736c6176655f3000000000140002006970365f767469300000000000000000080003"], 0x48}, 0x1, 0x0, 0x0, 0x8844}, 0x20040000) 13.110498ms ago: executing program 2 (id=2311): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x1) pselect6(0x40, &(0x7f0000000140)={0x1, 0x4, 0x3, 0xff, 0x4, 0xea2b, 0x7, 0x2300000000000}, 0x0, &(0x7f00000001c0)={0x9, 0xbb18, 0x2, 0xc, 0x0, 0x4f, 0x0, 0x4}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) 0s ago: executing program 6 (id=2312): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='pstore\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1000420, 0x0) kernel console output (not intermixed with test programs): : mounted with root inode @ nid 36. [ 259.131923][ T9849] erofs (device loop2): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 259.187880][ T9849] erofs (device loop2): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 259.217262][ T9849] erofs (device loop2): readahead error at folio 7 @ nid 36 [ 259.229834][ T9849] erofs (device loop2): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 259.306006][ T9849] erofs (device loop2): readahead error at folio 6 @ nid 36 [ 259.315336][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1397'. [ 259.353722][ T9849] erofs (device loop2): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 259.370181][ T9849] erofs (device loop2): readahead error at folio 5 @ nid 36 [ 259.378860][ T9849] erofs (device loop2): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 259.398468][ T9849] erofs (device loop2): readahead error at folio 4 @ nid 36 [ 259.407080][ T9849] erofs (device loop2): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 259.423584][ T9849] erofs (device loop2): readahead error at folio 3 @ nid 36 [ 259.443890][ T9849] erofs (device loop2): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 259.517757][ T9849] erofs (device loop2): readahead error at folio 2 @ nid 36 [ 259.553671][ T9849] erofs (device loop2): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 259.579186][ T9849] erofs (device loop2): readahead error at folio 1 @ nid 36 [ 259.593647][ T9849] erofs (device loop2): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 259.628098][ T9849] erofs (device loop2): readahead error at folio 0 @ nid 36 [ 259.644490][ T9849] erofs (device loop2): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 259.688826][ T9849] erofs (device loop2): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 259.746623][ T9849] erofs (device loop2): read error -117 @ 0 of nid 36 [ 259.773788][ T9849] erofs (device loop2): failed to readdir of logical block 0 of nid 36 [ 259.788045][ T9870] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1403'. [ 259.835670][ T9873] netlink: 'syz.1.1404': attribute type 10 has an invalid length. [ 259.841009][ T9874] loop7: detected capacity change from 0 to 128 [ 259.869018][ T9873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.897231][ T9874] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 259.910328][ T9875] netlink: 'syz.1.1404': attribute type 10 has an invalid length. [ 259.920662][ T9874] hpfs: filesystem error: improperly stopped [ 259.936204][ T9873] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 259.959318][ T9874] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 259.965375][ T9875] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1404'. [ 259.987579][ T9874] hpfs: You really don't want any checks? You are crazy... [ 260.011183][ T9875] batadv0: entered promiscuous mode [ 260.019654][ T9874] hpfs: hpfs_map_sector(): read error [ 260.025166][ T9875] batadv0: entered allmulticast mode [ 260.042484][ T9875] bond0: (slave batadv0): Releasing backup interface [ 260.064304][ T9875] bridge0: port 3(batadv0) entered blocking state [ 260.091780][ T9875] bridge0: port 3(batadv0) entered disabled state [ 260.096714][ T9874] hpfs: code page support is disabled [ 260.121234][ T9874] hpfs: hpfs_map_4sectors(): unaligned read [ 260.144286][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 260.159799][ T9874] hpfs: hpfs_map_4sectors(): unaligned read [ 260.185736][ T9874] hpfs: filesystem error: unable to find root dir [ 260.250573][ T9856] loop4: detected capacity change from 0 to 32768 [ 260.433607][ T9856] ERROR: (device loop4): dbFindCtl: Corrupt dmapctl page [ 260.433607][ T9856] [ 260.525147][ T9856] ERROR: (device loop4): remounting filesystem as read-only [ 260.564530][ T9856] ialloc: diAlloc returned -5! [ 260.604129][ T3566] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 260.613874][ T3566] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 260.647347][ T9889] loop8: detected capacity change from 0 to 512 [ 260.705017][ T9889] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.811090][ T9889] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.850962][ T6011] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 260.962519][ T7929] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.981497][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 261.032899][ T6011] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 261.060903][ T6011] usb 8-1: config 0 has no interface number 0 [ 261.080972][ T6011] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 261.111825][ T6011] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 261.141325][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 261.148655][ T6011] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 261.163468][ T24] usb 3-1: config 150 has an invalid interface number: 204 but max is 0 [ 261.181023][ T24] usb 3-1: config 150 has no interface number 0 [ 261.190993][ T6011] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.209309][ T24] usb 3-1: config 150 interface 204 has no altsetting 0 [ 261.240792][ T6011] usb 8-1: config 0 descriptor?? [ 261.247862][ T9890] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 261.257083][ T24] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 261.271032][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.287104][ T6011] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 261.306289][ T24] usb 3-1: Product: syz [ 261.321853][ T24] usb 3-1: Manufacturer: syz [ 261.326488][ T24] usb 3-1: SerialNumber: syz [ 261.409305][ T9883] loop1: detected capacity change from 0 to 40427 [ 261.446067][ T9883] F2FS-fs (loop1): build fault injection rate: 771 [ 261.449224][ T9903] loop4: detected capacity change from 0 to 256 [ 261.460333][ T9903] exfat: Deprecated parameter 'utf8' [ 261.465875][ T9903] exfat: Deprecated parameter 'utf8' [ 261.491288][ T9903] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 261.513224][ T9883] F2FS-fs (loop1): invalid crc value [ 261.594456][ T24] usb 8-1: USB disconnect, device number 9 [ 261.801521][ T6011] usb 3-1: USB disconnect, device number 13 [ 261.920721][ T9883] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 262.015740][ T9883] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 262.051792][ T9911] syz.4.1420 (9911) used greatest stack depth: 16728 bytes left [ 262.160827][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1424'. [ 262.189418][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1424'. [ 262.287738][ T5884] syz-executor: attempt to access beyond end of device [ 262.287738][ T5884] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 262.314307][ T30] audit: type=1326 audit(1758750040.225:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.6.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff367f8eec9 code=0x7ffc0000 [ 262.324687][ T5884] CPU: 0 UID: 0 PID: 5884 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 262.324721][ T5884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 262.324736][ T5884] Call Trace: [ 262.324746][ T5884] [ 262.324756][ T5884] dump_stack_lvl+0x189/0x250 [ 262.324797][ T5884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.324827][ T5884] ? __pfx_queue_work_on+0x10/0x10 [ 262.324852][ T5884] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 262.324892][ T5884] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 262.324948][ T5884] f2fs_handle_critical_error+0x37c/0x540 [ 262.324995][ T5884] f2fs_write_end_io+0x886/0xb60 [ 262.325048][ T5884] __submit_merged_bio+0x27a/0x6a0 [ 262.325094][ T5884] __submit_merged_write_cond+0x255/0x530 [ 262.325141][ T5884] f2fs_write_data_pages+0x261d/0x3000 [ 262.325166][ T5884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.325242][ T5884] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 262.325285][ T5884] ? arch_stack_walk+0xfc/0x150 [ 262.325361][ T5884] ? __mod_zone_page_state+0xd7/0x140 [ 262.325409][ T5884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.325436][ T5884] ? folios_put_refs+0x560/0x640 [ 262.325480][ T5884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.325507][ T5884] ? __lock_acquire+0xab9/0xd20 [ 262.325555][ T5884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.325581][ T5884] ? do_raw_spin_lock+0x121/0x290 [ 262.325619][ T5884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.325652][ T5884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.325678][ T5884] ? do_raw_spin_unlock+0x122/0x240 [ 262.325709][ T5884] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 262.325736][ T5884] do_writepages+0x32e/0x550 [ 262.325778][ T5884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.325811][ T5884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.325837][ T5884] ? do_raw_spin_unlock+0x122/0x240 [ 262.325874][ T5884] filemap_fdatawrite+0x199/0x240 [ 262.325909][ T5884] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 262.326004][ T5884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.326039][ T5884] ? do_raw_spin_unlock+0x122/0x240 [ 262.326076][ T5884] f2fs_sync_dirty_inodes+0x31f/0x830 [ 262.326126][ T5884] f2fs_write_checkpoint+0x95a/0x1df0 [ 262.326189][ T5884] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 262.326276][ T5884] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 262.326302][ T5884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.326328][ T5884] ? kfree+0x18e/0x440 [ 262.326366][ T5884] ? kill_f2fs_super+0x298/0x6c0 [ 262.326401][ T5884] kill_f2fs_super+0x2c3/0x6c0 [ 262.326438][ T5884] ? __pfx_kill_f2fs_super+0x10/0x10 [ 262.326460][ T5884] ? radix_tree_delete_item+0x2b6/0x400 [ 262.326496][ T5884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.326522][ T5884] ? shrinker_free+0x2ce/0x3e0 [ 262.326553][ T5884] deactivate_locked_super+0xbc/0x130 [ 262.326587][ T5884] cleanup_mnt+0x425/0x4c0 [ 262.326615][ T5884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.326641][ T5884] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.326671][ T5884] task_work_run+0x1d4/0x260 [ 262.326710][ T5884] ? __pfx_task_work_run+0x10/0x10 [ 262.326740][ T5884] ? __x64_sys_umount+0x122/0x160 [ 262.326781][ T5884] ? exit_to_user_mode_loop+0x40/0x110 [ 262.326823][ T5884] exit_to_user_mode_loop+0xec/0x110 [ 262.326859][ T5884] do_syscall_64+0x2bd/0x3b0 [ 262.326885][ T5884] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.326910][ T5884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.326932][ T5884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.326958][ T5884] ? exc_page_fault+0x9f/0xf0 [ 262.326987][ T5884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.327010][ T5884] RIP: 0033:0x7f19f83901f7 [ 262.327032][ T5884] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 262.327052][ T5884] RSP: 002b:00007ffc0cfd87c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 262.327077][ T5884] RAX: 0000000000000000 RBX: 00007f19f8411d7d RCX: 00007f19f83901f7 [ 262.327094][ T5884] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0cfd8880 [ 262.327109][ T5884] RBP: 00007ffc0cfd8880 R08: 0000000000000000 R09: 0000000000000000 [ 262.327124][ T5884] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc0cfd9910 [ 262.327141][ T5884] R13: 00007f19f8411d7d R14: 000000000003fffb R15: 00007ffc0cfd9950 [ 262.327184][ T5884] [ 262.327223][ T5884] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 262.428659][ T30] audit: type=1326 audit(1758750040.225:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.6.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff367f8eec9 code=0x7ffc0000 [ 262.807478][ T5884] CPU: 1 UID: 0 PID: 5884 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 262.807512][ T5884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 262.807526][ T5884] Call Trace: [ 262.807535][ T5884] [ 262.807545][ T5884] dump_stack_lvl+0x189/0x250 [ 262.807583][ T5884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.807613][ T5884] ? __pfx_queue_work_on+0x10/0x10 [ 262.807638][ T5884] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 262.807676][ T5884] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 262.807728][ T5884] f2fs_handle_critical_error+0x37c/0x540 [ 262.807773][ T5884] f2fs_write_end_io+0x886/0xb60 [ 262.807819][ T5884] __submit_merged_bio+0x27a/0x6a0 [ 262.807863][ T5884] __submit_merged_write_cond+0x255/0x530 [ 262.807907][ T5884] f2fs_write_data_pages+0x261d/0x3000 [ 262.807931][ T5884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.807996][ T5884] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 262.808035][ T5884] ? arch_stack_walk+0xfc/0x150 [ 262.808096][ T5884] ? __mod_zone_page_state+0xd7/0x140 [ 262.808140][ T5884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.808167][ T5884] ? folios_put_refs+0x560/0x640 [ 262.808209][ T5884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.808235][ T5884] ? __lock_acquire+0xab9/0xd20 [ 262.808281][ T5884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.808307][ T5884] ? do_raw_spin_lock+0x121/0x290 [ 262.808352][ T5884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.808382][ T5884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.808408][ T5884] ? do_raw_spin_unlock+0x122/0x240 [ 262.808438][ T5884] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 262.808462][ T5884] do_writepages+0x32e/0x550 [ 262.808501][ T5884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.808529][ T5884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.808552][ T5884] ? do_raw_spin_unlock+0x122/0x240 [ 262.808580][ T5884] filemap_fdatawrite+0x199/0x240 [ 262.808612][ T5884] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 262.808687][ T5884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.808720][ T5884] ? do_raw_spin_unlock+0x122/0x240 [ 262.808755][ T5884] f2fs_sync_dirty_inodes+0x31f/0x830 [ 262.808798][ T5884] f2fs_write_checkpoint+0x95a/0x1df0 [ 262.808851][ T5884] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 262.808924][ T5884] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 262.808949][ T5884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.808976][ T5884] ? kfree+0x18e/0x440 [ 262.809008][ T5884] ? kill_f2fs_super+0x298/0x6c0 [ 262.809040][ T5884] kill_f2fs_super+0x2c3/0x6c0 [ 262.809073][ T5884] ? __pfx_kill_f2fs_super+0x10/0x10 [ 262.809096][ T5884] ? radix_tree_delete_item+0x2b6/0x400 [ 262.809128][ T5884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.809155][ T5884] ? shrinker_free+0x2ce/0x3e0 [ 262.809185][ T5884] deactivate_locked_super+0xbc/0x130 [ 262.809218][ T5884] cleanup_mnt+0x425/0x4c0 [ 262.809244][ T5884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.809271][ T5884] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.809306][ T5884] task_work_run+0x1d4/0x260 [ 262.809371][ T5884] ? __pfx_task_work_run+0x10/0x10 [ 262.809401][ T5884] ? __x64_sys_umount+0x122/0x160 [ 262.809441][ T5884] ? exit_to_user_mode_loop+0x40/0x110 [ 262.809481][ T5884] exit_to_user_mode_loop+0xec/0x110 [ 262.809517][ T5884] do_syscall_64+0x2bd/0x3b0 [ 262.809543][ T5884] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.809568][ T5884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.809590][ T5884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.809615][ T5884] ? exc_page_fault+0x9f/0xf0 [ 262.809643][ T5884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.809666][ T5884] RIP: 0033:0x7f19f83901f7 [ 262.809687][ T5884] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 262.809707][ T5884] RSP: 002b:00007ffc0cfd87c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 262.809733][ T5884] RAX: 0000000000000000 RBX: 00007f19f8411d7d RCX: 00007f19f83901f7 [ 262.809749][ T5884] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0cfd8880 [ 262.809765][ T5884] RBP: 00007ffc0cfd8880 R08: 0000000000000000 R09: 0000000000000000 [ 262.809780][ T5884] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc0cfd9910 [ 262.809796][ T5884] R13: 00007f19f8411d7d R14: 000000000003fffb R15: 00007ffc0cfd9950 [ 262.809834][ T5884] [ 262.809844][ T5884] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 263.011042][ T30] audit: type=1326 audit(1758750040.225:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.6.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7ff367f8eec9 code=0x7ffc0000 [ 263.081068][ T9937] loop7: detected capacity change from 0 to 512 [ 263.124286][ T30] audit: type=1326 audit(1758750040.225:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.6.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff367f8eec9 code=0x7ffc0000 [ 263.124346][ T30] audit: type=1326 audit(1758750040.225:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.6.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff367f8eec9 code=0x7ffc0000 [ 263.457099][ T9937] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.558928][ T9945] program syz.6.1436 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.586393][ T9937] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.586758][ T9948] loop4: detected capacity change from 0 to 512 [ 263.681175][ T9948] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 263.725047][ T9937] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 263.812079][ T9948] EXT4-fs (loop4): 1 truncate cleaned up [ 263.816638][ T9928] loop2: detected capacity change from 0 to 32768 [ 263.866998][ T9948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.968702][ T6296] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.198625][ T5868] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.321010][ T24] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 264.480127][ T9966] loop6: detected capacity change from 0 to 1024 [ 264.532504][ T24] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 264.565696][ T9968] loop7: detected capacity change from 0 to 2048 [ 264.581059][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.595973][ T24] usb 9-1: Product: syz [ 264.619433][ T24] usb 9-1: Manufacturer: syz [ 264.648529][ T24] usb 9-1: SerialNumber: syz [ 264.674593][ T9971] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 264.707981][ T24] usb 9-1: config 0 descriptor?? [ 264.735395][ T24] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 264.747397][ T49] hfsplus: b-tree write err: -5, ino 4 [ 264.811904][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 264.833537][ T24] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 264.883530][ T24] usb 9-1: media controller created [ 264.909778][ T9976] loop1: detected capacity change from 0 to 128 [ 264.937946][ T9958] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 264.982543][ T9976] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 265.036783][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 265.039370][ T9976] hpfs: filesystem error: improperly stopped [ 265.103417][ T9976] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 265.135008][ T9976] hpfs: You really don't want any checks? You are crazy... [ 265.174489][ T9984] loop2: detected capacity change from 0 to 256 [ 265.182125][ T9976] hpfs: hpfs_map_sector(): read error [ 265.200988][ T9976] hpfs: code page support is disabled [ 265.214561][ T9982] loop4: detected capacity change from 0 to 1024 [ 265.222100][ T9976] hpfs: hpfs_map_4sectors(): unaligned read [ 265.241525][ T9976] hpfs: hpfs_map_4sectors(): unaligned read [ 265.277477][ T9976] hpfs: filesystem error: unable to find root dir [ 265.318352][ T9982] EXT4-fs: Ignoring removed nobh option [ 265.366451][ T9984] FAT-fs (loop2): Directory bread(block 64) failed [ 265.393247][ T9982] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 265.413371][ T9987] loop6: detected capacity change from 0 to 22 [ 265.419797][ T24] DVB: Unable to find symbol mt352_attach() [ 265.433570][ T9984] FAT-fs (loop2): Directory bread(block 65) failed [ 265.440189][ T9984] FAT-fs (loop2): Directory bread(block 66) failed [ 265.463505][ T9987] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 265.472695][ T9982] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.1451: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 265.505715][ T9987] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 265.513797][ T24] DVB: Unable to find symbol nxt6000_attach() [ 265.520074][ T24] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 265.532324][ T9984] FAT-fs (loop2): Directory bread(block 67) failed [ 265.544400][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input15 [ 265.568562][ T9984] FAT-fs (loop2): Directory bread(block 68) failed [ 265.569512][ T24] dvb-usb: schedule remote query interval to 1000 msecs. [ 265.608181][ T9984] FAT-fs (loop2): Directory bread(block 69) failed [ 265.626802][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 265.643542][ T9982] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1451: couldn't read orphan inode 11 (err -117) [ 265.671859][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 265.678062][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 265.682018][ T9984] FAT-fs (loop2): Directory bread(block 70) failed [ 265.709361][ T9982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.730975][ T9984] FAT-fs (loop2): Directory bread(block 71) failed [ 265.738076][ T9984] FAT-fs (loop2): Directory bread(block 72) failed [ 265.760744][ T24] usb 9-1: USB disconnect, device number 5 [ 265.832056][ T9984] FAT-fs (loop2): Directory bread(block 73) failed [ 265.879412][ T9982] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1451: Invalid block bitmap block 0 in block_group 0 [ 265.907986][ T9996] loop8: detected capacity change from 0 to 1024 [ 266.004253][ T9982] Quota error (device loop4): write_blk: dquota write failed [ 266.046192][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 266.071063][ T9982] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 266.140710][ T13] hfsplus: b-tree write err: -5, ino 4 [ 266.149953][ T9982] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1451: Failed to acquire dquot type 0 [ 266.273906][T10002] loop1: detected capacity change from 0 to 16384 [ 266.500619][ T5868] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.512467][T10002] bcachefs (loop1): starting version 1.13: inode_has_child_snapshots opts=errors=continue,metadata_checksum=none,data_checksum=none,wide_macs,no_splitbrain_check,fsck,fix_errors=no,norecovery,read_only [ 266.512499][T10002] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 266.547667][T10002] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 266.558923][T10002] bcachefs (loop1): invalid journal entry, version=1.13: inode_has_child_snapshots type=clock in superblock: bad size, fixing [ 266.573363][T10002] bcachefs (loop1): invalid journal entry, version=1.13: inode_has_child_snapshots type=btree_root in superblock: invalid btree root journal entry: wrong number of keys, fixing [ 266.594316][T10002] bcachefs (loop1): recovering from clean shutdown, journal seq 18 [ 266.602756][T10002] bcachefs (loop1): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive [ 266.602756][T10002] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 266.653803][T10002] bcachefs (loop1): btree node read error at btree alloc level 1/1 [ 266.653857][T10002] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 6418e625a07b578f written 24 min_key POS_MIN durability: 1 ptr: 0:147:0 gen 0 [ 266.653877][T10002] loop1 node offset 8/24 bset u64s 9: checksum error, type chacha20_poly1305_128: got 4f8984b2a9482b20a6858222464548fc should be 10e9a02dae2ac5c92967ce14957c4a14 [ 266.653899][T10002] loop1 btree validate error [ 266.653911][T10002] flagging btree alloc lost data [ 266.653923][T10002] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 266.653938][T10002] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 266.653954][T10002] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 266.653971][T10002] running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 266.653986][T10002] ret fsck_errors_not_fixed [ 266.748761][T10002] bcachefs (loop1): error reading btree root btree=alloc level=1: btree_node_read_error, fixing [ 266.793629][T10002] bcachefs (loop1): btree node read error at btree backpointers level 0/0 [ 266.793653][T10002] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq dd412662cf0a3cdb written 24 min_key POS_MIN durability: 1 ptr: 0:177:0 gen 0 [ 266.793672][T10002] loop1 node offset 8/24 bset u64s 58: checksum error, type chacha20_poly1305_128: got 078c2e72d1fb2cf9a69f9a587b7c18a1 should be a24fdb1e3b0c54e0ee0bce67b808f3ff [ 266.793694][T10002] loop1 btree validate error [ 266.793706][T10002] flagging btree backpointers lost data [ 266.793719][T10002] running recovery pass check_btree_backpointers (15), currently at recovery_pass_empty (0) [ 266.793735][T10002] ret fsck_errors_not_fixed [ 266.803707][T10020] loop6: detected capacity change from 0 to 764 [ 266.816248][T10002] bcachefs (loop1): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 266.906486][T10002] bcachefs (loop1): btree node read error at btree accounting level 0/0 [ 266.906510][T10002] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bad08202889604e written 24 min_key POS_MIN durability: 1 ptr: 0:180:0 gen 0 [ 266.906529][T10002] loop1 node offset 0/24 bset u64s 108: checksum error, type chacha20_poly1305_128: got 05374f50a3d6a7e30218b622fd4260e0 should be dee540208f34c03154ca4fb261e5b32c [ 266.906550][T10002] loop1 btree validate error [ 266.906563][T10002] flagging btree accounting lost data [ 266.906575][T10002] ret fsck_errors_not_fixed [ 266.964315][T10002] bcachefs (loop1): error reading btree root btree=accounting level=0: btree_node_read_error, fixing [ 266.975570][T10002] bcachefs (loop1): check_topology... done [ 266.985311][T10002] bcachefs (loop1): accounting_read... done [ 267.000264][T10002] bcachefs (loop1): alloc_read... done [ 267.006316][T10002] bcachefs (loop1): snapshots_read... done [ 267.013131][T10002] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 267.022977][T10002] bcachefs (loop1): done starting filesystem [ 267.043646][T10026] loop8: detected capacity change from 0 to 128 [ 267.059627][T10026] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 267.068407][T10025] loop7: detected capacity change from 0 to 512 [ 267.114777][T10026] hpfs: filesystem error: improperly stopped [ 267.121296][T10026] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 267.129037][T10026] hpfs: You really don't want any checks? You are crazy... [ 267.135152][ T5884] bcachefs (loop1): shutting down [ 267.137155][T10026] hpfs: hpfs_map_sector(): read error [ 267.146649][T10026] hpfs: code page support is disabled [ 267.154614][T10026] hpfs: hpfs_map_4sectors(): unaligned read [ 267.180378][T10026] hpfs: hpfs_map_4sectors(): unaligned read [ 267.211006][T10026] hpfs: filesystem error: unable to find root dir [ 267.296481][ T5884] bcachefs (loop1): shutdown complete [ 267.460252][T10032] loop4: detected capacity change from 0 to 1024 [ 267.502481][T10032] EXT4-fs: Ignoring removed nomblk_io_submit option [ 267.523440][T10032] EXT4-fs: Ignoring removed nomblk_io_submit option [ 267.635428][T10032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.748941][T10032] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.842576][T10032] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 267.918442][T10032] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 28 [ 267.982369][T10032] EXT4-fs (loop4): This should not happen!! Data will be lost [ 267.982369][T10032] [ 268.020789][T10032] EXT4-fs (loop4): Total free blocks count 0 [ 268.051385][T10032] EXT4-fs (loop4): Free/Dirty block details [ 268.084137][T10032] EXT4-fs (loop4): free_blocks=4293918720 [ 268.111027][T10032] EXT4-fs (loop4): dirty_blocks=16 [ 268.142199][T10032] EXT4-fs (loop4): Block reservation details [ 268.176629][T10032] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 268.343085][ T5868] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.570696][T10068] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1488'. [ 268.851311][T10076] vivid-000: disconnect [ 268.870124][T10075] vivid-000: reconnect [ 269.420950][T10093] loop6: detected capacity change from 0 to 2048 [ 269.494596][T10093] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.739509][T10071] loop7: detected capacity change from 0 to 32768 [ 269.761710][T10071] XFS: attr2 mount option is deprecated. [ 269.871782][T10071] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 269.970439][T10115] loop6: detected capacity change from 0 to 512 [ 269.994110][T10071] XFS (loop7): Ending clean mount [ 270.051809][T10071] XFS (loop7): Quotacheck needed: Please wait. [ 270.088237][T10115] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 270.233000][T10115] EXT4-fs (loop6): 1 truncate cleaned up [ 270.244732][T10071] XFS (loop7): Quotacheck: Done. [ 270.265865][T10115] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.568854][ T6193] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.635758][ T6296] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 271.001369][T10137] loop1: detected capacity change from 0 to 512 [ 271.206040][T10137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.220290][T10145] loop6: detected capacity change from 0 to 512 [ 271.241731][T10145] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 271.284510][T10137] ext4 filesystem being mounted at /253/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 271.405166][T10145] EXT4-fs (loop6): 1 truncate cleaned up [ 271.414824][T10137] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.1514: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 271.440000][T10145] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.458148][T10137] EXT4-fs (loop1): Remounting filesystem read-only [ 271.848963][T10119] loop4: detected capacity change from 0 to 32768 [ 271.932674][T10119] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1507 (10119) [ 272.010236][T10156] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1522'. [ 272.054489][T10119] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 272.081430][T10119] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 272.358949][T10150] loop8: detected capacity change from 0 to 32768 [ 272.397139][T10119] BTRFS info (device loop4): enabling ssd optimizations [ 272.415463][T10119] BTRFS info (device loop4): enabling free space tree [ 272.467717][T10150] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 272.524791][ T6193] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.565696][ T5884] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.707299][T10150] XFS (loop8): Ending clean mount [ 272.735667][ T5868] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 272.763578][T10150] XFS (loop8): Quotacheck needed: Please wait. [ 272.776800][T10189] loop2: detected capacity change from 0 to 512 [ 272.915898][T10150] XFS (loop8): Quotacheck: Done. [ 272.925264][T10189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.977043][T10189] ext4 filesystem being mounted at /264/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 273.105405][T10197] loop6: detected capacity change from 0 to 64 [ 273.142150][T10197] hfs: unable to locate alternate MDB [ 273.167296][T10197] hfs: continuing without an alternate MDB [ 273.256082][T10197] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 273.256167][ T7929] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 273.270062][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.402762][T10203] loop7: detected capacity change from 0 to 64 [ 273.707511][T10205] loop1: detected capacity change from 0 to 2048 [ 273.755985][T10211] loop2: detected capacity change from 0 to 1024 [ 273.867328][T10213] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 273.883744][T10211] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 274.126276][T10211] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1531: Invalid block bitmap block 0 in block_group 0 [ 274.265273][T10211] Quota error (device loop2): write_blk: dquota write failed [ 274.281615][T10211] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 274.357600][T10225] loop8: detected capacity change from 0 to 64 [ 274.374592][T10211] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1531: Failed to acquire dquot type 0 [ 274.444132][T10211] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.1531: Freeing blocks not in datazone - block = 0, count = 4096 [ 274.665056][T10211] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1531: Invalid inode bitmap blk 0 in block_group 0 [ 274.711489][ T3446] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 274.765584][ T3446] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 274.813607][T10211] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 274.901224][T10211] EXT4-fs (loop2): 1 orphan inode deleted [ 274.908851][T10211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.188476][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.512082][T10257] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1556'. [ 275.648548][T10262] loop6: detected capacity change from 0 to 1024 [ 275.711370][T10262] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 275.763424][T10268] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 275.774384][T10262] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.824861][T10268] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 275.834409][T10268] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 275.842291][T10268] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 276.127667][ T6193] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.196820][T10280] ipvlan2: entered promiscuous mode [ 276.419460][T10285] loop6: detected capacity change from 0 to 2048 [ 276.436941][T10285] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 276.531492][T10292] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 276.731087][ T24] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 276.773571][T10298] loop1: detected capacity change from 0 to 512 [ 276.810580][T10298] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 276.892228][T10298] EXT4-fs (loop1): invalid journal inode [ 276.901128][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 276.921236][T10298] EXT4-fs (loop1): can't get journal size [ 276.923949][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.975040][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.015567][ T24] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 277.025508][T10298] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 277.058252][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.062396][T10298] System zones: 1-12, 13-13 [ 277.114003][ T24] usb 9-1: config 0 descriptor?? [ 277.141810][T10298] EXT4-fs (loop1): 1 truncate cleaned up [ 277.185570][T10298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.266680][T10298] EXT4-fs warning (device loop1): verify_group_input:156: Last group not full [ 277.412262][ T5884] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.584307][ T24] mcp2221 0003:04D8:00DD.001A: item fetching failed at offset 2/5 [ 277.644043][ T24] mcp2221 0003:04D8:00DD.001A: can't parse reports [ 277.650702][ T24] mcp2221 0003:04D8:00DD.001A: probe with driver mcp2221 failed with error -22 [ 277.719118][T10322] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 277.777552][ T24] usb 9-1: USB disconnect, device number 6 [ 277.958730][T10296] loop7: detected capacity change from 0 to 32768 [ 278.022293][T10296] non-latin1 character 0xffff found in JFS file name [ 278.038797][T10296] mount with iocharset=utf8 to access [ 278.367098][T10337] loop6: detected capacity change from 0 to 2048 [ 278.418727][T10337] NILFS (loop6): invalid segment: Inconsistency found [ 278.453749][T10337] NILFS (loop6): trying rollback from an earlier position [ 278.716443][T10337] NILFS (loop6): recovery complete [ 278.753682][T10344] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 278.833346][T10323] loop4: detected capacity change from 0 to 32768 [ 278.845361][ T30] audit: type=1326 audit(1758750056.745:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10349 comm="syz.8.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80938eec9 code=0x7ffc0000 [ 278.864286][T10351] loop7: detected capacity change from 0 to 256 [ 278.867646][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.942316][T10323] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 278.983299][ T30] audit: type=1326 audit(1758750056.755:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10349 comm="syz.8.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80938eec9 code=0x7ffc0000 [ 279.065514][T10323] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 279.086252][T10358] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 279.093445][T10351] FAT-fs (loop7): Directory bread(block 64) failed [ 279.137229][ T30] audit: type=1326 audit(1758750056.785:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10349 comm="syz.8.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa80938eec9 code=0x7ffc0000 [ 279.137290][ T30] audit: type=1326 audit(1758750056.785:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10349 comm="syz.8.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80938eec9 code=0x7ffc0000 [ 279.137342][ T30] audit: type=1326 audit(1758750056.785:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10349 comm="syz.8.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80938eec9 code=0x7ffc0000 [ 279.137393][ T30] audit: type=1326 audit(1758750056.815:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10349 comm="syz.8.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fa80938eec9 code=0x7ffc0000 [ 279.137442][ T30] audit: type=1326 audit(1758750056.815:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10349 comm="syz.8.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80938eec9 code=0x7ffc0000 [ 279.145871][T10361] ptrace attach of "./syz-executor exec"[7929] was attempted by ""[10361] [ 279.149753][T10351] FAT-fs (loop7): Directory bread(block 65) failed [ 279.217390][ C0] vkms_vblank_simulate: vblank timer overrun [ 279.345048][T10351] FAT-fs (loop7): Directory bread(block 66) failed [ 279.345087][T10351] FAT-fs (loop7): Directory bread(block 67) failed [ 279.345179][T10351] FAT-fs (loop7): Directory bread(block 68) failed [ 279.345210][T10351] FAT-fs (loop7): Directory bread(block 69) failed [ 279.345298][T10351] FAT-fs (loop7): Directory bread(block 70) failed [ 279.345327][T10351] FAT-fs (loop7): Directory bread(block 71) failed [ 279.345413][T10351] FAT-fs (loop7): Directory bread(block 72) failed [ 279.345443][T10351] FAT-fs (loop7): Directory bread(block 73) failed [ 279.378509][ T5868] ocfs2: Unmounting device (7,4) on (node local) [ 279.449154][T10367] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1600'. [ 279.693437][T10370] loop8: detected capacity change from 0 to 1024 [ 280.526503][T10397] loop4: detected capacity change from 0 to 2048 [ 280.633246][T10397] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 280.643428][T10397] UDF-fs: Scanning with blocksize 512 failed [ 280.674034][T10401] loop8: detected capacity change from 0 to 256 [ 280.679467][ T5881] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 280.702812][T10401] exfat: Deprecated parameter 'utf8' [ 280.710646][T10401] exfat: Deprecated parameter 'utf8' [ 280.774802][T10397] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.830241][T10401] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 281.499698][T10421] loop1: detected capacity change from 0 to 1024 [ 281.528688][T10394] loop7: detected capacity change from 0 to 32768 [ 281.648487][T10394] overlayfs: upper fs needs to support d_type. [ 281.686539][T10394] overlayfs: upper fs does not support tmpfile. [ 281.748084][T10394] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 281.812149][T10394] ERROR: (device loop7): dbAlloc: the hint is outside the map [ 281.812149][T10394] [ 281.909924][T10394] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null. [ 281.931202][T10394] ERROR: (device loop7): dbAlloc: the hint is outside the map [ 281.931202][T10394] [ 282.029141][T10394] overlayfs: failed to verify upper root origin [ 282.177914][ T12] read_mapping_page failed! [ 282.211705][ T12] ERROR: (device loop7): txCommit: [ 282.211705][ T12] [ 282.219171][ T12] jfs_write_inode: jfs_commit_inode failed! [ 282.257066][T10441] loop1: detected capacity change from 0 to 128 [ 282.302709][T10441] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 282.331008][T10441] hpfs: filesystem error: improperly stopped [ 282.347463][T10441] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 282.367570][T10441] hpfs: You really don't want any checks? You are crazy... [ 282.407618][T10441] hpfs: hpfs_map_sector(): read error [ 282.440742][T10441] hpfs: code page support is disabled [ 282.462916][T10441] hpfs: hpfs_map_4sectors(): unaligned read [ 282.473069][T10448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1643'. [ 282.512778][T10441] hpfs: hpfs_map_4sectors(): unaligned read [ 282.525594][T10441] hpfs: filesystem error: unable to find root dir [ 282.841542][T10456] loop7: detected capacity change from 0 to 2048 [ 282.928273][T10456] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.965885][T10457] loop4: detected capacity change from 0 to 4096 [ 282.969972][T10456] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.006164][T10457] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 283.097092][T10456] ptrace attach of "./syz-executor exec"[6296] was attempted by "ŸÎçÇFGÏž}aìùçF÷¬×·_ûì—·¾|ùëÏÍýñâ­g'“/ûŽŽ>öÒÆßd0Æ;æç÷#Y5›Íf¿k àÞÒò¿Óˆr_‰CeÔÓу«\x0c Ø+Í#M à¡—D¿+ ö׿÷ n¯­V7·ƒüþÁÏ/EÄð{‹×·ò”÷G-ïO8¶žüí΄dãm°+W¯EÄñ.çÒ>ÿî_çëÉ.ÇÞ»ÑZÆ»­éÖú]ÖŸÍßNØ¥Íõoý®õïNþC=Ö¿\x0b;Ìqdñä7=ó_‹xb [þd+Ò#ÿ+;ÌÿùÐwß÷z®ùiÄÉèžÿ¯¹¶ù}ˆ‘©™\x22o?vÍqâ‹×Om×ÿ±^ù“íû_Øaÿ?\x5c›îµ–´ò?sbûÏ¿[þÖ9ñN»Ž4\x22Þmï[ã÷:r<}sô£íúŸìÑÿ½>ÿOvØÿWo®ü¸Ã— @)ˆ¡HÒl+NÓ,‹8ű´¨Õ\x1b§¦jKó“­ç\x22†c0š)òш¨lŒ“ÖøLßuŒÏFÄ£ñ~åå8«ÖŠÉ~7 À–ã1IšED¿UÒ4Ëú] °ç†û] °ï\x5cÿ ÀÃÏõ? p .œ?ßÚšëk«ÕÖxòòòÒlíòéɼ>›Í-U³jmq!›®Õ¦‹<«Öæîu¼¢V[8óKWFy½1R_^¹4W[šo\x5cš™›˜Î/åƒ\x07Ò ÿÔP¹%ii§i–Eü?\x22†c0™š)òшx$\x22¾­\x0ciÏô»h [ 283.128044][T10470] loop8: detected capacity change from 0 to 128 [ 283.140070][T10457] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 283.329900][ T6296] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.403963][T10470] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 283.440054][T10470] hpfs: filesystem error: improperly stopped [ 283.448249][T10470] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 283.456695][T10470] hpfs: You really don't want any checks? You are crazy... [ 283.466568][T10470] hpfs: hpfs_map_sector(): read error [ 283.477992][T10470] hpfs: code page support is disabled [ 283.483608][T10470] hpfs: hpfs_map_4sectors(): unaligned read [ 283.495070][T10470] hpfs: hpfs_map_4sectors(): unaligned read [ 283.519439][T10478] ALSA: mixer_oss: invalid OSS volume '' [ 283.530978][T10470] hpfs: filesystem error: unable to find root dir [ 283.802193][T10487] loop1: detected capacity change from 0 to 512 [ 283.840706][T10487] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 283.840746][T10487] UDF-fs: Scanning with blocksize 512 failed [ 283.842287][T10487] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 283.842309][T10487] UDF-fs: Scanning with blocksize 1024 failed [ 283.842947][T10487] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 283.842967][T10487] UDF-fs: Scanning with blocksize 2048 failed [ 283.843722][T10487] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 283.860991][T10487] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 283.965693][T10492] loop6: detected capacity change from 0 to 1024 [ 284.186633][ T12] hfsplus: b-tree write err: -5, ino 4 [ 284.704538][ T5881] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 284.714429][ T5881] Bluetooth: hci3: Injecting HCI hardware error event [ 284.724551][ T5885] Bluetooth: hci3: hardware error 0x00 [ 285.008070][T10526] netlink: 'syz.2.1677': attribute type 153 has an invalid length. [ 285.148231][T10529] loop4: detected capacity change from 0 to 1024 [ 285.181983][ T24] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 285.210555][T10529] hfsplus: bad catalog entry type [ 285.369847][T10536] loop2: detected capacity change from 0 to 1024 [ 285.373901][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.396749][ T13] hfsplus: b-tree write err: -5, ino 4 [ 285.412959][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.451002][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 285.510597][ T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 285.560966][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.612985][ T24] usb 9-1: config 0 descriptor?? [ 285.651424][T10543] loop4: detected capacity change from 0 to 512 [ 285.719118][T10543] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 285.780541][T10543] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 285.850134][T10543] System zones: 0-2, 18-18, 34-34 [ 285.895774][T10543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.971510][T10543] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.053301][ T24] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x5 [ 286.060750][ T24] plantronics 0003:047F:FFFF.001B: ignoring exceeding usage max [ 286.105162][ T24] plantronics 0003:047F:FFFF.001B: item fetching failed at offset 13/15 [ 286.125320][ T24] plantronics 0003:047F:FFFF.001B: parse failed [ 286.151549][ T24] plantronics 0003:047F:FFFF.001B: probe with driver plantronics failed with error -22 [ 286.248485][ T24] usb 9-1: USB disconnect, device number 7 [ 286.251033][T10555] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 286.354780][ T5868] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.527224][T10573] tipc: Started in network mode [ 286.549476][T10573] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 286.572965][T10573] tipc: Enabled bearer , priority 10 [ 286.757948][T10579] loop1: detected capacity change from 0 to 2048 [ 286.781402][ T5885] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 286.800487][T10579] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 287.249477][T10594] loop1: detected capacity change from 0 to 2048 [ 287.290395][T10594] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 287.326488][T10597] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 287.701264][ T24] tipc: Node number set to 8432298 [ 288.931418][ T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 288.994924][T10619] loop1: detected capacity change from 0 to 32768 [ 288.995115][T10640] loop2: detected capacity change from 0 to 4096 [ 289.025709][T10619] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1716 (10619) [ 289.081062][T10619] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 289.086980][T10640] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 289.110103][T10619] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 289.114376][ T24] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 289.155065][T10640] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 289.182606][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 289.182626][ T30] audit: type=1800 audit(1758750067.095:62): pid=10640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1728" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 289.194444][ T24] usb 9-1: config 220 has 0 interfaces, different from the descriptor's value: 3 [ 289.225454][ T24] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 289.235169][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.243803][ T24] usb 9-1: Product: syz [ 289.247965][ T24] usb 9-1: Manufacturer: syz [ 289.253249][ T24] usb 9-1: SerialNumber: syz [ 289.374121][T10619] BTRFS info (device loop1): enabling ssd optimizations [ 289.401299][T10619] BTRFS info (device loop1): enabling free space tree [ 289.424936][ T1298] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 289.455202][ T5878] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 289.477843][ T5878] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 289.509744][ T5878] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 289.545841][ T24] usb 9-1: USB disconnect, device number 8 [ 289.552593][ T1298] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 289.682440][ T5884] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 289.747269][T10663] random: crng reseeded on system resumption [ 289.774943][T10638] loop4: detected capacity change from 0 to 32768 [ 289.800288][T10638] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1727 (10638) [ 289.889578][T10638] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 289.951133][T10638] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 290.112362][T10677] tc_dump_action: action bad kind [ 290.288076][T10688] tipc: Enabling of bearer rejected, failed to enable media [ 290.316261][T10638] BTRFS info (device loop4): rebuilding free space tree [ 290.467467][T10638] BTRFS info (device loop4): setting nodatasum [ 290.501256][T10638] BTRFS info (device loop4): enabling ssd optimizations [ 290.527831][T10638] BTRFS info (device loop4): enabling free space tree [ 290.591005][T10638] BTRFS info (device loop4): force clearing of disk cache [ 290.649020][T10638] BTRFS info (device loop4): enabling auto defrag [ 290.696568][T10638] BTRFS info (device loop4): force zlib compression, level 3 [ 290.865525][T10702] loop1: detected capacity change from 0 to 512 [ 290.930048][T10702] EXT4-fs: Ignoring removed nobh option [ 290.970435][T10704] loop8: detected capacity change from 0 to 128 [ 291.045983][T10702] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1743: iget: bad i_size value: 38620345925642 [ 291.113091][T10704] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 291.128461][T10708] loop2: detected capacity change from 0 to 2048 [ 291.147093][ T5868] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 291.168832][T10702] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1743: couldn't read orphan inode 15 (err -117) [ 291.186983][T10704] hpfs: filesystem error: improperly stopped [ 291.217309][T10708] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 291.244010][T10704] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 291.308092][T10704] hpfs: You really don't want any checks? You are crazy... [ 291.323184][T10702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.360512][T10704] hpfs: hpfs_map_sector(): read error [ 291.397935][T10704] hpfs: code page support is disabled [ 291.416578][T10702] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1743: bg 0: block 5: invalid block bitmap [ 291.460258][T10704] hpfs: hpfs_map_4sectors(): unaligned read [ 291.518002][T10702] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 291.528456][T10704] hpfs: hpfs_map_4sectors(): unaligned read [ 291.591064][T10704] hpfs: filesystem error: unable to find root dir [ 291.700799][T10716] 9pnet_fd: Insufficient options for proto=fd [ 291.800310][T10718] loop2: detected capacity change from 0 to 1024 [ 291.811960][T10685] loop6: detected capacity change from 0 to 32768 [ 291.873732][ T5884] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.004787][T10685] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 292.235263][T10736] loop1: detected capacity change from 0 to 1024 [ 292.251137][T10685] XFS (loop6): Ending clean mount [ 292.580745][ T6193] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 292.695792][ T1298] hfsplus: b-tree write err: -5, ino 4 [ 292.885231][T10748] loop1: detected capacity change from 0 to 256 [ 292.959702][T10748] exfat: Deprecated parameter 'namecase' [ 292.980306][T10748] exfat: Deprecated parameter 'utf8' [ 293.007873][T10746] loop8: detected capacity change from 0 to 4096 [ 293.080649][T10748] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 293.095567][T10746] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 293.166796][T10746] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.267171][T10734] loop4: detected capacity change from 0 to 32768 [ 293.354719][T10761] trusted_key: encrypted_key: key trusted:syz not found [ 293.389971][T10734] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 293.504638][ T55] hid-generic 0000:0004:0000.001C: unknown main item tag 0x0 [ 293.531480][T10734] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 293.540796][ T55] hid-generic 0000:0004:0000.001C: unknown main item tag 0x0 [ 293.584082][ T55] hid-generic 0000:0004:0000.001C: unknown main item tag 0x0 [ 293.624954][ T55] hid-generic 0000:0004:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 293.777989][T10734] XFS (loop4): Ending clean mount [ 293.799790][T10734] XFS (loop4): Quotacheck needed: Please wait. [ 293.856906][ T7929] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.936598][T10734] XFS (loop4): Quotacheck: Done. [ 294.020982][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 294.036681][T10769] fido_id[10769]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 294.073137][ T5868] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 294.154131][T10781] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1769'. [ 294.169979][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1769'. [ 294.240959][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 294.278917][ T10] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 294.317068][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.359339][ T10] usb 2-1: config 0 descriptor?? [ 294.377942][ T30] audit: type=1326 audit(1758750072.285:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10784 comm="syz.8.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80938eec9 code=0x7ffc0000 [ 294.429433][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 294.480675][ T30] audit: type=1326 audit(1758750072.285:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10784 comm="syz.8.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80938eec9 code=0x7ffc0000 [ 294.541158][ T30] audit: type=1326 audit(1758750072.285:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10784 comm="syz.8.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa80938eec9 code=0x7ffc0000 [ 294.600968][ T30] audit: type=1326 audit(1758750072.295:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10784 comm="syz.8.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80938eec9 code=0x7ffc0000 [ 294.664994][ T30] audit: type=1326 audit(1758750072.295:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10784 comm="syz.8.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fa80938eec9 code=0x7ffc0000 [ 294.721129][ T30] audit: type=1326 audit(1758750072.295:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10784 comm="syz.8.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80938eec9 code=0x7ffc0000 [ 294.771305][ T30] audit: type=1326 audit(1758750072.295:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10784 comm="syz.8.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80938eec9 code=0x7ffc0000 [ 294.852569][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 295.039882][ T9] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 295.080606][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.093462][ T10] usb 2-1: USB disconnect, device number 13 [ 295.105487][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1776'. [ 295.159086][ T9] usb 9-1: config 0 descriptor?? [ 295.794153][ T9] usb 9-1: Cannot set autoneg [ 295.817730][ T9] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 295.863938][ T9] usb 9-1: USB disconnect, device number 9 [ 295.983694][T10826] loop4: detected capacity change from 0 to 1024 [ 296.049525][T10826] hfsplus: xattr searching failed [ 296.052822][T10829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1792'. [ 296.335710][ T13] hfsplus: b-tree write err: -5, ino 4 [ 296.484851][ T30] audit: type=1326 audit(1758750074.395:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10840 comm="syz.7.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4df8eec9 code=0x7ffc0000 [ 296.547927][ T30] audit: type=1326 audit(1758750074.425:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10840 comm="syz.7.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4df8eec9 code=0x7ffc0000 [ 296.666945][ T30] audit: type=1326 audit(1758750074.445:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10840 comm="syz.7.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f5f4df8eec9 code=0x7ffc0000 [ 296.714425][T10850] loop2: detected capacity change from 0 to 128 [ 296.816351][T10850] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 296.850242][T10850] FAT-fs (loop2): Filesystem has been set read-only [ 296.873601][T10850] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 297.068127][T10857] loop8: detected capacity change from 0 to 4096 [ 297.112946][T10857] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 297.914815][T10882] loop1: detected capacity change from 0 to 1024 [ 298.238904][ T13] hfsplus: b-tree write err: -5, ino 4 [ 298.321012][ T24] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 298.341384][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1827'. [ 298.350309][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1827'. [ 298.395648][T10898] netlink: 'syz.7.1827': attribute type 12 has an invalid length. [ 298.408912][T10898] netlink: 'syz.7.1827': attribute type 11 has an invalid length. [ 298.509043][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 298.546412][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 298.631059][ T24] usb 9-1: New USB device found, idVendor=596a, idProduct=00f8, bcdDevice= 0.00 [ 298.640143][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.702284][ T24] usb 9-1: config 0 descriptor?? [ 299.203656][ T24] hid-generic 0003:596A:00F8.001D: hidraw0: USB HID vff.fa Device [HID 596a:00f8] on usb-dummy_hcd.8-1/input0 [ 299.384470][ T55] usb 9-1: USB disconnect, device number 10 [ 299.529008][T10928] fido_id[10928]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 300.045209][T10917] loop2: detected capacity change from 0 to 32768 [ 300.126943][T10917] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 300.277833][T10957] loop7: detected capacity change from 0 to 512 [ 300.298634][T10957] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.332603][T10957] EXT4-fs warning (device loop7): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 300.343555][T10917] XFS (loop2): Ending clean mount [ 300.380081][T10917] XFS (loop2): Quotacheck needed: Please wait. [ 300.430577][T10963] loop1: detected capacity change from 0 to 512 [ 300.530489][T10917] XFS (loop2): Quotacheck: Done. [ 300.560193][ T6296] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.611745][T10963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.722269][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 300.722290][ T30] audit: type=1800 audit(1758750078.635:78): pid=10963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1852" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 300.805065][ T5878] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 300.864563][ T5884] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.874450][T10971] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 300.907978][T10971] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 300.915817][T10971] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 300.930027][T10971] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 300.987127][T10971] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 301.021923][T10971] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 301.359058][T10977] netlink: 'syz.7.1859': attribute type 11 has an invalid length. [ 301.854022][T10997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1868'. [ 301.934351][T10997] vlan3: entered promiscuous mode [ 301.939453][T10997] gretap0: entered promiscuous mode [ 302.073653][T11006] xt_l2tp: invalid flags combination: 8 [ 302.254557][T11007] loop1: detected capacity change from 0 to 4096 [ 302.329627][T11007] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 302.413671][T11013] loop8: detected capacity change from 0 to 512 [ 302.434694][T11015] loop2: detected capacity change from 0 to 512 [ 302.494204][T11007] ntfs3(loop1): ino=19, mi_enum_attr [ 302.499527][T11007] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 302.512988][T11015] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 302.554649][T11015] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 302.574932][T11015] EXT4-fs (loop2): orphan cleanup on readonly fs [ 302.587528][T11015] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1877: bg 0: block 361: padding at end of block bitmap is not set [ 302.665088][T11015] EXT4-fs (loop2): Remounting filesystem read-only [ 302.688286][T11013] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.718572][T11015] EXT4-fs (loop2): 1 truncate cleaned up [ 302.761356][T11015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 302.828842][T11015] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.1877: dx entry: limit 0 != root limit 125 [ 302.882397][T11015] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1877: Corrupt directory, running e2fsck is recommended [ 303.032222][ T7929] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.133596][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 303.489075][T11041] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1889'. [ 303.537834][T11041] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1889'. [ 303.843225][T11050] loop6: detected capacity change from 0 to 4096 [ 303.953030][T11055] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 304.154118][T11059] loop1: detected capacity change from 0 to 1024 [ 304.411228][T11063] loop4: detected capacity change from 0 to 1024 [ 304.456832][T11062] loop6: detected capacity change from 0 to 2048 [ 304.507973][T11063] hfsplus: cannot replace xattr [ 304.549969][T11062] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.574286][ T3446] hfsplus: b-tree write err: -5, ino 4 [ 304.758179][ T6193] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.911424][ T5229] udevd[5229]: worker [10005] terminated by signal 33 (Unknown signal 33) [ 304.940238][T11075] tipc: Enabling of bearer rejected, failed to enable media [ 304.971229][ T5229] udevd[5229]: worker [10005] failed while handling '/devices/virtual/block/loop6' [ 305.042351][ T5229] udevd[5229]: worker [6117] terminated by signal 33 (Unknown signal 33) [ 305.066737][ T5229] udevd[5229]: worker [6117] failed while handling '/devices/virtual/block/loop4' [ 305.096078][T11044] loop8: detected capacity change from 0 to 32768 [ 305.197845][T11044] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 305.345254][T11044] XFS (loop8): Ending clean mount [ 305.379864][T11044] XFS (loop8): Quotacheck needed: Please wait. [ 305.574285][T11044] XFS (loop8): Quotacheck: Done. [ 305.813285][ T7929] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 306.245748][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1919'. [ 306.448013][T11121] loop4: detected capacity change from 0 to 256 [ 306.559601][ T30] audit: type=1800 audit(1758750084.465:79): pid=11121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1922" name="bus" dev="loop4" ino=1048730 res=0 errno=0 [ 306.598130][T11123] loop2: detected capacity change from 0 to 1024 [ 306.619324][T11123] EXT4-fs: Ignoring removed bh option [ 306.625519][T11123] EXT4-fs: inline encryption not supported [ 306.677039][T11123] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 306.726189][T11123] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 306.819871][T11127] loop6: detected capacity change from 0 to 4096 [ 306.847518][T11133] loop8: detected capacity change from 0 to 128 [ 306.883786][T11123] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.1923: lblock 2 mapped to illegal pblock 2 (length 1) [ 306.932544][T11133] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 306.994129][T11133] ext4 filesystem being mounted at /194/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 307.025928][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.033436][T11109] loop7: detected capacity change from 0 to 32768 [ 307.042549][T11135] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 307.073996][T11123] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 307.117543][T11123] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1923: lblock 0 mapped to illegal pblock 48 (length 1) [ 307.141393][T11123] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 307.161151][T11123] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1923: Failed to acquire dquot type 0 [ 307.189293][T11123] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 307.280014][T11123] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1923: mark_inode_dirty error [ 307.368457][T11123] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 307.422953][ T7929] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 307.454012][T11123] EXT4-fs (loop2): 1 orphan inode deleted [ 307.484749][ T12] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 307.507435][T11123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.541005][ T12] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 307.549515][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 0 [ 307.822030][T11123] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1923: lblock 0 mapped to illegal pblock 48 (length 1) [ 307.848607][T11152] loop4: detected capacity change from 0 to 512 [ 307.919824][T11123] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 307.944115][T11152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 307.963349][T11152] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.1934: Unimplemented hash flags: 0x0001 [ 307.975475][T11152] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1934: Corrupt directory, running e2fsck is recommended [ 307.988880][T11152] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.1934: path /329/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 308.059076][T11158] tipc: Enabling of bearer rejected, failed to enable media [ 308.145838][T11161] loop1: detected capacity change from 0 to 1024 [ 308.173264][T11162] loop7: detected capacity change from 0 to 256 [ 308.196258][T11161] EXT4-fs: Ignoring removed nobh option [ 308.243403][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.246871][T11161] EXT4-fs: Ignoring removed bh option [ 308.255685][T11162] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 308.346098][T11162] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 308.358601][ T5868] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.399461][T11161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.448077][T11162] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x2d0d25cc, utbl_chksum : 0xe619d30d) [ 308.455411][T11168] loop2: detected capacity change from 0 to 512 [ 308.467582][T11168] EXT4-fs: Ignoring removed nomblk_io_submit option [ 308.475644][T11168] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 308.506269][T11168] EXT4-fs (loop2): 1 truncate cleaned up [ 308.522914][T11168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.662465][T11172] loop8: detected capacity change from 0 to 512 [ 308.707706][T11172] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 308.753157][T11172] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.1942: bad orphan inode 131083 [ 308.811189][T11172] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.873302][ T5884] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.892775][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1944'. [ 308.898835][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.008741][ T7929] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.072210][T11224] loop4: detected capacity change from 0 to 64 [ 310.111500][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 310.291085][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 310.307247][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.354639][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.402909][ T9] usb 8-1: New USB device found, idVendor=0853, idProduct=0313, bcdDevice= 0.00 [ 310.451388][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.507825][ T9] usb 8-1: config 0 descriptor?? [ 310.725665][T11244] loop1: detected capacity change from 0 to 128 [ 310.768513][T11238] loop2: detected capacity change from 0 to 4096 [ 310.909315][T11247] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 310.988505][ T9] topre 0003:0853:0313.001E: hidraw0: USB HID v0.05 Device [HID 0853:0313] on usb-dummy_hcd.7-1/input0 [ 310.999851][T11249] netlink: 'syz.4.1979': attribute type 1 has an invalid length. [ 311.053598][T11249] netlink: 'syz.4.1979': attribute type 2 has an invalid length. [ 311.115925][T11249] netlink: 1172 bytes leftover after parsing attributes in process `syz.4.1979'. [ 311.219600][ T24] usb 8-1: USB disconnect, device number 10 [ 311.389435][T11251] fido_id[11251]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 311.727254][T11265] loop6: detected capacity change from 0 to 2048 [ 311.800598][T11265] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.878247][T11265] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.023315][ T6193] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.106468][T11242] loop8: detected capacity change from 0 to 32768 [ 312.250471][T11242] ocfs2: Mounting device (7,8) on (node local, slot 0) with writeback data mode. [ 312.301656][T11282] loop1: detected capacity change from 0 to 4096 [ 312.390586][T11283] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 312.498298][T11288] loop4: detected capacity change from 0 to 256 [ 312.609493][T11290] loop7: detected capacity change from 0 to 512 [ 312.635804][T11288] FAT-fs (loop4): Directory bread(block 64) failed [ 312.679391][T11290] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 312.707484][T11288] FAT-fs (loop4): Directory bread(block 65) failed [ 312.714524][T11288] FAT-fs (loop4): Directory bread(block 66) failed [ 312.722132][T11288] FAT-fs (loop4): Directory bread(block 67) failed [ 312.728735][T11288] FAT-fs (loop4): Directory bread(block 68) failed [ 312.736196][T11288] FAT-fs (loop4): Directory bread(block 69) failed [ 312.743078][T11288] FAT-fs (loop4): Directory bread(block 70) failed [ 312.749770][T11288] FAT-fs (loop4): Directory bread(block 71) failed [ 312.758310][T11288] FAT-fs (loop4): Directory bread(block 72) failed [ 312.769256][T11288] FAT-fs (loop4): Directory bread(block 73) failed [ 312.779831][ T7929] ocfs2: Unmounting device (7,8) on (node local) [ 312.795171][T11290] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.1994: Unimplemented hash flags: 0x0001 [ 312.874522][T11290] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1994: Corrupt directory, running e2fsck is recommended [ 312.958632][T11290] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 3: comm syz.7.1994: path /299/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 313.038341][T11258] syz.2.1982 (11258): drop_caches: 2 [ 313.362959][T11302] loop6: detected capacity change from 0 to 512 [ 313.377561][T11302] EXT4-fs: Ignoring removed oldalloc option [ 313.446375][T11302] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.2001: corrupted in-inode xattr: e_value size too large [ 313.493375][ T6296] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.578727][T11302] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2001: couldn't read orphan inode 15 (err -117) [ 313.699849][T11302] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.083045][T11330] netlink: 212388 bytes leftover after parsing attributes in process `syz.8.2011'. [ 314.142303][T11330] netlink: get zone limit has 8 unknown bytes [ 314.146106][ T6193] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.328608][T11340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2015'. [ 314.338200][T11340] smc: net device bond0 applied user defined pnetid SYZ [ 314.347480][T11339] loop2: detected capacity change from 0 to 512 [ 314.381871][T11339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 314.456631][T11345] loop4: detected capacity change from 0 to 256 [ 314.528866][T11339] EXT4-fs warning (device loop2): dx_probe:837: inode #2: comm syz.2.2016: Unimplemented hash flags: 0x0001 [ 314.596047][T11345] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 314.611910][T11339] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2016: Corrupt directory, running e2fsck is recommended [ 314.675115][T11339] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.2016: path /352/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 314.908976][T11357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.107848][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.415117][T11375] loop7: detected capacity change from 0 to 128 [ 315.452989][T11375] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 315.478110][T11372] loop6: detected capacity change from 0 to 1024 [ 315.551374][T11375] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 315.555398][T11372] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 315.656702][T11372] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 315.694379][T11382] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2034'. [ 315.741540][T11372] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 315.750021][T11372] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 315.958388][T11349] loop1: detected capacity change from 0 to 32768 [ 315.998790][T11349] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2019 (11349) [ 316.063617][ T6193] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.108730][T11349] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 316.158617][T11349] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 316.254243][T11349] BTRFS info (device loop1): enabling ssd optimizations [ 316.307537][T11349] BTRFS info (device loop1): turning on sync discard [ 316.355176][T11349] BTRFS info (device loop1): enabling free space tree [ 316.411816][T11349] BTRFS info (device loop1): use lzo compression, level 1 [ 316.471378][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.812357][T11417] loop6: detected capacity change from 0 to 512 [ 316.912716][T11417] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 316.981432][ T5884] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 317.023690][T11417] EXT4-fs warning (device loop6): dx_probe:837: inode #2: comm syz.6.2040: Unimplemented hash flags: 0x0001 [ 317.060133][T11417] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.2040: Corrupt directory, running e2fsck is recommended [ 317.149563][T11425] random: crng reseeded on system resumption [ 317.162218][T11417] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 3: comm syz.6.2040: path /282/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 317.247875][T11428] loop7: detected capacity change from 0 to 128 [ 317.302690][T11428] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 317.365886][T11428] hpfs: filesystem error: improperly stopped [ 317.431007][T11428] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 317.461051][T11428] hpfs: You really don't want any checks? You are crazy... [ 317.541288][T11428] hpfs: hpfs_map_sector(): read error [ 317.546726][T11428] hpfs: code page support is disabled [ 317.571892][T11428] hpfs: hpfs_map_4sectors(): unaligned read [ 317.590663][T11428] hpfs: hpfs_map_4sectors(): unaligned read [ 317.619399][T11428] hpfs: filesystem error: unable to find root dir [ 317.674262][T11428] hpfs: hpfs_map_4sectors(): unaligned read [ 317.689850][ T6193] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.793001][ T55] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 317.988630][ T55] usb 9-1: Using ep0 maxpacket: 16 [ 318.026495][ T55] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.074225][ T55] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.352136][T11452] tipc: Started in network mode [ 318.357055][T11452] tipc: Node identity 5f000000000000000000000000000001, cluster identity 4711 [ 318.459246][T11452] tipc: Enabling of bearer rejected, failed to enable media [ 318.482952][T11449] loop2: detected capacity change from 0 to 32768 [ 318.491974][ T55] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 318.505293][ T55] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 318.514704][ T55] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.526401][T11449] gfs2: fsid=_: Trying to join cluster "lock_nolock", "_" [ 318.533675][T11449] gfs2: fsid=_: Now mounting FS (format 0)... [ 318.552518][T11449] gfs2: fsid=_: can't read superblock: -22 [ 318.608413][ T55] usb 9-1: config 0 descriptor?? [ 318.756866][T11462] bridge0: port 4(batadv1) entered blocking state [ 318.805238][T11462] bridge0: port 4(batadv1) entered disabled state [ 318.871097][T11462] batadv1: entered allmulticast mode [ 318.915436][T11462] batadv1: entered promiscuous mode [ 319.091577][ T55] microsoft 0003:045E:07DA.001F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 319.141157][ T55] microsoft 0003:045E:07DA.001F: no inputs found [ 319.176732][ T55] microsoft 0003:045E:07DA.001F: could not initialize ff, continuing anyway [ 319.196441][ T1298] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 319.206674][ T1298] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 319.314347][ T55] usb 9-1: USB disconnect, device number 11 [ 319.437121][T11473] fido_id[11473]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 319.600595][T11477] loop1: detected capacity change from 0 to 4096 [ 319.630767][T11477] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 319.688767][T11483] netlink: 160 bytes leftover after parsing attributes in process `syz.7.2068'. [ 319.734375][T11477] ntfs3(loop1): ino=1a, mi_enum_attr [ 319.770704][T11477] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 319.782464][ T6085] udevd[6085]: symlink '../../loop2' '/dev/disk/by-diskseq/737.tmp-b7:2' failed: Read-only file system [ 319.899913][ T6085] udevd[6085]: symlink '../../loop2' '/dev/disk/by-diskseq/737.tmp-b7:2' failed: Read-only file system [ 320.084949][T11491] loop2: detected capacity change from 0 to 512 [ 320.112977][ T5942] udevd[5942]: symlink '../../loop1' '/dev/disk/by-diskseq/738.tmp-b7:1' failed: Read-only file system [ 320.174075][ T5942] udevd[5942]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 320.229723][T11155] udevd[11155]: symlink '../../loop2' '/dev/disk/by-diskseq/739.tmp-b7:2' failed: Read-only file system [ 320.244081][ T5942] udevd[5942]: symlink '../../loop1' '/dev/disk/by-uuid/7089678B273CDB5C.tmp-b7:1' failed: Read-only file system [ 320.288401][T11155] udevd[11155]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 320.295915][ T55] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 320.321664][T11499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2074'. [ 320.426566][ T6085] udevd[6085]: symlink '../../loop2' '/dev/disk/by-diskseq/739.tmp-b7:2' failed: Read-only file system [ 320.427694][T11155] udevd[11155]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 320.493401][ T55] usb 8-1: Using ep0 maxpacket: 8 [ 320.498851][ T6085] udevd[6085]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 320.525648][ T55] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 320.550074][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2090'. [ 320.550966][ T55] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.582843][ T55] usb 8-1: Product: syz [ 320.587139][ T55] usb 8-1: Manufacturer: syz [ 320.641197][ T55] usb 8-1: SerialNumber: syz [ 320.663959][T11491] EXT4-fs (loop2): 1 orphan inode deleted [ 320.664229][ T55] usb 8-1: config 0 descriptor?? [ 320.692648][ T13] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 320.718558][T11491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.724366][ T55] gspca_main: se401-2.14.0 probing 047d:5003 [ 320.751083][ T13] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 1 [ 320.797713][T11491] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.010017][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.137136][ T55] gspca_se401: Wrong descriptor type [ 321.428836][ T5943] usb 8-1: USB disconnect, device number 11 [ 321.486851][T11530] program syz.4.2089 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 321.797885][T11509] loop6: detected capacity change from 0 to 32768 [ 321.831574][T11509] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2078 (11509) [ 321.913455][T11509] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 321.913535][T11509] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 322.097778][T11509] BTRFS info (device loop6): rebuilding free space tree [ 322.173945][T11509] BTRFS info (device loop6): setting nodatasum [ 322.199183][T11509] BTRFS info (device loop6): enabling ssd optimizations [ 322.219966][T11509] BTRFS info (device loop6): enabling free space tree [ 322.248855][T11509] BTRFS info (device loop6): force clearing of disk cache [ 322.286063][T11509] BTRFS info (device loop6): enabling auto defrag [ 322.307084][T11509] BTRFS info (device loop6): force zlib compression, level 3 [ 322.374159][T11565] syz_tun: entered allmulticast mode [ 322.383129][T11567] loop2: detected capacity change from 0 to 8 [ 322.445474][T11567] SQUASHFS error: Unable to read inode 0xe3 [ 322.584325][ T6193] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 322.741183][ T55] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 322.805877][T11577] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2105'. [ 322.908473][T11575] loop1: detected capacity change from 0 to 4096 [ 322.921198][ T55] usb 5-1: Using ep0 maxpacket: 16 [ 322.959362][ T55] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.002009][T11582] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 323.009291][ T55] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.025666][T11580] loop8: detected capacity change from 0 to 1024 [ 323.068144][T11580] EXT4-fs: inline encryption not supported [ 323.121716][T11580] EXT4-fs: Ignoring removed i_version option [ 323.125710][ T55] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 323.196465][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.216775][T11580] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.250386][ T55] usb 5-1: config 0 descriptor?? [ 323.597919][ T7929] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.687979][ T55] hid-multitouch 0003:1FD2:6007.0020: invalid report_count 33296 [ 323.688010][ T55] hid-multitouch 0003:1FD2:6007.0020: item 0 2 1 9 parsing failed [ 323.712094][ T55] hid-multitouch 0003:1FD2:6007.0020: probe with driver hid-multitouch failed with error -22 [ 323.896184][ T55] usb 5-1: USB disconnect, device number 15 [ 324.451111][T11620] netlink: 'syz.2.2124': attribute type 11 has an invalid length. [ 324.459026][T11620] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2124'. [ 324.621390][ T55] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 324.711978][T11627] netlink: 'syz.6.2127': attribute type 6 has an invalid length. [ 324.792011][T11591] loop7: detected capacity change from 0 to 32768 [ 324.817670][ T55] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 324.831312][T11591] XFS: noikeep mount option is deprecated. [ 324.841172][ T55] usb 9-1: config 0 has no interface number 0 [ 324.860122][T11591] XFS: attr2 mount option is deprecated. [ 324.872677][ T55] usb 9-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 324.914118][ T55] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.944469][ T55] usb 9-1: config 0 descriptor?? [ 324.970279][ T55] usb 9-1: selecting invalid altsetting 1 [ 325.010748][ T7083] udevd[7083]: symlink '../../loop1' '/dev/disk/by-diskseq/748.tmp-b7:1' failed: Read-only file system [ 325.020281][ T6085] udevd[6085]: symlink '../../loop6' '/dev/disk/by-diskseq/745.tmp-b7:6' failed: Read-only file system [ 325.026581][ T6119] udevd[6119]: symlink '../../loop2' '/dev/disk/by-diskseq/744.tmp-b7:2' failed: Read-only file system [ 325.042069][ T55] dvb_ttusb_budget: ttusb_init_controller: error [ 325.061282][T11591] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 325.075218][T11643] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2131'. [ 325.080169][ T55] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 325.124533][T11643] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2131'. [ 325.155263][T11155] udevd[11155]: symlink '../../loop7' '/dev/disk/by-diskseq/750.tmp-b7:7' failed: Read-only file system [ 325.192060][T11643] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2131'. [ 325.204071][T11155] udevd[11155]: symlink '../../loop7' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:7' failed: Read-only file system [ 325.270069][ T55] DVB: Unable to find symbol cx22700_attach() [ 325.354414][T11654] loop4: detected capacity change from 0 to 2048 [ 325.366288][T11591] XFS (loop7): Ending clean mount [ 325.417419][T11591] XFS (loop7): Quotacheck needed: Please wait. [ 325.418820][T11155] udevd[11155]: symlink '../../loop1' '/dev/disk/by-diskseq/748.tmp-b7:1' failed: Read-only file system [ 325.471143][T11654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.543582][ T55] DVB: Unable to find symbol tda10046_attach() [ 325.549811][ T55] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 325.560410][T11664] tipc: Invalid UDP bearer configuration [ 325.560464][T11664] tipc: Enabling of bearer rejected, failed to enable media [ 325.598206][ T5942] udevd[5942]: symlink '../../loop4' '/dev/disk/by-diskseq/751.tmp-b7:4' failed: Read-only file system [ 325.612751][ T5942] udevd[5942]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 325.633513][ T6085] udevd[6085]: symlink '../../loop7' '/dev/disk/by-diskseq/750.tmp-b7:7' failed: Read-only file system [ 325.640259][T11155] udevd[11155]: symlink '../../loop6' '/dev/disk/by-diskseq/745.tmp-b7:6' failed: Read-only file system [ 325.665979][T11591] XFS (loop7): Quotacheck: Done. [ 325.671656][ T55] usb 9-1: USB disconnect, device number 12 [ 325.922209][ T6296] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 326.015975][T11666] loop6: detected capacity change from 0 to 1024 [ 326.076081][ T3509] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 326.122798][ T3509] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 326.153547][T11666] hfsplus: bad catalog entry type [ 326.181841][ T3509] EXT4-fs (loop4): This should not happen!! Data will be lost [ 326.181841][ T3509] [ 326.201005][ T3509] EXT4-fs (loop4): Total free blocks count 0 [ 326.257431][ T3509] EXT4-fs (loop4): Free/Dirty block details [ 326.286524][ T3509] EXT4-fs (loop4): free_blocks=4096 [ 326.293459][ T3509] EXT4-fs (loop4): dirty_blocks=784 [ 326.298686][ T3509] EXT4-fs (loop4): Block reservation details [ 326.314080][T11674] loop8: detected capacity change from 0 to 512 [ 326.364131][ T3509] EXT4-fs (loop4): i_reserved_data_blocks=49 [ 326.381958][ T7997] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 513 with error 28 [ 326.405000][ T3446] hfsplus: b-tree write err: -5, ino 4 [ 326.447421][T11676] loop1: detected capacity change from 0 to 1024 [ 326.538008][T11674] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.643196][T11674] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 326.685645][T11684] openvswitch: netlink: Message has 8 unknown bytes. [ 326.719935][T11684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.851156][ T1298] hfsplus: b-tree write err: -5, ino 4 [ 326.924020][T11689] loop4: detected capacity change from 0 to 256 [ 326.995319][ T7929] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.003025][T11689] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 327.021703][T11695] loop2: detected capacity change from 0 to 256 [ 327.133498][T11695] FAT-fs (loop2): Directory bread(block 64) failed [ 327.149114][T11695] FAT-fs (loop2): Directory bread(block 65) failed [ 327.189961][T11695] FAT-fs (loop2): Directory bread(block 66) failed [ 327.242129][T11695] FAT-fs (loop2): Directory bread(block 67) failed [ 327.248992][T11695] FAT-fs (loop2): Directory bread(block 68) failed [ 327.292143][T11695] FAT-fs (loop2): Directory bread(block 69) failed [ 327.298816][T11695] FAT-fs (loop2): Directory bread(block 70) failed [ 327.363032][T11703] loop8: detected capacity change from 0 to 64 [ 327.370965][T11695] FAT-fs (loop2): Directory bread(block 71) failed [ 327.378992][T11695] FAT-fs (loop2): Directory bread(block 72) failed [ 327.395822][T11695] FAT-fs (loop2): Directory bread(block 73) failed [ 328.105822][T11723] sp0: Synchronizing with TNC [ 328.153917][ T5943] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 328.320973][ T5943] usb 9-1: Using ep0 maxpacket: 8 [ 328.350955][ T5943] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 328.395764][ T5943] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 328.431112][ T5943] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.439175][ T5943] usb 9-1: Product: syz [ 328.474186][ T5943] usb 9-1: Manufacturer: syz [ 328.478848][ T5943] usb 9-1: SerialNumber: syz [ 328.532200][ T5943] usb 9-1: config 0 descriptor?? [ 328.560368][ T5943] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 328.586232][ T5943] usb 9-1: setting power ON [ 328.590783][ T5943] dvb-usb: bulk message failed: -22 (2/0) [ 328.640727][ T5943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 328.671365][T11701] loop7: detected capacity change from 0 to 40427 [ 328.696937][ T5943] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 328.711536][T11701] F2FS-fs (loop7): build fault injection rate: 771 [ 328.730296][ T5943] usb 9-1: media controller created [ 328.787583][T11701] F2FS-fs (loop7): invalid crc value [ 328.876609][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 328.962715][ T5943] usb 9-1: selecting invalid altsetting 6 [ 329.000325][ T5943] usb 9-1: digital interface selection failed (-22) [ 329.038084][ T5943] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 329.083440][ T5943] usb 9-1: setting power OFF [ 329.088545][ T5943] dvb-usb: bulk message failed: -22 (2/0) [ 329.133003][ T5943] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 329.137755][T11701] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 329.149562][T11724] loop6: detected capacity change from 0 to 32768 [ 329.160902][ T5943] (NULL device *): no alternate interface [ 329.210556][T11701] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 329.240420][T11724] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2165 (11724) [ 329.293662][T11724] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 329.319499][T11724] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 329.389017][ T5943] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 329.450782][ T5943] usb 9-1: USB disconnect, device number 13 [ 329.634237][T11724] BTRFS info (device loop6): enabling ssd optimizations [ 329.634267][T11724] BTRFS info (device loop6): enabling free space tree [ 329.684179][T11729] loop4: detected capacity change from 0 to 32768 [ 329.869575][ T6193] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 330.036551][ T6085] udevd[6085]: symlink '../../loop4' '/dev/disk/by-diskseq/768.tmp-b7:4' failed: Read-only file system [ 330.054634][ T6085] udevd[6085]: symlink '../../loop4' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:4' failed: Read-only file system [ 330.079684][ T5942] udevd[5942]: symlink '../../loop8' '/dev/disk/by-diskseq/764.tmp-b7:8' failed: Read-only file system [ 330.199666][ T5942] udevd[5942]: symlink '../../loop2' '/dev/disk/by-diskseq/765.tmp-b7:2' failed: Read-only file system [ 330.228983][ T6119] udevd[6119]: symlink '../../loop7' '/dev/disk/by-diskseq/766.tmp-b7:7' failed: Read-only file system [ 330.243040][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 330.344389][ T5942] udevd[5942]: symlink '../../loop7' '/dev/disk/by-diskseq/766.tmp-b7:7' failed: Read-only file system [ 330.604951][T11774] loop2: detected capacity change from 0 to 128 [ 330.868686][ T7083] udevd[7083]: symlink '../../loop8' '/dev/disk/by-diskseq/764.tmp-b7:8' failed: Read-only file system [ 330.893755][ T6119] udevd[6119]: symlink '../../loop2' '/dev/disk/by-diskseq/770.tmp-b7:2' failed: Read-only file system [ 330.918333][ T5942] udevd[5942]: symlink '../../loop7' '/dev/disk/by-diskseq/769.tmp-b7:7' failed: Read-only file system [ 330.945952][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.965151][T11777] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2182'. [ 331.011460][ T10] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.025266][ T7083] udevd[7083]: symlink '../../loop8' '/dev/disk/by-diskseq/764.tmp-b7:8' failed: Read-only file system [ 331.074892][ T10] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.086414][T11777] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2182'. [ 331.161144][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 331.231102][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 331.240209][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.317501][ T10] usb 2-1: config 0 descriptor?? [ 331.335310][T11782] dummy0: entered promiscuous mode [ 331.369748][T11782] dummy0: left promiscuous mode [ 331.583100][T11789] loop6: detected capacity change from 0 to 512 [ 331.662542][T11789] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 331.673773][T11795] loop7: detected capacity change from 0 to 136 [ 331.682485][T11791] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2187'. [ 331.720974][T11791] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 331.743147][T11789] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:169: inode #17: comm syz.6.2188: inline data xattr refers to an external xattr inode [ 331.790416][T11789] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2188: couldn't read orphan inode 17 (err -117) [ 331.802673][ T10] kye 0003:0458:5015.0021: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 331.853116][ T10] kye 0003:0458:5015.0021: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.1-1/input0 [ 331.898892][T11789] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.969822][ T10] kye 0003:0458:5015.0021: tablet-enabling feature report not found [ 332.011133][ T10] kye 0003:0458:5015.0021: tablet enabling failed [ 332.032583][T11789] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 332.076513][ T10] usb 2-1: USB disconnect, device number 14 [ 332.126075][T11806] syz.2.2193 (11806): drop_caches: 4 [ 332.243645][T11799] fido_id[11799]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 332.356574][ T6193] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.501691][T11814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2199'. [ 332.782692][T11824] netlink: 'syz.1.2202': attribute type 10 has an invalid length. [ 332.930956][ T5957] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 333.121884][ T5957] usb 8-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 333.140937][ T5957] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.153124][ T5957] usb 8-1: Product: syz [ 333.157314][ T5957] usb 8-1: Manufacturer: syz [ 333.170955][ T5957] usb 8-1: SerialNumber: syz [ 333.192678][ T5957] r8152-cfgselector 8-1: Unknown version 0x0000 [ 333.199127][ T5957] r8152-cfgselector 8-1: config 0 descriptor?? [ 333.627008][ T9] r8152-cfgselector 8-1: USB disconnect, device number 12 [ 333.741724][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2213'. [ 333.774883][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2213'. [ 333.823060][T11850] macvlan2: entered promiscuous mode [ 334.089739][T11846] loop4: detected capacity change from 0 to 32768 [ 334.176913][T11854] netlink: 'syz.8.2216': attribute type 1 has an invalid length. [ 334.196701][T11854] netlink: 184 bytes leftover after parsing attributes in process `syz.8.2216'. [ 334.240231][T11846] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 334.255386][T11854] netlink: 'syz.8.2216': attribute type 1 has an invalid length. [ 334.268446][T11858] netlink: 47 bytes leftover after parsing attributes in process `syz.1.2217'. [ 334.490249][T11862] loop1: detected capacity change from 0 to 4096 [ 334.510317][ T5868] ocfs2: Unmounting device (7,4) on (node local) [ 334.607718][T11865] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 334.730793][T11848] loop2: detected capacity change from 0 to 32768 [ 334.934513][T11848] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 335.024867][T11869] loop4: detected capacity change from 0 to 4096 [ 335.062651][T11848] (syz.2.2214,11848,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 335.093410][T11155] udevd[11155]: symlink '../../loop1' '/dev/disk/by-diskseq/782.tmp-b7:1' failed: Read-only file system [ 335.102104][ T6119] udevd[6119]: symlink '../../loop8' '/dev/disk/by-diskseq/764.tmp-b7:8' failed: Read-only file system [ 335.117204][T11869] NILFS (loop4): invalid segment: Checksum error in segment payload [ 335.150464][T11869] NILFS (loop4): trying rollback from an earlier position [ 335.233066][T11869] NILFS (loop4): recovery complete [ 335.259747][ T5942] udevd[5942]: symlink '../../loop2' '/dev/disk/by-diskseq/780.tmp-b7:2' failed: Read-only file system [ 335.280936][T11881] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 335.308587][T11155] udevd[11155]: symlink '../../loop7' '/dev/disk/by-diskseq/776.tmp-b7:7' failed: Read-only file system [ 335.347007][ T5942] udevd[5942]: symlink '../../loop2' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:2' failed: Read-only file system [ 335.359683][T11884] loop1: detected capacity change from 0 to 256 [ 335.392849][ T5878] ocfs2: Unmounting device (7,2) on (node local) [ 335.465591][T11155] udevd[11155]: symlink '../../loop1' '/dev/disk/by-diskseq/784.tmp-b7:1' failed: Read-only file system [ 335.481030][T11884] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 335.503551][ T6085] udevd[6085]: symlink '../../loop2' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:4' failed: Read-only file system [ 335.537442][ T6119] udevd[6119]: symlink '../../loop8' '/dev/disk/by-diskseq/764.tmp-b7:8' failed: Read-only file system [ 335.553309][T11155] udevd[11155]: symlink '../../loop1' '/dev/disk/by-uuid/1234-1234.tmp-b7:1' failed: Read-only file system [ 335.588972][ T6085] udevd[6085]: symlink '../../loop4' '/dev/disk/by-diskseq/778.tmp-b7:4' failed: Read-only file system [ 336.189569][T11900] loop4: detected capacity change from 0 to 1024 [ 336.191208][T11905] loop6: detected capacity change from 0 to 512 [ 336.281858][T11900] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 336.341174][T11900] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 336.351898][T11900] System zones: 0-1, 3-36 [ 336.405349][T11905] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.468873][T11900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.471533][T11905] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.585060][T11919] loop1: detected capacity change from 0 to 256 [ 336.763969][T11919] FAT-fs (loop1): Directory bread(block 64) failed [ 336.770551][T11919] FAT-fs (loop1): Directory bread(block 65) failed [ 336.837627][T11919] FAT-fs (loop1): Directory bread(block 66) failed [ 336.853617][T11919] FAT-fs (loop1): Directory bread(block 67) failed [ 336.890648][ T5868] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.899194][T11919] FAT-fs (loop1): Directory bread(block 68) failed [ 336.928324][ T6193] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.961765][T11919] FAT-fs (loop1): Directory bread(block 69) failed [ 336.982166][T11919] FAT-fs (loop1): Directory bread(block 70) failed [ 336.988745][T11919] FAT-fs (loop1): Directory bread(block 71) failed [ 337.033140][T11919] FAT-fs (loop1): Directory bread(block 72) failed [ 337.066105][T11919] FAT-fs (loop1): Directory bread(block 73) failed [ 337.344542][T11935] loop4: detected capacity change from 0 to 16 [ 337.422166][T11935] erofs (device loop4): mounted with root inode @ nid 36. [ 337.760332][T11947] loop8: detected capacity change from 0 to 128 [ 337.784103][T11948] loop4: detected capacity change from 0 to 256 [ 337.831637][T11903] loop7: detected capacity change from 0 to 40427 [ 337.843864][T11948] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 337.859685][T11903] F2FS-fs: heap/no_heap options were deprecated [ 337.902375][T11948] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 337.919379][T11903] F2FS-fs: heap/no_heap options were deprecated [ 337.977903][T11948] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x43c9847d, utbl_chksum : 0xe619d30d) [ 337.978919][T11903] F2FS-fs (loop7): invalid crc value [ 338.026793][T11954] loop2: detected capacity change from 0 to 256 [ 338.232216][T11954] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 338.396928][T11954] overlay: filesystem on ./file0 not supported [ 338.527729][T11903] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 338.621068][T11903] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 338.835965][ T30] audit: type=1800 audit(1758750116.745:80): pid=11903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2236" name="bus" dev="loop7" ino=10 res=0 errno=0 [ 338.880838][T11903] syz.7.2236: attempt to access beyond end of device [ 338.880838][T11903] loop7: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 339.070328][T11984] loop2: detected capacity change from 0 to 256 [ 339.143353][ T6296] syz-executor: attempt to access beyond end of device [ 339.143353][ T6296] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 339.193542][T11984] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 339.219219][ T6296] CPU: 1 UID: 0 PID: 6296 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 339.219251][ T6296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 339.219266][ T6296] Call Trace: [ 339.219275][ T6296] [ 339.219289][ T6296] dump_stack_lvl+0x189/0x250 [ 339.219327][ T6296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.219357][ T6296] ? __pfx_queue_work_on+0x10/0x10 [ 339.219382][ T6296] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 339.219427][ T6296] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 339.219478][ T6296] f2fs_handle_critical_error+0x37c/0x540 [ 339.219522][ T6296] f2fs_write_end_io+0x886/0xb60 [ 339.219569][ T6296] __submit_merged_bio+0x27a/0x6a0 [ 339.219612][ T6296] __submit_merged_write_cond+0x255/0x530 [ 339.219656][ T6296] f2fs_write_data_pages+0x261d/0x3000 [ 339.219681][ T6296] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.219747][ T6296] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 339.219785][ T6296] ? arch_stack_walk+0xfc/0x150 [ 339.219847][ T6296] ? __mod_zone_page_state+0xd7/0x140 [ 339.219892][ T6296] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.219918][ T6296] ? folios_put_refs+0x560/0x640 [ 339.219960][ T6296] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.219986][ T6296] ? __lock_acquire+0xab9/0xd20 [ 339.220032][ T6296] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.220060][ T6296] ? do_raw_spin_lock+0x121/0x290 [ 339.220097][ T6296] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.220129][ T6296] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.220155][ T6296] ? do_raw_spin_unlock+0x122/0x240 [ 339.220186][ T6296] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 339.220212][ T6296] do_writepages+0x32e/0x550 [ 339.220251][ T6296] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.220282][ T6296] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.220309][ T6296] ? do_raw_spin_unlock+0x122/0x240 [ 339.220345][ T6296] filemap_fdatawrite+0x199/0x240 [ 339.220380][ T6296] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 339.220468][ T6296] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.220501][ T6296] ? do_raw_spin_unlock+0x122/0x240 [ 339.220537][ T6296] f2fs_sync_dirty_inodes+0x31f/0x830 [ 339.220583][ T6296] f2fs_write_checkpoint+0x95a/0x1df0 [ 339.220639][ T6296] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 339.220720][ T6296] ? kill_f2fs_super+0x298/0x6c0 [ 339.220752][ T6296] kill_f2fs_super+0x2c3/0x6c0 [ 339.220786][ T6296] ? __pfx_kill_f2fs_super+0x10/0x10 [ 339.220810][ T6296] ? radix_tree_delete_item+0x2b6/0x400 [ 339.220842][ T6296] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.220874][ T6296] ? shrinker_free+0x2ce/0x3e0 [ 339.220905][ T6296] deactivate_locked_super+0xbc/0x130 [ 339.220938][ T6296] cleanup_mnt+0x425/0x4c0 [ 339.220965][ T6296] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.220992][ T6296] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.221021][ T6296] task_work_run+0x1d4/0x260 [ 339.221059][ T6296] ? __pfx_task_work_run+0x10/0x10 [ 339.221088][ T6296] ? __x64_sys_umount+0x122/0x160 [ 339.221128][ T6296] ? exit_to_user_mode_loop+0x40/0x110 [ 339.221169][ T6296] exit_to_user_mode_loop+0xec/0x110 [ 339.221205][ T6296] do_syscall_64+0x2bd/0x3b0 [ 339.221231][ T6296] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.221256][ T6296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.221278][ T6296] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.221305][ T6296] ? exc_page_fault+0x9f/0xf0 [ 339.221333][ T6296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.221356][ T6296] RIP: 0033:0x7f5f4df901f7 [ 339.221378][ T6296] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 339.221405][ T6296] RSP: 002b:00007ffe0288de38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 339.221431][ T6296] RAX: 0000000000000000 RBX: 00007f5f4e011d7d RCX: 00007f5f4df901f7 [ 339.221448][ T6296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0288def0 [ 339.221464][ T6296] RBP: 00007ffe0288def0 R08: 0000000000000000 R09: 0000000000000000 [ 339.221479][ T6296] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe0288ef80 [ 339.221496][ T6296] R13: 00007f5f4e011d7d R14: 0000000000052c04 R15: 00007ffe0288efc0 [ 339.221534][ T6296] [ 339.668605][ T6296] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 339.845248][T11987] loop6: detected capacity change from 0 to 32768 [ 339.871661][ T5943] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 340.020941][ T5943] usb 2-1: Using ep0 maxpacket: 16 [ 340.028243][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 340.040189][ T5943] usb 2-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 340.062352][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.077269][ T5943] usb 2-1: config 0 descriptor?? [ 340.096083][T11987] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 340.195527][T11987] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 340.207888][ T6085] udevd[6085]: symlink '../../loop4' '/dev/disk/by-diskseq/801.tmp-b7:4' failed: Read-only file system [ 340.248680][ T6119] udevd[6119]: symlink '../../loop2' '/dev/disk/by-diskseq/804.tmp-b7:2' failed: Read-only file system [ 340.358290][T11155] udevd[11155]: symlink '../../loop6' '/dev/disk/by-diskseq/805.tmp-b7:6' failed: Read-only file system [ 340.378928][T11155] udevd[11155]: symlink '../../loop6' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:6' failed: Read-only file system [ 340.498817][T11155] udevd[11155]: symlink '../../loop8' '/dev/disk/by-diskseq/800.tmp-b7:8' failed: Read-only file system [ 340.530093][ T5943] hid-rmi 0003:1532:011D.0022: unknown global tag 0xc [ 340.546411][ T5942] udevd[5942]: symlink '../../loop4' '/dev/disk/by-diskseq/801.tmp-b7:4' failed: Read-only file system [ 340.555879][T12008] loop8: detected capacity change from 0 to 256 [ 340.584270][ T5943] hid-rmi 0003:1532:011D.0022: item 0 4 1 12 parsing failed [ 340.608824][T12012] loop2: detected capacity change from 0 to 512 [ 340.624217][ T6119] udevd[6119]: symlink '../../loop7' '/dev/disk/by-diskseq/798.tmp-b7:7' failed: Read-only file system [ 340.637478][ T5943] hid-rmi 0003:1532:011D.0022: parse failed [ 340.663769][ T5943] hid-rmi 0003:1532:011D.0022: probe with driver hid-rmi failed with error -22 [ 340.681319][T12012] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 340.692627][ T6193] ocfs2: Unmounting device (7,6) on (node local) [ 340.746292][ T5942] udevd[5942]: symlink '../../loop7' '/dev/disk/by-diskseq/798.tmp-b7:7' failed: Read-only file system [ 340.758016][ T6085] udevd[6085]: symlink '../../loop6' '/dev/disk/by-diskseq/805.tmp-b7:6' failed: Read-only file system [ 340.760008][ T6085] udevd[6085]: symlink '../../loop6' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:6' failed: Read-only file system [ 340.776088][ T5943] usb 2-1: USB disconnect, device number 15 [ 340.841797][T12008] exFAT-fs (loop8): start_clu is invalid cluster(0x400) [ 340.934936][T12012] EXT4-fs (loop2): 1 truncate cleaned up [ 340.977442][T12012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.029095][T12019] loop4: detected capacity change from 0 to 256 [ 341.132172][T12019] exfat: Deprecated parameter 'namecase' [ 341.199724][T12019] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 341.217507][T12023] sch_fq: defrate 4294967295 ignored. [ 341.245752][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.666122][T12035] usb usb8: usbfs: process 12035 (syz.1.2297) did not claim interface 7 before use [ 341.776769][T12041] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2296'. [ 341.854604][T12037] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2296'. [ 342.014482][T12048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2302'. [ 342.027751][T12050] loop2: detected capacity change from 0 to 128 [ 342.035585][T12048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2302'. [ 342.082964][T12050] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 342.129824][T12046] loop4: detected capacity change from 0 to 4096 [ 342.196004][T12050] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 342.250470][T12058] loop6: detected capacity change from 0 to 64 [ 342.288856][T12060] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 342.311028][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 342.325081][T12050] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 342.450245][T12062] loop8: detected capacity change from 0 to 256 [ 342.483853][ T9] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 342.507017][ T9] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 342.560714][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 342.582405][ T3446] ------------[ cut here ]------------ [ 342.587920][ T3446] kernel BUG at fs/hfs/inode.c:444! [ 342.602141][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 342.602265][ T5878] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 342.617039][ T3446] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 342.628814][ T3446] CPU: 0 UID: 0 PID: 3446 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 342.638271][ T3446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 342.648320][ T3446] Workqueue: writeback wb_workfn (flush-7:6) [ 342.654313][ T3446] RIP: 0010:hfs_write_inode+0x7c8/0x7d0 [ 342.659849][ T3446] Code: c1 40 72 b0 99 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 40 72 b0 99 e8 93 0e 88 ff e9 6c fe ff ff e8 49 91 24 ff 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 342.679448][ T3446] RSP: 0018:ffffc9000be97180 EFLAGS: 00010293 [ 342.685513][ T3446] RAX: ffffffff829b1c47 RBX: ffff888065eac298 RCX: ffff888030568000 [ 342.693478][ T3446] RDX: 0000000000000000 RSI: ffffffff8e360240 RDI: 0000000000000000 [ 342.701437][ T3446] RBP: ffffc9000be97310 R08: ffff888030568000 R09: 0000000000000003 [ 342.709395][ T3446] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 342.717354][ T3446] R13: 1ffff920017d2e34 R14: ffff888065eac258 R15: 0000000000000000 [ 342.725318][ T3446] FS: 0000000000000000(0000) GS:ffff888125c12000(0000) knlGS:0000000000000000 [ 342.734239][ T3446] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.740811][ T3446] CR2: 000055558ca5b5c8 CR3: 0000000074046000 CR4: 0000000000350ef0 [ 342.748775][ T3446] Call Trace: [ 342.752044][ T3446] [ 342.754959][ T3446] ? __pfx_hfs_write_inode+0x10/0x10 [ 342.760244][ T3446] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.765871][ T3446] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.771505][ T3446] __writeback_single_inode+0x6f1/0xff0 [ 342.777058][ T3446] writeback_sb_inodes+0x6c7/0x1010 [ 342.782265][ T3446] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 342.787913][ T3446] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.793541][ T3446] ? rcu_is_watching+0x15/0xb0 [ 342.798294][ T3446] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.803922][ T3446] wb_writeback+0x43b/0xaf0 [ 342.808426][ T3446] ? queue_io+0x381/0x590 [ 342.812751][ T3446] ? __pfx_wb_writeback+0x10/0x10 [ 342.817772][ T3446] ? _raw_spin_unlock_irq+0x23/0x50 [ 342.822978][ T3446] wb_workfn+0x409/0xef0 [ 342.827247][ T3446] ? __pfx_wb_workfn+0x10/0x10 [ 342.832002][ T3446] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.837627][ T3446] ? __lock_acquire+0xab9/0xd20 [ 342.842482][ T3446] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.848105][ T3446] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.853729][ T3446] ? _raw_spin_unlock_irq+0x23/0x50 [ 342.858934][ T3446] ? process_scheduled_works+0x9ef/0x17b0 [ 342.864642][ T3446] ? process_scheduled_works+0x9ef/0x17b0 [ 342.870349][ T3446] process_scheduled_works+0xae1/0x17b0 [ 342.875898][ T3446] ? __pfx_process_scheduled_works+0x10/0x10 [ 342.881874][ T3446] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.887524][ T3446] worker_thread+0x8a0/0xda0 [ 342.892237][ T3446] kthread+0x711/0x8a0 [ 342.896313][ T3446] ? __pfx_worker_thread+0x10/0x10 [ 342.901416][ T3446] ? __pfx_kthread+0x10/0x10 [ 342.906003][ T3446] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.911629][ T3446] ? _raw_spin_unlock_irq+0x23/0x50 [ 342.916835][ T3446] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.922463][ T3446] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.927655][ T3446] ? __pfx_kthread+0x10/0x10 [ 342.932241][ T3446] ret_from_fork+0x439/0x7d0 [ 342.936826][ T3446] ? __pfx_ret_from_fork+0x10/0x10 [ 342.941930][ T3446] ? __switch_to_asm+0x39/0x70 [ 342.946688][ T3446] ? __switch_to_asm+0x33/0x70 [ 342.951449][ T3446] ? __pfx_kthread+0x10/0x10 [ 342.956032][ T3446] ret_from_fork_asm+0x1a/0x30 [ 342.960803][ T3446] [ 342.963805][ T3446] Modules linked in: [ 342.967795][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.974441][ T3446] ---[ end trace 0000000000000000 ]--- [ 342.979936][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 343.002313][ T3446] RIP: 0010:hfs_write_inode+0x7c8/0x7d0 [ 343.011054][ T9] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 343.030557][ T9] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 343.053141][T12062] FAT-fs (loop8): Directory bread(block 64) failed [ 343.059740][T12062] FAT-fs (loop8): Directory bread(block 65) failed [ 343.066556][ T9] usb 8-1: Product: syz [ 343.070739][ T9] usb 8-1: Manufacturer: syz [ 343.090185][T12062] FAT-fs (loop8): Directory bread(block 66) failed [ 343.099796][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 343.119807][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 343.122898][T12062] FAT-fs (loop8): Directory bread(block 67) failed [ 343.126906][ T3446] Code: c1 40 72 b0 99 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 40 72 b0 99 e8 93 0e 88 ff e9 6c fe ff ff e8 49 91 24 ff 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 343.151239][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.166059][T12062] FAT-fs (loop8): Directory bread(block 68) failed [ 343.182447][ T9] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 343.188412][ T9] cdc_wdm 8-1:1.0: Unknown control protocol [ 343.188583][T12062] FAT-fs (loop8): Directory bread(block 69) failed [ 343.209046][ T3446] RSP: 0018:ffffc9000be97180 EFLAGS: 00010293 [ 343.209081][ T3446] RAX: ffffffff829b1c47 RBX: ffff888065eac298 RCX: ffff888030568000 [ 343.209101][ T3446] RDX: 0000000000000000 RSI: ffffffff8e360240 RDI: 0000000000000000 [ 343.209119][ T3446] RBP: ffffc9000be97310 R08: ffff888030568000 R09: 0000000000000003 [ 343.209138][ T3446] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 343.209155][ T3446] R13: 1ffff920017d2e34 R14: ffff888065eac258 R15: 0000000000000000 [ 343.209177][ T3446] FS: 0000000000000000(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 343.209198][ T3446] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.209215][ T3446] CR2: 0000200000002640 CR3: 000000000df36000 CR4: 0000000000350ef0 [ 343.209238][ T3446] Kernel panic - not syncing: Fatal exception [ 343.209519][ T3446] Kernel Offset: disabled