last executing test programs: 7m19.167586823s ago: executing program 32 (id=2194): r0 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000000000)=[{r0, 0x1000}], 0x1, 0xf45) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) 5m40.065090427s ago: executing program 33 (id=3121): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xfffe, r1, &(0x7f00000001c0)='m', 0x1}]) 3m14.511210267s ago: executing program 7 (id=4584): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000006100)='./file0\x00', 0xc, &(0x7f0000000080)=ANY=[], 0xff, 0x1c3, &(0x7f0000000380)="$eJzsmL+LE0EUx78z2eyyVtqKoGDAWLjZ3agIIpgqhY3gL2zEYNYQ3RhJtjABIdr5Z1hbib1YWGon2OrBwTVXXnHVHDM7dzu5JHuXkKS4e5/i5fvevnmz83bzAgFBEKeWjf87/95/2jzHgZGLEhwd3ypkOdzI7329V77wux58f/bz9t9v9T+H610CIMTx95e1f9QKSLQvxPjqkv58CI4SXKUfgeOqjj8Bg6f1c3A81joCw1OtXxm6K/M972U7jrwX3bgphS9NIE0oTdXc3wKw/YGhadwfA1DUfn8wfN2I46g3KezZl+YTef1T91fjuAMI/ciE+bz2e+Or/qUE4AiU+mVVwfBAx2/B0b3hE+c/b2XnN16NvPMvU8h25+a4WNnuFhZfviuEWEd/Tr7AKBUOskt8Xa/faoT8/qygsnCWWZAtujybH+IzwxVjflrG/Kgknbd3+4PhtXan0Ypa0ZswrN70r/v+jbCiZnNqc+afq+bTGaN+cUauzWy8ayRJL0jtgR+mdtrEtdX84yhfVi6bVlcFzzL504dyYUYSQRAEQRAEQRAEQRAEQRDE/Hz8MuZeBFP/gh5BeF9l7wUAAP//OahwBA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0x0, 0x13}) 3m14.123289215s ago: executing program 2 (id=4588): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f00000002c0)=[r1, r2, r1], 0x3}) 3m14.047545126s ago: executing program 7 (id=4590): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x3}, 0x2) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 3m13.843010123s ago: executing program 2 (id=4591): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) 3m13.70883118s ago: executing program 3 (id=4593): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00080000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) setfsgid(0x0) 3m13.474484796s ago: executing program 2 (id=4595): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x62) waitid(0x0, r0, 0x0, 0x2100000c, 0x0) 3m13.342120426s ago: executing program 3 (id=4596): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001a00010000001200000000001c140000003a"], 0x30}}, 0x6084) 3m13.113046669s ago: executing program 3 (id=4599): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x13, 0x0, 0x3f00, 0x0, 0x0, 0x0}) 3m13.052947529s ago: executing program 2 (id=4601): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000040)={[{@huge_within_size}, {@noswap}]}) 3m12.883003442s ago: executing program 7 (id=4604): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 3m12.821294883s ago: executing program 3 (id=4605): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1000, 0x4, 0x10000000, 0xc}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m12.765312988s ago: executing program 4 (id=4606): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0x12, 0x39, 0x0, 0x0}) 3m12.662654474s ago: executing program 2 (id=4608): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x24}}, 0x0) 3m12.595373742s ago: executing program 3 (id=4609): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000140)={[{@umask={'umask', 0x3d, 0xe}}, {@force}, {}, {@nobarrier}, {@force}, {@umask={'umask', 0x3d, 0x6}}, {@nls={'nls', 0x3d, 'cp855'}}]}, 0x44, 0x6ff, &(0x7f0000001200)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3m12.496053245s ago: executing program 4 (id=4611): syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000000)='./file2\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0x1, 0x1af, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x8000c61) 3m12.368746285s ago: executing program 2 (id=4613): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m12.283092044s ago: executing program 7 (id=4615): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080)={[{@delalloc}, {@errors_remount}]}, 0x81, 0x7d2, &(0x7f00000007c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x800, 0xc5) truncate(&(0x7f0000000300)='./file3\x00', 0x5c00) 3m12.103422962s ago: executing program 4 (id=4616): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000100)="83", 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000200)=""/49, &(0x7f0000000080)=0x4) 3m12.072786807s ago: executing program 3 (id=4617): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20004000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) 3m11.881699859s ago: executing program 4 (id=4619): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) pivot_root(0x0, 0x0) 3m11.574749943s ago: executing program 7 (id=4621): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x40) 3m11.496431072s ago: executing program 4 (id=4624): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400, &(0x7f0000000300)={[{@force}, {@barrier}, {@uid}, {@gid={'gid', 0x3d, 0xee01}}, {@nls={'nls', 0x3d, 'macroman'}}, {}, {@force}, {@umask={'umask', 0x3d, 0x399}}, {@type={'type', 0x3d, "3562f949"}}]}, 0x3, 0x6b3, &(0x7f0000000780)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3m11.139060393s ago: executing program 7 (id=4627): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_DST={0x8}, @RTA_SRC={0x8, 0x2, @rand_addr=0x64010100}]}, 0x2c}}, 0x0) 3m11.0363704s ago: executing program 4 (id=4628): r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) 1m56.993410681s ago: executing program 34 (id=4626): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8ea9, 0xfffd, {0x0, 0x5}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0xb}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1m56.795798906s ago: executing program 35 (id=4625): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0xf4, r1, 0xe701ac47a3d23ecd, 0x70bd27, 0x25dfdc00, {}, [@NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0xf4}}, 0x800) 1m56.564471351s ago: executing program 36 (id=4613): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m56.383422499s ago: executing program 37 (id=4617): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20004000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) 1m56.211085414s ago: executing program 38 (id=4628): r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) 1m56.012987582s ago: executing program 39 (id=4627): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_DST={0x8}, @RTA_SRC={0x8, 0x2, @rand_addr=0x64010100}]}, 0x2c}}, 0x0) 17.269794606s ago: executing program 5 (id=5331): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000004ec0)={0xa, 0x4e20, 0x2, @mcast1, 0x4}, 0x1c) 17.031249098s ago: executing program 5 (id=5335): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) fcntl$addseals(r0, 0x409, 0x3f) 16.689246346s ago: executing program 5 (id=5342): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0xfea5, 0x200000000004}]) 15.868839483s ago: executing program 5 (id=5346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 15.431465639s ago: executing program 5 (id=5350): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 15.272631913s ago: executing program 5 (id=5352): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c000000", @ANYBLOB="0003abf2f60001002f0000020000", @ANYBLOB="2000178004000500040005000400050004"], 0x9c}}, 0x4004010) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 3.69051203s ago: executing program 8 (id=5454): prlimit64(0x0, 0x8, &(0x7f0000002000)={0x0, 0x9}, 0x0) r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 3.343301777s ago: executing program 8 (id=5457): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r0, 0x540b, 0x2) 3.253462284s ago: executing program 6 (id=5458): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743d170ddbbba28854f76e642c756d61736b3d30303030303030303030303030303030303030303030362c696f636861727365743d63703934392c6572726f72733d72656d6f756e742d726f2c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000000003,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,discard,errors=continue,\x00'], 0x5, 0x1510, &(0x7f00000037c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3.119490576s ago: executing program 9 (id=5459): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000000)={0x64, r1, 0x1, 0x70bd2d, 0x65dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.095155294s ago: executing program 9 (id=5460): r0 = fsopen(&(0x7f0000000400)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x7, 0x0, r0, 0x0, 0x0, 0x446, 0x0, 0x2}]) 2.272386184s ago: executing program 9 (id=5468): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x2, 0x1, 0x0, 0x5, 0x0}) 2.156456254s ago: executing program 6 (id=5470): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r0}, 0x18) faccessat2(0xffffffffffffffff, 0x0, 0x2, 0x0) 1.906822894s ago: executing program 8 (id=5471): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, r1, 0x31f, 0xffffffff, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x440d0}, 0x0) 1.9060842s ago: executing program 1 (id=5472): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=@raw=[@generic={0x0, 0x2, 0x8, 0x101, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x400}, @exit, @exit, @alu={0x4, 0x0, 0x1, 0x8, 0x5, 0x30, 0xffffffffffffffff}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0x4, 0xb, 0xa, 0xffffffffffffffff}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0xfffffffe}, 0xc3) 1.896047979s ago: executing program 6 (id=5473): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.828345898s ago: executing program 9 (id=5474): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) 1.590035788s ago: executing program 8 (id=5475): syz_mount_image$jfs(&(0x7f0000000380), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2208088, &(0x7f0000001980)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYRES8, @ANYRESOCT=0x0, @ANYRES32=0x0], 0x1, 0x5eaa, &(0x7f000000bcc0)="$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") symlink(&(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.576381819s ago: executing program 1 (id=5476): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 1.531513993s ago: executing program 6 (id=5477): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000000)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000100)=0x10) 1.402508577s ago: executing program 0 (id=5478): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e22, @broadcast}, 0x10) getsockname$packet(r0, 0x0, &(0x7f00000002c0)) 1.320817154s ago: executing program 1 (id=5479): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 1.167424046s ago: executing program 0 (id=5480): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback={0x2}}, 0x1c) 1.131881311s ago: executing program 6 (id=5481): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12"], 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 1.031549414s ago: executing program 1 (id=5482): capset(&(0x7f0000001680)={0x20071026}, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x10001, 0xf}) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e1d, 0x280000, @dev={0xfe, 0x80, '\x00', 0x19}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4000010) 925.007999ms ago: executing program 0 (id=5483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x10001}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 763.471541ms ago: executing program 1 (id=5484): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x200000, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, 0x0, 0x0}, 0x20) 715.944428ms ago: executing program 0 (id=5485): r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x8, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 532.697978ms ago: executing program 1 (id=5486): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYBLOB="23341129bfb4fcc388a80c49b4f4d96254cb9356759776b03b581050240d2d9a5cf3440e76c886f1e5c860656a3648101223fc288fc5274f0e609cfed0fc738d84eb544791dd1cb959421db9fbcb634df876aa2133fd62e245fb6b1ead07ca04772d78564af8f42015e5be557ab3bd60824768691005cbd3d295402693d934226595deeba1ff748b7dde9c617749aa38096ef667700a6b3668cb7296b024fbcf9f74e50bf0f834159f51737baac184f94dd13a9793b76946208f290637d8def94e5f56f1181da3eed500440f", @ANYRES32=0x0, @ANYRES16, @ANYRES16], 0x11, 0x2d2, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x101042, 0x186) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 435.445348ms ago: executing program 0 (id=5487): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0xffe}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e008d2a2abd7000fbdbdf250a00", @ANYRES32=0x0, @ANYBLOB="000014"], 0x24}}, 0x0) 29.109322ms ago: executing program 40 (id=5352): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c000000", @ANYBLOB="0003abf2f60001002f0000020000", @ANYBLOB="2000178004000500040005000400050004"], 0x9c}}, 0x4004010) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 0s ago: executing program 0 (id=5489): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x11}, @hci_ev_le_direct_adv_info={{}, {0x8, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xf7}}}}, 0x14) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x400100) kernel console output (not intermixed with test programs): lave_1) entered forwarding state [ 669.470849][T17821] ERROR: (device loop5): remounting filesystem as read-only [ 669.507681][T17821] jfs_create: dtInsert returned -EIO [ 669.527876][T17647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.535095][T17821] ERROR: (device loop5): jfs_create: [ 669.535095][T17821] [ 669.633114][T17661] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.664317][ T4001] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.671485][ T4001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.686683][T17816] udevd[17816]: symlink '../../loop5' '/dev/disk/by-diskseq/1434.tmp-b7:5' failed: Read-only file system [ 669.719765][T17816] udevd[17816]: symlink '../../loop5' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:5' failed: Read-only file system [ 669.728172][T17659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 669.787345][ T4001] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.794537][ T4001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.925166][T17816] udevd[17816]: symlink '../../loop5' '/dev/disk/by-diskseq/1434.tmp-b7:5' failed: Read-only file system [ 669.971654][T17816] udevd[17816]: symlink '../../loop5' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:5' failed: Read-only file system [ 670.021235][T17657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 670.205912][T17646] veth0_vlan: entered promiscuous mode [ 670.267153][T17661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 670.352544][T17646] veth1_vlan: entered promiscuous mode [ 670.629537][T17854] netlink: 5064 bytes leftover after parsing attributes in process `syz.5.4663'. [ 670.705222][T17646] veth0_macvtap: entered promiscuous mode [ 670.718251][T17816] udevd[17816]: symlink '../../loop5' '/dev/disk/by-diskseq/1434.tmp-b7:5' failed: Read-only file system [ 670.758278][T17647] veth0_vlan: entered promiscuous mode [ 670.814470][T17646] veth1_macvtap: entered promiscuous mode [ 670.835117][T17816] udevd[17816]: symlink '../../loop5' '/dev/disk/by-diskseq/1434.tmp-b7:5' failed: Read-only file system [ 670.887843][T17659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.915149][T17816] udevd[17816]: symlink '../../loop5' '/dev/disk/by-diskseq/1435.tmp-b7:5' failed: Read-only file system [ 670.944718][T17647] veth1_vlan: entered promiscuous mode [ 671.024157][T17816] udevd[17816]: symlink '../../loop5' '/dev/disk/by-diskseq/1435.tmp-b7:5' failed: Read-only file system [ 671.075769][T17646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.138112][T17646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.200049][T17646] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.209711][T17646] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.221942][T17646] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.233613][T17646] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.289290][T17647] veth0_macvtap: entered promiscuous mode [ 671.333703][T17657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.380802][T17659] veth0_vlan: entered promiscuous mode [ 671.402229][T17661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.410768][T17647] veth1_macvtap: entered promiscuous mode [ 671.453586][T17659] veth1_vlan: entered promiscuous mode [ 671.464115][ T13] IPVS: stop unused estimator thread 0... [ 671.488691][ T13] IPVS: stop unused estimator thread 0... [ 671.498174][ T13] IPVS: stop unused estimator thread 0... [ 671.663853][T17647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.693935][T17647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.774882][T17659] veth0_macvtap: entered promiscuous mode [ 671.843531][T17647] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.868465][T17647] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.878441][T17647] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.887145][T17647] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.963310][T17659] veth1_macvtap: entered promiscuous mode [ 671.997820][T17661] veth0_vlan: entered promiscuous mode [ 672.073389][T17637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.092449][T17661] veth1_vlan: entered promiscuous mode [ 672.110772][T17637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.167327][T17659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.231667][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.265612][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.293604][T17659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.340940][T17659] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.351357][T17659] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.368009][T17659] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.377482][T17659] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.396267][T17657] veth0_vlan: entered promiscuous mode [ 672.440703][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.464811][T17661] veth0_macvtap: entered promiscuous mode [ 672.488109][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.564758][T17661] veth1_macvtap: entered promiscuous mode [ 672.593533][ T30] audit: type=1326 audit(1752148766.637:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17876 comm="syz.8.4629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff298e929 code=0x7ffc0000 [ 672.605788][T17657] veth1_vlan: entered promiscuous mode [ 672.654417][ T30] audit: type=1326 audit(1752148766.637:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17876 comm="syz.8.4629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff298e929 code=0x7ffc0000 [ 672.695205][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.703611][ T30] audit: type=1326 audit(1752148766.677:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17876 comm="syz.8.4629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ff298e929 code=0x7ffc0000 [ 672.725968][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.762818][T17661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.786586][ T30] audit: type=1326 audit(1752148766.677:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17876 comm="syz.8.4629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff298e929 code=0x7ffc0000 [ 672.878779][ T30] audit: type=1326 audit(1752148766.677:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17876 comm="syz.8.4629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff298e929 code=0x7ffc0000 [ 672.911968][T17661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.928526][ T4001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.940613][T17661] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.957209][ T30] audit: type=1326 audit(1752148766.677:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17876 comm="syz.8.4629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f6ff298e929 code=0x7ffc0000 [ 672.964835][ T4001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.008130][T17874] loop5: detected capacity change from 0 to 32768 [ 673.015267][T17661] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.032165][T17661] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.039202][ T30] audit: type=1326 audit(1752148766.677:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17876 comm="syz.8.4629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff298e929 code=0x7ffc0000 [ 673.051794][T17874] btrfs: Deprecated parameter 'usebackuproot' [ 673.068823][ T30] audit: type=1326 audit(1752148766.677:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17876 comm="syz.8.4629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff298e929 code=0x7ffc0000 [ 673.082862][T17661] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.136574][T17874] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 673.148068][T17874] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4666 (17874) [ 673.164351][T17657] veth0_macvtap: entered promiscuous mode [ 673.239619][T17874] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 673.275017][T17816] udevd[17816]: symlink '../../loop5' '/dev/disk/by-diskseq/1436.tmp-b7:5' failed: Read-only file system [ 673.289149][T17874] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 673.301272][T17657] veth1_macvtap: entered promiscuous mode [ 673.308597][T17874] BTRFS info (device loop5): using free-space-tree [ 673.338357][T17816] udevd[17816]: symlink '../../loop5' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:5' failed: Read-only file system [ 673.451057][ T4001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.478617][ T4001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.518971][T17874] BTRFS info (device loop5): rebuilding free space tree [ 673.555058][T17657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.655373][T17904] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4670'. [ 673.670336][T17637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.678200][T17637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.712274][T17657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.814790][T17657] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.834928][T17875] udevd[17875]: symlink '../../loop1' '/dev/disk/by-diskseq/1409.tmp-b7:1' failed: Read-only file system [ 673.875543][T17657] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.915131][T17657] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.955345][T17657] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.024252][T17652] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 674.082785][T17637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.126739][T17637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.484396][T17816] udevd[17816]: symlink '../../loop5' '/dev/disk/by-diskseq/1436.tmp-b7:5' failed: Read-only file system [ 674.491701][T17875] udevd[17875]: symlink '../../loop0' '/dev/disk/by-diskseq/1410.tmp-b7:0' failed: Read-only file system [ 674.552188][T17816] udevd[17816]: symlink '../../loop5' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:5' failed: Read-only file system [ 674.558535][T17637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.630006][T17637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.801483][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.826498][T17902] udevd[17902]: symlink '../../loop0' '/dev/disk/by-diskseq/1410.tmp-b7:0' failed: Read-only file system [ 674.858781][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.278105][T17941] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 675.314944][T17875] udevd[17875]: symlink '../../loop6' '/dev/disk/by-diskseq/974.tmp-b7:6' failed: Read-only file system [ 675.379879][T17941] CIFS: Unable to determine destination address [ 675.484861][T17875] udevd[17875]: symlink '../../loop6' '/dev/disk/by-diskseq/974.tmp-b7:6' failed: Read-only file system [ 675.556704][T17875] udevd[17875]: symlink '../../loop6' '/dev/disk/by-diskseq/1437.tmp-b7:6' failed: Read-only file system [ 675.786932][T17945] loop9: detected capacity change from 0 to 4096 [ 675.926686][T17945] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 675.982990][T17945] ntfs3(loop9): Failed to load $Extend (-22). [ 676.012435][T17945] ntfs3(loop9): Failed to initialize $Extend. [ 676.250501][T17957] loop8: detected capacity change from 0 to 1024 [ 676.594305][T12585] hfsplus: b-tree write err: -5, ino 4 [ 677.231856][T17984] loop8: detected capacity change from 0 to 1024 [ 677.335086][T17976] loop1: detected capacity change from 0 to 32768 [ 677.391047][T17976] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 677.399706][T17976] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 677.415717][T17976] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 399 [ 677.429882][T17976] gfs2: fsid=syz:syz.s: G: s:SH n:2/13 f:aqobnN t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 677.439192][T17976] gfs2: fsid=syz:syz.s: H: s:SH f:eEcH e:0 p:17976 [syz.1.4699] init_journal+0x17f8/0x2260 [ 677.449741][T17976] gfs2: fsid=syz:syz.s: I: n:1/19 t:8 f:0x00 d:0x00000000 s:0 p:0 [ 677.457666][T17976] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 677.465172][T17976] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 677.476352][T17976] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 677.483057][T17976] gfs2: fsid=syz:syz.s: File system withdrawn [ 677.489179][T17976] CPU: 0 UID: 0 PID: 17976 Comm: syz.1.4699 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 677.489212][T17976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 677.489229][T17976] Call Trace: [ 677.489239][T17976] [ 677.489250][T17976] dump_stack_lvl+0x189/0x250 [ 677.489289][T17976] ? __pfx_dump_stack_lvl+0x10/0x10 [ 677.489322][T17976] ? __pfx__printk+0x10/0x10 [ 677.489359][T17976] ? kobject_uevent_env+0x36b/0x8c0 [ 677.489403][T17976] gfs2_withdraw+0x111e/0x14f0 [ 677.489458][T17976] ? __pfx_gfs2_withdraw+0x10/0x10 [ 677.489494][T17976] ? queue_delayed_work_on+0x1f7/0x280 [ 677.489543][T17976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.489579][T17976] ? gfs2_consist_inode_i+0xf5/0x110 [ 677.489619][T17976] inode_go_instantiate+0xd42/0x1150 [ 677.489666][T17976] ? __pfx_inode_go_instantiate+0x10/0x10 [ 677.489702][T17976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.489732][T17976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.489762][T17976] ? gfs2_glock_nq+0x10bb/0x1900 [ 677.489807][T17976] gfs2_instantiate+0x168/0x220 [ 677.489846][T17976] gfs2_glock_wait+0x1d4/0x2a0 [ 677.489887][T17976] check_journal_clean+0x11c/0x310 [ 677.489926][T17976] ? __pfx_check_journal_clean+0x10/0x10 [ 677.489965][T17976] ? init_journal+0x17f8/0x2260 [ 677.490010][T17976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.490040][T17976] ? do_raw_spin_unlock+0x122/0x240 [ 677.490080][T17976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.490110][T17976] ? _raw_spin_unlock+0x28/0x50 [ 677.490145][T17976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.490174][T17976] ? gfs2_jdesc_find+0xab/0xc0 [ 677.490217][T17976] init_journal+0x17f8/0x2260 [ 677.490268][T17976] ? init_inodes+0xdb/0x320 [ 677.490309][T17976] ? __pfx_init_journal+0x10/0x10 [ 677.490344][T17976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.490374][T17976] ? vsnprintf+0xe11/0xf00 [ 677.490420][T17976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.490450][T17976] ? snprintf+0xda/0x120 [ 677.490487][T17976] ? init_inodes+0xdb/0x320 [ 677.490522][T17976] ? __pfx_snprintf+0x10/0x10 [ 677.490561][T17976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.490590][T17976] ? gfs2_glock_nq_num+0x13d/0x170 [ 677.490635][T17976] init_inodes+0xdb/0x320 [ 677.490674][T17976] gfs2_fill_super+0x1939/0x20e0 [ 677.490729][T17976] ? __pfx_gfs2_fill_super+0x10/0x10 [ 677.490763][T17976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.490798][T17976] ? init_locking+0xb8/0x210 [ 677.490830][T17976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.490860][T17976] ? sb_set_blocksize+0x104/0x180 [ 677.490889][T17976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.490919][T17976] ? setup_bdev_super+0x4c1/0x5b0 [ 677.490955][T17976] get_tree_bdev_flags+0x40e/0x4d0 [ 677.490987][T17976] ? __pfx_gfs2_fill_super+0x10/0x10 [ 677.491023][T17976] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 677.491056][T17976] ? rcu_is_watching+0x15/0xb0 [ 677.491095][T17976] gfs2_get_tree+0x51/0x1e0 [ 677.491135][T17976] vfs_get_tree+0x92/0x2b0 [ 677.491169][T17976] do_new_mount+0x24a/0xa40 [ 677.491214][T17976] __se_sys_mount+0x317/0x410 [ 677.491257][T17976] ? __pfx___se_sys_mount+0x10/0x10 [ 677.491291][T17976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.491329][T17976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.491359][T17976] ? __x64_sys_mount+0x20/0xc0 [ 677.491398][T17976] do_syscall_64+0xfa/0x3b0 [ 677.491423][T17976] ? lockdep_hardirqs_on+0x9c/0x150 [ 677.491464][T17976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.491489][T17976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.491519][T17976] ? exc_page_fault+0x9f/0xf0 [ 677.491566][T17976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.491591][T17976] RIP: 0033:0x7f3f2c3900ca [ 677.491613][T17976] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.491637][T17976] RSP: 002b:00007f3f2d19ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 677.491664][T17976] RAX: ffffffffffffffda RBX: 00007f3f2d19eef0 RCX: 00007f3f2c3900ca [ 677.491684][T17976] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f3f2d19eeb0 [ 677.491703][T17976] RBP: 0000200000000400 R08: 00007f3f2d19eef0 R09: 0000000000200001 [ 677.491722][T17976] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 677.491740][T17976] R13: 00007f3f2d19eeb0 R14: 00000000000125d5 R15: 0000200000000080 [ 677.491780][T17976] [ 677.491831][T17976] gfs2: fsid=syz:syz.s: Error -5 locking journal for spectator mount. [ 678.004189][ T4001] hfsplus: b-tree write err: -5, ino 4 [ 678.407556][T17960] udevd[17960]: symlink '../../loop8' '/dev/disk/by-diskseq/1443.tmp-b7:8' failed: Read-only file system [ 678.510158][T18013] ptrace attach of "./syz-executor exec"[17659] was attempted by ""[18013] [ 678.528187][T17960] udevd[17960]: symlink '../../loop8' '/dev/disk/by-diskseq/1443.tmp-b7:8' failed: Read-only file system [ 678.595674][T17875] udevd[17875]: symlink '../../loop6' '/dev/disk/by-diskseq/1437.tmp-b7:6' failed: Read-only file system [ 678.644962][T17902] udevd[17902]: symlink '../../loop9' '/dev/disk/by-diskseq/1442.tmp-b7:9' failed: Read-only file system [ 678.685523][T17960] udevd[17960]: symlink '../../loop8' '/dev/disk/by-diskseq/1446.tmp-b7:8' failed: Read-only file system [ 678.695720][T17816] udevd[17816]: symlink '../../loop1' '/dev/disk/by-diskseq/1444.tmp-b7:1' failed: Read-only file system [ 678.743679][T17875] udevd[17875]: symlink '../../loop6' '/dev/disk/by-diskseq/1437.tmp-b7:6' failed: Read-only file system [ 678.751485][T18019] udevd[18019]: symlink '../../loop0' '/dev/disk/by-diskseq/1410.tmp-b7:0' failed: Read-only file system [ 678.782050][T18021] udevd[18021]: symlink '../../loop5' '/dev/disk/by-diskseq/1438.tmp-b7:5' failed: Read-only file system [ 678.805042][T17902] udevd[17902]: symlink '../../loop9' '/dev/disk/by-diskseq/1442.tmp-b7:9' failed: Read-only file system [ 678.935205][T18012] loop5: detected capacity change from 0 to 8192 [ 679.055076][T18030] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 679.536764][T18039] sp0: Synchronizing with TNC [ 679.799839][T18045] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4729'. [ 679.841077][T18045] netlink: 'syz.1.4729': attribute type 3 has an invalid length. [ 679.882840][T18047] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4730'. [ 679.921691][T18047] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4730'. [ 679.968920][T18047] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4730'. [ 680.445920][T18065] loop1: detected capacity change from 0 to 1024 [ 680.561989][T18065] hfsplus: xattr searching failed [ 680.708847][T18069] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4740'. [ 681.045777][T18077] usb usb1: check_ctrlrecip: process 18077 (syz.5.4745) requesting ep 01 but needs 81 [ 681.312630][T18088] loop6: detected capacity change from 0 to 1024 [ 681.373600][T18090] loop5: detected capacity change from 0 to 16 [ 681.375054][T18088] syz.6.4749: attempt to access beyond end of device [ 681.375054][T18088] loop6: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 681.422717][T18090] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 681.467897][T18088] Buffer I/O error on dev loop6, logical block 100663296, async page read [ 681.504991][T18088] hfsplus: unable to mark blocks free: error -5 [ 681.548652][T18088] hfsplus: can't free extent [ 681.638364][T18060] loop9: detected capacity change from 0 to 32768 [ 681.732174][ T30] audit: type=1800 audit(1752148775.767:199): pid=18060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4735" name="file1" dev="loop9" ino=4 res=0 errno=0 [ 682.161000][T18106] loop5: detected capacity change from 0 to 64 [ 682.873306][ T30] audit: type=1326 audit(1752148776.917:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18129 comm="syz.0.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923bf8e929 code=0x7ffc0000 [ 682.954584][ T30] audit: type=1326 audit(1752148776.917:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18129 comm="syz.0.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923bf8e929 code=0x7ffc0000 [ 683.056377][T18135] loop1: detected capacity change from 0 to 2048 [ 683.060774][ T30] audit: type=1326 audit(1752148776.917:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18129 comm="syz.0.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f923bf8e929 code=0x7ffc0000 [ 683.142596][T18139] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 683.203429][ T30] audit: type=1326 audit(1752148776.917:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18129 comm="syz.0.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923bf8e929 code=0x7ffc0000 [ 683.206466][T18140] loop5: detected capacity change from 0 to 512 [ 683.316093][T18139] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 683.323657][ T30] audit: type=1326 audit(1752148776.917:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18129 comm="syz.0.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923bf8e929 code=0x7ffc0000 [ 683.347921][T18140] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 683.363585][T18139] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 683.394986][T18139] Remounting filesystem read-only [ 683.416016][T18140] EXT4-fs (loop5): 1 truncate cleaned up [ 683.418112][T18144] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4777'. [ 683.427026][T18140] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 683.469276][ T30] audit: type=1800 audit(1752148777.287:205): pid=18135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4772" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 683.493047][T17960] udevd[17960]: symlink '../../loop0' '/dev/disk/by-diskseq/1410.tmp-b7:0' failed: Read-only file system [ 683.557790][T17960] udevd[17960]: symlink '../../loop8' '/dev/disk/by-diskseq/1446.tmp-b7:8' failed: Read-only file system [ 683.569695][T18019] udevd[18019]: symlink '../../loop5' '/dev/disk/by-diskseq/1460.tmp-b7:5' failed: Read-only file system [ 683.596244][T17816] udevd[17816]: symlink '../../loop1' '/dev/disk/by-diskseq/1459.tmp-b7:1' failed: Read-only file system [ 683.635403][T18019] udevd[18019]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 683.668487][T17659] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 683.675006][T17816] udevd[17816]: symlink '../../loop1' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:1' failed: Read-only file system [ 683.763926][T17652] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.767181][T17960] udevd[17960]: symlink '../../loop6' '/dev/disk/by-diskseq/1455.tmp-b7:6' failed: Read-only file system [ 683.786033][T18019] udevd[18019]: symlink '../../loop5' '/dev/disk/by-diskseq/1460.tmp-b7:5' failed: Read-only file system [ 683.794671][T17875] udevd[17875]: symlink '../../loop9' '/dev/disk/by-diskseq/1457.tmp-b7:9' failed: Read-only file system [ 683.854030][T17816] udevd[17816]: symlink '../../loop1' '/dev/disk/by-diskseq/1459.tmp-b7:1' failed: Read-only file system [ 683.860850][T18154] loop6: detected capacity change from 0 to 64 [ 685.008967][T18198] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.4800'. [ 685.057974][T18195] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.4800'. [ 685.557645][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.760523][T18222] loop6: detected capacity change from 0 to 1024 [ 685.881221][T18222] hfsplus: walked past end of dir [ 686.265890][T18197] loop8: detected capacity change from 0 to 32768 [ 686.355064][T18242] loop1: detected capacity change from 0 to 64 [ 686.392415][T18197] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 686.461411][T18247] loop9: detected capacity change from 0 to 256 [ 686.472412][ T30] audit: type=1800 audit(1752148780.517:206): pid=18242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4821" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 686.682513][T18197] XFS (loop8): Ending clean mount [ 686.707469][T18247] FAT-fs (loop9): Directory bread(block 64) failed [ 686.719637][T18197] XFS (loop8): Quotacheck needed: Please wait. [ 686.755090][T18247] FAT-fs (loop9): Directory bread(block 65) failed [ 686.789991][T18256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 686.822277][T18247] FAT-fs (loop9): Directory bread(block 66) failed [ 686.870967][T18197] XFS (loop8): Quotacheck: Done. [ 686.976744][T18247] FAT-fs (loop9): Directory bread(block 67) failed [ 687.023770][T18247] FAT-fs (loop9): Directory bread(block 68) failed [ 687.055012][T18247] FAT-fs (loop9): Directory bread(block 69) failed [ 687.074950][T18247] FAT-fs (loop9): Directory bread(block 70) failed [ 687.088684][T18247] FAT-fs (loop9): Directory bread(block 71) failed [ 687.140200][T18260] loop5: detected capacity change from 0 to 512 [ 687.146645][T18247] FAT-fs (loop9): Directory bread(block 72) failed [ 687.176794][T18247] FAT-fs (loop9): Directory bread(block 73) failed [ 687.200216][T17646] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 687.222769][T18262] loop1: detected capacity change from 0 to 256 [ 687.304490][T18260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 687.342665][T18260] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 687.448955][T18262] FAT-fs (loop1): Directory bread(block 64) failed [ 687.455548][T18262] FAT-fs (loop1): Directory bread(block 65) failed [ 687.492590][T18262] FAT-fs (loop1): Directory bread(block 66) failed [ 687.555189][T18262] FAT-fs (loop1): Directory bread(block 67) failed [ 687.570249][T18262] FAT-fs (loop1): Directory bread(block 68) failed [ 687.611277][T18262] FAT-fs (loop1): Directory bread(block 69) failed [ 687.656183][T18262] FAT-fs (loop1): Directory bread(block 70) failed [ 687.675028][T17652] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.705106][T18262] FAT-fs (loop1): Directory bread(block 71) failed [ 687.737487][T18262] FAT-fs (loop1): Directory bread(block 72) failed [ 687.768580][T18262] FAT-fs (loop1): Directory bread(block 73) failed [ 687.856291][T18269] loop0: detected capacity change from 0 to 4096 [ 687.925143][T18273] netlink: 'syz.5.4833': attribute type 5 has an invalid length. [ 687.941776][T18269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 688.068566][T17932] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 688.120152][T18278] netlink: 172 bytes leftover after parsing attributes in process `syz.6.4835'. [ 688.131504][T18278] netlink: 192 bytes leftover after parsing attributes in process `syz.6.4835'. [ 688.248634][T17932] usb 10-1: Using ep0 maxpacket: 16 [ 688.256061][T17661] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.287992][T17932] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 688.347638][T17932] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 688.347675][T17932] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.347702][T17932] usb 10-1: Product: syz [ 688.347722][T17932] usb 10-1: Manufacturer: syz [ 688.347742][T17932] usb 10-1: SerialNumber: syz [ 688.423173][T17932] usb 10-1: config 0 descriptor?? [ 688.428223][T17932] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 688.430433][T17932] usb 10-1: Detected FT232B [ 688.526931][T18019] udevd[18019]: symlink '../../loop1' '/dev/disk/by-diskseq/1472.tmp-b7:1' failed: Read-only file system [ 688.530151][T17816] udevd[17816]: symlink '../../loop0' '/dev/disk/by-diskseq/1476.tmp-b7:0' failed: Read-only file system [ 688.531902][T17875] udevd[17875]: symlink '../../loop6' '/dev/disk/by-diskseq/1466.tmp-b7:6' failed: Read-only file system [ 688.614358][T18019] udevd[18019]: symlink '../../loop1' '/dev/disk/by-diskseq/1478.tmp-b7:1' failed: Read-only file system [ 688.617665][T17875] udevd[17875]: symlink '../../loop5' '/dev/disk/by-diskseq/1475.tmp-b7:5' failed: Read-only file system [ 688.619189][T17816] udevd[17816]: symlink '../../loop0' '/dev/disk/by-diskseq/1476.tmp-b7:0' failed: Read-only file system [ 688.633232][T17932] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 688.641141][T17932] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 688.665305][T17816] udevd[17816]: symlink '../../loop0' '/dev/disk/by-diskseq/1476.tmp-b7:0' failed: Read-only file system [ 688.791108][T18019] udevd[18019]: symlink '../../loop0' '/dev/disk/by-diskseq/1477.tmp-b7:0' failed: Read-only file system [ 688.846693][T17932] usb 10-1: USB disconnect, device number 2 [ 688.866284][T18019] udevd[18019]: symlink '../../loop5' '/dev/disk/by-diskseq/1475.tmp-b7:5' failed: Read-only file system [ 688.874639][T17932] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 688.875238][T17932] ftdi_sio 10-1:0.0: device disconnected [ 688.888698][T18296] Bluetooth: MGMT ver 1.23 [ 688.933989][T18019] udevd[18019]: symlink '../../loop6' '/dev/disk/by-diskseq/1466.tmp-b7:6' failed: Read-only file system [ 689.379876][ T30] audit: type=1326 audit(1752148783.417:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18305 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923bf8e929 code=0x7ffc0000 [ 689.379942][ T30] audit: type=1326 audit(1752148783.417:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18305 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923bf8e929 code=0x7ffc0000 [ 689.379996][ T30] audit: type=1326 audit(1752148783.427:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18305 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f923bf8e929 code=0x7ffc0000 [ 689.380050][ T30] audit: type=1326 audit(1752148783.427:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18305 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923bf8e929 code=0x7ffc0000 [ 689.380105][ T30] audit: type=1326 audit(1752148783.427:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18305 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923bf8e929 code=0x7ffc0000 [ 689.432930][ T30] audit: type=1326 audit(1752148783.467:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18305 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f923bf8e929 code=0x7ffc0000 [ 689.432993][ T30] audit: type=1326 audit(1752148783.467:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18305 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923bf8e929 code=0x7ffc0000 [ 689.433047][ T30] audit: type=1326 audit(1752148783.467:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18305 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923bf8e929 code=0x7ffc0000 [ 689.735977][T18287] loop1: detected capacity change from 0 to 32768 [ 689.907305][T18287] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 690.212051][T18287] XFS (loop1): Ending clean mount [ 690.415115][T17659] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 690.538583][T18298] loop6: detected capacity change from 0 to 32768 [ 690.619562][T18298] read_mapping_page failed! [ 690.624133][T18298] jfs_create: dtInsert returned -EIO [ 690.661210][ T30] audit: type=1326 audit(1752148784.707:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18335 comm="syz.0.4860" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f923bf8e929 code=0x0 [ 690.687418][T18298] ERROR: (device loop6): jfs_create: [ 690.687418][T18298] [ 690.737275][T18298] ERROR: (device loop6): remounting filesystem as read-only [ 690.815508][T18310] loop9: detected capacity change from 0 to 32768 [ 690.883437][ T110] read_mapping_page failed! [ 690.893684][T18310] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 691.145833][T18310] XFS (loop9): Ending clean mount [ 691.176907][T18354] loop1: detected capacity change from 0 to 2048 [ 691.194326][T18310] XFS (loop9): Quotacheck needed: Please wait. [ 691.324094][T18310] XFS (loop9): Quotacheck: Done. [ 691.330398][T18354] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 691.378835][T18354] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 691.629744][T17647] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 691.823303][T18366] loop1: detected capacity change from 0 to 256 [ 691.899167][T18366] exfat: Deprecated parameter 'utf8' [ 691.907790][T18364] loop6: detected capacity change from 0 to 2048 [ 691.974384][T18364] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 692.058195][T18366] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 692.116981][T18371] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 692.198699][T18364] NILFS (loop6): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 692.291264][T18364] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 692.368951][T18364] Remounting filesystem read-only [ 692.409615][T18364] NILFS (loop6): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 692.465514][T18364] NILFS error (device loop6): nilfs_bmap_last_key: broken bmap (inode number=16) [ 692.504502][T18375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4872'. [ 692.561613][T18364] NILFS (loop6): error -5 truncating bmap (ino=16) [ 692.782834][T17657] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 692.802166][T18383] netlink: 'syz.0.4878': attribute type 29 has an invalid length. [ 692.859881][T18387] netlink: 'syz.0.4878': attribute type 29 has an invalid length. [ 692.865889][T18388] loop9: detected capacity change from 0 to 16 [ 692.883483][T18388] erofs (device loop9): mounted with root inode @ nid 36. [ 692.912240][T18388] erofs (device loop9): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 692.912279][T18388] erofs (device loop9): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 692.912305][T18388] erofs (device loop9): read error -117 @ 0 of nid 36 [ 692.912330][T18388] erofs (device loop9): failed to readdir of logical block 0 of nid 36 [ 693.107974][T18358] loop8: detected capacity change from 0 to 32768 [ 693.115799][T18358] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4866 (18358) [ 693.124024][T18358] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 693.124115][T18358] BTRFS info (device loop8): using sha256 (sha256-x86_64) checksum algorithm [ 693.124155][T18358] BTRFS info (device loop8): using free-space-tree [ 693.147334][T18394] loop0: detected capacity change from 0 to 64 [ 693.184940][T18390] loop6: detected capacity change from 0 to 1024 [ 693.376857][ T13] hfsplus: b-tree write err: -5, ino 4 [ 693.442581][T17646] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 693.518744][T18416] loop0: detected capacity change from 0 to 16 [ 693.520681][T18416] erofs (device loop0): mounted with root inode @ nid 36. [ 693.572435][T18419] loop6: detected capacity change from 0 to 512 [ 693.585270][ T30] audit: type=1800 audit(1752148787.567:216): pid=18416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4884" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 693.710439][T18019] udevd[18019]: symlink '../../loop9' '/dev/disk/by-diskseq/1492.tmp-b7:9' failed: Read-only file system [ 693.715791][T18419] EXT4-fs error (device loop6): ext4_orphan_get:1393: comm syz.6.4886: inode #15: comm syz.6.4886: iget: illegal inode # [ 693.734274][T18419] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.4886: couldn't read orphan inode 15 (err -117) [ 693.743880][T18019] udevd[18019]: symlink '../../loop0' '/dev/disk/by-diskseq/1494.tmp-b7:0' failed: Read-only file system [ 693.749175][T18419] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.835330][T17816] udevd[17816]: symlink '../../loop8' '/dev/disk/by-diskseq/1493.tmp-b7:8' failed: Read-only file system [ 693.842460][T17875] udevd[17875]: symlink '../../loop5' '/dev/disk/by-diskseq/1475.tmp-b7:5' failed: Read-only file system [ 693.852851][T17960] udevd[17960]: symlink '../../loop0' '/dev/disk/by-diskseq/1494.tmp-b7:0' failed: Read-only file system [ 693.876099][T17902] udevd[17902]: symlink '../../loop9' '/dev/disk/by-diskseq/1492.tmp-b7:9' failed: Read-only file system [ 693.885062][T17816] udevd[17816]: symlink '../../loop8' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:8' failed: Read-only file system [ 693.911039][T17657] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.915932][T17875] udevd[17875]: symlink '../../loop5' '/dev/disk/by-diskseq/1475.tmp-b7:5' failed: Read-only file system [ 694.069035][T18019] udevd[18019]: symlink '../../loop6' '/dev/disk/by-diskseq/1495.tmp-b7:6' failed: Read-only file system [ 694.073194][T17960] udevd[17960]: symlink '../../loop0' '/dev/disk/by-diskseq/1494.tmp-b7:0' failed: Read-only file system [ 694.317968][T18432] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4892'. [ 694.722358][T18448] loop6: detected capacity change from 0 to 16 [ 694.760420][T18448] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 695.128836][T13881] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 695.255854][T18463] sp0: Synchronizing with TNC [ 695.299922][T13881] usb 2-1: Using ep0 maxpacket: 16 [ 695.331817][T13881] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.361889][T13881] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.393204][T13881] usb 2-1: config 0 interface 0 has no altsetting 0 [ 695.410438][T18466] loop5: detected capacity change from 0 to 256 [ 695.427021][T13881] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 695.442435][T18468] loop0: detected capacity change from 0 to 1024 [ 695.456758][T13881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.494737][T13881] usb 2-1: config 0 descriptor?? [ 695.540289][T18468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 ro without journal. Quota mode: writeback. [ 695.626278][T18468] EXT4-fs: Ignoring removed orlov option [ 695.674076][T18468] EXT4-fs error (device loop0): __ext4_remount:6736: comm syz.0.4908: Abort forced by user [ 695.718615][T18468] EXT4-fs (loop0): Remounting filesystem read-only [ 695.745563][T18468] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-001000000000 r/w. [ 695.915813][T17661] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 696.169001][T13835] usb 2-1: USB disconnect, device number 24 [ 696.436077][T18462] loop8: detected capacity change from 0 to 32768 [ 696.510542][T18462] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 696.656856][T18506] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4920'. [ 696.675121][T18506] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4920'. [ 696.749267][T18462] XFS (loop8): Ending clean mount [ 696.796998][T18462] XFS (loop8): Quotacheck needed: Please wait. [ 696.951556][T18462] XFS (loop8): Quotacheck: Done. [ 697.031269][T18512] loop1: detected capacity change from 0 to 2048 [ 697.129725][T18512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 697.147673][T18517] loop0: detected capacity change from 0 to 256 [ 697.211104][T17646] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 697.368104][T18517] FAT-fs (loop0): Directory bread(block 64) failed [ 697.392644][T18517] FAT-fs (loop0): Directory bread(block 65) failed [ 697.438866][T18517] FAT-fs (loop0): Directory bread(block 66) failed [ 697.464008][T18517] FAT-fs (loop0): Directory bread(block 67) failed [ 697.503677][T17659] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.504383][T18517] FAT-fs (loop0): Directory bread(block 68) failed [ 697.558184][T18517] FAT-fs (loop0): Directory bread(block 69) failed [ 697.585276][T18517] FAT-fs (loop0): Directory bread(block 70) failed [ 697.605398][T18517] FAT-fs (loop0): Directory bread(block 71) failed [ 697.638635][T18517] FAT-fs (loop0): Directory bread(block 72) failed [ 697.696041][T18517] FAT-fs (loop0): Directory bread(block 73) failed [ 697.745669][T18522] loop1: detected capacity change from 0 to 256 [ 697.816232][T18522] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x0ede1155, utbl_chksum : 0xe619d30d) [ 698.218348][T18510] loop9: detected capacity change from 0 to 40427 [ 698.234395][T18510] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 698.255554][T18510] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 698.319424][T18510] F2FS-fs (loop9): invalid crc value [ 698.343432][T18534] trusted_key: encrypted_key: key user:syz not found [ 698.653061][T18510] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 698.709754][T18510] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 698.714281][T18547] sp0: Synchronizing with TNC [ 698.734295][T17816] udevd[17816]: symlink '../../loop9' '/dev/disk/by-diskseq/1517.tmp-b7:9' failed: Read-only file system [ 698.760389][T17875] udevd[17875]: symlink '../../loop8' '/dev/disk/by-diskseq/1512.tmp-b7:8' failed: Read-only file system [ 698.826228][ T30] audit: type=1800 audit(1752148792.867:217): pid=18510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4923" name="bus" dev="loop9" ino=10 res=0 errno=0 [ 698.836117][T17816] udevd[17816]: symlink '../../loop1' '/dev/disk/by-diskseq/1515.tmp-b7:1' failed: Read-only file system [ 698.926797][T18019] udevd[18019]: symlink '../../loop8' '/dev/disk/by-diskseq/1512.tmp-b7:8' failed: Read-only file system [ 699.027667][T17816] udevd[17816]: symlink '../../loop1' '/dev/disk/by-diskseq/1515.tmp-b7:1' failed: Read-only file system [ 699.057637][T18555] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 699.086253][T17816] udevd[17816]: symlink '../../loop0' '/dev/disk/by-diskseq/1516.tmp-b7:0' failed: Read-only file system [ 699.098704][T18019] udevd[18019]: symlink '../../loop5' '/dev/disk/by-diskseq/1507.tmp-b7:5' failed: Read-only file system [ 699.247154][T17816] udevd[17816]: symlink '../../loop5' '/dev/disk/by-diskseq/1507.tmp-b7:5' failed: Read-only file system [ 699.296033][T18019] udevd[18019]: symlink '../../loop0' '/dev/disk/by-diskseq/1516.tmp-b7:0' failed: Read-only file system [ 699.398699][T17816] udevd[17816]: symlink '../../loop0' '/dev/disk/by-diskseq/1516.tmp-b7:0' failed: Read-only file system [ 699.428765][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 699.602101][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 699.620460][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.658549][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.688587][ T9] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 699.689374][T18571] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4949'. [ 699.699610][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.737371][ T9] usb 2-1: config 0 descriptor?? [ 699.754703][T18571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 699.762530][T18571] IPv6: NLM_F_CREATE should be set when creating new route [ 700.133093][T18579] netlink: 'syz.9.4952': attribute type 1 has an invalid length. [ 700.178008][T18567] loop0: detected capacity change from 0 to 32768 [ 700.180180][T18579] netlink: 204 bytes leftover after parsing attributes in process `syz.9.4952'. [ 700.196011][ T9] hid-multitouch 0003:1FD2:6007.0044: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 700.236326][T18567] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 700.387574][T18567] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 700.407627][T13835] usb 2-1: USB disconnect, device number 25 [ 700.680078][T17661] ocfs2: Unmounting device (7,0) on (node local) [ 700.991810][T18598] loop5: detected capacity change from 0 to 1024 [ 701.087996][T18598] EXT4-fs: Ignoring removed nobh option [ 701.113756][T18601] loop9: detected capacity change from 0 to 2048 [ 701.146358][T18598] EXT4-fs: Ignoring removed bh option [ 701.235841][T18598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 701.259978][T18610] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 701.422178][T18598] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 701.533878][T18598] EXT4-fs (loop5): Remounting filesystem read-only [ 701.780349][T17652] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.078927][T18622] netlink: 'syz.8.4971': attribute type 2 has an invalid length. [ 702.328088][T18630] loop1: detected capacity change from 0 to 256 [ 702.409973][T18632] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4975'. [ 702.528075][T18641] loop9: detected capacity change from 0 to 1024 [ 702.822193][ T48] hfsplus: b-tree write err: -5, ino 4 [ 702.825246][T18648] loop1: detected capacity change from 0 to 1024 [ 703.093466][T18657] loop9: detected capacity change from 0 to 256 [ 703.104283][ T30] audit: type=1326 audit(1752148797.137:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18654 comm="syz.6.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1908f8e929 code=0x7ffc0000 [ 703.149171][ T59] hfsplus: b-tree write err: -5, ino 4 [ 703.156398][T18657] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 703.175164][ T30] audit: type=1326 audit(1752148797.137:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18654 comm="syz.6.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1908f8e929 code=0x7ffc0000 [ 703.199743][ T30] audit: type=1326 audit(1752148797.187:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18654 comm="syz.6.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1908f8e929 code=0x7ffc0000 [ 703.227329][T18657] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 703.241676][T18661] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4989'. [ 703.250880][ T30] audit: type=1326 audit(1752148797.187:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18654 comm="syz.6.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1908f8e929 code=0x7ffc0000 [ 703.297906][T18657] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 703.340562][ T30] audit: type=1326 audit(1752148797.187:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18654 comm="syz.6.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1908f8e929 code=0x7ffc0000 [ 703.468188][T18666] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 703.471441][T18657] exFAT-fs (loop9): error, invalid access to FAT (entry 0xffffffff) [ 703.492962][ T30] audit: type=1326 audit(1752148797.187:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18654 comm="syz.6.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1908f8e929 code=0x7ffc0000 [ 703.540636][T18657] exFAT-fs (loop9): Filesystem has been set read-only [ 703.546935][T18666] overlayfs: missing 'lowerdir' [ 703.621390][ T30] audit: type=1326 audit(1752148797.287:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18654 comm="syz.6.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1908f8e929 code=0x7ffc0000 [ 703.747173][ T30] audit: type=1326 audit(1752148797.287:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18654 comm="syz.6.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1908f8e929 code=0x7ffc0000 [ 703.754878][T18019] udevd[18019]: symlink '../../loop9' '/dev/disk/by-diskseq/1530.tmp-b7:9' failed: Read-only file system [ 703.837278][T17816] udevd[17816]: symlink '../../loop1' '/dev/disk/by-diskseq/1531.tmp-b7:1' failed: Read-only file system [ 703.850172][T17960] udevd[17960]: symlink '../../loop8' '/dev/disk/by-diskseq/1512.tmp-b7:8' failed: Read-only file system [ 703.893215][ T30] audit: type=1326 audit(1752148797.287:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18662 comm="syz.6.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1908fc11e5 code=0x7ffc0000 [ 703.903194][T17902] udevd[17902]: symlink '../../loop0' '/dev/disk/by-diskseq/1520.tmp-b7:0' failed: Read-only file system [ 703.922769][T17875] udevd[17875]: symlink '../../loop5' '/dev/disk/by-diskseq/1524.tmp-b7:5' failed: Read-only file system [ 703.962275][T18019] udevd[18019]: symlink '../../loop9' '/dev/disk/by-uuid/1234-1234.tmp-b7:9' failed: Read-only file system [ 704.055554][ T30] audit: type=1326 audit(1752148797.447:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18662 comm="syz.6.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f1908f8e929 code=0x7ffc0000 [ 704.092609][T17816] udevd[17816]: symlink '../../loop1' '/dev/disk/by-diskseq/1531.tmp-b7:1' failed: Read-only file system [ 704.097536][T18019] udevd[18019]: symlink '../../loop9' '/dev/disk/by-diskseq/1530.tmp-b7:9' failed: Read-only file system [ 704.184882][T18681] loop9: detected capacity change from 0 to 512 [ 704.260144][T17902] udevd[17902]: symlink '../../loop0' '/dev/disk/by-diskseq/1520.tmp-b7:0' failed: Read-only file system [ 704.276598][T17875] udevd[17875]: symlink '../../loop8' '/dev/disk/by-diskseq/1512.tmp-b7:8' failed: Read-only file system [ 704.395810][T18681] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.462753][T18697] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 704.470048][T18697] IPv6: NLM_F_CREATE should be set when creating new route [ 704.487240][T18681] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 704.541526][ T5960] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 704.542787][T18699] overlayfs: workdir and upperdir must be separate subtrees [ 704.658841][T17647] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.740596][ T5960] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 704.769976][ T5960] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.791454][ T5960] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 704.814372][ T5960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.827148][ T5960] usb 6-1: config 0 descriptor?? [ 704.919374][T17932] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 705.014846][ T5920] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 705.112055][T17932] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.141159][T17932] usb 9-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 705.155924][T17932] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.175177][T17932] usb 9-1: config 0 descriptor?? [ 705.180940][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 705.209014][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.238431][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.263601][ T5920] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 705.289855][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.305567][ T5960] uclogic 0003:145F:0212.0045: interface is invalid, ignoring [ 705.307902][ T5920] usb 2-1: config 0 descriptor?? [ 705.339016][T18693] loop0: detected capacity change from 0 to 32768 [ 705.348346][ T5920] hub 2-1:0.0: USB hub found [ 705.442200][T18693] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 705.513019][T13881] usb 6-1: USB disconnect, device number 13 [ 705.558562][ T5920] hub 2-1:0.0: 1 port detected [ 705.650175][T17932] apple 0003:05AC:029C.0046: hidraw0: USB HID v0.00 Device [HID 05ac:029c] on usb-dummy_hcd.8-1/input0 [ 705.655116][T17661] ocfs2: Unmounting device (7,0) on (node local) [ 705.767661][ T5920] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 705.788616][ T5920] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 705.823674][ T5920] usbhid 2-1:0.0: can't add hid device: -71 [ 705.856634][ T5920] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 705.864921][T17932] usb 9-1: USB disconnect, device number 2 [ 705.929941][ T5920] usb 2-1: USB disconnect, device number 26 [ 705.946401][T18719] fido_id[18719]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 705.973740][T18721] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5016'. [ 706.027757][T18721] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5016'. [ 706.434946][T18732] loop0: detected capacity change from 0 to 256 [ 706.525959][T18732] FAT-fs (loop0): Directory bread(block 64) failed [ 706.570227][T18738] loop1: detected capacity change from 0 to 64 [ 706.578544][T18732] FAT-fs (loop0): Directory bread(block 65) failed [ 706.585157][T18732] FAT-fs (loop0): Directory bread(block 66) failed [ 706.651746][T18738] hfs: request for non-existent node 327680 in B*Tree [ 706.666199][T18732] FAT-fs (loop0): Directory bread(block 67) failed [ 706.666318][T18732] FAT-fs (loop0): Directory bread(block 68) failed [ 706.666351][T18732] FAT-fs (loop0): Directory bread(block 69) failed [ 706.666441][T18732] FAT-fs (loop0): Directory bread(block 70) failed [ 706.666471][T18732] FAT-fs (loop0): Directory bread(block 71) failed [ 706.666557][T18732] FAT-fs (loop0): Directory bread(block 72) failed [ 706.666586][T18732] FAT-fs (loop0): Directory bread(block 73) failed [ 706.708469][T18738] hfs: request for non-existent node 327680 in B*Tree [ 706.753241][T18737] hfs: request for non-existent node 327680 in B*Tree [ 706.868181][T18737] hfs: request for non-existent node 327680 in B*Tree [ 706.892054][T18745] loop5: detected capacity change from 0 to 2048 [ 706.904031][T18745] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 706.980183][ T59] hfs: request for non-existent node 327680 in B*Tree [ 706.980257][ T59] hfs: request for non-existent node 327680 in B*Tree [ 706.988366][T18748] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 707.506154][T13835] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 707.514095][T17656] Bluetooth: hci2: unexpected cc 0x2007 length: 100 > 2 [ 707.705625][T13835] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 707.745741][T13835] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 707.773369][T13835] usb 10-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 707.783433][T13835] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.809868][T13835] usb 10-1: config 0 descriptor?? [ 707.815835][T18754] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 707.892510][T18740] loop6: detected capacity change from 0 to 32768 [ 707.968548][ T5920] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 708.148679][ T5920] usb 9-1: Using ep0 maxpacket: 16 [ 708.178230][ T5920] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 708.217757][ T5920] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 708.255211][ T5920] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 708.281624][T13835] logitech 0003:046D:C626.0047: unbalanced delimiter at end of report description [ 708.316886][ T5920] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.329619][T13835] logitech 0003:046D:C626.0047: parse failed [ 708.335708][T13835] logitech 0003:046D:C626.0047: probe with driver logitech failed with error -22 [ 708.345195][ T5920] usb 9-1: Product: syz [ 708.355417][ T5920] usb 9-1: Manufacturer: syz [ 708.365579][ T5920] usb 9-1: SerialNumber: syz [ 708.545159][ T5960] usb 10-1: USB disconnect, device number 3 [ 708.681978][T18763] loop5: detected capacity change from 0 to 32768 [ 708.731358][T18763] (syz.5.5033,18763,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 708.790845][ T5920] usb 9-1: cannot find UAC_HEADER [ 708.797638][T17875] udevd[17875]: symlink '../../loop1' '/dev/disk/by-diskseq/1540.tmp-b7:1' failed: Read-only file system [ 708.814429][T18763] (syz.5.5033,18763,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 708.881668][T18019] udevd[18019]: symlink '../../loop6' '/dev/disk/by-diskseq/1543.tmp-b7:6' failed: Read-only file system [ 708.927684][ T5920] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 708.929824][T18763] JBD2: Ignoring recovery information on journal [ 708.949735][T17875] udevd[17875]: symlink '../../loop0' '/dev/disk/by-diskseq/1541.tmp-b7:0' failed: Read-only file system [ 708.983919][T18019] udevd[18019]: symlink '../../loop6' '/dev/disk/by-diskseq/1543.tmp-b7:6' failed: Read-only file system [ 709.009616][T18019] udevd[18019]: symlink '../../loop6' '/dev/disk/by-diskseq/1544.tmp-b7:6' failed: Read-only file system [ 709.041776][T18019] udevd[18019]: symlink '../../loop6' '/dev/disk/by-diskseq/1544.tmp-b7:6' failed: Read-only file system [ 709.109122][ T5920] usb 9-1: USB disconnect, device number 3 [ 709.120843][T17902] udevd[17902]: symlink '../../loop1' '/dev/disk/by-diskseq/1540.tmp-b7:1' failed: Read-only file system [ 709.170448][T18019] udevd[18019]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 709.194174][T17816] udevd[17816]: symlink '../../loop5' '/dev/disk/by-diskseq/1545.tmp-b7:5' failed: Read-only file system [ 709.236314][T18763] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 709.254825][T17960] udevd[17960]: symlink '../../loop9' '/dev/disk/by-diskseq/1534.tmp-b7:9' failed: Read-only file system [ 709.493764][T17652] ocfs2: Unmounting device (7,5) on (node local) [ 709.710024][T18806] loop0: detected capacity change from 0 to 164 [ 710.330934][T18796] loop6: detected capacity change from 0 to 32768 [ 710.391463][T18796] ERROR: (device loop6): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 710.391463][T18796] [ 710.453993][T18796] ERROR: (device loop6): remounting filesystem as read-only [ 710.733004][T18829] loop5: detected capacity change from 0 to 512 [ 710.800899][T18829] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 710.945073][T18829] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.5064: bad orphan inode 131083 [ 711.069604][T18829] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 711.305311][T17652] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.397721][T18850] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5074'. [ 711.534665][T18815] loop0: detected capacity change from 0 to 32768 [ 711.551739][T17656] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 711.561204][T17656] Bluetooth: hci2: Injecting HCI hardware error event [ 711.573531][T17653] Bluetooth: hci2: hardware error 0x00 [ 711.617896][T18815] JBD2: Ignoring recovery information on journal [ 711.748689][T13881] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 711.766302][T18815] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 711.775480][T13835] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 711.911253][T13881] usb 2-1: Using ep0 maxpacket: 8 [ 711.937658][T13881] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 711.948477][T13835] usb 6-1: Using ep0 maxpacket: 16 [ 711.972230][T13881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.984636][T13835] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 712.013482][T13881] usb 2-1: config 0 descriptor?? [ 712.046148][T13835] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 712.083962][T13835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.103914][T18869] Bluetooth: MGMT ver 1.23 [ 712.114629][T17661] ocfs2: Unmounting device (7,0) on (node local) [ 712.127517][T13835] usb 6-1: config 0 descriptor?? [ 712.617864][T13835] logitech 0003:046D:C24F.0048: hidraw0: USB HID v10.00 Device [HID 046d:c24f] on usb-dummy_hcd.5-1/input0 [ 712.682375][T13835] logitech 0003:046D:C24F.0048: no inputs found [ 712.688621][T13881] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 712.688873][T13881] asix 2-1:0.0: probe with driver asix failed with error -71 [ 712.753292][T13881] usb 2-1: USB disconnect, device number 27 [ 712.867494][T13835] usb 6-1: USB disconnect, device number 14 [ 712.889950][T18885] loop0: detected capacity change from 0 to 256 [ 713.038481][ T5960] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 713.207715][T18886] fido_id[18886]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 713.218576][ T5960] usb 10-1: Using ep0 maxpacket: 16 [ 713.268824][ T5960] usb 10-1: config 0 has an invalid interface number: 105 but max is 0 [ 713.277132][ T5960] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.303957][T18888] loop8: detected capacity change from 0 to 4096 [ 713.333941][ T5960] usb 10-1: config 0 has no interface number 0 [ 713.373118][ T5960] usb 10-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 713.392995][ T5960] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.437209][ T5960] usb 10-1: Product: syz [ 713.456816][ T5960] usb 10-1: Manufacturer: syz [ 713.497234][ T5960] usb 10-1: SerialNumber: syz [ 713.508585][T18892] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 713.533640][ T5960] usb 10-1: config 0 descriptor?? [ 713.609195][T18895] loop0: detected capacity change from 0 to 128 [ 713.709539][T17653] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 713.767386][ T5960] usb 10-1: Found UVC 0.00 device syz (046d:08d3) [ 713.775774][ T5960] usb 10-1: No valid video chain found. [ 713.863877][T18901] loop1: detected capacity change from 0 to 128 [ 713.885843][T18019] udevd[18019]: symlink '../../loop0' '/dev/disk/by-diskseq/1558.tmp-b7:0' failed: Read-only file system [ 713.918069][T18901] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 713.953369][T17816] udevd[17816]: symlink '../../loop8' '/dev/disk/by-diskseq/1557.tmp-b7:8' failed: Read-only file system [ 713.973957][T18019] udevd[18019]: symlink '../../loop0' '/dev/disk/by-label/SYZKALLER.tmp-b7:0' failed: Read-only file system [ 713.976300][ T5960] usb 10-1: USB disconnect, device number 4 [ 714.013026][T18901] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 714.024052][T18019] udevd[18019]: symlink '../../loop0' '/dev/disk/by-uuid/1DE0-4C13.tmp-b7:0' failed: Read-only file system [ 714.069562][T17875] udevd[17875]: symlink '../../loop6' '/dev/disk/by-diskseq/1550.tmp-b7:6' failed: Read-only file system [ 714.084628][T17816] udevd[17816]: symlink '../../loop8' '/dev/disk/by-diskseq/1557.tmp-b7:8' failed: Read-only file system [ 714.105537][T18021] udevd[18021]: symlink '../../loop5' '/dev/disk/by-diskseq/1552.tmp-b7:5' failed: Read-only file system [ 714.183257][T17902] udevd[17902]: symlink '../../loop1' '/dev/disk/by-diskseq/1560.tmp-b7:1' failed: Read-only file system [ 714.198104][T18019] udevd[18019]: symlink '../../loop0' '/dev/disk/by-diskseq/1558.tmp-b7:0' failed: Read-only file system [ 714.216428][T17816] udevd[17816]: symlink '../../loop8' '/dev/disk/by-diskseq/1557.tmp-b7:8' failed: Read-only file system [ 714.472283][T18921] loop1: detected capacity change from 0 to 64 [ 714.556200][T18914] loop8: detected capacity change from 0 to 4096 [ 714.730360][T18914] ntfs3(loop8): ino=0, "file0" failed to extend initialized size to 8fecc. [ 715.107506][T18940] loop6: detected capacity change from 0 to 64 [ 715.616960][T18954] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.5120'. [ 715.860951][T18958] loop1: detected capacity change from 0 to 1024 [ 715.891749][T18958] EXT4-fs: Ignoring removed bh option [ 715.897201][T18958] EXT4-fs: inline encryption not supported [ 716.021677][T18958] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 716.074261][T18962] loop0: detected capacity change from 0 to 4096 [ 716.095516][T18958] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 716.118556][T18962] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 716.208219][T18958] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.5123: lblock 2 mapped to illegal pblock 2 (length 1) [ 716.332777][T18974] loop6: detected capacity change from 0 to 256 [ 716.362369][T18958] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 716.396810][T18958] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 48: comm syz.1.5123: lblock 0 mapped to illegal pblock 48 (length 1) [ 716.475123][T18958] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 716.511957][T18939] loop9: detected capacity change from 0 to 32768 [ 716.519225][T18958] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.5123: Failed to acquire dquot type 0 [ 716.548091][T18974] FAT-fs (loop6): Directory bread(block 64) failed [ 716.572468][T18958] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 716.582587][T18974] FAT-fs (loop6): Directory bread(block 65) failed [ 716.648329][T18974] FAT-fs (loop6): Directory bread(block 66) failed [ 716.663382][T18958] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.5123: mark_inode_dirty error [ 716.674946][T18974] FAT-fs (loop6): Directory bread(block 67) failed [ 716.719011][T18974] FAT-fs (loop6): Directory bread(block 68) failed [ 716.725592][T18974] FAT-fs (loop6): Directory bread(block 69) failed [ 716.736205][T18958] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 716.789504][T18958] EXT4-fs (loop1): 1 orphan inode deleted [ 716.795407][T18974] FAT-fs (loop6): Directory bread(block 70) failed [ 716.818628][ T48] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 716.823949][T18958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.851211][T18980] loop8: detected capacity change from 0 to 256 [ 716.866497][T18974] FAT-fs (loop6): Directory bread(block 71) failed [ 716.905477][T18980] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 716.912409][T18974] FAT-fs (loop6): Directory bread(block 72) failed [ 716.924452][ T48] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 716.961150][ T48] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 716.974334][T18984] loop0: detected capacity change from 0 to 256 [ 716.996458][T18974] FAT-fs (loop6): Directory bread(block 73) failed [ 717.106118][T18984] FAT-fs (loop0): Directory bread(block 64) failed [ 717.123412][T18958] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 48: comm syz.1.5123: lblock 0 mapped to illegal pblock 48 (length 1) [ 717.152861][T18984] FAT-fs (loop0): Directory bread(block 65) failed [ 717.169112][T18984] FAT-fs (loop0): Directory bread(block 66) failed [ 717.175675][T18984] FAT-fs (loop0): Directory bread(block 67) failed [ 717.233836][T18958] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 717.246456][T18984] FAT-fs (loop0): Directory bread(block 68) failed [ 717.284498][T18984] FAT-fs (loop0): Directory bread(block 69) failed [ 717.303391][T18984] FAT-fs (loop0): Directory bread(block 70) failed [ 717.368530][T18984] FAT-fs (loop0): Directory bread(block 71) failed [ 717.375211][T18984] FAT-fs (loop0): Directory bread(block 72) failed [ 717.393980][T18984] FAT-fs (loop0): Directory bread(block 73) failed [ 717.481220][T17659] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.983872][T19001] loop8: detected capacity change from 0 to 1024 [ 718.039177][T19007] befs: Bad value for 'gid' [ 718.072342][T19007] befs: Bad value for 'gid' [ 718.287772][T19001] Process accounting resumed [ 718.464940][ T59] hfsplus: b-tree write err: -5, ino 4 [ 718.863387][T19030] binder: 19028:19030 ioctl c0306201 2000000003c0 returned -22 [ 718.916203][T18019] udevd[18019]: symlink '../../loop6' '/dev/disk/by-diskseq/1578.tmp-b7:6' failed: Read-only file system [ 718.945594][T17816] udevd[17816]: symlink '../../loop1' '/dev/disk/by-diskseq/1577.tmp-b7:1' failed: Read-only file system [ 718.978162][T17960] udevd[17960]: symlink '../../loop8' '/dev/disk/by-diskseq/1582.tmp-b7:8' failed: Read-only file system [ 718.998989][T19033] loop6: detected capacity change from 0 to 256 [ 719.064745][T19037] loop8: detected capacity change from 0 to 256 [ 719.128744][T19037] FAT-fs (loop8): Directory bread(block 1285) failed [ 719.142421][T17816] udevd[17816]: symlink '../../loop6' '/dev/disk/by-diskseq/1583.tmp-b7:6' failed: Read-only file system [ 719.180955][T17816] udevd[17816]: symlink '../../loop6' '/dev/disk/by-uuid/1234-1234.tmp-b7:6' failed: Read-only file system [ 719.221164][T17960] udevd[17960]: symlink '../../loop9' '/dev/disk/by-diskseq/1579.tmp-b7:9' failed: Read-only file system [ 719.238223][T19004] loop0: detected capacity change from 0 to 32768 [ 719.277374][T19037] FAT-fs (loop8): FAT read failed (blocknr 1281) [ 719.283505][T17875] udevd[17875]: symlink '../../loop1' '/dev/disk/by-diskseq/1577.tmp-b7:1' failed: Read-only file system [ 719.295964][T19004] (syz.0.5143,19004,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 719.303618][T18019] udevd[18019]: symlink '../../loop8' '/dev/disk/by-diskseq/1584.tmp-b7:8' failed: Read-only file system [ 719.365857][T17816] udevd[17816]: symlink '../../loop6' '/dev/disk/by-diskseq/1583.tmp-b7:6' failed: Read-only file system [ 719.391568][T19004] (syz.0.5143,19004,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 719.445951][T17875] udevd[17875]: symlink '../../loop9' '/dev/disk/by-diskseq/1579.tmp-b7:9' failed: Read-only file system [ 719.490075][T19043] loop1: detected capacity change from 0 to 2048 [ 719.556945][T19004] JBD2: Ignoring recovery information on journal [ 719.566418][T19043] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 719.719193][T19004] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 719.735933][T19043] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 720.089989][T17661] ocfs2: Unmounting device (7,0) on (node local) [ 720.299071][T19063] loop5: detected capacity change from 0 to 136 [ 720.305912][T19058] loop8: detected capacity change from 0 to 2048 [ 720.396325][T19066] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 720.455087][T19058] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 720.588561][T19058] Remounting filesystem read-only [ 720.593842][T19058] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 720.672029][T19058] NILFS error (device loop8): nilfs_readdir: bad page in #12 [ 720.700513][T19070] loop5: detected capacity change from 0 to 256 [ 721.373311][T19041] loop6: detected capacity change from 0 to 40427 [ 721.558578][T19041] F2FS-fs (loop6): invalid crc value [ 721.570158][T19083] loop9: detected capacity change from 0 to 32768 [ 721.599082][T19083] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 721.607315][T19083] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 721.661843][T19083] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 721.671096][T19083] gfs2: fsid=syz:syz.0: gfs2_check_dirent: name length is greater than space in dirent (not first in block) [ 721.682896][T19083] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 4 2075, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 721.697212][T19083] gfs2: fsid=syz:syz.0: G: s:SH n:2/81b f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 721.706421][T19083] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:19083 [syz.9.5180] gfs2_lookup_meta+0xa7/0x170 [ 721.718600][T19083] gfs2: fsid=syz:syz.0: I: n:4/2075 t:4 f:0x00 d:0x00000201 s:3864 p:0 [ 721.726981][T19083] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 721.734245][T19083] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 721.743097][T19083] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 721.751772][T19083] gfs2: fsid=syz:syz.0: File system withdrawn [ 721.757853][T19083] CPU: 1 UID: 0 PID: 19083 Comm: syz.9.5180 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 721.757886][T19083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 721.757903][T19083] Call Trace: [ 721.757913][T19083] [ 721.757924][T19083] dump_stack_lvl+0x189/0x250 [ 721.757964][T19083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 721.757997][T19083] ? __pfx__printk+0x10/0x10 [ 721.758035][T19083] ? kobject_uevent_env+0x36b/0x8c0 [ 721.758079][T19083] gfs2_withdraw+0x111e/0x14f0 [ 721.758135][T19083] ? __pfx_gfs2_withdraw+0x10/0x10 [ 721.758175][T19083] ? __pfx__printk+0x10/0x10 [ 721.758218][T19083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.758248][T19083] ? gfs2_consist_inode_i+0xf5/0x110 [ 721.758289][T19083] gfs2_dirent_scan+0x545/0x690 [ 721.758328][T19083] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 721.758365][T19083] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 721.758406][T19083] gfs2_dirent_search+0x2e0/0x7e0 [ 721.758442][T19083] ? __pfx_inode_dio_wait+0x10/0x10 [ 721.758472][T19083] ? __pfx_wake_up_bit+0x10/0x10 [ 721.758512][T19083] ? __pfx_gfs2_dirent_search+0x10/0x10 [ 721.758545][T19083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.758580][T19083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.758609][T19083] ? gfs2_glock_nq+0x10bb/0x1900 [ 721.758659][T19083] gfs2_dir_search+0x4c/0x220 [ 721.758700][T19083] gfs2_lookupi+0x3d9/0x5a0 [ 721.758746][T19083] ? __pfx_gfs2_lookupi+0x10/0x10 [ 721.758789][T19083] ? gfs2_lookup_meta+0xa7/0x170 [ 721.758827][T19083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.758856][T19083] ? sprintf+0xd9/0x120 [ 721.758889][T19083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.758918][T19083] ? crc32_le_base+0x1f7/0x250 [ 721.758961][T19083] gfs2_lookup_meta+0xa7/0x170 [ 721.758999][T19083] ? __pfx_gfs2_lookup_meta+0x10/0x10 [ 721.759035][T19083] ? __kasan_kmalloc+0x93/0xb0 [ 721.759067][T19083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.759098][T19083] ? init_journal+0x1238/0x2260 [ 721.759139][T19083] init_journal+0x1297/0x2260 [ 721.759189][T19083] ? init_inodes+0xdb/0x320 [ 721.759231][T19083] ? __pfx_init_journal+0x10/0x10 [ 721.759283][T19083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.759313][T19083] ? snprintf+0xda/0x120 [ 721.759348][T19083] ? init_inodes+0xdb/0x320 [ 721.759383][T19083] ? __pfx_snprintf+0x10/0x10 [ 721.759418][T19083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.759447][T19083] ? gfs2_glock_nq_num+0x13d/0x170 [ 721.759491][T19083] init_inodes+0xdb/0x320 [ 721.759530][T19083] gfs2_fill_super+0x1939/0x20e0 [ 721.759592][T19083] ? __pfx_gfs2_fill_super+0x10/0x10 [ 721.759625][T19083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.759661][T19083] ? init_locking+0xb8/0x210 [ 721.759692][T19083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.759721][T19083] ? sb_set_blocksize+0x104/0x180 [ 721.759751][T19083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.759780][T19083] ? setup_bdev_super+0x4c1/0x5b0 [ 721.759816][T19083] get_tree_bdev_flags+0x40e/0x4d0 [ 721.759847][T19083] ? __pfx_gfs2_fill_super+0x10/0x10 [ 721.759883][T19083] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 721.759916][T19083] ? rcu_is_watching+0x15/0xb0 [ 721.759956][T19083] gfs2_get_tree+0x51/0x1e0 [ 721.759997][T19083] vfs_get_tree+0x92/0x2b0 [ 721.760031][T19083] do_new_mount+0x24a/0xa40 [ 721.760076][T19083] __se_sys_mount+0x317/0x410 [ 721.760118][T19083] ? __pfx___se_sys_mount+0x10/0x10 [ 721.760152][T19083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.760189][T19083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.760218][T19083] ? __x64_sys_mount+0x20/0xc0 [ 721.760255][T19083] do_syscall_64+0xfa/0x3b0 [ 721.760279][T19083] ? lockdep_hardirqs_on+0x9c/0x150 [ 721.760319][T19083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.760344][T19083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.760372][T19083] ? exc_page_fault+0x9f/0xf0 [ 721.760414][T19083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.760439][T19083] RIP: 0033:0x7f1d89b900ca [ 721.760461][T19083] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 721.760483][T19083] RSP: 002b:00007f1d8aa0ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 721.760509][T19083] RAX: ffffffffffffffda RBX: 00007f1d8aa0aef0 RCX: 00007f1d89b900ca [ 721.760529][T19083] RDX: 0000200000000100 RSI: 0000200000012500 RDI: 00007f1d8aa0aeb0 [ 721.760553][T19083] RBP: 0000200000000100 R08: 00007f1d8aa0aef0 R09: 0000000000200001 [ 721.760572][T19083] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 721.760590][T19083] R13: 00007f1d8aa0aeb0 R14: 000000000001260a R15: 00002000000000c0 [ 721.760630][T19083] [ 722.209950][T19083] gfs2: fsid=syz:syz.0: can't find local "sc" file#0: -5 [ 722.534176][T19100] loop0: detected capacity change from 0 to 256 [ 722.648585][T19041] F2FS-fs (loop6): Start checkpoint disabled! [ 723.128521][T13881] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 723.182788][T19082] loop8: detected capacity change from 0 to 32768 [ 723.240623][T19082] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.5179 (19082) [ 723.289970][T13881] usb 10-1: Using ep0 maxpacket: 32 [ 723.312514][T13881] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.332427][T19082] BTRFS info (device loop8): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 723.358530][T13881] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.392289][T19082] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 723.432265][T13881] usb 10-1: config 0 interface 0 has no altsetting 0 [ 723.456693][T19094] loop5: detected capacity change from 0 to 32768 [ 723.465874][T19082] BTRFS info (device loop8): using free-space-tree [ 723.473649][T13881] usb 10-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 723.522185][T13881] usb 10-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 723.559791][T13881] usb 10-1: Product: syz [ 723.564184][T19094] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 723.574041][T13881] usb 10-1: config 0 descriptor?? [ 723.620670][T19094] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 723.907967][ T30] audit: type=1800 audit(1752148817.947:228): pid=19082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5179" name="file2" dev="loop8" ino=261 res=0 errno=0 [ 723.943143][T19082] fs-verity: sha512 using implementation "sha512-avx2" [ 723.995089][T17875] udevd[17875]: symlink '../../loop5' '/dev/disk/by-diskseq/1604.tmp-b7:5' failed: Read-only file system [ 724.103239][T19082] BTRFS info (device loop8): setting compat-ro feature flag for VERITY (0x4) [ 724.115399][T17875] udevd[17875]: symlink '../../loop5' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:5' failed: Read-only file system [ 724.157192][T13881] waterforce 0003:1044:7A4D.0049: item fetching failed at offset 4/5 [ 724.209207][T13881] waterforce 0003:1044:7A4D.0049: hid parse failed with -22 [ 724.227786][T17875] udevd[17875]: symlink '../../loop6' '/dev/disk/by-diskseq/1603.tmp-b7:6' failed: Read-only file system [ 724.256399][T13881] waterforce 0003:1044:7A4D.0049: probe with driver waterforce failed with error -22 [ 724.340449][T13881] usb 10-1: USB disconnect, device number 5 [ 724.410888][T17646] BTRFS info (device loop8): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 724.426133][T17875] udevd[17875]: symlink '../../loop6' '/dev/disk/by-diskseq/1603.tmp-b7:6' failed: Read-only file system [ 724.454652][T19111] loop0: detected capacity change from 0 to 32768 [ 724.553292][T19138] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5198'. [ 724.586660][T17960] udevd[17960]: symlink '../../loop5' '/dev/disk/by-diskseq/1604.tmp-b7:5' failed: Read-only file system [ 724.589894][T19138] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5198'. [ 724.648667][T19111] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 724.680168][T17960] udevd[17960]: symlink '../../loop5' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:5' failed: Read-only file system [ 724.787328][T19111] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 724.897737][T17875] udevd[17875]: symlink '../../loop0' '/dev/disk/by-diskseq/1605.tmp-b7:0' failed: Read-only file system [ 724.940238][T18019] udevd[18019]: symlink '../../loop9' '/dev/disk/by-diskseq/1600.tmp-b7:9' failed: Read-only file system [ 724.991925][T17875] udevd[17875]: symlink '../../loop0' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:0' failed: Read-only file system [ 725.020673][T17960] udevd[17960]: symlink '../../loop6' '/dev/disk/by-diskseq/1603.tmp-b7:6' failed: Read-only file system [ 725.078752][ T5920] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 725.117911][T19146] loop9: detected capacity change from 0 to 512 [ 725.120214][T17661] ocfs2: Unmounting device (7,0) on (node local) [ 725.210527][T19146] EXT4-fs (loop9): Test dummy encryption mode enabled [ 725.217346][T19146] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 725.270461][ T5920] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 725.287823][T19146] EXT4-fs error (device loop9): ext4_orphan_get:1419: comm syz.9.5199: bad orphan inode 131083 [ 725.326676][ T5920] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.337222][T19146] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 725.348198][ T5920] usb 9-1: config 0 interface 0 has no altsetting 0 [ 725.355847][ T5920] usb 9-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 725.365644][ T5920] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.379148][ T5920] usb 9-1: config 0 descriptor?? [ 725.700081][T17647] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.782326][T17652] ocfs2: Unmounting device (7,5) on (node local) [ 725.804390][ T5920] hid-steam 0003:28DE:1102.004A: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.8-1/input0 [ 726.063017][T13881] usb 9-1: USB disconnect, device number 4 [ 726.204808][T19160] loop1: detected capacity change from 0 to 1024 [ 726.235114][T19160] EXT4-fs: Ignoring removed nobh option [ 726.251075][T19160] EXT4-fs: Ignoring removed bh option [ 726.272538][T19158] fido_id[19158]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 726.324576][T19160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 726.381476][T19166] loop5: detected capacity change from 0 to 512 [ 726.451163][T19166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 726.456519][ T30] audit: type=1326 audit(1752148820.497:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19169 comm="syz.9.5208" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d89b8e929 code=0x0 [ 726.488930][T19166] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 726.530816][ T30] audit: type=1800 audit(1752148820.567:230): pid=19166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5202" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 726.574947][T17659] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.903120][T17652] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.232493][T19189] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5217'. [ 727.860996][T19207] loop8: detected capacity change from 0 to 1024 [ 728.054066][ T59] hfsplus: b-tree write err: -5, ino 4 [ 728.232460][T19215] loop6: detected capacity change from 0 to 16 [ 728.307381][T19218] netlink: 120 bytes leftover after parsing attributes in process `syz.1.5230'. [ 728.312574][T19215] erofs (device loop6): mounted with root inode @ nid 36. [ 728.425987][T19215] erofs (device loop6): readahead error at folio 2 @ nid 89 [ 728.450135][T19215] erofs (device loop6): readahead error at folio 0 @ nid 89 [ 728.509172][T19215] erofs (device loop6): read error -117 @ 0 of nid 89 [ 728.524743][ T30] audit: type=1800 audit(1752148822.577:231): pid=19215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5229" name="file3" dev="loop6" ino=89 res=0 errno=0 [ 728.611153][T19223] pimreg: entered allmulticast mode [ 728.807274][T19227] loop8: detected capacity change from 0 to 128 [ 728.860101][T19227] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 728.952254][T19227] ext4 filesystem being mounted at /95/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 729.018091][T18019] udevd[18019]: symlink '../../loop9' '/dev/disk/by-diskseq/1609.tmp-b7:9' failed: Read-only file system [ 729.071995][T17960] udevd[17960]: symlink '../../loop6' '/dev/disk/by-diskseq/1618.tmp-b7:6' failed: Read-only file system [ 729.121735][T17816] udevd[17816]: symlink '../../loop8' '/dev/disk/by-diskseq/1619.tmp-b7:8' failed: Read-only file system [ 729.133996][T18019] udevd[18019]: symlink '../../loop0' '/dev/disk/by-diskseq/1608.tmp-b7:0' failed: Read-only file system [ 729.192978][T17816] udevd[17816]: symlink '../../loop8' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:8' failed: Read-only file system [ 729.236609][T17960] udevd[17960]: symlink '../../loop5' '/dev/disk/by-diskseq/1614.tmp-b7:5' failed: Read-only file system [ 729.315210][T18019] udevd[18019]: symlink '../../loop9' '/dev/disk/by-diskseq/1609.tmp-b7:9' failed: Read-only file system [ 729.334311][T17646] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 729.353367][T17960] udevd[17960]: symlink '../../loop6' '/dev/disk/by-diskseq/1618.tmp-b7:6' failed: Read-only file system [ 729.446406][T17816] udevd[17816]: symlink '../../loop8' '/dev/disk/by-diskseq/1619.tmp-b7:8' failed: Read-only file system [ 729.476744][T19247] loop9: detected capacity change from 0 to 1024 [ 729.488149][T17816] udevd[17816]: symlink '../../loop8' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:8' failed: Read-only file system [ 729.572086][T19251] loop5: detected capacity change from 0 to 16 [ 729.619854][T19251] erofs (device loop5): mounted with root inode @ nid 36. [ 729.848879][T19255] loop1: detected capacity change from 0 to 512 [ 729.899491][T19255] EXT4-fs: Ignoring removed nomblk_io_submit option [ 729.947954][T19255] EXT4-fs: Ignoring removed i_version option [ 730.056348][T19255] EXT4-fs (loop1): 1 orphan inode deleted [ 730.102407][T19266] loop9: detected capacity change from 0 to 256 [ 730.129074][T19255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.361949][T19266] FAT-fs (loop9): Directory bread(block 64) failed [ 730.408720][T19266] FAT-fs (loop9): Directory bread(block 65) failed [ 730.457514][T19266] FAT-fs (loop9): Directory bread(block 66) failed [ 730.471676][T17659] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.508641][T19266] FAT-fs (loop9): Directory bread(block 67) failed [ 730.530307][T19266] FAT-fs (loop9): Directory bread(block 68) failed [ 730.557661][T19266] FAT-fs (loop9): Directory bread(block 69) failed [ 730.578002][T19266] FAT-fs (loop9): Directory bread(block 70) failed [ 730.617367][T19266] FAT-fs (loop9): Directory bread(block 71) failed [ 730.687825][T19266] FAT-fs (loop9): Directory bread(block 72) failed [ 730.703475][T19266] FAT-fs (loop9): Directory bread(block 73) failed [ 731.308994][T17862] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 731.355907][T19298] loop9: detected capacity change from 0 to 256 [ 731.372423][T19298] exfat: Deprecated parameter 'namecase' [ 731.385651][T19298] exFAT-fs (loop9): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 731.458639][ T5960] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 731.491326][T17862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.512492][T17862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.536214][T17862] usb 2-1: New USB device found, idVendor=1e71, idProduct=200d, bcdDevice= 0.00 [ 731.583895][T17862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.602364][T17862] usb 2-1: config 0 descriptor?? [ 731.620494][T19303] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5270'. [ 731.636505][ T5960] usb 9-1: config 0 interface 0 altsetting 248 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.651007][ T5960] usb 9-1: config 0 interface 0 has no altsetting 0 [ 731.657685][ T5960] usb 9-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 731.687321][ T5960] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.706948][ T5960] usb 9-1: config 0 descriptor?? [ 731.829610][ T9] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 732.001929][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 732.014657][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.025073][ T9] usb 10-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 732.035718][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.078356][T17862] nzxt-smart2 0003:1E71:200D.004B: hidraw0: USB HID v0.00 Device [HID 1e71:200d] on usb-dummy_hcd.1-1/input0 [ 732.079536][ T9] usb 10-1: config 0 descriptor?? [ 732.174236][ T5960] semitek 0003:1EA7:0907.004C: unknown main item tag 0x0 [ 732.198516][ T5960] semitek 0003:1EA7:0907.004C: unknown main item tag 0x0 [ 732.205667][ T5960] semitek 0003:1EA7:0907.004C: unknown main item tag 0x0 [ 732.240627][ T5960] semitek 0003:1EA7:0907.004C: unknown main item tag 0x0 [ 732.260057][ T5960] semitek 0003:1EA7:0907.004C: unknown main item tag 0x0 [ 732.277353][T17862] usb 2-1: USB disconnect, device number 28 [ 732.284494][ T5960] semitek 0003:1EA7:0907.004C: unknown main item tag 0x0 [ 732.318724][ T5960] semitek 0003:1EA7:0907.004C: unknown main item tag 0x0 [ 732.337170][T19318] fido_id[19318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 732.369848][ T5960] semitek 0003:1EA7:0907.004C: hidraw0: USB HID v0.00 Device [HID 1ea7:0907] on usb-dummy_hcd.8-1/input0 [ 732.396256][ T5960] usb 9-1: USB disconnect, device number 5 [ 732.518132][ T9] bigben 0003:146B:0902.004D: unexpected rdesc, please submit for review [ 732.559229][ T9] bigben 0003:146B:0902.004D: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.9-1/input0 [ 732.580225][ T9] bigben 0003:146B:0902.004D: not enough fields in HID_OUTPUT_REPORT 0 [ 732.600980][ T9] bigben 0003:146B:0902.004D: no output report found [ 732.647773][T19321] fido_id[19321]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 732.745183][ T5920] usb 10-1: USB disconnect, device number 6 [ 732.892348][T19326] fido_id[19326]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 733.404133][T19325] loop5: detected capacity change from 0 to 32768 [ 733.493045][T19325] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 733.593948][T19325] XFS (loop5): Ending clean mount [ 733.831559][T17652] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 733.938882][T19352] dummy0: entered allmulticast mode [ 734.127007][T19329] loop0: detected capacity change from 0 to 32768 [ 734.133424][T17816] udevd[17816]: symlink '../../loop5' '/dev/disk/by-diskseq/1631.tmp-b7:5' failed: Read-only file system [ 734.232232][T19329] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 734.243107][T17816] udevd[17816]: symlink '../../loop5' '/dev/disk/by-diskseq/1631.tmp-b7:5' failed: Read-only file system [ 734.282717][T19361] loop8: detected capacity change from 0 to 128 [ 734.314361][T17875] udevd[17875]: symlink '../../loop9' '/dev/disk/by-diskseq/1630.tmp-b7:9' failed: Read-only file system [ 734.371200][T19361] hpfs: hpfs_map_sector(): read error [ 734.376816][T18019] udevd[18019]: symlink '../../loop8' '/dev/disk/by-diskseq/1622.tmp-b7:8' failed: Read-only file system [ 734.421152][T17816] udevd[17816]: symlink '../../loop5' '/dev/disk/by-diskseq/1632.tmp-b7:5' failed: Read-only file system [ 734.446538][T19329] XFS (loop0): Ending clean mount [ 734.464287][T19329] XFS (loop0): Quotacheck needed: Please wait. [ 734.474494][T17875] udevd[17875]: symlink '../../loop9' '/dev/disk/by-diskseq/1630.tmp-b7:9' failed: Read-only file system [ 734.476938][T18019] udevd[18019]: symlink '../../loop8' '/dev/disk/by-diskseq/1634.tmp-b7:8' failed: Read-only file system [ 734.498903][T19361] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 734.560181][T19361] hpfs: hpfs_map_sector(): read error [ 734.577448][T19329] XFS (loop0): Quotacheck: Done. [ 734.638337][T19334] loop1: detected capacity change from 0 to 40427 [ 734.674630][T17816] udevd[17816]: symlink '../../loop8' '/dev/disk/by-diskseq/1634.tmp-b7:8' failed: Read-only file system [ 734.690520][T18019] udevd[18019]: symlink '../../loop9' '/dev/disk/by-diskseq/1630.tmp-b7:9' failed: Read-only file system [ 734.751775][T17960] udevd[17960]: symlink '../../loop0' '/dev/disk/by-diskseq/1633.tmp-b7:0' failed: Read-only file system [ 734.778438][T19334] F2FS-fs (loop1): invalid crc value [ 734.824224][T17661] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 735.201277][T19334] F2FS-fs (loop1): Start checkpoint disabled! [ 735.288766][T19334] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 735.427215][T19334] F2FS-fs (loop1): Can't enable fs-verity on inode 10: the verity feature is not enabled on this filesystem [ 735.775350][T19382] loop9: detected capacity change from 0 to 512 [ 735.804009][T19384] loop6: detected capacity change from 0 to 256 [ 735.848042][T19384] exfat: Deprecated parameter 'utf8' [ 735.887856][T19382] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.059000][T19382] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 736.078464][T19372] loop8: detected capacity change from 0 to 131072 [ 736.087236][T17637] kworker/u8:10: attempt to access beyond end of device [ 736.087236][T17637] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 736.118442][T19372] F2FS-fs (loop8): Wrong CP boundary, start(512) end(1536) blocks(0) [ 736.126587][T19372] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 736.183027][T17637] CPU: 1 UID: 0 PID: 17637 Comm: kworker/u8:10 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 736.183063][T17637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 736.183081][T17637] Workqueue: writeback wb_workfn (flush-7:1) [ 736.183129][T17637] Call Trace: [ 736.183139][T17637] [ 736.183150][T17637] dump_stack_lvl+0x189/0x250 [ 736.183189][T17637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 736.183217][T17637] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 736.183255][T17637] ? __pfx_queue_work_on+0x10/0x10 [ 736.183289][T17637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.183319][T17637] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 736.183357][T17637] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 736.183396][T17637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.183424][T17637] ? f2fs_hw_is_readonly+0x39b/0x470 [ 736.183469][T17637] f2fs_handle_critical_error+0x37c/0x540 [ 736.183516][T17637] f2fs_write_end_io+0x495/0x810 [ 736.183538][T17637] ? blkg_put+0x22/0x240 [ 736.183600][T17637] __submit_merged_bio+0x27a/0x6a0 [ 736.183646][T17637] __submit_merged_write_cond+0x255/0x530 [ 736.183694][T17637] f2fs_write_data_pages+0x261d/0x3000 [ 736.183786][T17637] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 736.183825][T17637] ? __local_bh_enable_ip+0x12d/0x1c0 [ 736.183876][T17637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.183947][T17637] ? __lock_acquire+0xab9/0xd20 [ 736.184009][T17637] ? finish_task_switch+0x266/0x950 [ 736.184033][T17637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.184063][T17637] ? lockdep_hardirqs_on+0x9c/0x150 [ 736.184110][T17637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.184139][T17637] ? __lock_acquire+0xab9/0xd20 [ 736.184195][T17637] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 736.184240][T17637] do_writepages+0x32e/0x550 [ 736.184278][T17637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.184308][T17637] ? reacquire_held_locks+0x127/0x1d0 [ 736.184340][T17637] ? writeback_sb_inodes+0x372/0x1000 [ 736.184384][T17637] __writeback_single_inode+0x145/0xff0 [ 736.184415][T17637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.184445][T17637] ? do_raw_spin_unlock+0x122/0x240 [ 736.184492][T17637] writeback_sb_inodes+0x6b5/0x1000 [ 736.184542][T17637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.184604][T17637] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 736.184697][T17637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.184727][T17637] ? rcu_is_watching+0x15/0xb0 [ 736.184760][T17637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.184803][T17637] wb_writeback+0x43b/0xaf0 [ 736.184845][T17637] ? queue_io+0x3a1/0x590 [ 736.184881][T17637] ? __pfx_wb_writeback+0x10/0x10 [ 736.184924][T17637] ? _raw_spin_unlock_irq+0x23/0x50 [ 736.184971][T17637] wb_workfn+0x409/0xef0 [ 736.185036][T17637] ? __pfx_wb_workfn+0x10/0x10 [ 736.185084][T17637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.185113][T17637] ? __lock_acquire+0xab9/0xd20 [ 736.185158][T17637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.185193][T17637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.185229][T17637] ? _raw_spin_unlock_irq+0x23/0x50 [ 736.185266][T17637] ? process_scheduled_works+0x9ef/0x17b0 [ 736.185296][T17637] ? process_scheduled_works+0x9ef/0x17b0 [ 736.185331][T17637] process_scheduled_works+0xae1/0x17b0 [ 736.185408][T17637] ? __pfx_process_scheduled_works+0x10/0x10 [ 736.185452][T17637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.185496][T17637] worker_thread+0x8a0/0xda0 [ 736.185533][T17637] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 736.185593][T17637] ? __kthread_parkme+0x7b/0x200 [ 736.185644][T17637] kthread+0x711/0x8a0 [ 736.185687][T17637] ? __pfx_worker_thread+0x10/0x10 [ 736.185719][T17637] ? __pfx_kthread+0x10/0x10 [ 736.185753][T17637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.185789][T17637] ? _raw_spin_unlock_irq+0x23/0x50 [ 736.185826][T17637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.185855][T17637] ? lockdep_hardirqs_on+0x9c/0x150 [ 736.185893][T17637] ? __pfx_kthread+0x10/0x10 [ 736.185934][T17637] ret_from_fork+0x3fc/0x770 [ 736.185967][T17637] ? __pfx_ret_from_fork+0x10/0x10 [ 736.186002][T17637] ? __switch_to_asm+0x39/0x70 [ 736.186037][T17637] ? __switch_to_asm+0x33/0x70 [ 736.186071][T17637] ? __pfx_kthread+0x10/0x10 [ 736.186112][T17637] ret_from_fork_asm+0x1a/0x30 [ 736.186172][T17637] [ 736.186504][T17637] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 736.186690][T19384] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 736.226677][T19382] Quota error (device loop9): do_check_range: Getting block 1702428675 out of range 1-5 [ 736.665160][T19372] F2FS-fs (loop8): invalid journal entries nats 0 sits 64 [ 736.672402][T19372] F2FS-fs (loop8): Failed to initialize F2FS segment manager (-22) [ 736.723185][T19382] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 736.798543][T19382] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.5300: Failed to acquire dquot type 1 [ 736.991943][T19392] loop5: detected capacity change from 0 to 512 [ 737.082214][T19392] EXT4-fs: Ignoring removed oldalloc option [ 737.100868][T17647] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.349593][T19392] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.5304: Parent and EA inode have the same ino 15 [ 737.455915][T19399] loop6: detected capacity change from 0 to 256 [ 737.468322][T19392] EXT4-fs (loop5): 1 orphan inode deleted [ 737.531833][T19392] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 737.589730][T19399] FAT-fs (loop6): Directory bread(block 64) failed [ 737.614349][T19399] FAT-fs (loop6): Directory bread(block 65) failed [ 737.652923][T19392] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.5304: unexpected EA_INODE flag [ 737.664330][T19399] FAT-fs (loop6): Directory bread(block 66) failed [ 737.702272][T19399] FAT-fs (loop6): Directory bread(block 67) failed [ 737.742947][T19399] FAT-fs (loop6): Directory bread(block 68) failed [ 737.816892][T19399] FAT-fs (loop6): Directory bread(block 69) failed [ 737.840436][T19399] FAT-fs (loop6): Directory bread(block 70) failed [ 737.857242][T19399] FAT-fs (loop6): Directory bread(block 71) failed [ 737.902753][T19399] FAT-fs (loop6): Directory bread(block 72) failed [ 737.904608][T17652] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.933483][T19399] FAT-fs (loop6): Directory bread(block 73) failed [ 737.940664][T19407] loop8: detected capacity change from 0 to 4096 [ 738.010013][T19407] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 738.150731][T19407] Quota error (device loop8): do_check_range: Getting block 327682 out of range 1-5 [ 738.218547][T19407] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 738.241330][T19407] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.5308: Failed to acquire dquot type 1 [ 738.463376][T19421] loop6: detected capacity change from 0 to 256 [ 738.479896][T17646] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.558783][T19421] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 738.672930][T19421] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 738.717096][T19421] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 738.758494][T19421] UDF-fs: Scanning with blocksize 512 failed [ 738.878631][T19421] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 738.935074][T19421] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 738.944337][T19438] loop1: detected capacity change from 0 to 256 [ 739.011197][T19438] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 739.139696][T18019] udevd[18019]: symlink '../../loop1' '/dev/disk/by-uuid/1234-1234.tmp-b7:1' failed: Read-only file system [ 739.196588][T17816] udevd[17816]: symlink '../../loop6' '/dev/disk/by-diskseq/1650.tmp-b7:6' failed: Read-only file system [ 739.266387][T17960] udevd[17960]: symlink '../../loop8' '/dev/disk/by-diskseq/1651.tmp-b7:8' failed: Read-only file system [ 739.287549][T18019] udevd[18019]: symlink '../../loop1' '/dev/disk/by-diskseq/1652.tmp-b7:1' failed: Read-only file system [ 739.293339][T17816] udevd[17816]: symlink '../../loop6' '/dev/disk/by-diskseq/1650.tmp-b7:6' failed: Read-only file system [ 739.304095][T19444] loop8: detected capacity change from 0 to 512 [ 739.367863][T19444] EXT4-fs (loop8): Test dummy encryption mode enabled [ 739.369823][T18019] udevd[18019]: symlink '../../loop1' '/dev/disk/by-uuid/1234-1234.tmp-b7:1' failed: Read-only file system [ 739.433620][T17816] udevd[17816]: symlink '../../loop6' '/dev/disk/by-diskseq/1653.tmp-b7:6' failed: Read-only file system [ 739.447621][T18019] udevd[18019]: symlink '../../loop9' '/dev/disk/by-diskseq/1644.tmp-b7:9' failed: Read-only file system [ 739.470534][T17875] udevd[17875]: symlink '../../loop1' '/dev/disk/by-diskseq/1652.tmp-b7:1' failed: Read-only file system [ 739.496352][T19444] EXT4-fs error (device loop8): ext4_iget_extra_inode:5035: inode #15: comm syz.8.5326: corrupted in-inode xattr: invalid ea_ino [ 739.535555][T18019] udevd[18019]: symlink '../../loop5' '/dev/disk/by-diskseq/1648.tmp-b7:5' failed: Read-only file system [ 739.559762][T19444] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.5326: couldn't read orphan inode 15 (err -117) [ 739.644396][T19444] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 739.831967][ T5960] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 739.877342][T17646] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.996399][T19426] loop0: detected capacity change from 0 to 32768 [ 740.059132][ T5960] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.103007][ T5960] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 740.159796][T19426] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 740.183887][ T5960] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 740.282595][ T5960] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.395264][ T5960] usb 10-1: config 0 descriptor?? [ 740.432220][ T5960] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 740.534291][T19426] XFS (loop0): Ending clean mount [ 740.948497][ T5960] dvb-usb: bulk message failed: -22 (3/0) [ 740.960887][ T5960] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 740.982805][T17661] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 740.996843][ T5960] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 741.011957][ T5960] usb 10-1: media controller created [ 741.052377][ T5960] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 741.106273][ T5960] dvb-usb: bulk message failed: -22 (6/0) [ 741.118220][ T5960] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 741.156800][ T5960] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input25 [ 741.246263][ T5960] dvb-usb: schedule remote query interval to 150 msecs. [ 741.278262][ T5960] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 741.345235][ T5960] usb 10-1: USB disconnect, device number 7 [ 741.570294][ T5960] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 742.025767][T19510] loop0: detected capacity change from 0 to 2048 [ 742.095799][T19513] loop8: detected capacity change from 0 to 512 [ 742.137506][T19517] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 742.230626][T19513] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.308643][T19513] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 742.319201][T19519] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 145: padding at end of block bitmap is not set [ 742.402141][T19521] loop1: detected capacity change from 0 to 512 [ 742.547919][T19521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.550486][T17646] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.570607][T19521] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 742.649283][ T30] audit: type=1800 audit(1752148836.697:232): pid=19521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5356" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 743.082467][T19538] loop6: detected capacity change from 0 to 1024 [ 743.339015][ T4431] hfsplus: b-tree write err: -5, ino 4 [ 743.443818][T17659] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.526632][T19546] loop8: detected capacity change from 0 to 2048 [ 743.605468][T19546] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 743.749020][T19553] loop1: detected capacity change from 0 to 128 [ 743.789101][T19553] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 743.895267][T19553] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 744.181603][T17816] udevd[17816]: symlink '../../loop1' '/dev/disk/by-diskseq/1668.tmp-b7:1' failed: Read-only file system [ 744.265777][T17816] udevd[17816]: symlink '../../loop1' '/dev/disk/by-diskseq/1668.tmp-b7:1' failed: Read-only file system [ 744.282283][T18019] udevd[18019]: symlink '../../loop6' '/dev/disk/by-diskseq/1665.tmp-b7:6' failed: Read-only file system [ 744.292396][T19566] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5377'. [ 744.422941][T17816] udevd[17816]: symlink '../../loop1' '/dev/disk/by-diskseq/1670.tmp-b7:1' failed: Read-only file system [ 744.536601][T17816] udevd[17816]: symlink '../../loop6' '/dev/disk/by-diskseq/1665.tmp-b7:6' failed: Read-only file system [ 744.636061][T17816] udevd[17816]: symlink '../../loop1' '/dev/disk/by-diskseq/1670.tmp-b7:1' failed: Read-only file system [ 744.829331][T17816] udevd[17816]: symlink '../../loop1' '/dev/disk/by-diskseq/1670.tmp-b7:1' failed: Read-only file system [ 744.909999][T17816] udevd[17816]: symlink '../../loop6' '/dev/disk/by-diskseq/1665.tmp-b7:6' failed: Read-only file system [ 744.943723][T19574] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5381'. [ 744.963436][T19558] loop8: detected capacity change from 0 to 32768 [ 744.990736][T19558] btrfs: Deprecated parameter 'usebackuproot' [ 745.007675][T19558] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 745.055660][T19558] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.5373 (19558) [ 745.110382][T18019] udevd[18019]: symlink '../../loop6' '/dev/disk/by-diskseq/1665.tmp-b7:6' failed: Read-only file system [ 745.208119][T19558] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 745.230697][T17875] udevd[17875]: symlink '../../loop1' '/dev/disk/by-diskseq/1670.tmp-b7:1' failed: Read-only file system [ 745.264860][T19558] BTRFS info (device loop8): using crc32c (crc32c-x86_64) checksum algorithm [ 745.308850][T19558] BTRFS info (device loop8): disk space caching is enabled [ 745.326588][T19558] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 745.506459][T19561] loop9: detected capacity change from 0 to 32768 [ 745.597349][T19561] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 745.667903][T19602] loop1: detected capacity change from 0 to 8 [ 745.682094][T19561] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 745.701296][T19561] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 745.907573][T17646] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 745.913120][T19561] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 746.294786][ T5965] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 746.520866][ T5965] usb 2-1: Using ep0 maxpacket: 32 [ 746.558790][ T5965] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 746.602442][ T5965] usb 2-1: config 0 has no interface number 0 [ 746.622655][ T5965] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 746.687925][ T5965] usb 2-1: config 0 interface 196 has no altsetting 0 [ 746.725675][ T5965] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 746.745416][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.790659][ T5965] usb 2-1: Product: syz [ 746.794856][ T5965] usb 2-1: Manufacturer: syz [ 746.838466][ T5965] usb 2-1: SerialNumber: syz [ 746.866332][ T5965] usb 2-1: config 0 descriptor?? [ 746.893516][T19608] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 746.994116][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.342696][ T5965] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 747.389477][ T5965] ipheth 2-1:0.196: probe with driver ipheth failed with error -22 [ 747.455618][T19631] sp0: Synchronizing with TNC [ 747.551256][ T5965] usb 2-1: USB disconnect, device number 29 [ 747.912200][T19617] loop6: detected capacity change from 0 to 32768 [ 747.940108][T19617] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5394 (19617) [ 748.031928][T19617] BTRFS info (device loop6): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 748.084181][T19617] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 748.152239][T19617] BTRFS info (device loop6): using free-space-tree [ 748.361208][T19668] loop1: detected capacity change from 0 to 512 [ 748.460571][T19668] EXT4-fs (loop1): 1 orphan inode deleted [ 748.510802][ T4431] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 748.530281][T19668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 748.594681][ T4431] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 748.610302][T19668] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 748.733214][T17657] BTRFS info (device loop6): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 748.874106][T17659] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.211530][T18019] udevd[18019]: symlink '../../loop9' '/dev/disk/by-diskseq/1675.tmp-b7:9' failed: Read-only file system [ 749.287697][T19682] loop0: detected capacity change from 0 to 4096 [ 749.295500][T17816] udevd[17816]: symlink '../../loop6' '/dev/disk/by-diskseq/1677.tmp-b7:6' failed: Read-only file system [ 749.393469][T17816] udevd[17816]: symlink '../../loop6' '/dev/disk/by-diskseq/1677.tmp-b7:6' failed: Read-only file system [ 749.408025][T18019] udevd[18019]: symlink '../../loop1' '/dev/disk/by-diskseq/1679.tmp-b7:1' failed: Read-only file system [ 749.518482][T19693] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 749.530186][T17960] udevd[17960]: symlink '../../loop8' '/dev/disk/by-diskseq/1676.tmp-b7:8' failed: Read-only file system [ 749.544725][T17816] udevd[17816]: symlink '../../loop6' '/dev/disk/by-diskseq/1677.tmp-b7:6' failed: Read-only file system [ 749.644244][T17816] udevd[17816]: symlink '../../loop6' '/dev/disk/by-diskseq/1680.tmp-b7:6' failed: Read-only file system [ 749.656515][T19694] loop8: detected capacity change from 0 to 1764 [ 749.696689][T17960] udevd[17960]: symlink '../../loop9' '/dev/disk/by-diskseq/1675.tmp-b7:9' failed: Read-only file system [ 749.796518][T17960] udevd[17960]: symlink '../../loop1' '/dev/disk/by-diskseq/1679.tmp-b7:1' failed: Read-only file system [ 749.822155][T17816] udevd[17816]: symlink '../../loop8' '/dev/disk/by-diskseq/1682.tmp-b7:8' failed: Read-only file system [ 750.458653][ T5906] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 750.650606][ T5906] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 750.685657][ T5906] usb 9-1: config 0 interface 0 has no altsetting 0 [ 750.718494][ T5906] usb 9-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 750.768837][ T5906] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.818959][ T5906] usb 9-1: config 0 descriptor?? [ 750.833815][T19706] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 751.299361][ T5906] uclogic 0003:28BD:0078.004E: interface is invalid, ignoring [ 751.461689][ T5906] usb 9-1: USB disconnect, device number 6 [ 751.652412][T19718] loop1: detected capacity change from 0 to 32768 [ 751.707714][T19718] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5430 (19718) [ 751.814817][T19718] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 751.854986][T19723] loop6: detected capacity change from 0 to 32768 [ 751.874993][T19718] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 751.908986][T19718] BTRFS info (device loop1): using free-space-tree [ 752.271469][T19718] BTRFS info (device loop1): rebuilding free space tree [ 752.461795][T19765] loop9: detected capacity change from 0 to 1764 [ 752.528608][T19718] BTRFS info (device loop1): balance: start -susage=34359738372,drange=7..526332,limit=10..0 [ 752.621103][T19718] BTRFS info (device loop1): balance: ended with status: 0 [ 752.910188][T17659] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 753.149173][T19775] nbd: socks must be embedded in a SOCK_ITEM attr [ 753.630021][T19743] loop0: detected capacity change from 0 to 32768 [ 753.887830][T19743] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 754.038806][T19805] loop6: detected capacity change from 0 to 256 [ 754.103506][T19743] XFS (loop0): Ending clean mount [ 754.128903][T19805] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 754.236885][T17816] udevd[17816]: symlink '../../loop1' '/dev/disk/by-diskseq/1690.tmp-b7:1' failed: Read-only file system [ 754.249712][T17875] udevd[17875]: symlink '../../loop8' '/dev/disk/by-diskseq/1684.tmp-b7:8' failed: Read-only file system [ 754.273004][T17960] udevd[17960]: symlink '../../loop6' '/dev/disk/by-diskseq/1692.tmp-b7:6' failed: Read-only file system [ 754.340604][T17960] udevd[17960]: symlink '../../loop6' '/dev/disk/by-uuid/1234-1234.tmp-b7:6' failed: Read-only file system [ 754.396541][T17816] udevd[17816]: symlink '../../loop9' '/dev/disk/by-diskseq/1688.tmp-b7:9' failed: Read-only file system [ 754.518507][T17661] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 754.533152][T17960] udevd[17960]: symlink '../../loop6' '/dev/disk/by-diskseq/1692.tmp-b7:6' failed: Read-only file system [ 754.536585][T18019] udevd[18019]: symlink '../../loop0' '/dev/disk/by-diskseq/1691.tmp-b7:0' failed: Read-only file system [ 754.545014][T19812] program syz.1.5464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 754.594424][T18019] udevd[18019]: symlink '../../loop0' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:0' failed: Read-only file system [ 754.614233][T17960] udevd[17960]: symlink '../../loop6' '/dev/disk/by-uuid/1234-1234.tmp-b7:6' failed: Read-only file system [ 754.735761][T17816] udevd[17816]: symlink '../../loop8' '/dev/disk/by-diskseq/1684.tmp-b7:8' failed: Read-only file system [ 756.397543][T19830] loop9: detected capacity change from 0 to 32768 [ 756.485418][T19830] (syz.9.5474,19830,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 756.560879][T19830] (syz.9.5474,19830,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 756.611160][T19856] loop1: detected capacity change from 0 to 64 [ 756.707892][T19830] JBD2: Ignoring recovery information on journal [ 756.877686][T19830] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 757.004521][T19856] syz.1.5486: attempt to access beyond end of device [ 757.004521][T19856] loop1: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 757.037242][T19837] loop8: detected capacity change from 0 to 32768 [ 757.077625][T19856] Buffer I/O error on dev loop1, logical block 65, lost async page write [ 757.136567][T19856] syz.1.5486: attempt to access beyond end of device [ 757.136567][T19856] loop1: rw=2049, sector=66, nr_sectors = 1 limit=64 [ 757.195117][T19856] Buffer I/O error on dev loop1, logical block 66, lost async page write [ 757.235645][T19830] [ 757.237993][T19830] ====================================================== [ 757.239844][T19856] syz.1.5486: attempt to access beyond end of device [ 757.239844][T19856] loop1: rw=2049, sector=67, nr_sectors = 1 limit=64 [ 757.244986][T19830] WARNING: possible circular locking dependency detected [ 757.244999][T19830] 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 Not tainted [ 757.245015][T19830] ------------------------------------------------------ [ 757.245026][T19830] syz.9.5474/19830 is trying to acquire lock: [ 757.245041][T19830] ffff88805b5c06f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_calc_xattr_init+0x20a/0xd80 [ 757.245103][T19830] [ 757.245103][T19830] but task is already holding lock: [ 757.245113][T19830] ffff88805b6689c0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640 [ 757.245193][T19830] [ 757.245193][T19830] which lock already depends on the new lock. [ 757.245193][T19830] [ 757.245204][T19830] [ 757.245204][T19830] the existing dependency chain (in reverse order) is: [ 757.245215][T19830] [ 757.245215][T19830] -> #3 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{4:4}: [ 757.245263][T19830] lock_acquire+0x120/0x360 [ 757.245288][T19830] down_write+0x96/0x1f0 [ 757.245314][T19830] ocfs2_evict_inode+0x153d/0x40e0 [ 757.245348][T19830] evict+0x504/0x9c0 [ 757.245371][T19830] do_unlinkat+0x3a1/0x560 [ 757.245399][T19830] __x64_sys_unlink+0x47/0x50 [ 757.245427][T19830] do_syscall_64+0xfa/0x3b0 [ 757.245451][T19830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.245475][T19830] [ 757.245475][T19830] -> #2 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{4:4}: [ 757.245516][T19830] lock_acquire+0x120/0x360 [ 757.245539][T19830] down_write+0x96/0x1f0 [ 757.245572][T19830] ocfs2_del_inode_from_orphan+0x134/0x740 [ 757.245606][T19830] ocfs2_dio_end_io+0x479/0x10f0 [ 757.419091][T19830] dio_complete+0x25b/0x790 [ 757.424129][T19830] __blockdev_direct_IO+0x2db6/0x33d0 [ 757.430039][T19830] ocfs2_direct_IO+0x25f/0x2d0 [ 757.435327][T19830] generic_file_direct_write+0x1db/0x3e0 [ 757.441482][T19830] __generic_file_write_iter+0x11d/0x230 [ 757.447639][T19830] ocfs2_file_write_iter+0x157a/0x1d10 [ 757.453627][T19830] vfs_write+0x54b/0xa90 [ 757.458392][T19830] ksys_write+0x145/0x250 [ 757.463249][T19830] do_syscall_64+0xfa/0x3b0 [ 757.468269][T19830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.474683][T19830] [ 757.474683][T19830] -> #1 (&oi->ip_alloc_sem){++++}-{4:4}: [ 757.482536][T19830] lock_acquire+0x120/0x360 [ 757.487558][T19830] down_write+0x96/0x1f0 [ 757.492318][T19830] ocfs2_try_remove_refcount_tree+0xb6/0x320 [ 757.498834][T19830] ocfs2_truncate_file+0xda0/0x1420 [ 757.504564][T19830] ocfs2_setattr+0x1520/0x1b40 [ 757.509862][T19830] notify_change+0xb36/0xe40 [ 757.514976][T19830] do_truncate+0x1a4/0x220 [ 757.519918][T19830] path_openat+0x306c/0x3830 [ 757.525027][T19830] do_filp_open+0x1fa/0x410 [ 757.530046][T19830] do_sys_openat2+0x121/0x1c0 [ 757.535272][T19830] __x64_sys_openat+0x138/0x170 [ 757.540656][T19830] do_syscall_64+0xfa/0x3b0 [ 757.545681][T19830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.552094][T19830] [ 757.552094][T19830] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}: [ 757.559930][T19830] validate_chain+0xb9b/0x2140 [ 757.565217][T19830] __lock_acquire+0xab9/0xd20 [ 757.570423][T19830] lock_acquire+0x120/0x360 [ 757.575446][T19830] down_read+0x46/0x2e0 [ 757.580122][T19830] ocfs2_calc_xattr_init+0x20a/0xd80 [ 757.585920][T19830] ocfs2_mknod+0xc92/0x2050 [ 757.590945][T19830] ocfs2_create+0x1a5/0x440 [ 757.595975][T19830] path_openat+0x14f4/0x3830 [ 757.601082][T19830] do_filp_open+0x1fa/0x410 [ 757.606101][T19830] do_sys_openat2+0x121/0x1c0 [ 757.611304][T19830] __x64_sys_open+0x11e/0x150 [ 757.616513][T19830] do_syscall_64+0xfa/0x3b0 [ 757.621531][T19830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.627941][T19830] [ 757.627941][T19830] other info that might help us debug this: [ 757.627941][T19830] [ 757.638158][T19830] Chain exists of: [ 757.638158][T19830] &oi->ip_xattr_sem --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type] --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2 [ 757.638158][T19830] [ 757.656961][T19830] Possible unsafe locking scenario: [ 757.656961][T19830] [ 757.664399][T19830] CPU0 CPU1 [ 757.669753][T19830] ---- ---- [ 757.675103][T19830] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2); [ 757.682396][T19830] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]); [ 757.692033][T19830] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2); [ 757.701853][T19830] rlock(&oi->ip_xattr_sem); [ 757.706533][T19830] [ 757.706533][T19830] *** DEADLOCK *** [ 757.706533][T19830] [ 757.714664][T19830] 3 locks held by syz.9.5474/19830: [ 757.719865][T19830] #0: ffff88807d830428 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 757.729123][T19830] #1: ffff88805b5c09c0 (&type->i_mutex_dir_key#12){++++}-{4:4}, at: path_openat+0x8da/0x3830 [ 757.739423][T19830] #2: ffff88805b6689c0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640 [ 757.753121][T19830] [ 757.753121][T19830] stack backtrace: [ 757.759002][T19830] CPU: 1 UID: 0 PID: 19830 Comm: syz.9.5474 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 757.759032][T19830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 757.759047][T19830] Call Trace: [ 757.759056][T19830] [ 757.759066][T19830] dump_stack_lvl+0x189/0x250 [ 757.759098][T19830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 757.759127][T19830] ? __pfx__printk+0x10/0x10 [ 757.759157][T19830] ? stack_trace_save+0x9c/0xe0 [ 757.759192][T19830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.759225][T19830] print_circular_bug+0x2ee/0x310 [ 757.759259][T19830] check_noncircular+0x134/0x160 [ 757.759293][T19830] validate_chain+0xb9b/0x2140 [ 757.759322][T19830] ? do_syscall_64+0xfa/0x3b0 [ 757.759354][T19830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.759384][T19830] __lock_acquire+0xab9/0xd20 [ 757.759411][T19830] ? ocfs2_calc_xattr_init+0x20a/0xd80 [ 757.759432][T19830] lock_acquire+0x120/0x360 [ 757.759454][T19830] ? ocfs2_calc_xattr_init+0x20a/0xd80 [ 757.759477][T19830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.759507][T19830] ? security_inode_init_security+0x35e/0x3f0 [ 757.759534][T19830] down_read+0x46/0x2e0 [ 757.759557][T19830] ? ocfs2_calc_xattr_init+0x20a/0xd80 [ 757.759580][T19830] ocfs2_calc_xattr_init+0x20a/0xd80 [ 757.759607][T19830] ? __pfx_ocfs2_calc_xattr_init+0x10/0x10 [ 757.759647][T19830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.759674][T19830] ? ocfs2_init_security_get+0x139/0x1a0 [ 757.759699][T19830] ocfs2_mknod+0xc92/0x2050 [ 757.759738][T19830] ? __pfx_ocfs2_mknod+0x10/0x10 [ 757.759769][T19830] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 757.759792][T19830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.759820][T19830] ? __lock_acquire+0xab9/0xd20 [ 757.759859][T19830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.759887][T19830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.759914][T19830] ? look_up_lock_class+0x74/0x170 [ 757.759952][T19830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.759979][T19830] ? register_lock_class+0x51/0x320 [ 757.760005][T19830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.760032][T19830] ? __lock_acquire+0xab9/0xd20 [ 757.760059][T19830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.760086][T19830] ? __lock_acquire+0xab9/0xd20 [ 757.760113][T19830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.760140][T19830] ? do_raw_spin_lock+0x121/0x290 [ 757.760176][T19830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.760205][T19830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.760232][T19830] ? do_raw_spin_unlock+0x122/0x240 [ 757.760267][T19830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.760296][T19830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.760323][T19830] ? rcu_is_watching+0x15/0xb0 [ 757.760352][T19830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.760379][T19830] ? ocfs2_lookup+0x4a0/0x990 [ 757.760412][T19830] ocfs2_create+0x1a5/0x440 [ 757.760441][T19830] ? __pfx_ocfs2_lookup+0x10/0x10 [ 757.760470][T19830] ? from_kgid+0x1b0/0x650 [ 757.760506][T19830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.760534][T19830] ? __pfx_ocfs2_create+0x10/0x10 [ 757.760563][T19830] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 757.760599][T19830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.760626][T19830] ? inode_permission+0x149/0x470 [ 757.760659][T19830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.760686][T19830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.760714][T19830] ? __pfx_ocfs2_create+0x10/0x10 [ 757.760744][T19830] path_openat+0x14f4/0x3830 [ 757.760766][T19830] ? arch_stack_walk+0xfc/0x150 [ 757.760813][T19830] ? __pfx_path_openat+0x10/0x10 [ 757.760841][T19830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.760875][T19830] do_filp_open+0x1fa/0x410 [ 757.760897][T19830] ? __lock_acquire+0xab9/0xd20 [ 757.760921][T19830] ? __pfx_do_filp_open+0x10/0x10 [ 757.760956][T19830] ? _raw_spin_unlock+0x28/0x50 [ 757.760988][T19830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.761019][T19830] ? alloc_fd+0x64c/0x6c0 [ 757.761054][T19830] do_sys_openat2+0x121/0x1c0 [ 757.761091][T19830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.761118][T19830] ? __se_sys_futex+0x36f/0x400 [ 757.761150][T19830] ? __pfx_do_sys_openat2+0x10/0x10 [ 757.761190][T19830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.761217][T19830] ? rcu_is_watching+0x15/0xb0 [ 757.761247][T19830] __x64_sys_open+0x11e/0x150 [ 757.761285][T19830] do_syscall_64+0xfa/0x3b0 [ 757.761307][T19830] ? lockdep_hardirqs_on+0x9c/0x150 [ 757.761343][T19830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.761365][T19830] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.761392][T19830] ? exc_page_fault+0x9f/0xf0 [ 757.761442][T19830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.761465][T19830] RIP: 0033:0x7f1d89b8e929 [ 757.761486][T19830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 757.761506][T19830] RSP: 002b:00007f1d8aa0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 757.761529][T19830] RAX: ffffffffffffffda RBX: 00007f1d89db5fa0 RCX: 00007f1d89b8e929 [ 757.761547][T19830] RDX: 0000000000000000 RSI: 000000000014927e RDI: 0000200000000180 [ 757.761563][T19830] RBP: 00007f1d89c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 757.761578][T19830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.761593][T19830] R13: 0000000000000000 R14: 00007f1d89db5fa0 R15: 00007ffd37e63b78 [ 757.761618][T19830] [ 758.288476][T19856] Buffer I/O error on dev loop1, logical block 67, lost async page write [ 758.297175][T19856] syz.1.5486: attempt to access beyond end of device [ 758.297175][T19856] loop1: rw=2049, sector=68, nr_sectors = 1 limit=64 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 758.451784][T19856] Buffer I/O error on dev loop1, logical block 68, lost async page write [ 758.514408][T19848] loop6: detected capacity change from 0 to 32768 [ 758.525733][T19856] syz.1.5486: attempt to access beyond end of device [ 758.525733][T19856] loop1: rw=2049, sector=72, nr_sectors = 1 limit=64 [ 758.539242][T19856] Buffer I/O error on dev loop1, logical block 72, lost async page write [ 758.547758][T19856] syz.1.5486: attempt to access beyond end of device [ 758.547758][T19856] loop1: rw=2049, sector=73, nr_sectors = 1 limit=64 [ 758.561232][T19856] Buffer I/O error on dev loop1, logical block 73, lost async page write [ 758.569767][T19856] syz.1.5486: attempt to access beyond end of device [ 758.569767][T19856] loop1: rw=2049, sector=76, nr_sectors = 1 limit=64 [ 758.591511][T19856] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 758.604209][T19856] syz.1.5486: attempt to access beyond end of device [ 758.604209][T19856] loop1: rw=2049, sector=77, nr_sectors = 1 limit=64 [ 758.658533][T17656] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 758.732355][T19848] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 758.749269][T17656] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 758.758193][T19856] Buffer I/O error on dev loop1, logical block 77, lost async page write [ 758.767749][T19856] syz.1.5486: attempt to access beyond end of device [ 758.767749][T19856] loop1: rw=2049, sector=78, nr_sectors = 760 limit=64 [ 758.786735][T17656] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 758.810734][T17656] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 758.818104][T17656] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 759.014356][T17647] ocfs2: Unmounting device (7,9) on (node local) [ 759.030639][ T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.275098][ T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.556038][ T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.575066][T19866] chnl_net:caif_netlink_parms(): no params data found [ 759.626881][T19866] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.634735][T19866] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.642401][T19866] bridge_slave_0: entered allmulticast mode [ 759.650132][T19866] bridge_slave_0: entered promiscuous mode [ 759.657369][T19866] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.664550][T19866] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.680009][T19866] bridge_slave_1: entered allmulticast mode [ 759.686832][T19866] bridge_slave_1: entered promiscuous mode [ 759.706783][ T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.736306][T19848] ocfs2: Unmounting device (7,6) on (node local) [ 759.754043][T19866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.767619][T19866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.793251][T19866] team0: Port device team_slave_0 added [ 759.801258][T19866] team0: Port device team_slave_1 added [ 759.828910][T19866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.835853][T19866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.862238][T19866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.879794][T19866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.886744][T19866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.914419][T19866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.956100][ T59] bridge_slave_1: left allmulticast mode [ 759.961851][ T59] bridge_slave_1: left promiscuous mode [ 759.967500][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.979430][ T59] bridge_slave_0: left allmulticast mode [ 759.985062][ T59] bridge_slave_0: left promiscuous mode [ 759.991280][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.137955][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 760.147938][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 760.157790][ T59] bond0 (unregistering): Released all slaves [ 760.177118][T19866] hsr_slave_0: entered promiscuous mode [ 760.183609][T19866] hsr_slave_1: entered promiscuous mode [ 760.189785][T19866] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 760.208458][T19866] Cannot create hsr debugfs directory [ 760.215037][ T59] tipc: Left network mode [ 760.428132][ T59] hsr_slave_0: left promiscuous mode [ 760.434501][ T59] hsr_slave_1: left promiscuous mode [ 760.440401][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 760.447820][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.455514][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 760.463755][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 760.474976][ T59] veth1_macvtap: left promiscuous mode [ 760.480596][ T59] veth0_macvtap: left promiscuous mode [ 760.486193][ T59] veth1_vlan: left promiscuous mode [ 760.491498][ T59] veth0_vlan: left promiscuous mode [ 760.637416][ T59] team0 (unregistering): Port device team_slave_1 removed [ 760.654080][ T59] team0 (unregistering): Port device team_slave_0 removed [ 760.912314][T17656] Bluetooth: hci0: command tx timeout [ 760.976399][T19866] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 760.999177][T19866] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 761.009266][T19866] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 761.023744][T19866] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 761.079247][T19866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.097165][T19866] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.110814][ T59] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.125681][ T4431] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.132796][ T4431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.146109][ T4001] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.153235][ T4001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.170441][ T59] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.223939][ T59] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.295747][ T59] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.344167][T19866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 761.397079][ T59] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.423534][T19866] veth0_vlan: entered promiscuous mode [ 761.433403][T19866] veth1_vlan: entered promiscuous mode [ 761.445526][ T59] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.470850][T19866] veth0_macvtap: entered promiscuous mode [ 761.481265][T19866] veth1_macvtap: entered promiscuous mode [ 761.493615][ T59] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.512916][T19866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 761.523118][T19866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 761.535952][T19866] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.545766][T19866] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.555280][T19866] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.564184][T19866] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.576646][ T59] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.607030][T19866] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht' [ 761.630834][T17637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.632365][T19866] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht' [ 761.643740][T17637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.673348][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.681696][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.719161][ T59] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.774411][ T59] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.814472][ T59] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.874019][ T59] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.993954][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.072985][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.154586][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.213597][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.308102][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.363777][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.453795][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.528541][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.640503][ T59] bridge_slave_1: left allmulticast mode [ 762.646200][ T59] bridge_slave_1: left promiscuous mode [ 762.652202][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.662827][ T59] bridge_slave_0: left allmulticast mode [ 762.669048][ T59] bridge_slave_0: left promiscuous mode [ 762.675757][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.685238][ T59] bridge_slave_1: left allmulticast mode [ 762.691004][ T59] bridge_slave_1: left promiscuous mode [ 762.696646][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.705869][ T59] bridge_slave_0: left allmulticast mode [ 762.711686][ T59] bridge_slave_0: left promiscuous mode [ 762.717329][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.726994][ T59] bridge_slave_1: left allmulticast mode [ 762.732830][ T59] bridge_slave_1: left promiscuous mode [ 762.738679][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.747057][ T59] bridge_slave_0: left allmulticast mode [ 762.753187][ T59] bridge_slave_0: left promiscuous mode [ 762.758916][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.768060][ T59] bridge_slave_1: left allmulticast mode [ 762.775644][ T59] bridge_slave_1: left promiscuous mode [ 762.781963][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.791819][ T59] bridge_slave_0: left allmulticast mode [ 762.797444][ T59] bridge_slave_0: left promiscuous mode [ 762.803302][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.813357][ T59] bridge_slave_1: left allmulticast mode [ 762.819139][ T59] bridge_slave_1: left promiscuous mode [ 762.824817][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.833838][ T59] bridge_slave_0: left allmulticast mode [ 762.839785][ T59] bridge_slave_0: left promiscuous mode [ 762.845427][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.065033][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.075290][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.086089][ T59] bond0 (unregistering): Released all slaves [ 763.172595][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.182858][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.193527][ T59] bond0 (unregistering): Released all slaves [ 763.314321][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.325931][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.335895][ T59] bond0 (unregistering): Released all slaves [ 763.414658][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.424921][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.434746][ T59] bond0 (unregistering): Released all slaves [ 763.526543][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.538290][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.548201][ T59] bond0 (unregistering): Released all slaves [ 764.259524][ T59] hsr_slave_0: left promiscuous mode [ 764.265259][ T59] hsr_slave_1: left promiscuous mode [ 764.271997][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 764.279540][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.287311][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.296572][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.306843][ T59] hsr_slave_0: left promiscuous mode [ 764.312947][ T59] hsr_slave_1: left promiscuous mode [ 764.318694][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 764.326091][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.333959][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.341481][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.355377][ T59] hsr_slave_0: left promiscuous mode [ 764.361402][ T59] hsr_slave_1: left promiscuous mode [ 764.367106][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 764.374650][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.382332][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.389841][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.400592][ T59] hsr_slave_0: left promiscuous mode [ 764.406336][ T59] hsr_slave_1: left promiscuous mode [ 764.412521][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 764.420123][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.427896][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.436043][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.446855][ T59] hsr_slave_0: left promiscuous mode [ 764.452709][ T59] hsr_slave_1: left promiscuous mode [ 764.458570][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 764.465978][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.473884][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.481344][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.503664][ T59] veth1_macvtap: left promiscuous mode [ 764.509615][ T59] veth0_macvtap: left promiscuous mode [ 764.515375][ T59] veth1_vlan: left promiscuous mode [ 764.520791][ T59] veth0_vlan: left promiscuous mode [ 764.526803][ T59] veth1_macvtap: left promiscuous mode [ 764.533065][ T59] veth0_macvtap: left promiscuous mode [ 764.538668][ T59] veth1_vlan: left promiscuous mode [ 764.543944][ T59] veth0_vlan: left promiscuous mode [ 764.550190][ T59] veth1_macvtap: left promiscuous mode [ 764.555681][ T59] veth0_macvtap: left promiscuous mode [ 764.561333][ T59] veth1_vlan: left promiscuous mode [ 764.566603][ T59] veth0_vlan: left promiscuous mode [ 764.572682][ T59] veth1_macvtap: left promiscuous mode [ 764.578187][ T59] veth0_macvtap: left promiscuous mode [ 764.583814][ T59] veth1_vlan: left promiscuous mode [ 764.590760][ T59] veth0_vlan: left promiscuous mode [ 764.596749][ T59] veth1_macvtap: left promiscuous mode [ 764.602363][ T59] veth0_macvtap: left promiscuous mode [ 764.607919][ T59] veth1_vlan: left promiscuous mode [ 764.613430][ T59] veth0_vlan: left promiscuous mode [ 764.945912][ T59] team0 (unregistering): Port device team_slave_1 removed [ 764.963250][ T59] team0 (unregistering): Port device team_slave_0 removed [ 765.186015][ T59] team0 (unregistering): Port device team_slave_1 removed [ 765.223513][ T59] team0 (unregistering): Port device team_slave_0 removed [ 765.294636][ T59] dummy0 (unregistering): left allmulticast mode [ 765.411333][ T59] team0 (unregistering): Port device team_slave_1 removed [ 765.423975][ T59] team0 (unregistering): Port device team_slave_0 removed [ 765.560453][ T59] pimreg (unregistering): left allmulticast mode [ 765.681910][ T59] team0 (unregistering): Port device team_slave_1 removed [ 765.708237][ T59] team0 (unregistering): Port device team_slave_0 removed [ 765.893191][ T59] team0 (unregistering): Port device team_slave_1 removed [ 765.909272][ T59] team0 (unregistering): Port device team_slave_0 removed [ 767.076055][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.143541][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.184171][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0