last executing test programs: 2m51.224896061s ago: executing program 1 (id=2372): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000340)={0x1, 0x1fd, 0x7f, 0x0, 0xd}) 2m51.117946672s ago: executing program 1 (id=2376): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d55906000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9ccd5788029901e5a79d8b9990ace8f74087f25ad50c4608800"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2m50.979695906s ago: executing program 1 (id=2377): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x1641, @private2, 0xfffffff9}}, 0xfff, 0x9}, &(0x7f0000000200)=0x90) 2m50.039187432s ago: executing program 1 (id=2395): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x800, &(0x7f0000001ec0)={[{@iocharset={'iocharset', 0x3d, 'cp1251'}}, {}, {@gid}, {@keep_last_dots}, {}, {@dmask={'dmask', 0x3d, 0x10000}}, {@allow_utime={'allow_utime', 0x3d, 0x2}}, {@namecase}, {@utf8}, {@utf8}, {@sys_tz}]}, 0x1, 0x1548, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./trace\x00', &(0x7f00000006c0)='tracefs\x00', 0x0, 0x0) 2m49.738661862s ago: executing program 1 (id=2401): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000008000000000aec8000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000006d000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 2m49.346550193s ago: executing program 1 (id=2405): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)={[{@barrier_val={'barrier', 0x3d, 0x8}}]}, 0x1, 0x4c7, &(0x7f0000008740)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x2) 2m49.102724447s ago: executing program 32 (id=2405): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)={[{@barrier_val={'barrier', 0x3d, 0x8}}]}, 0x1, 0x4c7, &(0x7f0000008740)="$eJzs3ctrW1caAPBPku3YjmfymGFIMjAJZCDzIJYfDLFnZjOrmVkEhgnMZgYyrq24rmXLWHIam0CddpdFF6WlhdJFl4X+A+2mWTUUStftvmRRUtrUhbZQUNGV5MgPuWpjR8X394NrnXuOrO8ei+/46uhKJ4DUOlf7kYkYiogPIuJYfXfrHc7VbzYe3JyubZmoVq98lknuV9tv3rX5e0cjYj0i+iPi33+PeCKzM255dW1+qlgsLDf285WFpXx5de3i3MLUbGG2sDg6cWlycmJkfGxy3/p6+/mnbl9++599b3713P27L7z7Tu2whhptrf3YT/Wu98aJlrqeiPjrQQTrglyjPwPdPhB+lNrz94uIOJ/k/7HIJc8mkAbVarX6bfVIu+b1KnBoZZNz4Ex2OCLq5Wx2eLh+Dv/LGMwWS+XKH6+VVhZn6ufKx6M3e22uWBhpvFY4Hr2Z2v5oUn64P7ZtfzwiOQd+MTeQ7A9Pl4ozj3eoA7Y5ui3/v8zV8x9ICS/5Ib3kP6SX/If0kv+QXvIf0kv+Q3rJf0gv+Q/pJf8hveQ/pJf8h1T61+XLta3a/Pz7zPXVlfnS9YszhfL88MLK9PB0aTmGZ0tH3urs8Yql0tLon2LlRr5SKFfy5dW1qwullcXK1bmFqdm+KPQecH+Azp04e+ejTESs/3kg2Wr6Gm1yFQ636jP17wAA0ie3Y0To68o4BDx+pv4gvbzGB3b5it4t+ts1LD1S1O8LCxygbLcPAOiaC6e9/wdptXP+H0gL8/+QXlvP8Z0NQBp1Z/4f6Cbz/5BeQy3r/2Ra1v/6WcvaXSMR8fOI+DDXe6S51hdwGGQ/yTRy/8Kx3w5tb+3LfJ1MCvRFxNOvXnn5xlSlsjxaq/98s77ySr3+h35yoO2qo8CBSPJ3rHHrHzkApFdPxMaDm9PNbbP++MGH/vRv7eL3NOYm+5P3KAc3MluuVcjs07UL67ci4tRu8TON9c7r73wMbuR2xD/ZuM3UHyI53p5k3fRHiX/vjU7jn26J/5uW+Gce+a8C6XCnNv6M7Jb/2SSnYzP/to4/Q/t0fXT78S+7Of7l2ox/ZzuM8eRrz95rG/9WxJld4zfj9SextsevHduFDuPf/99/ftWurfp6/XF2i99UK+UrC0v58uraxbmFqdnCbGFxdOLS5OTEyPjYZD6Zo843Z6p3+sup9+/u1f/BNvH36n+t7vcd9v+bX7/333N7xP/d+d2f/5N7xB+IiD90GP+LsY//366tFn+mTf+z2+O3TPDV6sY7jF9+6R+m+gDgJ6S8ujY/VSwWlhUUFBQ2C90emYCD9jDpu30kAAAAAAAAAAAAQKcex+XE3e4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBh8F0AAAD//5/R0pU=") renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x2) 2m43.579086841s ago: executing program 3 (id=2445): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000005000000020000000000000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m43.575888221s ago: executing program 2 (id=2446): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fadvise64(r0, 0x1a86, 0x6, 0x2) 2m43.257853874s ago: executing program 3 (id=2448): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x15, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x30000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80080000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa85}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) 2m43.19909341s ago: executing program 2 (id=2449): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @loopback, 0x3}, 0x1c) 2m43.082569772s ago: executing program 2 (id=2451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000016080002400008000d0900020073797a3200"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 2m42.955585505s ago: executing program 2 (id=2452): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB='dmask=00000000000000000021143,utf8,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c696f636861727365743d10524aa7726f617469616e2c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp874,utf8,discard,errors=continue,iocharset=cp864,time_offset=0x0000000000000007,\x00'], 0x2, 0x1533, &(0x7f00000010c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002840)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002880)='./sys\x00', &(0x7f00000028c0)='sysfs\x00', 0x0, 0x0) 2m42.946871516s ago: executing program 3 (id=2454): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) ftruncate(r0, 0x3) 2m42.823618828s ago: executing program 3 (id=2455): syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0x200004c, &(0x7f0000000340)={[{@umask={'umask', 0x3d, 0x3}}, {@utf8}, {@uid={'uid', 0x3d, 0xee01}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@umask={'umask', 0x3d, 0x2}}, {@errors_remount}, {@gid}, {@umask={'umask', 0x3d, 0x4}}, {@errors_remount}]}, 0x5, 0x152b, &(0x7f00000016c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000700)='./proc_mnt\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) 2m42.629236768s ago: executing program 2 (id=2457): syz_mount_image$xfs(&(0x7f00000001c0), &(0x7f0000009640)='./file1\x00', 0x18040, &(0x7f0000000100)={[{@nolazytime}, {@dax_never}, {@inode32}, {@sysvgroups}, {@grpquota}, {@bsdgroups}, {@nouuid}]}, 0x4, 0x9736, &(0x7f0000012d80)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 2m42.381066213s ago: executing program 3 (id=2459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002d00)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000002d40)={0x1, &(0x7f0000002d80)=[{0x4d, 0x1, 0x3, 0x82000000}]}) 2m42.174527205s ago: executing program 2 (id=2460): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x3b4) 2m41.638204809s ago: executing program 33 (id=2460): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x3b4) 2m41.592145324s ago: executing program 3 (id=2462): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x1}}) 2m41.037273221s ago: executing program 34 (id=2462): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x1}}) 49.338755973s ago: executing program 4 (id=3474): unshare(0x28000600) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0], 0x2000, 0x800) msgctl$IPC_RMID(r0, 0x0) 49.238617554s ago: executing program 4 (id=3477): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x1, 0x2, 0x4, 0xffff, 0x0, "008ef14ba278887cb0baba08431799317e6324"}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 48.38724533s ago: executing program 4 (id=3483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c00000002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 48.09692563s ago: executing program 4 (id=3486): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x51) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x1040800, 0x0) 47.897433631s ago: executing program 4 (id=3489): setns(0xc9, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = socket$netlink(0x10, 0x3, 0x12) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001100034700bb65e1c3e4ffff0100b2a1010000055600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 47.502676941s ago: executing program 4 (id=3493): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @empty, 0x80000000}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1e, 0x0, 0x0) 46.916147321s ago: executing program 35 (id=3493): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @empty, 0x80000000}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1e, 0x0, 0x0) 46.62625014s ago: executing program 6 (id=3499): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv4/fib_multipath_hash_policy\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 46.326632421s ago: executing program 6 (id=3502): syz_mount_image$f2fs(&(0x7f0000001fc0), &(0x7f0000002000)='./file1\x00', 0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000002180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x8042, 0x0) pwrite64(r0, &(0x7f0000000700)="1804", 0x2, 0x8080c56) fallocate(r0, 0x3, 0x80007, 0x8000c60) 44.213808527s ago: executing program 6 (id=3516): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x3aeb, &(0x7f00000001c0)={0x0, 0xbd0f, 0x100, 0x8, 0x401f8}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x2, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 41.767056266s ago: executing program 6 (id=3529): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000440)={[{@dmask={'dmask', 0x3d, 0x2263}}, {@utf8}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@gid}, {@discard}, {@utf8}, {@discard}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@time_offset={'time_offset', 0x3d, 0x7}}]}, 0x2, 0x1536, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) 41.393356345s ago: executing program 6 (id=3532): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 39.029150776s ago: executing program 6 (id=3540): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000140)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="080000009c004662", 0x8}], 0x1}}], 0x1, 0x4800) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10020) 38.349757195s ago: executing program 36 (id=3540): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000140)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="080000009c004662", 0x8}], 0x1}}], 0x1, 0x4800) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10020) 6.995133066s ago: executing program 8 (id=3743): mkdirat(0xffffffffffffff9c, &(0x7f0000006980)='./dev\x00', 0x0) syz_usb_connect(0x0, 0x86, &(0x7f00000069c0)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa090400000effffff00070581024000000705820240000007058302400000070584024000000705850240000007058602400000070587024000000705010240000007050202400000070503024000000705040240000007050502"], 0x0) mount(0x0, &(0x7f0000007900)='./dev\x00', &(0x7f0000007940)='devtmpfs\x00', 0x0, 0x0) open(&(0x7f0000007980)='./dev/ttyUSB0\x00', 0xc002, 0x2) 5.452099333s ago: executing program 0 (id=3737): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000080)={[{@journal_ioprio}, {@debug}, {@nombcache}]}, 0x1, 0x533, &(0x7f0000000b00)="$eJzs3e9rI2kdAPDvTJped7dncyqyHnh3uCe7h26yvXp3VeRuBdFXB+r5fi1tWkrTpjTpuS2H9vCFLwURFfwDfCP4Bwhyf4IIB/peVBTRPX2pO5Jkgv2RNKFNN73084Fpnmcm83y/z9BMZiYPMwFcWS9ExP2IKETESxExl89P8ykOOlPrfR88eme5NSWRZW/9I4kkn9dtq1Wfiogb+WozEfHNr0XcSk/GbeztbyzVatWdvF5pbm5XGnv7d9c3l9aqa9WthYX5VxdfW3xl8V6WO1c/SxHx+lf+8pMf/uKrr//mc9/544O/3fluK98vfaKTd0QsnytAH522i+1t0dXaRjsXEWxMWv0pFsadBQAAw2gdmn80Ij7dPv6fi0L7aA4AAACYJNkbs/GfJCIDAAAAJlYaEbORpOV8LMBspGm53BnD+/G4ntbqjeZnV+u7WyutZRGlKKar67XqvXyscCmKSas+n4+x7dZfPlZfiIhnIuLHc9fa9fJyvbYy7osfAAAAcEXceP7o+f+/59J2GQAAAJgwpb4VAAAAYFI45QcAAIDJ5/wfAAAAJtrX33yzNWXd53ivvL23u1F/++5KtbFR3txdLi/Xd7bLa/X6WvuefZuD2qvV69ufj63dh5VmtdGsNPb2H2zWd7eaD9aPPAIbAAAAeIKeef69PyQRcfDFa+0p8vsADjJ94ZkBl8qfx50AMEqFcScAjM3UuBMAxqY48B32EDDpkgHLTw7e6VwrjN9eTD4AAMDo3f7kyd//u7/tD742AHyYDTPWBwCYLH7dg6ureNYRgDdHnQkwLh/pvDzVb3nfm3cM8ft/5xpDlp0pMQAAYGRm21OSlvPj9NlI03I54un2YwGKyep6rXovPz/4/VzxqVZ9vr1mMnDMMAAAAAAAAAAAAAAAAAAAAAAAAADQkWVJZAAAAMBEi0j/mrTv5h9xe+7F2aNXB4499evnb/304VKzuTMfMZ38c641azoimj/L57+ceSQAAAAAXAKd8/T8dX7c2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwaT549M5yd3qScf/+5Ygo9Yo/FTPt15koRsT1fyUxdWi9JCIKI4h/8G5E3OwVP4nHWZaV8ix6xb92wfFL7U0zkyX5ew/HTyPixgjiw1X2Xmv/c7/X5y+NF9qvvT//U8c+j2fV3f9N5/XD8bv7v0Kf/c/Th+tp/xjPvv+rSt/470Y8O9WJez+O7n+68ZNO/CSOxb81ZB+//a39/Z4LDjXZa/93OFalubldaezt313fXFqrrlW3FhbmX118bfGVxXuV1fVaNf/bM8yPPvXrx6f1/3qf+KWj/T+x/V8cqvdZ/Pf9h48+1qkUe8W/c6v39+/NPvHT/LvvM3m5tfx2t3zQKR/23C9/99xp/V/p0/+ZAf2/M1T/4wsvfeP7f+q55MTWAACehMbe/sZSrVbdOaUwM8R7hi4URtLOGyPL57IU4nKkMa5C9r3O/+P52jnn6icKWfUHZ199KkaQxvSJz2khztpgEnHQamvIf0gAAGDC/P+gPxl3KgAAAAAAAAAAAAAAAAAAAHBlnfG2ZDMR0ZlTHHw7seMxD8bTVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAU/0vAAD//xluyPE=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x4, 0xfffffffffffffffb, 0x0, 0x84, 0x2, 0x0, [{0xfffffffffffffffd, 0x5, 0x1, '\x00', 0x1}, {0x1937e000000000, 0x6, 0x7, '\x00', 0x400}]}) 4.264344055s ago: executing program 0 (id=3752): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000046c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000004700)={0x0, 0x0, &(0x7f0000004740)={&(0x7f0000004800)={0x74, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x58, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xb}, @broadcast, @device_a, @initial, {0x3, 0x800}}, 0x6, @default, 0x10c527ded75d34fe, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @val={0x4, 0x6, {0x0, 0xe, 0xff, 0xc}}, @val={0x6, 0x2, 0x400}, @val={0x2d, 0x1a, {0x8000, 0x3, 0x2, 0x0, {0x3, 0x5, 0x0, 0x6, 0x0, 0x1, 0x1}, 0x1, 0xffffffff, 0x5}}, @void, @void}}]}, 0x74}, 0x1, 0x0, 0x0, 0x880}, 0x400c0) 3.669858266s ago: executing program 0 (id=3754): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000780)={[{@barrier}, {@nodioread_nolock}, {@nobarrier}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@nodelalloc}, {@resuid}, {@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000140), 0x4) 2.875349457s ago: executing program 8 (id=3746): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='tcp 2', 0x5) 2.565411728s ago: executing program 8 (id=3749): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x2) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x2, 0xc, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x1000, 0x3, 0x0, 0x100001, 0x0, 0x7, 0x80000000000}) keyctl$read(0xb, r0, 0x0, 0x0) 2.560821319s ago: executing program 0 (id=3750): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) 2.430300482s ago: executing program 7 (id=3751): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x48010) close(r1) 2.186630197s ago: executing program 8 (id=3753): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind(r0, &(0x7f00000000c0)=@can={0x1d, r1, 0x1, 0x2}, 0x10) bind$can_j1939(r0, &(0x7f00000002c0)={0x1d, r1, 0x3, {0x0, 0xff, 0x3}, 0xfe}, 0x18) 2.186457177s ago: executing program 5 (id=3755): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000000)="b7", 0x1) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) 2.009272015s ago: executing program 8 (id=3757): syz_mount_image$vfat(&(0x7f0000004a00), &(0x7f0000004a40)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0x1, 0x30e, &(0x7f0000004ac0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004900)='.\x00', 0x0, 0x6) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000004940)={0xff9c, 0x8001}) 1.925556813s ago: executing program 7 (id=3758): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000001380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xff, 0x0, 0x0) 1.850729892s ago: executing program 5 (id=3759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x4040040) 1.621913655s ago: executing program 5 (id=3760): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000900)={0x1, 0x0, @pic={0xfc, 0x2, 0x2, 0x8, 0x1, 0x5, 0x3, 0x3, 0x0, 0x8c, 0x9, 0x3, 0x1, 0x81, 0x0, 0x7}}) 929.898135ms ago: executing program 7 (id=3761): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='tcp 2', 0x5) 929.792055ms ago: executing program 8 (id=3762): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000780)={[{@barrier}, {@nodioread_nolock}, {@nobarrier}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@nodelalloc}, {@resuid}, {@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000140), 0x4) 925.475176ms ago: executing program 0 (id=3769): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000440)='A/B\x00', 0x42, 0x1b6) unlinkat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x200) 925.028936ms ago: executing program 5 (id=3763): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002100)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000300)="bc", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0xf162, @remote, 0x9}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000003c0)="15", 0x1}], 0x1}}], 0x2, 0x4) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200), &(0x7f0000000240)=0x8) 640.784325ms ago: executing program 5 (id=3764): r0 = syz_mount_image$vfat(&(0x7f0000000800), &(0x7f0000000840)='./file2\x00', 0x80420c, &(0x7f0000000880)=ANY=[], 0x7, 0x37b, &(0x7f00000008c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) statx(r0, &(0x7f0000000080)='./file0\x00', 0x100, 0x800, &(0x7f0000000380)) 535.065025ms ago: executing program 7 (id=3765): r0 = memfd_create(&(0x7f0000000040)='\xfb\"\x9b\xa1FF\x06,qF\xa4\xfe\xae\xeb\x8ba&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00l\xfa\xf0o[\x9bC\xf6>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLs(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xcc%\x98\xa0\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb4vDI\xc8\x91\x87\x1fuYG7}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\xa7\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3\xfa(\xfeF\xa5\x96\x01\xdc\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x8e\x91U\xf9\xd5\xae\x15J\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xb5\x11`\xd2*\xd4n\xa23\xcaBH\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\x97\xa3\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xc4,\x99g<\xf2\xff>\x06\xb1#\xf3\xad_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x0e\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xb9\xe0AW\x11\xb1uc\xbc\xec\xe5\xc79\x9c\xcf\xa4m\x06\x12\xd0IY\x18\x15\x8d\x01P\x12/\xfct\xfe\xa0\xc7-\x9a+\xf3\xf9R\x85\xa5~\x90\xbeC\xee\xe9\'\x9fW\xa5\xfa\xb9\x95\xdf\xe6\a\xc9\xd5\x0f\n\xc8\x85\x16\xac\xf0\xdc\xa5\x00\x00\x91\xb2\xe2\x8f\xfa)?6\x0e\xac-\x82\xe3\xc1\xf7\xd3\x04\xf7I\xad\xaap\xddX\x14e\x11\xd8\xb3\xe9\xf2@\x97\xfa\x16\xe9\xb4l\x0e9\xf4\x9e\xefT\xfd\x9d\x18\xba\xaf\xfc\xa4\xa9\x98\xa4\x8fe\x11\xbd\xa3\xe4-\x10/;\x14\xce\x8bU\x16Xt\x8f\x8eP\xfb\xff\xd7\x98\xebxj\xbd\xee\x9d:\x19\x03\xe6\x18\x1dOT\x88\xf1\xfb\x19\xd0k\xff\xda\x83B#\x02r\x9e\xe4\xcb\x9fr\xec\x9e\t\b\x15\x9cx\x9f\xa9J\xfa\x9bH\xb1L\xd9\xa10\xb4\xf1\x12a\xd7\xc2G\x18\xb0\xfd\xad\'\xfc\x96d\x1e\xf6Mg\xfa\x9b\x1fP\x99\x81\x8eRn\xa9b\r\xe1j\xb7\xae\xdb\x05\t\xdbY\xfe\xb1\t\x964\xc9A{\xd0\xd0w\x88@\\S\x05(\x19\x14\x9e\xa7\x926!r\xca+\xfb\xa0\xf0\xb7\x95\x05\x950\xd0\xc2\xc4\xef-8e\xf3t\x96\xa3<\xc05L\xb5NG\x157\xcf\x01P&\xaf\xa7I\xb7\xc4\xff\x8eN\xc2i\xbf\xf2%\x9d\x80\xfd\xe7&n\xf1\v\xea\xbd\x03\x06\x1f\x9c\x83\xd6 \x1a\xb7Q\xbbD\xa0\x99\xcaM\xfc(\xd0\x1a\\\xe3K?\xddfM\x7f\xf0\x83\x97T\x9e\x04\'\x841\xb8\x94\x1e.\xdadM~\xff\xe7<#\r\xe2\xd3V-Ks\xf4\xe2c)\x86\x05\"}|c\xa6\xe9\x11\x05_hD\x1elF\xf0\x96\x1a\x12\x90|\xbf\x84$\r\xd7x$J\x1e\x1f\xe7/aC=\\**\xe0m\xf2\xc7E\xf4B!P\xb9\xf2Ts\x00\x16]1\xb2\xc1_i0Z\xad\x10\xc3\xc9\xc9\x9b\xcf>\x88u\x9aB\xa1Y\xdeS_\x18\x8f@!H\xdeh\x81\xb0\x902z\xf8\xb3\xbb0\x1f\x02\x1d4\xf79\xe22\xfd\x93\x87\xcf\xeb\xf2\x8a:\xaa:A\xa1\x94P2L\x8a\xbd\xca\xee!8\x19\b\xe8B\xde\x06\xd6E3\xb5\a*]\xf1]\x92I\xc0rxZ\x93\xdbl\xf03\x1d\v}\xd3\x90\x1d\x1a\x8a\xc6\xcd\x9c:\x81\x9d\xf3\xf5(\xcd\xb9&\xc0\x8e\xf0\xf6\x8e\xd4\x1b\xd3\xbf\xd4\a\xd7\xf4\x05%\xdb\x1f\xc8rf\x0e70[\x023~\xd0\xaf\xec\x01\x848\xcc\xdbW\xa4\x17\xc6\x13\xc2\xb7u\x9a\xa8k\xe5tOH\xc9\xce\xfct\x86\xfb\x95\xb1\x17\xf5p\xed\xb0\x87%\a\xac\x14S\xcb\xbf\xfc\xa3\xd0|\x02\xf3\x9266^L\r\bo\xba\xa7\xb3', 0x6) fallocate(r0, 0x0, 0x0, 0x8) fcntl$addseals(r0, 0x409, 0xe) ftruncate(r0, 0x0) 225.413267ms ago: executing program 7 (id=3766): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000003c0)={r0, r0, 0x6, 0x9, &(0x7f0000000480)="b0fdd7cbd7c176d479", 0x9, 0x74, 0x10cf, 0x5500, 0x43, 0x0, 0x8, 'syz0\x00'}) 225.333067ms ago: executing program 5 (id=3767): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x48010) close(r1) 223.692697ms ago: executing program 0 (id=3775): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='tcp 2', 0x5) 0s ago: executing program 7 (id=3768): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='9', 0x1) kernel console output (not intermixed with test programs): ): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 330.375137][T13138] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 330.453553][T11743] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 331.396050][T13179] loop0: detected capacity change from 0 to 256 [ 331.737190][T13185] loop0: detected capacity change from 0 to 8192 [ 331.767631][T13185] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 331.794263][T13185] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 331.837718][T13185] REISERFS (device loop0): using ordered data mode [ 331.866422][T13185] reiserfs: using flush barriers [ 331.886331][T13185] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 331.904730][T13185] REISERFS (device loop0): checking transaction log (loop0) [ 331.925712][T13185] REISERFS (device loop0): Using r5 hash to sort names [ 331.952595][T13185] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 332.002275][T13185] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 332.076766][T13198] FAULT_INJECTION: forcing a failure. [ 332.076766][T13198] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 332.095798][T13198] CPU: 0 PID: 13198 Comm: syz.6.2786 Not tainted syzkaller #0 [ 332.103306][T13198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 332.113385][T13198] Call Trace: [ 332.116690][T13198] [ 332.119646][T13198] dump_stack_lvl+0x18c/0x250 [ 332.124383][T13198] ? show_regs_print_info+0x20/0x20 [ 332.129641][T13198] ? load_image+0x420/0x420 [ 332.134157][T13198] ? __might_fault+0xaa/0x120 [ 332.138877][T13198] ? __lock_acquire+0x7eb0/0x7eb0 [ 332.143935][T13198] should_fail_ex+0x394/0x4c0 [ 332.148656][T13198] _copy_from_user+0x2f/0xe0 [ 332.153260][T13198] kstrtouint_from_user+0xde/0x170 [ 332.158387][T13198] ? kstrtol_from_user+0x190/0x190 [ 332.163550][T13198] ? get_pid_task+0x20/0x1e0 [ 332.168170][T13198] proc_fail_nth_write+0x8f/0x250 [ 332.173208][T13198] ? proc_fail_nth_read+0x260/0x260 [ 332.178419][T13198] ? iov_iter_iovec_advance+0x1ef/0x290 [ 332.183984][T13198] do_iter_write+0x4e5/0xc50 [ 332.188608][T13198] ? proc_fail_nth_read+0x260/0x260 [ 332.193840][T13198] ? vfs_iter_write+0xa0/0xa0 [ 332.198539][T13198] ? rcu_read_lock_any_held+0xb4/0x140 [ 332.204012][T13198] ? rcu_read_lock_bh_held+0x100/0x100 [ 332.209501][T13198] do_writev+0x27f/0x480 [ 332.213783][T13198] ? do_readv+0x460/0x460 [ 332.218164][T13198] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 332.224161][T13198] ? lock_chain_count+0x20/0x20 [ 332.229043][T13198] ? lockdep_hardirqs_on+0x98/0x150 [ 332.234261][T13198] do_syscall_64+0x55/0xb0 [ 332.238693][T13198] ? clear_bhb_loop+0x40/0x90 [ 332.243383][T13198] ? clear_bhb_loop+0x40/0x90 [ 332.248087][T13198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.254000][T13198] RIP: 0033:0x7f962239f559 [ 332.258432][T13198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.278047][T13198] RSP: 002b:00007f96231e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 332.286471][T13198] RAX: ffffffffffffffda RBX: 00007f9622625fa0 RCX: 00007f962239f559 [ 332.294481][T13198] RDX: 0000000000000003 RSI: 00002000000003c0 RDI: 0000000000000003 [ 332.302479][T13198] RBP: 00007f9622436b50 R08: 0000000000000000 R09: 0000000000000000 [ 332.310466][T13198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.318454][T13198] R13: 00007f9622626038 R14: 00007f9622625fa0 R15: 00007ffe3fcc7698 [ 332.326459][T13198] [ 333.775499][T13227] loop6: detected capacity change from 0 to 128 [ 333.826450][T13227] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 333.840704][T13227] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 333.901916][T13227] fscrypt (loop6, inode 12): Direct key flag not allowed with different contents and filenames modes [ 334.007236][T11931] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 334.858250][T13273] loop6: detected capacity change from 0 to 512 [ 334.867846][T13273] EXT4-fs: Ignoring removed bh option [ 334.889218][T13273] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 334.935767][T13273] EXT4-fs (loop6): 1 truncate cleaned up [ 334.978978][T13273] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.031227][T13273] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.2810: bg 0: block 465: padding at end of block bitmap is not set [ 335.091766][T13273] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 16 with error 28 [ 335.113364][T13273] EXT4-fs (loop6): This should not happen!! Data will be lost [ 335.113364][T13273] [ 335.149306][T13273] EXT4-fs (loop6): Total free blocks count 0 [ 335.159431][T13273] EXT4-fs (loop6): Free/Dirty block details [ 335.189181][T13273] EXT4-fs (loop6): free_blocks=0 [ 335.223014][T13273] EXT4-fs (loop6): dirty_blocks=17 [ 335.252546][T13273] EXT4-fs (loop6): Block reservation details [ 335.287093][T13273] EXT4-fs (loop6): i_reserved_data_blocks=17 [ 335.330401][T13272] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 335.394022][T13289] loop4: detected capacity change from 0 to 2048 [ 335.416292][T13293] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 335.519184][T13295] loop5: detected capacity change from 0 to 2048 [ 335.557640][T13295] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 335.603233][T13295] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 335.663198][T13295] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 335.722919][T13295] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 335.799830][T13303] loop4: detected capacity change from 0 to 512 [ 335.862981][T13303] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 335.887298][T13303] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.2816: corrupted in-inode xattr: invalid ea_ino [ 335.907521][T13305] loop0: detected capacity change from 0 to 512 [ 335.915820][T13303] EXT4-fs (loop4): Remounting filesystem read-only [ 335.957215][T13303] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.048371][T13305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.091923][T13305] ext4 filesystem being mounted at /669/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 336.189821][T11743] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.263961][T13305] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2819: bg 0: block 217: padding at end of block bitmap is not set [ 336.327303][T13305] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6660: Corrupt filesystem [ 336.339166][T13318] loop4: detected capacity change from 0 to 128 [ 336.374135][T13318] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 336.388598][T13318] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 336.449145][T13318] fscrypt (loop4, inode 12): Direct key flag not allowed with different contents and filenames modes [ 336.516650][T13324] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2823'. [ 336.568090][T13324] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2823'. [ 336.592983][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.637308][T13327] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2823'. [ 336.682208][T13327] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2823'. [ 336.706919][T11743] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 336.904689][T13340] loop5: detected capacity change from 0 to 128 [ 336.953013][T13344] loop6: detected capacity change from 0 to 1024 [ 336.985980][T13344] EXT4-fs: Ignoring removed orlov option [ 337.005314][T13344] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 337.089700][T13344] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.113724][T13344] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.139837][T13344] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.2828: bg 0: block 112: padding at end of block bitmap is not set [ 337.162596][T13344] EXT4-fs (loop6): Remounting filesystem read-only [ 337.367414][T11931] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 337.689459][T13373] loop6: detected capacity change from 0 to 256 [ 337.768222][T13381] vxcan0: tx address claim with dest, not broadcast [ 337.784967][T13373] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 337.972877][T13387] exfat: Deprecated parameter 'utf8' [ 337.978359][T13387] exfat: Deprecated parameter 'namecase' [ 338.068427][T13387] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 338.422107][ T28] audit: type=1800 audit(1793503090.228:145): pid=13399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2848" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 338.777587][T13415] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 338.806837][T13415] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 338.827859][T13415] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 338.845504][T13415] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 339.321733][T13441] set_capacity_and_notify: 3 callbacks suppressed [ 339.321748][T13441] loop0: detected capacity change from 0 to 512 [ 339.499217][T13444] loop4: detected capacity change from 0 to 2048 [ 339.507137][T13444] UDF-fs: bad mount option "partitionÿÿÿ00000000000000001" or missing value [ 340.641358][T13496] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 341.017181][T13509] loop5: detected capacity change from 0 to 256 [ 341.163464][T13514] loop4: detected capacity change from 0 to 1024 [ 341.270046][T13514] hfsplus: b-tree write err: -5, ino 17 [ 341.418388][ T2888] hfsplus: b-tree write err: -5, ino 4 [ 341.433757][ T2888] hfsplus: b-tree write err: -5, ino 17 [ 341.688476][T13530] loop6: detected capacity change from 0 to 2048 [ 341.734928][T13530] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 341.771973][T13530] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 341.801385][T13530] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 341.880106][ T28] audit: type=1800 audit(1793503093.688:146): pid=13530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2883" name="file1" dev="loop6" ino=1346 res=0 errno=0 [ 342.094709][T13546] loop5: detected capacity change from 0 to 256 [ 342.123226][T13546] exfat: Deprecated parameter 'utf8' [ 342.128598][T13546] exfat: Deprecated parameter 'utf8' [ 342.165662][T13546] exfat: Deprecated parameter 'namecase' [ 342.173132][T13546] exfat: Deprecated parameter 'namecase' [ 342.186964][T13546] exfat: Deprecated parameter 'namecase' [ 342.193862][T13548] loop4: detected capacity change from 0 to 2048 [ 342.238163][T13546] exFAT-fs (loop5): failed to load upcase table (idx : 0x00017f3e, chksum : 0xa30f3a9b, utbl_chksum : 0xe619d30d) [ 342.280781][T13551] loop0: detected capacity change from 0 to 1024 [ 342.288498][T13548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.316409][T13551] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 342.331765][T13551] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 342.364286][T13548] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.383865][T13551] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 342.412877][T13551] System zones: 0-1, 3-36 [ 342.463733][T13551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.579975][T11743] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.686481][T13564] loop5: detected capacity change from 0 to 8 [ 342.694908][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.820352][T13564] SQUASHFS error: Failed to read block 0x260685: -5 [ 342.858513][T13564] SQUASHFS error: Unable to read metadata cache entry [260685] [ 342.873703][T13564] SQUASHFS error: Unable to read directory block [260685:0] [ 343.546524][T13596] loop5: detected capacity change from 0 to 1024 [ 343.692961][ T28] audit: type=1800 audit(1793503095.508:147): pid=13578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2897" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 343.759994][ T28] audit: type=1800 audit(1793503095.508:148): pid=13578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2897" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 343.804661][T13596] hfsplus: invalid catalog entry type [ 343.826169][T13604] hfsplus: invalid catalog entry type [ 344.625853][T13633] set_capacity_and_notify: 1 callbacks suppressed [ 344.625869][T13633] loop0: detected capacity change from 0 to 8 [ 344.732516][ T972] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 344.799623][T13614] loop4: detected capacity change from 0 to 40427 [ 344.835785][T13614] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 344.852235][T13614] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 344.877215][T13614] F2FS-fs (loop4): Unrecognized mount option "0177777777777777777777700000000000000000000000" or missing value [ 344.929059][ T972] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 344.952325][ T972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.981918][ T972] usb 6-1: config 0 descriptor?? [ 345.001091][ T972] cp210x 6-1:0.0: cp210x converter detected [ 345.173161][T13645] RDS: rds_bind could not find a transport for a:0:20::, load rds_tcp or rds_rdma? [ 345.407312][ T972] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 345.457115][ T972] usb 6-1: cp210x converter now attached to ttyUSB0 [ 345.586305][T13663] C: renamed from team_slave_0 (while UP) [ 345.605506][T13663] netlink: 'syz.4.2922': attribute type 2 has an invalid length. [ 345.613157][T13664] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 345.614120][T13663] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2922'. [ 345.649439][T13663] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 345.675512][ T5897] usb 6-1: USB disconnect, device number 5 [ 345.721531][ T5897] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 345.756325][ T5897] cp210x 6-1:0.0: device disconnected [ 345.892348][T13673] loop4: detected capacity change from 0 to 1024 [ 345.907923][T13673] EXT4-fs: Ignoring removed bh option [ 345.960127][T13673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.187730][T11743] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.547544][T13722] loop0: detected capacity change from 0 to 32768 [ 347.587594][T13722] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 347.634837][T13722] JBD2: Ignoring recovery information on journal [ 347.780872][T13722] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 348.052319][T13722] syz.0.2937 (13722) used greatest stack depth: 19320 bytes left [ 348.138545][T13764] loop6: detected capacity change from 0 to 4096 [ 348.192730][ T5785] ocfs2: Unmounting device (7,0) on (node local) [ 348.899751][T13792] loop0: detected capacity change from 0 to 256 [ 348.934340][T13792] exfat: Deprecated parameter 'utf8' [ 348.939692][T13792] exfat: Deprecated parameter 'utf8' [ 348.977823][T13792] exfat: Deprecated parameter 'namecase' [ 348.988018][T13792] exfat: Deprecated parameter 'namecase' [ 349.004226][T13792] exfat: Deprecated parameter 'namecase' [ 349.037437][T13792] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0xa30f3a9b, utbl_chksum : 0xe619d30d) [ 349.368914][T13810] cougar: G6 mapped to space [ 350.383374][T13830] loop6: detected capacity change from 0 to 32768 [ 350.398537][T13830] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.2964 (13830) [ 350.447944][T13830] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 350.471449][T13830] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 350.499390][T13830] BTRFS info (device loop6): setting nodatasum [ 350.526695][T13830] BTRFS info (device loop6): force zlib compression, level 3 [ 350.572338][T13830] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 350.603511][T13830] BTRFS info (device loop6): use lzo compression, level 0 [ 350.633200][T13830] BTRFS info (device loop6): turning on flush-on-commit [ 350.664622][T13830] BTRFS info (device loop6): enabling auto defrag [ 350.695909][T13830] BTRFS info (device loop6): max_inline at 4096 [ 350.712260][T13830] BTRFS info (device loop6): using free space tree [ 350.727901][T13845] loop4: detected capacity change from 0 to 32768 [ 350.781669][T13845] [ 350.781669][T13845] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 350.781669][T13845] [ 350.936061][T13845] JFS: metapage_get_blocks failed [ 351.009771][T13830] BTRFS info (device loop6): enabling ssd optimizations [ 351.020043][T13845] ERROR: (device loop4): release_metapage: metapage_write_one() failed [ 351.020043][T13845] [ 351.133178][T13845] ERROR: (device loop4): diWrite: ixpxd invalid [ 351.133178][T13845] [ 351.181770][T13845] ERROR: (device loop4): txCommit: [ 351.181770][T13845] [ 351.244282][ T28] audit: type=1800 audit(1793503103.058:149): pid=13830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2964" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 351.291777][T11743] [ 351.291777][T11743] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 351.291777][T11743] [ 351.363167][T11743] [ 351.363167][T11743] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 351.363167][T11743] [ 351.475714][T13894] loop5: detected capacity change from 0 to 512 [ 351.526633][T13894] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 351.537531][T11931] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 351.638165][T13894] EXT4-fs (loop5): 1 truncate cleaned up [ 351.651572][T13894] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.979389][T13894] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 352.146446][T11925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.420353][T13910] loop4: detected capacity change from 0 to 8192 [ 352.502076][T13916] loop5: detected capacity change from 0 to 2048 [ 352.607905][T13916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.677919][T13905] loop6: detected capacity change from 0 to 32768 [ 352.755917][T13905] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 352.797398][T13905] JBD2: Ignoring recovery information on journal [ 352.847394][T11925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.880927][T13905] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 352.904448][T13926] block2mtd: error: cannot open device #! ./sys [ 353.126465][T13934] loop5: detected capacity change from 0 to 64 [ 353.370020][T11931] ocfs2: Unmounting device (7,6) on (node local) [ 353.682683][ T28] audit: type=1400 audit(1793503105.488:150): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="foo" pid=13949 comm="syz.0.2991" name="foo" offset=76 [ 353.715695][T13954] loop4: detected capacity change from 0 to 1024 [ 353.862585][ T11] hfsplus: b-tree write err: -5, ino 25 [ 353.868350][ T11] hfsplus: b-tree write err: -5, ino 4 [ 353.896444][ T11] hfsplus: b-tree write err: -5, ino 2 [ 353.913992][T13964] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 354.129244][T13971] option changes via remount are deprecated (pid=13970 comm=syz.6.2996) [ 354.153906][T13971] cgroup: option or name mismatch, new: 0x0 "nofavordynmods", old: 0x0 "" [ 354.682571][T13995] GUP no longer grows the stack in syz.4.3003 (13995): 200000001000-200000c01000 (200000000040) [ 354.702275][T13995] CPU: 0 PID: 13995 Comm: syz.4.3003 Not tainted syzkaller #0 [ 354.709777][T13995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 354.719880][T13995] Call Trace: [ 354.723258][T13995] [ 354.726268][T13995] dump_stack_lvl+0x18c/0x250 [ 354.731104][T13995] ? show_regs_print_info+0x20/0x20 [ 354.736340][T13995] ? load_image+0x420/0x420 [ 354.740914][T13995] ? find_vma+0x134/0x1b0 [ 354.745343][T13995] fixup_user_fault+0x691/0x750 [ 354.750246][T13995] fault_in_user_writeable+0x71/0xd0 [ 354.755600][T13995] futex_lock_pi+0x276/0xa00 [ 354.760251][T13995] ? fixup_pi_state_owner+0x5f0/0x5f0 [ 354.765721][T13995] ? up_read+0x20/0x20 [ 354.769853][T13995] do_futex+0x23d/0x3e0 [ 354.774048][T13995] ? __ia32_sys_get_robust_list+0x110/0x110 [ 354.779981][T13995] __se_sys_futex+0x3a9/0x440 [ 354.784708][T13995] ? __x64_sys_futex+0xf0/0xf0 [ 354.789519][T13995] ? __x64_sys_futex+0x21/0xf0 [ 354.794317][T13995] do_syscall_64+0x55/0xb0 [ 354.798764][T13995] ? clear_bhb_loop+0x40/0x90 [ 354.803546][T13995] ? clear_bhb_loop+0x40/0x90 [ 354.808269][T13995] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.814203][T13995] RIP: 0033:0x7faf4a39f559 [ 354.818695][T13995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.838372][T13995] RSP: 002b:00007faf4b19d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 354.846825][T13995] RAX: ffffffffffffffda RBX: 00007faf4a625fa0 RCX: 00007faf4a39f559 [ 354.847300][T13973] loop5: detected capacity change from 0 to 32768 [ 354.854815][T13995] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 0000200000000040 [ 354.869416][T13995] RBP: 00007faf4a436b50 R08: 0000200000000040 R09: 00000000fffffffc [ 354.877412][T13995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.885419][T13995] R13: 00007faf4a626038 R14: 00007faf4a625fa0 R15: 00007ffdcd3caea8 [ 354.893446][T13995] [ 354.929678][T13973] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 354.998047][T13973] JBD2: Ignoring recovery information on journal [ 355.072858][T13973] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 355.112635][T14003] bond0: option arp_interval: invalid value ( ) [ 355.119575][T14003] bond0: option arp_interval: allowed values 0 - 2147483647 [ 355.335088][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3008'. [ 355.467514][T11925] ocfs2: Unmounting device (7,5) on (node local) [ 355.765348][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3011'. [ 355.785644][T14027] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3011'. [ 355.987667][T14042] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3020'. [ 355.999275][T14042] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3020'. [ 356.013780][T14042] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3020'. [ 356.026506][T14042] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3020'. [ 356.250059][T14050] loop5: detected capacity change from 0 to 4096 [ 356.268758][T14050] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 356.313165][T14053] loop4: detected capacity change from 0 to 764 [ 356.316070][T14054] loop0: detected capacity change from 0 to 128 [ 356.367104][T14053] rock: directory entry would overflow storage [ 356.391668][T14053] rock: sig=0x4654, size=5, remaining=4 [ 356.419458][T14054] syz.0.3026: attempt to access beyond end of device [ 356.419458][T14054] loop0: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 356.447929][T14050] ntfs3: loop5: ino=3, ntfs_set_state failed, -22. [ 356.460578][T14050] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 356.478633][T14054] syz.0.3026: attempt to access beyond end of device [ 356.478633][T14054] loop0: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 356.588060][T14050] ntfs3: loop5: ino=1c, mi_enum_attr [ 356.652568][ T34] ntfs3: loop5: ino=3, ntfs3_write_inode failed, -22. [ 356.668207][T11925] ntfs3: loop5: ino=3, ntfs_set_state failed, -22. [ 356.676395][T11925] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 356.702269][T11925] ntfs3: loop5: ino=3, ntfs_set_state failed, -22. [ 356.715463][ T34] ntfs3: loop5: ino=3, ntfs3_write_inode failed, -22. [ 356.931171][T14068] loop4: detected capacity change from 0 to 128 [ 356.958284][T14068] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 356.973814][T14068] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.047633][T11743] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 357.253048][T14080] loop0: detected capacity change from 0 to 4096 [ 357.273479][T14080] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 357.302054][T14082] loop4: detected capacity change from 0 to 2048 [ 357.327452][T14082] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 357.376141][T14082] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 357.396057][T14080] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 357.412199][T14080] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 357.488073][T14085] pimreg: entered allmulticast mode [ 357.529787][T14080] ntfs3: loop0: ino=1c, mi_enum_attr [ 357.573138][T14085] pimreg: left allmulticast mode [ 357.661991][ T2997] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 357.683544][ T5785] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 357.698128][T14087] relay: one or more items not logged [item size (56) > sub-buffer size (7)] [ 357.711302][ T5785] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 357.719727][ T5785] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 357.734315][ T34] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 358.201098][T14089] loop4: detected capacity change from 0 to 40427 [ 358.213629][T14089] F2FS-fs (loop4): Invalid log blocks per segment (4278190089) [ 358.228504][T14089] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 358.243600][T14089] F2FS-fs (loop4): invalid crc value [ 358.262361][T14089] F2FS-fs (loop4): Found nat_bits in checkpoint [ 358.329207][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3049'. [ 358.379454][T14089] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 358.394520][T14089] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 358.454570][T14111] loop0: detected capacity change from 0 to 512 [ 358.473659][T14111] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 358.501423][T14111] EXT4-fs (loop0): 1 truncate cleaned up [ 358.533519][T14111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.589365][T14111] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 358.622247][T11743] syz-executor: attempt to access beyond end of device [ 358.622247][T11743] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 358.640966][T11743] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 358.709472][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.051898][T14118] loop5: detected capacity change from 0 to 1024 [ 359.184108][T14118] hfsplus: invalid length 1280 has been corrected to 255 [ 359.201337][T14118] hfsplus: invalid length 1280 has been corrected to 255 [ 359.225135][T14118] hfsplus: invalid length 1280 has been corrected to 255 [ 359.232553][T14118] hfsplus: invalid length 1280 has been corrected to 255 [ 359.239700][T14118] hfsplus: invalid length 1280 has been corrected to 255 [ 359.251822][T14118] hfsplus: walked past end of dir [ 359.289077][ T28] audit: type=1326 audit(1793503111.098:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14123 comm="syz.4.3056" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4a39f559 code=0x7ffc0000 [ 359.319104][ T28] audit: type=1326 audit(1793503111.128:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14123 comm="syz.4.3056" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4a39f559 code=0x7ffc0000 [ 359.345757][ T28] audit: type=1326 audit(1793503111.128:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14123 comm="syz.4.3056" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7faf4a39f559 code=0x7ffc0000 [ 359.369838][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.413136][ T28] audit: type=1326 audit(1793503111.128:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14123 comm="syz.4.3056" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4a39f559 code=0x7ffc0000 [ 359.434583][T14124] loop4: detected capacity change from 0 to 2364 [ 359.437287][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.489301][ T28] audit: type=1326 audit(1793503111.128:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14123 comm="syz.4.3056" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4a39f559 code=0x7ffc0000 [ 359.537945][ T28] audit: type=1326 audit(1793503111.158:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14123 comm="syz.4.3056" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7faf4a39f559 code=0x7ffc0000 [ 359.562879][ T28] audit: type=1326 audit(1793503111.158:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14123 comm="syz.4.3056" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faf4a39f2c2 code=0x7ffc0000 [ 359.586798][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.593691][ T28] audit: type=1326 audit(1793503111.198:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14123 comm="syz.4.3056" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faf4a35fd8e code=0x7ffc0000 [ 359.597632][T14126] EXT4-fs error (device loop5): ext4_do_update_inode:5294: inode #15: comm syz.5.3057: corrupted inode contents [ 359.617586][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.617733][ T28] audit: type=1326 audit(1793503111.228:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14123 comm="syz.4.3056" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7faf4a39f387 code=0x7ffc0000 [ 359.617780][ T28] audit: type=1326 audit(1793503111.228:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14123 comm="syz.4.3056" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf4a35fd8e code=0x7ffc0000 [ 359.708242][T14126] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 359.724593][T14126] EXT4-fs error (device loop5): ext4_do_update_inode:5294: inode #15: comm syz.5.3057: corrupted inode contents [ 359.778171][T14126] EXT4-fs error (device loop5): ext4_evict_inode:302: inode #15: comm syz.5.3057: mark_inode_dirty error [ 359.829168][T14126] EXT4-fs (loop5): 1 orphan inode deleted [ 359.857655][T14126] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.988257][T11925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.089764][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3063'. [ 360.190648][T14144] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 360.215082][T14146] syzkaller0: tun_chr_ioctl cmd 1074025694 [ 360.234352][T14144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 360.724072][T14150] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.3068 (14150) [ 360.785211][T14150] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 360.806417][T14150] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 360.825761][T14150] BTRFS info (device loop5): setting nodatasum [ 360.831982][T14150] BTRFS info (device loop5): force zlib compression, level 3 [ 360.859755][T14150] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 360.879207][T14150] BTRFS info (device loop5): use lzo compression, level 0 [ 360.887168][T14152] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.3069 (14152) [ 360.916545][T14150] BTRFS info (device loop5): turning on flush-on-commit [ 360.931068][T14150] BTRFS info (device loop5): enabling auto defrag [ 360.944800][T14152] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 360.957865][T14150] BTRFS info (device loop5): max_inline at 4096 [ 360.965538][T14152] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 360.974413][T14150] BTRFS info (device loop5): using free space tree [ 360.981634][T14152] BTRFS info (device loop0): disabling free space tree [ 360.990234][T14152] BTRFS info (device loop0): enabling auto defrag [ 360.997415][T14152] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 361.008405][T14152] BTRFS info (device loop0): force zstd compression, level 3 [ 361.016249][T14152] BTRFS info (device loop0): force clearing of disk cache [ 361.024522][T14152] BTRFS info (device loop0): max_inline at 7 [ 361.098053][T14150] BTRFS info (device loop5): enabling ssd optimizations [ 361.198418][T14152] BTRFS info (device loop0): enabling ssd optimizations [ 361.233218][T14196] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3075'. [ 361.252864][T14152] BTRFS info (device loop0): auto enabling async discard [ 361.322647][T14152] BTRFS info (device loop0): rebuilding free space tree [ 361.371986][T14152] BTRFS info (device loop0): disabling free space tree [ 361.395449][T14152] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 361.447943][T14152] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 361.579645][T11925] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 362.271732][ T5785] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 362.891209][T14225] set_capacity_and_notify: 4 callbacks suppressed [ 362.891247][T14225] loop0: detected capacity change from 0 to 128 [ 362.958252][T14225] syz.0.3087: attempt to access beyond end of device [ 362.958252][T14225] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 363.065943][T14228] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 363.092861][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 363.398524][ T5773] kernel write not supported for file /input/event2 (pid: 5773 comm: kworker/1:3) [ 363.751101][T14263] loop6: detected capacity change from 0 to 2048 [ 363.808833][T14263] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 364.554921][T14306] loop6: detected capacity change from 0 to 256 [ 364.616977][T14309] loop0: detected capacity change from 0 to 256 [ 364.644424][T14309] exFAT-fs (loop0): error, The cluster chain has a loop [ 364.662279][T14309] exFAT-fs (loop0): Filesystem has been set read-only [ 364.669737][T14309] exFAT-fs (loop0): failed to count the number of clusters in root [ 364.678424][T14309] exFAT-fs (loop0): failed to recognize exfat type [ 364.865440][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 364.865456][ T28] audit: type=1400 audit(1793503117.685:175): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="//o" pid=14314 comm="syz.0.3128" name="//o" offset=35 [ 364.974446][T14319] loop0: detected capacity change from 0 to 512 [ 364.984956][T14319] EXT4-fs: Ignoring removed nobh option [ 365.002082][T14319] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 365.010582][T14319] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 365.019703][T14319] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #13: comm syz.0.3130: inode has both inline data and extents flags [ 365.036293][T14319] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.3130: couldn't read orphan inode 13 (err -117) [ 365.054193][T14319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.092371][T14323] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 365.122008][T14319] EXT4-fs (loop0): shut down requested (2) [ 365.136604][ T5794] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 365.143626][ T5798] Bluetooth: hci4: command 0x1003 tx timeout [ 365.254649][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.388950][T14331] nbd0: detected capacity change from 0 to 127 [ 365.431536][T14335] loop0: detected capacity change from 0 to 512 [ 365.438124][ T5794] block nbd0: Receive control failed (result -104) [ 365.480423][T14335] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.3133: inode has both inline data and extents flags [ 365.513430][T14335] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.3133: couldn't read orphan inode 15 (err -117) [ 365.556538][T14335] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.651173][T14346] loop4: detected capacity change from 0 to 512 [ 365.661433][T14345] loop6: detected capacity change from 0 to 1024 [ 365.691972][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.695741][T14346] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.3137: inode has both inline data and extents flags [ 365.805544][T14346] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.3137: couldn't read orphan inode 15 (err -117) [ 365.873985][T14346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.943615][ T11] hfsplus: b-tree write err: -5, ino 25 [ 365.974537][ T11] hfsplus: b-tree write err: -5, ino 4 [ 365.980141][ T11] hfsplus: b-tree write err: -5, ino 2 [ 366.007428][ T11] hfsplus: b-tree write err: -5, ino 26 [ 366.040133][T11743] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.401171][T14361] loop4: detected capacity change from 0 to 256 [ 366.482900][ T5794] Bluetooth: hci3: command 0x0405 tx timeout [ 366.767647][T14370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3146'. [ 366.792594][T14370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3146'. [ 367.063070][T14379] block nbd6: not configured, cannot reconfigure [ 367.240064][T14387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.274425][T14387] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 367.397473][T11925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.621843][T14429] program syz.0.3172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.673520][T14431] set_capacity_and_notify: 1 callbacks suppressed [ 368.673534][T14431] loop4: detected capacity change from 0 to 2048 [ 368.733028][ T24] block nbd0: Connection timed out, retrying (0/1 alive) [ 368.734558][T14431] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 368.746409][ T24] block nbd0: Connection timed out, retrying (0/1 alive) [ 368.758404][ T24] block nbd0: Connection timed out, retrying (0/1 alive) [ 368.765909][ T24] block nbd0: Connection timed out, retrying (0/1 alive) [ 368.773457][ T97] block nbd0: Dead connection, failed to find a fallback [ 368.780958][ T97] block nbd0: shutting down sockets [ 368.787315][ T97] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 368.795403][T14431] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 368.804441][ T97] Buffer I/O error on dev nbd0, logical block 2, async page read [ 368.804778][ T97] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 368.821777][ T97] Buffer I/O error on dev nbd0, logical block 1, async page read [ 368.829760][ T97] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 368.838905][ T97] Buffer I/O error on dev nbd0, logical block 0, async page read [ 368.846749][ T97] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 368.855880][ T97] Buffer I/O error on dev nbd0, logical block 3, async page read [ 368.865810][ T97] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 368.876504][ T97] Buffer I/O error on dev nbd0, logical block 0, async page read [ 368.884868][ T97] Buffer I/O error on dev nbd0, logical block 1, async page read [ 368.892722][ T97] Buffer I/O error on dev nbd0, logical block 2, async page read [ 368.900469][ T97] Buffer I/O error on dev nbd0, logical block 3, async page read [ 368.910380][ T97] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 368.919539][ T97] Buffer I/O error on dev nbd0, logical block 0, async page read [ 368.927586][ T97] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 368.936749][ T97] Buffer I/O error on dev nbd0, logical block 1, async page read [ 368.944740][ T97] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 368.954018][ T97] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 368.963256][ T97] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 368.974172][ T8136] ldm_validate_partition_table(): Disk read failed. [ 368.989014][T14431] UDF-fs: Scanning with blocksize 512 failed [ 368.989039][ T8136] Dev nbd0: unable to read RDB block 0 [ 369.002883][ T8136] nbd0: unable to read partition table [ 369.018399][ T8136] ldm_validate_partition_table(): Disk read failed. [ 369.026842][ T8136] Dev nbd0: unable to read RDB block 0 [ 369.034501][ T8136] nbd0: unable to read partition table [ 369.059891][T14431] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 369.173038][T14443] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3178'. [ 369.251575][T14443] bond2: Unable to set up delay as MII monitoring is disabled [ 369.263980][T14443] bond2 (unregistering): Released all slaves [ 369.302243][ T28] audit: type=1400 audit(1793503122.125:176): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=14447 comm="syz.4.3181" name="unknown" offset=28 [ 369.669908][T14460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3187'. [ 369.866108][T14468] loop4: detected capacity change from 0 to 256 [ 370.063431][T14472] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3193'. [ 370.089517][ T28] audit: type=1326 audit(1793503122.905:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14473 comm="syz.4.3194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4a39f559 code=0x7ffc0000 [ 370.113615][ C0] vkms_vblank_simulate: vblank timer overrun [ 370.182369][ T28] audit: type=1326 audit(1793503122.905:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14473 comm="syz.4.3194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4a39f559 code=0x7ffc0000 [ 370.228047][ T28] audit: type=1326 audit(1793503122.915:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14473 comm="syz.4.3194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7faf4a39f559 code=0x7ffc0000 [ 370.262646][ T28] audit: type=1326 audit(1793503122.915:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14473 comm="syz.4.3194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4a39f559 code=0x7ffc0000 [ 370.291065][ T28] audit: type=1326 audit(1793503122.915:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14473 comm="syz.4.3194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4a39f559 code=0x7ffc0000 [ 370.315161][ C0] vkms_vblank_simulate: vblank timer overrun [ 370.333278][ T28] audit: type=1326 audit(1793503122.915:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14473 comm="syz.4.3194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7faf4a39f559 code=0x7ffc0000 [ 370.404303][ T28] audit: type=1326 audit(1793503122.915:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14473 comm="syz.4.3194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4a39f559 code=0x7ffc0000 [ 370.432827][ T28] audit: type=1326 audit(1793503122.915:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14473 comm="syz.4.3194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4a39f559 code=0x7ffc0000 [ 370.478081][ T28] audit: type=1326 audit(1793503122.915:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14473 comm="syz.4.3194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7faf4a39f559 code=0x7ffc0000 [ 370.516633][ T28] audit: type=1326 audit(1793503122.915:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14473 comm="syz.4.3194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4a39f559 code=0x7ffc0000 [ 370.753379][ T5897] smpboot: CPU 1 is now offline [ 370.823009][ T1200] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 371.056836][ T1200] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 371.066866][T14488] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input26 [ 371.087031][ T1200] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.120189][ T1200] usb 6-1: Product: syz [ 371.146832][ T1200] usb 6-1: Manufacturer: syz [ 371.181346][ T1200] usb 6-1: SerialNumber: syz [ 371.229217][ T60] ACPI: \_SB_.C001: Eject incomplete - status 0xf [ 371.250136][T14500] loop4: detected capacity change from 0 to 256 [ 371.304219][T14500] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 371.430250][ T5794] Bluetooth: hci1: unknown advertising packet type: 0xff [ 371.430316][ T5794] Bluetooth: hci1: unknown advertising packet type: 0xfa [ 371.439361][ T5794] Bluetooth: hci1: unknown advertising packet type: 0x09 [ 371.446625][ T5794] Bluetooth: hci1: unknown advertising packet type: 0x05 [ 371.453750][ T5794] Bluetooth: hci1: Dropping invalid advertising data [ 371.468256][ T5794] Bluetooth: hci1: Malformed LE Event: 0x02 [ 371.560383][ T1200] rtl8150 6-1:1.0: couldn't reset the device [ 371.596913][ T1200] rtl8150: probe of 6-1:1.0 failed with error -5 [ 371.647137][ T1200] usb 6-1: USB disconnect, device number 6 [ 371.690768][T14507] loop6: detected capacity change from 0 to 128 [ 371.704814][T14506] loop4: detected capacity change from 0 to 512 [ 371.757462][T14506] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 371.775018][T14507] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 371.832678][T14506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.850896][T14507] hpfs: filesystem error: improperly stopped [ 371.872558][T14507] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 371.890566][T14506] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.901505][T14507] hpfs: You really don't want any checks? You are crazy... [ 371.914999][T14507] hpfs: Code page index out of array [ 371.920296][T14507] hpfs: code page support is disabled [ 371.935104][T14506] EXT4-fs error (device loop4): ext4_empty_dir:3147: inode #12: block 32: comm syz.4.3209: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 371.967665][T14507] hpfs: hpfs_map_4sectors(): unaligned read [ 371.976325][T14507] hpfs: hpfs_map_4sectors(): unaligned read [ 371.983760][T14507] hpfs: filesystem error: unable to find root dir [ 371.990741][T14506] EXT4-fs (loop4): Remounting filesystem read-only [ 372.007319][T14506] EXT4-fs warning (device loop4): ext4_empty_dir:3149: inode #12: comm syz.4.3209: directory missing '.' [ 372.156306][T11743] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.370468][T14519] loop5: detected capacity change from 0 to 128 [ 372.438958][T14519] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 372.541618][T14519] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 372.712765][T14534] loop6: detected capacity change from 0 to 512 [ 372.721718][T11925] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 372.768534][T14534] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 372.886017][T14534] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.3216: invalid indirect mapped block 83886080 (level 1) [ 372.961644][T14534] EXT4-fs (loop6): Remounting filesystem read-only [ 372.971868][T14540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3220'. [ 373.012745][T14534] EXT4-fs (loop6): 1 orphan inode deleted [ 373.018480][T14534] EXT4-fs (loop6): 1 truncate cleaned up [ 373.081434][T14534] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.263041][T11931] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.540477][T14558] loop0: detected capacity change from 0 to 24 [ 373.581280][T14558] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 373.643905][T14558] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 374.152905][T14578] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3235'. [ 374.191428][T14578] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3235'. [ 374.205948][T14582] loop0: detected capacity change from 0 to 128 [ 374.235267][T14582] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 374.279689][T14582] hpfs: filesystem error: improperly stopped [ 374.308317][T14582] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 374.341577][T14582] hpfs: You really don't want any checks? You are crazy... [ 374.367765][T14582] hpfs: hpfs_map_sector(): read error [ 374.393812][T14582] hpfs: code page support is disabled [ 374.415005][T14582] hpfs: hpfs_map_4sectors(): unaligned read [ 374.434329][T14582] hpfs: hpfs_map_4sectors(): unaligned read [ 374.461557][T14582] hpfs: filesystem error: unable to find root dir [ 374.517034][T14582] hpfs: hpfs_map_4sectors(): unaligned read [ 374.547630][T14582] hpfs: hpfs_map_sector(): read error [ 375.776611][ T28] audit: type=1400 audit(1793503128.585:187): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26262F5083A0768E5D4332352BE40EB41E3406DE4498E740A470141032EA251C144CDB5352D8049281898C72F13A5D3509C9C77308FE45016ABFD7D42B1A022A60B9A5BBCECE7C0A10BF9F157995465729B38FDCADD0D977574636206982A6B4E8F24BC75E3EB054FB9AE81E878AFD24CFA9756F6368616E676570726F66696C65203A2F2F26CCD938681A7387ED22A0E3A8284D3182AA7EF1905A267850FC405494D7079F6D0364287CF7B16DC2310B15BC49FB68D1A96075CB5F30F4FC2EC0C51D0B7E806E78F108F4060A55B8C23B3C89A2F2FA321D5138019C417A504D230EC496583933DABA2998E20D8F9A2E6798F681 pid=14617 comm="syz.5.3252" [ 375.837532][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.856261][T14619] loop6: detected capacity change from 0 to 512 [ 375.866779][T14621] loop0: detected capacity change from 0 to 1024 [ 375.890751][T14621] EXT4-fs: Ignoring removed mblk_io_submit option [ 375.921059][T14621] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 375.968158][T14621] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 376.150753][T14621] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #11: comm syz.0.3254: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 376.215166][T14621] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.3254: couldn't read orphan inode 11 (err -117) [ 376.241285][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3256'. [ 376.271121][T14621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.350970][T14621] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.3254: Invalid block bitmap block 0 in block_group 0 [ 376.421770][T14621] Quota error (device loop0): write_blk: dquota write failed [ 376.450254][T14621] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 376.501513][T14621] EXT4-fs error (device loop0): ext4_acquire_dquot:6958: comm syz.0.3254: Failed to acquire dquot type 0 [ 376.539126][T14633] loop5: detected capacity change from 0 to 8192 [ 376.557814][T14621] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.3254: Invalid inode bitmap blk 137438953472 in block_group 0 [ 376.596543][T14633] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 376.662976][T14633] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 376.691660][ T60] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm kworker/u4:4: Invalid inode table block 8589934593 in block_group 0 [ 376.721004][T14633] REISERFS (device loop5): using ordered data mode [ 376.751131][T14633] reiserfs: using flush barriers [ 376.759319][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.828954][T14633] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 376.928043][T14633] REISERFS (device loop5): checking transaction log (loop5) [ 376.981116][T14633] REISERFS (device loop5): Using r5 hash to sort names [ 377.012521][T14633] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 377.106133][T14633] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 377.183844][T14641] rxe_eth0 speed is unknown, defaulting to 1000 [ 377.190474][T14633] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 377.210374][T14648] netem: incorrect gi model size [ 377.239319][T14648] netem: change failed [ 377.270439][T14650] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 377.367437][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.695432][T14656] netlink: 'syz.0.3269': attribute type 1 has an invalid length. [ 378.032337][ T177] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 378.250979][ T177] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.281413][ T177] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 378.349416][ T177] usb 6-1: config 0 interface 0 has no altsetting 0 [ 378.376428][ T177] usb 6-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 378.420508][ T177] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.486563][ T177] usb 6-1: config 0 descriptor?? [ 378.651957][T14685] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.661709][T14685] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.720496][T14685] bridge0: entered allmulticast mode [ 378.949324][ T177] playstation 0003:054C:09CC.0017: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.5-1/input0 [ 378.963168][T14689] device-mapper: table: 248:10: verity: Data device lookup failed (-ENOENT) [ 378.995291][T14689] device-mapper: ioctl: error adding target to table [ 379.137570][ T177] playstation 0003:054C:09CC.0017: Invalid byte count transferred, expected 16 got 0 [ 379.174220][ T177] playstation 0003:054C:09CC.0017: Failed to retrieve DualShock4 pairing info: -22 [ 379.217641][ T177] playstation 0003:054C:09CC.0017: Failed to get MAC address from DualShock4 [ 379.256915][ T177] playstation 0003:054C:09CC.0017: Failed to create dualshock4. [ 379.296536][ T177] playstation: probe of 0003:054C:09CC.0017 failed with error -22 [ 379.354564][ T177] usb 6-1: USB disconnect, device number 7 [ 380.261184][T14727] loop5: detected capacity change from 0 to 1024 [ 380.374335][T14727] hfsplus: xattr searching failed [ 381.043465][ T5798] Bluetooth: hci0: command tx timeout [ 381.323600][T14756] loop4: detected capacity change from 0 to 8192 [ 381.375540][T14756] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 381.452310][T14756] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 381.495832][T14756] REISERFS (device loop4): using ordered data mode [ 381.529924][T14756] reiserfs: using flush barriers [ 381.564165][T14756] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 381.637996][T14765] loop6: detected capacity change from 0 to 512 [ 381.647242][T14756] REISERFS (device loop4): checking transaction log (loop4) [ 381.701781][T14765] EXT4-fs error (device loop6): ext4_iget_extra_inode:4752: inode #15: comm syz.6.3315: corrupted in-inode xattr: invalid ea_ino [ 381.785442][T14765] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.3315: couldn't read orphan inode 15 (err -117) [ 381.831360][T14765] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.875609][T14756] REISERFS (device loop4): Using tea hash to sort names [ 381.910152][T14765] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.3315: invalid indirect mapped block 234881024 (level 0) [ 381.925705][T14756] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 382.041172][T11931] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.776703][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3326'. [ 383.152749][T14809] loop6: detected capacity change from 0 to 512 [ 383.398168][T14815] loop4: detected capacity change from 0 to 256 [ 383.457416][ T28] audit: type=1326 audit(1793503136.275:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14816 comm="syz.5.3337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8339f559 code=0x7ffc0000 [ 383.481476][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.549485][T10488] blk_print_req_error: 121 callbacks suppressed [ 383.549496][T10488] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 383.682049][ T28] audit: type=1326 audit(1793503136.275:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14816 comm="syz.5.3337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8339f559 code=0x7ffc0000 [ 383.850906][ T28] audit: type=1326 audit(1793503136.315:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14816 comm="syz.5.3337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8339f559 code=0x7ffc0000 [ 383.875002][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.975707][ T28] audit: type=1326 audit(1793503136.315:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14816 comm="syz.5.3337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8339f559 code=0x7ffc0000 [ 384.063361][ T5863] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 384.099139][ T28] audit: type=1326 audit(1793503136.315:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14816 comm="syz.5.3337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8339f559 code=0x7ffc0000 [ 384.212218][ T28] audit: type=1326 audit(1793503136.315:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14816 comm="syz.5.3337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f3d8339f559 code=0x7ffc0000 [ 384.280857][ T5863] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 384.299013][ T5863] usb 6-1: config 0 has no interface number 0 [ 384.326229][ T28] audit: type=1326 audit(1793503136.315:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14816 comm="syz.5.3337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8339f559 code=0x7ffc0000 [ 384.366041][ T5863] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 384.397992][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.429891][ T5863] usb 6-1: Product: syz [ 384.443216][ T28] audit: type=1326 audit(1793503136.315:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14816 comm="syz.5.3337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3d8339f559 code=0x7ffc0000 [ 384.472102][ T5863] usb 6-1: Manufacturer: syz [ 384.494872][ T5863] usb 6-1: SerialNumber: syz [ 384.522868][ T5863] usb 6-1: config 0 descriptor?? [ 384.560381][ T28] audit: type=1326 audit(1793503136.315:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14816 comm="syz.5.3337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3d8339f559 code=0x7ffc0000 [ 384.662427][T14848] loop4: detected capacity change from 0 to 136 [ 384.672342][ T28] audit: type=1400 audit(1793503137.135:197): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name=":" pid=14843 comm="syz.4.3349" name=":" offset=33 [ 384.761945][ T5863] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 384.772111][T14848] rock: directory entry would overflow storage [ 384.800155][ T5863] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 384.811004][T14848] rock: sig=0x4f50, size=4, remaining=3 [ 384.834287][T14848] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 384.867808][ T5863] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 384.903224][ T5863] usb 6-1: media controller created [ 385.003600][ T5863] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 385.220505][T14852] lwtunnel_output(): recursion limit reached on datapath [ 385.431589][T14858] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3356'. [ 386.129784][ T5863] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 386.269009][ T5863] usb 6-1: USB disconnect, device number 8 [ 386.618855][T14872] loop4: detected capacity change from 0 to 32768 [ 386.775365][T14872] UFO tlock:0xffffc900028aa1f8 [ 386.868229][T14872] MetaData crosses page boundary!! [ 386.914231][T14872] lblock = 6300000010, size = -820051968 [ 386.919985][T14872] CPU: 0 PID: 14872 Comm: syz.4.3361 Not tainted syzkaller #0 [ 386.927449][T14872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 386.937499][T14872] Call Trace: [ 386.940783][T14872] [ 386.943713][T14872] dump_stack_lvl+0x18c/0x250 [ 386.948394][T14872] ? __wake_up_bit+0x210/0x210 [ 386.953211][T14872] ? show_regs_print_info+0x20/0x20 [ 386.958407][T14872] ? load_image+0x420/0x420 [ 386.962935][T14872] ? folio_unlock+0x118/0x2f0 [ 386.967621][T14872] __get_metapage+0xaac/0xfa0 [ 386.972297][T14872] dtReadFirst+0xd5/0x930 [ 386.976638][T14872] jfs_readdir+0x9d6/0x3ce0 [ 386.981166][T14872] ? dtInitRoot+0x660/0x660 [ 386.985700][T14872] ? down_write+0x16e/0x200 [ 386.990267][T14872] ? down_read_killable+0x340/0x340 [ 386.995495][T14872] ? dtInitRoot+0x660/0x660 [ 387.000016][T14872] wrap_directory_iterator+0x92/0xd0 [ 387.005334][T14872] iterate_dir+0x1bd/0x590 [ 387.009767][T14872] __se_sys_getdents+0xf6/0x260 [ 387.014628][T14872] ? __x64_sys_getdents+0x80/0x80 [ 387.019660][T14872] ? fillonedir+0x420/0x420 [ 387.024170][T14872] ? lockdep_hardirqs_on+0x98/0x150 [ 387.029412][T14872] do_syscall_64+0x55/0xb0 [ 387.033839][T14872] ? clear_bhb_loop+0x40/0x90 [ 387.038538][T14872] ? clear_bhb_loop+0x40/0x90 [ 387.043217][T14872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.049121][T14872] RIP: 0033:0x7faf4a39f559 [ 387.053543][T14872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.073147][T14872] RSP: 002b:00007faf4b19d028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 387.081567][T14872] RAX: ffffffffffffffda RBX: 00007faf4a625fa0 RCX: 00007faf4a39f559 [ 387.089535][T14872] RDX: 00000000000000b8 RSI: 0000200000000a80 RDI: 0000000000000004 [ 387.097499][T14872] RBP: 00007faf4a436b50 R08: 0000000000000000 R09: 0000000000000000 [ 387.105472][T14872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.113458][T14872] R13: 00007faf4a626038 R14: 00007faf4a625fa0 R15: 00007ffdcd3caea8 [ 387.121433][T14872] [ 387.124561][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.356877][T14897] loop5: detected capacity change from 0 to 512 [ 387.555474][T14897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.600001][T14897] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.668965][T14872] bread failed! [ 387.687932][T14872] jfs_readdir: unexpected rc = -5 from dtReadNext [ 387.821252][T11925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.869455][T14891] loop0: detected capacity change from 0 to 32768 [ 387.987694][T14891] [ 387.987694][T14891] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 387.987694][T14891] [ 388.105509][T14891] ERROR: (device loop0): diWrite: ixpxd invalid [ 388.105509][T14891] [ 388.177835][T14891] ERROR: (device loop0): remounting filesystem as read-only [ 388.230893][T14891] ERROR: (device loop0): txCommit: [ 388.230893][T14891] [ 388.263586][T14891] ERROR: (device loop0): dtReadFirst: btstack overrun [ 388.263586][T14891] [ 388.297392][T14891] btstack dump: [ 388.309758][T14891] bn = 0, index = 0 [ 388.328733][T14891] bn = 0, index = 0 [ 388.342058][T14891] bn = 0, index = 0 [ 388.356993][T14891] bn = 0, index = 0 [ 388.371818][T14891] bn = 0, index = 0 [ 388.397410][T14891] bn = 0, index = 0 [ 388.416697][T14891] bn = 0, index = 0 [ 388.443067][T14891] bn = 0, index = 0 [ 389.383413][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3387'. [ 389.996640][T14947] loop4: detected capacity change from 0 to 4096 [ 390.086938][T14947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.182563][ T28] audit: type=1800 audit(1793503143.005:198): pid=14937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3388" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 390.578714][T11743] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.768878][T14962] loop4: detected capacity change from 0 to 128 [ 390.803734][T14962] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 390.885732][T14962] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.034484][T11743] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 392.036141][T14995] loop6: detected capacity change from 0 to 256 [ 392.282549][T14998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3414'. [ 392.724223][T15012] loop5: detected capacity change from 0 to 512 [ 392.755405][T15014] netlink: 'syz.0.3422': attribute type 29 has an invalid length. [ 392.796674][T15012] EXT4-fs error (device loop5): ext4_iget_extra_inode:4752: inode #15: comm syz.5.3421: corrupted in-inode xattr: invalid ea_ino [ 392.829168][T15014] netlink: 'syz.0.3422': attribute type 29 has an invalid length. [ 392.869696][T15019] netlink: 'syz.0.3422': attribute type 29 has an invalid length. [ 392.880908][T15012] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.3421: couldn't read orphan inode 15 (err -117) [ 392.948930][T15014] netlink: 'syz.0.3422': attribute type 29 has an invalid length. [ 392.971808][T15012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.058528][T15012] EXT4-fs warning (device loop5): ext4_empty_dir:3149: inode #2: comm syz.5.3421: directory missing '.' [ 393.191518][T11925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.225709][T15028] loop6: detected capacity change from 0 to 1024 [ 393.745637][T15043] loop6: detected capacity change from 0 to 1024 [ 393.775527][T15043] EXT4-fs: Ignoring removed bh option [ 393.808498][T15043] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 393.871126][T15043] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 393.928219][T15043] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.136613][T11931] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.328442][T15052] loop6: detected capacity change from 0 to 256 [ 394.448538][ T28] audit: type=1800 audit(1793503147.265:199): pid=15052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3438" name="(" dev="loop6" ino=1048797 res=0 errno=0 [ 394.586501][T15045] loop4: detected capacity change from 0 to 32768 [ 394.662356][T15045] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.3436 (15045) [ 394.777732][T15045] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 394.848261][T15045] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 394.893963][T15045] BTRFS info (device loop4): use no compression [ 394.962360][T15045] BTRFS info (device loop4): force clearing of disk cache [ 394.999935][T15045] BTRFS info (device loop4): enabling disk space caching [ 395.042314][T15045] BTRFS info (device loop4): disk space caching is enabled [ 395.149097][T15045] BTRFS info (device loop4): enabling ssd optimizations [ 395.189345][T15045] BTRFS info (device loop4): auto enabling async discard [ 395.240576][T15045] BTRFS info (device loop4): rebuilding free space tree [ 395.336119][T15045] BTRFS info (device loop4): disabling free space tree [ 395.375451][T15045] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 395.440993][T15045] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 395.638143][T15093] loop6: detected capacity change from 0 to 64 [ 395.774262][T11743] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 395.987060][ T28] audit: type=1326 audit(1793503148.805:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15097 comm="syz.6.3450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f962239f559 code=0x0 [ 396.010536][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.783573][T15114] loop4: detected capacity change from 0 to 1024 [ 396.836318][T15114] EXT4-fs: Ignoring removed orlov option [ 396.979161][T15114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.261491][T15130] program syz.6.3460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 397.290880][ T28] audit: type=1326 audit(1793503150.105:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15131 comm="syz.0.3461" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a6839f559 code=0x0 [ 397.346218][T11743] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.924601][T15156] loop4: detected capacity change from 0 to 64 [ 398.077132][T11743] hfs: request for non-existent node 131072 in B*Tree [ 398.495278][T15144] loop6: detected capacity change from 0 to 32768 [ 398.549792][T15144] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.3466 (15144) [ 398.642440][T15144] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 398.696651][T15144] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 398.752335][T15144] BTRFS info (device loop6): using free space tree [ 398.772088][T15175] loop0: detected capacity change from 0 to 2048 [ 398.828206][T15175] NILFS (loop0): invalid segment: Magic number mismatch [ 398.876934][T15175] NILFS (loop0): trying rollback from an earlier position [ 398.950324][T15175] NILFS (loop0): recovery complete [ 398.977380][T15144] BTRFS info (device loop6): enabling ssd optimizations [ 399.023311][T15194] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 399.039897][T15144] BTRFS info (device loop6): auto enabling async discard [ 399.261510][T11931] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 400.186875][T15221] loop6: detected capacity change from 0 to 16 [ 400.210759][T15218] loop0: detected capacity change from 0 to 4096 [ 400.249459][T15221] erofs: (device loop6): mounted with root inode @ nid 36. [ 400.313997][T15218] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 400.351958][T15221] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 400.456970][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.755036][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.903977][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.149655][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.008953][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 402.021608][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 402.032052][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 402.048213][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 402.056999][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 402.066173][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 402.435864][T15252] rxe_eth0 speed is unknown, defaulting to 1000 [ 402.887719][T15241] loop6: detected capacity change from 0 to 40427 [ 402.937513][T15241] F2FS-fs (loop6): invalid crc value [ 402.990324][T15241] F2FS-fs (loop6): Found nat_bits in checkpoint [ 403.241036][T15241] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 403.530044][T11931] syz-executor: attempt to access beyond end of device [ 403.530044][T11931] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 403.621942][T11931] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 404.162368][ T5794] Bluetooth: hci0: command tx timeout [ 404.632314][ T11] hsr_slave_0: left promiscuous mode [ 404.661106][ T11] hsr_slave_1: left promiscuous mode [ 404.749888][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.784703][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.822904][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.830353][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.931604][ T11] bridge_slave_1: left allmulticast mode [ 404.969184][ T11] bridge_slave_1: left promiscuous mode [ 405.010720][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.079759][ T11] bridge_slave_0: left allmulticast mode [ 405.115981][ T11] bridge_slave_0: left promiscuous mode [ 405.159804][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.308624][ T11] veth1_macvtap: left promiscuous mode [ 405.335494][ T11] veth0_macvtap: left promiscuous mode [ 405.356450][ T11] veth1_vlan: left promiscuous mode [ 405.377373][ T11] veth0_vlan: left promiscuous mode [ 405.921878][T15337] lwtunnel_output(): recursion limit reached on datapath [ 406.061097][T15339] loop6: detected capacity change from 0 to 256 [ 406.091644][T15339] exfat: Deprecated parameter 'utf8' [ 406.118901][T15339] exfat: Deprecated parameter 'utf8' [ 406.175774][T15339] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc375f927, utbl_chksum : 0xe619d30d) [ 406.246975][ T5798] Bluetooth: hci0: command tx timeout [ 407.171267][ T11] team0 (unregistering): Port device team_slave_1 removed [ 407.286587][ T11] team0 (unregistering): Port device C removed [ 407.433810][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.608013][T15352] loop0: detected capacity change from 0 to 128 [ 407.650960][T15352] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 407.667816][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.717560][ T28] audit: type=1800 audit(1793503160.535:202): pid=15352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3536" name="file1" dev="loop0" ino=94 res=0 errno=0 [ 408.299494][ T11] bond0 (unregistering): Released all slaves [ 408.327007][ T5798] Bluetooth: hci0: command tx timeout [ 408.389771][T15331] hsr0: entered promiscuous mode [ 408.530766][T15252] chnl_net:caif_netlink_parms(): no params data found [ 409.074812][T15252] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.081939][T15252] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.149798][T15252] bridge_slave_0: entered allmulticast mode [ 409.185807][T15252] bridge_slave_0: entered promiscuous mode [ 409.226817][T15252] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.255497][T15252] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.294747][T15252] bridge_slave_1: entered allmulticast mode [ 409.337655][T15252] bridge_slave_1: entered promiscuous mode [ 409.444481][T15252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.520971][T15252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.541307][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 409.691016][T15252] team0: Port device team_slave_0 added [ 409.726268][T15252] team0: Port device team_slave_1 added [ 409.811028][T15252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.842492][T15252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.930375][T15252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.975039][T15252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.011724][T15252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.095321][T15252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.197976][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 410.208699][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 410.217621][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 410.226181][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 410.233834][ T5798] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 410.242543][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 410.298526][T15252] hsr_slave_0: entered promiscuous mode [ 410.309262][T15252] hsr_slave_1: entered promiscuous mode [ 410.391560][T15383] rxe_eth0 speed is unknown, defaulting to 1000 [ 410.402826][ T5798] Bluetooth: hci0: command tx timeout [ 410.889214][T15252] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 410.907883][T15252] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 410.936329][T15252] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 410.957834][T15252] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 411.178700][T15383] chnl_net:caif_netlink_parms(): no params data found [ 411.250375][T15252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.341212][T15252] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.408737][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.415875][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.453119][T15383] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.461246][T15383] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.474783][T15383] bridge_slave_0: entered allmulticast mode [ 411.481670][T15383] bridge_slave_0: entered promiscuous mode [ 411.501931][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.509064][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.530360][T15383] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.554199][T15383] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.569011][T15383] bridge_slave_1: entered allmulticast mode [ 411.587023][T15383] bridge_slave_1: entered promiscuous mode [ 411.679834][T15383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.723002][T15383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.837082][T15383] team0: Port device team_slave_0 added [ 411.886446][T15383] team0: Port device team_slave_1 added [ 411.974663][T15383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.011510][T15383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.080844][T15383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.119026][T15383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.136403][T15383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.162285][ C0] vkms_vblank_simulate: vblank timer overrun [ 412.246661][T15383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.324491][ T5798] Bluetooth: hci3: command tx timeout [ 412.396643][T15383] hsr_slave_0: entered promiscuous mode [ 412.425348][T15383] hsr_slave_1: entered promiscuous mode [ 412.441569][T15383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.461319][T15383] Cannot create hsr debugfs directory [ 412.505263][T15252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.991762][T15433] loop5: detected capacity change from 0 to 4096 [ 413.101729][T15433] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 413.511520][T15383] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 413.581751][T15383] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 413.641722][T15383] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 413.733713][T15383] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 413.860943][T15448] loop5: detected capacity change from 0 to 8192 [ 413.882320][T15452] loop0: detected capacity change from 0 to 512 [ 413.901324][T15252] veth0_vlan: entered promiscuous mode [ 413.936273][T15448] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 413.990280][T15252] veth1_vlan: entered promiscuous mode [ 414.070723][T15448] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 414.140609][T15448] REISERFS (device loop5): using ordered data mode [ 414.184736][T15252] veth0_macvtap: entered promiscuous mode [ 414.203225][T15448] reiserfs: using flush barriers [ 414.255800][T15448] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 414.277973][T15252] veth1_macvtap: entered promiscuous mode [ 414.371376][T15448] REISERFS (device loop5): checking transaction log (loop5) [ 414.380727][T15252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.406389][ T5798] Bluetooth: hci3: command tx timeout [ 414.445898][T15252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.499354][T15252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.558258][T15252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.585666][T15448] REISERFS (device loop5): Using tea hash to sort names [ 414.602930][T15252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.616666][T15448] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 414.644830][T15252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.662963][T15448] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 414.683376][T15252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.701625][T15383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.730898][T15252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.787066][T15252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.814019][T15252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.844981][T15252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.870236][T15252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.888611][T15252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.946568][T15252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.990741][T15383] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.039036][T15252] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.062809][T15252] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.071521][T15252] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.093176][T15252] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.135766][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.142933][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.160219][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.167333][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.413332][ T2997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.421176][ T2997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.548702][ T2888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.581416][ T2888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.768956][T15383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.892895][T15479] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3494'. [ 416.483543][ T5798] Bluetooth: hci3: command tx timeout [ 416.934305][T15383] veth0_vlan: entered promiscuous mode [ 417.020090][T15383] veth1_vlan: entered promiscuous mode [ 417.153917][T15383] veth0_macvtap: entered promiscuous mode [ 417.214131][T15383] veth1_macvtap: entered promiscuous mode [ 417.271346][T15516] netlink: 160 bytes leftover after parsing attributes in process `syz.7.3564'. [ 417.366529][T15383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.422206][T15383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.469496][T15383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.517464][T15383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.555639][T15383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.585103][T15383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.624160][T15383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.667205][T15383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.710959][T15383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.778341][T15383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.846410][T15383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.892202][T15383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.952200][T15383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.988904][T15383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.020220][T15513] loop0: detected capacity change from 0 to 40427 [ 418.026857][T15383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.046458][T15513] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 418.059237][T15383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.078679][T15513] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 418.108073][T15383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.135340][T15513] F2FS-fs (loop0): invalid crc value [ 418.160194][T15383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.191565][T15513] F2FS-fs (loop0): Found nat_bits in checkpoint [ 418.227341][T15383] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.283588][T15383] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.332243][T15383] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.363637][T15383] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.389853][T15513] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 418.437759][T15513] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 418.564713][ T5798] Bluetooth: hci3: command tx timeout [ 418.680368][T15536] rxe_eth0 speed is unknown, defaulting to 1000 [ 418.744452][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.807423][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.945754][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.004318][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.390395][T15552] loop7: detected capacity change from 0 to 128 [ 419.461343][T15552] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 419.631273][ T28] audit: type=1800 audit(1793503172.445:203): pid=15552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3574" name="file1" dev="loop7" ino=94 res=0 errno=0 [ 420.271042][T15570] loop0: detected capacity change from 0 to 512 [ 420.339391][T15570] EXT4-fs: inline encryption not supported [ 420.407923][T15570] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 420.504250][T15570] EXT4-fs (loop0): 1 truncate cleaned up [ 420.556234][T15570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.674232][T15570] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5994: inode #12: comm syz.0.3579: bad extra_isize 62 (inode size 256) [ 420.754976][T15570] EXT4-fs (loop0): Remounting filesystem read-only [ 420.948419][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.162590][T15563] loop8: detected capacity change from 0 to 32768 [ 421.261078][T15584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3590'. [ 421.280970][T15563] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 scanned by syz.8.3576 (15563) [ 421.399342][T15563] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 421.438875][T15586] cfg80211: Invalid regulatory domain detected: BB [ 421.481222][T15563] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 421.558467][T15563] BTRFS info (device loop8): use no compression [ 421.603449][T15563] BTRFS info (device loop8): force clearing of disk cache [ 421.610612][T15563] BTRFS info (device loop8): enabling disk space caching [ 421.713290][T15563] BTRFS info (device loop8): disk space caching is enabled [ 421.778460][T15594] netlink: 276 bytes leftover after parsing attributes in process `syz.7.3585'. [ 421.820690][T15591] loop0: detected capacity change from 0 to 4096 [ 421.871979][T15602] netlink: 276 bytes leftover after parsing attributes in process `syz.7.3585'. [ 421.974472][T15563] BTRFS info (device loop8): enabling ssd optimizations [ 422.033538][T15563] BTRFS info (device loop8): auto enabling async discard [ 422.107470][T15563] BTRFS info (device loop8): rebuilding free space tree [ 422.238164][T15563] BTRFS info (device loop8): disabling free space tree [ 422.317275][T15563] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 422.398296][T15563] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 422.679161][T15621] rxe_eth0 speed is unknown, defaulting to 1000 [ 422.926023][T15383] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 423.523294][T15640] loop5: detected capacity change from 0 to 1024 [ 424.142243][T15541] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 424.383339][T15541] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 424.434895][T15541] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.494740][T15541] usb 9-1: config 0 descriptor?? [ 424.541094][T15541] cp210x 9-1:0.0: cp210x converter detected [ 424.703480][T15657] loop5: detected capacity change from 0 to 16 [ 424.767310][T15657] erofs: (device loop5): mounted with root inode @ nid 36. [ 424.845565][ T28] audit: type=1800 audit(1793503177.665:204): pid=15657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3602" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 424.940907][T15541] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 425.002855][T15541] usb 9-1: cp210x converter now attached to ttyUSB0 [ 425.109479][T15661] ptp ptp0: new virtual clock ptp1 [ 425.131820][T15661] ptp ptp0: new virtual clock ptp2 [ 425.159461][T15661] ptp ptp0: new virtual clock ptp3 [ 425.169372][T15661] ptp ptp0: new virtual clock ptp4 [ 425.183303][T15661] ptp ptp0: new virtual clock ptp5 [ 425.189566][T15661] ptp ptp0: guarantee physical clock free running [ 425.199457][ T1200] usb 9-1: USB disconnect, device number 2 [ 425.222622][ T1200] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 425.256867][ T1200] cp210x 9-1:0.0: device disconnected [ 425.364115][T15541] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 425.485796][ T28] audit: type=1400 audit(1793503178.305:205): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=15676 comm="syz.0.3608" name="p" offset=58 [ 425.560634][T15541] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 425.581290][T15541] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.598238][T15541] usb 6-1: Product: syz [ 425.609492][T15541] usb 6-1: Manufacturer: syz [ 425.621354][T15541] usb 6-1: SerialNumber: syz [ 425.641517][T15541] usb 6-1: config 0 descriptor?? [ 425.919459][T15687] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input27 [ 426.076196][T15541] usb 6-1: Firmware: major: 236, minor: 109, hardware type: UNKNOWN (126) [ 426.229772][T15695] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.281701][T15541] usb 6-1: failed to fetch extended address, random address set [ 426.309954][T15541] usb 6-1: atusb_probe: initialization failed, error = -524 [ 426.353607][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.360846][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.389162][T15541] atusb: probe of 6-1:0.0 failed with error -524 [ 426.404565][T15698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3616'. [ 426.436979][T15541] usb 6-1: USB disconnect, device number 9 [ 426.818320][T15712] loop0: detected capacity change from 0 to 256 [ 427.651306][ T9] IPVS: starting estimator thread 0... [ 427.782280][T15741] IPVS: using max 31 ests per chain, 74400 per kthread [ 428.092322][ T9] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 428.302598][ T9] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 428.331965][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.340117][T15541] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 428.369220][ T9] usb 9-1: Product: syz [ 428.395027][ T9] usb 9-1: Manufacturer: syz [ 428.411971][T15762] loop7: detected capacity change from 0 to 256 [ 428.425279][ T9] usb 9-1: SerialNumber: syz [ 428.454032][ T9] usb 9-1: config 0 descriptor?? [ 428.560234][T15541] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 428.610637][ T28] audit: type=1326 audit(1793503181.415:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15763 comm="syz.0.3641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6839f559 code=0x7ffc0000 [ 428.652226][T15541] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.715751][T15541] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 428.781838][ T28] audit: type=1326 audit(1793503181.425:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15763 comm="syz.0.3641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6839f559 code=0x7ffc0000 [ 428.805955][ C0] vkms_vblank_simulate: vblank timer overrun [ 428.827889][T15541] usb 6-1: config 0 interface 0 has no altsetting 0 [ 428.849774][T15768] loop7: detected capacity change from 0 to 1024 [ 428.860341][T15541] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 428.904802][T15541] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.916625][ T9] usb 9-1: Firmware: major: 236, minor: 109, hardware type: UNKNOWN (126) [ 428.955431][T15541] usb 6-1: config 0 descriptor?? [ 428.973913][ T28] audit: type=1326 audit(1793503181.425:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15763 comm="syz.0.3641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6839f559 code=0x7ffc0000 [ 429.029594][T15768] hfsplus: xattr searching failed [ 429.085759][ T28] audit: type=1326 audit(1793503181.425:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15763 comm="syz.0.3641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6839f559 code=0x7ffc0000 [ 429.109808][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.130717][ T9] usb 9-1: failed to fetch extended address, random address set [ 429.156613][ T9] usb 9-1: atusb_probe: initialization failed, error = -524 [ 429.210387][ T9] atusb: probe of 9-1:0.0 failed with error -524 [ 429.229359][ T28] audit: type=1326 audit(1793503181.425:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15763 comm="syz.0.3641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f1a6839f559 code=0x7ffc0000 [ 429.258503][ T9] usb 9-1: USB disconnect, device number 3 [ 429.325898][ T28] audit: type=1326 audit(1793503181.425:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15763 comm="syz.0.3641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6839f559 code=0x7ffc0000 [ 429.407790][ T28] audit: type=1326 audit(1793503181.425:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15763 comm="syz.0.3641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6839f559 code=0x7ffc0000 [ 429.438802][T15541] lenovo 0003:17EF:6047.0018: unknown main item tag 0x2 [ 429.478234][T15541] lenovo 0003:17EF:6047.0018: reserved main item tag 0xd [ 429.496876][T15541] lenovo 0003:17EF:6047.0018: unknown main item tag 0x2 [ 429.515668][ T28] audit: type=1326 audit(1793503181.425:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15763 comm="syz.0.3641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1a6839f559 code=0x7ffc0000 [ 429.539843][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.552260][T15541] lenovo 0003:17EF:6047.0018: unknown main item tag 0x5 [ 429.566106][T15541] lenovo 0003:17EF:6047.0018: item fetching failed at offset 23/24 [ 429.586162][T15541] lenovo 0003:17EF:6047.0018: hid_parse failed [ 429.618614][T15541] lenovo: probe of 0003:17EF:6047.0018 failed with error -22 [ 429.664786][T15541] usb 6-1: USB disconnect, device number 10 [ 429.787682][T15780] program syz.8.3648 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 429.927220][T15784] loop7: detected capacity change from 0 to 1024 [ 429.941305][T15783] loop8: detected capacity change from 0 to 2048 [ 429.960404][T15784] EXT4-fs: Ignoring removed orlov option [ 430.006336][T15783] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.075744][T15784] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.094722][T15783] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 430.129319][T15783] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 430.179863][T15783] EXT4-fs (loop8): This should not happen!! Data will be lost [ 430.179863][T15783] [ 430.207767][T15252] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.223206][T15783] EXT4-fs (loop8): Total free blocks count 0 [ 430.269517][T15783] EXT4-fs (loop8): Free/Dirty block details [ 430.299944][T15783] EXT4-fs (loop8): free_blocks=2415919504 [ 430.332037][T15783] EXT4-fs (loop8): dirty_blocks=32 [ 430.350943][T15783] EXT4-fs (loop8): Block reservation details [ 430.371552][T15783] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 430.532750][ T2997] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 430.668730][T15796] loop7: detected capacity change from 0 to 4096 [ 430.751911][T15799] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 431.037270][ T9] NILFS (loop7): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 431.079082][ T9] NILFS error (device loop7): nilfs_bmap_truncate: broken bmap (inode number=12) [ 431.089262][T15807] loop5: detected capacity change from 0 to 512 [ 431.146467][T15807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.181924][ T9] Remounting filesystem read-only [ 431.205818][ T9] NILFS (loop7): error -5 truncating bmap (ino=12) [ 431.222505][T15807] ext4 filesystem being mounted at /298/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 431.277452][T15811] loop8: detected capacity change from 0 to 1024 [ 431.292017][T15252] NILFS (loop7): discard dirty page: offset=0, ino=6 [ 431.307924][T15252] NILFS (loop7): discard dirty page: offset=4096, ino=6 [ 431.333214][T15811] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 431.348090][T15252] NILFS (loop7): discard dirty page: offset=8192, ino=6 [ 431.372238][T15807] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #2: block 18: comm syz.5.3658: lblock 23 mapped to illegal pblock 18 (length 1) [ 431.398384][T15811] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.455808][T15814] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz.5.3658: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 431.486321][T15811] EXT4-fs error (device loop8): ext4_map_blocks:720: inode #15: block 3: comm syz.8.3659: lblock 3 mapped to illegal pblock 3 (length 3) [ 431.539095][T15811] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 431.564006][T15814] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 12: comm syz.5.3658: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 431.589320][T15811] EXT4-fs (loop8): This should not happen!! Data will be lost [ 431.589320][T15811] [ 431.607980][T15817] EXT4-fs error (device loop8): ext4_map_blocks:720: inode #15: block 8: comm syz.8.3659: lblock 8 mapped to illegal pblock 8 (length 8) [ 431.629254][T15814] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz.5.3658: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 431.660657][T15817] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 431.678157][T15814] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 14: comm syz.5.3658: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 431.701958][T15817] EXT4-fs (loop8): This should not happen!! Data will be lost [ 431.701958][T15817] [ 431.715754][T15814] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 15: comm syz.5.3658: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 431.778222][T15383] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 431.796659][T15814] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 16: comm syz.5.3658: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 431.883884][T15814] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 17: comm syz.5.3658: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 431.960238][T15819] loop8: detected capacity change from 0 to 512 [ 432.080075][T11925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.786388][ T9] IPVS: starting estimator thread 0... [ 432.817834][T15839] loop5: detected capacity change from 0 to 1024 [ 432.902902][T15839] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 432.915468][T15840] IPVS: using max 32 ests per chain, 76800 per kthread [ 432.950049][T15821] loop0: detected capacity change from 0 to 32768 [ 432.991919][T15839] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.113781][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 433.113791][ T28] audit: type=1800 audit(1793503185.935:215): pid=15839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3666" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 433.140285][ C0] vkms_vblank_simulate: vblank timer overrun [ 433.172891][T15836] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: comm syz.5.3666: lblock 0 mapped to illegal pblock 0 (length 1) [ 433.295675][T15839] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #15: comm syz.5.3666: lblock 0 mapped to illegal pblock 0 (length 1) [ 433.312958][T15850] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3668'. [ 433.359936][ T28] audit: type=1800 audit(1793503185.975:216): pid=15839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3666" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 433.456260][T15839] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #15: comm syz.5.3666: lblock 0 mapped to illegal pblock 0 (length 1) [ 433.568362][T15839] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #15: comm syz.5.3666: lblock 0 mapped to illegal pblock 0 (length 1) [ 433.649854][T15859] loop0: detected capacity change from 0 to 128 [ 433.684546][T15839] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #15: comm syz.5.3666: lblock 0 mapped to illegal pblock 0 (length 1) [ 433.721120][T15859] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 433.789331][T15859] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 433.917102][T11925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 434.355954][T15875] loop5: detected capacity change from 0 to 512 [ 434.428815][T15875] EXT4-fs (loop5): Test dummy encryption mode enabled [ 434.471556][T15875] EXT4-fs error (device loop5): ext4_iget_extra_inode:4752: inode #15: comm syz.5.3677: corrupted in-inode xattr: invalid ea_ino [ 434.541820][T15875] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.3677: couldn't read orphan inode 15 (err -117) [ 434.617419][T15875] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.461707][T11925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.540365][T15930] syz.0.3690 (15930) used greatest stack depth: 18760 bytes left [ 438.135649][T15993] loop8: detected capacity change from 0 to 128 [ 438.178767][T15993] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 438.253995][T15993] hpfs: filesystem error: improperly stopped [ 438.292399][T15993] hpfs: You really don't want any checks? You are crazy... [ 438.300388][T15993] hpfs: hpfs_map_sector(): read error [ 438.361257][T15993] hpfs: code page support is disabled [ 438.388581][T15993] hpfs: hpfs_map_4sectors(): unaligned read [ 438.420950][T15993] hpfs: hpfs_map_4sectors(): unaligned read [ 438.427503][T16001] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 438.450140][T15993] hpfs: filesystem error: unable to find root dir [ 440.103584][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.345419][T16069] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input28 [ 440.762221][T12012] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 440.982335][T12012] usb 6-1: Using ep0 maxpacket: 8 [ 441.012602][T12012] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 441.054132][T12012] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 441.092307][ T5897] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 441.120087][T12012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.164393][T12012] usb 6-1: config 0 descriptor?? [ 441.284825][ T5897] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.337413][ T5897] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 441.395483][ T5897] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 441.415858][T12012] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 441.466760][ T5897] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 441.486958][T16073] loop7: detected capacity change from 0 to 32768 [ 441.528551][ T5897] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 441.608748][ T5897] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 441.632270][T16073] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 441.683854][T12012] usb 6-1: USB disconnect, device number 11 [ 441.703561][ T5897] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 441.782211][ T5897] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 441.854256][ T5897] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 441.874385][T16073] XFS (loop7): Ending clean mount [ 441.890914][T16105] loop0: detected capacity change from 0 to 4096 [ 441.909320][ T5897] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 441.935232][T16073] XFS (loop7): Quotacheck needed: Please wait. [ 441.965362][ T5897] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 442.026036][T16108] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 442.042682][ T5897] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 442.103050][T16073] XFS (loop7): Quotacheck: Done. [ 442.114148][ T5897] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 442.173691][ T5897] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 442.255329][ T5897] usb 9-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 442.303086][T15541] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 442.329134][T15252] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 442.348116][T15541] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=12) [ 442.372387][ T5897] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 442.381425][ T5897] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.413719][T15541] Remounting filesystem read-only [ 442.442520][T15541] NILFS (loop0): error -5 truncating bmap (ino=12) [ 442.449210][ T5897] usb 9-1: Product: syz [ 442.462915][ T5897] usb 9-1: Manufacturer: syz [ 442.467520][ T5897] usb 9-1: SerialNumber: syz [ 442.494202][ T5785] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 442.500915][ T5785] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 442.527373][T16082] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 442.563730][T16082] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 442.578150][ T5785] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 442.603149][T16082] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 442.660605][T16082] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 442.700706][T16082] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 442.752979][T16082] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 442.760172][T16082] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 442.831051][T16082] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 442.847396][T16119] loop0: detected capacity change from 0 to 512 [ 442.863437][T16122] jffs2: notice: (16122) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 442.888386][T16082] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 442.915983][T16082] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 442.937791][T16119] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 442.967140][T16082] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 442.989936][T16119] System zones: 0-2, 18-18, 34-34 [ 443.037941][ T5897] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 443.057908][T16119] EXT4-fs (loop0): 1 orphan inode deleted [ 443.090040][ T5897] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 7 [ 443.098879][T16119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.149443][ T5897] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 443.176578][T16119] ext4 filesystem being mounted at /926/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.196913][ T5897] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 443.251390][ T5897] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 443.506556][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.149220][ T5897] usb 9-1: USB disconnect, device number 4 [ 444.173561][T16149] loop0: detected capacity change from 0 to 1024 [ 444.209941][ T5897] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 444.276873][ T5897] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 444.306044][T16149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 444.376766][ T5897] keyspan 9-1:1.0: device disconnected [ 444.419102][T16149] ext4 filesystem being mounted at /928/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.574339][ T28] audit: type=1800 audit(1793503197.395:217): pid=16149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3754" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 444.625660][T16147] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm syz.0.3754: lblock 0 mapped to illegal pblock 0 (length 1) [ 444.716225][T16149] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: comm syz.0.3754: lblock 0 mapped to illegal pblock 0 (length 1) [ 444.730352][ T28] audit: type=1800 audit(1793503197.425:218): pid=16149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3754" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 444.857286][T16149] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: comm syz.0.3754: lblock 0 mapped to illegal pblock 0 (length 1) [ 444.919446][T16149] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: comm syz.0.3754: lblock 0 mapped to illegal pblock 0 (length 1) [ 444.951459][T16158] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 444.987898][T16149] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: comm syz.0.3754: lblock 0 mapped to illegal pblock 0 (length 1) [ 445.185716][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 445.201163][T16164] loop5: detected capacity change from 0 to 64 [ 445.437592][ T28] audit: type=1800 audit(1793503454.256:219): pid=16164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3748" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 445.807072][T16180] loop8: detected capacity change from 0 to 128 [ 445.887647][T16180] syz.8.3757: attempt to access beyond end of device [ 445.887647][T16180] loop8: rw=3, sector=137, nr_sectors = 7 limit=128 [ 445.963316][T16180] syz.8.3757: attempt to access beyond end of device [ 445.963316][T16180] loop8: rw=2051, sector=144, nr_sectors = 57 limit=128 [ 445.983800][T16184] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3759'. [ 446.887832][T16193] loop0: detected capacity change from 0 to 512 [ 446.919105][T16194] loop8: detected capacity change from 0 to 1024 [ 447.005272][T16193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.087262][T16194] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 447.129529][T16193] ext4 filesystem being mounted at /930/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 447.189826][T16194] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.229191][T16202] loop5: detected capacity change from 0 to 128 [ 447.312459][ T28] audit: type=1800 audit(1793503456.126:220): pid=16194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3762" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 447.336574][T16191] EXT4-fs error (device loop8): ext4_map_blocks:720: inode #15: comm syz.8.3762: lblock 0 mapped to illegal pblock 0 (length 1) [ 447.388218][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.423444][T16194] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: comm syz.8.3762: lblock 0 mapped to illegal pblock 0 (length 1) [ 447.455449][ T28] audit: type=1800 audit(1793503456.156:221): pid=16194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3762" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 447.485765][T11925] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 447.510994][T16194] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: comm syz.8.3762: lblock 0 mapped to illegal pblock 0 (length 1) [ 447.531101][T11925] FAT-fs (loop5): Filesystem has been set read-only [ 447.611953][T16194] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: comm syz.8.3762: lblock 0 mapped to illegal pblock 0 (length 1) [ 447.689639][T16194] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: comm syz.8.3762: lblock 0 mapped to illegal pblock 0 (length 1) [ 447.792899][T16208] ------------[ cut here ]------------ [ 447.798879][T16208] SVC: permsocks remain for nfsd [ 447.859865][T16208] WARNING: CPU: 0 PID: 16208 at net/sunrpc/svc.c:645 svc_destroy+0x2ed/0x390 [ 447.869057][T16208] Modules linked in: [ 447.873115][T16208] CPU: 0 PID: 16208 Comm: syz.0.3775 Not tainted syzkaller #0 [ 447.880568][T16208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 447.890681][T16208] RIP: 0010:svc_destroy+0x2ed/0x390 [ 447.895930][T16208] Code: 24 49 83 c7 20 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 22 c3 2c f8 49 8b 37 48 c7 c7 20 12 fa 8b e8 13 5f 9d f7 <0f> 0b e9 78 fd ff ff e8 57 ba d3 f7 c6 05 7f 23 c4 05 01 4c 89 e0 [ 447.915608][T16208] RSP: 0018:ffffc900052e7ae0 EFLAGS: 00010246 [ 447.922292][T16208] RAX: e93517bdbd007000 RBX: ffff88805ee2bc50 RCX: 0000000000080000 [ 447.930267][T16208] RDX: ffffc9000ca59000 RSI: 0000000000030635 RDI: 0000000000030636 [ 447.938745][T16208] RBP: ffffc900052e7cb8 R08: ffffc900052e76e7 R09: 1ffff92000a5cedc [ 447.947281][T16208] R10: dffffc0000000000 R11: fffff52000a5cedd R12: ffff88805ee2bc00 [ 447.955409][T16208] R13: dffffc0000000000 R14: ffff88805ee2bc50 R15: ffffffff8e3e1d40 [ 447.963776][T16208] FS: 00007f1a6933a6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 447.972801][T16208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 447.979406][T16208] CR2: 0000001b3491eff8 CR3: 0000000065ae4000 CR4: 00000000003506f0 [ 447.987448][T16208] Call Trace: [ 447.990744][T16208] [ 447.993737][T16208] write_ports+0xb99/0xfa0 [ 447.998186][T16208] ? write_versions+0xe00/0xe00 [ 448.003393][T16208] ? __lock_acquire+0x7eb0/0x7eb0 [ 448.008506][T16208] ? __virt_addr_valid+0x10c/0x380 [ 448.013717][T16208] ? __virt_addr_valid+0x10c/0x380 [ 448.018829][T16208] ? __might_fault+0xaa/0x120 [ 448.024031][T16208] ? __might_fault+0xc6/0x120 [ 448.028712][T16208] ? __might_fault+0xaa/0x120 [ 448.033487][T16208] ? simple_transaction_get+0x11d/0x140 [ 448.039052][T16208] nfsctl_transaction_write+0x10c/0x150 [ 448.044644][T16208] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 448.050793][T16208] vfs_write+0x299/0x9a0 [ 448.055204][T16208] ? file_end_write+0x250/0x250 [ 448.060070][T16208] ? __fget_files+0x28/0x460 [ 448.064716][T16208] ? __fget_files+0x3fc/0x460 [ 448.069433][T16208] ? __fdget_pos+0x2a3/0x330 [ 448.074089][T16208] ? ksys_write+0x74/0x260 [ 448.078515][T16208] ksys_write+0x151/0x260 [ 448.083374][T16208] ? __ia32_sys_read+0x90/0x90 [ 448.088279][T16208] ? lockdep_hardirqs_on+0x98/0x150 [ 448.093531][T16208] do_syscall_64+0x55/0xb0 [ 448.097949][T16208] ? clear_bhb_loop+0x40/0x90 [ 448.102692][T16208] ? clear_bhb_loop+0x40/0x90 [ 448.107434][T16208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.113462][T16208] RIP: 0033:0x7f1a6839f559 [ 448.117885][T16208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.137479][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.144131][T16208] RSP: 002b:00007f1a6933a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 448.153097][T16208] RAX: ffffffffffffffda RBX: 00007f1a68625fa0 RCX: 00007f1a6839f559 [ 448.161155][T16208] RDX: 0000000000000005 RSI: 0000200000000340 RDI: 0000000000000003 [ 448.169201][T16208] RBP: 00007f1a68436b50 R08: 0000000000000000 R09: 0000000000000000 [ 448.177247][T16208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.185282][T16208] R13: 00007f1a68626038 R14: 00007f1a68625fa0 R15: 00007ffeaed916f8 [ 448.193313][T16208] [ 448.196331][T16208] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 448.203598][T16208] CPU: 0 PID: 16208 Comm: syz.0.3775 Not tainted syzkaller #0 [ 448.211047][T16208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 448.221181][T16208] Call Trace: [ 448.224466][T16208] [ 448.227413][T16208] dump_stack_lvl+0x18c/0x250 [ 448.232121][T16208] ? show_regs_print_info+0x20/0x20 [ 448.237328][T16208] ? load_image+0x420/0x420 [ 448.241837][T16208] panic+0x2ca/0x720 [ 448.245737][T16208] ? bpf_jit_dump+0xd0/0xd0 [ 448.250246][T16208] __warn+0x2e0/0x470 [ 448.254216][T16208] ? svc_destroy+0x2ed/0x390 [ 448.258804][T16208] ? svc_destroy+0x2ed/0x390 [ 448.263406][T16208] report_bug+0x2be/0x4f0 [ 448.267820][T16208] ? svc_destroy+0x2ed/0x390 [ 448.272435][T16208] ? svc_destroy+0x2ed/0x390 [ 448.277016][T16208] ? svc_destroy+0x2ef/0x390 [ 448.281596][T16208] handle_bug+0xcf/0x120 [ 448.285837][T16208] exc_invalid_op+0x1a/0x50 [ 448.290354][T16208] asm_exc_invalid_op+0x1a/0x20 [ 448.295210][T16208] RIP: 0010:svc_destroy+0x2ed/0x390 [ 448.300418][T16208] Code: 24 49 83 c7 20 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 22 c3 2c f8 49 8b 37 48 c7 c7 20 12 fa 8b e8 13 5f 9d f7 <0f> 0b e9 78 fd ff ff e8 57 ba d3 f7 c6 05 7f 23 c4 05 01 4c 89 e0 [ 448.320013][T16208] RSP: 0018:ffffc900052e7ae0 EFLAGS: 00010246 [ 448.326071][T16208] RAX: e93517bdbd007000 RBX: ffff88805ee2bc50 RCX: 0000000000080000 [ 448.334034][T16208] RDX: ffffc9000ca59000 RSI: 0000000000030635 RDI: 0000000000030636 [ 448.342083][T16208] RBP: ffffc900052e7cb8 R08: ffffc900052e76e7 R09: 1ffff92000a5cedc [ 448.350049][T16208] R10: dffffc0000000000 R11: fffff52000a5cedd R12: ffff88805ee2bc00 [ 448.358018][T16208] R13: dffffc0000000000 R14: ffff88805ee2bc50 R15: ffffffff8e3e1d40 [ 448.366000][T16208] write_ports+0xb99/0xfa0 [ 448.370426][T16208] ? write_versions+0xe00/0xe00 [ 448.375295][T16208] ? __lock_acquire+0x7eb0/0x7eb0 [ 448.380320][T16208] ? __virt_addr_valid+0x10c/0x380 [ 448.385434][T16208] ? __virt_addr_valid+0x10c/0x380 [ 448.390549][T16208] ? __might_fault+0xaa/0x120 [ 448.395223][T16208] ? __might_fault+0xc6/0x120 [ 448.399910][T16208] ? __might_fault+0xaa/0x120 [ 448.404589][T16208] ? simple_transaction_get+0x11d/0x140 [ 448.410138][T16208] nfsctl_transaction_write+0x10c/0x150 [ 448.415696][T16208] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 448.421340][T16208] vfs_write+0x299/0x9a0 [ 448.425595][T16208] ? file_end_write+0x250/0x250 [ 448.430449][T16208] ? __fget_files+0x28/0x460 [ 448.435047][T16208] ? __fget_files+0x3fc/0x460 [ 448.439748][T16208] ? __fdget_pos+0x2a3/0x330 [ 448.444336][T16208] ? ksys_write+0x74/0x260 [ 448.448751][T16208] ksys_write+0x151/0x260 [ 448.453080][T16208] ? __ia32_sys_read+0x90/0x90 [ 448.457844][T16208] ? lockdep_hardirqs_on+0x98/0x150 [ 448.463037][T16208] do_syscall_64+0x55/0xb0 [ 448.467447][T16208] ? clear_bhb_loop+0x40/0x90 [ 448.472119][T16208] ? clear_bhb_loop+0x40/0x90 [ 448.476807][T16208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.482698][T16208] RIP: 0033:0x7f1a6839f559 [ 448.487102][T16208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.506701][T16208] RSP: 002b:00007f1a6933a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 448.515111][T16208] RAX: ffffffffffffffda RBX: 00007f1a68625fa0 RCX: 00007f1a6839f559 [ 448.523082][T16208] RDX: 0000000000000005 RSI: 0000200000000340 RDI: 0000000000000003 [ 448.531049][T16208] RBP: 00007f1a68436b50 R08: 0000000000000000 R09: 0000000000000000 [ 448.539019][T16208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.546990][T16208] R13: 00007f1a68626038 R14: 00007f1a68625fa0 R15: 00007ffeaed916f8 [ 448.554975][T16208] [ 448.558004][T16208] Kernel Offset: disabled [ 448.562444][T16208] Rebooting in 86400 seconds..